Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Bitdefender showing infected web page detected when browsing with fire


  • Please log in to reply

#16
bytesize

bytesize

    Member

  • Topic Starter
  • Member
  • PipPip
  • 60 posts

Hi

 

removed all the file instances from the system32 folder for the tasks but the errors still persisted when opening Task Scheduler. Deleted the keys in the Registry and errors have gone. I had time this morning so cloned the HDD hope that was ok, the FRST logs are below:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-02-2020
Ran by Eddie (administrator) on EDDIEDELL (Dell Inc. Vostro 270) (15-02-2020 12:27:13)
Running from C:\Users\Eddie\Desktop
Loaded Profiles: Eddie (Available Profiles: Eddie)
Platform: Windows 10 Pro Version 1909 18363.657 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\usocoreworker.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [DBRMTray] => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [227328 2011-03-08] (Dell Computer Corporation) [File not signed]
HKLM\...\Run: [flvga_tray64] => C:\Windows\system32\flvga_tray.exe [419328 2015-12-07] () [File not signed]
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [BdVpnApp] => C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe [456088 2019-10-13] (Bitdefender SRL -> Bitdefender)
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\Run: [VideoGuardMonitor] => C:\Users\Eddie\AppData\Local\Cisco\VideoGuardPlayer\VideoGuardMonitor\CiscoVideoGuardMonitor.exe [2345736 2017-11-02] (Cisco Video Technologies Israel Ltd. -> Cisco)
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\Run: [EPSON SX410 Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIFCE.EXE [223232 2008-10-02] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-22] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {053D1D96-34A1-43DB-A08C-42013752D3E2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-01] (Google Inc -> Google Inc.)
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> No File <==== ATTENTION
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> No File <==== ATTENTION
Task: {5681C43E-9E0F-4FBB-AF45-8126839219E0} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [490808 2019-11-27] (Bitdefender SRL -> Bitdefender)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> No File <==== ATTENTION
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> No File <==== ATTENTION
Task: {C2B62A8D-6C26-466B-895F-C83C6BDFBB8E} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [525120 2019-12-06] (Bitdefender SRL -> Bitdefender)
Task: {E0AA4134-CDC5-47C0-AFAF-C7CDC34DBC40} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-01] (Google Inc -> Google Inc.)
Task: {EACA24FF-236C-401D-A1E7-B3D5267B8A50} - \Microsoft\Windows\RAC\RacTask -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.132.1
Tcpip\..\Interfaces\{7059D287-A263-4A16-854D-FFC987708542}: [DhcpNameServer] 192.168.132.1
Tcpip\..\Interfaces\{8C412334-6E80-4EC8-9F2B-E48E60423A89}: [DhcpNameServer] 194.168.4.100 194.168.8.100
Tcpip\..\Interfaces\{CCEB5E90-4E48-420A-A652-21003662E153}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.co.uk/
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=uk&l=en&s=gen
BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)

FireFox:
========
FF DefaultProfile: g6p9p80w.default
FF ProfilePath: C:\Users\Eddie\AppData\Roaming\Mozilla\Firefox\Profiles\g6p9p80w.default [2020-02-15]
FF NewTab: Mozilla\Firefox\Profiles\g6p9p80w.default -> about:home
FF Notifications: Mozilla\Firefox\Profiles\g6p9p80w.default -> hxxps://mail.virginmedia.com; hxxp://mail.virginmedia.com; hxxps://www.bingotastic.com; hxxps://www.youtube.com; hxxps://www.facebook.com; hxxps://www.ebay.co.uk; hxxps://www.epson.co.uk; hxxps://0.nextyourcontent.com; hxxps://1.nextyourcontent.com; hxxps://2.nextyourcontent.com
FF NewTabOverride: Mozilla\Firefox\Profiles\g6p9p80w.default -> Disabled: [email protected]
FF Extension: (No Name) - C:\Users\Eddie\AppData\Roaming\Mozilla\Firefox\Profiles\g6p9p80w.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-02-13]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2019-12-06]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF Extension: (Bitdefender Anti-tracker) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi [2019-11-01]
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-01-08] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2020-02-13] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2020-02-13] <==== ATTENTION

Chrome:
=======
CHR Profile: C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default [2020-02-02]
CHR HomePage: Default -> hxxp://www.google.com
CHR Extension: (Slides) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-18]
CHR Extension: (Docs) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-13]
CHR Extension: (Google Drive) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-03]
CHR Extension: (YouTube) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-03]
CHR Extension: (Sheets) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-13]
CHR Extension: (Bitdefender Wallet) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2020-02-02]
CHR Extension: (Google Docs Offline) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-02-02]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2020-02-02]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-02-02]
CHR Extension: (Gmail) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-02]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AfVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\vpnservice.exe [322432 2019-06-04] (AnchorFree Inc -> AnchorFree Inc.)
S2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [873560 2020-01-14] (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195344 2018-03-22] (Bitdefender SRL -> Bitdefender)
R2 BdVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnservice.exe [471120 2019-10-13] (Bitdefender SRL -> Bitdefender)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [119368 2019-12-06] (Bitdefender SRL -> Bitdefender)
S4 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [163840 2007-12-17] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
S4 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [126464 2007-01-11] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
S4 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [328608 2015-07-30] (Intel Corporation - pGFX -> Intel Corporation)
S2 MBAMInstallerService; C:\Users\Eddie\AppData\Local\Temp\MBAMInstallerService.exe [5225688 2020-02-11] (Malwarebytes Inc -> Malwarebytes) <==== ATTENTION
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1329240 2020-01-15] (Bitdefender SRL -> Bitdefender)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2020-01-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [151656 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-06-15] (AnchorFree Inc -> The OpenVPN Project)
R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [38320 2017-09-01] (CHENGDU AOMEI Tech Co., Ltd. -> )
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1693368 2019-09-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
S3 athur; C:\WINDOWS\System32\DRIVERS\athurx.sys [1847296 2010-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [739264 2019-07-29] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-03-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2019-06-21] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96448 2018-04-27] (Bitdefender SRL -> BitDefender)
R0 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [564112 2019-11-07] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2018-11-28] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [196392 2019-07-04] (Bitdefender SRL -> Bitdefender)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [216544 2020-01-07] (Malwarebytes Inc -> Malwarebytes)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [662528 2019-03-19] (Microsoft Windows -> Realtek )
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [610640 2019-01-14] (Bitdefender SRL -> Bitdefender)
U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [50176 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2020-01-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2020-01-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2020-01-29] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-15 12:27 - 2020-02-15 12:28 - 000018042 _____ C:\Users\Eddie\Desktop\FRST.txt
2020-02-15 12:21 - 2020-02-15 12:21 - 000080808 _____ C:\ProgramData\agent.update.1581769272.bdinstall.v2.bin
2020-02-15 12:16 - 2020-02-15 12:18 - 000000000 ____D C:\Users\Eddie\Desktop\Misc
2020-02-15 10:44 - 2020-02-15 11:04 - 000001024 ____H C:\SYSTAG.BIN
2020-02-15 10:43 - 2020-02-15 11:04 - 000000208 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat
2020-02-15 10:43 - 2020-02-15 11:04 - 000000150 _____ C:\WINDOWS\SysWOW64\winsevr.dat
2020-02-15 10:43 - 2020-02-15 10:43 - 000001136 _____ C:\Users\Public\Desktop\AOMEI Backupper Standard.lnk
2020-02-15 10:43 - 2020-02-15 10:43 - 000001136 _____ C:\ProgramData\Desktop\AOMEI Backupper Standard.lnk
2020-02-15 10:43 - 2020-02-15 10:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper
2020-02-15 10:43 - 2020-02-15 10:43 - 000000000 ____D C:\ProgramData\Aomei
2020-02-15 10:43 - 2017-09-01 18:12 - 000038320 _____ C:\WINDOWS\system32\amwrtdrv.sys
2020-02-15 10:43 - 2016-12-21 22:54 - 000051120 _____ C:\WINDOWS\system32\ambakdrv.sys
2020-02-15 10:43 - 2016-12-21 22:52 - 000171952 _____ C:\WINDOWS\system32\ammntdrv.sys
2020-02-15 10:42 - 2020-02-15 11:04 - 000000000 ____D C:\ProgramData\AomeiBR
2020-02-15 10:42 - 2020-02-15 11:04 - 000000000 ____D C:\Program Files (x86)\AOMEI Backupper
2020-02-15 09:54 - 2020-02-15 10:03 - 109524584 _____ (AOMEI Technology Co., Ltd. ) C:\Users\Eddie\Downloads\AOMEIBackupperStd.exe
2020-02-14 00:07 - 2020-02-14 00:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital Corporation
2020-02-14 00:07 - 2020-02-14 00:07 - 000000000 ____D C:\Program Files (x86)\Western Digital Corporation
2020-02-14 00:06 - 2020-02-14 00:07 - 000571159 _____ C:\Users\Eddie\Downloads\WinDlg_v1_36.zip
2020-02-13 12:43 - 2020-02-13 12:43 - 000000839 _____ C:\Users\Public\Desktop\Speccy.lnk
2020-02-13 12:43 - 2020-02-13 12:43 - 000000839 _____ C:\ProgramData\Desktop\Speccy.lnk
2020-02-13 12:43 - 2020-02-13 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2020-02-13 12:43 - 2020-02-13 12:43 - 000000000 ____D C:\Program Files\Speccy
2020-02-13 12:42 - 2020-02-13 12:43 - 006889184 _____ (Piriform Ltd) C:\Users\Eddie\Downloads\spsetup132.exe
2020-02-13 12:33 - 2020-02-13 12:33 - 000011342 _____ C:\junk.txt
2020-02-13 12:26 - 2020-02-13 12:26 - 000036192 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2020-02-13 12:25 - 2020-02-13 12:25 - 002798456 _____ (Sysinternals - www.sysinternals.com) C:\Users\Eddie\Desktop\procexp.exe
2020-02-13 09:54 - 2020-02-13 09:54 - 000073886 _____ C:\ProgramData\vpn.1581587617.bdinstall.bin
2020-02-13 09:53 - 2020-02-13 09:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender VPN
2020-02-13 09:53 - 2020-02-13 09:53 - 000000000 ____D C:\ProgramData\Bitdefender VPN
2020-02-13 09:53 - 2018-06-15 09:26 - 000048624 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\aftap0901.sys
2020-02-13 09:52 - 2020-02-13 09:52 - 000814764 _____ C:\ProgramData\cl.1581587183.bdinstall.v2.bin
2020-02-13 09:52 - 2020-02-13 09:52 - 000138752 _____ C:\ProgramData\dm.1581587556.bdinstall.v2.bin
2020-02-13 09:52 - 2020-02-13 09:52 - 000102260 _____ C:\ProgramData\cl.kit.1581587172.bdinstall.v2.bin
2020-02-13 09:52 - 2020-02-13 09:52 - 000003420 _____ C:\WINDOWS\system32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C
2020-02-13 09:49 - 2020-02-13 09:53 - 000002197 _____ C:\Users\Public\Desktop\Bitdefender VPN.lnk
2020-02-13 09:49 - 2020-02-13 09:53 - 000002197 _____ C:\ProgramData\Desktop\Bitdefender VPN.lnk
2020-02-13 09:49 - 2020-02-13 09:49 - 000002344 _____ C:\Users\Public\Desktop\Bitdefender.lnk
2020-02-13 09:49 - 2020-02-13 09:49 - 000002344 _____ C:\ProgramData\Desktop\Bitdefender.lnk
2020-02-13 09:49 - 2020-02-13 09:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security
2020-02-13 09:49 - 2019-03-21 00:12 - 000022960 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2020-02-13 09:48 - 2019-11-07 08:49 - 000564112 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2020-02-13 09:48 - 2019-09-23 08:43 - 001693368 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2020-02-13 09:48 - 2019-07-29 15:32 - 000739264 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2020-02-13 09:48 - 2019-06-21 07:30 - 000046056 _____ (© Bitdefender SRL) C:\WINDOWS\system32\Drivers\bdprivmon.sys
2020-02-13 09:48 - 2018-04-27 07:45 - 000096448 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2020-02-13 09:47 - 2020-02-13 09:53 - 000000000 ____D C:\Program Files\Bitdefender
2020-02-13 09:47 - 2019-07-04 11:15 - 000196392 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys
2020-02-13 09:47 - 2019-01-14 16:25 - 000610640 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\trufos.sys
2020-02-13 09:47 - 2018-11-28 05:45 - 000188384 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2020-02-13 09:46 - 2020-02-13 09:47 - 000000000 ____D C:\Program Files\Common Files\Bitdefender
2020-02-13 09:41 - 2020-02-13 09:41 - 000000000 ____D C:\ProgramData\ssh
2020-02-13 09:36 - 2020-02-13 09:36 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-02-13 09:36 - 2020-02-13 09:36 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-02-13 09:36 - 2020-02-13 09:36 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-02-13 09:36 - 2020-02-13 09:36 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-02-13 09:36 - 2020-02-13 09:36 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-02-13 09:36 - 2020-02-13 09:36 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-02-13 09:35 - 2020-02-13 09:36 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003969536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-02-13 09:17 - 2020-01-16 05:07 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-02-13 09:17 - 2020-01-16 04:23 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-11 18:05 - 2020-02-13 10:49 - 002279424 _____ (Farbar) C:\Users\Eddie\Desktop\FRST64.exe
2020-02-02 20:22 - 2020-02-02 20:22 - 000000080 ___SH C:\bootTel.dat
2020-02-02 10:20 - 2020-02-02 10:20 - 000000000 ____D C:\ProgramData\Bitdefender Device Management
2020-02-02 10:18 - 2020-02-02 10:18 - 000000000 ____D C:\ProgramData\Gemma
2020-02-02 10:18 - 2020-02-02 10:18 - 000000000 ____D C:\ProgramData\Atc
2020-02-02 10:17 - 2020-02-02 10:17 - 000000000 ____D C:\WINDOWS\system32\elambkup
2020-02-02 10:17 - 2020-02-02 10:17 - 000000000 ____D C:\ProgramData\BDLogging
2020-02-02 10:15 - 2020-02-13 09:52 - 000000000 ____D C:\Users\Eddie\AppData\Roaming\Bitdefender
2020-02-02 10:15 - 2020-02-02 10:43 - 000000000 ____D C:\ProgramData\Bitdefender
2020-02-02 10:08 - 2020-02-02 10:08 - 000003802 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2020-02-02 10:06 - 2020-02-15 12:21 - 000000000 ____D C:\Program Files\Bitdefender Agent
2020-02-02 10:06 - 2020-02-02 10:06 - 000113524 _____ C:\ProgramData\agent.1580637970.bdinstall.v2.bin
2020-02-02 10:06 - 2020-02-02 10:06 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2020-02-02 10:05 - 2020-02-02 10:05 - 012422992 _____ C:\Users\Eddie\Downloads\bitdefender_windows_d19acce7-90aa-4746-a6ad-21b2e4307aa2.exe
2020-01-31 17:47 - 2020-01-31 17:47 - 000000000 ____D C:\Users\Eddie\AppData\Local\PeerDistRepub
2020-01-31 17:10 - 2020-01-31 17:27 - 000000000 ____D C:\Users\Eddie\AppData\Local\D3DSCache
2020-01-31 16:35 - 2020-01-31 16:35 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2020-01-30 00:39 - 2020-01-30 00:39 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2020-01-30 00:38 - 2020-01-30 00:38 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2020-01-30 00:37 - 2020-01-30 00:37 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\WINDOWS\system32\msmq
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files\MSBuild
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\inetpub
2020-01-30 00:33 - 2019-03-02 01:31 - 001166488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2020-01-30 00:33 - 2019-03-02 01:31 - 000124568 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2020-01-30 00:33 - 2019-03-02 01:31 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2020-01-30 00:33 - 2019-02-06 02:41 - 000778912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2020-01-30 00:33 - 2019-02-06 02:41 - 000103072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2020-01-30 00:33 - 2019-02-06 02:41 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2020-01-30 00:32 - 2019-03-19 03:21 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2020-01-30 00:32 - 2019-03-19 03:16 - 000903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2020-01-30 00:32 - 2019-03-19 02:15 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2020-01-30 00:32 - 2019-03-19 02:09 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2020-01-30 00:32 - 2019-03-02 01:33 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2020-01-30 00:32 - 2018-08-09 22:53 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2020-01-29 21:13 - 2020-01-29 21:13 - 000000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-01-29 20:25 - 2020-01-29 20:25 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-01-29 20:25 - 2020-01-29 20:25 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-01-29 20:25 - 2020-01-29 20:25 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-01-29 20:25 - 2020-01-29 20:25 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000828216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-01-29 20:25 - 2020-01-29 20:25 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-01-29 20:25 - 2020-01-29 20:25 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-01-29 20:25 - 2020-01-29 20:25 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000153912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVfs.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000138040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppVStrm.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000059221 _____ C:\WINDOWS\system32\srms.dat
2020-01-29 20:25 - 2020-01-29 20:25 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-01-29 20:24 - 2020-01-29 20:24 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssrvlic.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LSCSHostPolicy.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\lstelemetry.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2020-01-29 20:05 - 2020-01-31 17:27 - 000000000 __SHD C:\Users\Eddie\IntelGraphicsProfiles
2020-01-29 20:05 - 2020-01-29 20:05 - 000000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2020-01-29 17:36 - 2020-02-03 11:40 - 000000000 ____D C:\Users\Eddie\AppData\Local\PlaceholderTileLogoFolder
2020-01-29 17:22 - 2020-01-29 17:23 - 000000000 ____D C:\Users\Eddie\AppData\Local\Comms
2020-01-29 17:21 - 2020-01-29 19:01 - 000000000 ____D C:\ProgramData\Packages
2020-01-29 17:20 - 2020-02-10 17:21 - 000003368 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3631865646-3207491450-1134192123-1000
2020-01-29 17:20 - 2020-02-10 17:21 - 000000000 ___RD C:\Users\Eddie\OneDrive
2020-01-29 17:17 - 2020-01-29 17:17 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2020-01-29 17:16 - 2020-01-29 17:16 - 000001450 _____ C:\Users\Eddie\Desktop\Microsoft Edge.lnk
2020-01-29 17:04 - 2020-01-29 17:04 - 000000000 ___HD C:\Users\Eddie\MicrosoftEdgeBackups
2020-01-29 17:04 - 2020-01-29 17:04 - 000000000 ____D C:\Users\Eddie\AppData\Local\MicrosoftEdge
2020-01-29 17:03 - 2020-01-29 21:13 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-01-29 17:03 - 2020-01-29 21:13 - 000000000 ___RD C:\Users\Eddie\3D Objects
2020-01-29 17:03 - 2020-01-29 17:55 - 000000000 ____D C:\Users\Eddie\AppData\Local\Publishers
2020-01-29 17:02 - 2020-01-31 16:47 - 000000000 ____D C:\Users\Eddie\AppData\Local\Packages
2020-01-29 17:02 - 2020-01-29 17:03 - 000000000 ____D C:\Users\Eddie\AppData\Local\ConnectedDevicesPlatform
2020-01-29 17:02 - 2020-01-29 17:02 - 000000020 ___SH C:\Users\Eddie\ntuser.ini
2020-01-29 17:00 - 2020-02-15 12:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-01-29 17:00 - 2020-02-14 10:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2020-01-29 17:00 - 2020-02-05 11:12 - 000003420 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-01-29 17:00 - 2020-02-05 11:12 - 000003296 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-01-29 17:00 - 2020-01-29 19:04 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-01-29 17:00 - 2020-01-29 17:00 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2020-01-29 17:00 - 2020-01-29 17:00 - 000007623 _____ C:\WINDOWS\diagerr.xml
2020-01-29 17:00 - 2020-01-29 17:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\WPD
2020-01-29 17:00 - 2020-01-29 17:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Games
2020-01-29 16:53 - 2020-02-15 12:05 - 000000000 ____D C:\Users\Eddie
2020-01-29 16:53 - 2020-02-10 17:21 - 000002410 _____ C:\Users\Eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-01-29 16:52 - 2020-02-15 12:10 - 000936112 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-01-29 16:49 - 2020-01-09 21:24 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-01-29 16:48 - 2020-01-29 16:48 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2020-01-29 16:45 - 2020-02-14 22:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-01-29 16:45 - 2020-02-13 09:43 - 000413136 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-01-29 15:33 - 2020-02-10 12:56 - 000000000 ___DC C:\WINDOWS\Panther
2020-01-29 15:19 - 2020-01-29 15:33 - 000000000 ____D C:\ESD
2020-01-29 15:17 - 2020-01-29 15:17 - 000000000 ___HD C:\$Windows.~WS
2020-01-29 15:15 - 2020-01-29 15:15 - 000030165 _____ C:\WINDOWS\system32\servers.def.lkg
2020-01-29 15:15 - 2020-01-29 15:15 - 000030165 _____ C:\WINDOWS\system32\servers.def
2020-01-29 15:15 - 2020-01-29 15:15 - 000004451 _____ C:\WINDOWS\system32\uat64.vpx
2020-01-29 15:15 - 2020-01-29 15:15 - 000003333 _____ C:\WINDOWS\system32\servers.def.vpx
2020-01-29 15:15 - 2020-01-29 15:15 - 000000602 _____ C:\WINDOWS\system32\prod-pgm.vpx
2020-01-29 15:15 - 2020-01-29 15:15 - 000000540 _____ C:\WINDOWS\system32\.tmp
2020-01-29 15:15 - 2020-01-29 15:15 - 000000341 _____ C:\WINDOWS\system32\prod-vps.vpx
2020-01-29 15:13 - 2020-01-29 15:13 - 019255000 _____ (Microsoft Corporation) C:\Users\Eddie\Downloads\MediaCreationTool1909.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-15 12:28 - 2017-03-08 14:43 - 000000000 ____D C:\FRST
2020-02-15 12:18 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-15 12:14 - 2016-11-18 15:24 - 000000000 ____D C:\Users\Eddie\AppData\LocalLow\Mozilla
2020-02-15 12:10 - 2019-03-19 04:50 - 000000000 ____D C:\WINDOWS\INF
2020-02-15 09:39 - 2019-03-19 04:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-02-14 18:43 - 2019-03-19 04:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-14 18:43 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-02-14 00:01 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-02-14 00:01 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-13 11:25 - 2014-02-13 15:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-02-13 11:23 - 2014-02-13 15:34 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-02-13 09:57 - 2016-05-08 12:28 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-02-13 09:41 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\servicing
2020-02-13 09:29 - 2019-03-19 04:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-02-13 00:22 - 2014-02-13 14:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-02-11 14:27 - 2014-02-13 14:01 - 000001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-02-03 20:56 - 2019-03-19 04:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-02-03 20:56 - 2019-03-19 04:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-02 10:27 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-02-02 10:27 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-02-02 10:27 - 2017-03-12 10:39 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-01-31 17:41 - 2016-05-26 15:42 - 000007619 _____ C:\Users\Eddie\AppData\Local\resmon.resmoncfg
2020-01-31 16:34 - 2018-05-16 09:02 - 000000000 ____D C:\Users\Eddie\AppData\Local\AVAST Software
2020-01-31 16:34 - 2017-03-10 14:51 - 000000000 ____D C:\ProgramData\AVAST Software
2020-01-31 15:50 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\appcompat
2020-01-30 00:44 - 2019-09-16 12:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-01-30 00:44 - 2019-03-19 04:56 - 000000000 ____D C:\WINDOWS\Setup
2020-01-30 00:44 - 2019-03-19 04:52 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2020-01-30 00:44 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-01-30 00:44 - 2019-03-19 04:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-01-30 00:44 - 2019-03-19 04:49 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-01-30 00:44 - 2016-12-27 18:56 - 000000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2020-01-30 00:44 - 2016-05-24 03:43 - 000000000 ____D C:\WINDOWS\system32\configBackup
2020-01-30 00:44 - 2014-08-06 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2020-01-30 00:44 - 2014-07-10 13:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 6.0 Sprint
2020-01-30 00:44 - 2014-07-10 13:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2020-01-30 00:44 - 2014-07-10 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2020-01-30 00:44 - 2014-03-25 20:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2020-01-30 00:44 - 2013-10-31 11:58 - 000000000 ____D C:\Program Files (x86)\Intel
2020-01-30 00:44 - 2013-10-31 10:02 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2020-01-30 00:44 - 2010-11-21 07:17 - 000000000 ____D C:\WINDOWS\ShellNew
2020-01-30 00:44 - 2009-07-14 03:20 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-01-30 00:44 - 2009-07-14 03:20 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-01-30 00:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2020-01-30 00:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\IME
2020-01-30 00:39 - 2019-03-19 04:52 - 000000000 __SHD C:\Program Files\Windows Sidebar
2020-01-30 00:39 - 2019-03-19 04:52 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2020-01-30 00:39 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\schemas
2020-01-30 00:39 - 2014-02-13 16:48 - 000000000 ____D C:\Program Files\Microsoft Games
2020-01-30 00:39 - 2013-10-31 11:59 - 000000000 ____D C:\Program Files\CONEXANT
2020-01-30 00:39 - 2009-07-14 05:32 - 000000000 ____D C:\Program Files\DVD Maker
2020-01-30 00:34 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2020-01-30 00:34 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2020-01-30 00:33 - 2020-01-09 21:26 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2020-01-30 00:33 - 2020-01-09 21:26 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2020-01-30 00:33 - 2020-01-09 21:26 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2020-01-30 00:33 - 2020-01-09 21:25 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2020-01-30 00:33 - 2019-03-19 05:00 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2020-01-30 00:33 - 2019-03-19 04:58 - 001401344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2020-01-30 00:33 - 2019-03-19 04:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2020-01-30 00:33 - 2019-03-19 04:58 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2020-01-30 00:33 - 2019-03-19 04:58 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2020-01-30 00:33 - 2019-03-19 04:58 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2020-01-30 00:33 - 2019-03-19 04:57 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2020-01-30 00:33 - 2019-03-19 04:57 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\et-EE
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\es-MX
2020-01-29 21:10 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-01-29 21:10 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-01-29 21:10 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-01-29 19:04 - 2019-03-19 04:52 - 000000000 ____D C:\Program Files\Windows Defender
2020-01-29 17:53 - 2013-10-31 10:03 - 000000000 ____D C:\Program Files\Intel
2020-01-29 17:42 - 2010-11-21 03:27 - 000748816 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2020-01-29 17:40 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-01-29 17:40 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\USOPrivate
2020-01-29 17:22 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ServiceState
2020-01-29 17:11 - 2019-03-19 06:22 - 000000000 ____D C:\WINDOWS\OCR
2020-01-29 17:02 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\spool
2020-01-29 17:00 - 2019-03-19 04:52 - 000000000 __RHD C:\Users\Public\Libraries
2020-01-29 16:59 - 2017-04-01 13:22 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-29 16:59 - 2017-04-01 13:22 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-01-29 16:59 - 2017-04-01 13:22 - 000002262 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-01-29 16:54 - 2018-04-15 13:37 - 000000000 ____D C:\Users\Eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sky
2020-01-29 16:52 - 2011-02-10 14:33 - 000892382 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2020-01-29 16:17 - 2009-07-14 04:45 - 000021312 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-01-29 16:17 - 2009-07-14 04:45 - 000021312 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

