Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Concerned about malware because I allowed a backdoor for access [Solve


  • This topic is locked This topic is locked

#1
LollyGagin

LollyGagin

    Member

  • Member
  • PipPip
  • 13 posts

I got an automated call today on our home phone saying my mom's bank account would be charged over $200 for something unless they got a call cancelling the service.  My mom has dementia so, I was worried she ordered something not knowing what she was doing.  When I called, they said it was for PC protection & started giving me instructions for how to cancel the service.  They had me download 2 apps.  One was AnyDesk, the other was TeamViewer.  Then I saw them take command of my computer & click all sorts of things.  Finally a box came up and they wanted me to enter a debit card.  Well, that sounded fishy because if my mom ordered something, they should already have the debit card.  Also, they said the email address I gave them was wrong.  Well, mom doesn't have an email address so, there's no way she ever gave them one.  After that I hung up & uninstalled the apps and threw away the app folders in my programs directories.  I also went to AppData files & threw away everything there that related to the two programs.  Then I ran Malwarebytes & SuperAntiSpyware.  Malwarebytes found nothing & SuperAntiSpyware just found a bunch of tracking cookies that I deleted.  Still, I'm left afraid that they may have a back door open into my computer and either could or already have downloaded malware.  Whatever they did also messed up my slide show on my desktop.  Is there any way to check and make sure they didn't leave anything malicious on my computer and shut any back doors they may have access to now?

 

Thanks,

LollyGagin

 

 

 

FRST.txt Log

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-12-2020
Ran by Acer (administrator) on DESKTOP-58JI9LT (Acer Nitro AN515-53) (15-12-2020 17:08:45)
Running from C:\Users\Acer\Desktop
Loaded Profiles: Acer
Platform: Windows 10 Home Version 20H2 19042.685 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(A.V.M. SOFTWARE, INC. -> AVM Software) C:\Program Files (x86)\Paltalk\update\pt_update_service.exe
(Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\scalc.exe
(Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <26>
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt\IGCC.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe
(Intel® Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_e335ebb186115025\RstMwService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Acer\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) [File not signed] [File is in use] C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
(SUPERAntiSpyware.com -> SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Support.com Inc -> SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
 
==================== Registry (Whitelisted) ===================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19677472 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_ASC] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [11219376 2020-12-08] (Support.com Inc -> SUPERAntiSpyware)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [Paltalk] => C:\Program Files (x86)\Paltalk\Paltalk.exe [27189688 2020-09-15] (A.V.M. SOFTWARE, INC. -> AVM Software)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [PaltalkLauncher] => C:\Program Files (x86)\Paltalk\PaltalkLauncher.exe [771512 2020-09-15] (A.V.M. SOFTWARE, INC. -> AVM Software)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32414392 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\87.0.4280.88\Installer\chrmstp.exe [2020-12-08] (Google LLC -> Google LLC)
Startup: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar.lnk [2020-12-08]
ShortcutTarget: Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) [File not signed] [File is in use]
 
==================== Scheduled Tasks (Whitelisted) ============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {038FD82F-DDC0-46E0-860D-1688186A7C51} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {0A797F8C-A747-46F2-8088-C6BE208AF7FD} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {37BB4993-E3D2-4594-B22D-3152A88B82A2} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3B62CFDE-161B-425D-B756-729ED895E823} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [670928 2020-11-12] (Mozilla Corporation -> Mozilla Foundation)
Task: {80628385-F804-4B2A-AE05-B520587D1E4F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8D4B220D-1E26-42C9-9A4C-419552D59CEC} - System32\Tasks\NCH Software\FastFoxSevenDays => C:\Program Files (x86)\NCH Software\FastFox\FastFox.exe
Task: {986F54A4-241E-4241-9244-4440F69B231F} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A659040A-42A6-478F-983A-D6B3B46E544B} - System32\Tasks\Opera scheduled Autoupdate 1607479406 => C:\Program Files (x86)\Opera\launcher.exe [1529880 2020-11-25] (Opera Software AS -> Opera Software)
Task: {B84A3225-9359-4B6E-8A3D-80972F500724} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2020-12-08] (Google Inc -> Google Inc.)
Task: {BA5FE7FD-1342-4603-83E1-95A123F7A0BF} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {BC99A069-7D58-48CF-BA2D-747CB811D89A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2020-12-08] (Google Inc -> Google Inc.)
Task: {C4435EF8-0CCA-478C-9863-4C430D3D40BB} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C67758DB-7623-4C8D-941C-661B33EFE78F} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DC3B4102-0FF6-49B5-93AD-C90D392908E9} - System32\Tasks\FreeFileViewerUpdateChecker => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe [1635512 2013-03-25] (Bitberry Software -> Bitberry Software) <==== ATTENTION
Task: {E0AEE404-E861-4628-95FA-336978E99255} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {E0DD7E13-5C05-4B77-9C9D-62C2A1AC6D91} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F25EDDD8-6DC5-4A4F-BA86-A4CA1BDEE531} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FB673557-D924-4F5A-AE31-91E16A4BAD17} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FD1F8905-F67C-4228-BAB3-4780E1301D84} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26896568 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe <==== ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{bb8a466b-6536-41d3-8809-c8cf6a4049a9}: [DhcpNameServer] 192.168.43.1
 
Edge: 
======
DownloadDir: C:\Users\Acer\Downloads
Edge Profile: C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default [2020-12-12]
Edge DownloadDir: C:\Users\Acer\Downloads
Edge Extension: (Outlook) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb [2020-12-09]
Edge Extension: (Word) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi [2020-12-09]
Edge Extension: (Excel) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm [2020-12-09]
Edge Extension: (PowerPoint) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf [2020-12-09]
 
FireFox:
========
FF DefaultProfile: y876i4d5.default
FF ProfilePath: C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\y876i4d5.default [2020-12-08]
FF ProfilePath: C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\wzavswk4.default-release [2020-12-15]
 
Chrome: 
=======
CHR Profile: C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default [2020-12-15]
CHR HomePage: Default -> hxxp://www.google.com/
CHR Extension: (Slides) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-12-08]
CHR Extension: (Docs) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-12-08]
CHR Extension: (Google Drive) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-08]
CHR Extension: (YouTube) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-12-08]
CHR Extension: (Sheets) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-12-08]
CHR Extension: (Google Docs Offline) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-12-08]
CHR Extension: (Lionbridge Extension) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\hggdekahccifhildkadlnnfkdcmlmpah [2020-12-09]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-12-08]
CHR Extension: (Gmail) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-08]
CHR Extension: (Chrome Media Router) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-08]
 
==================== Services (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2020-12-08] (SUPERAntiSpyware.com -> SUPERAntiSpyware.com)
R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2019-01-22] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R2 paltalk_update_service; C:\Program Files (x86)\Paltalk\update\pt_update_service.exe [1337784 2020-09-15] (A.V.M. SOFTWARE, INC. -> AVM Software)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-02-28] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
 