==================== Files in the root of some directories ========

2014-10-29 16:15 - 2014-10-29 16:15 - 000004096 ____H () C:\Users\Eddie\AppData\Local\keyfile3.drm
2016-05-26 15:42 - 2020-01-31 17:41 - 000007619 _____ () C:\Users\Eddie\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2020
Ran by Eddie (15-02-2020 12:30:40)
Running from C:\Users\Eddie\Desktop
Windows 10 Pro Version 1909 18363.657 (X64) (2020-01-29 17:02:07)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3631865646-3207491450-1134192123-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3631865646-3207491450-1134192123-503 - Limited - Disabled)
Eddie (S-1-5-21-3631865646-3207491450-1134192123-1000 - Administrator - Enabled) => C:\Users\Eddie
Guest (S-1-5-21-3631865646-3207491450-1134192123-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3631865646-3207491450-1134192123-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-3631865646-3207491450-1134192123-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)
AOMEI Backupper Standard (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version:  - AOMEI Technology Co., Ltd.)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 24.0.1.161 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 24.0.14.86 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 24.0.14.85 - Bitdefender)
Bitdefender VPN (HKLM\...\Bitdefender VPN) (Version: 24.0.2.693 - Bitdefender)
Cisco VideoGuard Player (HKLM-x32\...\{30e4813e-2a86-4e4f-82ea-23df71ca8ffb}) (Version: 10.1.1.6570 - Cisco Systems, Inc)
Data Lifeguard Diagnostic version 1.36 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Epson Easy Photo Print 2 (HKLM-x32\...\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}) (Version: 2.1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Epson Stylus SX210_SX410_TX210_TX410 Manual (HKLM-x32\...\Epson Stylus SX210_SX410_TX210_TX410 User’s Guide) (Version:  - )
EPSON SX410 Series Printer Uninstall (HKLM\...\EPSON SX410 Series) (Version:  - SEIKO EPSON Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.123 - Google Inc.) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\OneDriveSetup.exe) (Version: 19.232.1124.0005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 73.0 (x64 en-US) (HKLM\...\Mozilla Firefox 73.0 (x64 en-US)) (Version: 73.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 73.0.0.7342 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Sky Go 1.5.16.0 (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\com.bskyb.skygoplayer_is1) (Version: 1.5.16.0 - Sky)
Sky Go Desktop (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\2508210495.go.sky.com) (Version:  - go.sky.com)
Sky Sports 6.0.1 (only current user) (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\805733bb-91da-567d-b881-06034d21d33f) (Version: 6.0.1 - )
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Thin2000 USB Display Adapter (HKLM\...\{BA661C83-7D34-4DF8-A31F-2139C1D72B1C}) (Version: 1.1.316.0 - Fresco Logic)
TP-LINK Wireless Client Utility (HKLM-x32\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)

Packages:
=========
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.30.3.0_x86__kgqvnymyfvs32 [2020-02-14] (king.com)
Farm Heroes Saga -> C:\Program Files\WindowsApps\king.com.FarmHeroesSaga_5.31.8.0_x86__kgqvnymyfvs32 [2020-02-14] (king.com)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2020-01-29] (Microsoft Studios) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3631865646-3207491450-1134192123-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation - pGFX -> Intel Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2015-07-30] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Eddie\AppData\Roaming\Microsoft\Windows\Network Shortcuts\My Web Sites on MSN\target.lnk -> hxxp://www.msnusers.co

==================== Loaded Modules (Whitelisted) =============

2014-02-13 13:49 - 2008-11-12 03:00 - 000118784 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\E_ILMFIE.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 02:34 - 2020-02-15 12:07 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\AOMEI Backupper
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Dell\Win7 LtBlue 1920x1200.jpg
DNS Servers: 192.168.132.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: EPSON_EB_RPCV4_01 => 2
MSCONFIG\Services: EPSON_PM_RPCV4_01 => 2
MSCONFIG\Services: GoogleChromeElevationService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IAStorDataMgrSvc => 2
MSCONFIG\Services: igfxCUIService1.0.0.0 => 2
MSCONFIG\Services: Intel® Capability Licensing Service Interface => 2
MSCONFIG\Services: LMS => 2
MSCONFIG\Services: MBAMInstallerService => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: UNS => 2
MSCONFIG\Services: vssbrigde64 => 3
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: DBRMTray => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe
MSCONFIG\startupreg: EPSON SX410 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFCE.EXE /FU "C:\Windows\TEMP\E_SB404.tmp" /EF "HKCU"
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: IMSS => "C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe"
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "DBRMTray"
HKLM\...\StartupApproved\Run: => "flvga_tray64"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\StartupApproved\Run: => "VideoGuardMonitor"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{066457EA-5F85-453E-B42B-1932DDB50E04}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{69E72D19-F49C-4A13-990A-0C8D88CC12F8}C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe] => (Block) C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe (Sky UK Limited -> Sky UK)
FirewallRules: [TCP Query User{742691DA-D506-47DA-A1FD-D736B34F0B7B}C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe] => (Block) C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe (Sky UK Limited -> Sky UK)
FirewallRules: [{50E4E72F-6D4C-454E-B7C9-2516355F068C}] => (Allow) LPort=53
FirewallRules: [{8780A08B-79DF-49D6-92CC-08ACF7E935BF}] => (Allow) LPort=53
FirewallRules: [{F7ABF902-A19E-4514-A9E1-AC3EEFECC7B3}] => (Allow) LPort=68
FirewallRules: [{2CA0D1DA-1161-45DF-AAA6-34B705B2D7BF}] => (Allow) LPort=67
FirewallRules: [{9B633C90-3460-47A4-875D-80B09EA0E462}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe No File
FirewallRules: [{5DC8B8B7-D95F-4370-AB76-84457A612EE0}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe No File
FirewallRules: [{61C25B7E-A460-403B-AE0C-36F3976788A5}] => (Allow) LPort=53
FirewallRules: [{F053692C-CE7B-4213-9DA2-5B5AE9FCBFC6}] => (Allow) LPort=1542
FirewallRules: [{A641E685-FBDA-4457-B76A-F693DDFB306A}] => (Allow) LPort=1542
FirewallRules: [{DCAD6A22-D1D5-4C9A-882C-0EC3F69CA2ED}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe No File
FirewallRules: [{AEF1CD72-353D-4232-9533-7C169C1658D8}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe No File
FirewallRules: [{C3895048-7F66-4ED2-B368-03D40A184BA9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{79A9EB39-E084-4A2E-81D1-1519ED7022E2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6ADB7F32-8035-4E9D-8F13-8A0D35A450E3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{259FBEE8-38E4-4B2D-880C-7DDA44A60B3F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{529B52EC-1C0F-4449-8B2A-30B76E57F48A}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe No File
FirewallRules: [TCP Query User{58FD11C6-2A37-4D57-87A6-BDCBF04C94FB}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe No File
FirewallRules: [{10F872EF-A3F6-4D98-A2CE-0D1F8E797CC2}] => (Allow) C:\Program Files (x86)\AOMEI Backupper\ABService.exe (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.)
FirewallRules: [{A61E24C6-6AB3-4DA2-8BA2-D25A57C81808}] => (Allow) C:\Program Files (x86)\AOMEI Backupper\ABService.exe (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.)

==================== Restore Points =========================


==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (02/15/2020 12:09:36 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: The index cannot be initialized.

Details:
    The specified object cannot be found. Specify the name of an existing object.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (02/15/2020 12:09:36 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: The application cannot be initialized.

Context: Windows Application

Details:
    The specified object cannot be found. Specify the name of an existing object.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (02/15/2020 12:09:36 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
    The specified object cannot be found. Specify the name of an existing object.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (02/15/2020 12:09:36 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
    The specified object cannot be found. Specify the name of an existing object.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (02/15/2020 12:04:59 PM) (Source: Windows Search Service) (EventID: 3057) (User: )
Description: The plug-in manager <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application

Details:
    (HRESULT : 0x8e5e0713) (0x8e5e0713)

Error: (02/15/2020 12:04:56 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.

Details:
    The content index catalog is corrupt.   0xc0041801 (0xc0041801)

Error: (02/15/2020 12:04:31 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: The search service has detected corrupted data files in the index {id=4810 - onecoreuap\base\appmodel\search\search\ytrip\common\util\jetutil.cpp (310)}. The service will attempt to automatically correct this problem by rebuilding the index.

Details:
     0x8e5e0713 (0x8e5e0713)


System errors:
=============
Error: (02/15/2020 12:09:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (02/15/2020 12:09:37 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The Windows Search service terminated with the following service-specific error:
%%2147749126

Error: (02/15/2020 12:09:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Windows Media Player Network Sharing Service service depends on the Windows Search service which failed to start because of the following error:
The operation completed successfully.

Error: (02/15/2020 12:05:17 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server Windows.Internal.StateRepository.ApplicationExtension did not register with DCOM within the required timeout.

Error: (02/15/2020 12:04:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The AOMEI Backupper Scheduler Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/15/2020 12:04:37 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (45000 milliseconds) while waiting for the AOMEI Backupper Scheduler Service service to connect.

Error: (02/15/2020 12:04:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Bitdefender Product Agent Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/15/2020 12:04:34 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (45000 milliseconds) while waiting for the Bitdefender Product Agent Service service to connect.


==================== Memory info ===========================

BIOS: Dell Inc. A09 02/01/2013
Motherboard: Dell Inc. 084J0R
Processor: Intel® Pentium® CPU G2020 @ 2.90GHz
Percentage of memory in use: 66%
Total physical RAM: 3967.54 MB
Available physical RAM: 1309.36 MB
Total Virtual: 7935.54 MB
Available Virtual: 5421.97 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:225.9 GB) (Free:180.38 GB) NTFS

\\?\Volume{9d80cf44-4223-11e3-adbc-806e6f6e6963}\ (RECOVERY) (Fixed) (Total:6.89 GB) (Free:1.73 GB) NTFS
\\?\Volume{17ee898d-0000-0000-007e-000000000000}\ () (Fixed) (Total:0.04 GB) (Free:0.04 GB) FAT

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 232.8 GB) (Disk ID: 17EE898D)
Partition 1: (Not Active) - (Size=39 MB) - (Type=06)
Partition 2: (Active) - (Size=6.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=225.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

 

Thanks


  • 0

Advertisements


#17
RKinner

RKinner

    Malware Expert

  • Expert
  • 22,473 posts
  • MVP

Search for:

msconfig

hit Enter

click on the Services tab. Find

MBAMInstallerService

can check it.  OK.  Reboot.

 

Try to uninstall MBAM now.  The following fixlist will take out the most obvious MBAM entries along with remnants of  the bad tasks  and some other junk (so you still need to run it) but if the uninstaller now works that is the way to go.

 

 

 

Download the attached fixlist.txt to the same location as FRST

Attached File  fixlist.txt   4.33KB   18 downloads

Run FRST and press Fix
A fix log will be generated please post that

Reboot if the fix doesn't reboot it for you

Run FRST again as before.  Make sure Addition.txt is checked and hit Scan.  Post both logs.

 


  • 0

#18
bytesize

bytesize

    Member

  • Topic Starter
  • Member
  • PipPip
  • 60 posts

Here is the fixlog that was generated

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 12-02-2020
Ran by Eddie (15-02-2020 15:48:45) Run:3
Running from C:\Users\Eddie\Desktop
Loaded Profiles: Eddie (Available Profiles: Eddie)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CMD: msiexec \x {35065F43-4BB2-439A-BFF7-0F1014F2E0CD} /q
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> No File <==== ATTENTION
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> No File <==== ATTENTION
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> No File <==== ATTENTION
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> No File <==== ATTENTION
Task: {EACA24FF-236C-401D-A1E7-B3D5267B8A50} - \Microsoft\Windows\RAC\RacTask -> No File <==== ATTENTION
FF Notifications: Mozilla\Firefox\Profiles\g6p9p80w.default -> hxxps://mail.virginmedia.com; hxxp://mail.virginmedia.com; hxxps://www.bingotastic.com; hxxps://www.youtube.com; hxxps://www.facebook.com; hxxps://www.ebay.co.uk; hxxps://www.epson.co.uk; hxxps://0.nextyourcontent.com; hxxps://1.nextyourcontent.com; hxxps://2.nextyourcontent.com
FF NewTabOverride: Mozilla\Firefox\Profiles\g6p9p80w.default -> Disabled: [email protected]
FF Extension: (No Name) - C:\Users\Eddie\AppData\Roaming\Mozilla\Firefox\Profiles\g6p9p80w.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-02-13]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
S2 MBAMInstallerService; C:\Users\Eddie\AppData\Local\Temp\MBAMInstallerService.exe [5225688 2020-02-11] (Malwarebytes Inc -> Malwarebytes) <==== ATTENTION
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [216544 2020-01-07] (Malwarebytes Inc ->)
REG: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes"
2020-01-30 00:44 - 2019-09-16 12:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
MSCONFIG\Services: MBAMInstallerService => 2
C:\Program Files\Malwarebytes
C:\Windows\System32\DRIVERS\MbamElam.sys
C:\Windows\System32\Drivers\mbamswissarmy.sys
C:\Windows\system32\Drivers\mbae64.sys
CMD: DISM /Online /Cleanup-Image /RestoreHealth
CMD: SFC /scannow
CMD: findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log
CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"
Reboot:


*****************


========= msiexec \x {35065F43-4BB2-439A-BFF7-0F1014F2E0CD} /q =========


========= End of CMD: =========

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{088482FA-65B8-4E17-9ABF-1DCD48E8D373}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{088482FA-65B8-4E17-9ABF-1DCD48E8D373}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Tcpip\IpAddressConflict1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{09F06BFE-A3C8-40E3-846A-6E6F4000C238}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{09F06BFE-A3C8-40E3-846A-6E6F4000C238}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Tcpip\IpAddressConflict2" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5B42DD9C-5A26-4F27-BB95-34603F0997E5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5B42DD9C-5A26-4F27-BB95-34603F0997E5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Shell\WindowsParentalControls" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B0CBAB43-44FC-469B-A4CE-87426761FDCE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0CBAB43-44FC-469B-A4CE-87426761FDCE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EACA24FF-236C-401D-A1E7-B3D5267B8A50}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EACA24FF-236C-401D-A1E7-B3D5267B8A50}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\RAC\RacTask" => not found
"FF Notifications:" => removed successfully
"Firefox NewTabOverride ([email protected]) " => removed successfully
C:\Users\Eddie\AppData\Roaming\Mozilla\Firefox\Profiles\g6p9p80w.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi => moved successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki => removed successfully
HKLM\System\CurrentControlSet\Services\MBAMInstallerService => removed successfully
MBAMInstallerService => service removed successfully
MBAMChameleon => Unable to stop service.
HKLM\System\CurrentControlSet\Services\MBAMChameleon => removed successfully
MBAMChameleon => service removed successfully

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes" =========

Permanently delete the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes (Yes/No)? The operation completed successfully.



========= End 1 Reg: =========

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes => moved successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\MBAMInstallerService => not found
HKLM\System\CurrentControlSet\Services\MBAMInstallerService => not found
C:\Program Files\Malwarebytes => moved successfully
"C:\Windows\System32\DRIVERS\MbamElam.sys" => not found
"C:\Windows\System32\Drivers\mbamswissarmy.sys" => not found
C:\Windows\system32\Drivers\mbae64.sys => moved successfully

========= DISM /Online /Cleanup-Image /RestoreHealth =========


Deployment Image Servicing and Management tool
Version: 10.0.18362.1

Image Version: 10.0.18363.657


[==                         4.5%                           ]

[==                         4.5%                           ]

[==                         4.5%                           ]

[==                         4.6%                           ]

[==                         4.6%                           ]

[==                         4.6%                           ]

[==                         4.7%                           ]

[==                         4.8%                           ]

[==                         4.8%                           ]

[==                         4.9%                           ]

[==                         4.9%                           ]

[==                         4.9%                           ]

[==                         5.0%                           ]

[==                         5.0%                           ]

[==                         5.1%                           ]

[===                        5.2%                           ]

[===                        5.3%                           ]

[===                        5.3%                           ]

[===                        5.3%                           ]

[===                        5.4%                           ]

[===                        5.4%                           ]

[===                        5.5%                           ]

[===                        5.5%                           ]

[===                        5.5%                           ]

[===                        5.6%                           ]

[===                        5.7%                           ]

[===                        5.7%                           ]

[===                        5.8%                           ]

[===                        5.8%                           ]

[===                        5.8%                           ]

[===                        5.9%                           ]

[===                        6.0%                           ]

[===                        6.1%                           ]

[===                        6.1%                           ]

[===                        6.2%                           ]

[===                        6.2%                           ]

[===                        6.3%                           ]

[===                        6.3%                           ]

[===                        6.4%                           ]

[===                        6.4%                           ]

[===                        6.5%                           ]

[===                        6.5%                           ]

[===                        6.5%                           ]

[===                        6.6%                           ]

[===                        6.6%                           ]

[===                        6.7%                           ]

[===                        6.8%                           ]

[====                       7.0%                           ]

[====                       7.1%                           ]

[====                       7.2%                           ]

[====                       7.2%                           ]

[====                       7.3%                           ]

[====                       7.3%                           ]

[====                       7.4%                           ]

[====                       7.5%                           ]

[====                       7.5%                           ]

[====                       7.6%                           ]

[====                       7.7%                           ]

[====                       7.8%                           ]

[====                       7.8%                           ]

[====                       7.9%                           ]

[====                       7.9%                           ]

[====                       8.0%                           ]

[====                       8.0%                           ]

[====                       8.0%                           ]

[====                       8.1%                           ]

[====                       8.1%                           ]

[====                       8.1%                           ]

[====                       8.2%                           ]

[====                       8.2%                           ]

[====                       8.2%                           ]

[====                       8.2%                           ]

[====                       8.2%                           ]

[====                       8.2%                           ]

[====                       8.2%                           ]

[====                       8.3%                           ]

[====                       8.3%                           ]

[====                       8.3%                           ]

[====                       8.4%                           ]

[====                       8.4%                           ]

[====                       8.5%                           ]

[====                       8.5%                           ]

[====                       8.5%                           ]

[====                       8.5%                           ]

[=====                      8.6%                           ]

[=====                      8.7%                           ]

[=====                      8.7%                           ]

[=====                      8.8%                           ]

[=====                      8.8%                           ]

[=====                      8.9%                           ]

[=====                      9.0%                           ]

[=====                      9.0%                           ]

[=====                      9.1%                           ]

[=====                      9.1%                           ]

[=====                      9.2%                           ]

[=====                      9.2%                           ]

[=====                      9.3%                           ]

[=====                      9.5%                           ]

[=====                      9.5%                           ]

[=====                      9.6%                           ]

[=====                      9.6%                           ]

[=====                      9.7%                           ]

[=====                      9.9%                           ]

[=====                      10.0%                          ]

[=====                      10.1%                          ]

[=====                      10.3%                          ]

[======                     10.5%                          ]

[======                     10.6%                          ]

[======                     10.7%                          ]

[======                     10.8%                          ]

[======                     10.9%                          ]

[======                     11.0%                          ]

[======                     11.0%                          ]

[======                     11.2%                          ]

[======                     11.4%                          ]

[======                     11.6%                          ]

[======                     11.6%                          ]

[======                     11.7%                          ]

[======                     11.7%                          ]

[======                     11.8%                          ]

[======                     12.0%                          ]

[======                     12.0%                          ]

[======                     12.0%                          ]

[=======                    12.1%                          ]

[=======                    12.1%                          ]

[=======                    12.2%                          ]

[=======                    12.3%                          ]

[=======                    12.3%                          ]

[=======                    12.4%                          ]

[=======                    12.4%                          ]

[=======                    12.5%                          ]

[=======                    12.5%                          ]

[=======                    12.5%                          ]

[=======                    12.6%                          ]

[=======                    12.7%                          ]

[=======                    12.7%                          ]

[=======                    12.8%                          ]

[=======                    12.8%                          ]

[=======                    12.9%                          ]

[=======                    12.9%                          ]

[=======                    13.0%                          ]

[=======                    13.0%                          ]

[=======                    13.1%                          ]

[=======                    13.2%                          ]

[=======                    13.4%                          ]

[=======                    13.4%                          ]

[=======                    13.5%                          ]

[=======                    13.5%                          ]

[=======                    13.6%                          ]

[=======                    13.7%                          ]

[========                   13.8%                          ]

[========                   13.8%                          ]

[========                   13.9%                          ]

[========                   13.9%                          ]

[========                   14.0%                          ]

[========                   14.0%                          ]

[========                   14.1%                          ]

[========                   14.1%                          ]

[========                   14.3%                          ]

[========                   14.3%                          ]

[========                   14.4%                          ]

[========                   14.5%                          ]

[========                   14.5%                          ]

[========                   14.6%                          ]

[========                   14.7%                          ]

[========                   14.8%                          ]

[========                   14.9%                          ]

[========                   14.9%                          ]

[========                   15.0%                          ]

[========                   15.1%                          ]

[========                   15.2%                          ]

[========                   15.3%                          ]

[========                   15.5%                          ]

[=========                  15.5%                          ]

[=========                  15.6%                          ]

[=========                  15.7%                          ]

[=========                  15.8%                          ]

[=========                  15.9%                          ]

[=========                  16.1%                          ]

[=========                  16.2%                          ]

[=========                  16.3%                          ]

[=========                  16.4%                          ]

[=========                  16.5%                          ]

[=========                  16.6%                          ]

[=========                  16.7%                          ]

[=========                  16.9%                          ]

[=========                  17.0%                          ]

[=========                  17.2%                          ]

[==========                 17.3%                          ]

[==========                 17.5%                          ]

[==========                 17.5%                          ]

[==========                 17.7%                          ]

[==========                 17.8%                          ]

[==========                 17.8%                          ]

[==========                 17.9%                          ]

[==========                 18.0%                          ]

[==========                 18.0%                          ]

[==========                 18.1%                          ]

[==========                 18.1%                          ]

[==========                 18.2%                          ]

[==========                 18.3%                          ]

[==========                 18.4%                          ]

[==========                 18.4%                          ]

[==========                 18.5%                          ]

[==========                 18.5%                          ]

[==========                 18.5%                          ]

[==========                 18.5%                          ]

[==========                 18.5%                          ]

[==========                 18.6%                          ]

[==========                 18.6%                          ]

[==========                 18.7%                          ]

[==========                 18.8%                          ]

[==========                 18.8%                          ]

[==========                 18.9%                          ]

[==========                 18.9%                          ]

[===========                19.0%                          ]

[===========                19.0%                          ]

[===========                19.1%                          ]

[===========                19.1%                          ]

[===========                19.2%                          ]

[===========                19.2%                          ]

[===========                19.3%                          ]

[===========                19.3%                          ]

[===========                19.4%                          ]

[===========                19.5%                          ]

[===========                19.5%                          ]

[===========                19.6%                          ]

[===========                19.6%                          ]

[===========                19.7%                          ]

[===========                19.7%                          ]

[===========                19.8%                          ]

[===========                20.0%                          ]

[===========                20.1%                          ]

[===========                20.2%                          ]

[===========                20.2%                          ]

[===========                20.3%                          ]

[===========                20.3%                          ]

[===========                20.4%                          ]

[===========                20.5%                          ]

[===========                20.5%                          ]

[===========                20.5%                          ]

[===========                20.5%                          ]

[===========                20.6%                          ]

[============               20.7%                          ]

[============               20.8%                          ]

[============               20.8%                          ]

[============               20.9%                          ]

[============               21.0%                          ]

[============               21.0%                          ]

[============               21.1%                          ]

[============               21.2%                          ]

[============               21.2%                          ]

[============               21.3%                          ]

[============               21.3%                          ]

[============               21.4%                          ]

[============               21.5%                          ]

[============               21.5%                          ]

[============               21.5%                          ]

[============               21.6%                          ]

[============               21.7%                          ]

[============               21.7%                          ]

[============               21.8%                          ]

[============               22.0%                          ]

[============               22.1%                          ]

[============               22.1%                          ]

[============               22.2%                          ]

[============               22.2%                          ]

[============               22.2%                          ]

[============               22.3%                          ]

[============               22.3%                          ]

[============               22.3%                          ]

[============               22.3%                          ]

[============               22.3%                          ]

[============               22.4%                          ]

[============               22.4%                          ]

[=============              22.5%                          ]

[=============              22.5%                          ]

[=============              22.5%                          ]

[=============              22.5%                          ]

[=============              22.6%                          ]

[=============              22.6%                          ]

[=============              22.7%                          ]

[=============              22.8%                          ]

[=============              22.8%                          ]

[=============              23.1%                          ]

[=============              23.2%                          ]

[=============              23.3%                          ]

[=============              23.3%                          ]

[=============              23.4%                          ]

[=============              23.4%                          ]

[=============              23.4%                          ]

[=============              23.5%                          ]

[=============              23.5%                          ]

[=============              23.6%                          ]

[=============              24.1%                          ]

[==============             24.5%                          ]

[==============             24.9%                          ]

[==============             25.7%                          ]

[===============            25.9%                          ]

[===============            26.5%                          ]

[===============            26.6%                          ]

[===============            26.6%                          ]

[===============            27.5%                          ]

[================           28.3%                          ]

[================           28.7%                          ]

[=================          29.7%                          ]

[=================          30.7%                          ]

[==================         31.7%                          ]

[==================         32.5%                          ]

[==================         32.5%                          ]

[==================         32.5%                          ]

[==================         32.7%                          ]

[===================        32.8%                          ]

[===================        32.8%                          ]

[===================        32.8%                          ]

[===================        32.9%                          ]

[===================        32.9%                          ]

[===================        32.9%                          ]

[===================        32.9%                          ]

[===================        32.9%                          ]

[===================        32.9%                          ]

[===================        33.0%                          ]

[===================        33.0%                          ]

[===================        33.0%                          ]

[===================        33.0%                          ]

[===================        33.0%                          ]

[===================        33.0%                          ]

[===================        33.0%                          ]

[===================        33.1%                          ]

[===================        33.2%                          ]

[===================        33.2%                          ]

[===================        33.2%                          ]

[===================        33.3%                          ]

[===================        33.3%                          ]

[===================        33.3%                          ]

[===================        33.3%                          ]

[===================        33.3%                          ]

[===================        33.4%                          ]

[===================        33.4%                          ]

[===================        33.4%                          ]

[===================        33.5%                          ]

[===================        33.5%                          ]

[===================        33.5%                          ]

[===================        33.6%                          ]

[===================        33.6%                          ]

[===================        33.6%                          ]

[===================        33.7%                          ]

[===================        33.9%                          ]

[===================        34.1%                          ]

[===================        34.2%                          ]

[====================       34.7%                          ]

[====================       34.8%                          ]

[====================       34.9%                          ]

[====================       35.0%                          ]

[====================       35.0%                          ]

[====================       35.1%                          ]

[====================       35.2%                          ]

[====================       35.3%                          ]

[====================       35.5%                          ]

[====================       35.7%                          ]

[====================       35.8%                          ]

[====================       35.9%                          ]

[====================       36.0%                          ]

[=====================      36.3%                          ]

[=====================      36.4%                          ]

[=====================      36.4%                          ]

[=====================      36.5%                          ]

[=====================      36.8%                          ]

[=====================      37.0%                          ]

[=====================      37.0%                          ]

[======================     38.0%                          ]

[======================     38.4%                          ]

[======================     38.9%                          ]

[======================     39.2%                          ]

[======================     39.2%                          ]

[=======================    39.7%                          ]

[=======================    39.9%                          ]

[=======================    40.4%                          ]

[=======================    40.5%                          ]

[=======================    41.0%                          ]

[========================   41.5%                          ]

[========================   41.6%                          ]

[========================   42.0%                          ]

[========================   42.1%                          ]

[========================   42.5%                          ]

[========================   42.6%                          ]

[========================   42.7%                          ]

[========================   42.8%                          ]

[=========================  43.2%                          ]

[=========================  43.3%                          ]

[=========================  43.4%                          ]

[=========================  43.5%                          ]

[=========================  43.5%                          ]

[=========================  43.6%                          ]

[=========================  43.6%                          ]

[=========================  43.7%                          ]

[=========================  43.7%                          ]

[=========================  43.8%                          ]

[=========================  43.8%                          ]

[=========================  43.9%                          ]

[=========================  44.0%                          ]

[=========================  44.1%                          ]

[=========================  44.1%                          ]

[=========================  44.2%                          ]

[=========================  44.3%                          ]

[=========================  44.3%                          ]

[=========================  44.3%                          ]

[=========================  44.4%                          ]

[=========================  44.4%                          ]

[=========================  44.5%                          ]

[=========================  44.5%                          ]

[=========================  44.5%                          ]

[=========================  44.5%                          ]

[=========================  44.6%                          ]

[=========================  44.6%                          ]

[=========================  44.6%                          ]

[=========================  44.7%                          ]

[=========================  44.7%                          ]

[=========================  44.8%                          ]

[========================== 44.9%                          ]

[========================== 44.9%                          ]