===================== Drivers (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 AcerAirplaneModeController; C:\Windows\System32\drivers\AcerAirplaneModeController.sys [30168 2020-05-13] (Acer Incorporated -> Acer Incorporated)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153312 2020-12-09] (Malwarebytes Corporation -> Malwarebytes)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220160 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2020-12-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [197792 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [77496 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [139424 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 USBPcap; C:\Windows\system32\DRIVERS\USBPcap.sys [41720 2015-12-10] (Wireshark Foundation, Inc. -> USBPcap)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [48536 2020-12-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [429296 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One month (created) (Whitelisted) =========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2020-12-15 17:08 - 2020-12-15 17:09 - 000019020 _____ C:\Users\Acer\Desktop\FRST.txt
2020-12-15 17:08 - 2020-12-15 17:09 - 000000000 ____D C:\FRST
2020-12-15 17:02 - 2020-12-15 17:02 - 002286592 _____ (Farbar) C:\Users\Acer\Desktop\FRST64.exe
2020-12-15 12:00 - 2020-12-15 12:05 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Wireshark
2020-12-15 09:15 - 2020-12-15 09:15 - 000000000 ____D C:\Users\Acer\AppData\Roaming\TeamViewer
2020-12-15 09:11 - 2020-12-15 09:33 - 000000000 ____D C:\Users\Acer\AppData\Roaming\AnyDesk
2020-12-12 09:36 - 2020-12-12 09:36 - 011289960 _____ C:\Users\Acer\Downloads\mb-support-1.8.0.848.exe
2020-12-11 19:34 - 2020-12-11 19:35 - 000000000 ____D C:\Users\Acer\AppData\Local\FreeFileViewer
2020-12-11 19:23 - 2020-12-11 19:23 - 000000000 ____D C:\Windows\system32\Tasks\Apple
2020-12-11 19:22 - 2020-12-11 19:22 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2020-12-10 18:56 - 2020-12-10 18:56 - 000174055 _____ C:\Users\Acer\Documents\ASULLIVAN Revised Liability Release Notice_Global Resolution Services_Barclay Mercury Card.pdf
2020-12-09 21:19 - 2020-12-09 21:19 - 000077496 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2020-12-09 21:18 - 2020-12-09 21:18 - 000197792 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2020-12-09 21:18 - 2020-12-09 21:18 - 000139424 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2020-12-09 21:11 - 2020-12-09 21:11 - 000002914 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2020-12-09 21:11 - 2020-12-09 21:11 - 000002908 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2020-12-09 21:11 - 2020-12-09 21:11 - 000002904 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2020-12-09 21:11 - 2020-12-09 21:11 - 000002902 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk
2020-12-09 21:07 - 2020-12-09 21:21 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-12-09 21:07 - 2020-12-09 21:21 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-12-09 21:07 - 2020-12-09 21:21 - 000002276 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2020-12-09 21:06 - 2020-12-11 11:17 - 000003480 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-12-09 21:06 - 2020-12-11 11:17 - 000003356 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-12-09 20:52 - 2020-12-09 20:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2020-12-09 20:52 - 2020-12-09 20:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2020-12-09 20:52 - 2020-12-09 20:52 - 001822272 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2020-12-09 20:52 - 2020-12-09 20:52 - 001393496 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2020-12-09 20:52 - 2020-12-09 20:52 - 001333248 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000266240 _____ C:\Windows\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000240640 _____ C:\Windows\SysWOW64\CoreMas.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\ncpa.cpl
2020-12-09 20:52 - 2020-12-09 20:52 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncpa.cpl
2020-12-09 20:52 - 2020-12-09 20:52 - 000060928 _____ C:\Windows\system32\runexehelper.exe
2020-12-09 20:52 - 2020-12-09 20:52 - 000048640 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000039936 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000010912 _____ C:\Windows\system32\DrtmAuthTxt.wim
2020-12-09 20:52 - 2020-12-09 20:52 - 000010752 _____ C:\Windows\SysWOW64\agentactivationruntimestarter.exe
2020-12-09 20:52 - 2020-12-09 20:52 - 000001370 _____ C:\Windows\system32\ThirdPartyNoticesBySHS.txt
2020-12-09 20:51 - 2020-12-09 20:51 - 002260480 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000363520 _____ C:\Windows\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000287232 _____ C:\Windows\system32\CoreMas.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000165376 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2020-12-09 20:51 - 2020-12-09 20:51 - 000089088 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000073216 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000013312 _____ C:\Windows\system32\agentactivationruntimestarter.exe
2020-12-09 20:20 - 2020-12-09 20:20 - 000000000 ___HD C:\OneDriveTemp
2020-12-09 19:12 - 2020-12-09 19:12 - 030469496 _____ (Piriform Software Ltd) C:\Users\Acer\Downloads\ccsetup574.exe
2020-12-09 17:02 - 2020-12-09 17:02 - 000000000 ____D C:\Users\Acer\AppData\LocalLow\Temp
2020-12-09 16:01 - 2020-12-09 16:01 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-12-09 16:01 - 2020-12-09 16:01 - 000220160 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-12-09 16:01 - 2020-12-09 16:01 - 000019912 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2020-12-09 16:01 - 2020-12-09 16:01 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-12-09 15:31 - 2020-12-12 09:29 - 000000000 ____D C:\Users\Acer\AppData\Local\CrashDumps
2020-12-08 23:13 - 2020-12-08 23:16 - 000000000 ____D C:\Users\Acer\AppData\Roaming\FreeFileViewer
2020-12-08 22:39 - 2020-12-08 22:39 - 000000000 ____D C:\Users\Acer\AppData\Roaming\OpenOffice
2020-12-08 22:37 - 2020-12-08 22:37 - 000000458 _____ C:\Users\Acer\AppData\Roaming\Drives Monitor_Settings.ini
2020-12-08 22:35 - 2020-12-08 22:35 - 000001082 _____ C:\Users\Acer\Desktop\SQLiteStudio - Shortcut.lnk
2020-12-08 22:34 - 2020-12-08 22:34 - 000001816 _____ C:\Users\Acer\Desktop\ScreamingFrogSEOSpider - Shortcut.lnk
2020-12-08 22:29 - 2020-12-08 22:29 - 000002205 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk
2020-12-08 22:29 - 2020-12-08 22:29 - 000000000 ____D C:\Program Files (x86)\Belarc
2020-12-08 22:28 - 2020-12-08 22:28 - 000000877 _____ C:\Users\Acer\Desktop\HTTrack Website Copier.lnk
2020-12-08 22:28 - 2020-12-08 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2020-12-08 22:28 - 2020-12-08 22:28 - 000000000 ____D C:\Program Files\WinHTTrack
2020-12-08 22:19 - 2020-12-08 22:19 - 000003033 _____ C:\Users\Acer\Desktop\TaskMerlin.lnk
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Interfathom TaskMerlin
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\Users\Acer\AppData\Local\Interfathom
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\ProgramData\Interfathom
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\Program Files (x86)\Interfathom
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files\MSBuild
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-12-08 21:49 - 2020-12-14 20:02 - 000000000 ____D C:\ProgramData\Paltalk Update
2020-12-08 21:49 - 2020-12-08 21:51 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk
2020-12-08 21:49 - 2020-12-08 21:49 - 000001060 _____ C:\Users\Acer\Desktop\Paltalk.lnk
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Users\Acer\AppData\Roaming\A.V.M
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Users\Acer\AppData\Local\Paltalk
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Users\Acer\AppData\Local\A.V.M
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Program Files (x86)\Paltalk
2020-12-08 21:47 - 2020-12-08 21:47 - 000001192 _____ C:\Users\Acer\Desktop\blender.lnk
2020-12-08 21:47 - 2020-12-08 21:47 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender
2020-12-08 21:47 - 2020-12-08 21:47 - 000000000 ____D C:\Program Files\Blender Foundation
2020-12-08 21:45 - 2020-12-08 21:46 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Scribus
2020-12-08 21:44 - 2020-12-08 21:44 - 000000907 _____ C:\Users\Public\Desktop\Scribus 1.4.8.lnk
2020-12-08 21:44 - 2020-12-08 21:44 - 000000907 _____ C:\ProgramData\Desktop\Scribus 1.4.8.lnk
2020-12-08 21:44 - 2020-12-08 21:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Scribus 1.4.8
2020-12-08 21:43 - 2020-12-08 21:44 - 000000000 ____D C:\Program Files\Scribus 1.4.8
2020-12-08 21:42 - 2020-12-08 21:42 - 000000218 _____ C:\Users\Acer\AppData\Local\recently-used.xbel
2020-12-08 21:42 - 2020-12-08 21:42 - 000000000 ____D C:\Users\Acer\AppData\Roaming\inkscape
2020-12-08 21:42 - 2020-12-08 21:42 - 000000000 ____D C:\Users\Acer\.dbus-keyrings
2020-12-08 21:41 - 2020-12-08 21:41 - 000000939 _____ C:\Users\Public\Desktop\Inkscape.lnk
2020-12-08 21:41 - 2020-12-08 21:41 - 000000939 _____ C:\ProgramData\Desktop\Inkscape.lnk
2020-12-08 21:41 - 2020-12-08 21:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape
2020-12-08 21:40 - 2020-12-08 21:41 - 000000000 ____D C:\Program Files\Inkscape
2020-12-08 21:37 - 2020-12-08 21:37 - 000001363 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Frog SEO Spider.lnk
2020-12-08 21:37 - 2020-12-08 21:37 - 000001265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uninstall Screaming Frog SEO Spider.lnk
2020-12-08 21:37 - 2020-12-08 21:37 - 000000000 ____D C:\Program Files (x86)\Screaming Frog SEO Spider
2020-12-08 21:24 - 2020-12-08 21:25 - 000000000 ____D C:\Users\Acer\AppData\Roaming\sqlitestudio
2020-12-08 21:24 - 2020-12-08 21:24 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SQLiteStudio
2020-12-08 21:24 - 2020-12-08 21:24 - 000000000 ____D C:\Program Files\SQLiteStudio
2020-12-08 21:23 - 2020-12-08 21:23 - 000002989 _____ C:\Users\Acer\Desktop\Zinio Reader.lnk
2020-12-08 21:23 - 2020-12-08 21:23 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zinio Reader
2020-12-08 21:23 - 2020-12-08 21:23 - 000000000 ____D C:\Program Files (x86)\Zinio
2020-12-08 21:18 - 2020-12-08 21:19 - 000002287 _____ C:\Users\Acer\Desktop\Kindle.lnk
2020-12-08 21:18 - 2020-12-08 21:19 - 000000000 ____D C:\Users\Acer\AppData\Local\Amazon
2020-12-08 21:18 - 2020-12-08 21:18 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2020-12-08 21:17 - 2020-12-15 16:57 - 000000000 ____D C:\Program Files\CCleaner
2020-12-08 21:17 - 2020-12-15 15:57 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-12-08 21:17 - 2020-12-08 21:17 - 000002886 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-12-08 21:17 - 2020-12-08 21:17 - 000001128 _____ C:\Users\Public\Desktop\OpenOffice 4.1.4.lnk
2020-12-08 21:17 - 2020-12-08 21:17 - 000001128 _____ C:\ProgramData\Desktop\OpenOffice 4.1.4.lnk
2020-12-08 21:17 - 2020-12-08 21:17 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.4
2020-12-08 21:17 - 2020-12-08 21:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-12-08 21:16 - 2020-12-08 21:17 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4
2020-12-08 21:04 - 2020-12-08 21:04 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2020-12-08 21:03 - 2020-12-08 21:04 - 000003970 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1607479406
2020-12-08 21:03 - 2020-12-08 21:04 - 000000000 ____D C:\Program Files (x86)\Opera
2020-12-08 21:03 - 2020-12-08 21:03 - 000001204 _____ C:\Users\Public\Desktop\Opera Browser.lnk
2020-12-08 21:03 - 2020-12-08 21:03 - 000001204 _____ C:\ProgramData\Desktop\Opera Browser.lnk
2020-12-08 21:03 - 2020-12-08 21:03 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Opera Software
2020-12-08 21:03 - 2020-12-08 21:03 - 000000000 ____D C:\Users\Acer\AppData\Local\Opera Software
2020-12-08 20:59 - 2020-12-08 20:59 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Apple Computer
2020-12-08 20:59 - 2020-12-08 20:59 - 000000000 ____D C:\Users\Acer\AppData\Local\Apple Computer
2020-12-08 20:58 - 2020-12-08 20:58 - 000002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2020-12-08 20:58 - 2020-12-08 20:58 - 000002507 _____ C:\Users\Public\Desktop\Safari.lnk
2020-12-08 20:58 - 2020-12-08 20:58 - 000002507 _____ C:\ProgramData\Desktop\Safari.lnk
2020-12-08 20:58 - 2020-12-08 20:58 - 000000000 ____D C:\ProgramData\Apple Computer
2020-12-08 20:58 - 2020-12-08 20:58 - 000000000 ____D C:\Program Files (x86)\Safari
2020-12-08 20:55 - 2020-12-08 20:55 - 000001827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2020-12-08 20:55 - 2020-12-08 20:55 - 000000000 ____D C:\Program Files\USBPcap
2020-12-08 20:54 - 2020-12-08 20:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2020-12-08 20:54 - 2020-12-08 20:54 - 000000000 ____D C:\Program Files (x86)\WinPcap
2020-12-08 20:52 - 2020-12-08 20:55 - 000000000 ____D C:\Program Files\Wireshark
2020-12-08 20:52 - 2020-12-08 20:52 - 000001567 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark Legacy.lnk
2020-12-08 20:45 - 2020-12-08 20:45 - 000000000 ____D C:\Users\Acer\AppData\Local\mbamtray
2020-12-08 20:45 - 2020-12-08 20:45 - 000000000 ____D C:\Users\Acer\AppData\Local\mbam
2020-12-08 20:44 - 2020-12-09 16:01 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-12-08 20:44 - 2020-12-08 20:44 - 000000000 ____D C:\ProgramData\MB2Migration
2020-12-08 20:44 - 2020-12-08 20:44 - 000000000 ____D C:\Program Files\Malwarebytes
2020-12-08 20:17 - 2020-12-11 19:22 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\Users\Acer\AppData\Local\Apple
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\ProgramData\Apple
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\Program Files\Bonjour
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\Program Files (x86)\Bonjour
2020-12-08 20:14 - 2020-12-08 20:14 - 000000000 ____D C:\Users\Acer\AppData\Roaming\SUPERAntiSpyware.com
2020-12-08 20:12 - 2020-12-14 09:14 - 000000000 ____D C:\Program Files\SUPERAntiSpyware
2020-12-08 20:12 - 2020-12-08 20:12 - 000000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2020-12-08 20:12 - 2020-12-08 20:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2020-12-08 20:09 - 2020-12-08 20:44 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-12-08 20:09 - 2020-12-08 20:44 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2020-12-08 19:58 - 2020-12-15 12:05 - 000000000 ____D C:\Users\Acer\AppData\LocalLow\Mozilla
2020-12-08 19:58 - 2020-12-08 19:58 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Mozilla
2020-12-08 19:58 - 2020-12-08 19:58 - 000000000 ____D C:\Users\Acer\AppData\Local\Mozilla
2020-12-08 19:57 - 2020-12-15 12:05 - 000000000 ____D C:\ProgramData\Mozilla
2020-12-08 19:57 - 2020-12-08 19:58 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-12-08 19:57 - 2020-12-08 19:57 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-12-08 19:57 - 2020-12-08 19:57 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2020-12-08 19:57 - 2020-12-08 19:57 - 000000993 _____ C:\ProgramData\Desktop\Firefox.lnk
2020-12-08 19:57 - 2020-12-08 19:57 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2020-12-08 19:57 - 2020-12-08 19:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-12-08 19:51 - 2020-12-08 23:12 - 000000000 ____D C:\Program Files (x86)\NCH Software
2020-12-08 19:51 - 2020-12-08 19:55 - 000000000 ____D C:\ProgramData\NCH Software
2020-12-08 19:51 - 2020-12-08 19:51 - 000000000 ____D C:\Windows\system32\Tasks\NCH Software
2020-12-08 19:01 - 2020-12-09 21:22 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-12-08 19:01 - 2020-12-09 21:22 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-12-08 19:01 - 2020-12-09 21:22 - 000002206 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-12-08 19:01 - 2020-12-08 19:01 - 000000000 ____D C:\Program Files\Google
2020-12-08 19:00 - 2020-12-14 10:46 - 000000000 ____D C:\Users\Acer\AppData\Local\Google
2020-12-08 19:00 - 2020-12-08 19:10 - 000003418 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-12-08 19:00 - 2020-12-08 19:10 - 000003294 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-12-08 19:00 - 2020-12-08 19:10 - 000000000 ____D C:\Program Files (x86)\Google
2020-12-08 18:59 - 2020-12-08 19:00 - 000000000 ____D C:\Users\Acer\.gimp-2.8
2020-12-08 18:59 - 2020-12-08 18:59 - 000001523 _____ C:\Users\Acer\Desktop\gimp-2.8 - Shortcut.lnk
2020-12-08 18:59 - 2020-12-08 18:59 - 000000000 ____D C:\Users\Acer\AppData\Local\gegl-0.2
2020-12-08 18:59 - 2020-12-08 18:59 - 000000000 ____D C:\Users\Acer\AppData\Local\fontconfig
2020-12-08 18:56 - 2020-12-15 14:23 - 000004164 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{A1AF80D2-8AD8-45C1-8789-A12E5128EF6B}
2020-12-08 18:56 - 2020-12-08 18:56 - 000000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2020-12-08 18:56 - 2020-12-08 18:56 - 000000000 ____D C:\Program Files\GIMP 2
2020-12-08 18:55 - 2020-12-08 23:11 - 000000400 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2020-12-08 18:55 - 2020-12-08 18:55 - 000003164 _____ C:\Windows\system32\Tasks\FreeFileViewerUpdateChecker
2020-12-08 18:55 - 2020-12-08 18:55 - 000001154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\FreeFileViewer.lnk
2020-12-08 18:55 - 2020-12-08 18:55 - 000001148 _____ C:\Users\Acer\Desktop\FreeFileViewer.lnk
2020-12-08 18:55 - 2020-12-08 18:55 - 000001020 _____ C:\Users\Acer\Desktop\Compare It!.lnk
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileViewer
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Compare It!
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\Program Files (x86)\Unknown File Handler
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\Program Files (x86)\FreeFileViewer
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\Program Files (x86)\Compare It!
2020-12-08 18:45 - 2020-12-08 18:49 - 000000000 ____D C:\Users\Acer\AppData\Local\Sidebar7
2020-12-08 18:44 - 2020-12-08 18:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\8GadgetPack
2020-12-08 18:07 - 2020-12-09 17:51 - 000264894 _____ C:\Users\Acer\Downloads\OTL.Txt
2020-12-08 18:07 - 2020-11-02 16:15 - 001008377 _____ C:\Users\Acer\Downloads\message (1).html
2020-12-08 18:07 - 2020-10-23 17:42 - 001008377 _____ C:\Users\Acer\Downloads\message.html
2020-12-08 18:07 - 2020-09-29 13:07 - 000016670 _____ C:\Users\Acer\Downloads\Receipt.pdf
2020-12-08 18:07 - 2020-09-20 15:38 - 089009584 _____ (AVM Software, Inc.) C:\Users\Acer\Downloads\PaltalkSetup.exe
2020-12-08 18:07 - 2020-07-21 20:43 - 000289427 _____ C:\Users\Acer\Downloads\Time Sheet Directions for RATERS 10.19.17.pdf
2020-12-08 18:07 - 2020-07-21 20:23 - 000305820 _____ C:\Users\Acer\Downloads\Sun Life EF Business (1).pdf
2020-12-08 18:07 - 2020-07-21 20:22 - 000305820 _____ C:\Users\Acer\Downloads\Sun Life EF Business.pdf
2020-12-08 18:07 - 2020-07-21 20:13 - 000120622 _____ C:\Users\Acer\Downloads\Lionbridge Plan Highlights 2019 (1).pdf
2020-12-08 18:07 - 2020-07-21 20:12 - 000120622 _____ C:\Users\Acer\Downloads\Lionbridge Plan Highlights 2019.pdf
2020-12-08 18:07 - 2020-07-11 11:33 - 001197171 _____ C:\Users\Acer\Downloads\rep_Barefoot_Writer_9_Ways_You_Can_Do_It.pdf
2020-12-08 18:07 - 2020-07-10 19:31 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (4).pdf
2020-12-08 18:07 - 2020-07-10 19:23 - 000242337 _____ C:\Users\Acer\Downloads\Remote Hire Authorized Agent Instructions .pdf
2020-12-08 18:07 - 2020-07-10 19:23 - 000242337 _____ C:\Users\Acer\Downloads\Remote Hire Authorized Agent Instructions  (1).pdf
2020-12-08 18:07 - 2020-07-10 19:16 - 000155782 _____ C:\Users\Acer\Downloads\Software Code of Ethics_ENG (2).pdf
2020-12-08 18:07 - 2020-07-10 19:15 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (3).pdf
2020-12-08 18:07 - 2020-07-10 19:15 - 000155782 _____ C:\Users\Acer\Downloads\Software Code of Ethics_ENG (1).pdf
2020-12-08 18:07 - 2020-07-10 18:48 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (2).pdf
2020-12-08 18:07 - 2020-07-10 18:48 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (1).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (4).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (3).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (2).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (1).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement.pdf
2020-12-08 18:07 - 2020-07-05 22:46 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (4).pdf
2020-12-08 18:07 - 2020-07-05 22:45 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (3).pdf
2020-12-08 18:07 - 2020-07-05 22:42 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (2).pdf
2020-12-08 18:07 - 2020-07-05 22:41 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (1).pdf
2020-12-08 18:07 - 2020-06-14 20:20 - 095911542 _____ (The Scribus Team) C:\Users\Acer\Downloads\scribus-1.4.8-windows-x64.exe
2020-12-08 18:07 - 2020-04-23 20:54 - 002132245 _____ C:\Users\Acer\Downloads\mail-4404-60314-2237990-4-c350 (2).pdf
2020-12-08 18:07 - 2020-04-23 20:53 - 002132245 _____ C:\Users\Acer\Downloads\mail-4404-60314-2237990-4-c350 (1).pdf
2020-12-08 18:07 - 2020-04-23 20:51 - 002132245 _____ C:\Users\Acer\Downloads\mail-4404-60314-2237990-4-c350.pdf
2020-12-08 18:07 - 2020-03-08 20:40 - 253293008 _____ (Screaming Frog Ltd) C:\Users\Acer\Downloads\ScreamingFrogSEOSpider-12.6.exe
2020-12-08 18:07 - 2018-01-08 12:10 - 000000736 _____ C:\Users\Acer\Downloads\OneDrive - Shortcut.lnk
2020-12-08 18:07 - 2017-07-14 15:08 - 002756168 _____ (mIRC Co. Ltd.) C:\Users\Acer\Downloads\mirc749.exe
2020-12-08 18:07 - 2017-07-13 18:54 - 013469937 _____ C:\Users\Acer\Downloads\san1122a.zip
2020-12-08 18:07 - 2017-07-13 18:54 - 000068768 _____ C:\Users\Acer\Downloads\memtest86+-4.10.iso.zip
2020-12-08 18:07 - 2017-03-22 12:10 - 078613984 _____ (Slack Technologies) C:\Users\Acer\Downloads\SlackSetup.exe
2020-12-08 18:07 - 2017-01-10 15:35 - 043291656 _____ (Opera Software) C:\Users\Acer\Downloads\Opera_42.0.2393.94_Setup.exe
2020-12-08 18:07 - 2016-12-06 16:43 - 092229176 _____ (TryMyUI, Inc.) C:\Users\Acer\Downloads\TryMyUIRecorder_windows-x64_1_0_2.exe
2020-12-08 18:07 - 2016-11-17 04:00 - 012300288 _____ C:\Users\Acer\Downloads\SmartApp.msi
2020-12-08 18:07 - 2016-02-20 22:14 - 002587312 _____ (Microsoft Corporation) C:\Users\Acer\Downloads\TMSetup_2_1_0_3.exe
2020-12-08 18:07 - 2016-02-18 01:18 - 088572984 _____ (TryMyUI, Inc.) C:\Users\Acer\Downloads\TryMyUIRecorder_windows_1_0_2.exe
2020-12-08 18:07 - 2016-02-10 22:24 - 038494576 _____ (Apple Inc.) C:\Users\Acer\Downloads\SafariSetup.exe
2020-12-08 18:07 - 2016-02-06 21:05 - 024642208 _____ (SUPERAntiSpyware) C:\Users\Acer\Downloads\SUPERAntiSpyware.exe
2020-12-08 18:07 - 2016-02-06 01:15 - 000602112 _____ (OldTimer Tools) C:\Users\Acer\Downloads\OTL.exe
2020-12-08 18:07 - 2016-02-05 23:03 - 022908888 _____ (Malwarebytes ) C:\Users\Acer\Downloads\mbam-setup-2.2.0.1024.exe
2020-12-08 18:06 - 2020-12-09 17:51 - 000075246 _____ C:\Users\Acer\Downloads\Extras.Txt
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\Wireless LAN_Atheros_10.0.0.285_W81x64_A
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\san1122a
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\memtest86+-4.10.iso
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\IO Drivers_Intel_603.9600.1948.28229_W81x64_A
2020-12-08 18:06 - 2020-09-08 19:58 - 018423902 _____ C:\Users\Acer\Downloads\General_Guidelines (2).pdf
2020-12-08 18:06 - 2020-08-11 21:57 - 000268874 _____ C:\Users\Acer\Downloads\Decide Who You'll Write For.pdf
2020-12-08 18:06 - 2020-07-22 17:29 - 018423902 _____ C:\Users\Acer\Downloads\General_Guidelines.pdf
2020-12-08 18:06 - 2020-07-21 20:18 - 000284509 _____ C:\Users\Acer\Downloads\401(k) Summary Plan Description (SPD).pdf
2020-12-08 18:06 - 2020-07-14 02:13 - 000599536 _____ C:\Users\Acer\Downloads\i-9instr.pdf
2020-12-08 18:06 - 2020-07-10 16:18 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history (3).json
2020-12-08 18:06 - 2020-07-10 16:18 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history (2).json