[========================== 45.0%                          ]

[========================== 45.0%                          ]

[========================== 45.0%                          ]

[========================== 45.1%                          ]

[========================== 45.1%                          ]

[========================== 45.2%                          ]

[========================== 45.2%                          ]

[========================== 45.3%                          ]

[========================== 45.4%                          ]

[========================== 45.5%                          ]

[========================== 45.5%                          ]

[========================== 45.5%                          ]

[========================== 45.6%                          ]

[========================== 45.7%                          ]

[========================== 45.8%                          ]

[========================== 45.9%                          ]

[========================== 46.0%                          ]

[========================== 46.0%                          ]

[========================== 46.1%                          ]

[========================== 46.2%                          ]

[========================== 46.2%                          ]

[========================== 46.3%                          ]

[========================== 46.4%                          ]

[========================== 46.4%                          ]

[========================== 46.5%                          ]

[========================== 46.5%                          ]

[========================== 46.5%                          ]

[===========================46.6%                          ]

[===========================46.6%                          ]

[===========================46.7%                          ]

[===========================46.8%                          ]

[===========================46.8%                          ]

[===========================46.8%                          ]

[===========================46.9%                          ]

[===========================46.9%                          ]

[===========================46.9%                          ]

[===========================47.0%                          ]

[===========================47.0%                          ]

[===========================47.0%                          ]

[===========================47.1%                          ]

[===========================47.1%                          ]

[===========================47.2%                          ]

[===========================47.2%                          ]

[===========================47.3%                          ]

[===========================47.9%                          ]

[===========================48.9%                          ]

[===========================49.5%                          ]

[===========================49.6%                          ]

[===========================50.2%                          ]

[===========================51.2%                          ]

[===========================52.2%                          ]

[===========================52.8%                          ]

[===========================52.8%                          ]

[===========================52.9%                          ]

[===========================52.9%                          ]

[===========================53.0%                          ]

[===========================53.1%                          ]

[===========================53.2%                          ]

[===========================53.2%                          ]

[===========================53.3%                          ]

[===========================53.4%                          ]

[===========================53.5%                          ]

[===========================53.5%                          ]

[===========================53.6%                          ]

[===========================53.7%                          ]

[===========================53.8%                          ]

[===========================53.9%                          ]

[===========================53.9%                          ]

[===========================54.5%                          ]

[===========================55.0%                          ]

[===========================55.7%                          ]

[===========================56.1%                          ]

[===========================56.1%                          ]

[===========================56.2%                          ]

[===========================56.2%                          ]

[===========================56.2%                          ]

[===========================56.3%                          ]

[===========================56.3%                          ]

[===========================56.3%                          ]

[===========================56.4%                          ]

[===========================56.4%                          ]

[===========================56.4%                          ]

[===========================56.5%                          ]

[===========================56.5%                          ]

[===========================56.5%                          ]

[===========================56.6%                          ]

[===========================57.3%=                         ]

[===========================57.7%=                         ]

[===========================57.7%=                         ]

[===========================57.8%=                         ]

[===========================57.8%=                         ]

[===========================57.8%=                         ]

[===========================57.9%=                         ]

[===========================57.9%=                         ]

[===========================57.9%=                         ]

[===========================58.0%=                         ]

[===========================58.0%=                         ]

[===========================58.0%=                         ]

[===========================58.0%=                         ]

[===========================58.1%=                         ]

[===========================58.1%=                         ]

[===========================58.1%=                         ]

[===========================58.1%=                         ]

[===========================58.4%=                         ]

[===========================58.9%==                        ]

[===========================58.9%==                        ]

[===========================59.0%==                        ]

[===========================59.0%==                        ]

[===========================59.0%==                        ]

[===========================59.1%==                        ]

[===========================59.1%==                        ]

[===========================59.2%==                        ]

[===========================59.2%==                        ]

[===========================59.3%==                        ]

[===========================59.3%==                        ]

[===========================59.3%==                        ]

[===========================59.4%==                        ]

[===========================59.4%==                        ]

[===========================59.5%==                        ]

[===========================59.5%==                        ]

[===========================59.5%==                        ]

[===========================59.5%==                        ]

[===========================59.6%==                        ]

[===========================59.9%==                        ]

[===========================60.8%===                       ]

[===========================61.1%===                       ]

[===========================61.2%===                       ]

[===========================61.3%===                       ]

[===========================61.4%===                       ]

[===========================61.4%===                       ]

[===========================61.4%===                       ]

[===========================61.5%===                       ]

[===========================61.5%===                       ]

[===========================61.5%===                       ]

[===========================61.5%===                       ]

[===========================61.6%===                       ]

[===========================61.7%===                       ]

[===========================61.8%===                       ]

[===========================61.8%===                       ]

[===========================61.9%===                       ]

[===========================62.0%===                       ]

[===========================62.0%===                       ]

[===========================62.0%===                       ]

[===========================62.0%===                       ]

[===========================62.1%====                      ]

[===========================62.1%====                      ]

[===========================62.1%====                      ]

[===========================62.2%====                      ]

[===========================62.2%====                      ]

[===========================62.3%====                      ]

[===========================62.3%====                      ]

[===========================62.4%====                      ]

[===========================62.5%====                      ]

[===========================62.5%====                      ]

[===========================62.5%====                      ]

[===========================62.5%====                      ]

[===========================62.6%====                      ]

[===========================62.7%====                      ]

[===========================62.8%====                      ]

[===========================62.8%====                      ]

[===========================62.9%====                      ]

[===========================63.0%====                      ]

[===========================63.1%====                      ]

[===========================63.2%====                      ]

[===========================63.2%====                      ]

[===========================63.3%====                      ]

[===========================63.4%====                      ]

[===========================63.4%====                      ]

[===========================64.4%=====                     ]

[===========================65.2%=====                     ]

[===========================65.7%======                    ]

[===========================66.2%======                    ]

[===========================66.8%======                    ]

[===========================67.2%======                    ]

[===========================67.4%=======                   ]

[===========================67.5%=======                   ]

[===========================67.5%=======                   ]

[===========================67.5%=======                   ]

[===========================67.6%=======                   ]

[===========================67.7%=======                   ]

[===========================67.8%=======                   ]

[===========================67.9%=======                   ]

[===========================67.9%=======                   ]

[===========================68.0%=======                   ]

[===========================68.0%=======                   ]

[===========================68.0%=======                   ]

[===========================68.1%=======                   ]

[===========================68.1%=======                   ]

[===========================68.2%=======                   ]

[===========================68.2%=======                   ]

[===========================68.3%=======                   ]

[===========================68.3%=======                   ]

[===========================68.3%=======                   ]

[===========================68.4%=======                   ]

[===========================68.5%=======                   ]

[===========================68.5%=======                   ]

[===========================68.5%=======                   ]

[===========================68.6%=======                   ]

[===========================68.7%=======                   ]

[===========================68.7%=======                   ]

[===========================68.8%=======                   ]

[===========================68.9%=======                   ]

[===========================69.0%========                  ]

[===========================69.0%========                  ]

[===========================69.1%========                  ]

[===========================69.8%========                  ]

[===========================70.8%=========                 ]

[===========================71.6%=========                 ]

[===========================71.7%=========                 ]

[===========================71.8%=========                 ]

[===========================71.9%=========                 ]

[===========================72.0%=========                 ]

[===========================72.1%=========                 ]

[===========================72.2%=========                 ]

[===========================72.3%=========                 ]

[===========================72.4%=========                 ]

[===========================72.5%==========                ]

[===========================72.5%==========                ]

[===========================72.6%==========                ]

[===========================72.7%==========                ]

[===========================72.7%==========                ]

[===========================72.8%==========                ]

[===========================72.9%==========                ]

[===========================73.0%==========                ]

[===========================73.1%==========                ]

[===========================73.2%==========                ]

[===========================73.3%==========                ]

[===========================73.3%==========                ]

[===========================73.4%==========                ]

[===========================73.9%==========                ]

[===========================74.8%===========               ]

[===========================75.8%===========               ]

[===========================76.4%============              ]

[===========================76.5%============              ]

[===========================76.6%============              ]

[===========================76.7%============              ]

[===========================76.8%============              ]

[===========================77.0%============              ]

[===========================77.3%============              ]

[===========================78.3%=============             ]

[===========================79.3%=============             ]

[===========================79.5%==============            ]

[===========================79.5%==============            ]

[===========================79.6%==============            ]

[===========================79.7%==============            ]

[===========================79.8%==============            ]

[===========================79.9%==============            ]

[===========================80.0%==============            ]

[===========================80.2%==============            ]

[===========================80.4%==============            ]

[===========================80.5%==============            ]

[===========================80.5%==============            ]

[===========================81.5%===============           ]

[===========================81.5%===============           ]

[===========================82.5%===============           ]

[===========================82.5%===============           ]

[===========================82.6%===============           ]

[===========================82.7%===============           ]

[===========================82.8%================          ]

[===========================83.0%================          ]

[===========================83.1%================          ]

[===========================83.2%================          ]

[===========================83.3%================          ]

[===========================83.5%================          ]

[===========================84.1%================          ]

[===========================84.7%=================         ]

[===========================85.7%=================         ]

[===========================85.7%=================         ]

[===========================85.8%=================         ]

[===========================85.9%=================         ]

[===========================86.0%=================         ]

[===========================86.1%=================         ]

[===========================86.1%=================         ]

[===========================86.2%=================         ]

[===========================86.3%==================        ]

[===========================86.4%==================        ]

[===========================86.5%==================        ]

[===========================86.5%==================        ]

[===========================86.5%==================        ]

[===========================87.5%==================        ]

[===========================88.5%===================       ]

[===========================88.5%===================       ]

[===========================88.6%===================       ]

[===========================88.7%===================       ]

[===========================88.8%===================       ]

[===========================88.9%===================       ]

[===========================89.0%===================       ]

[===========================89.0%===================       ]

[===========================89.1%===================       ]

[===========================89.2%===================       ]

[===========================89.3%===================       ]

[===========================89.4%===================       ]

[===========================89.5%===================       ]

[===========================89.5%===================       ]

[===========================89.6%===================       ]

[===========================89.7%====================      ]

[===========================89.8%====================      ]

[===========================89.9%====================      ]

[===========================90.0%====================      ]

[===========================90.1%====================      ]

[===========================90.1%====================      ]

[===========================90.3%====================      ]

[===========================90.4%====================      ]

[===========================90.4%====================      ]

[===========================90.5%====================      ]

[===========================90.5%====================      ]

[===========================90.7%====================      ]

[===========================90.7%====================      ]

[===========================91.4%====================      ]

[===========================91.4%====================      ]

[===========================91.5%=====================     ]

[===========================91.5%=====================     ]

[===========================91.5%=====================     ]

[===========================91.6%=====================     ]

[===========================91.7%=====================     ]

[===========================91.8%=====================     ]

[===========================91.9%=====================     ]

[===========================91.9%=====================     ]

[===========================92.0%=====================     ]

[===========================92.1%=====================     ]

[===========================92.2%=====================     ]

[===========================92.3%=====================     ]

[===========================92.3%=====================     ]

[===========================92.5%=====================     ]

[===========================92.8%=====================     ]

[===========================93.3%======================    ]

[===========================93.4%======================    ]

[===========================94.2%======================    ]

[===========================94.3%======================    ]

[===========================94.4%======================    ]

[===========================94.4%======================    ]

[===========================94.4%======================    ]

[===========================94.5%======================    ]

[===========================94.5%======================    ]

[===========================94.5%======================    ]

[===========================94.6%======================    ]

[===========================94.7%======================    ]

[===========================94.8%======================    ]

[===========================94.8%======================    ]

[===========================94.9%=======================   ]

[===========================95.9%=======================   ]

[===========================96.3%=======================   ]

[===========================96.4%=======================   ]

[===========================96.4%=======================   ]

[===========================96.4%=======================   ]

[===========================96.5%=======================   ]

[===========================96.5%=======================   ]

[===========================96.6%========================  ]

[===========================96.6%========================  ]

[===========================96.9%========================  ]

[===========================97.6%========================  ]

[===========================97.7%========================  ]

[===========================97.7%========================  ]

[===========================97.7%========================  ]

[===========================97.8%========================  ]

[===========================97.9%========================  ]

[===========================97.9%========================  ]

[===========================98.0%========================  ]

[===========================98.1%========================  ]

[===========================98.1%========================  ]

[===========================98.2%========================  ]

[===========================98.6%========================= ]

[===========================99.2%========================= ]

[===========================99.3%========================= ]

[===========================99.3%========================= ]

[===========================99.3%========================= ]

[===========================99.3%========================= ]

[===========================99.4%========================= ]

[===========================99.4%========================= ]

[===========================99.4%========================= ]

[===========================99.5%========================= ]

[===========================99.5%========================= ]

[===========================99.5%========================= ]

[===========================99.5%========================= ]

[===========================99.5%========================= ]

[===========================99.5%========================= ]

[===========================99.7%========================= ]

[===========================99.8%========================= ]

[===========================99.8%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[===========================99.9%========================= ]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]

[==========================100.0%==========================]
The restore operation completed successfully.
The operation completed successfully.

========= End 1 CMD: =========


========= SFC /scannow =========



Beginning system scan.  This process will take some time.



Beginning verification phase of system scan.


Verification 0% complete.
Verification 1% complete.
Verification 1% complete.
Verification 2% complete.
Verification 2% complete.
Verification 3% complete.
Verification 4% complete.
Verification 4% complete.
Verification 5% complete.
Verification 5% complete.
Verification 6% complete.
Verification 7% complete.
Verification 7% complete.
Verification 8% complete.
Verification 8% complete.
Verification 9% complete.
Verification 10% complete.
Verification 10% complete.
Verification 11% complete.
Verification 11% complete.
Verification 12% complete.
Verification 13% complete.
Verification 13% complete.
Verification 14% complete.
Verification 14% complete.
Verification 15% complete.
Verification 16% complete.
Verification 16% complete.
Verification 17% complete.
Verification 17% complete.
Verification 18% complete.
Verification 18% complete.
Verification 19% complete.
Verification 20% complete.
Verification 20% complete.
Verification 21% complete.
Verification 21% complete.
Verification 22% complete.
Verification 23% complete.
Verification 23% complete.
Verification 24% complete.
Verification 24% complete.
Verification 25% complete.
Verification 26% complete.
Verification 26% complete.
Verification 27% complete.
Verification 27% complete.
Verification 28% complete.
Verification 29% complete.
Verification 29% complete.
Verification 30% complete.
Verification 30% complete.
Verification 31% complete.
Verification 32% complete.
Verification 32% complete.
Verification 33% complete.
Verification 33% complete.
Verification 34% complete.
Verification 35% complete.
Verification 35% complete.
Verification 36% complete.
Verification 36% complete.
Verification 37% complete.
Verification 37% complete.
Verification 38% complete.
Verification 39% complete.
Verification 39% complete.
Verification 40% complete.
Verification 40% complete.
Verification 41% complete.
Verification 42% complete.
Verification 42% complete.
Verification 43% complete.
Verification 43% complete.
Verification 44% complete.
Verification 45% complete.
Verification 45% complete.
Verification 46% complete.
Verification 46% complete.
Verification 47% complete.
Verification 48% complete.
Verification 48% complete.
Verification 49% complete.
Verification 49% complete.
Verification 50% complete.
Verification 51% complete.
Verification 51% complete.
Verification 52% complete.
Verification 52% complete.
Verification 53% complete.
Verification 54% complete.
Verification 54% complete.
Verification 55% complete.
Verification 55% complete.
Verification 56% complete.
Verification 56% complete.
Verification 57% complete.
Verification 58% complete.
Verification 58% complete.
Verification 59% complete.
Verification 59% complete.
Verification 60% complete.
Verification 61% complete.
Verification 61% complete.
Verification 62% complete.
Verification 62% complete.
Verification 63% complete.
Verification 64% complete.
Verification 64% complete.
Verification 65% complete.
Verification 65% complete.
Verification 66% complete.
Verification 67% complete.
Verification 67% complete.
Verification 68% complete.
Verification 68% complete.
Verification 69% complete.
Verification 70% complete.
Verification 70% complete.
Verification 71% complete.
Verification 71% complete.
Verification 72% complete.
Verification 73% complete.
Verification 73% complete.
Verification 74% complete.
Verification 74% complete.
Verification 75% complete.
Verification 75% complete.
Verification 76% complete.
Verification 77% complete.
Verification 77% complete.
Verification 78% complete.
Verification 78% complete.
Verification 79% complete.
Verification 80% complete.
Verification 80% complete.
Verification 81% complete.
Verification 81% complete.
Verification 82% complete.
Verification 83% complete.
Verification 83% complete.
Verification 84% complete.
Verification 84% complete.
Verification 85% complete.
Verification 86% complete.
Verification 86% complete.
Verification 87% complete.
Verification 87% complete.
Verification 88% complete.
Verification 89% complete.
Verification 89% complete.
Verification 90% complete.
Verification 90% complete.
Verification 91% complete.
Verification 91% complete.
Verification 92% complete.
Verification 93% complete.
Verification 93% complete.
Verification 94% complete.
Verification 94% complete.
Verification 95% complete.
Verification 96% complete.
Verification 96% complete.
Verification 97% complete.
Verification 97% complete.
Verification 98% complete.
Verification 99% complete.
Verification 99% complete.
Verification 100% complete.


Windows Resource Protection did not find any integrity violations.