2020-12-08 18:06 - 2020-07-10 16:17 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history.json
2020-12-08 18:06 - 2020-07-10 16:17 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history (1).json
2020-12-08 18:06 - 2020-07-09 00:29 - 000060411 _____ C:\Users\Acer\Downloads\1998-03-01 The Mind Has No Firewall (Thomas).pdf
2020-12-08 18:06 - 2020-07-04 20:03 - 018423902 _____ C:\Users\Acer\Downloads\General_Guidelines (1).pdf
2020-12-08 18:06 - 2020-06-19 13:33 - 141488128 _____ C:\Users\Acer\Downloads\blender-2.83.0-windows64.msi
2020-12-08 18:06 - 2020-06-07 17:05 - 024155704 _____ C:\Users\Acer\Downloads\_29c594d9b502c2b8365da10cdaf76de9_SM_Course-4_Lecuture-Slides.zip
2020-12-08 18:06 - 2020-06-07 17:05 - 024155704 _____ C:\Users\Acer\Downloads\_29c594d9b502c2b8365da10cdaf76de9_SM_Course-4_Lecuture-Slides (1).zip
2020-12-08 18:06 - 2020-05-31 20:21 - 092830805 _____ C:\Users\Acer\Downloads\inkscape-1.0-x64.exe
2020-12-08 18:06 - 2020-05-13 02:10 - 028421710 _____ C:\Users\Acer\Downloads\_05caea0f1b6cd495b344fc30f07e0642_Course-2-PDF-Slide-Presentations.zip
2020-12-08 18:06 - 2020-05-05 18:43 - 043454652 _____ C:\Users\Acer\Downloads\_54c0cb153cfa03ec39e34a1c40919c17_Course-1-PDF-Slide-Presentations.zip
2020-12-08 18:06 - 2020-05-05 18:43 - 043454652 _____ C:\Users\Acer\Downloads\_54c0cb153cfa03ec39e34a1c40919c17_Course-1-PDF-Slide-Presentations (1).zip
2020-12-08 18:06 - 2020-04-26 19:40 - 000308303 _____ C:\Users\Acer\Downloads\facebook-angelasullivan9041083.zip
2020-12-08 18:06 - 2020-03-11 19:58 - 056563704 _____ (Amazon.com) C:\Users\Acer\Downloads\KindleForPC_installer_1_27_56109.exe
2020-12-08 18:06 - 2020-01-13 16:14 - 034862967 _____ C:\Users\Acer\Downloads\InstallSQLiteStudio-3.2.1.exe
2020-12-08 18:06 - 2019-01-27 14:53 - 056454776 _____ (Amazon.com) C:\Users\Acer\Downloads\Kindle_for_PC_Download.exe
2020-12-08 18:06 - 2018-11-18 20:27 - 018071560 _____ (Piriform Software Ltd) C:\Users\Acer\Downloads\ccsetup549.exe
2020-12-08 18:06 - 2017-12-13 16:41 - 140792144 _____ C:\Users\Acer\Downloads\Apache_OpenOffice_4.1.4_Win_x86_install_en-US.exe
2020-12-08 18:06 - 2017-11-10 14:15 - 000245816 _____ (Mozilla) C:\Users\Acer\Downloads\Firefox Installer.exe
2020-12-08 18:06 - 2017-07-28 17:47 - 000300984 _____ (LogMeIn, Inc.) C:\Users\Acer\Downloads\GoToMeeting Opener.exe
2020-12-08 18:06 - 2017-07-13 18:58 - 000002035 _____ C:\Users\Acer\Downloads\cdgone.zip
2020-12-08 18:06 - 2017-07-13 18:55 - 000641975 _____ (EFD Software ) C:\Users\Acer\Downloads\hdtune_253.exe
2020-12-08 18:06 - 2017-07-12 17:20 - 000001130 _____ C:\Users\Acer\Downloads\HijackThis - Shortcut.lnk
2020-12-08 18:06 - 2017-06-20 19:40 - 001202184 _____ (Adobe Systems Incorporated) C:\Users\Acer\Downloads\flashplayer26ppau_ha_install.exe
2020-12-08 18:06 - 2017-04-14 13:36 - 000813354 _____ C:\Users\Acer\Downloads\IO Drivers_Intel_603.9600.1948.28229_W81x64_A.zip
2020-12-08 18:06 - 2017-04-14 13:16 - 010861118 _____ C:\Users\Acer\Downloads\CardReader_Realtek_6.3.9600.21245_W81x64_A.zip
2020-12-08 18:06 - 2017-04-14 12:53 - 001761632 _____ (Acer Incorporated) C:\Users\Acer\Downloads\AcerCareCenterLiveUpdater.exe
2020-12-08 18:06 - 2017-03-12 20:56 - 001201256 _____ (Adobe Systems Incorporated) C:\Users\Acer\Downloads\flashplayer24_ka_install.exe
2020-12-08 18:06 - 2017-02-18 18:30 - 000000053 _____ C:\Users\Acer\Downloads\google652d5eb6c60f3700.html
2020-12-08 18:06 - 2017-01-13 23:16 - 017797624 _____ C:\Users\Acer\Downloads\InstallUserTesting-v2.0.exe
2020-12-08 18:06 - 2017-01-10 17:21 - 000898024 _____ (Ginger Software) C:\Users\Acer\Downloads\Ginger.exe
2020-12-08 18:06 - 2017-01-08 23:46 - 106310681 _____ (GnuCash Development Team ) C:\Users\Acer\Downloads\gnucash-2.6.15-setup.exe
2020-12-08 18:06 - 2017-01-08 14:14 - 000517912 _____ (NCH Software) C:\Users\Acer\Downloads\ffsetup.exe
2020-12-08 18:06 - 2017-01-08 14:13 - 000964896 _____ (NCH Software) C:\Users\Acer\Downloads\essetup.exe
2020-12-08 18:06 - 2017-01-06 13:02 - 017956136 _____ C:\Users\Acer\Downloads\InstallScreencastOMatic-2.0.exe
2020-12-08 18:06 - 2017-01-02 19:47 - 004952208 _____ C:\Users\Acer\Downloads\advisorinstaller.exe
2020-12-08 18:06 - 2016-12-29 23:03 - 393440944 _____ C:\Users\Acer\Downloads\Audio_Realtek_6.0.1.7209_W81x64_A.zip
2020-12-08 18:06 - 2016-12-29 21:55 - 026496761 _____ (Audacity Team ) C:\Users\Acer\Downloads\audacity-win-2.1.2.exe
2020-12-08 18:06 - 2016-12-26 17:05 - 004498888 _____ (HTTrack ) C:\Users\Acer\Downloads\httrack_x64-3.48.22.exe
2020-12-08 18:06 - 2016-12-23 12:46 - 006337437 _____ C:\Users\Acer\Downloads\Chipset_Intel_9.4.4.1006_W81x64_A.zip
2020-12-08 18:06 - 2016-12-09 00:51 - 001878323 _____ C:\Users\Acer\Downloads\bookmark_merger-0.2.3.exe.zip
2020-12-08 18:06 - 2016-12-08 01:21 - 001381582 _____ (Igor Pavlov) C:\Users\Acer\Downloads\7z1604-x64.exe
2020-12-08 18:06 - 2016-11-27 20:23 - 001065376 _____ (Google Inc.) C:\Users\Acer\Downloads\ChromeSetup.exe
2020-12-08 18:06 - 2016-11-27 19:29 - 000737344 _____ (Oracle Corporation) C:\Users\Acer\Downloads\jxpiinstall.exe
2020-12-08 18:06 - 2016-11-16 12:57 - 102359936 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Acer\Downloads\Evernote_6.4.2.3788.exe
2020-12-08 18:06 - 2016-02-06 01:06 - 000388608 _____ (Trend Micro Inc.) C:\Users\Acer\Downloads\HijackThis.exe
2020-12-08 18:06 - 2016-02-05 22:15 - 006968048 _____ (IvoSoft) C:\Users\Acer\Downloads\ClassicShellSetup_4_2_5.exe
2020-12-08 18:06 - 2016-02-03 21:00 - 017935112 _____ C:\Users\Acer\Downloads\InstallScreenRecorderLauncher-2.0.exe
2020-12-08 18:06 - 2016-02-02 19:58 - 024394248 _____ C:\Users\Acer\Downloads\InstallUserTestingPlugin-v1.8.exe
2020-12-08 18:06 - 2016-01-29 23:39 - 096819488 _____ (The GIMP Team ) C:\Users\Acer\Downloads\gimp-2.8.16-setup.exe
2020-12-08 18:06 - 2015-11-17 11:04 - 017787368 _____ (Bitberry Software ) C:\Users\Acer\Downloads\FreeFileViewerSetup [1].exe
2020-12-08 18:06 - 2013-07-28 20:09 - 017948672 _____ C:\Users\Acer\Downloads\8GadgetPackSetup.msi
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\Chipset_Intel_9.4.4.1006_W81x64_A
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\CardReader_Realtek_6.3.9600.21245_W81x64_A
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\bookmark_merger-0.2.3.exe
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\backups
2020-12-08 18:04 - 2020-12-08 18:04 - 000000000 ____D C:\Users\Acer\Downloads\Audio_Realtek_6.0.1.7209_W81x64_A
2020-12-08 18:04 - 2020-05-18 13:19 - 001193337 _____ C:\Users\Acer\Downloads\work-search-all-rev-10-9-17 (1).pdf
2020-12-08 18:04 - 2019-01-27 16:46 - 107806720 _____ C:\Users\Acer\Downloads\ZinioReader_1.1.9_win64.msi
2020-12-08 18:04 - 2016-05-20 14:30 - 238731365 _____ C:\Users\Acer\Downloads\Wireless LAN_Atheros_10.0.0.285_W81x64_A.zip
2020-12-08 18:04 - 2016-02-20 15:59 - 047333544 _____ (Wireshark development team) C:\Users\Acer\Downloads\Wireshark-win64-2.0.1.exe
2020-12-08 18:04 - 2016-02-02 20:49 - 111671512 _____ (WhatUsersDo Ltd ) C:\Users\Acer\Downloads\whatusersdo-recorder.exe
2020-12-08 18:04 - 2013-07-30 15:44 - 001795784 _____ (Grig Software ) C:\Users\Acer\Downloads\wincmp-setup.exe
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Work at Home
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\UserTesting
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\TI Stuff
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Taxes
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Targeting Gangstalking electromagnetic weapons
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Sound recordings
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Screencast-O-Matic
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Research Resources
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Racism
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Psychiatry_Psychology
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Politics
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Police
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\People Find
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\OpenOffice 4.1.4 (en-US) Installation Files_2
2020-12-08 18:01 - 2020-07-24 14:09 - 000000000 ____D C:\Users\Acer\Documents\Zoom
2020-12-08 18:00 - 2020-12-08 22:53 - 000000000 ____D C:\Users\Acer\Documents\OpenOffice 4.1.4 (en-US) Installation Files
2020-12-08 18:00 - 2020-12-08 21:19 - 000000000 ____D C:\Users\Acer\Documents\My Kindle Content
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\OpenOffice 4.0.0 (en-US) Installation Files
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Marketing
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Manuals Other
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Lionbridge Documents
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Letters
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Law
2020-12-08 17:59 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Jehovahs Witnesses Official
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Jehovahs Witnesses Con
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Hardware_Software Manuals_Documentation
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Geology
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Gardening
2020-12-08 17:55 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\From Orange StoreJet
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Forms
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Firefox bookmark and history files
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Facebook downloads
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Dreams
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\CyberLink
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Crying
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Coursera
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Computers
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Bluetooth Folder
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Biophoton research
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\12 Steps Debate
2020-12-08 17:55 - 2020-11-07 23:49 - 005035984 _____ C:\Users\Acer\Documents\New Patient Intake Forms Augusta University Psychiatry Outpatient.pdf
2020-12-08 17:55 - 2020-11-06 19:52 - 000012071 _____ C:\Users\Acer\Documents\Major illnesses Conditons Hospitalizations Surgery.odt
2020-12-08 17:55 - 2020-11-06 19:45 - 000011299 _____ C:\Users\Acer\Documents\Medication list.odt
2020-12-08 17:55 - 2020-11-03 21:07 - 000661695 _____ C:\Users\Acer\Documents\ADULT NEW PATIENT PSY PACKET (003).pdf
2020-12-08 17:55 - 2020-11-03 19:36 - 000229321 _____ C:\Users\Acer\Documents\Medical Records-Sullivan.pdf
2020-12-08 17:55 - 2020-10-28 11:59 - 000012402 _____ C:\Users\Acer\Documents\letter to dr montenegro about mom.odt
2020-12-08 17:55 - 2020-10-23 15:13 - 002682880 _____ C:\Users\Acer\Documents\MyTasks.tmdb
2020-12-08 17:55 - 2020-10-16 01:26 - 000011036 _____ C:\Users\Acer\Documents\Butternut squash soup.odt
2020-12-08 17:55 - 2020-10-16 01:24 - 000000831 _____ C:\Users\Acer\Documents\sweet potato stew recipe.txt
2020-12-08 17:55 - 2020-10-16 01:22 - 000031819 _____ C:\Users\Acer\Documents\sweet potato stew recipe.pdf
2020-12-08 17:55 - 2020-10-16 01:22 - 000010354 _____ C:\Users\Acer\Documents\sweet potato stew recipe.odt
2020-12-08 17:55 - 2020-09-29 12:30 - 000078598 _____ C:\Users\Acer\Documents\South Carolina REAL ID.pdf
2020-12-08 17:55 - 2020-09-02 11:33 - 000011471 _____ C:\Users\Acer\Documents\solicit help attorney mom mental health.odt
2020-12-08 17:55 - 2020-08-28 21:03 - 002103438 _____ C:\Users\Acer\Documents\Evidence of Coverage UHC 2020.pdf
2020-12-08 17:55 - 2020-08-21 20:30 - 002338093 _____ C:\Users\Acer\Documents\Wife Saver North Augusta Menu.cdr.pdf
2020-12-08 17:55 - 2020-08-19 18:38 - 000009047 _____ C:\Users\Acer\Documents\Money Hut Logo Type.odt
2020-12-08 17:55 - 2020-07-28 01:34 - 017669223 _____ C:\Users\Acer\Documents\Defense News_Mind Control.pdf
2020-12-08 17:55 - 2020-07-28 01:31 - 000093517 _____ C:\Users\Acer\Documents\Watchtower letter about AA.pdf
2020-12-08 17:55 - 2020-07-26 23:47 - 000045847 _____ C:\Users\Acer\Documents\mom.pdf
2020-12-08 17:55 - 2020-07-26 23:47 - 000015385 _____ C:\Users\Acer\Documents\mom.odt
2020-12-08 17:55 - 2020-07-23 15:20 - 000028897 _____ C:\Users\Acer\Documents\Second Opinion Letter for Wells Fargo Claim.pdf
2020-12-08 17:55 - 2020-07-23 15:19 - 000010729 _____ C:\Users\Acer\Documents\Second Opinion Letter for Wells Fargo Claim.odt
2020-12-08 17:55 - 2020-07-18 01:22 - 000033317 _____ C:\Users\Acer\Documents\resolutions_council_99_toronto_e.pdf
2020-12-08 17:55 - 2020-07-15 16:12 - 000086042 _____ C:\Users\Acer\Documents\Before crying _freedom of speech_ you should know what it means.pdf
2020-12-08 17:55 - 2020-07-11 16:04 - 000000110 ____H C:\Users\Acer\Documents\.~lock.My%20Life%20as%20a%20Jehovahs%20Witness.odt_1.odt#
2020-12-08 17:55 - 2020-07-11 15:33 - 000019230 _____ C:\Users\Acer\Documents\My%20Life%20as%20a%20Jehovahs%20Witness.odt_1.odt
2020-12-08 17:55 - 2020-07-09 23:43 - 006994316 _____ C:\Users\Acer\Documents\Biophoton Communication_ Can Cells Talk Using Light_ _ MIT Technology Review.pdf
2020-12-08 17:55 - 2020-07-09 23:41 - 020946601 _____ C:\Users\Acer\Documents\Are There Optical Communication Channels in Our Brains_ _ MIT Technology Review.pdf
2020-12-08 17:55 - 2020-07-09 23:25 - 000253086 _____ C:\Users\Acer\Documents\DO GENES DETERMINE WHETHER WE ARE LESBIAN, GAY, BISEXUAL, OR STRAIGHT_.pdf
2020-12-08 17:55 - 2020-07-09 23:24 - 000292065 _____ C:\Users\Acer\Documents\Brief on Sexual Orientation and Genetic Determinism.pdf
2020-12-08 17:55 - 2020-07-09 23:23 - 000134059 _____ C:\Users\Acer\Documents\T2TNTOWC0G crime gene.pdf
2020-12-08 17:55 - 2020-07-09 23:21 - 000134059 _____ C:\Users\Acer\Documents\is crime in the genes the gene illusion.pdf
2020-12-08 17:55 - 2020-07-09 21:33 - 000300264 _____ C:\Users\Acer\Documents\Truth about Behavioural Genetics.pdf
2020-12-08 17:55 - 2020-07-09 21:32 - 000316469 _____ C:\Users\Acer\Documents\A Brief History of the Gay Gene.pdf
2020-12-08 17:55 - 2020-07-09 12:28 - 000000886 _____ C:\Users\Acer\Documents\letter to ian willis freepdfhosting.txt
2020-12-08 17:55 - 2020-07-09 12:13 - 000287959 _____ C:\Users\Acer\Documents\Teacher Arrested at JFK_Funny.pdf
2020-12-08 17:55 - 2020-07-09 04:07 - 000045683 _____ C:\Users\Acer\Documents\Aquino From PSYOP to Mindwar.pdf
2020-12-08 17:55 - 2020-07-09 04:04 - 000131851 _____ C:\Users\Acer\Documents\Influence of Pharmaceutical industry.pdf
2020-12-08 17:55 - 2020-07-09 04:02 - 000589468 _____ C:\Users\Acer\Documents\UKReport_Influence of Pharmaceutical Industry.pdf
2020-12-08 17:55 - 2020-07-09 03:58 - 000256454 _____ C:\Users\Acer\Documents\no genetic association schizophrenia.pdf
2020-12-08 17:55 - 2020-07-09 03:53 - 000335600 _____ C:\Users\Acer\Documents\No evidence that schizophrenia candidate genes are more associated with schizophrenia than non-candidate genes.pdf
2020-12-08 17:55 - 2020-07-09 03:48 - 030629016 _____ C:\Users\Acer\Documents\Debunking the Two Chemical Imbalance Myths, Again _ Psychiatric Times.pdf
2020-12-08 17:55 - 2020-07-09 03:45 - 005402216 _____ C:\Users\Acer\Documents\The Troubled History of Psychiatry _ The New Yorker.pdf
2020-12-08 17:55 - 2020-07-09 03:40 - 000184265 _____ C:\Users\Acer\Documents\Twin Concordance for Schizophrenia Is Not Entirely Hereditary.pdf
2020-12-08 17:55 - 2020-07-09 03:38 - 001095851 _____ C:\Users\Acer\Documents\Four False Pillars of biopsychiatry.pdf
2020-12-08 17:55 - 2020-07-09 02:19 - 000090107 _____ C:\Users\Acer\Documents\Playing the telephone game_linguistics.pdf
2020-12-08 17:55 - 2020-07-09 00:10 - 000342633 _____ C:\Users\Acer\Documents\CIA-RDP96-00792R000600440002-2_US Russia Mind Control Weapons.pdf
2020-12-08 17:55 - 2020-07-07 23:30 - 000062995 _____ C:\Users\Acer\Documents\Wells Fargo Claims Letter_Claim 10612208143_Engine Purchase.pdf
2020-12-08 17:55 - 2020-07-07 23:29 - 000014953 _____ C:\Users\Acer\Documents\Wells Fargo Claims Letter_Claim 10612208143_Engine Purchase.odt
2020-12-08 17:55 - 2020-07-05 16:23 - 000388826 _____ C:\Users\Acer\Documents\The_Phenomenology_pf_Group_Stalking.pdf
2020-12-08 17:55 - 2020-07-05 16:16 - 000001788 _____ C:\Users\Acer\Documents\Mind Control Papers.txt
2020-12-08 17:55 - 2020-05-23 18:47 - 001194121 _____ C:\Users\Acer\Documents\SCUI Unemployment Handbook.pdf
2020-12-08 17:55 - 2020-04-27 03:01 - 000014819 _____ C:\Users\Acer\Documents\Letter to SC UI.odt
2020-12-08 17:55 - 2020-04-25 17:53 - 000575982 _____ C:\Users\Acer\Documents\SC UI Certification 4_12 through 4_18 2020.oxps
2020-12-08 17:55 - 2020-04-25 17:50 - 000576319 _____ C:\Users\Acer\Documents\SC UI Certification 4_5 through 4_11 2020.oxps
2020-12-08 17:55 - 2020-04-25 17:30 - 000567717 _____ C:\Users\Acer\Documents\SC UI Certification 3_28 through 4_4 2020.oxps
2020-12-08 17:55 - 2020-04-25 17:25 - 000575895 _____ C:\Users\Acer\Documents\SC UI Certification 3_22 through 3_28 2020.oxps
2020-12-08 17:55 - 2020-04-25 16:26 - 000156190 _____ C:\Users\Acer\Documents\Pandemic Unemployment Assistance SC UI claim FYI.oxps
2020-12-08 17:55 - 2020-04-14 16:57 - 000032722 _____ C:\Users\Acer\Documents\SC UI Note.pdf
2020-12-08 17:55 - 2020-04-14 16:50 - 000009073 _____ C:\Users\Acer\Documents\SC UI Note.odt
2020-12-08 17:55 - 2020-03-30 17:13 - 000009864 _____ C:\Users\Acer\Documents\Nationwide Recovery Letter Requesting Itemized Statement.odt
2020-12-08 17:55 - 2020-03-29 16:31 - 001193337 _____ C:\Users\Acer\Documents\SC UI Benefits Handbook.pdf
2020-12-08 17:55 - 2020-03-18 00:10 - 000156432 _____ C:\Users\Acer\Documents\VerizonClaimAffidavit_451987788.pdf
2020-12-08 17:55 - 2020-02-28 21:28 - 000061021 _____ C:\Users\Acer\Documents\Annual_Care_Checklist_2020 Medical.pdf
2020-12-08 17:55 - 2020-01-16 19:19 - 002807578 _____ C:\Users\Acer\Documents\AU Health Bill 1_16_2017.pdf
2020-12-08 17:55 - 2020-01-14 15:21 - 000035500 _____ C:\Users\Acer\Documents\Dr. George Greg Text.odt
2020-12-08 17:55 - 2020-01-07 19:39 - 000309705 _____ C:\Users\Acer\Documents\Temporary Address Change Cancelled 1_7_2020 439pm.oxps
2020-12-08 17:55 - 2020-01-04 21:44 - 013483844 _____ C:\Users\Acer\Documents\SSDI Income Statement 2020.oxps
2020-12-08 17:55 - 2020-01-04 21:43 - 004832140 _____ C:\Users\Acer\Documents\Postal Service Temp Address Forward.oxps
2020-12-08 17:55 - 2020-01-01 16:10 - 001080377 _____ C:\Users\Acer\Documents\MS Healing Manual 2020.pdf
2020-12-08 17:55 - 2019-12-19 22:42 - 000852412 _____ C:\Users\Acer\Documents\Change of Address Confirmation USPS 12_19_2019 741pm.oxps
2020-12-08 17:55 - 2019-12-03 21:45 - 000495691 _____ C:\Users\Acer\Documents\Notary Public Reference Manual 2019_South Carolina.pdf
2020-12-08 17:55 - 2019-11-28 01:08 - 000582579 _____ C:\Users\Acer\Documents\form_1583 for anytime mailbox.pdf
2020-12-08 17:55 - 2019-11-27 04:12 - 000554272 _____ C:\Users\Acer\Documents\anytime mail box account info.oxps
2020-12-08 17:55 - 2019-09-21 23:50 - 006894124 _____ C:\Users\Acer\Documents\What Fullness Is_On getting weight loss surgery.pdf
2020-12-08 17:55 - 2019-09-21 23:29 - 012003166 _____ C:\Users\Acer\Documents\What Fullness Is_On getting weight loss surgery.oxps
2020-12-08 17:55 - 2019-09-17 17:23 - 001179828 _____ C:\Users\Acer\Documents\Itermitant fasting diet.oxps
2020-12-08 17:55 - 2019-09-10 17:03 - 000019848 _____ C:\Users\Acer\Documents\DoorDash Pay etc complaint 9_10_2019.odt
2020-12-08 17:55 - 2019-08-11 00:57 - 003739623 _____ C:\Users\Acer\Documents\Shepherd (sfl_E 2019) new or old.pdf
2020-12-08 17:55 - 2019-08-01 16:22 - 000144447 _____ C:\Users\Acer\Documents\jehovahs witnesses watchtower talking points for ex jws.pdf
2020-12-08 17:55 - 2019-06-25 16:36 - 000020992 _____ C:\Users\Acer\Documents\DoorDash App glitch report.odt
2020-12-08 17:55 - 2019-05-10 18:35 - 000470000 _____ C:\Users\Acer\Documents\Press release 2 jehovahs witnesses child abuse.oxps
2020-12-08 17:55 - 2019-05-10 18:28 - 000357719 _____ C:\Users\Acer\Documents\Jehovahs Witness Press Release 2 witness rule page 2.oxps
2020-12-08 17:55 - 2019-05-10 18:26 - 000406560 _____ C:\Users\Acer\Documents\Jehovahs Witness Press Release 2 witness rule page 1.oxps
2020-12-08 17:55 - 2019-05-03 17:27 - 000156236 _____ C:\Users\Acer\Documents\PineCone Research error message.pdf
2020-12-08 17:55 - 2019-04-22 20:57 - 000010134 _____ C:\Users\Acer\Documents\30 day notice to vacate mom to me_Angela S.odt
2020-12-08 17:55 - 2019-04-20 17:09 - 004645142 _____ C:\Users\Acer\Documents\Caring for patients who refuse blood  a guide to good practice.pdf
2020-12-08 17:55 - 2019-04-18 00:40 - 001750936 _____ C:\Users\Acer\Documents\Everlance Mileage Instacart 2018.oxps
2020-12-08 17:55 - 2019-04-14 22:30 - 000359142 _____ C:\Users\Acer\Documents\darbbarbenterprises-outlook.com-trips-2018-01-01-2018-12-31.ods
2020-12-08 17:55 - 2019-04-14 22:19 - 000116943 _____ C:\Users\Acer\Documents\2018_1099-MISC_Instacart_Angela_Sullivan.pdf
2020-12-08 17:55 - 2019-03-26 15:37 - 000198953 _____ C:\Users\Acer\Documents\10 alternatives to Microsoft Word and Excel.pdf
2020-12-08 17:55 - 2019-02-12 17:14 - 000207300 _____ C:\Users\Acer\Documents\19 Words that don't belong on your resume_tech resumes.pdf
2020-12-08 17:55 - 2019-02-11 21:52 - 000059607 _____ C:\Users\Acer\Documents\Mediterranean-Food-List.pdf
2020-12-08 17:55 - 2019-02-05 02:39 - 004524722 _____ C:\Users\Acer\Documents\University will segragate white and black students_pluralist dot com.oxps
2020-12-08 17:55 - 2019-01-30 22:09 - 000002435 _____ C:\Users\Acer\Documents\Canon MX920 series On-screen Manual.lnk
2020-12-08 17:55 - 2019-01-22 14:48 - 002487740 _____ C:\Users\Acer\Documents\Watchtower says to destroy documents.oxps
2020-12-08 17:55 - 2019-01-22 14:37 - 001653333 _____ C:\Users\Acer\Documents\Sheparding the Flock elders manual book jehovahs witnesses.pdf
2020-12-08 17:55 - 2019-01-22 14:36 - 000145345 _____ C:\Users\Acer\Documents\Child abuse letter to congregations 2017.pdf
2020-12-08 17:55 - 2019-01-22 02:30 - 003504254 _____ C:\Users\Acer\Documents\something jehovah witness.pdf
2020-12-08 17:55 - 2019-01-20 19:48 - 000019890 _____ C:\Users\Acer\Documents\symbol and foreign language symbol fonts.odt
2020-12-08 17:55 - 2019-01-18 17:10 - 000011695 _____ C:\Users\Acer\Documents\10 yr retirement estimate at 100k per year.odt
2020-12-08 17:55 - 2018-12-26 15:25 - 000293276 _____ C:\Users\Acer\Documents\drug mule compensation report.pdf
2020-12-08 17:55 - 2018-07-21 17:54 - 007414001 _____ C:\Users\Acer\Documents\the gentile times reconsidered.pdf
2020-12-08 17:55 - 2018-04-18 02:14 - 000024595 _____ C:\Users\Acer\Documents\Liquid Needle uses.odt
2020-12-08 17:55 - 2017-12-19 18:14 - 000017018 _____ C:\Users\Acer\Documents\Last Will and Testament.odt
2020-12-08 17:55 - 2017-12-10 18:23 - 000000414 _____ C:\Users\Acer\Documents\small appliance repair shops north augusta.txt
2020-12-08 17:55 - 2017-08-21 17:37 - 007065656 _____ C:\Users\Acer\Documents\Helping Children Learn Mathematics.pdf
2020-12-08 17:55 - 2016-12-28 21:21 - 000017088 _____ C:\Users\Acer\Documents\Telephone work resume.odt
2020-12-08 17:55 - 2016-12-23 23:23 - 000061365 _____ C:\Users\Acer\Documents\Telephone work resume PDF.pdf
2020-12-08 17:55 - 2013-01-29 02:04 - 000117905 _____ C:\Users\Acer\Documents\Third_Party_Stalking and Abuse_by_Proxy Resources.pdf
2020-12-08 17:51 - 2020-12-15 16:53 - 000000000 ____D C:\Users\Acer\Desktop\Notes
2020-12-08 17:51 - 2020-12-08 17:51 - 000000000 ____D C:\Users\Acer\Desktop\Nicotine Anonymous Documents
2020-12-08 17:51 - 2020-12-08 17:51 - 000000000 ____D C:\Users\Acer\Desktop\Finances
2020-12-08 17:44 - 2020-12-12 00:58 - 000000000 ____D C:\Users\Acer\Desktop\Clean Up and Maintenance Tools
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Documents\SC UI Application Documents
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Work Product
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\UTB AFG Treasury
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Professional Writing
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Personal Writing
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Alanon Meeting Documents
 
==================== One month (modified) ==================
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2020-12-15 16:39 - 2019-12-07 04:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-12-15 16:03 - 2020-11-06 09:30 - 000000000 ___RD C:\Users\Acer\OneDrive
2020-12-15 16:01 - 2020-11-05 16:47 - 000840598 _____ C:\Windows\system32\PerfStringBackup.INI
2020-12-15 16:01 - 2019-12-07 04:13 - 000000000 ____D C:\Windows\INF
2020-12-15 16:00 - 2020-11-06 09:40 - 000000000 ____D C:\ProgramData\NVIDIA
2020-12-15 15:58 - 2020-11-06 10:33 - 000000000 __SHD C:\Users\Acer\IntelGraphicsProfiles
2020-12-15 15:54 - 2020-11-06 09:37 - 000000000 ____D C:\Intel
2020-12-15 15:54 - 2020-11-05 16:35 - 000008192 ___SH C:\DumpStack.log.tmp
2020-12-15 15:54 - 2020-11-05 16:35 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-12-15 15:54 - 2020-11-05 16:35 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-12-15 09:55 - 2020-11-05 16:35 - 000291144 _____ C:\Windows\system32\FNTCACHE.DAT
2020-12-15 09:31 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer
2020-12-15 09:23 - 2020-11-06 11:56 - 000000000 ____D C:\Users\Acer\AppData\Local\D3DSCache
2020-12-14 09:18 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\AppReadiness
2020-12-12 09:30 - 2020-11-06 09:30 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3878838876-3164344232-606169047-1001
2020-12-12 09:30 - 2020-11-06 09:27 - 000002360 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-09 21:17 - 2019-12-07 04:03 - 000524288 _____ C:\Windows\system32\config\BBI
2020-12-09 21:16 - 2019-12-07 04:03 - 000000000 ____D C:\Windows\CbsTemp
2020-12-09 21:10 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer\AppData\Local\Packages
2020-12-09 21:07 - 2019-12-07 04:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-12-09 21:03 - 2019-12-07 04:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SystemResources
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\setup
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\oobe
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\migwiz
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Dism
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\bcastdvr
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Windows Defender
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-12-09 20:51 - 2020-11-05 16:38 - 002876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2020-12-09 20:38 - 2020-11-06 10:38 - 000000000 ____D C:\Windows\system32\MRT
2020-12-09 20:37 - 2020-11-06 10:38 - 133736600 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-12-09 20:35 - 2020-11-05 16:35 - 000000000 ____D C:\Windows\system32\Drivers\wd
2020-12-09 20:19 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer\AppData\Local\ConnectedDevicesPlatform
2020-12-09 20:16 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\LiveKernelReports
2020-12-09 19:16 - 2020-11-05 16:34 - 000000000 ____D C:\Windows\Panther
2020-12-09 17:04 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer\AppData\Local\VirtualStore
2020-12-09 16:01 - 2019-12-07 04:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-12-09 15:47 - 2020-11-06 09:28 - 000000000 ____D C:\Users\Acer\AppData\Local\Publishers
2020-12-09 00:50 - 2020-11-06 09:27 - 000000000 ____D C:\ProgramData\Packages
2020-12-09 00:48 - 2020-11-06 09:35 - 000000000 ____D C:\Users\Acer\AppData\Local\PlaceholderTileLogoFolder
2020-12-09 00:36 - 2020-11-06 09:27 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-12-08 23:50 - 2020-11-06 09:38 - 000000000 ____D C:\Users\Acer\AppData\Local\Comms
2020-12-08 21:44 - 2020-11-06 11:49 - 000000000 ____D C:\ProgramData\Package Cache
2020-12-08 21:16 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-12-08 19:00 - 2020-11-06 09:40 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2020-12-08 18:44 - 2019-12-07 04:14 - 000000000 ___SD C:\Program Files\Windows Sidebar
2020-12-08 18:44 - 2019-12-07 04:14 - 000000000 ___SD C:\Program Files (x86)\Windows Sidebar
2020-12-08 18:43 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\appcompat
2020-12-08 17:10 - 2020-11-06 10:32 - 000000000 ____D C:\ProgramData\Intel
2020-12-08 17:09 - 2020-11-06 10:33 - 000000000 ____D C:\Users\Acer\AppData\Local\Intel
2020-12-08 16:31 - 2020-11-06 11:51 - 000000000 ____D C:\Users\Acer\AppData\Local\NVIDIA Corporation
 