========= End 1 CMD: =========


========= findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log =========

2020-02-13 11:06:28, Info                  CSI    0000000f [SR] Verifying 100 components
2020-02-13 11:06:28, Info                  CSI    00000010 [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:28, Info                  CSI    00000011 [SR] Verify complete
2020-02-13 11:06:28, Info                  CSI    00000012 [SR] Verifying 100 components
2020-02-13 11:06:28, Info                  CSI    00000013 [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:30, Info                  CSI    00000015 [SR] Verify complete
2020-02-13 11:06:30, Info                  CSI    00000016 [SR] Verifying 100 components
2020-02-13 11:06:30, Info                  CSI    00000017 [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:31, Info                  CSI    00000018 [SR] Verify complete
2020-02-13 11:06:31, Info                  CSI    00000019 [SR] Verifying 100 components
2020-02-13 11:06:31, Info                  CSI    0000001a [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:33, Info                  CSI    0000001b [SR] Verify complete
2020-02-13 11:06:33, Info                  CSI    0000001c [SR] Verifying 100 components
2020-02-13 11:06:33, Info                  CSI    0000001d [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:35, Info                  CSI    0000001e [SR] Verify complete
2020-02-13 11:06:35, Info                  CSI    0000001f [SR] Verifying 100 components
2020-02-13 11:06:35, Info                  CSI    00000020 [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:38, Info                  CSI    00000021 [SR] Verify complete
2020-02-13 11:06:38, Info                  CSI    00000022 [SR] Verifying 100 components
2020-02-13 11:06:38, Info                  CSI    00000023 [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:40, Info                  CSI    00000024 [SR] Verify complete
2020-02-13 11:06:40, Info                  CSI    00000025 [SR] Verifying 100 components
2020-02-13 11:06:40, Info                  CSI    00000026 [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:46, Info                  CSI    00000027 [SR] Verify complete
2020-02-13 11:06:46, Info                  CSI    00000028 [SR] Verifying 100 components
2020-02-13 11:06:46, Info                  CSI    00000029 [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:56, Info                  CSI    0000002a [SR] Verify complete
2020-02-13 11:06:56, Info                  CSI    0000002b [SR] Verifying 100 components
2020-02-13 11:06:56, Info                  CSI    0000002c [SR] Beginning Verify and Repair transaction
2020-02-13 11:06:58, Info                  CSI    0000002d [SR] Verify complete
2020-02-13 11:06:59, Info                  CSI    0000002e [SR] Verifying 100 components
2020-02-13 11:06:59, Info                  CSI    0000002f [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:00, Info                  CSI    00000030 [SR] Verify complete
2020-02-13 11:07:00, Info                  CSI    00000031 [SR] Verifying 100 components
2020-02-13 11:07:00, Info                  CSI    00000032 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:02, Info                  CSI    00000034 [SR] Verify complete
2020-02-13 11:07:02, Info                  CSI    00000035 [SR] Verifying 100 components
2020-02-13 11:07:02, Info                  CSI    00000036 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:05, Info                  CSI    00000037 [SR] Verify complete
2020-02-13 11:07:05, Info                  CSI    00000038 [SR] Verifying 100 components
2020-02-13 11:07:05, Info                  CSI    00000039 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:06, Info                  CSI    0000003a [SR] Verify complete
2020-02-13 11:07:06, Info                  CSI    0000003b [SR] Verifying 100 components
2020-02-13 11:07:06, Info                  CSI    0000003c [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:08, Info                  CSI    0000003d [SR] Verify complete
2020-02-13 11:07:08, Info                  CSI    0000003e [SR] Verifying 100 components
2020-02-13 11:07:08, Info                  CSI    0000003f [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:11, Info                  CSI    00000040 [SR] Verify complete
2020-02-13 11:07:11, Info                  CSI    00000041 [SR] Verifying 100 components
2020-02-13 11:07:11, Info                  CSI    00000042 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:15, Info                  CSI    00000043 [SR] Verify complete
2020-02-13 11:07:15, Info                  CSI    00000044 [SR] Verifying 100 components
2020-02-13 11:07:15, Info                  CSI    00000045 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:19, Info                  CSI    00000046 [SR] Verify complete
2020-02-13 11:07:19, Info                  CSI    00000047 [SR] Verifying 100 components
2020-02-13 11:07:19, Info                  CSI    00000048 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:22, Info                  CSI    00000049 [SR] Verify complete
2020-02-13 11:07:22, Info                  CSI    0000004a [SR] Verifying 100 components
2020-02-13 11:07:22, Info                  CSI    0000004b [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:25, Info                  CSI    0000004c [SR] Verify complete
2020-02-13 11:07:25, Info                  CSI    0000004d [SR] Verifying 100 components
2020-02-13 11:07:25, Info                  CSI    0000004e [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:28, Info                  CSI    0000004f [SR] Verify complete
2020-02-13 11:07:28, Info                  CSI    00000050 [SR] Verifying 100 components
2020-02-13 11:07:28, Info                  CSI    00000051 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:31, Info                  CSI    00000052 [SR] Verify complete
2020-02-13 11:07:31, Info                  CSI    00000053 [SR] Verifying 100 components
2020-02-13 11:07:31, Info                  CSI    00000054 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:39, Info                  CSI    00000057 [SR] Verify complete
2020-02-13 11:07:40, Info                  CSI    00000058 [SR] Verifying 100 components
2020-02-13 11:07:40, Info                  CSI    00000059 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:42, Info                  CSI    0000005a [SR] Verify complete
2020-02-13 11:07:42, Info                  CSI    0000005b [SR] Verifying 100 components
2020-02-13 11:07:42, Info                  CSI    0000005c [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:45, Info                  CSI    0000005d [SR] Verify complete
2020-02-13 11:07:45, Info                  CSI    0000005e [SR] Verifying 100 components
2020-02-13 11:07:45, Info                  CSI    0000005f [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:47, Info                  CSI    00000060 [SR] Verify complete
2020-02-13 11:07:47, Info                  CSI    00000061 [SR] Verifying 100 components
2020-02-13 11:07:47, Info                  CSI    00000062 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:49, Info                  CSI    00000063 [SR] Verify complete
2020-02-13 11:07:49, Info                  CSI    00000064 [SR] Verifying 100 components
2020-02-13 11:07:49, Info                  CSI    00000065 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:51, Info                  CSI    00000067 [SR] Verify complete
2020-02-13 11:07:51, Info                  CSI    00000068 [SR] Verifying 100 components
2020-02-13 11:07:51, Info                  CSI    00000069 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:54, Info                  CSI    0000006b [SR] Verify complete
2020-02-13 11:07:54, Info                  CSI    0000006c [SR] Verifying 100 components
2020-02-13 11:07:54, Info                  CSI    0000006d [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:55, Info                  CSI    0000006e [SR] Verify complete
2020-02-13 11:07:55, Info                  CSI    0000006f [SR] Verifying 100 components
2020-02-13 11:07:55, Info                  CSI    00000070 [SR] Beginning Verify and Repair transaction
2020-02-13 11:07:57, Info                  CSI    00000071 [SR] Verify complete
2020-02-13 11:07:57, Info                  CSI    00000072 [SR] Verifying 100 components
2020-02-13 11:07:57, Info                  CSI    00000073 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:00, Info                  CSI    00000074 [SR] Verify complete
2020-02-13 11:08:00, Info                  CSI    00000075 [SR] Verifying 100 components
2020-02-13 11:08:00, Info                  CSI    00000076 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:02, Info                  CSI    00000077 [SR] Verify complete
2020-02-13 11:08:02, Info                  CSI    00000078 [SR] Verifying 100 components
2020-02-13 11:08:02, Info                  CSI    00000079 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:05, Info                  CSI    0000007b [SR] Verify complete
2020-02-13 11:08:05, Info                  CSI    0000007c [SR] Verifying 100 components
2020-02-13 11:08:05, Info                  CSI    0000007d [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:07, Info                  CSI    0000007f [SR] Verify complete
2020-02-13 11:08:08, Info                  CSI    00000080 [SR] Verifying 100 components
2020-02-13 11:08:08, Info                  CSI    00000081 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:10, Info                  CSI    00000082 [SR] Verify complete
2020-02-13 11:08:10, Info                  CSI    00000083 [SR] Verifying 100 components
2020-02-13 11:08:10, Info                  CSI    00000084 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:14, Info                  CSI    0000008b [SR] Verify complete
2020-02-13 11:08:14, Info                  CSI    0000008c [SR] Verifying 100 components
2020-02-13 11:08:14, Info                  CSI    0000008d [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:19, Info                  CSI    0000008f [SR] Verify complete
2020-02-13 11:08:20, Info                  CSI    00000090 [SR] Verifying 100 components
2020-02-13 11:08:20, Info                  CSI    00000091 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:26, Info                  CSI    00000096 [SR] Verify complete
2020-02-13 11:08:26, Info                  CSI    00000097 [SR] Verifying 100 components
2020-02-13 11:08:26, Info                  CSI    00000098 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:27, Info                  CSI    00000099 [SR] Verify complete
2020-02-13 11:08:28, Info                  CSI    0000009a [SR] Verifying 100 components
2020-02-13 11:08:28, Info                  CSI    0000009b [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:29, Info                  CSI    0000009c [SR] Verify complete
2020-02-13 11:08:29, Info                  CSI    0000009d [SR] Verifying 100 components
2020-02-13 11:08:29, Info                  CSI    0000009e [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:33, Info                  CSI    000000a1 [SR] Verify complete
2020-02-13 11:08:33, Info                  CSI    000000a2 [SR] Verifying 100 components
2020-02-13 11:08:33, Info                  CSI    000000a3 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:36, Info                  CSI    000000a4 [SR] Verify complete
2020-02-13 11:08:36, Info                  CSI    000000a5 [SR] Verifying 100 components
2020-02-13 11:08:36, Info                  CSI    000000a6 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:38, Info                  CSI    000000a7 [SR] Verify complete
2020-02-13 11:08:38, Info                  CSI    000000a8 [SR] Verifying 100 components
2020-02-13 11:08:38, Info                  CSI    000000a9 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:39, Info                  CSI    000000aa [SR] Verify complete
2020-02-13 11:08:40, Info                  CSI    000000ab [SR] Verifying 100 components
2020-02-13 11:08:40, Info                  CSI    000000ac [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:43, Info                  CSI    000000ae [SR] Verify complete
2020-02-13 11:08:43, Info                  CSI    000000af [SR] Verifying 100 components
2020-02-13 11:08:43, Info                  CSI    000000b0 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:45, Info                  CSI    000000b2 [SR] Verify complete
2020-02-13 11:08:46, Info                  CSI    000000b3 [SR] Verifying 100 components
2020-02-13 11:08:46, Info                  CSI    000000b4 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:51, Info                  CSI    000000b7 [SR] Verify complete
2020-02-13 11:08:51, Info                  CSI    000000b8 [SR] Verifying 100 components
2020-02-13 11:08:51, Info                  CSI    000000b9 [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:52, Info                  CSI    000000ba [SR] Verify complete
2020-02-13 11:08:53, Info                  CSI    000000bb [SR] Verifying 100 components
2020-02-13 11:08:53, Info                  CSI    000000bc [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:55, Info                  CSI    000000bd [SR] Verify complete
2020-02-13 11:08:55, Info                  CSI    000000be [SR] Verifying 100 components
2020-02-13 11:08:55, Info                  CSI    000000bf [SR] Beginning Verify and Repair transaction
2020-02-13 11:08:57, Info                  CSI    000000c0 [SR] Verify complete
2020-02-13 11:08:57, Info                  CSI    000000c1 [SR] Verifying 100 components
2020-02-13 11:08:57, Info                  CSI    000000c2 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:01, Info                  CSI    000000c3 [SR] Verify complete
2020-02-13 11:09:01, Info                  CSI    000000c4 [SR] Verifying 100 components
2020-02-13 11:09:01, Info                  CSI    000000c5 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:05, Info                  CSI    000000c6 [SR] Verify complete
2020-02-13 11:09:05, Info                  CSI    000000c7 [SR] Verifying 100 components
2020-02-13 11:09:05, Info                  CSI    000000c8 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:09, Info                  CSI    000000ca [SR] Verify complete
2020-02-13 11:09:09, Info                  CSI    000000cb [SR] Verifying 100 components
2020-02-13 11:09:09, Info                  CSI    000000cc [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:12, Info                  CSI    000000ce [SR] Verify complete
2020-02-13 11:09:12, Info                  CSI    000000cf [SR] Verifying 100 components
2020-02-13 11:09:12, Info                  CSI    000000d0 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:19, Info                  CSI    000000d4 [SR] Verify complete
2020-02-13 11:09:19, Info                  CSI    000000d5 [SR] Verifying 100 components
2020-02-13 11:09:19, Info                  CSI    000000d6 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:21, Info                  CSI    000000d7 [SR] Verify complete
2020-02-13 11:09:21, Info                  CSI    000000d8 [SR] Verifying 100 components
2020-02-13 11:09:21, Info                  CSI    000000d9 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:24, Info                  CSI    000000da [SR] Verify complete
2020-02-13 11:09:24, Info                  CSI    000000db [SR] Verifying 100 components
2020-02-13 11:09:24, Info                  CSI    000000dc [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:27, Info                  CSI    000000dd [SR] Verify complete
2020-02-13 11:09:27, Info                  CSI    000000de [SR] Verifying 100 components
2020-02-13 11:09:27, Info                  CSI    000000df [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:30, Info                  CSI    000000e0 [SR] Verify complete
2020-02-13 11:09:30, Info                  CSI    000000e1 [SR] Verifying 100 components
2020-02-13 11:09:30, Info                  CSI    000000e2 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:32, Info                  CSI    000000e3 [SR] Verify complete
2020-02-13 11:09:32, Info                  CSI    000000e4 [SR] Verifying 100 components
2020-02-13 11:09:32, Info                  CSI    000000e5 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:36, Info                  CSI    000000e6 [SR] Verify complete
2020-02-13 11:09:36, Info                  CSI    000000e7 [SR] Verifying 100 components
2020-02-13 11:09:36, Info                  CSI    000000e8 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:38, Info                  CSI    000000e9 [SR] Verify complete
2020-02-13 11:09:39, Info                  CSI    000000ea [SR] Verifying 100 components
2020-02-13 11:09:39, Info                  CSI    000000eb [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:41, Info                  CSI    000000ec [SR] Verify complete
2020-02-13 11:09:41, Info                  CSI    000000ed [SR] Verifying 100 components
2020-02-13 11:09:41, Info                  CSI    000000ee [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:43, Info                  CSI    000000ef [SR] Verify complete
2020-02-13 11:09:43, Info                  CSI    000000f0 [SR] Verifying 100 components
2020-02-13 11:09:43, Info                  CSI    000000f1 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:46, Info                  CSI    000000f2 [SR] Verify complete
2020-02-13 11:09:46, Info                  CSI    000000f3 [SR] Verifying 100 components
2020-02-13 11:09:46, Info                  CSI    000000f4 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:49, Info                  CSI    000000f5 [SR] Verify complete
2020-02-13 11:09:49, Info                  CSI    000000f6 [SR] Verifying 100 components
2020-02-13 11:09:49, Info                  CSI    000000f7 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:51, Info                  CSI    000000f8 [SR] Verify complete
2020-02-13 11:09:51, Info                  CSI    000000f9 [SR] Verifying 100 components
2020-02-13 11:09:51, Info                  CSI    000000fa [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:53, Info                  CSI    000000fb [SR] Verify complete
2020-02-13 11:09:53, Info                  CSI    000000fc [SR] Verifying 100 components
2020-02-13 11:09:53, Info                  CSI    000000fd [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:55, Info                  CSI    000000fe [SR] Verify complete
2020-02-13 11:09:55, Info                  CSI    000000ff [SR] Verifying 100 components
2020-02-13 11:09:55, Info                  CSI    00000100 [SR] Beginning Verify and Repair transaction
2020-02-13 11:09:58, Info                  CSI    00000101 [SR] Verify complete
2020-02-13 11:09:58, Info                  CSI    00000102 [SR] Verifying 100 components
2020-02-13 11:09:58, Info                  CSI    00000103 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:01, Info                  CSI    00000104 [SR] Verify complete
2020-02-13 11:10:01, Info                  CSI    00000105 [SR] Verifying 100 components
2020-02-13 11:10:01, Info                  CSI    00000106 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:03, Info                  CSI    00000107 [SR] Verify complete
2020-02-13 11:10:03, Info                  CSI    00000108 [SR] Verifying 100 components
2020-02-13 11:10:03, Info                  CSI    00000109 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:06, Info                  CSI    0000010a [SR] Verify complete
2020-02-13 11:10:06, Info                  CSI    0000010b [SR] Verifying 100 components
2020-02-13 11:10:06, Info                  CSI    0000010c [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:09, Info                  CSI    0000010d [SR] Verify complete
2020-02-13 11:10:09, Info                  CSI    0000010e [SR] Verifying 100 components
2020-02-13 11:10:09, Info                  CSI    0000010f [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:12, Info                  CSI    00000110 [SR] Verify complete
2020-02-13 11:10:12, Info                  CSI    00000111 [SR] Verifying 100 components
2020-02-13 11:10:12, Info                  CSI    00000112 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:17, Info                  CSI    00000114 [SR] Verify complete
2020-02-13 11:10:17, Info                  CSI    00000115 [SR] Verifying 100 components
2020-02-13 11:10:17, Info                  CSI    00000116 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:20, Info                  CSI    00000117 [SR] Verify complete
2020-02-13 11:10:20, Info                  CSI    00000118 [SR] Verifying 100 components
2020-02-13 11:10:20, Info                  CSI    00000119 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:26, Info                  CSI    0000011f [SR] Verify complete
2020-02-13 11:10:26, Info                  CSI    00000120 [SR] Verifying 100 components
2020-02-13 11:10:26, Info                  CSI    00000121 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:32, Info                  CSI    00000124 [SR] Verify complete
2020-02-13 11:10:32, Info                  CSI    00000125 [SR] Verifying 100 components
2020-02-13 11:10:32, Info                  CSI    00000126 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:35, Info                  CSI    00000127 [SR] Verify complete
2020-02-13 11:10:35, Info                  CSI    00000128 [SR] Verifying 100 components
2020-02-13 11:10:35, Info                  CSI    00000129 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:38, Info                  CSI    0000012b [SR] Verify complete
2020-02-13 11:10:38, Info                  CSI    0000012c [SR] Verifying 100 components
2020-02-13 11:10:38, Info                  CSI    0000012d [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:43, Info                  CSI    00000130 [SR] Verify complete
2020-02-13 11:10:44, Info                  CSI    00000131 [SR] Verifying 100 components
2020-02-13 11:10:44, Info                  CSI    00000132 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:46, Info                  CSI    00000133 [SR] Verify complete
2020-02-13 11:10:46, Info                  CSI    00000134 [SR] Verifying 100 components
2020-02-13 11:10:46, Info                  CSI    00000135 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:49, Info                  CSI    00000136 [SR] Verify complete
2020-02-13 11:10:49, Info                  CSI    00000137 [SR] Verifying 100 components
2020-02-13 11:10:49, Info                  CSI    00000138 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:52, Info                  CSI    00000139 [SR] Verify complete
2020-02-13 11:10:52, Info                  CSI    0000013a [SR] Verifying 100 components
2020-02-13 11:10:52, Info                  CSI    0000013b [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:56, Info                  CSI    0000013e [SR] Verify complete
2020-02-13 11:10:57, Info                  CSI    0000013f [SR] Verifying 100 components
2020-02-13 11:10:57, Info                  CSI    00000140 [SR] Beginning Verify and Repair transaction
2020-02-13 11:10:59, Info                  CSI    00000141 [SR] Verify complete
2020-02-13 11:10:59, Info                  CSI    00000142 [SR] Verifying 100 components
2020-02-13 11:10:59, Info                  CSI    00000143 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:01, Info                  CSI    00000144 [SR] Verify complete
2020-02-13 11:11:02, Info                  CSI    00000145 [SR] Verifying 100 components
2020-02-13 11:11:02, Info                  CSI    00000146 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:04, Info                  CSI    00000147 [SR] Verify complete
2020-02-13 11:11:04, Info                  CSI    00000148 [SR] Verifying 100 components
2020-02-13 11:11:04, Info                  CSI    00000149 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:06, Info                  CSI    0000014a [SR] Verify complete
2020-02-13 11:11:06, Info                  CSI    0000014b [SR] Verifying 100 components
2020-02-13 11:11:06, Info                  CSI    0000014c [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:09, Info                  CSI    0000014e [SR] Verify complete
2020-02-13 11:11:09, Info                  CSI    0000014f [SR] Verifying 100 components
2020-02-13 11:11:09, Info                  CSI    00000150 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:12, Info                  CSI    00000151 [SR] Verify complete
2020-02-13 11:11:12, Info                  CSI    00000152 [SR] Verifying 100 components
2020-02-13 11:11:12, Info                  CSI    00000153 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:15, Info                  CSI    00000154 [SR] Verify complete
2020-02-13 11:11:15, Info                  CSI    00000155 [SR] Verifying 100 components
2020-02-13 11:11:15, Info                  CSI    00000156 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:18, Info                  CSI    00000157 [SR] Verify complete
2020-02-13 11:11:18, Info                  CSI    00000158 [SR] Verifying 100 components
2020-02-13 11:11:18, Info                  CSI    00000159 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:20, Info                  CSI    0000015a [SR] Verify complete
2020-02-13 11:11:21, Info                  CSI    0000015b [SR] Verifying 100 components
2020-02-13 11:11:21, Info                  CSI    0000015c [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:23, Info                  CSI    0000015d [SR] Verify complete
2020-02-13 11:11:23, Info                  CSI    0000015e [SR] Verifying 100 components
2020-02-13 11:11:23, Info                  CSI    0000015f [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:26, Info                  CSI    00000160 [SR] Verify complete
2020-02-13 11:11:26, Info                  CSI    00000161 [SR] Verifying 100 components
2020-02-13 11:11:26, Info                  CSI    00000162 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:29, Info                  CSI    00000163 [SR] Verify complete
2020-02-13 11:11:29, Info                  CSI    00000164 [SR] Verifying 100 components
2020-02-13 11:11:29, Info                  CSI    00000165 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:33, Info                  CSI    00000167 [SR] Verify complete
2020-02-13 11:11:33, Info                  CSI    00000168 [SR] Verifying 100 components
2020-02-13 11:11:33, Info                  CSI    00000169 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:35, Info                  CSI    0000016a [SR] Verify complete
2020-02-13 11:11:35, Info                  CSI    0000016b [SR] Verifying 100 components
2020-02-13 11:11:35, Info                  CSI    0000016c [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:37, Info                  CSI    0000016e [SR] Verify complete
2020-02-13 11:11:37, Info                  CSI    0000016f [SR] Verifying 100 components
2020-02-13 11:11:37, Info                  CSI    00000170 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:39, Info                  CSI    00000172 [SR] Verify complete
2020-02-13 11:11:39, Info                  CSI    00000173 [SR] Verifying 100 components
2020-02-13 11:11:39, Info                  CSI    00000174 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:41, Info                  CSI    00000175 [SR] Verify complete
2020-02-13 11:11:41, Info                  CSI    00000176 [SR] Verifying 100 components
2020-02-13 11:11:41, Info                  CSI    00000177 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:42, Info                  CSI    00000178 [SR] Verify complete
2020-02-13 11:11:42, Info                  CSI    00000179 [SR] Verifying 100 components
2020-02-13 11:11:42, Info                  CSI    0000017a [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:44, Info                  CSI    0000017b [SR] Verify complete
2020-02-13 11:11:44, Info                  CSI    0000017c [SR] Verifying 100 components
2020-02-13 11:11:44, Info                  CSI    0000017d [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:46, Info                  CSI    0000017e [SR] Verify complete
2020-02-13 11:11:46, Info                  CSI    0000017f [SR] Verifying 100 components
2020-02-13 11:11:46, Info                  CSI    00000180 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:48, Info                  CSI    00000181 [SR] Verify complete
2020-02-13 11:11:48, Info                  CSI    00000182 [SR] Verifying 100 components
2020-02-13 11:11:48, Info                  CSI    00000183 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:50, Info                  CSI    00000184 [SR] Verify complete
2020-02-13 11:11:50, Info                  CSI    00000185 [SR] Verifying 100 components
2020-02-13 11:11:50, Info                  CSI    00000186 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:52, Info                  CSI    00000187 [SR] Verify complete
2020-02-13 11:11:52, Info                  CSI    00000188 [SR] Verifying 100 components
2020-02-13 11:11:52, Info                  CSI    00000189 [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:54, Info                  CSI    0000018a [SR] Verify complete
2020-02-13 11:11:54, Info                  CSI    0000018b [SR] Verifying 100 components
2020-02-13 11:11:54, Info                  CSI    0000018c [SR] Beginning Verify and Repair transaction
2020-02-13 11:11:56, Info                  CSI    0000018d [SR] Verify complete
2020-02-13 11:11:57, Info                  CSI    0000018e [SR] Verifying 100 components
2020-02-13 11:11:57, Info                  CSI    0000018f [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:00, Info                  CSI    00000191 [SR] Verify complete
2020-02-13 11:12:00, Info                  CSI    00000192 [SR] Verifying 100 components
2020-02-13 11:12:00, Info                  CSI    00000193 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:02, Info                  CSI    00000194 [SR] Verify complete
2020-02-13 11:12:02, Info                  CSI    00000195 [SR] Verifying 100 components
2020-02-13 11:12:02, Info                  CSI    00000196 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:04, Info                  CSI    00000197 [SR] Verify complete
2020-02-13 11:12:04, Info                  CSI    00000198 [SR] Verifying 100 components
2020-02-13 11:12:04, Info                  CSI    00000199 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:06, Info                  CSI    0000019a [SR] Verify complete
2020-02-13 11:12:06, Info                  CSI    0000019b [SR] Verifying 100 components
2020-02-13 11:12:06, Info                  CSI    0000019c [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:08, Info                  CSI    0000019d [SR] Verify complete
2020-02-13 11:12:08, Info                  CSI    0000019e [SR] Verifying 100 components
2020-02-13 11:12:08, Info                  CSI    0000019f [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:10, Info                  CSI    000001a0 [SR] Verify complete
2020-02-13 11:12:10, Info                  CSI    000001a1 [SR] Verifying 100 components
2020-02-13 11:12:10, Info                  CSI    000001a2 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:11, Info                  CSI    000001a3 [SR] Verify complete
2020-02-13 11:12:12, Info                  CSI    000001a4 [SR] Verifying 100 components
2020-02-13 11:12:12, Info                  CSI    000001a5 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:14, Info                  CSI    000001a6 [SR] Verify complete
2020-02-13 11:12:14, Info                  CSI    000001a7 [SR] Verifying 100 components
2020-02-13 11:12:14, Info                  CSI    000001a8 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:16, Info                  CSI    000001a9 [SR] Verify complete
2020-02-13 11:12:16, Info                  CSI    000001aa [SR] Verifying 100 components
2020-02-13 11:12:16, Info                  CSI    000001ab [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:19, Info                  CSI    000001ad [SR] Verify complete
2020-02-13 11:12:19, Info                  CSI    000001ae [SR] Verifying 100 components
2020-02-13 11:12:19, Info                  CSI    000001af [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:21, Info                  CSI    000001b0 [SR] Verify complete
2020-02-13 11:12:22, Info                  CSI    000001b1 [SR] Verifying 100 components
2020-02-13 11:12:22, Info                  CSI    000001b2 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:24, Info                  CSI    000001b3 [SR] Verify complete
2020-02-13 11:12:24, Info                  CSI    000001b4 [SR] Verifying 100 components
2020-02-13 11:12:24, Info                  CSI    000001b5 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:27, Info                  CSI    000001b6 [SR] Verify complete
2020-02-13 11:12:27, Info                  CSI    000001b7 [SR] Verifying 100 components
2020-02-13 11:12:27, Info                  CSI    000001b8 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:29, Info                  CSI    000001b9 [SR] Verify complete
2020-02-13 11:12:29, Info                  CSI    000001ba [SR] Verifying 100 components
2020-02-13 11:12:29, Info                  CSI    000001bb [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:31, Info                  CSI    000001bc [SR] Verify complete
2020-02-13 11:12:32, Info                  CSI    000001bd [SR] Verifying 100 components
2020-02-13 11:12:32, Info                  CSI    000001be [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:34, Info                  CSI    000001bf [SR] Verify complete
2020-02-13 11:12:34, Info                  CSI    000001c0 [SR] Verifying 100 components
2020-02-13 11:12:34, Info                  CSI    000001c1 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:37, Info                  CSI    000001c2 [SR] Verify complete
2020-02-13 11:12:37, Info                  CSI    000001c3 [SR] Verifying 100 components
2020-02-13 11:12:37, Info                  CSI    000001c4 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:39, Info                  CSI    000001c5 [SR] Verify complete
2020-02-13 11:12:39, Info                  CSI    000001c6 [SR] Verifying 100 components
2020-02-13 11:12:39, Info                  CSI    000001c7 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:42, Info                  CSI    000001cd [SR] Verify complete
2020-02-13 11:12:42, Info                  CSI    000001ce [SR] Verifying 100 components
2020-02-13 11:12:42, Info                  CSI    000001cf [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:45, Info                  CSI    000001d1 [SR] Verify complete
2020-02-13 11:12:45, Info                  CSI    000001d2 [SR] Verifying 100 components
2020-02-13 11:12:45, Info                  CSI    000001d3 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:47, Info                  CSI    000001d4 [SR] Verify complete
2020-02-13 11:12:47, Info                  CSI    000001d5 [SR] Verifying 100 components
2020-02-13 11:12:47, Info                  CSI    000001d6 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:49, Info                  CSI    000001d7 [SR] Verify complete
2020-02-13 11:12:49, Info                  CSI    000001d8 [SR] Verifying 100 components
2020-02-13 11:12:49, Info                  CSI    000001d9 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:51, Info                  CSI    000001db [SR] Verify complete
2020-02-13 11:12:51, Info                  CSI    000001dc [SR] Verifying 100 components
2020-02-13 11:12:51, Info                  CSI    000001dd [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:55, Info                  CSI    000001df [SR] Verify complete
2020-02-13 11:12:55, Info                  CSI    000001e0 [SR] Verifying 100 components
2020-02-13 11:12:55, Info                  CSI    000001e1 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:56, Info                  CSI    000001e2 [SR] Verify complete
2020-02-13 11:12:57, Info                  CSI    000001e3 [SR] Verifying 100 components
2020-02-13 11:12:57, Info                  CSI    000001e4 [SR] Beginning Verify and Repair transaction
2020-02-13 11:12:59, Info                  CSI    000001e5 [SR] Verify complete
2020-02-13 11:12:59, Info                  CSI    000001e6 [SR] Verifying 100 components
2020-02-13 11:12:59, Info                  CSI    000001e7 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:02, Info                  CSI    000001e8 [SR] Verify complete
2020-02-13 11:13:02, Info                  CSI    000001e9 [SR] Verifying 100 components
2020-02-13 11:13:02, Info                  CSI    000001ea [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:05, Info                  CSI    000001eb [SR] Verify complete
2020-02-13 11:13:05, Info                  CSI    000001ec [SR] Verifying 100 components
2020-02-13 11:13:05, Info                  CSI    000001ed [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:09, Info                  CSI    000001ee [SR] Verify complete
2020-02-13 11:13:09, Info                  CSI    000001ef [SR] Verifying 100 components
2020-02-13 11:13:09, Info                  CSI    000001f0 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:12, Info                  CSI    000001f2 [SR] Verify complete
2020-02-13 11:13:12, Info                  CSI    000001f3 [SR] Verifying 100 components
2020-02-13 11:13:12, Info                  CSI    000001f4 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:14, Info                  CSI    000001f5 [SR] Verify complete
2020-02-13 11:13:14, Info                  CSI    000001f6 [SR] Verifying 100 components
2020-02-13 11:13:14, Info                  CSI    000001f7 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:16, Info                  CSI    000001f8 [SR] Verify complete
2020-02-13 11:13:16, Info                  CSI    000001f9 [SR] Verifying 100 components
2020-02-13 11:13:16, Info                  CSI    000001fa [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:19, Info                  CSI    000001fb [SR] Verify complete
2020-02-13 11:13:19, Info                  CSI    000001fc [SR] Verifying 100 components
2020-02-13 11:13:19, Info                  CSI    000001fd [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:21, Info                  CSI    000001fe [SR] Verify complete
2020-02-13 11:13:21, Info                  CSI    000001ff [SR] Verifying 100 components
2020-02-13 11:13:21, Info                  CSI    00000200 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:24, Info                  CSI    00000205 [SR] Verify complete
2020-02-13 11:13:24, Info                  CSI    00000206 [SR] Verifying 100 components
2020-02-13 11:13:24, Info                  CSI    00000207 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:26, Info                  CSI    00000208 [SR] Verify complete
2020-02-13 11:13:27, Info                  CSI    00000209 [SR] Verifying 100 components
2020-02-13 11:13:27, Info                  CSI    0000020a [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:29, Info                  CSI    0000020b [SR] Verify complete
2020-02-13 11:13:29, Info                  CSI    0000020c [SR] Verifying 100 components
2020-02-13 11:13:29, Info                  CSI    0000020d [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:32, Info                  CSI    0000020e [SR] Verify complete
2020-02-13 11:13:32, Info                  CSI    0000020f [SR] Verifying 100 components
2020-02-13 11:13:32, Info                  CSI    00000210 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:35, Info                  CSI    00000211 [SR] Verify complete
2020-02-13 11:13:35, Info                  CSI    00000212 [SR] Verifying 100 components
2020-02-13 11:13:35, Info                  CSI    00000213 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:38, Info                  CSI    00000215 [SR] Verify complete
2020-02-13 11:13:38, Info                  CSI    00000216 [SR] Verifying 100 components
2020-02-13 11:13:38, Info                  CSI    00000217 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:40, Info                  CSI    00000218 [SR] Verify complete
2020-02-13 11:13:40, Info                  CSI    00000219 [SR] Verifying 100 components
2020-02-13 11:13:40, Info                  CSI    0000021a [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:44, Info                  CSI    0000021b [SR] Verify complete
2020-02-13 11:13:44, Info                  CSI    0000021c [SR] Verifying 100 components
2020-02-13 11:13:44, Info                  CSI    0000021d [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:46, Info                  CSI    0000021e [SR] Verify complete
2020-02-13 11:13:46, Info                  CSI    0000021f [SR] Verifying 100 components
2020-02-13 11:13:46, Info                  CSI    00000220 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:49, Info                  CSI    00000221 [SR] Verify complete
2020-02-13 11:13:49, Info                  CSI    00000222 [SR] Verifying 100 components
2020-02-13 11:13:49, Info                  CSI    00000223 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:53, Info                  CSI    00000224 [SR] Verify complete
2020-02-13 11:13:53, Info                  CSI    00000225 [SR] Verifying 100 components
2020-02-13 11:13:53, Info                  CSI    00000226 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:56, Info                  CSI    00000227 [SR] Verify complete
2020-02-13 11:13:56, Info                  CSI    00000228 [SR] Verifying 100 components
2020-02-13 11:13:56, Info                  CSI    00000229 [SR] Beginning Verify and Repair transaction
2020-02-13 11:13:59, Info                  CSI    0000022b [SR] Verify complete
2020-02-13 11:13:59, Info                  CSI    0000022c [SR] Verifying 100 components
2020-02-13 11:13:59, Info                  CSI    0000022d [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:02, Info                  CSI    0000022e [SR] Verify complete
2020-02-13 11:14:02, Info                  CSI    0000022f [SR] Verifying 100 components
2020-02-13 11:14:02, Info                  CSI    00000230 [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:06, Info                  CSI    00000231 [SR] Verify complete
2020-02-13 11:14:06, Info                  CSI    00000232 [SR] Verifying 100 components
2020-02-13 11:14:06, Info                  CSI    00000233 [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:10, Info                  CSI    00000234 [SR] Verify complete
2020-02-13 11:14:11, Info                  CSI    00000235 [SR] Verifying 100 components
2020-02-13 11:14:11, Info                  CSI    00000236 [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:13, Info                  CSI    00000237 [SR] Verify complete
2020-02-13 11:14:13, Info                  CSI    00000238 [SR] Verifying 100 components
2020-02-13 11:14:13, Info                  CSI    00000239 [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:16, Info                  CSI    0000023a [SR] Verify complete
2020-02-13 11:14:16, Info                  CSI    0000023b [SR] Verifying 100 components
2020-02-13 11:14:16, Info                  CSI    0000023c [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:19, Info                  CSI    0000023d [SR] Verify complete
2020-02-13 11:14:19, Info                  CSI    0000023e [SR] Verifying 100 components
2020-02-13 11:14:19, Info                  CSI    0000023f [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:21, Info                  CSI    00000241 [SR] Verify complete
2020-02-13 11:14:21, Info                  CSI    00000242 [SR] Verifying 100 components
2020-02-13 11:14:21, Info                  CSI    00000243 [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:23, Info                  CSI    00000244 [SR] Verify complete
2020-02-13 11:14:23, Info                  CSI    00000245 [SR] Verifying 100 components
2020-02-13 11:14:23, Info                  CSI    00000246 [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:26, Info                  CSI    00000247 [SR] Verify complete
2020-02-13 11:14:26, Info                  CSI    00000248 [SR] Verifying 41 components
2020-02-13 11:14:26, Info                  CSI    00000249 [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:27, Info                  CSI    0000024a [SR] Verify complete
2020-02-13 11:14:27, Info                  CSI    0000024b [SR] Repairing 0 components
2020-02-13 11:14:27, Info                  CSI    0000024c [SR] Beginning Verify and Repair transaction
2020-02-13 11:14:27, Info                  CSI    0000024d [SR] Repair complete