==================== Files in the root of some directories ========
 
2020-12-08 22:37 - 2020-12-08 22:37 - 000000458 _____ () C:\Users\Acer\AppData\Roaming\Drives Monitor_Settings.ini
2020-12-08 21:42 - 2020-12-08 21:42 - 000000218 _____ () C:\Users\Acer\AppData\Local\recently-used.xbel
 
==================== SigCheck ============================
 
(There is no automatic fix for files that do not pass verification.)
 
==================== End of FRST.txt ========================
 
 
 
Addition.txt:
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2020
Ran by Acer (15-12-2020 17:11:00)
Running from C:\Users\Acer\Desktop
Windows 10 Home Version 20H2 19042.685 (X64) (2020-11-05 21:43:14)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Acer (S-1-5-21-3878838876-3164344232-606169047-1001 - Administrator - Enabled) => C:\Users\Acer
Administrator (S-1-5-21-3878838876-3164344232-606169047-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3878838876-3164344232-606169047-503 - Limited - Disabled)
Guest (S-1-5-21-3878838876-3164344232-606169047-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3878838876-3164344232-606169047-504 - Limited - Disabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
8GadgetPack (HKLM-x32\...\{2F503139-7C61-4A82-9B0B-59A7A110FACB}) (Version: 7.0.0 - Helmut Buhler)
Amazon Kindle (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Amazon Kindle) (Version: 1.27.0.56109 - Amazon)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Belarc Advisor 8.5c (HKLM-x32\...\Belarc Advisor) (Version: 8.5.3.0 - Belarc Inc.)
Blender (HKLM\...\{C39F5740-3CB7-44AC-B0A2-FA3B2754D02F}) (Version: 2.83.0 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.75 - Piriform)
Compare It! (HKLM-x32\...\Compare It!_is1) (Version: 4.0 - Grig Software)
Dolby Audio X2 Windows API SDK (HKLM\...\{F290F786-5F69-48D4-B20B-D21C7DE56EF0}) (Version: 0.8.8.88 - Dolby Laboratories, Inc.)
Excel (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\1fc5b090eab9aa41f8a2f5987367e6da) (Version: 1.0 - Excel)
Free File Viewer 2014 (HKLM-x32\...\FreeFileViewer_is1) (Version: 2014.2.16.0 - Bitberry Software) <==== ATTENTION
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 87.0.4280.88 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
Inkscape (HKLM-x32\...\Inkscape) (Version: 1.0.0- - Inkscape)
Interfathom TaskMerlin (HKLM-x32\...\{9994DB2E-5B78-4D7A-B446-1A071A4C4CD9}) (Version: 2.1.3 - Interfathom)
Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 85.0.564.67 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.59 - )
Microsoft OneDrive (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Mozilla Firefox 83.0 (x64 en-US) (HKLM\...\Mozilla Firefox 83.0 (x64 en-US)) (Version: 83.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 83.0 - Mozilla)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)
NVIDIA Graphics Driver 457.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 457.09 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
OpenOffice 4.1.4 (HKLM-x32\...\{BDB210E1-06C5-451F-BDAC-C18DDC7C2F14}) (Version: 4.14.9788 - Apache Software Foundation)
Opera Stable 42.0.2393.94 (HKLM-x32\...\Opera 42.0.2393.94) (Version: 42.0.2393.94 - Opera Software)
Opera Stable 72.0.3815.400 (HKLM-x32\...\Opera 72.0.3815.400) (Version: 72.0.3815.400 - Opera Software)
Outlook (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\6b0f23e57a39ebfbf2814acb1a24293d) (Version: 1.0 - Outlook)
Paltalk (HKLM-x32\...\Paltalk) (Version:  - )
PowerPoint (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\319814cb56b667dff88f54e08be8f51f) (Version: 1.0 - PowerPoint)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8907.1 - Realtek Semiconductor Corp.)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 12.6 - Screaming Frog Ltd)
Scribus 1.4.8 (64bit) (HKLM\...\Scribus 1.4.8) (Version: 1.4.8 - The Scribus Team)
SQLiteStudio (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\{6e1c2c8a-4202-4c3e-b24b-b367e402d224}) (Version: 3.2.1 - SalSoft)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1212 - SUPERAntiSpyware.com)
Unknown File Handler (HKLM-x32\...\UFH_is1) (Version: 2015.10.20.0 - File.org)
USBPcap 1.1.0.0-g794bf26 (HKLM\...\USBPcap) (Version:  - )
WinHTTrack Website Copier 3.48-22 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.22 - HTTrack)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
Wireshark 2.0.1 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.0.1 - The Wireshark developer community, hxxps://www.wireshark.org)
Word (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\1b837d0bf93d01407352736c91b7bf50) (Version: 1.0 - Word)
Zinio Reader (HKLM-x32\...\{CFC139F4-4978-6A73-2616-38A2EC2812F4}) (Version: 1.1.9.100 - Zinio LLC)
 
Packages:
=========
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1910.3.0_x86__kgqvnymyfvs32 [2020-12-09] (king.com)
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation)
Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt [2020-11-06] (INTEL CORP) [Startup Task]
Mahjong Epic -> C:\Program Files\WindowsApps\KristanixStudiosAS.MahjongEpic_1.1.5.0_x64__nafbvgh473e28 [2020-12-09] (Kristanix Studios AS)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Studios) [MS Ad]
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation) [MS Ad]
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c [2020-12-09] (Skype)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0 [2020-11-06] (Spotify AB) [Startup Task]
 
==================== Custom CLSID (Whitelisted): ==============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-3878838876-3164344232-606169047-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Users\Acer\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\CoreTempReader.dll (AddGadgets IT -> )
CustomCLSID: HKU\S-1-5-21-3878838876-3164344232-606169047-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\Acer\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler) [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2020-10-22] (NVIDIA Corporation -> NVIDIA Corporation)
 
==================== Codecs (Whitelisted) ====================
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
Shortcut: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk\Remove settings.lnk -> C:\Program Files (x86)\Paltalk\ng_clean_settings.bat (No File)
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=leffmjdabcgaflkikcefahmlgpodjkdm
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=bjhmmnoficofgoiacjaajpkfndojknpb
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=opfacbhaojodjaojgocnibmklknchehf
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=hikhggiobiflkdfdgdajcfklmcibbopi
 