2020-02-15 16:13:40, Info                  CSI    0000000f [SR] Verifying 100 components
2020-02-15 16:13:40, Info                  CSI    00000010 [SR] Beginning Verify and Repair transaction
2020-02-15 16:13:40, Info                  CSI    00000011 [SR] Verify complete
2020-02-15 16:13:40, Info                  CSI    00000012 [SR] Verifying 100 components
2020-02-15 16:13:40, Info                  CSI    00000013 [SR] Beginning Verify and Repair transaction
2020-02-15 16:13:42, Info                  CSI    00000015 [SR] Verify complete
2020-02-15 16:13:42, Info                  CSI    00000016 [SR] Verifying 100 components
2020-02-15 16:13:42, Info                  CSI    00000017 [SR] Beginning Verify and Repair transaction
2020-02-15 16:13:43, Info                  CSI    00000018 [SR] Verify complete
2020-02-15 16:13:43, Info                  CSI    00000019 [SR] Verifying 100 components
2020-02-15 16:13:43, Info                  CSI    0000001a [SR] Beginning Verify and Repair transaction
2020-02-15 16:13:45, Info                  CSI    0000001b [SR] Verify complete
2020-02-15 16:13:45, Info                  CSI    0000001c [SR] Verifying 100 components
2020-02-15 16:13:45, Info                  CSI    0000001d [SR] Beginning Verify and Repair transaction
2020-02-15 16:13:47, Info                  CSI    0000001e [SR] Verify complete
2020-02-15 16:13:47, Info                  CSI    0000001f [SR] Verifying 100 components
2020-02-15 16:13:47, Info                  CSI    00000020 [SR] Beginning Verify and Repair transaction
2020-02-15 16:13:51, Info                  CSI    00000021 [SR] Verify complete
2020-02-15 16:13:51, Info                  CSI    00000022 [SR] Verifying 100 components
2020-02-15 16:13:51, Info                  CSI    00000023 [SR] Beginning Verify and Repair transaction
2020-02-15 16:13:54, Info                  CSI    00000024 [SR] Verify complete
2020-02-15 16:13:54, Info                  CSI    00000025 [SR] Verifying 100 components
2020-02-15 16:13:54, Info                  CSI    00000026 [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:01, Info                  CSI    00000027 [SR] Verify complete
2020-02-15 16:14:01, Info                  CSI    00000028 [SR] Verifying 100 components
2020-02-15 16:14:01, Info                  CSI    00000029 [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:14, Info                  CSI    0000002a [SR] Verify complete
2020-02-15 16:14:14, Info                  CSI    0000002b [SR] Verifying 100 components
2020-02-15 16:14:14, Info                  CSI    0000002c [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:18, Info                  CSI    0000002d [SR] Verify complete
2020-02-15 16:14:18, Info                  CSI    0000002e [SR] Verifying 100 components
2020-02-15 16:14:18, Info                  CSI    0000002f [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:20, Info                  CSI    00000030 [SR] Verify complete
2020-02-15 16:14:20, Info                  CSI    00000031 [SR] Verifying 100 components
2020-02-15 16:14:20, Info                  CSI    00000032 [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:21, Info                  CSI    00000033 [SR] Verify complete
2020-02-15 16:14:22, Info                  CSI    00000034 [SR] Verifying 100 components
2020-02-15 16:14:22, Info                  CSI    00000035 [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:26, Info                  CSI    00000037 [SR] Verify complete
2020-02-15 16:14:26, Info                  CSI    00000038 [SR] Verifying 100 components
2020-02-15 16:14:26, Info                  CSI    00000039 [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:27, Info                  CSI    0000003a [SR] Verify complete
2020-02-15 16:14:27, Info                  CSI    0000003b [SR] Verifying 100 components
2020-02-15 16:14:27, Info                  CSI    0000003c [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:31, Info                  CSI    0000003d [SR] Verify complete
2020-02-15 16:14:31, Info                  CSI    0000003e [SR] Verifying 100 components
2020-02-15 16:14:31, Info                  CSI    0000003f [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:35, Info                  CSI    00000040 [SR] Verify complete
2020-02-15 16:14:35, Info                  CSI    00000041 [SR] Verifying 100 components
2020-02-15 16:14:35, Info                  CSI    00000042 [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:38, Info                  CSI    00000043 [SR] Verify complete
2020-02-15 16:14:39, Info                  CSI    00000044 [SR] Verifying 100 components
2020-02-15 16:14:39, Info                  CSI    00000045 [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:43, Info                  CSI    00000046 [SR] Verify complete
2020-02-15 16:14:43, Info                  CSI    00000047 [SR] Verifying 100 components
2020-02-15 16:14:43, Info                  CSI    00000048 [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:46, Info                  CSI    00000049 [SR] Verify complete
2020-02-15 16:14:46, Info                  CSI    0000004a [SR] Verifying 100 components
2020-02-15 16:14:46, Info                  CSI    0000004b [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:49, Info                  CSI    0000004c [SR] Verify complete
2020-02-15 16:14:49, Info                  CSI    0000004d [SR] Verifying 100 components
2020-02-15 16:14:49, Info                  CSI    0000004e [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:52, Info                  CSI    0000004f [SR] Verify complete
2020-02-15 16:14:53, Info                  CSI    00000050 [SR] Verifying 100 components
2020-02-15 16:14:53, Info                  CSI    00000051 [SR] Beginning Verify and Repair transaction
2020-02-15 16:14:57, Info                  CSI    00000052 [SR] Verify complete
2020-02-15 16:14:57, Info                  CSI    00000053 [SR] Verifying 100 components
2020-02-15 16:14:57, Info                  CSI    00000054 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:08, Info                  CSI    00000057 [SR] Verify complete
2020-02-15 16:15:08, Info                  CSI    00000058 [SR] Verifying 100 components
2020-02-15 16:15:08, Info                  CSI    00000059 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:12, Info                  CSI    0000005a [SR] Verify complete
2020-02-15 16:15:12, Info                  CSI    0000005b [SR] Verifying 100 components
2020-02-15 16:15:12, Info                  CSI    0000005c [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:16, Info                  CSI    0000005d [SR] Verify complete
2020-02-15 16:15:16, Info                  CSI    0000005e [SR] Verifying 100 components
2020-02-15 16:15:16, Info                  CSI    0000005f [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:18, Info                  CSI    00000060 [SR] Verify complete
2020-02-15 16:15:18, Info                  CSI    00000061 [SR] Verifying 100 components
2020-02-15 16:15:18, Info                  CSI    00000062 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:20, Info                  CSI    00000063 [SR] Verify complete
2020-02-15 16:15:20, Info                  CSI    00000064 [SR] Verifying 100 components
2020-02-15 16:15:20, Info                  CSI    00000065 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:24, Info                  CSI    00000067 [SR] Verify complete
2020-02-15 16:15:24, Info                  CSI    00000068 [SR] Verifying 100 components
2020-02-15 16:15:24, Info                  CSI    00000069 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:26, Info                  CSI    0000006a [SR] Verify complete
2020-02-15 16:15:26, Info                  CSI    0000006b [SR] Verifying 100 components
2020-02-15 16:15:26, Info                  CSI    0000006c [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:28, Info                  CSI    0000006d [SR] Verify complete
2020-02-15 16:15:28, Info                  CSI    0000006e [SR] Verifying 100 components
2020-02-15 16:15:28, Info                  CSI    0000006f [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:30, Info                  CSI    00000070 [SR] Verify complete
2020-02-15 16:15:30, Info                  CSI    00000071 [SR] Verifying 100 components
2020-02-15 16:15:30, Info                  CSI    00000072 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:34, Info                  CSI    00000073 [SR] Verify complete
2020-02-15 16:15:34, Info                  CSI    00000074 [SR] Verifying 100 components
2020-02-15 16:15:34, Info                  CSI    00000075 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:37, Info                  CSI    00000076 [SR] Verify complete
2020-02-15 16:15:37, Info                  CSI    00000077 [SR] Verifying 100 components
2020-02-15 16:15:37, Info                  CSI    00000078 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:40, Info                  CSI    0000007a [SR] Verify complete
2020-02-15 16:15:40, Info                  CSI    0000007b [SR] Verifying 100 components
2020-02-15 16:15:40, Info                  CSI    0000007c [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:44, Info                  CSI    0000007e [SR] Verify complete
2020-02-15 16:15:44, Info                  CSI    0000007f [SR] Verifying 100 components
2020-02-15 16:15:44, Info                  CSI    00000080 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:47, Info                  CSI    00000081 [SR] Verify complete
2020-02-15 16:15:47, Info                  CSI    00000082 [SR] Verifying 100 components
2020-02-15 16:15:47, Info                  CSI    00000083 [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:52, Info                  CSI    00000088 [SR] Verify complete
2020-02-15 16:15:52, Info                  CSI    00000089 [SR] Verifying 100 components
2020-02-15 16:15:52, Info                  CSI    0000008a [SR] Beginning Verify and Repair transaction
2020-02-15 16:15:59, Info                  CSI    0000008c [SR] Verify complete
2020-02-15 16:15:59, Info                  CSI    0000008d [SR] Verifying 100 components
2020-02-15 16:15:59, Info                  CSI    0000008e [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:07, Info                  CSI    00000093 [SR] Verify complete
2020-02-15 16:16:07, Info                  CSI    00000094 [SR] Verifying 100 components
2020-02-15 16:16:07, Info                  CSI    00000095 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:09, Info                  CSI    00000096 [SR] Verify complete
2020-02-15 16:16:09, Info                  CSI    00000097 [SR] Verifying 100 components
2020-02-15 16:16:09, Info                  CSI    00000098 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:11, Info                  CSI    00000099 [SR] Verify complete
2020-02-15 16:16:11, Info                  CSI    0000009a [SR] Verifying 100 components
2020-02-15 16:16:11, Info                  CSI    0000009b [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:16, Info                  CSI    0000009e [SR] Verify complete
2020-02-15 16:16:16, Info                  CSI    0000009f [SR] Verifying 100 components
2020-02-15 16:16:16, Info                  CSI    000000a0 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:20, Info                  CSI    000000a1 [SR] Verify complete
2020-02-15 16:16:20, Info                  CSI    000000a2 [SR] Verifying 100 components
2020-02-15 16:16:20, Info                  CSI    000000a3 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:22, Info                  CSI    000000a4 [SR] Verify complete
2020-02-15 16:16:22, Info                  CSI    000000a5 [SR] Verifying 100 components
2020-02-15 16:16:22, Info                  CSI    000000a6 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:24, Info                  CSI    000000a7 [SR] Verify complete
2020-02-15 16:16:24, Info                  CSI    000000a8 [SR] Verifying 100 components
2020-02-15 16:16:24, Info                  CSI    000000a9 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:28, Info                  CSI    000000ab [SR] Verify complete
2020-02-15 16:16:28, Info                  CSI    000000ac [SR] Verifying 100 components
2020-02-15 16:16:28, Info                  CSI    000000ad [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:32, Info                  CSI    000000af [SR] Verify complete
2020-02-15 16:16:32, Info                  CSI    000000b0 [SR] Verifying 100 components
2020-02-15 16:16:32, Info                  CSI    000000b1 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:38, Info                  CSI    000000b4 [SR] Verify complete
2020-02-15 16:16:38, Info                  CSI    000000b5 [SR] Verifying 100 components
2020-02-15 16:16:38, Info                  CSI    000000b6 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:41, Info                  CSI    000000b7 [SR] Verify complete
2020-02-15 16:16:41, Info                  CSI    000000b8 [SR] Verifying 100 components
2020-02-15 16:16:41, Info                  CSI    000000b9 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:43, Info                  CSI    000000ba [SR] Verify complete
2020-02-15 16:16:43, Info                  CSI    000000bb [SR] Verifying 100 components
2020-02-15 16:16:43, Info                  CSI    000000bc [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:46, Info                  CSI    000000bd [SR] Verify complete
2020-02-15 16:16:46, Info                  CSI    000000be [SR] Verifying 100 components
2020-02-15 16:16:46, Info                  CSI    000000bf [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:51, Info                  CSI    000000c0 [SR] Verify complete
2020-02-15 16:16:51, Info                  CSI    000000c1 [SR] Verifying 100 components
2020-02-15 16:16:51, Info                  CSI    000000c2 [SR] Beginning Verify and Repair transaction
2020-02-15 16:16:55, Info                  CSI    000000c3 [SR] Verify complete
2020-02-15 16:16:55, Info                  CSI    000000c4 [SR] Verifying 100 components
2020-02-15 16:16:55, Info                  CSI    000000c5 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:01, Info                  CSI    000000c7 [SR] Verify complete
2020-02-15 16:17:01, Info                  CSI    000000c8 [SR] Verifying 100 components
2020-02-15 16:17:01, Info                  CSI    000000c9 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:05, Info                  CSI    000000cb [SR] Verify complete
2020-02-15 16:17:06, Info                  CSI    000000cc [SR] Verifying 100 components
2020-02-15 16:17:06, Info                  CSI    000000cd [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:16, Info                  CSI    000000d1 [SR] Verify complete
2020-02-15 16:17:17, Info                  CSI    000000d2 [SR] Verifying 100 components
2020-02-15 16:17:17, Info                  CSI    000000d3 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:19, Info                  CSI    000000d4 [SR] Verify complete
2020-02-15 16:17:19, Info                  CSI    000000d5 [SR] Verifying 100 components
2020-02-15 16:17:19, Info                  CSI    000000d6 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:23, Info                  CSI    000000d7 [SR] Verify complete
2020-02-15 16:17:23, Info                  CSI    000000d8 [SR] Verifying 100 components
2020-02-15 16:17:23, Info                  CSI    000000d9 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:26, Info                  CSI    000000da [SR] Verify complete
2020-02-15 16:17:26, Info                  CSI    000000db [SR] Verifying 100 components
2020-02-15 16:17:26, Info                  CSI    000000dc [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:30, Info                  CSI    000000dd [SR] Verify complete
2020-02-15 16:17:30, Info                  CSI    000000de [SR] Verifying 100 components
2020-02-15 16:17:30, Info                  CSI    000000df [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:33, Info                  CSI    000000e0 [SR] Verify complete
2020-02-15 16:17:33, Info                  CSI    000000e1 [SR] Verifying 100 components
2020-02-15 16:17:33, Info                  CSI    000000e2 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:37, Info                  CSI    000000e3 [SR] Verify complete
2020-02-15 16:17:37, Info                  CSI    000000e4 [SR] Verifying 100 components
2020-02-15 16:17:37, Info                  CSI    000000e5 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:41, Info                  CSI    000000e6 [SR] Verify complete
2020-02-15 16:17:41, Info                  CSI    000000e7 [SR] Verifying 100 components
2020-02-15 16:17:41, Info                  CSI    000000e8 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:43, Info                  CSI    000000e9 [SR] Verify complete
2020-02-15 16:17:44, Info                  CSI    000000ea [SR] Verifying 100 components
2020-02-15 16:17:44, Info                  CSI    000000eb [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:46, Info                  CSI    000000ec [SR] Verify complete
2020-02-15 16:17:47, Info                  CSI    000000ed [SR] Verifying 100 components
2020-02-15 16:17:47, Info                  CSI    000000ee [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:50, Info                  CSI    000000ef [SR] Verify complete
2020-02-15 16:17:50, Info                  CSI    000000f0 [SR] Verifying 100 components
2020-02-15 16:17:50, Info                  CSI    000000f1 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:54, Info                  CSI    000000f2 [SR] Verify complete
2020-02-15 16:17:54, Info                  CSI    000000f3 [SR] Verifying 100 components
2020-02-15 16:17:54, Info                  CSI    000000f4 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:56, Info                  CSI    000000f5 [SR] Verify complete
2020-02-15 16:17:56, Info                  CSI    000000f6 [SR] Verifying 100 components
2020-02-15 16:17:56, Info                  CSI    000000f7 [SR] Beginning Verify and Repair transaction
2020-02-15 16:17:59, Info                  CSI    000000f8 [SR] Verify complete
2020-02-15 16:17:59, Info                  CSI    000000f9 [SR] Verifying 100 components
2020-02-15 16:17:59, Info                  CSI    000000fa [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:01, Info                  CSI    000000fb [SR] Verify complete
2020-02-15 16:18:01, Info                  CSI    000000fc [SR] Verifying 100 components
2020-02-15 16:18:01, Info                  CSI    000000fd [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:04, Info                  CSI    000000fe [SR] Verify complete
2020-02-15 16:18:04, Info                  CSI    000000ff [SR] Verifying 100 components
2020-02-15 16:18:04, Info                  CSI    00000100 [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:08, Info                  CSI    00000101 [SR] Verify complete
2020-02-15 16:18:08, Info                  CSI    00000102 [SR] Verifying 100 components
2020-02-15 16:18:08, Info                  CSI    00000103 [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:11, Info                  CSI    00000104 [SR] Verify complete
2020-02-15 16:18:11, Info                  CSI    00000105 [SR] Verifying 100 components
2020-02-15 16:18:11, Info                  CSI    00000106 [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:14, Info                  CSI    00000107 [SR] Verify complete
2020-02-15 16:18:14, Info                  CSI    00000108 [SR] Verifying 100 components
2020-02-15 16:18:14, Info                  CSI    00000109 [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:17, Info                  CSI    0000010a [SR] Verify complete
2020-02-15 16:18:17, Info                  CSI    0000010b [SR] Verifying 100 components
2020-02-15 16:18:17, Info                  CSI    0000010c [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:20, Info                  CSI    0000010d [SR] Verify complete
2020-02-15 16:18:20, Info                  CSI    0000010e [SR] Verifying 100 components
2020-02-15 16:18:20, Info                  CSI    0000010f [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:26, Info                  CSI    00000112 [SR] Verify complete
2020-02-15 16:18:26, Info                  CSI    00000113 [SR] Verifying 100 components
2020-02-15 16:18:26, Info                  CSI    00000114 [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:30, Info                  CSI    00000115 [SR] Verify complete
2020-02-15 16:18:30, Info                  CSI    00000116 [SR] Verifying 100 components
2020-02-15 16:18:30, Info                  CSI    00000117 [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:38, Info                  CSI    0000011d [SR] Verify complete
2020-02-15 16:18:38, Info                  CSI    0000011e [SR] Verifying 100 components
2020-02-15 16:18:38, Info                  CSI    0000011f [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:47, Info                  CSI    00000122 [SR] Verify complete
2020-02-15 16:18:47, Info                  CSI    00000123 [SR] Verifying 100 components
2020-02-15 16:18:47, Info                  CSI    00000124 [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:51, Info                  CSI    00000125 [SR] Verify complete
2020-02-15 16:18:51, Info                  CSI    00000126 [SR] Verifying 100 components
2020-02-15 16:18:51, Info                  CSI    00000127 [SR] Beginning Verify and Repair transaction
2020-02-15 16:18:55, Info                  CSI    00000129 [SR] Verify complete
2020-02-15 16:18:55, Info                  CSI    0000012a [SR] Verifying 100 components
2020-02-15 16:18:55, Info                  CSI    0000012b [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:01, Info                  CSI    0000012e [SR] Verify complete
2020-02-15 16:19:01, Info                  CSI    0000012f [SR] Verifying 100 components
2020-02-15 16:19:01, Info                  CSI    00000130 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:04, Info                  CSI    00000131 [SR] Verify complete
2020-02-15 16:19:04, Info                  CSI    00000132 [SR] Verifying 100 components
2020-02-15 16:19:04, Info                  CSI    00000133 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:08, Info                  CSI    00000134 [SR] Verify complete
2020-02-15 16:19:08, Info                  CSI    00000135 [SR] Verifying 100 components
2020-02-15 16:19:08, Info                  CSI    00000136 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:12, Info                  CSI    00000137 [SR] Verify complete
2020-02-15 16:19:12, Info                  CSI    00000138 [SR] Verifying 100 components
2020-02-15 16:19:12, Info                  CSI    00000139 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:18, Info                  CSI    0000013c [SR] Verify complete
2020-02-15 16:19:18, Info                  CSI    0000013d [SR] Verifying 100 components
2020-02-15 16:19:18, Info                  CSI    0000013e [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:21, Info                  CSI    0000013f [SR] Verify complete
2020-02-15 16:19:21, Info                  CSI    00000140 [SR] Verifying 100 components
2020-02-15 16:19:21, Info                  CSI    00000141 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:24, Info                  CSI    00000142 [SR] Verify complete
2020-02-15 16:19:24, Info                  CSI    00000143 [SR] Verifying 100 components
2020-02-15 16:19:24, Info                  CSI    00000144 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:26, Info                  CSI    00000145 [SR] Verify complete
2020-02-15 16:19:27, Info                  CSI    00000146 [SR] Verifying 100 components
2020-02-15 16:19:27, Info                  CSI    00000147 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:29, Info                  CSI    00000148 [SR] Verify complete
2020-02-15 16:19:29, Info                  CSI    00000149 [SR] Verifying 100 components
2020-02-15 16:19:29, Info                  CSI    0000014a [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:33, Info                  CSI    0000014c [SR] Verify complete
2020-02-15 16:19:33, Info                  CSI    0000014d [SR] Verifying 100 components
2020-02-15 16:19:33, Info                  CSI    0000014e [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:37, Info                  CSI    0000014f [SR] Verify complete
2020-02-15 16:19:37, Info                  CSI    00000150 [SR] Verifying 100 components
2020-02-15 16:19:37, Info                  CSI    00000151 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:40, Info                  CSI    00000152 [SR] Verify complete
2020-02-15 16:19:41, Info                  CSI    00000153 [SR] Verifying 100 components
2020-02-15 16:19:41, Info                  CSI    00000154 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:44, Info                  CSI    00000155 [SR] Verify complete
2020-02-15 16:19:44, Info                  CSI    00000156 [SR] Verifying 100 components
2020-02-15 16:19:44, Info                  CSI    00000157 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:48, Info                  CSI    00000158 [SR] Verify complete
2020-02-15 16:19:48, Info                  CSI    00000159 [SR] Verifying 100 components
2020-02-15 16:19:48, Info                  CSI    0000015a [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:51, Info                  CSI    0000015b [SR] Verify complete
2020-02-15 16:19:51, Info                  CSI    0000015c [SR] Verifying 100 components
2020-02-15 16:19:51, Info                  CSI    0000015d [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:54, Info                  CSI    0000015e [SR] Verify complete
2020-02-15 16:19:54, Info                  CSI    0000015f [SR] Verifying 100 components
2020-02-15 16:19:54, Info                  CSI    00000160 [SR] Beginning Verify and Repair transaction
2020-02-15 16:19:57, Info                  CSI    00000161 [SR] Verify complete
2020-02-15 16:19:57, Info                  CSI    00000162 [SR] Verifying 100 components
2020-02-15 16:19:57, Info                  CSI    00000163 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:01, Info                  CSI    00000165 [SR] Verify complete
2020-02-15 16:20:01, Info                  CSI    00000166 [SR] Verifying 100 components
2020-02-15 16:20:01, Info                  CSI    00000167 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:04, Info                  CSI    00000168 [SR] Verify complete
2020-02-15 16:20:04, Info                  CSI    00000169 [SR] Verifying 100 components
2020-02-15 16:20:04, Info                  CSI    0000016a [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:06, Info                  CSI    0000016c [SR] Verify complete
2020-02-15 16:20:06, Info                  CSI    0000016d [SR] Verifying 100 components
2020-02-15 16:20:06, Info                  CSI    0000016e [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:09, Info                  CSI    00000170 [SR] Verify complete
2020-02-15 16:20:09, Info                  CSI    00000171 [SR] Verifying 100 components
2020-02-15 16:20:09, Info                  CSI    00000172 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:11, Info                  CSI    00000173 [SR] Verify complete
2020-02-15 16:20:11, Info                  CSI    00000174 [SR] Verifying 100 components
2020-02-15 16:20:11, Info                  CSI    00000175 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:13, Info                  CSI    00000176 [SR] Verify complete
2020-02-15 16:20:13, Info                  CSI    00000177 [SR] Verifying 100 components
2020-02-15 16:20:13, Info                  CSI    00000178 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:15, Info                  CSI    00000179 [SR] Verify complete
2020-02-15 16:20:15, Info                  CSI    0000017a [SR] Verifying 100 components
2020-02-15 16:20:15, Info                  CSI    0000017b [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:18, Info                  CSI    0000017c [SR] Verify complete
2020-02-15 16:20:18, Info                  CSI    0000017d [SR] Verifying 100 components
2020-02-15 16:20:18, Info                  CSI    0000017e [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:20, Info                  CSI    0000017f [SR] Verify complete
2020-02-15 16:20:20, Info                  CSI    00000180 [SR] Verifying 100 components
2020-02-15 16:20:20, Info                  CSI    00000181 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:23, Info                  CSI    00000182 [SR] Verify complete
2020-02-15 16:20:23, Info                  CSI    00000183 [SR] Verifying 100 components
2020-02-15 16:20:23, Info                  CSI    00000184 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:25, Info                  CSI    00000185 [SR] Verify complete
2020-02-15 16:20:25, Info                  CSI    00000186 [SR] Verifying 100 components
2020-02-15 16:20:25, Info                  CSI    00000187 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:28, Info                  CSI    00000188 [SR] Verify complete
2020-02-15 16:20:28, Info                  CSI    00000189 [SR] Verifying 100 components
2020-02-15 16:20:28, Info                  CSI    0000018a [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:31, Info                  CSI    0000018b [SR] Verify complete
2020-02-15 16:20:31, Info                  CSI    0000018c [SR] Verifying 100 components
2020-02-15 16:20:31, Info                  CSI    0000018d [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:35, Info                  CSI    0000018f [SR] Verify complete
2020-02-15 16:20:35, Info                  CSI    00000190 [SR] Verifying 100 components
2020-02-15 16:20:35, Info                  CSI    00000191 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:37, Info                  CSI    00000192 [SR] Verify complete
2020-02-15 16:20:38, Info                  CSI    00000193 [SR] Verifying 100 components
2020-02-15 16:20:38, Info                  CSI    00000194 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:40, Info                  CSI    00000195 [SR] Verify complete
2020-02-15 16:20:40, Info                  CSI    00000196 [SR] Verifying 100 components
2020-02-15 16:20:40, Info                  CSI    00000197 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:42, Info                  CSI    00000198 [SR] Verify complete
2020-02-15 16:20:42, Info                  CSI    00000199 [SR] Verifying 100 components
2020-02-15 16:20:42, Info                  CSI    0000019a [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:45, Info                  CSI    0000019b [SR] Verify complete
2020-02-15 16:20:45, Info                  CSI    0000019c [SR] Verifying 100 components
2020-02-15 16:20:45, Info                  CSI    0000019d [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:47, Info                  CSI    0000019e [SR] Verify complete
2020-02-15 16:20:47, Info                  CSI    0000019f [SR] Verifying 100 components
2020-02-15 16:20:47, Info                  CSI    000001a0 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:49, Info                  CSI    000001a1 [SR] Verify complete
2020-02-15 16:20:49, Info                  CSI    000001a2 [SR] Verifying 100 components
2020-02-15 16:20:49, Info                  CSI    000001a3 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:52, Info                  CSI    000001a4 [SR] Verify complete
2020-02-15 16:20:52, Info                  CSI    000001a5 [SR] Verifying 100 components
2020-02-15 16:20:52, Info                  CSI    000001a6 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:54, Info                  CSI    000001a7 [SR] Verify complete
2020-02-15 16:20:54, Info                  CSI    000001a8 [SR] Verifying 100 components
2020-02-15 16:20:54, Info                  CSI    000001a9 [SR] Beginning Verify and Repair transaction
2020-02-15 16:20:58, Info                  CSI    000001ab [SR] Verify complete
2020-02-15 16:20:58, Info                  CSI    000001ac [SR] Verifying 100 components
2020-02-15 16:20:58, Info                  CSI    000001ad [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:01, Info                  CSI    000001ae [SR] Verify complete
2020-02-15 16:21:01, Info                  CSI    000001af [SR] Verifying 100 components
2020-02-15 16:21:01, Info                  CSI    000001b0 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:04, Info                  CSI    000001b1 [SR] Verify complete
2020-02-15 16:21:04, Info                  CSI    000001b2 [SR] Verifying 100 components
2020-02-15 16:21:04, Info                  CSI    000001b3 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:07, Info                  CSI    000001b4 [SR] Verify complete
2020-02-15 16:21:07, Info                  CSI    000001b5 [SR] Verifying 100 components
2020-02-15 16:21:07, Info                  CSI    000001b6 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:10, Info                  CSI    000001b7 [SR] Verify complete
2020-02-15 16:21:10, Info                  CSI    000001b8 [SR] Verifying 100 components
2020-02-15 16:21:10, Info                  CSI    000001b9 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:12, Info                  CSI    000001ba [SR] Verify complete
2020-02-15 16:21:13, Info                  CSI    000001bb [SR] Verifying 100 components
2020-02-15 16:21:13, Info                  CSI    000001bc [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:15, Info                  CSI    000001bd [SR] Verify complete
2020-02-15 16:21:15, Info                  CSI    000001be [SR] Verifying 100 components
2020-02-15 16:21:15, Info                  CSI    000001bf [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:19, Info                  CSI    000001c0 [SR] Verify complete
2020-02-15 16:21:19, Info                  CSI    000001c1 [SR] Verifying 100 components
2020-02-15 16:21:19, Info                  CSI    000001c2 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:22, Info                  CSI    000001c3 [SR] Verify complete
2020-02-15 16:21:22, Info                  CSI    000001c4 [SR] Verifying 100 components
2020-02-15 16:21:22, Info                  CSI    000001c5 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:24, Info                  CSI    000001ca [SR] Verify complete
2020-02-15 16:21:25, Info                  CSI    000001cb [SR] Verifying 100 components
2020-02-15 16:21:25, Info                  CSI    000001cc [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:27, Info                  CSI    000001cd [SR] Verify complete
2020-02-15 16:21:27, Info                  CSI    000001ce [SR] Verifying 100 components
2020-02-15 16:21:27, Info                  CSI    000001cf [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:29, Info                  CSI    000001d0 [SR] Verify complete
2020-02-15 16:21:29, Info                  CSI    000001d1 [SR] Verifying 100 components
2020-02-15 16:21:29, Info                  CSI    000001d2 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:30, Info                  CSI    000001d3 [SR] Verify complete
2020-02-15 16:21:30, Info                  CSI    000001d4 [SR] Verifying 100 components
2020-02-15 16:21:30, Info                  CSI    000001d5 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:32, Info                  CSI    000001d6 [SR] Verify complete
2020-02-15 16:21:33, Info                  CSI    000001d7 [SR] Verifying 100 components
2020-02-15 16:21:33, Info                  CSI    000001d8 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:37, Info                  CSI    000001db [SR] Verify complete
2020-02-15 16:21:37, Info                  CSI    000001dc [SR] Verifying 100 components
2020-02-15 16:21:37, Info                  CSI    000001dd [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:39, Info                  CSI    000001de [SR] Verify complete
2020-02-15 16:21:39, Info                  CSI    000001df [SR] Verifying 100 components
2020-02-15 16:21:39, Info                  CSI    000001e0 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:43, Info                  CSI    000001e1 [SR] Verify complete
2020-02-15 16:21:43, Info                  CSI    000001e2 [SR] Verifying 100 components
2020-02-15 16:21:43, Info                  CSI    000001e3 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:46, Info                  CSI    000001e5 [SR] Verify complete
2020-02-15 16:21:46, Info                  CSI    000001e6 [SR] Verifying 100 components
2020-02-15 16:21:46, Info                  CSI    000001e7 [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:50, Info                  CSI    000001e8 [SR] Verify complete
2020-02-15 16:21:50, Info                  CSI    000001e9 [SR] Verifying 100 components
2020-02-15 16:21:50, Info                  CSI    000001ea [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:53, Info                  CSI    000001eb [SR] Verify complete
2020-02-15 16:21:54, Info                  CSI    000001ec [SR] Verifying 100 components
2020-02-15 16:21:54, Info                  CSI    000001ed [SR] Beginning Verify and Repair transaction
2020-02-15 16:21:57, Info                  CSI    000001ef [SR] Verify complete
2020-02-15 16:21:57, Info                  CSI    000001f0 [SR] Verifying 100 components
2020-02-15 16:21:57, Info                  CSI    000001f1 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:00, Info                  CSI    000001f2 [SR] Verify complete
2020-02-15 16:22:00, Info                  CSI    000001f3 [SR] Verifying 100 components
2020-02-15 16:22:00, Info                  CSI    000001f4 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:02, Info                  CSI    000001f5 [SR] Verify complete
2020-02-15 16:22:02, Info                  CSI    000001f6 [SR] Verifying 100 components
2020-02-15 16:22:02, Info                  CSI    000001f7 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:05, Info                  CSI    000001f8 [SR] Verify complete
2020-02-15 16:22:06, Info                  CSI    000001f9 [SR] Verifying 100 components
2020-02-15 16:22:06, Info                  CSI    000001fa [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:08, Info                  CSI    000001fb [SR] Verify complete
2020-02-15 16:22:08, Info                  CSI    000001fc [SR] Verifying 100 components
2020-02-15 16:22:08, Info                  CSI    000001fd [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:12, Info                  CSI    000001fe [SR] Verify complete
2020-02-15 16:22:12, Info                  CSI    000001ff [SR] Verifying 100 components
2020-02-15 16:22:12, Info                  CSI    00000200 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:15, Info                  CSI    00000205 [SR] Verify complete
2020-02-15 16:22:16, Info                  CSI    00000206 [SR] Verifying 100 components
2020-02-15 16:22:16, Info                  CSI    00000207 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:19, Info                  CSI    00000208 [SR] Verify complete
2020-02-15 16:22:19, Info                  CSI    00000209 [SR] Verifying 100 components
2020-02-15 16:22:19, Info                  CSI    0000020a [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:22, Info                  CSI    0000020b [SR] Verify complete
2020-02-15 16:22:22, Info                  CSI    0000020c [SR] Verifying 100 components
2020-02-15 16:22:22, Info                  CSI    0000020d [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:26, Info                  CSI    0000020e [SR] Verify complete
2020-02-15 16:22:26, Info                  CSI    0000020f [SR] Verifying 100 components
2020-02-15 16:22:26, Info                  CSI    00000210 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:29, Info                  CSI    00000211 [SR] Verify complete
2020-02-15 16:22:29, Info                  CSI    00000212 [SR] Verifying 100 components
2020-02-15 16:22:29, Info                  CSI    00000213 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:32, Info                  CSI    00000215 [SR] Verify complete
2020-02-15 16:22:32, Info                  CSI    00000216 [SR] Verifying 100 components
2020-02-15 16:22:32, Info                  CSI    00000217 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:35, Info                  CSI    00000218 [SR] Verify complete
2020-02-15 16:22:35, Info                  CSI    00000219 [SR] Verifying 100 components
2020-02-15 16:22:35, Info                  CSI    0000021a [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:38, Info                  CSI    0000021b [SR] Verify complete
2020-02-15 16:22:38, Info                  CSI    0000021c [SR] Verifying 100 components
2020-02-15 16:22:38, Info                  CSI    0000021d [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:42, Info                  CSI    0000021e [SR] Verify complete
2020-02-15 16:22:42, Info                  CSI    0000021f [SR] Verifying 100 components
2020-02-15 16:22:42, Info                  CSI    00000220 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:47, Info                  CSI    00000221 [SR] Verify complete
2020-02-15 16:22:48, Info                  CSI    00000222 [SR] Verifying 100 components
2020-02-15 16:22:48, Info                  CSI    00000223 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:51, Info                  CSI    00000224 [SR] Verify complete
2020-02-15 16:22:51, Info                  CSI    00000225 [SR] Verifying 100 components
2020-02-15 16:22:51, Info                  CSI    00000226 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:54, Info                  CSI    00000227 [SR] Verify complete
2020-02-15 16:22:54, Info                  CSI    00000228 [SR] Verifying 100 components
2020-02-15 16:22:54, Info                  CSI    00000229 [SR] Beginning Verify and Repair transaction
2020-02-15 16:22:58, Info                  CSI    0000022a [SR] Verify complete
2020-02-15 16:22:58, Info                  CSI    0000022b [SR] Verifying 100 components
2020-02-15 16:22:58, Info                  CSI    0000022c [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:02, Info                  CSI    0000022d [SR] Verify complete
2020-02-15 16:23:02, Info                  CSI    0000022e [SR] Verifying 100 components
2020-02-15 16:23:02, Info                  CSI    0000022f [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:05, Info                  CSI    00000230 [SR] Verify complete
2020-02-15 16:23:05, Info                  CSI    00000231 [SR] Verifying 100 components
2020-02-15 16:23:05, Info                  CSI    00000232 [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:08, Info                  CSI    00000233 [SR] Verify complete
2020-02-15 16:23:08, Info                  CSI    00000234 [SR] Verifying 100 components
2020-02-15 16:23:08, Info                  CSI    00000235 [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:12, Info                  CSI    00000236 [SR] Verify complete
2020-02-15 16:23:12, Info                  CSI    00000237 [SR] Verifying 100 components
2020-02-15 16:23:12, Info                  CSI    00000238 [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:15, Info                  CSI    00000239 [SR] Verify complete
2020-02-15 16:23:15, Info                  CSI    0000023a [SR] Verifying 100 components
2020-02-15 16:23:15, Info                  CSI    0000023b [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:17, Info                  CSI    0000023d [SR] Verify complete
2020-02-15 16:23:17, Info                  CSI    0000023e [SR] Verifying 100 components
2020-02-15 16:23:17, Info                  CSI    0000023f [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:19, Info                  CSI    00000240 [SR] Verify complete
2020-02-15 16:23:19, Info                  CSI    00000241 [SR] Verifying 100 components
2020-02-15 16:23:19, Info                  CSI    00000242 [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:23, Info                  CSI    00000243 [SR] Verify complete
2020-02-15 16:23:23, Info                  CSI    00000244 [SR] Verifying 48 components
2020-02-15 16:23:23, Info                  CSI    00000245 [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:25, Info                  CSI    00000246 [SR] Verify complete
2020-02-15 16:23:25, Info                  CSI    00000247 [SR] Repairing 0 components
2020-02-15 16:23:25, Info                  CSI    00000248 [SR] Beginning Verify and Repair transaction
2020-02-15 16:23:25, Info                  CSI    00000249 [SR] Repair complete

========= End 1 CMD: =========


========= FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" =========

Failed to clear log Microsoft-Windows-LiveId/Analytic.
Access is denied.
Failed to clear log Microsoft-Windows-LiveId/Operational.
Access is denied.

========= End 1 CMD: =========



The system needed a reboot.

==== End 1 Fixlog 16:24:17 ====


  • 0

#19
bytesize

bytesize

    Member

  • Topic Starter
  • Member
  • PipPip
  • 60 posts

I am not happy with the cloned drive in the machine, everything seems slower, getting a bit frustrated if it had been my own machine would probably have done a fresh install by now. Don't think for a minute I do not appreciate all your time and efforts. I found an older crucial ssd 250gb not sure if I should try that.

 

Will post my FRST logs in next post


  • 0

#20
bytesize

bytesize

    Member

  • Topic Starter
  • Member
  • PipPip
  • 60 posts

Latest FRST logs

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-02-2020
Ran by Eddie (administrator) on EDDIEDELL (Dell Inc. Vostro 270) (15-02-2020 16:54:22)
Running from C:\Users\Eddie\Desktop
Loaded Profiles: Eddie (Available Profiles: Eddie)
Platform: Windows 10 Pro Version 1909 18363.657 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [DBRMTray] => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [227328 2011-03-08] (Dell Computer Corporation) [File not signed]
HKLM\...\Run: [flvga_tray64] => C:\Windows\system32\flvga_tray.exe [419328 2015-12-07] () [File not signed]
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [BdVpnApp] => C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe [456088 2019-10-13] (Bitdefender SRL -> Bitdefender)
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\Run: [VideoGuardMonitor] => C:\Users\Eddie\AppData\Local\Cisco\VideoGuardPlayer\VideoGuardMonitor\CiscoVideoGuardMonitor.exe [2345736 2017-11-02] (Cisco Video Technologies Israel Ltd. -> Cisco)
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\Run: [EPSON SX410 Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIFCE.EXE [223232 2008-10-02] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-22] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {053D1D96-34A1-43DB-A08C-42013752D3E2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-01] (Google Inc -> Google Inc.)
Task: {5681C43E-9E0F-4FBB-AF45-8126839219E0} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [490808 2019-11-27] (Bitdefender SRL -> Bitdefender)
Task: {C2B62A8D-6C26-466B-895F-C83C6BDFBB8E} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [525120 2019-12-06] (Bitdefender SRL -> Bitdefender)
Task: {E0AA4134-CDC5-47C0-AFAF-C7CDC34DBC40} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-01] (Google Inc -> Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.132.1
Tcpip\..\Interfaces\{7059D287-A263-4A16-854D-FFC987708542}: [DhcpNameServer] 192.168.132.1
Tcpip\..\Interfaces\{8C412334-6E80-4EC8-9F2B-E48E60423A89}: [DhcpNameServer] 194.168.4.100 194.168.8.100
Tcpip\..\Interfaces\{CCEB5E90-4E48-420A-A652-21003662E153}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.co.uk/
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=uk&l=en&s=gen
BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)

FireFox:
========
FF DefaultProfile: g6p9p80w.default
FF ProfilePath: C:\Users\Eddie\AppData\Roaming\Mozilla\Firefox\Profiles\g6p9p80w.default [2020-02-15]
FF NewTab: Mozilla\Firefox\Profiles\g6p9p80w.default -> about:home
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2019-12-06]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF Extension: (Bitdefender Anti-tracker) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi [2019-11-01]
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-01-08] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2020-02-13] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2020-02-13] <==== ATTENTION

Chrome:
=======
CHR Profile: C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default [2020-02-02]
CHR HomePage: Default -> hxxp://www.google.com
CHR Extension: (Slides) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-18]
CHR Extension: (Docs) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-13]
CHR Extension: (Google Drive) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-03]
CHR Extension: (YouTube) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-03]
CHR Extension: (Sheets) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-13]
CHR Extension: (Bitdefender Wallet) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2020-02-02]
CHR Extension: (Google Docs Offline) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-02-02]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2020-02-02]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-02-02]
CHR Extension: (Gmail) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-02]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AfVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\vpnservice.exe [322432 2019-06-04] (AnchorFree Inc -> AnchorFree Inc.)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [873560 2020-01-14] (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195344 2018-03-22] (Bitdefender SRL -> Bitdefender)
R2 BdVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnservice.exe [471120 2019-10-13] (Bitdefender SRL -> Bitdefender)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [119368 2019-12-06] (Bitdefender SRL -> Bitdefender)
S4 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [163840 2007-12-17] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
S4 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [126464 2007-01-11] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
S4 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [328608 2015-07-30] (Intel Corporation - pGFX -> Intel Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1329240 2020-01-15] (Bitdefender SRL -> Bitdefender)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2020-01-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [151656 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-06-15] (AnchorFree Inc -> The OpenVPN Project)
R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [38320 2017-09-01] (CHENGDU AOMEI Tech Co., Ltd. -> )
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1693368 2019-09-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
S3 athur; C:\WINDOWS\System32\DRIVERS\athurx.sys [1847296 2010-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [739264 2019-07-29] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-03-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2019-06-21] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96448 2018-04-27] (Bitdefender SRL -> BitDefender)
R0 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [564112 2019-11-07] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2018-11-28] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [196392 2019-07-04] (Bitdefender SRL -> Bitdefender)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [662528 2019-03-19] (Microsoft Windows -> Realtek )
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [610640 2019-01-14] (Bitdefender SRL -> Bitdefender)
U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [50176 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2020-01-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2020-01-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2020-01-29] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-15 16:54 - 2020-02-15 16:56 - 000016328 _____ C:\Users\Eddie\Desktop\FRST.txt
2020-02-15 16:02 - 2020-02-15 16:02 - 000080808 _____ C:\ProgramData\agent.update.1581782473.bdinstall.v2.bin
2020-02-15 15:48 - 2020-02-15 16:24 - 000178928 _____ C:\Users\Eddie\Desktop\Fixlog.txt
2020-02-15 12:16 - 2020-02-15 15:35 - 000000000 ____D C:\Users\Eddie\Desktop\Misc
2020-02-15 10:44 - 2020-02-15 11:04 - 000001024 ____H C:\SYSTAG.BIN
2020-02-15 10:43 - 2020-02-15 16:40 - 000000312 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat
2020-02-15 10:43 - 2020-02-15 16:40 - 000000150 _____ C:\WINDOWS\SysWOW64\winsevr.dat
2020-02-15 10:43 - 2020-02-15 10:43 - 000001136 _____ C:\Users\Public\Desktop\AOMEI Backupper Standard.lnk
2020-02-15 10:43 - 2020-02-15 10:43 - 000001136 _____ C:\ProgramData\Desktop\AOMEI Backupper Standard.lnk
2020-02-15 10:43 - 2020-02-15 10:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper
2020-02-15 10:43 - 2020-02-15 10:43 - 000000000 ____D C:\ProgramData\Aomei
2020-02-15 10:43 - 2017-09-01 18:12 - 000038320 _____ C:\WINDOWS\system32\amwrtdrv.sys
2020-02-15 10:43 - 2016-12-21 22:54 - 000051120 _____ C:\WINDOWS\system32\ambakdrv.sys
2020-02-15 10:43 - 2016-12-21 22:52 - 000171952 _____ C:\WINDOWS\system32\ammntdrv.sys
2020-02-15 10:42 - 2020-02-15 11:04 - 000000000 ____D C:\ProgramData\AomeiBR
2020-02-15 10:42 - 2020-02-15 11:04 - 000000000 ____D C:\Program Files (x86)\AOMEI Backupper
2020-02-15 09:54 - 2020-02-15 10:03 - 109524584 _____ (AOMEI Technology Co., Ltd. ) C:\Users\Eddie\Downloads\AOMEIBackupperStd.exe
2020-02-14 00:07 - 2020-02-14 00:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital Corporation
2020-02-14 00:07 - 2020-02-14 00:07 - 000000000 ____D C:\Program Files (x86)\Western Digital Corporation
2020-02-14 00:06 - 2020-02-14 00:07 - 000571159 _____ C:\Users\Eddie\Downloads\WinDlg_v1_36.zip
2020-02-13 12:43 - 2020-02-13 12:43 - 000000839 _____ C:\Users\Public\Desktop\Speccy.lnk
2020-02-13 12:43 - 2020-02-13 12:43 - 000000839 _____ C:\ProgramData\Desktop\Speccy.lnk
2020-02-13 12:43 - 2020-02-13 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2020-02-13 12:43 - 2020-02-13 12:43 - 000000000 ____D C:\Program Files\Speccy
2020-02-13 12:42 - 2020-02-13 12:43 - 006889184 _____ (Piriform Ltd) C:\Users\Eddie\Downloads\spsetup132.exe
2020-02-13 12:33 - 2020-02-13 12:33 - 000011342 _____ C:\junk.txt
2020-02-13 12:26 - 2020-02-13 12:26 - 000036192 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2020-02-13 12:25 - 2020-02-13 12:25 - 002798456 _____ (Sysinternals - www.sysinternals.com) C:\Users\Eddie\Desktop\procexp.exe
2020-02-13 09:54 - 2020-02-13 09:54 - 000073886 _____ C:\ProgramData\vpn.1581587617.bdinstall.bin
2020-02-13 09:53 - 2020-02-13 09:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender VPN
2020-02-13 09:53 - 2020-02-13 09:53 - 000000000 ____D C:\ProgramData\Bitdefender VPN
2020-02-13 09:53 - 2018-06-15 09:26 - 000048624 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\aftap0901.sys
2020-02-13 09:52 - 2020-02-13 09:52 - 000814764 _____ C:\ProgramData\cl.1581587183.bdinstall.v2.bin
2020-02-13 09:52 - 2020-02-13 09:52 - 000138752 _____ C:\ProgramData\dm.1581587556.bdinstall.v2.bin
2020-02-13 09:52 - 2020-02-13 09:52 - 000102260 _____ C:\ProgramData\cl.kit.1581587172.bdinstall.v2.bin
2020-02-13 09:52 - 2020-02-13 09:52 - 000003420 _____ C:\WINDOWS\system32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C
2020-02-13 09:49 - 2020-02-13 09:53 - 000002197 _____ C:\Users\Public\Desktop\Bitdefender VPN.lnk
2020-02-13 09:49 - 2020-02-13 09:53 - 000002197 _____ C:\ProgramData\Desktop\Bitdefender VPN.lnk
2020-02-13 09:49 - 2020-02-13 09:49 - 000002344 _____ C:\Users\Public\Desktop\Bitdefender.lnk
2020-02-13 09:49 - 2020-02-13 09:49 - 000002344 _____ C:\ProgramData\Desktop\Bitdefender.lnk
2020-02-13 09:49 - 2020-02-13 09:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security
2020-02-13 09:49 - 2019-03-21 00:12 - 000022960 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2020-02-13 09:48 - 2019-11-07 08:49 - 000564112 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2020-02-13 09:48 - 2019-09-23 08:43 - 001693368 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2020-02-13 09:48 - 2019-07-29 15:32 - 000739264 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2020-02-13 09:48 - 2019-06-21 07:30 - 000046056 _____ (© Bitdefender SRL) C:\WINDOWS\system32\Drivers\bdprivmon.sys
2020-02-13 09:48 - 2018-04-27 07:45 - 000096448 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2020-02-13 09:47 - 2020-02-13 09:53 - 000000000 ____D C:\Program Files\Bitdefender
2020-02-13 09:47 - 2019-07-04 11:15 - 000196392 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys
2020-02-13 09:47 - 2019-01-14 16:25 - 000610640 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\trufos.sys
2020-02-13 09:47 - 2018-11-28 05:45 - 000188384 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2020-02-13 09:46 - 2020-02-13 09:47 - 000000000 ____D C:\Program Files\Common Files\Bitdefender
2020-02-13 09:41 - 2020-02-13 09:41 - 000000000 ____D C:\ProgramData\ssh
2020-02-13 09:36 - 2020-02-13 09:36 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-02-13 09:36 - 2020-02-13 09:36 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-02-13 09:36 - 2020-02-13 09:36 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-02-13 09:36 - 2020-02-13 09:36 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-02-13 09:36 - 2020-02-13 09:36 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-02-13 09:36 - 2020-02-13 09:36 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-02-13 09:35 - 2020-02-13 09:36 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003969536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-02-13 09:17 - 2020-01-16 05:07 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-02-13 09:17 - 2020-01-16 04:23 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-11 18:05 - 2020-02-13 10:49 - 002279424 _____ (Farbar) C:\Users\Eddie\Desktop\FRST64.exe
2020-02-02 20:22 - 2020-02-02 20:22 - 000000080 ___SH C:\bootTel.dat
2020-02-02 10:20 - 2020-02-02 10:20 - 000000000 ____D C:\ProgramData\Bitdefender Device Management
2020-02-02 10:18 - 2020-02-02 10:18 - 000000000 ____D C:\ProgramData\Gemma
2020-02-02 10:18 - 2020-02-02 10:18 - 000000000 ____D C:\ProgramData\Atc
2020-02-02 10:17 - 2020-02-02 10:17 - 000000000 ____D C:\WINDOWS\system32\elambkup
2020-02-02 10:17 - 2020-02-02 10:17 - 000000000 ____D C:\ProgramData\BDLogging
2020-02-02 10:15 - 2020-02-13 09:52 - 000000000 ____D C:\Users\Eddie\AppData\Roaming\Bitdefender
2020-02-02 10:15 - 2020-02-02 10:43 - 000000000 ____D C:\ProgramData\Bitdefender
2020-02-02 10:08 - 2020-02-02 10:08 - 000003802 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2020-02-02 10:06 - 2020-02-15 16:02 - 000000000 ____D C:\Program Files\Bitdefender Agent
2020-02-02 10:06 - 2020-02-02 10:06 - 000113524 _____ C:\ProgramData\agent.1580637970.bdinstall.v2.bin
2020-02-02 10:06 - 2020-02-02 10:06 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2020-02-02 10:05 - 2020-02-02 10:05 - 012422992 _____ C:\Users\Eddie\Downloads\bitdefender_windows_d19acce7-90aa-4746-a6ad-21b2e4307aa2.exe
2020-01-31 17:47 - 2020-01-31 17:47 - 000000000 ____D C:\Users\Eddie\AppData\Local\PeerDistRepub
2020-01-31 17:10 - 2020-01-31 17:27 - 000000000 ____D C:\Users\Eddie\AppData\Local\D3DSCache
2020-01-31 16:35 - 2020-01-31 16:35 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2020-01-30 00:39 - 2020-01-30 00:39 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2020-01-30 00:38 - 2020-01-30 00:38 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2020-01-30 00:37 - 2020-01-30 00:37 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\WINDOWS\system32\msmq
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files\MSBuild
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\inetpub
2020-01-30 00:33 - 2019-03-02 01:31 - 001166488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2020-01-30 00:33 - 2019-03-02 01:31 - 000124568 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2020-01-30 00:33 - 2019-03-02 01:31 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2020-01-30 00:33 - 2019-02-06 02:41 - 000778912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2020-01-30 00:33 - 2019-02-06 02:41 - 000103072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2020-01-30 00:33 - 2019-02-06 02:41 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2020-01-30 00:32 - 2019-03-19 03:21 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2020-01-30 00:32 - 2019-03-19 03:16 - 000903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2020-01-30 00:32 - 2019-03-19 02:15 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2020-01-30 00:32 - 2019-03-19 02:09 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2020-01-30 00:32 - 2019-03-02 01:33 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2020-01-30 00:32 - 2018-08-09 22:53 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2020-01-29 21:13 - 2020-01-29 21:13 - 000000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-01-29 20:25 - 2020-01-29 20:25 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-01-29 20:25 - 2020-01-29 20:25 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-01-29 20:25 - 2020-01-29 20:25 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-01-29 20:25 - 2020-01-29 20:25 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000828216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-01-29 20:25 - 2020-01-29 20:25 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-01-29 20:25 - 2020-01-29 20:25 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-01-29 20:25 - 2020-01-29 20:25 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000153912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVfs.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000138040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppVStrm.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000059221 _____ C:\WINDOWS\system32\srms.dat
2020-01-29 20:25 - 2020-01-29 20:25 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-01-29 20:24 - 2020-01-29 20:24 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssrvlic.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LSCSHostPolicy.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\lstelemetry.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2020-01-29 20:05 - 2020-01-31 17:27 - 000000000 __SHD C:\Users\Eddie\IntelGraphicsProfiles
2020-01-29 20:05 - 2020-01-29 20:05 - 000000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2020-01-29 17:36 - 2020-02-03 11:40 - 000000000 ____D C:\Users\Eddie\AppData\Local\PlaceholderTileLogoFolder
2020-01-29 17:22 - 2020-01-29 17:23 - 000000000 ____D C:\Users\Eddie\AppData\Local\Comms
2020-01-29 17:21 - 2020-01-29 19:01 - 000000000 ____D C:\ProgramData\Packages
2020-01-29 17:20 - 2020-02-10 17:21 - 000003368 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3631865646-3207491450-1134192123-1000
2020-01-29 17:20 - 2020-02-10 17:21 - 000000000 ___RD C:\Users\Eddie\OneDrive
2020-01-29 17:17 - 2020-01-29 17:17 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2020-01-29 17:16 - 2020-01-29 17:16 - 000001450 _____ C:\Users\Eddie\Desktop\Microsoft Edge.lnk
2020-01-29 17:04 - 2020-01-29 17:04 - 000000000 ___HD C:\Users\Eddie\MicrosoftEdgeBackups
2020-01-29 17:04 - 2020-01-29 17:04 - 000000000 ____D C:\Users\Eddie\AppData\Local\MicrosoftEdge
2020-01-29 17:03 - 2020-01-29 21:13 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-01-29 17:03 - 2020-01-29 21:13 - 000000000 ___RD C:\Users\Eddie\3D Objects
2020-01-29 17:03 - 2020-01-29 17:55 - 000000000 ____D C:\Users\Eddie\AppData\Local\Publishers
2020-01-29 17:02 - 2020-01-31 16:47 - 000000000 ____D C:\Users\Eddie\AppData\Local\Packages
2020-01-29 17:02 - 2020-01-29 17:03 - 000000000 ____D C:\Users\Eddie\AppData\Local\ConnectedDevicesPlatform
2020-01-29 17:02 - 2020-01-29 17:02 - 000000020 ___SH C:\Users\Eddie\ntuser.ini
2020-01-29 17:00 - 2020-02-15 16:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-01-29 17:00 - 2020-02-14 10:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2020-01-29 17:00 - 2020-02-05 11:12 - 000003420 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-01-29 17:00 - 2020-02-05 11:12 - 000003296 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-01-29 17:00 - 2020-01-29 19:04 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-01-29 17:00 - 2020-01-29 17:00 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2020-01-29 17:00 - 2020-01-29 17:00 - 000007623 _____ C:\WINDOWS\diagerr.xml
2020-01-29 17:00 - 2020-01-29 17:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\WPD
2020-01-29 17:00 - 2020-01-29 17:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Games
2020-01-29 16:53 - 2020-02-15 12:44 - 000000000 ____D C:\Users\Eddie
2020-01-29 16:53 - 2020-02-10 17:21 - 000002410 _____ C:\Users\Eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-01-29 16:52 - 2020-02-15 15:48 - 000936112 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-01-29 16:49 - 2020-01-09 21:24 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-01-29 16:48 - 2020-01-29 16:48 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2020-01-29 16:45 - 2020-02-15 16:38 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-01-29 16:45 - 2020-02-13 09:43 - 000413136 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-01-29 15:33 - 2020-02-10 12:56 - 000000000 ___DC C:\WINDOWS\Panther
2020-01-29 15:19 - 2020-01-29 15:33 - 000000000 ____D C:\ESD
2020-01-29 15:17 - 2020-01-29 15:17 - 000000000 ___HD C:\$Windows.~WS
2020-01-29 15:15 - 2020-01-29 15:15 - 000030165 _____ C:\WINDOWS\system32\servers.def.lkg
2020-01-29 15:15 - 2020-01-29 15:15 - 000030165 _____ C:\WINDOWS\system32\servers.def
2020-01-29 15:15 - 2020-01-29 15:15 - 000004451 _____ C:\WINDOWS\system32\uat64.vpx
2020-01-29 15:15 - 2020-01-29 15:15 - 000003333 _____ C:\WINDOWS\system32\servers.def.vpx
2020-01-29 15:15 - 2020-01-29 15:15 - 000000602 _____ C:\WINDOWS\system32\prod-pgm.vpx
2020-01-29 15:15 - 2020-01-29 15:15 - 000000540 _____ C:\WINDOWS\system32\.tmp
2020-01-29 15:15 - 2020-01-29 15:15 - 000000341 _____ C:\WINDOWS\system32\prod-vps.vpx
2020-01-29 15:13 - 2020-01-29 15:13 - 019255000 _____ (Microsoft Corporation) C:\Users\Eddie\Downloads\MediaCreationTool1909.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-15 16:55 - 2017-03-08 14:43 - 000000000 ____D C:\FRST
2020-02-15 16:43 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-15 16:38 - 2019-03-19 04:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-02-15 16:13 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-15 15:48 - 2019-03-19 04:50 - 000000000 ____D C:\WINDOWS\INF
2020-02-15 15:39 - 2016-11-18 15:24 - 000000000 ____D C:\Users\Eddie\AppData\LocalLow\Mozilla
2020-02-14 18:43 - 2019-03-19 04:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-14 18:43 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-02-14 00:01 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-02-13 11:25 - 2014-02-13 15:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-02-13 11:23 - 2014-02-13 15:34 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-02-13 09:57 - 2016-05-08 12:28 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-02-13 09:41 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\servicing
2020-02-13 09:29 - 2019-03-19 04:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-02-13 00:22 - 2014-02-13 14:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-02-11 14:27 - 2014-02-13 14:01 - 000001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-02-03 20:56 - 2019-03-19 04:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-02-03 20:56 - 2019-03-19 04:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-02 10:27 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-02-02 10:27 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-02-02 10:27 - 2017-03-12 10:39 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-01-31 17:41 - 2016-05-26 15:42 - 000007619 _____ C:\Users\Eddie\AppData\Local\resmon.resmoncfg
2020-01-31 16:34 - 2018-05-16 09:02 - 000000000 ____D C:\Users\Eddie\AppData\Local\AVAST Software
2020-01-31 16:34 - 2017-03-10 14:51 - 000000000 ____D C:\ProgramData\AVAST Software
2020-01-31 15:50 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\appcompat
2020-01-30 00:44 - 2019-03-19 04:56 - 000000000 ____D C:\WINDOWS\Setup
2020-01-30 00:44 - 2019-03-19 04:52 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2020-01-30 00:44 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-01-30 00:44 - 2019-03-19 04:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-01-30 00:44 - 2019-03-19 04:49 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-01-30 00:44 - 2016-12-27 18:56 - 000000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2020-01-30 00:44 - 2016-05-24 03:43 - 000000000 ____D C:\WINDOWS\system32\configBackup
2020-01-30 00:44 - 2014-08-06 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2020-01-30 00:44 - 2014-07-10 13:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 6.0 Sprint
2020-01-30 00:44 - 2014-07-10 13:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2020-01-30 00:44 - 2014-07-10 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2020-01-30 00:44 - 2014-03-25 20:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2020-01-30 00:44 - 2013-10-31 11:58 - 000000000 ____D C:\Program Files (x86)\Intel
2020-01-30 00:44 - 2013-10-31 10:02 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2020-01-30 00:44 - 2010-11-21 07:17 - 000000000 ____D C:\WINDOWS\ShellNew
2020-01-30 00:44 - 2009-07-14 03:20 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-01-30 00:44 - 2009-07-14 03:20 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-01-30 00:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2020-01-30 00:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\IME
2020-01-30 00:39 - 2019-03-19 04:52 - 000000000 __SHD C:\Program Files\Windows Sidebar
2020-01-30 00:39 - 2019-03-19 04:52 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2020-01-30 00:39 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\schemas
2020-01-30 00:39 - 2014-02-13 16:48 - 000000000 ____D C:\Program Files\Microsoft Games
2020-01-30 00:39 - 2013-10-31 11:59 - 000000000 ____D C:\Program Files\CONEXANT
2020-01-30 00:39 - 2009-07-14 05:32 - 000000000 ____D C:\Program Files\DVD Maker
2020-01-30 00:34 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2020-01-30 00:34 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2020-01-30 00:33 - 2020-01-09 21:26 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2020-01-30 00:33 - 2020-01-09 21:26 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2020-01-30 00:33 - 2020-01-09 21:26 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2020-01-30 00:33 - 2020-01-09 21:25 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2020-01-30 00:33 - 2019-03-19 05:00 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2020-01-30 00:33 - 2019-03-19 04:58 - 001401344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2020-01-30 00:33 - 2019-03-19 04:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2020-01-30 00:33 - 2019-03-19 04:58 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2020-01-30 00:33 - 2019-03-19 04:58 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2020-01-30 00:33 - 2019-03-19 04:58 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2020-01-30 00:33 - 2019-03-19 04:57 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2020-01-30 00:33 - 2019-03-19 04:57 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\et-EE
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\es-MX
2020-01-29 21:10 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-01-29 21:10 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-01-29 21:10 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-01-29 19:04 - 2019-03-19 04:52 - 000000000 ____D C:\Program Files\Windows Defender
2020-01-29 17:53 - 2013-10-31 10:03 - 000000000 ____D C:\Program Files\Intel
2020-01-29 17:42 - 2010-11-21 03:27 - 000748816 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2020-01-29 17:40 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-01-29 17:40 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\USOPrivate
2020-01-29 17:22 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ServiceState
2020-01-29 17:11 - 2019-03-19 06:22 - 000000000 ____D C:\WINDOWS\OCR
2020-01-29 17:02 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\spool
2020-01-29 17:00 - 2019-03-19 04:52 - 000000000 __RHD C:\Users\Public\Libraries
2020-01-29 16:59 - 2017-04-01 13:22 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-29 16:59 - 2017-04-01 13:22 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-01-29 16:59 - 2017-04-01 13:22 - 000002262 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-01-29 16:54 - 2018-04-15 13:37 - 000000000 ____D C:\Users\Eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sky
2020-01-29 16:52 - 2011-02-10 14:33 - 000892382 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2020-01-29 16:17 - 2009-07-14 04:45 - 000021312 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-01-29 16:17 - 2009-07-14 04:45 - 000021312 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