==================== Loaded Modules (Whitelisted) =============
 
2017-10-12 08:23 - 2017-10-12 08:23 - 000988160 _____ () [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libxml2.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000170496 _____ () [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libxslt.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000164352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\apr-util.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000297472 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\avmedia.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001143808 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\basegfx.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000596992 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\bootstrap.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001175552 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\comphelpMSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000487936 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\configmgr.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000238080 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\cppu3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000587776 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\cppuhelper3MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000652800 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\deployment.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000353792 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\deploymentgui.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000151040 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\deploymentmisc.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000126464 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\dnd.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000887296 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\drawinglayer.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000047104 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\dtrans.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001580544 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\editeng.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000160768 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\emser.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000051712 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fileacc.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000226304 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\filterconfig1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000132608 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\for.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000202240 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\forui.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000091648 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fsstorage.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000055808 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ftransl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000485888 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwe.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000210432 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwi.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 002193920 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwk.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000313344 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000187392 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\helplinker.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000070656 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\hyphen.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000027136 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18nisolang1MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000029696 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18npaper.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001333248 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18npool.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000067072 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18nutilMSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000136192 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\introspection.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000107008 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\jvmfwk3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000134144 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libapr-1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000099840 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\librdf.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001257472 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\lng.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000068608 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\lnth.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000024064 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localebe1.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000104448 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localedata_en.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000107520 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localedata_es.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000718848 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localedata_euro.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000833536 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localedata_others.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000038912 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\mcnttype.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000083456 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\msci_uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000812032 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\msfilter.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000344576 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\oleautobridge.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000008704 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\onlinecheck.DLL
2017-10-12 08:23 - 2017-10-12 08:23 - 002456064 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ootk.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000368640 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\package2.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000097280 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\passwordcontainer.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000286720 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\raptor.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000156160 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\rasqal.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000121344 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\reflection.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000107008 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\reg3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001792512 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sal3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000013824 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\salhelper3MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000093184 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sax.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000168448 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sax.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 002291200 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sb.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 007617536 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sc.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000041984 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\scd.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000082944 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\serf.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 003658240 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sfx.dll
2017-10-12 09:28 - 2017-10-12 09:28 - 009828864 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
2017-10-12 08:23 - 2017-10-12 08:23 - 000290304 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sofficeapp.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000279040 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sot.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000183296 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\spell.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000205824 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\spl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000096768 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\stocservices.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000053760 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\store3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000901120 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 003373056 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svt.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 003235328 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svx.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 006034432 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svxcore.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000117760 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sysdtrans.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000620544 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\tl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000231936 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucb1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000388608 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucbhelper4MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000344576 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpchelp1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000412160 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpdav1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000024576 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpexpand1.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000309248 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpfile1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000162816 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucppkg1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000167424 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\unordf.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000367616 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\unoxml.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000053248 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\updatefeed.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000186880 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\updchk.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001104384 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\utl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000254976 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\uui.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000085504 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\uwinapi.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000662528 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\vbahelper.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 004172800 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\vcl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000099328 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\vos3MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000028672 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\wininetbe1.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000791040 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xcr.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000045056 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xmlreader.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000238592 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xmlsecurity.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 003469312 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xo.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000396288 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xstor.dll
2020-12-08 18:44 - 2013-07-20 22:45 - 000056320 _____ (Helmut Buhler) [File not signed] C:\Program Files\Windows Sidebar\dwmapi.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 013914112 _____ (IBM Corporation and others) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\icudt40.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001072128 _____ (IBM Corporation and others) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\icuin40.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000951808 _____ (IBM Corporation and others) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\icuuc40.dll
2020-11-06 09:37 - 2020-11-06 09:37 - 040592896 _____ (Intel) [File not signed] C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt\IGCC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000180224 _____ (The cURL library, hxxp://curl.haxx.se/) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libcurl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001020928 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\LIBEAY32.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000218624 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\SSLEAY32.dll
 
==================== Alternate Data Streams (Whitelisted) ========
 
==================== Safe Mode (Whitelisted) ==================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 
==================== Association (Whitelisted) =================
 
==================== Internet Explorer (Whitelisted) ==========
 
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2016-01-04] (Belarc, Inc. -> Belarc, Inc.)
 
==================== Hosts content: =========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2019-12-07 04:14 - 2019-12-07 04:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
 
==================== Other Areas ===========================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.43.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(If an entry is included in the fixlist, it will be removed.)
 
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\StartupApproved\Run: => "Paltalk"
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\StartupApproved\Run: => "PaltalkLauncher"
 
==================== FirewallRules (Whitelisted) ================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{6A2D2A66-9853-446E-B4FC-22E2C0E9CFF3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BF656232-9C11-4848-A765-4E241DFF9810}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0C4CA283-4764-451D-9B99-6085AFC28718}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B8952EF3-3C30-443D-89EF-CAFC332A5789}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7060C766-208C-4A39-843C-3D52D81049EE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{90169997-B8F4-4EFB-A46F-8103EEE89073}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C8C34533-5AED-4F3D-968F-E0DEE14859A5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8697360A-8862-4DE7-8E34-AD2198D27693}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EC7A070A-8D44-419D-A50B-90BDC4FD852B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A01D9A97-831D-4CDD-B8F2-0B5EDEBDDEA9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{AA4DD873-6849-4817-8BE4-8F6272B512D6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A77B4497-155F-4BE3-B4AE-8B075BE81088}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{D3757526-2AF8-40F2-9394-004CE80A948A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{CCD7EA49-7544-4CAF-B9CB-4B07D34A8479}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A9153E74-4888-4959-8503-E61E14985BE2}] => (Allow) C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe (Bitberry Software -> Bitberry Software)
FirewallRules: [{6A1F4259-9FFB-4DBF-8D04-360579F5F540}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{F69B725A-8995-40BB-9B57-12031F980D68}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9CDCFAA7-5FDB-4D31-9E79-C0C69E59A675}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{DC9FA7F7-6597-47F9-909F-B3383919A345}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A362483B-8096-4EB6-89C6-4A0BED9818A1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B6BDEC30-994C-4365-8489-45337BEAE590}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E3E8AEA7-05F2-4532-83F7-E1F2696D3590}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C31D4D85-B2B5-4AAB-BD22-EF9881C4B388}] => (Allow) C:\Program Files (x86)\Opera\72.0.3815.400\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{8B907B0D-9A35-4E12-B96C-46A6F868FC66}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{F656578D-0C7B-42D3-AE38-E733E8D2B463}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [TCP Query User{3D364531-7BDD-4379-82AC-C8FB6B8F8211}C:\program files (x86)\paltalk\qtwebengineprocess.exe] => (Block) C:\program files (x86)\paltalk\qtwebengineprocess.exe (The Qt Company Oy -> )
FirewallRules: [UDP Query User{562F02A7-F708-4C66-8058-C99B6B71BAC0}C:\program files (x86)\paltalk\qtwebengineprocess.exe] => (Block) C:\program files (x86)\paltalk\qtwebengineprocess.exe (The Qt Company Oy -> )
FirewallRules: [TCP Query User{947966D1-2D61-4DE0-90A3-ED0E9EAA0264}C:\users\acer\downloads\anydesk.exe] => (Allow) C:\users\acer\downloads\anydesk.exe => No File
FirewallRules: [UDP Query User{53D9CF2A-2D12-4A2F-A27D-9C008111AEFA}C:\users\acer\downloads\anydesk.exe] => (Allow) C:\users\acer\downloads\anydesk.exe => No File
FirewallRules: [{29F5CEB3-6478-4875-844C-A7F6251051CD}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{42237FB2-845A-479B-BFD6-9B6B47B9E741}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{41ED1713-3777-47E1-ABE5-900CDDD9B9AD}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{FB854711-00B7-49ED-903F-C8FA3ED6340F}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{CD558D1D-163E-4C56-B01B-456A6E14BA9E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{93910515-2E87-4FB5-AE1F-47873CA841A7}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
 
==================== Restore Points =========================
 
08-12-2020 18:06:26 Windows Modules Installer
09-12-2020 19:36:11 Dec92020735pm
 
==================== Faulty Device Manager Devices ============
 
 
==================== Event log errors: ========================
 
Application errors:
==================
Error: (12/15/2020 07:39:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbamtray.exe, version: 4.0.0.865, time stamp: 0x5fc55b58
Faulting module name: Qt5Core.dll, version: 5.14.1.0, time stamp: 0x5f84e8d4
Exception code: 0xc0000005
Fault offset: 0x0000000000219dc5
Faulting process id: 0x15b4
Faulting application start time: 0x01d6d2de95d07466
Faulting application path: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Faulting module path: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
Report Id: 2626b0fa-3b28-49f8-a8e6-3fab45a92ee2
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (12/12/2020 10:48:12 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: The storage optimizer couldn't complete retrim on (C:) because: The operation requested is not supported by the hardware backing the volume. (0x8900002A)
 
Error: (12/12/2020 09:29:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbamtray.exe, version: 4.0.0.865, time stamp: 0x5fc55b58
Faulting module name: Qt5Core.dll, version: 5.14.1.0, time stamp: 0x5f84e8d4
Exception code: 0xc0000005
Fault offset: 0x0000000000219dc5
Faulting process id: 0x358
Faulting application start time: 0x01d6d092bb12bbbd
Faulting application path: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Faulting module path: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
Report Id: 58ec6cb9-31e7-424a-a22a-9eba150a830d
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (12/09/2020 08:08:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.19041.508, time stamp: 0xcd97c98b
Faulting module name: KERNELBASE.dll, version: 10.0.19041.572, time stamp: 0x1183946c
Exception code: 0xe0464645
Fault offset: 0x000000000010b65c
Faulting process id: 0x4ac
Faulting application start time: 0x01d6cdec18eba223
Faulting application path: C:\Windows\system32\dwm.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: 12f2620f-7279-4eec-9e87-03daa2fa8b17
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (12/09/2020 04:01:10 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center failed to validate caller with error %1.
 
Error: (12/09/2020 03:31:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: YourPhone.exe, version: 1.20111.125.0, time stamp: 0x5fc72458
Faulting module name: KERNELBASE.dll, version: 10.0.19041.572, time stamp: 0x1183946c
Exception code: 0xc000027b
Fault offset: 0x000000000010b65c
Faulting process id: 0x23d0
Faulting application start time: 0x01d6ce665ac22f5c
Faulting application path: C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20111.125.0_x64__8wekyb3d8bbwe\YourPhone.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: b9c4d4c3-0abd-4479-b519-f05195a0ac38
Faulting package full name: Microsoft.YourPhone_1.20111.125.0_x64__8wekyb3d8bbwe
Faulting package-relative application ID: App
 
Error: (12/09/2020 02:53:39 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing:   16 DESKTOP-58JI9LT.local. AAAA FE80:0000:0000:0000:208A:5A1D:BEB4:BD91
 
Error: (12/09/2020 02:53:39 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.43.77:5353   16 DESKTOP-58JI9LT.local. AAAA 2600:1005:B01F:1B23:208A:5A1D:BEB4:BD91
 
 
System errors:
=============
Error: (12/15/2020 03:54:42 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 3:38:15 PM on ‎12/‎15/‎2020 was unexpected.
 
Error: (12/15/2020 09:55:32 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 9:30:08 AM on ‎12/‎15/‎2020 was unexpected.
 
Error: (12/15/2020 09:30:08 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 9:05:36 AM on ‎12/‎15/‎2020 was unexpected.
 
Error: (12/14/2020 11:09:09 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 10:19:40 AM on ‎12/‎14/‎2020 was unexpected.
 
Error: (12/14/2020 09:10:25 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 6:48:41 PM on ‎12/‎12/‎2020 was unexpected.
 
Error: (12/12/2020 12:02:52 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:27:00 AM on ‎12/‎12/‎2020 was unexpected.
 
Error: (12/12/2020 12:56:24 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 7:22:53 PM on ‎12/‎11/‎2020 was unexpected.
 
Error: (12/11/2020 10:43:53 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:49:42 PM on ‎12/‎10/‎2020 was unexpected.
 
 
Windows Defender:
===================================
Date: 2020-12-09 20:59:27.6780000Z
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {E8341D21-0E4B-41AD-8452-3AA816B3DFD5}
Scan Type: Antimalware
Scan Parameters: Quick Scan
 
Date: 2020-12-08 18:37:05.5870000Z
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {E5FA8A57-1444-4579-AF0F-63EAACC3E40F}
Scan Type: Antimalware
Scan Parameters: Quick Scan
 
Date: 2020-12-08 17:30:31.3160000Z
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved 
 
Date: 2020-12-08 17:30:31.3150000Z
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved 
 
Date: 2020-12-08 17:30:31.3140000Z
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved 
 
Date: 2020-12-08 17:30:31.3050000Z
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved 
 
Date: 2020-12-08 17:30:31.3040000Z
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved 
 
CodeIntegrity:
===================================
 
Date: 2020-12-15 16:59:57.6320000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-15 16:59:57.6310000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-15 16:59:57.1720000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-15 16:59:57.1710000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-15 16:59:49.1360000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-15 16:59:49.1340000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-15 16:59:48.5180000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-15 16:59:48.5170000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
==================== Memory info =========================== 
 
BIOS: Insyde Corp. V1.19 07/13/2018
Motherboard: CFL Freed_CFS
Processor: Intel® Core™ i5-8300H CPU @ 2.30GHz
Percentage of memory in use: 64%
Total physical RAM: 8034.3 MB
Available physical RAM: 2816.8 MB
Total Virtual: 9314.3 MB
Available Virtual: 2093.98 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:930.9 GB) (Free:864.58 GB) NTFS
 
\\?\Volume{322fa14b-4559-4851-a221-10eeeb564196}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{90d6380f-062f-490e-8a47-7615603a4aa9}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 
==================== MBR & Partition Table ====================
 
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt =======================

 


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,593 posts
  • MVP

I would uninstall:

8GadgetPack (you can redownload from

https://8gadgetpack.net/

and reinstall after you run the attached Fixlist - that should fix your sidebar)

FreeFileViewer (This is known Potentially Unwanted Program and is flagged by FRST)

 

Appears you installed Wireshark, USBPcap & WinPcap days prior to TeamViewer and AnyDesk so I assume you know what they do but if you are not using them I would uninstall.

 

PalTalk appears to be broken so I would uninstall it and if you really use it you can reinstall later.

 

Uninstall the worthless SUPERAntiSpyware.

 

Download the attached fixlist.txt to the same location as FRST

Attached File  fixlist.txt   14.78KB   51 downloads

Run FRST and press Fix. This will remove some of the programs I asked you to remove in case they don't uninstall correctly and also all traces of AnyDesk & TeamViewer.  It will also check your system files for tampering.  Can take up to 25 minutes so be patient.  Will reboot when done.

A fix log will be generated please post that

Run FRST again but this time make sure Addition.txt is checked and hit Scan.  Post both logs.

 

Let's run MBAR to see if they left you any rootkits:

 

https://www.malwareb...om/antirootkit/

 

Click on the Download button and save the file.  Right click on it and Run As Admin.  Follow the instructions.  Does it find anything?

 


 

 

 


  • 0

#3
LollyGagin

LollyGagin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

I installed WireShark because I bought a book about it and want to learn how to use it.   Just installed it recently.   MBAR found no malware.

 

 
Fixlog.txt:
 
Fix result of Farbar Recovery Scan Tool (x64) Version: 14-12-2020
Ran by Acer (16-12-2020 10:35:32) Run:1
Running from C:\Users\Acer\Desktop
Loaded Profiles: Acer
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
(A.V.M. SOFTWARE, INC. -> AVM Software) C:\Program Files (x86)\Paltalk\update\pt_update_service.exe
(Microsoft Corporation) [File not signed] [File is in use] C:\Program Files\Windows Sidebar\sidebar.exe
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [11219376 2020-12-08] (Support.com Inc -> SUPERAntiSpyware)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [Paltalk] => C:\Program Files (x86)\Paltalk\Paltalk.exe [27189688 2020-09-15] (A.V.M. SOFTWARE, INC. -> AVM Software)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [PaltalkLauncher] => C:\Program Files (x86)\Paltalk\PaltalkLauncher.exe [771512 2020-09-15] (A.V.M. SOFTWARE, INC. -> AVM Software)
FILE: C:\Program Files\Windows Sidebar\sidebar.exe 
Startup: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar.lnk [2020-12-08]
ShortcutTarget: Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) [File not signed] [File is in use]
Task: {DC3B4102-0FF6-49B5-93AD-C90D392908E9} - System32\Tasks\FreeFileViewerUpdateChecker => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe [1635512 2013-03-25] (Bitberry Software -> Bitberry Software) <==== ATTENTION
Task: C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe <==== ATTENTION
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2020-12-08] (SUPERAntiSpyware.com -> SUPERAntiSpyware.com)
R2 paltalk_update_service; C:\Program Files (x86)\Paltalk\update\pt_update_service.exe [1337784 2020-09-15] (A.V.M. SOFTWARE, INC. -> AVM Software)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
2020-12-15 09:15 - 2020-12-15 09:15 - 000000000 ____D C:\Users\Acer\AppData\Roaming\TeamViewer
2020-12-15 09:11 - 2020-12-15 09:33 - 000000000 ____D C:\Users\Acer\AppData\Roaming\AnyDesk
2020-12-11 19:34 - 2020-12-11 19:35 - 000000000 ____D C:\Users\Acer\AppData\Local\FreeFileViewer
2020-12-08 23:13 - 2020-12-08 23:16 - 000000000 ____D C:\Users\Acer\AppData\Roaming\FreeFileViewer
2020-12-08 21:49 - 2020-12-14 20:02 - 000000000 ____D C:\ProgramData\Paltalk Update
2020-12-08 21:49 - 2020-12-08 21:51 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk
2020-12-08 21:49 - 2020-12-08 21:49 - 000001060 _____ C:\Users\Acer\Desktop\Paltalk.lnk
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Users\Acer\AppData\Roaming\A.V.M
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Users\Acer\AppData\Local\Paltalk
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Users\Acer\AppData\Local\A.V.M
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Program Files (x86)\Paltalk
2020-12-08 20:14 - 2020-12-08 20:14 - 000000000 ____D C:\Users\Acer\AppData\Roaming\SUPERAntiSpyware.com
2020-12-08 20:12 - 2020-12-14 09:14 - 000000000 ____D C:\Program Files\SUPERAntiSpyware
2020-12-08 20:12 - 2020-12-08 20:12 - 000000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2020-12-08 20:12 - 2020-12-08 20:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2020-12-08 18:55 - 2020-12-08 23:11 - 000000400 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2020-12-08 18:55 - 2020-12-08 18:55 - 000003164 _____ C:\Windows\system32\Tasks\FreeFileViewerUpdateChecker
2020-12-08 18:55 - 2020-12-08 18:55 - 000001154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\FreeFileViewer.lnk
2020-12-08 18:55 - 2020-12-08 18:55 - 000001148 _____ C:\Users\Acer\Desktop\FreeFileViewer.lnk
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileViewer
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\Program Files (x86)\FreeFileViewer
2020-12-08 18:45 - 2020-12-08 18:49 - 000000000 ____D C:\Users\Acer\AppData\Local\Sidebar7
2020-12-08 18:44 - 2020-12-08 18:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\8GadgetPack
2020-12-08 18:07 - 2020-09-20 15:38 - 089009584 _____ (AVM Software, Inc.) C:\Users\Acer\Downloads\PaltalkSetup.exe
2020-12-08 18:07 - 2016-02-06 21:05 - 024642208 _____ (SUPERAntiSpyware) C:\Users\Acer\Downloads\SUPERAntiSpyware.exe
2020-12-08 18:07 - 2016-02-06 01:15 - 000602112 _____ (OldTimer Tools) C:\Users\Acer\Downloads\OTL.exe
2020-12-08 18:44 - 2019-12-07 04:14 - 000000000 ___SD C:\Program Files\Windows Sidebar
2020-12-08 18:44 - 2019-12-07 04:14 - 000000000 ___SD C:\Program Files (x86)\Windows Sidebar
CustomCLSID: HKU\S-1-5-21-3878838876-3164344232-606169047-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Users\Acer\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\CoreTempReader.dll (AddGadgets IT -> )
CustomCLSID: HKU\S-1-5-21-3878838876-3164344232-606169047-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\Acer\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler) [File not signed]
Shortcut: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk\Remove settings.lnk -> C:\Program Files (x86)\Paltalk\ng_clean_settings.bat (No File)
2020-12-08 18:44 - 2013-07-20 22:45 - 000056320 _____ (Helmut Buhler) [File not signed] C:\Program Files\Windows Sidebar\dwmapi.dll
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\StartupApproved\Run: => "Paltalk"
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\StartupApproved\Run: => "PaltalkLauncher"
FirewallRules: [TCP Query User{3D364531-7BDD-4379-82AC-C8FB6B8F8211}C:\program files (x86)\paltalk\qtwebengineprocess.exe] => (Block) C:\program files (x86)\paltalk\qtwebengineprocess.exe (The Qt Company Oy -> )
FirewallRules: [UDP Query User{562F02A7-F708-4C66-8058-C99B6B71BAC0}C:\program files (x86)\paltalk\qtwebengineprocess.exe] => (Block) C:\program files (x86)\paltalk\qtwebengineprocess.exe (The Qt Company Oy -> )
FirewallRules: [TCP Query User{947966D1-2D61-4DE0-90A3-ED0E9EAA0264}C:\users\acer\downloads\anydesk.exe] => (Allow) C:\users\acer\downloads\anydesk.exe => No File
FirewallRules: [UDP Query User{53D9CF2A-2D12-4A2F-A27D-9C008111AEFA}C:\users\acer\downloads\anydesk.exe] => (Allow) C:\users\acer\downloads\anydesk.exe => No File
FirewallRules: [{29F5CEB3-6478-4875-844C-A7F6251051CD}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{42237FB2-845A-479B-BFD6-9B6B47B9E741}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{41ED1713-3777-47E1-ABE5-900CDDD9B9AD}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{FB854711-00B7-49ED-903F-C8FA3ED6340F}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{CD558D1D-163E-4C56-B01B-456A6E14BA9E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{93910515-2E87-4FB5-AE1F-47873CA841A7}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
CMD: DISM /Online /Cleanup-Image /RestoreHealth
CMD: SFC /scannow
CMD: findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log
CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"
Reboot:
 
 
*****************
 
C:\Program Files (x86)\Paltalk\update\pt_update_service.exe => No running process found
C:\Program Files\Windows Sidebar\sidebar.exe => No running process found
"HKU\S-1-5-21-3878838876-3164344232-606169047-1001\Software\Microsoft\Windows\CurrentVersion\Run\\SUPERAntiSpyware" => not found
"HKU\S-1-5-21-3878838876-3164344232-606169047-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Paltalk" => not found
"HKU\S-1-5-21-3878838876-3164344232-606169047-1001\Software\Microsoft\Windows\CurrentVersion\Run\\PaltalkLauncher" => removed successfully
 
========================= FILE: C:\Program Files\Windows Sidebar\sidebar.exe ========================
 
"C:\Program Files\Windows Sidebar\sidebar.exe" => not found
====== End of File: ======
 
C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar.lnk => moved successfully
"C:\Program Files\Windows Sidebar\sidebar.exe" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DC3B4102-0FF6-49B5-93AD-C90D392908E9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DC3B4102-0FF6-49B5-93AD-C90D392908E9}" => removed successfully
C:\Windows\System32\Tasks\FreeFileViewerUpdateChecker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FreeFileViewerUpdateChecker" => removed successfully
C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => moved successfully
!SASCORE => service not found.
paltalk_update_service => service not found.
SASDIFSV => service not found.
SASKUTIL => service not found.
C:\Users\Acer\AppData\Roaming\TeamViewer => moved successfully
C:\Users\Acer\AppData\Roaming\AnyDesk => moved successfully
C:\Users\Acer\AppData\Local\FreeFileViewer => moved successfully
C:\Users\Acer\AppData\Roaming\FreeFileViewer => moved successfully
"C:\ProgramData\Paltalk Update" => not found
"C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk" => not found
"C:\Users\Acer\Desktop\Paltalk.lnk" => not found
"C:\Users\Acer\AppData\Roaming\A.V.M" => not found
"C:\Users\Acer\AppData\Local\Paltalk" => not found
C:\Users\Acer\AppData\Local\A.V.M => moved successfully
"C:\Program Files (x86)\Paltalk" => not found
"C:\Users\Acer\AppData\Roaming\SUPERAntiSpyware.com" => not found
C:\Program Files\SUPERAntiSpyware => moved successfully
"C:\ProgramData\SUPERAntiSpyware.com" => not found
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware" => not found
"C:\Windows\Tasks\FreeFileViewerUpdateChecker.job" => not found
"C:\Windows\system32\Tasks\FreeFileViewerUpdateChecker" => not found
C:\ProgramData\Microsoft\Windows\Start Menu\FreeFileViewer.lnk => moved successfully
C:\Users\Acer\Desktop\FreeFileViewer.lnk => moved successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileViewer => moved successfully
C:\Program Files (x86)\FreeFileViewer => moved successfully
C:\Users\Acer\AppData\Local\Sidebar7 => moved successfully
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\8GadgetPack" => not found
C:\Users\Acer\Downloads\PaltalkSetup.exe => moved successfully
C:\Users\Acer\Downloads\SUPERAntiSpyware.exe => moved successfully
C:\Users\Acer\Downloads\OTL.exe => moved successfully
C:\Program Files\Windows Sidebar => moved successfully
C:\Program Files (x86)\Windows Sidebar => moved successfully
HKU\S-1-5-21-3878838876-3164344232-606169047-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66} => removed successfully
HKU\S-1-5-21-3878838876-3164344232-606169047-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9} => removed successfully
"C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk\Remove settings.lnk" => not found
"C:\Program Files\Windows Sidebar\dwmapi.dll" => not found
"HKU\S-1-5-21-3878838876-3164344232-606169047-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Paltalk" => removed successfully
"HKU\S-1-5-21-3878838876-3164344232-606169047-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Paltalk" => not found
"HKU\S-1-5-21-3878838876-3164344232-606169047-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\PaltalkLauncher" => removed successfully
"HKU\S-1-5-21-3878838876-3164344232-606169047-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\PaltalkLauncher" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3D364531-7BDD-4379-82AC-C8FB6B8F8211}C:\program files (x86)\paltalk\qtwebengineprocess.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{562F02A7-F708-4C66-8058-C99B6B71BAC0}C:\program files (x86)\paltalk\qtwebengineprocess.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{947966D1-2D61-4DE0-90A3-ED0E9EAA0264}C:\users\acer\downloads\anydesk.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{53D9CF2A-2D12-4A2F-A27D-9C008111AEFA}C:\users\acer\downloads\anydesk.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{29F5CEB3-6478-4875-844C-A7F6251051CD}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{42237FB2-845A-479B-BFD6-9B6B47B9E741}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{41ED1713-3777-47E1-ABE5-900CDDD9B9AD}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FB854711-00B7-49ED-903F-C8FA3ED6340F}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CD558D1D-163E-4C56-B01B-456A6E14BA9E}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{93910515-2E87-4FB5-AE1F-47873CA841A7}" => not found
 
========= DISM /Online /Cleanup-Image /RestoreHealth =========
 
 
Deployment Image Servicing and Management tool
Version: 10.0.19041.572
 
Image Version: 10.0.19042.685
 
 
[==                         3.8%                           ] 
 
[==                         3.8%                           ] 
 
[==                         3.8%                           ] 
 
[==                         4.2%                           ] 
 
[==                         4.3%                           ] 
 
[==                         4.5%                           ] 
 
[==                         4.8%                           ] 
 
[==                         4.9%                           ] 
 
[==                         5.1%                           ] 
 
[===                        5.4%                           ] 
 
[===                        5.5%                           ] 
 
[===                        5.7%                           ] 
 
[===                        5.9%                           ] 
 
[===                        6.1%                           ] 
 
[===                        6.3%                           ] 
 
[===                        6.5%                           ] 
 
[===                        6.5%                           ] 
 
[===                        6.6%                           ] 
 
[====                       6.9%                           ] 
 
[====                       7.2%                           ] 
 
[====                       7.4%                           ] 
 
[====                       7.5%                           ] 
 
[====                       7.8%                           ] 
 
[====                       8.0%                           ] 
 
[====                       8.2%                           ] 
 
[====                       8.2%                           ] 
 
[====                       8.5%                           ] 
 
[====                       8.5%                           ] 
 
[=====                      8.8%                           ] 
 
[=====                      8.9%                           ] 
 
[=====                      9.2%                           ] 
 
[=====                      9.4%                           ] 
 
[=====                      9.7%                           ] 
 
[=====                      9.8%                           ] 
 
[=====                      10.1%                          ] 
 
[=====                      10.3%                          ] 
 
[=====                      10.3%                          ] 
 
[======                     10.5%                          ] 
 
[======                     10.9%                          ] 
 
[======                     11.2%                          ] 
 
[======                     11.3%                          ] 
 
[======                     11.5%                          ] 
 
[======                     11.9%                          ] 
 
[=======                    12.1%                          ] 
 
[=======                    12.5%                          ] 
 
[=======                    12.8%                          ] 
 
[=======                    13.0%                          ] 
 
[========                   13.8%                          ] 
 
[========                   14.7%                          ] 
 
[=========                  15.7%                          ] 
 
[=========                  16.7%                          ] 
 
[==========                 17.4%                          ] 
 
[==========                 17.7%                          ] 
 
[==========                 18.0%                          ] 
 
[==========                 18.9%                          ] 
 
[===========                19.9%                          ] 
 
[============               20.9%                          ] 
 
[============               21.9%                          ] 
 
[============               22.3%                          ] 
 
[=============              22.9%                          ] 
 
[=============              23.2%                          ] 
 
[=============              23.5%                          ] 
 
[=============              23.8%                          ] 
 
[==============             24.4%                          ] 
 
[==============             24.7%                          ] 
 
[==============             24.9%                          ] 
 
[==============             25.1%                          ] 
 
[==============             25.1%                          ] 
 
[==============             25.3%                          ] 
 
[==============             25.4%                          ] 
 
[==============             25.8%                          ] 
 
[===============            26.0%                          ] 
 
[===============            26.6%                          ] 
 
[===============            27.1%                          ] 
 
[===============            27.5%                          ] 
 
[================           27.8%                          ] 
 
[================           28.4%                          ] 
 
[================           28.8%                          ] 
 
[================           29.3%                          ] 
 
[=================          29.7%                          ] 
 