==================== Files in the root of some directories ========

2014-10-29 16:15 - 2014-10-29 16:15 - 000004096 ____H () C:\Users\Eddie\AppData\Local\keyfile3.drm
2016-05-26 15:42 - 2020-01-31 17:41 - 000007619 _____ () C:\Users\Eddie\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2020
Ran by Eddie (15-02-2020 16:58:09)
Running from C:\Users\Eddie\Desktop
Windows 10 Pro Version 1909 18363.657 (X64) (2020-01-29 17:02:07)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3631865646-3207491450-1134192123-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3631865646-3207491450-1134192123-503 - Limited - Disabled)
Eddie (S-1-5-21-3631865646-3207491450-1134192123-1000 - Administrator - Enabled) => C:\Users\Eddie
Guest (S-1-5-21-3631865646-3207491450-1134192123-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3631865646-3207491450-1134192123-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-3631865646-3207491450-1134192123-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)
AOMEI Backupper Standard (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version:  - AOMEI Technology Co., Ltd.)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 24.0.1.161 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 24.0.14.86 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 24.0.14.85 - Bitdefender)
Bitdefender VPN (HKLM\...\Bitdefender VPN) (Version: 24.0.2.693 - Bitdefender)
Cisco VideoGuard Player (HKLM-x32\...\{30e4813e-2a86-4e4f-82ea-23df71ca8ffb}) (Version: 10.1.1.6570 - Cisco Systems, Inc)
Data Lifeguard Diagnostic version 1.36 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Epson Easy Photo Print 2 (HKLM-x32\...\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}) (Version: 2.1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Epson Stylus SX210_SX410_TX210_TX410 Manual (HKLM-x32\...\Epson Stylus SX210_SX410_TX210_TX410 User’s Guide) (Version:  - )
EPSON SX410 Series Printer Uninstall (HKLM\...\EPSON SX410 Series) (Version:  - SEIKO EPSON Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.123 - Google Inc.) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\OneDriveSetup.exe) (Version: 19.232.1124.0005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 73.0 (x64 en-US) (HKLM\...\Mozilla Firefox 73.0 (x64 en-US)) (Version: 73.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 73.0.0.7342 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Sky Go 1.5.16.0 (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\com.bskyb.skygoplayer_is1) (Version: 1.5.16.0 - Sky)
Sky Go Desktop (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\2508210495.go.sky.com) (Version:  - go.sky.com)
Sky Sports 6.0.1 (only current user) (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\805733bb-91da-567d-b881-06034d21d33f) (Version: 6.0.1 - )
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Thin2000 USB Display Adapter (HKLM\...\{BA661C83-7D34-4DF8-A31F-2139C1D72B1C}) (Version: 1.1.316.0 - Fresco Logic)
TP-LINK Wireless Client Utility (HKLM-x32\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)

Packages:
=========
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.30.3.0_x86__kgqvnymyfvs32 [2020-02-14] (king.com)
Farm Heroes Saga -> C:\Program Files\WindowsApps\king.com.FarmHeroesSaga_5.31.8.0_x86__kgqvnymyfvs32 [2020-02-14] (king.com)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2020-01-29] (Microsoft Studios) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3631865646-3207491450-1134192123-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation - pGFX -> Intel Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2015-07-30] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll -> No File

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Eddie\AppData\Roaming\Microsoft\Windows\Network Shortcuts\My Web Sites on MSN\target.lnk -> hxxp://www.msnusers.co

==================== Loaded Modules (Whitelisted) =============

2020-01-30 00:42 - 2020-01-30 00:42 - 000065536 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.openmp_1fc8b3b9a1e18e3b_8.0.50727.6195_none_3b1209fdc9ac7774\vcomp.dll
2014-02-13 13:49 - 2008-11-12 03:00 - 000118784 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\E_ILMFIE.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 02:34 - 2020-02-15 16:42 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\AOMEI Backupper
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Dell\Win7 LtBlue 1920x1200.jpg
DNS Servers: 192.168.132.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: EPSON_EB_RPCV4_01 => 2
MSCONFIG\Services: EPSON_PM_RPCV4_01 => 2
MSCONFIG\Services: GoogleChromeElevationService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IAStorDataMgrSvc => 2
MSCONFIG\Services: igfxCUIService1.0.0.0 => 2
MSCONFIG\Services: Intel® Capability Licensing Service Interface => 2
MSCONFIG\Services: LMS => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: UNS => 2
MSCONFIG\Services: vssbrigde64 => 3
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: DBRMTray => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe
MSCONFIG\startupreg: EPSON SX410 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFCE.EXE /FU "C:\Windows\TEMP\E_SB404.tmp" /EF "HKCU"
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: IMSS => "C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe"
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "DBRMTray"
HKLM\...\StartupApproved\Run: => "flvga_tray64"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\StartupApproved\Run: => "VideoGuardMonitor"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{066457EA-5F85-453E-B42B-1932DDB50E04}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{69E72D19-F49C-4A13-990A-0C8D88CC12F8}C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe] => (Block) C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe (Sky UK Limited -> Sky UK)
FirewallRules: [TCP Query User{742691DA-D506-47DA-A1FD-D736B34F0B7B}C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe] => (Block) C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe (Sky UK Limited -> Sky UK)
FirewallRules: [{50E4E72F-6D4C-454E-B7C9-2516355F068C}] => (Allow) LPort=53
FirewallRules: [{8780A08B-79DF-49D6-92CC-08ACF7E935BF}] => (Allow) LPort=53
FirewallRules: [{F7ABF902-A19E-4514-A9E1-AC3EEFECC7B3}] => (Allow) LPort=68
FirewallRules: [{2CA0D1DA-1161-45DF-AAA6-34B705B2D7BF}] => (Allow) LPort=67
FirewallRules: [{9B633C90-3460-47A4-875D-80B09EA0E462}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe No File
FirewallRules: [{5DC8B8B7-D95F-4370-AB76-84457A612EE0}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe No File
FirewallRules: [{61C25B7E-A460-403B-AE0C-36F3976788A5}] => (Allow) LPort=53
FirewallRules: [{F053692C-CE7B-4213-9DA2-5B5AE9FCBFC6}] => (Allow) LPort=1542
FirewallRules: [{A641E685-FBDA-4457-B76A-F693DDFB306A}] => (Allow) LPort=1542
FirewallRules: [{DCAD6A22-D1D5-4C9A-882C-0EC3F69CA2ED}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe No File
FirewallRules: [{AEF1CD72-353D-4232-9533-7C169C1658D8}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe No File
FirewallRules: [{C3895048-7F66-4ED2-B368-03D40A184BA9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{79A9EB39-E084-4A2E-81D1-1519ED7022E2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6ADB7F32-8035-4E9D-8F13-8A0D35A450E3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{259FBEE8-38E4-4B2D-880C-7DDA44A60B3F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{529B52EC-1C0F-4449-8B2A-30B76E57F48A}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe No File
FirewallRules: [TCP Query User{58FD11C6-2A37-4D57-87A6-BDCBF04C94FB}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe No File
FirewallRules: [{10F872EF-A3F6-4D98-A2CE-0D1F8E797CC2}] => (Allow) C:\Program Files (x86)\AOMEI Backupper\ABService.exe (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.)
FirewallRules: [{A61E24C6-6AB3-4DA2-8BA2-D25A57C81808}] => (Allow) C:\Program Files (x86)\AOMEI Backupper\ABService.exe (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.)

==================== Restore Points =========================


==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================

System errors:
=============
Error: (02/15/2020 04:41:18 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server Windows.Internal.StateRepository.ApplicationExtension did not register with DCOM within the required timeout.

Error: (02/15/2020 04:40:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/15/2020 04:40:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NetTcpPortSharing service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/15/2020 04:40:05 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (45000 milliseconds) while waiting for the NetTcpPortSharing service to connect.


==================== Memory info ===========================

BIOS: Dell Inc. A09 02/01/2013
Motherboard: Dell Inc. 084J0R
Processor: Intel® Pentium® CPU G2020 @ 2.90GHz
Percentage of memory in use: 55%
Total physical RAM: 3967.54 MB
Available physical RAM: 1757.34 MB
Total Virtual: 7935.54 MB
Available Virtual: 5580.79 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:225.9 GB) (Free:180.79 GB) NTFS

\\?\Volume{9d80cf44-4223-11e3-adbc-806e6f6e6963}\ (RECOVERY) (Fixed) (Total:6.89 GB) (Free:1.73 GB) NTFS
\\?\Volume{17ee898d-0000-0000-007e-000000000000}\ () (Fixed) (Total:0.04 GB) (Free:0.04 GB) FAT

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 232.8 GB) (Disk ID: 17EE898D)
Partition 1: (Not Active) - (Size=39 MB) - (Type=06)
Partition 2: (Active) - (Size=6.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=225.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

 

Thanks again


  • 0

#21
RKinner

RKinner

    Malware Expert

  • Expert
  • 22,473 posts
  • MVP

If you click on the uninstall for MBAM does it give you an error?

 

Error: (02/15/2020 04:40:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/15/2020 04:40:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NetTcpPortSharing service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/15/2020 04:40:05 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (45000 milliseconds) while waiting for the NetTcpPortSharing service to connect.

 

The above services should not be running.  Search for

services.msc

hit Enter

then scroll down to NetTcpActivator and right click and select Properties then change the Startup Type: to Disabled.  OK.

Repeat for NetTcpPortSharing

 

That should cut down some of the startup delay.

 

You can try

https://www.thewindo...ister-with-dcom

for the other error.


  • 0

#22
bytesize

bytesize

    Member

  • Topic Starter
  • Member
  • PipPip
  • 60 posts

Sorry for the rant in last post RKinner, had some dinner and recharged my batteries :D.

When I tried to uninstall MBAM it gave me this - an error occurred while trying to uninstall it may have already been uninstalled. Would you like to remove it from Programs and features. Clicked ok.

 

Will have a look at the other errors now.

 

Thanks


  • 0

#23
bytesize

bytesize

    Member

  • Topic Starter
  • Member
  • PipPip
  • 60 posts

Could not find NetTcpActivator in services.msc but changed NetTcpPortSharing to disabled.


  • 0

#24
bytesize

bytesize

    Member

  • Topic Starter
  • Member
  • PipPip
  • 60 posts

Followed the advice on the link you gave me for DCOM error but most of the settings were as they should have been. Ran another FRST and I think there are more errors than there were the last time. Have I made a mistake or done something wrong? Here are the logs

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-02-2020
Ran by Eddie (administrator) on EDDIEDELL (Dell Inc. Vostro 270) (15-02-2020 19:08:15)
Running from C:\Users\Eddie\Desktop
Loaded Profiles: Eddie (Available Profiles: Eddie)
Platform: Windows 10 Pro Version 1909 18363.657 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [DBRMTray] => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [227328 2011-03-08] (Dell Computer Corporation) [File not signed]
HKLM\...\Run: [flvga_tray64] => C:\Windows\system32\flvga_tray.exe [419328 2015-12-07] () [File not signed]
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [BdVpnApp] => C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe [456088 2019-10-13] (Bitdefender SRL -> Bitdefender)
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\Run: [VideoGuardMonitor] => C:\Users\Eddie\AppData\Local\Cisco\VideoGuardPlayer\VideoGuardMonitor\CiscoVideoGuardMonitor.exe [2345736 2017-11-02] (Cisco Video Technologies Israel Ltd. -> Cisco)
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\Run: [EPSON SX410 Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIFCE.EXE [223232 2008-10-02] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-22] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {053D1D96-34A1-43DB-A08C-42013752D3E2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-01] (Google Inc -> Google Inc.)
Task: {5681C43E-9E0F-4FBB-AF45-8126839219E0} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [490808 2019-11-27] (Bitdefender SRL -> Bitdefender)
Task: {C2B62A8D-6C26-466B-895F-C83C6BDFBB8E} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [525120 2019-12-06] (Bitdefender SRL -> Bitdefender)
Task: {E0AA4134-CDC5-47C0-AFAF-C7CDC34DBC40} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-01] (Google Inc -> Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.132.1
Tcpip\..\Interfaces\{7059D287-A263-4A16-854D-FFC987708542}: [DhcpNameServer] 192.168.132.1
Tcpip\..\Interfaces\{8C412334-6E80-4EC8-9F2B-E48E60423A89}: [DhcpNameServer] 194.168.4.100 194.168.8.100
Tcpip\..\Interfaces\{CCEB5E90-4E48-420A-A652-21003662E153}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.co.uk/
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=uk&l=en&s=gen
BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)

FireFox:
========
FF DefaultProfile: g6p9p80w.default
FF ProfilePath: C:\Users\Eddie\AppData\Roaming\Mozilla\Firefox\Profiles\g6p9p80w.default [2020-02-15]
FF NewTab: Mozilla\Firefox\Profiles\g6p9p80w.default -> about:home
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2019-12-06]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF Extension: (Bitdefender Anti-tracker) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi [2019-11-01]
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-01-08] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2020-02-13] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2020-02-13] <==== ATTENTION