[=================          30.4%                          ] 
 
[=================          30.6%                          ] 
 
[=================          30.7%                          ] 
 
[=================          30.9%                          ] 
 
[=================          31.0%                          ] 
 
[==================         31.3%                          ] 
 
[==================         31.5%                          ] 
 
[==================         31.8%                          ] 
 
[==================         32.0%                          ] 
 
[==================         32.2%                          ] 
 
[==================         32.5%                          ] 
 
[==================         32.7%                          ] 
 
[===================        33.0%                          ] 
 
[===================        33.4%                          ] 
 
[===================        33.8%                          ] 
 
[===================        33.9%                          ] 
 
[===================        34.3%                          ] 
 
[====================       34.5%                          ] 
 
[====================       34.9%                          ] 
 
[====================       35.2%                          ] 
 
[====================       35.4%                          ] 
 
[====================       35.5%                          ] 
 
[====================       35.5%                          ] 
 
[====================       35.6%                          ] 
 
[====================       35.8%                          ] 
 
[=====================      36.2%                          ] 
 
[=====================      36.4%                          ] 
 
[=====================      36.5%                          ] 
 
[=====================      36.7%                          ] 
 
[=====================      36.9%                          ] 
 
[=====================      37.1%                          ] 
 
[=====================      37.2%                          ] 
 
[=====================      37.2%                          ] 
 
[=====================      37.5%                          ] 
 
[=====================      37.6%                          ] 
 
[=====================      37.8%                          ] 
 
[=====================      37.9%                          ] 
 
[======================     38.0%                          ] 
 
[======================     38.2%                          ] 
 
[======================     38.4%                          ] 
 
[======================     38.4%                          ] 
 
[======================     38.6%                          ] 
 
[======================     38.9%                          ] 
 
[======================     39.0%                          ] 
 
[======================     39.2%                          ] 
 
[======================     39.3%                          ] 
 
[======================     39.5%                          ] 
 
[=======================    39.8%                          ] 
 
[=======================    40.1%                          ] 
 
[=======================    40.2%                          ] 
 
[=======================    40.4%                          ] 
 
[=======================    40.4%                          ] 
 
[=======================    40.5%                          ] 
 
[=======================    40.6%                          ] 
 
[=======================    40.7%                          ] 
 
[=======================    40.8%                          ] 
 
[=======================    40.8%                          ] 
 
[=======================    40.9%                          ] 
 
[=======================    40.9%                          ] 
 
[=======================    41.1%                          ] 
 
[=======================    41.1%                          ] 
 
[=======================    41.2%                          ] 
 
[=======================    41.4%                          ] 
 
[========================   41.4%                          ] 
 
[========================   41.5%                          ] 
 
[========================   41.6%                          ] 
 
[========================   41.7%                          ] 
 
[========================   41.7%                          ] 
 
[========================   41.9%                          ] 
 
[========================   42.0%                          ] 
 
[========================   42.0%                          ] 
 
[========================   42.1%                          ] 
 
[========================   42.3%                          ] 
 
[========================   42.4%                          ] 
 
[========================   42.6%                          ] 
 
[========================   42.7%                          ] 
 
[========================   42.8%                          ] 
 
[========================   42.9%                          ] 
 
[========================   42.9%                          ] 
 
[========================   43.1%                          ] 
 
[=========================  43.2%                          ] 
 
[=========================  43.2%                          ] 
 
[=========================  43.5%                          ] 
 
[=========================  43.5%                          ] 
 
[=========================  43.6%                          ] 
 
[=========================  43.8%                          ] 
 
[=========================  43.8%                          ] 
 
[=========================  43.9%                          ] 
 
[=========================  44.0%                          ] 
 
[=========================  44.1%                          ] 
 
[=========================  44.1%                          ] 
 
[=========================  44.2%                          ] 
 
[=========================  44.2%                          ] 
 
[=========================  44.2%                          ] 
 
[=========================  44.3%                          ] 
 
[=========================  44.4%                          ] 
 
[=========================  44.5%                          ] 
 
[=========================  44.5%                          ] 
 
[=========================  44.5%                          ] 
 
[=========================  44.5%                          ] 
 
[=========================  44.6%                          ] 
 
[=========================  44.8%                          ] 
 
[========================== 44.8%                          ] 
 
[========================== 45.0%                          ] 
 
[========================== 45.1%                          ] 
 
[========================== 45.4%                          ] 
 
[========================== 45.4%                          ] 
 
[========================== 45.4%                          ] 
 
[========================== 45.5%                          ] 
 
[========================== 45.6%                          ] 
 
[========================== 45.7%                          ] 
 
[========================== 45.9%                          ] 
 
[========================== 46.0%                          ] 
 
[========================== 46.3%                          ] 
 
[===========================46.7%                          ] 
 
[===========================47.2%                          ] 
 
[===========================47.4%                          ] 
 
[===========================47.8%                          ] 
 
[===========================48.0%                          ] 
 
[===========================48.2%                          ] 
 
[===========================48.8%                          ] 
 
[===========================49.4%                          ] 
 
[===========================50.0%                          ] 
 
[===========================50.3%                          ] 
 
[===========================50.9%                          ] 
 
[===========================51.2%                          ] 
 
[===========================52.2%                          ] 
 
[===========================52.4%                          ] 
 
[===========================52.5%                          ] 
 
[===========================52.6%                          ] 
 
[===========================52.7%                          ] 
 
[===========================52.7%                          ] 
 
[===========================52.7%                          ] 
 
[===========================52.8%                          ] 
 
[===========================52.8%                          ] 
 
[===========================52.8%                          ] 
 
[===========================52.9%                          ] 
 
[===========================53.0%                          ] 
 
[===========================53.1%                          ] 
 
[===========================53.1%                          ] 
 
[===========================53.1%                          ] 
 
[===========================53.1%                          ] 
 
[===========================53.1%                          ] 
 
[===========================53.1%                          ] 
 
[===========================53.2%                          ] 
 
[===========================53.2%                          ] 
 
[===========================53.2%                          ] 
 
[===========================53.3%                          ] 
 
[===========================53.3%                          ] 
 
[===========================53.3%                          ] 
 
[===========================53.4%                          ] 
 
[===========================53.4%                          ] 
 
[===========================53.4%                          ] 
 
[===========================53.5%                          ] 
 
[===========================53.5%                          ] 
 
[===========================53.5%                          ] 
 
[===========================53.6%                          ] 
 
[===========================53.6%                          ] 
 
[===========================53.7%                          ] 
 
[===========================53.7%                          ] 
 
[===========================53.7%                          ] 
 
[===========================53.8%                          ] 
 
[===========================53.9%                          ] 
 
[===========================53.9%                          ] 
 
[===========================54.0%                          ] 
 
[===========================54.0%                          ] 
 
[===========================54.0%                          ] 
 
[===========================54.0%                          ] 
 
[===========================54.0%                          ] 
 
[===========================54.1%                          ] 
 
[===========================54.1%                          ] 
 
[===========================54.2%                          ] 
 
[===========================54.2%                          ] 
 
[===========================54.3%                          ] 
 
[===========================54.3%                          ] 
 
[===========================54.3%                          ] 
 
[===========================54.3%                          ] 
 
[===========================54.4%                          ] 
 
[===========================54.4%                          ] 
 
[===========================54.4%                          ] 
 
[===========================54.5%                          ] 
 
[===========================54.5%                          ] 
 
[===========================54.5%                          ] 
 
[===========================54.6%                          ] 
 
[===========================54.6%                          ] 
 
[===========================54.6%                          ] 
 
[===========================54.6%                          ] 
 
[===========================54.6%                          ] 
 
[===========================54.7%                          ] 
 
[===========================54.7%                          ] 
 
[===========================54.7%                          ] 
 
[===========================54.8%                          ] 
 
[===========================54.9%                          ] 
 
[===========================54.9%                          ] 
 
[===========================54.9%                          ] 
 
[===========================54.9%                          ] 
 
[===========================55.0%                          ] 
 
[===========================55.0%                          ] 
 
[===========================55.1%                          ] 
 
[===========================55.2%                          ] 
 
[===========================55.2%                          ] 
 
[===========================55.2%                          ] 
 
[===========================55.3%                          ] 
 
[===========================55.4%                          ] 
 
[===========================55.5%                          ] 
 
[===========================55.5%                          ] 
 
[===========================55.5%                          ] 
 
[===========================55.5%                          ] 
 
[===========================55.6%                          ] 
 
[===========================55.6%                          ] 
 
[===========================55.6%                          ] 
 
[===========================55.7%                          ] 
 
[===========================55.8%                          ] 
 
[===========================55.8%                          ] 
 
[===========================55.8%                          ] 
 
[===========================55.9%                          ] 
 
[===========================55.9%                          ] 
 
[===========================56.0%                          ] 
 
[===========================56.0%                          ] 
 
[===========================56.0%                          ] 
 
[===========================56.2%                          ] 
 
[===========================56.5%                          ] 
 
[===========================56.7%                          ] 
 
[===========================56.8%                          ] 
 
[===========================56.8%                          ] 
 
[===========================56.9%=                         ] 
 
[===========================56.9%=                         ] 
 
[===========================57.1%=                         ] 
 
[===========================57.2%=                         ] 
 
[===========================57.4%=                         ] 
 
[===========================57.7%=                         ] 
 
[===========================58.6%==                        ] 
 
[===========================59.4%==                        ] 
 
[===========================59.5%==                        ] 
 
[===========================59.9%==                        ] 
 
[===========================60.1%==                        ] 
 
[===========================62.3%====                      ] 
 
[===========================84.9%=================         ] 
 
[==========================100.0%==========================] 
The restore operation completed successfully.
The operation completed successfully.
 
========= End of CMD: =========
 
 
========= SFC /scannow =========
 
 
 
Beginning system scan.  This process will take some time.
 
 
 
Beginning verification phase of system scan.
 
 
Verification 0% complete.
Verification 1% complete.
Verification 1% complete.
Verification 2% complete.
Verification 3% complete.
Verification 3% complete.
Verification 4% complete.
Verification 5% complete.
Verification 5% complete.
Verification 6% complete.
Verification 7% complete.
Verification 7% complete.
Verification 8% complete.
Verification 9% complete.
Verification 9% complete.
Verification 10% complete.
Verification 11% complete.
Verification 11% complete.
Verification 12% complete.
Verification 13% complete.
Verification 13% complete.
Verification 14% complete.
Verification 15% complete.
Verification 15% complete.
Verification 16% complete.
Verification 17% complete.
Verification 17% complete.
Verification 18% complete.
Verification 19% complete.
Verification 19% complete.
Verification 20% complete.
Verification 20% complete.
Verification 21% complete.
Verification 22% complete.
Verification 22% complete.
Verification 23% complete.
Verification 24% complete.
Verification 24% complete.
Verification 25% complete.
Verification 26% complete.
Verification 26% complete.
Verification 27% complete.
Verification 28% complete.
Verification 28% complete.
Verification 29% complete.
Verification 30% complete.
Verification 30% complete.
Verification 31% complete.
Verification 32% complete.
Verification 32% complete.
Verification 33% complete.
Verification 34% complete.
Verification 34% complete.
Verification 35% complete.
Verification 36% complete.
Verification 36% complete.
Verification 37% complete.
Verification 38% complete.
Verification 38% complete.
Verification 39% complete.
Verification 40% complete.
Verification 40% complete.
Verification 41% complete.
Verification 41% complete.
Verification 42% complete.
Verification 43% complete.
Verification 43% complete.
Verification 44% complete.
Verification 45% complete.
Verification 45% complete.
Verification 46% complete.
Verification 47% complete.
Verification 47% complete.
Verification 48% complete.
Verification 49% complete.
Verification 49% complete.
Verification 50% complete.
Verification 51% complete.
Verification 51% complete.
Verification 52% complete.
Verification 53% complete.
Verification 53% complete.
Verification 54% complete.
Verification 55% complete.
Verification 55% complete.
Verification 56% complete.
Verification 57% complete.
Verification 57% complete.
Verification 58% complete.
Verification 59% complete.
Verification 59% complete.
Verification 60% complete.
Verification 61% complete.
Verification 61% complete.
Verification 62% complete.
Verification 62% complete.
Verification 63% complete.
Verification 64% complete.
Verification 64% complete.
Verification 65% complete.
Verification 66% complete.
Verification 66% complete.
Verification 67% complete.
Verification 68% complete.
Verification 68% complete.
Verification 69% complete.
Verification 70% complete.
Verification 70% complete.
Verification 71% complete.
Verification 72% complete.
Verification 72% complete.
Verification 73% complete.
Verification 74% complete.
Verification 74% complete.
Verification 75% complete.
Verification 76% complete.
Verification 76% complete.
Verification 77% complete.
Verification 78% complete.
Verification 78% complete.
Verification 79% complete.
Verification 80% complete.
Verification 80% complete.
Verification 81% complete.
Verification 82% complete.
Verification 82% complete.
Verification 83% complete.
Verification 83% complete.
Verification 84% complete.
Verification 85% complete.
Verification 85% complete.
Verification 86% complete.
Verification 87% complete.
Verification 87% complete.
Verification 88% complete.
Verification 89% complete.
Verification 89% complete.
Verification 90% complete.
Verification 91% complete.
Verification 91% complete.
Verification 92% complete.
Verification 93% complete.
Verification 93% complete.
Verification 94% complete.
Verification 95% complete.
Verification 95% complete.
Verification 96% complete.
Verification 97% complete.
Verification 97% complete.
Verification 98% complete.
Verification 99% complete.
Verification 99% complete.
Verification 100% complete.
 
 
Windows Resource Protection found corrupt files and successfully repaired them.
 
For online repairs, details are included in the CBS log file located at
 
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
 
repairs, details are included in the log file provided by the /OFFLOGFILE flag.
 
 
========= End of CMD: =========
 
 
========= findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log =========
 
2020-12-16 10:53:38, Info                  CSI    0000000f [SR] Verifying 100 components
2020-12-16 10:53:38, Info                  CSI    00000010 [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:38, Info                  CSI    00000011 [SR] Verify complete
2020-12-16 10:53:38, Info                  CSI    00000012 [SR] Verifying 100 components
2020-12-16 10:53:38, Info                  CSI    00000013 [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:39, Info                  CSI    00000015 [SR] Verify complete
2020-12-16 10:53:39, Info                  CSI    00000016 [SR] Verifying 100 components
2020-12-16 10:53:39, Info                  CSI    00000017 [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:40, Info                  CSI    00000018 [SR] Verify complete
2020-12-16 10:53:40, Info                  CSI    00000019 [SR] Verifying 100 components
2020-12-16 10:53:40, Info                  CSI    0000001a [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:40, Info                  CSI    0000001b [SR] Verify complete
2020-12-16 10:53:40, Info                  CSI    0000001c [SR] Verifying 100 components
2020-12-16 10:53:40, Info                  CSI    0000001d [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:42, Info                  CSI    0000001e [SR] Verify complete
2020-12-16 10:53:42, Info                  CSI    0000001f [SR] Verifying 100 components
2020-12-16 10:53:42, Info