Chrome:
=======
CHR Profile: C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default [2020-02-02]
CHR HomePage: Default -> hxxp://www.google.com
CHR Extension: (Slides) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-18]
CHR Extension: (Docs) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-13]
CHR Extension: (Google Drive) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-03]
CHR Extension: (YouTube) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-03]
CHR Extension: (Sheets) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-13]
CHR Extension: (Bitdefender Wallet) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2020-02-02]
CHR Extension: (Google Docs Offline) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-02-02]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2020-02-02]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-02-02]
CHR Extension: (Gmail) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-02]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AfVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\vpnservice.exe [322432 2019-06-04] (AnchorFree Inc -> AnchorFree Inc.)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195344 2018-03-22] (Bitdefender SRL -> Bitdefender)
R2 BdVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnservice.exe [471120 2019-10-13] (Bitdefender SRL -> Bitdefender)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [119368 2019-12-06] (Bitdefender SRL -> Bitdefender)
S4 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [163840 2007-12-17] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
S4 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [126464 2007-01-11] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
S4 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [328608 2015-07-30] (Intel Corporation - pGFX -> Intel Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1329240 2020-01-15] (Bitdefender SRL -> Bitdefender)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2020-01-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [151656 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-06-15] (AnchorFree Inc -> The OpenVPN Project)
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1693368 2019-09-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
S3 athur; C:\WINDOWS\System32\DRIVERS\athurx.sys [1847296 2010-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [739264 2019-07-29] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-03-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2019-06-21] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96448 2018-04-27] (Bitdefender SRL -> BitDefender)
R0 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [564112 2019-11-07] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2018-11-28] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [196392 2019-07-04] (Bitdefender SRL -> Bitdefender)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [662528 2019-03-19] (Microsoft Windows -> Realtek )
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [610640 2019-01-14] (Bitdefender SRL -> Bitdefender)
U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [50176 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2020-01-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2020-01-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2020-01-29] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-15 19:08 - 2020-02-15 19:10 - 000015528 _____ C:\Users\Eddie\Desktop\FRST.txt
2020-02-15 16:02 - 2020-02-15 16:02 - 000080808 _____ C:\ProgramData\agent.update.1581782473.bdinstall.v2.bin
2020-02-15 12:16 - 2020-02-15 19:02 - 000000000 ____D C:\Users\Eddie\Desktop\Misc
2020-02-15 10:44 - 2020-02-15 11:04 - 000001024 ____H C:\SYSTAG.BIN
2020-02-15 10:43 - 2020-02-15 17:26 - 000000150 _____ C:\WINDOWS\SysWOW64\winsevr.dat
2020-02-15 10:43 - 2020-02-15 16:40 - 000000312 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat
2020-02-15 10:43 - 2020-02-15 10:43 - 000000000 ____D C:\ProgramData\Aomei
2020-02-15 10:43 - 2017-09-01 18:12 - 000038320 _____ C:\WINDOWS\system32\amwrtdrv.sys
2020-02-15 10:43 - 2016-12-21 22:54 - 000051120 _____ C:\WINDOWS\system32\ambakdrv.sys
2020-02-15 10:43 - 2016-12-21 22:52 - 000171952 _____ C:\WINDOWS\system32\ammntdrv.sys
2020-02-15 10:42 - 2020-02-15 11:04 - 000000000 ____D C:\ProgramData\AomeiBR
2020-02-15 09:54 - 2020-02-15 10:03 - 109524584 _____ (AOMEI Technology Co., Ltd. ) C:\Users\Eddie\Downloads\AOMEIBackupperStd.exe
2020-02-14 00:07 - 2020-02-14 00:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital Corporation
2020-02-14 00:07 - 2020-02-14 00:07 - 000000000 ____D C:\Program Files (x86)\Western Digital Corporation
2020-02-14 00:06 - 2020-02-14 00:07 - 000571159 _____ C:\Users\Eddie\Downloads\WinDlg_v1_36.zip
2020-02-13 12:43 - 2020-02-13 12:43 - 000000839 _____ C:\Users\Public\Desktop\Speccy.lnk
2020-02-13 12:43 - 2020-02-13 12:43 - 000000839 _____ C:\ProgramData\Desktop\Speccy.lnk
2020-02-13 12:43 - 2020-02-13 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2020-02-13 12:43 - 2020-02-13 12:43 - 000000000 ____D C:\Program Files\Speccy
2020-02-13 12:42 - 2020-02-13 12:43 - 006889184 _____ (Piriform Ltd) C:\Users\Eddie\Downloads\spsetup132.exe
2020-02-13 12:33 - 2020-02-13 12:33 - 000011342 _____ C:\junk.txt
2020-02-13 12:26 - 2020-02-13 12:26 - 000036192 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2020-02-13 12:25 - 2020-02-13 12:25 - 002798456 _____ (Sysinternals - www.sysinternals.com) C:\Users\Eddie\Desktop\procexp.exe
2020-02-13 09:54 - 2020-02-13 09:54 - 000073886 _____ C:\ProgramData\vpn.1581587617.bdinstall.bin
2020-02-13 09:53 - 2020-02-13 09:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender VPN
2020-02-13 09:53 - 2020-02-13 09:53 - 000000000 ____D C:\ProgramData\Bitdefender VPN
2020-02-13 09:53 - 2018-06-15 09:26 - 000048624 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\aftap0901.sys
2020-02-13 09:52 - 2020-02-13 09:52 - 000814764 _____ C:\ProgramData\cl.1581587183.bdinstall.v2.bin
2020-02-13 09:52 - 2020-02-13 09:52 - 000138752 _____ C:\ProgramData\dm.1581587556.bdinstall.v2.bin
2020-02-13 09:52 - 2020-02-13 09:52 - 000102260 _____ C:\ProgramData\cl.kit.1581587172.bdinstall.v2.bin
2020-02-13 09:52 - 2020-02-13 09:52 - 000003420 _____ C:\WINDOWS\system32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C
2020-02-13 09:49 - 2020-02-13 09:53 - 000002197 _____ C:\Users\Public\Desktop\Bitdefender VPN.lnk
2020-02-13 09:49 - 2020-02-13 09:53 - 000002197 _____ C:\ProgramData\Desktop\Bitdefender VPN.lnk
2020-02-13 09:49 - 2020-02-13 09:49 - 000002344 _____ C:\Users\Public\Desktop\Bitdefender.lnk
2020-02-13 09:49 - 2020-02-13 09:49 - 000002344 _____ C:\ProgramData\Desktop\Bitdefender.lnk
2020-02-13 09:49 - 2020-02-13 09:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security
2020-02-13 09:49 - 2019-03-21 00:12 - 000022960 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2020-02-13 09:48 - 2019-11-07 08:49 - 000564112 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2020-02-13 09:48 - 2019-09-23 08:43 - 001693368 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2020-02-13 09:48 - 2019-07-29 15:32 - 000739264 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2020-02-13 09:48 - 2019-06-21 07:30 - 000046056 _____ (© Bitdefender SRL) C:\WINDOWS\system32\Drivers\bdprivmon.sys
2020-02-13 09:48 - 2018-04-27 07:45 - 000096448 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2020-02-13 09:47 - 2020-02-13 09:53 - 000000000 ____D C:\Program Files\Bitdefender
2020-02-13 09:47 - 2019-07-04 11:15 - 000196392 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys
2020-02-13 09:47 - 2019-01-14 16:25 - 000610640 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\trufos.sys
2020-02-13 09:47 - 2018-11-28 05:45 - 000188384 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2020-02-13 09:46 - 2020-02-13 09:47 - 000000000 ____D C:\Program Files\Common Files\Bitdefender
2020-02-13 09:41 - 2020-02-13 09:41 - 000000000 ____D C:\ProgramData\ssh
2020-02-13 09:36 - 2020-02-13 09:36 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-02-13 09:36 - 2020-02-13 09:36 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-02-13 09:36 - 2020-02-13 09:36 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-02-13 09:36 - 2020-02-13 09:36 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-02-13 09:36 - 2020-02-13 09:36 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-02-13 09:36 - 2020-02-13 09:36 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2020-02-13 09:36 - 2020-02-13 09:36 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-02-13 09:36 - 2020-02-13 09:36 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2020-02-13 09:36 - 2020-02-13 09:36 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-02-13 09:35 - 2020-02-13 09:36 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003969536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-02-13 09:35 - 2020-02-13 09:35 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-02-13 09:35 - 2020-02-13 09:35 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2020-02-13 09:35 - 2020-02-13 09:35 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-02-13 09:17 - 2020-01-16 05:07 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-02-13 09:17 - 2020-01-16 04:23 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-11 18:05 - 2020-02-13 10:49 - 002279424 _____ (Farbar) C:\Users\Eddie\Desktop\FRST64.exe
2020-02-02 20:22 - 2020-02-02 20:22 - 000000080 ___SH C:\bootTel.dat
2020-02-02 10:20 - 2020-02-02 10:20 - 000000000 ____D C:\ProgramData\Bitdefender Device Management
2020-02-02 10:18 - 2020-02-02 10:18 - 000000000 ____D C:\ProgramData\Gemma
2020-02-02 10:18 - 2020-02-02 10:18 - 000000000 ____D C:\ProgramData\Atc
2020-02-02 10:17 - 2020-02-02 10:17 - 000000000 ____D C:\WINDOWS\system32\elambkup
2020-02-02 10:17 - 2020-02-02 10:17 - 000000000 ____D C:\ProgramData\BDLogging
2020-02-02 10:15 - 2020-02-13 09:52 - 000000000 ____D C:\Users\Eddie\AppData\Roaming\Bitdefender
2020-02-02 10:15 - 2020-02-02 10:43 - 000000000 ____D C:\ProgramData\Bitdefender
2020-02-02 10:08 - 2020-02-02 10:08 - 000003802 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2020-02-02 10:06 - 2020-02-15 16:02 - 000000000 ____D C:\Program Files\Bitdefender Agent
2020-02-02 10:06 - 2020-02-02 10:06 - 000113524 _____ C:\ProgramData\agent.1580637970.bdinstall.v2.bin
2020-02-02 10:06 - 2020-02-02 10:06 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2020-02-02 10:05 - 2020-02-02 10:05 - 012422992 _____ C:\Users\Eddie\Downloads\bitdefender_windows_d19acce7-90aa-4746-a6ad-21b2e4307aa2.exe
2020-01-31 17:47 - 2020-01-31 17:47 - 000000000 ____D C:\Users\Eddie\AppData\Local\PeerDistRepub
2020-01-31 17:10 - 2020-01-31 17:27 - 000000000 ____D C:\Users\Eddie\AppData\Local\D3DSCache
2020-01-31 16:35 - 2020-01-31 16:35 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2020-01-30 00:39 - 2020-01-30 00:39 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2020-01-30 00:38 - 2020-01-30 00:38 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2020-01-30 00:37 - 2020-01-30 00:37 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\WINDOWS\system32\msmq
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files\MSBuild
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-01-30 00:34 - 2020-01-30 00:34 - 000000000 ____D C:\inetpub
2020-01-30 00:33 - 2019-03-02 01:31 - 001166488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2020-01-30 00:33 - 2019-03-02 01:31 - 000124568 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2020-01-30 00:33 - 2019-03-02 01:31 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2020-01-30 00:33 - 2019-02-06 02:41 - 000778912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2020-01-30 00:33 - 2019-02-06 02:41 - 000103072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2020-01-30 00:33 - 2019-02-06 02:41 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2020-01-30 00:32 - 2019-03-19 03:21 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2020-01-30 00:32 - 2019-03-19 03:16 - 000903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2020-01-30 00:32 - 2019-03-19 02:15 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2020-01-30 00:32 - 2019-03-19 02:09 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2020-01-30 00:32 - 2019-03-02 01:33 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2020-01-30 00:32 - 2018-08-09 22:53 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2020-01-29 21:13 - 2020-01-29 21:13 - 000000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-01-29 20:25 - 2020-01-29 20:25 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-01-29 20:25 - 2020-01-29 20:25 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-01-29 20:25 - 2020-01-29 20:25 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-01-29 20:25 - 2020-01-29 20:25 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000828216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-01-29 20:25 - 2020-01-29 20:25 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-01-29 20:25 - 2020-01-29 20:25 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-01-29 20:25 - 2020-01-29 20:25 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000153912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVfs.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000138040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppVStrm.sys
2020-01-29 20:25 - 2020-01-29 20:25 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000059221 _____ C:\WINDOWS\system32\srms.dat
2020-01-29 20:25 - 2020-01-29 20:25 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-01-29 20:25 - 2020-01-29 20:25 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-01-29 20:25 - 2020-01-29 20:25 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-01-29 20:24 - 2020-01-29 20:24 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssrvlic.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-01-29 20:24 - 2020-01-29 20:24 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LSCSHostPolicy.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-01-29 20:24 - 2020-01-29 20:24 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\lstelemetry.dll
2020-01-29 20:24 - 2020-01-29 20:24 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2020-01-29 20:05 - 2020-01-31 17:27 - 000000000 __SHD C:\Users\Eddie\IntelGraphicsProfiles
2020-01-29 20:05 - 2020-01-29 20:05 - 000000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2020-01-29 17:36 - 2020-02-03 11:40 - 000000000 ____D C:\Users\Eddie\AppData\Local\PlaceholderTileLogoFolder
2020-01-29 17:22 - 2020-01-29 17:23 - 000000000 ____D C:\Users\Eddie\AppData\Local\Comms
2020-01-29 17:21 - 2020-01-29 19:01 - 000000000 ____D C:\ProgramData\Packages
2020-01-29 17:20 - 2020-02-10 17:21 - 000003368 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3631865646-3207491450-1134192123-1000
2020-01-29 17:20 - 2020-02-10 17:21 - 000000000 ___RD C:\Users\Eddie\OneDrive
2020-01-29 17:17 - 2020-01-29 17:17 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2020-01-29 17:16 - 2020-01-29 17:16 - 000001450 _____ C:\Users\Eddie\Desktop\Microsoft Edge.lnk
2020-01-29 17:04 - 2020-01-29 17:04 - 000000000 ___HD C:\Users\Eddie\MicrosoftEdgeBackups
2020-01-29 17:04 - 2020-01-29 17:04 - 000000000 ____D C:\Users\Eddie\AppData\Local\MicrosoftEdge
2020-01-29 17:03 - 2020-01-29 21:13 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-01-29 17:03 - 2020-01-29 21:13 - 000000000 ___RD C:\Users\Eddie\3D Objects
2020-01-29 17:03 - 2020-01-29 17:55 - 000000000 ____D C:\Users\Eddie\AppData\Local\Publishers
2020-01-29 17:02 - 2020-01-31 16:47 - 000000000 ____D C:\Users\Eddie\AppData\Local\Packages
2020-01-29 17:02 - 2020-01-29 17:03 - 000000000 ____D C:\Users\Eddie\AppData\Local\ConnectedDevicesPlatform
2020-01-29 17:02 - 2020-01-29 17:02 - 000000020 ___SH C:\Users\Eddie\ntuser.ini
2020-01-29 17:00 - 2020-02-15 19:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-01-29 17:00 - 2020-02-14 10:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2020-01-29 17:00 - 2020-02-05 11:12 - 000003420 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-01-29 17:00 - 2020-02-05 11:12 - 000003296 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-01-29 17:00 - 2020-01-29 19:04 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-01-29 17:00 - 2020-01-29 17:00 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2020-01-29 17:00 - 2020-01-29 17:00 - 000007623 _____ C:\WINDOWS\diagerr.xml
2020-01-29 17:00 - 2020-01-29 17:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\WPD
2020-01-29 17:00 - 2020-01-29 17:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Games
2020-01-29 16:53 - 2020-02-15 12:44 - 000000000 ____D C:\Users\Eddie
2020-01-29 16:53 - 2020-02-10 17:21 - 000002410 _____ C:\Users\Eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-01-29 16:52 - 2020-02-15 15:48 - 000936112 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-01-29 16:49 - 2020-01-09 21:24 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-01-29 16:48 - 2020-01-29 16:48 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2020-01-29 16:45 - 2020-02-15 16:38 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-01-29 16:45 - 2020-02-13 09:43 - 000413136 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-01-29 15:33 - 2020-02-10 12:56 - 000000000 ___DC C:\WINDOWS\Panther
2020-01-29 15:19 - 2020-01-29 15:33 - 000000000 ____D C:\ESD
2020-01-29 15:17 - 2020-01-29 15:17 - 000000000 ___HD C:\$Windows.~WS
2020-01-29 15:15 - 2020-01-29 15:15 - 000030165 _____ C:\WINDOWS\system32\servers.def.lkg
2020-01-29 15:15 - 2020-01-29 15:15 - 000030165 _____ C:\WINDOWS\system32\servers.def
2020-01-29 15:15 - 2020-01-29 15:15 - 000004451 _____ C:\WINDOWS\system32\uat64.vpx
2020-01-29 15:15 - 2020-01-29 15:15 - 000003333 _____ C:\WINDOWS\system32\servers.def.vpx
2020-01-29 15:15 - 2020-01-29 15:15 - 000000602 _____ C:\WINDOWS\system32\prod-pgm.vpx
2020-01-29 15:15 - 2020-01-29 15:15 - 000000540 _____ C:\WINDOWS\system32\.tmp
2020-01-29 15:15 - 2020-01-29 15:15 - 000000341 _____ C:\WINDOWS\system32\prod-vps.vpx
2020-01-29 15:13 - 2020-01-29 15:13 - 019255000 _____ (Microsoft Corporation) C:\Users\Eddie\Downloads\MediaCreationTool1909.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-15 19:09 - 2017-03-08 14:43 - 000000000 ____D C:\FRST
2020-02-15 19:08 - 2019-03-19 04:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-02-15 19:07 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-15 19:02 - 2019-03-19 04:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-02-15 19:01 - 2016-11-18 15:24 - 000000000 ____D C:\Users\Eddie\AppData\LocalLow\Mozilla
2020-02-15 18:54 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\Registration
2020-02-15 16:13 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-15 15:48 - 2019-03-19 04:50 - 000000000 ____D C:\WINDOWS\INF
2020-02-14 18:43 - 2019-03-19 04:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-14 18:43 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-02-14 00:01 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-02-13 11:25 - 2014-02-13 15:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-02-13 11:23 - 2014-02-13 15:34 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-02-13 09:57 - 2016-05-08 12:28 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-02-13 09:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-02-13 09:41 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\servicing
2020-02-13 00:22 - 2014-02-13 14:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-02-11 14:27 - 2014-02-13 14:01 - 000001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-02-03 20:56 - 2019-03-19 04:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-02-03 20:56 - 2019-03-19 04:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-02 10:27 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-02-02 10:27 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-02-02 10:27 - 2017-03-12 10:39 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-01-31 17:41 - 2016-05-26 15:42 - 000007619 _____ C:\Users\Eddie\AppData\Local\resmon.resmoncfg
2020-01-31 16:34 - 2018-05-16 09:02 - 000000000 ____D C:\Users\Eddie\AppData\Local\AVAST Software
2020-01-31 16:34 - 2017-03-10 14:51 - 000000000 ____D C:\ProgramData\AVAST Software
2020-01-31 15:50 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\appcompat
2020-01-30 00:44 - 2019-03-19 04:56 - 000000000 ____D C:\WINDOWS\Setup
2020-01-30 00:44 - 2019-03-19 04:52 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2020-01-30 00:44 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-01-30 00:44 - 2019-03-19 04:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-01-30 00:44 - 2019-03-19 04:49 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-01-30 00:44 - 2016-12-27 18:56 - 000000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2020-01-30 00:44 - 2016-05-24 03:43 - 000000000 ____D C:\WINDOWS\system32\configBackup
2020-01-30 00:44 - 2014-08-06 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2020-01-30 00:44 - 2014-07-10 13:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 6.0 Sprint
2020-01-30 00:44 - 2014-07-10 13:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2020-01-30 00:44 - 2014-07-10 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2020-01-30 00:44 - 2014-03-25 20:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2020-01-30 00:44 - 2013-10-31 11:58 - 000000000 ____D C:\Program Files (x86)\Intel
2020-01-30 00:44 - 2013-10-31 10:02 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2020-01-30 00:44 - 2010-11-21 07:17 - 000000000 ____D C:\WINDOWS\ShellNew
2020-01-30 00:44 - 2009-07-14 03:20 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-01-30 00:44 - 2009-07-14 03:20 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-01-30 00:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2020-01-30 00:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\IME
2020-01-30 00:39 - 2019-03-19 04:52 - 000000000 __SHD C:\Program Files\Windows Sidebar
2020-01-30 00:39 - 2019-03-19 04:52 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2020-01-30 00:39 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\schemas
2020-01-30 00:39 - 2014-02-13 16:48 - 000000000 ____D C:\Program Files\Microsoft Games
2020-01-30 00:39 - 2013-10-31 11:59 - 000000000 ____D C:\Program Files\CONEXANT
2020-01-30 00:39 - 2009-07-14 05:32 - 000000000 ____D C:\Program Files\DVD Maker
2020-01-30 00:34 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2020-01-30 00:34 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2020-01-30 00:33 - 2020-01-09 21:26 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2020-01-30 00:33 - 2020-01-09 21:26 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2020-01-30 00:33 - 2020-01-09 21:26 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2020-01-30 00:33 - 2020-01-09 21:25 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2020-01-30 00:33 - 2020-01-09 21:25 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2020-01-30 00:33 - 2019-03-19 05:00 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2020-01-30 00:33 - 2019-03-19 05:00 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2020-01-30 00:33 - 2019-03-19 05:00 - 000009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2020-01-30 00:33 - 2019-03-19 04:58 - 001401344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2020-01-30 00:33 - 2019-03-19 04:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2020-01-30 00:33 - 2019-03-19 04:58 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2020-01-30 00:33 - 2019-03-19 04:58 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2020-01-30 00:33 - 2019-03-19 04:58 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2020-01-30 00:33 - 2019-03-19 04:58 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2020-01-30 00:33 - 2019-03-19 04:58 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2020-01-30 00:33 - 2019-03-19 04:57 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2020-01-30 00:33 - 2019-03-19 04:57 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\et-EE
2020-01-30 00:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\es-MX
2020-01-29 21:10 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-01-29 21:10 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-01-29 21:10 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-01-29 19:04 - 2019-03-19 04:52 - 000000000 ____D C:\Program Files\Windows Defender
2020-01-29 17:53 - 2013-10-31 10:03 - 000000000 ____D C:\Program Files\Intel
2020-01-29 17:42 - 2010-11-21 03:27 - 000748816 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2020-01-29 17:40 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-01-29 17:40 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\USOPrivate
2020-01-29 17:22 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ServiceState
2020-01-29 17:11 - 2019-03-19 06:22 - 000000000 ____D C:\WINDOWS\OCR
2020-01-29 17:02 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\spool
2020-01-29 17:00 - 2019-03-19 04:52 - 000000000 __RHD C:\Users\Public\Libraries
2020-01-29 16:59 - 2017-04-01 13:22 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-29 16:59 - 2017-04-01 13:22 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-01-29 16:59 - 2017-04-01 13:22 - 000002262 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-01-29 16:54 - 2018-04-15 13:37 - 000000000 ____D C:\Users\Eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sky
2020-01-29 16:52 - 2011-02-10 14:33 - 000892382 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2020-01-29 16:17 - 2009-07-14 04:45 - 000021312 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-01-29 16:17 - 2009-07-14 04:45 - 000021312 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

==================== Files in the root of some directories ========

2014-10-29 16:15 - 2014-10-29 16:15 - 000004096 ____H () C:\Users\Eddie\AppData\Local\keyfile3.drm
2016-05-26 15:42 - 2020-01-31 17:41 - 000007619 _____ () C:\Users\Eddie\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2020
Ran by Eddie (15-02-2020 19:12:45)
Running from C:\Users\Eddie\Desktop
Windows 10 Pro Version 1909 18363.657 (X64) (2020-01-29 17:02:07)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3631865646-3207491450-1134192123-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3631865646-3207491450-1134192123-503 - Limited - Disabled)
Eddie (S-1-5-21-3631865646-3207491450-1134192123-1000 - Administrator - Enabled) => C:\Users\Eddie
Guest (S-1-5-21-3631865646-3207491450-1134192123-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3631865646-3207491450-1134192123-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-3631865646-3207491450-1134192123-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 24.0.1.161 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 24.0.14.86 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 24.0.14.85 - Bitdefender)
Bitdefender VPN (HKLM\...\Bitdefender VPN) (Version: 24.0.2.693 - Bitdefender)
Cisco VideoGuard Player (HKLM-x32\...\{30e4813e-2a86-4e4f-82ea-23df71ca8ffb}) (Version: 10.1.1.6570 - Cisco Systems, Inc)
Data Lifeguard Diagnostic version 1.36 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Epson Easy Photo Print 2 (HKLM-x32\...\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}) (Version: 2.1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Epson Stylus SX210_SX410_TX210_TX410 Manual (HKLM-x32\...\Epson Stylus SX210_SX410_TX210_TX410 User’s Guide) (Version:  - )
EPSON SX410 Series Printer Uninstall (HKLM\...\EPSON SX410 Series) (Version:  - SEIKO EPSON Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.123 - Google Inc.) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\OneDriveSetup.exe) (Version: 19.232.1124.0005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 73.0 (x64 en-US) (HKLM\...\Mozilla Firefox 73.0 (x64 en-US)) (Version: 73.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 73.0.0.7342 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Sky Go 1.5.16.0 (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\com.bskyb.skygoplayer_is1) (Version: 1.5.16.0 - Sky)
Sky Go Desktop (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\2508210495.go.sky.com) (Version:  - go.sky.com)
Sky Sports 6.0.1 (only current user) (HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\805733bb-91da-567d-b881-06034d21d33f) (Version: 6.0.1 - )
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Thin2000 USB Display Adapter (HKLM\...\{BA661C83-7D34-4DF8-A31F-2139C1D72B1C}) (Version: 1.1.316.0 - Fresco Logic)
TP-LINK Wireless Client Utility (HKLM-x32\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)

Packages:
=========
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.30.3.0_x86__kgqvnymyfvs32 [2020-02-14] (king.com)
Farm Heroes Saga -> C:\Program Files\WindowsApps\king.com.FarmHeroesSaga_5.31.8.0_x86__kgqvnymyfvs32 [2020-02-14] (king.com)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2020-01-29] (Microsoft Studios) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3631865646-3207491450-1134192123-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation - pGFX -> Intel Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2015-07-30] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll -> No File

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Eddie\AppData\Roaming\Microsoft\Windows\Network Shortcuts\My Web Sites on MSN\target.lnk -> hxxp://www.msnusers.co

==================== Loaded Modules (Whitelisted) =============

2014-02-13 13:49 - 2008-11-12 03:00 - 000118784 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\E_ILMFIE.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 02:34 - 2020-02-15 19:03 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Dell\Win7 LtBlue 1920x1200.jpg
DNS Servers: 192.168.132.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: EPSON_EB_RPCV4_01 => 2
MSCONFIG\Services: EPSON_PM_RPCV4_01 => 2
MSCONFIG\Services: GoogleChromeElevationService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IAStorDataMgrSvc => 2
MSCONFIG\Services: igfxCUIService1.0.0.0 => 2
MSCONFIG\Services: Intel® Capability Licensing Service Interface => 2
MSCONFIG\Services: LMS => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: UNS => 2
MSCONFIG\Services: vssbrigde64 => 3
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: DBRMTray => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe
MSCONFIG\startupreg: EPSON SX410 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFCE.EXE /FU "C:\Windows\TEMP\E_SB404.tmp" /EF "HKCU"
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: IMSS => "C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe"
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "DBRMTray"
HKLM\...\StartupApproved\Run: => "flvga_tray64"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3631865646-3207491450-1134192123-1000\...\StartupApproved\Run: => "VideoGuardMonitor"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{066457EA-5F85-453E-B42B-1932DDB50E04}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{69E72D19-F49C-4A13-990A-0C8D88CC12F8}C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe] => (Block) C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe (Sky UK Limited -> Sky UK)
FirewallRules: [TCP Query User{742691DA-D506-47DA-A1FD-D736B34F0B7B}C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe] => (Block) C:\users\eddie\appdata\roaming\sky\sky go\sky go.exe (Sky UK Limited -> Sky UK)
FirewallRules: [{50E4E72F-6D4C-454E-B7C9-2516355F068C}] => (Allow) LPort=53
FirewallRules: [{8780A08B-79DF-49D6-92CC-08ACF7E935BF}] => (Allow) LPort=53
FirewallRules: [{F7ABF902-A19E-4514-A9E1-AC3EEFECC7B3}] => (Allow) LPort=68
FirewallRules: [{2CA0D1DA-1161-45DF-AAA6-34B705B2D7BF}] => (Allow) LPort=67
FirewallRules: [{9B633C90-3460-47A4-875D-80B09EA0E462}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe No File
FirewallRules: [{5DC8B8B7-D95F-4370-AB76-84457A612EE0}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe No File
FirewallRules: [{61C25B7E-A460-403B-AE0C-36F3976788A5}] => (Allow) LPort=53
FirewallRules: [{F053692C-CE7B-4213-9DA2-5B5AE9FCBFC6}] => (Allow) LPort=1542
FirewallRules: [{A641E685-FBDA-4457-B76A-F693DDFB306A}] => (Allow) LPort=1542
FirewallRules: [{DCAD6A22-D1D5-4C9A-882C-0EC3F69CA2ED}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe No File
FirewallRules: [{AEF1CD72-353D-4232-9533-7C169C1658D8}] => (Allow) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe No File
FirewallRules: [{C3895048-7F66-4ED2-B368-03D40A184BA9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{79A9EB39-E084-4A2E-81D1-1519ED7022E2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6ADB7F32-8035-4E9D-8F13-8A0D35A450E3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{259FBEE8-38E4-4B2D-880C-7DDA44A60B3F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{529B52EC-1C0F-4449-8B2A-30B76E57F48A}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe No File
FirewallRules: [TCP Query User{58FD11C6-2A37-4D57-87A6-BDCBF04C94FB}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe No File
FirewallRules: [{10F872EF-A3F6-4D98-A2CE-0D1F8E797CC2}] => (Allow) C:\Program Files (x86)\AOMEI Backupper\ABService.exe No File
FirewallRules: [{A61E24C6-6AB3-4DA2-8BA2-D25A57C81808}] => (Allow) C:\Program Files (x86)\AOMEI Backupper\ABService.exe No File

==================== Restore Points =========================


==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (02/15/2020 06:38:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: SearchUI.exe, version: 10.0.18362.418, time stamp: 0x5d995690
Faulting module name: ucrtbase.dll, version: 10.0.18362.387, time stamp: 0x4361b720
Exception code: 0xc0000409
Fault offset: 0x000000000006db8e
Faulting process id: 0x1a4c
Faulting application start time: 0x01d5e42eaa95ffbd
Faulting application path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
Faulting module path: C:\WINDOWS\System32\ucrtbase.dll
Report Id: 55c3f4d6-ad2d-487f-bb48-094641a8080e
Faulting package full name: Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: CortanaUI

Error: (02/15/2020 06:35:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: RuntimeBroker.exe, version: 10.0.18362.1, time stamp: 0x4539d5a0
Faulting module name: SettingsEnvironment.Desktop.dll, version: 10.0.18362.387, time stamp: 0x10b406e4
Exception code: 0xc0000005
Fault offset: 0x000000000002b605
Faulting process id: 0x5d8
Faulting application start time: 0x01d5e42eab3b7d1c
Faulting application path: C:\Windows\System32\RuntimeBroker.exe
Faulting module path: C:\WINDOWS\SYSTEM32\SettingsEnvironment.Desktop.dll
Report Id: f1a175aa-cdf9-46ea-99d8-5f1691d17d98
Faulting package full name: Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: runtimebroker07f4358a809ac99a64a67c1


System errors:
=============
Error: (02/15/2020 07:04:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NetMsmqActivator service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/15/2020 07:04:14 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (45000 milliseconds) while waiting for the NetMsmqActivator service to connect.

Error: (02/15/2020 07:04:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NetPipeActivator service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/15/2020 07:04:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (45000 milliseconds) while waiting for the NetPipeActivator service to connect.

Error: (02/15/2020 07:03:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

Error: (02/15/2020 04:41:18 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server Windows.Internal.StateRepository.ApplicationExtension did not register with DCOM within the required timeout.

Error: (02/15/2020 04:40:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/15/2020 04:40:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NetTcpPortSharing service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.


==================== Memory info ===========================

BIOS: Dell Inc. A09 02/01/2013
Motherboard: Dell Inc. 084J0R
Processor: Intel® Pentium® CPU G2020 @ 2.90GHz
Percentage of memory in use: 55%
Total physical RAM: 3967.54 MB
Available physical RAM: 1769.07 MB
Total Virtual: 7935.54 MB
Available Virtual: 5735.32 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:225.9 GB) (Free:180.67 GB) NTFS

\\?\Volume{9d80cf44-4223-11e3-adbc-806e6f6e6963}\ (RECOVERY) (Fixed) (Total:6.89 GB) (Free:1.73 GB) NTFS
\\?\Volume{17ee898d-0000-0000-007e-000000000000}\ () (Fixed) (Total:0.04 GB) (Free:0.04 GB) FAT

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 232.8 GB) (Disk ID: 17EE898D)
Partition 1: (Not Active) - (Size=39 MB) - (Type=06)
Partition 2: (Active) - (Size=6.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=225.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================


  • 0

#25
RKinner

RKinner

    Malware Expert

  • Expert
  • 22,473 posts
  • MVP

If you see it in the registry just above

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetTcpPortSharing

then change the Start Type to 4

 

otherwise

 

you can open Control Panel, (View By: Large Icons), Programs & Features, then Turn Windows Features On & Off then click on the + in front of .Net Framework 4.8 then on the + in front of WCF Services then uncheck both TCP Activation and TCP Port Sharing OK.


  • 0

Advertisements


#26
bytesize

bytesize

    Member

  • Topic Starter
  • Member
  • PipPip
  • 60 posts

Found it in the registry and changed start to 4.


  • 0

#27
RKinner

RKinner

    Malware Expert

  • Expert
  • 22,473 posts
  • MVP

Download OOSU10.exe:

https://www.oo-softw...com/en/shutup10

Download and Save it (You will get a popup while it's downloading.  You can X out of it)
then Right click and Run As Admin.
Allow it to make a System Restore Point.
Click on Actions then on Apply Recommended Settings.

Close the program and reboot.

After each major update it's wise to rerun the program and Revert the changes.  This will cut back on some unnecessary processes.  May make it a bit quicker.


  • 0

#28
RKinner

RKinner

    Malware Expert

  • Expert
  • 22,473 posts
  • MVP

Also to make the change from Win 7 to 10 easier for the user you might want to install Open Shell:

https://github.com/O...Open-Shell-Menu

actual download is:

https://github.com/O...tup_4_4_142.exe

This will hide all of the metro junk and make it look like a Windows 7 desktop.  I use it on all of my Win 10 so I don't have to hunt for stuff.

 

Also for ad blocking the best extension is Ublock Origin.  I refuse to use a browser without it.

 

Facebook user will want the F. B. Purity extension.  Gets rid of all of the ads and suggested products and posts.


  • 0

#29
bytesize

bytesize

    Member

  • Topic Starter
  • Member
  • PipPip
  • 60 posts

Hi RKinner downloaded OOSU10.exe it will be useful, save you from resetting everything manually after an update thanks. Do you need me to do any more scans.

 

Thanks


  • 0

#30
RKinner

RKinner

    Malware Expert

  • Expert
  • 22,473 posts
  • MVP

If you are happy with it I guess we are done.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP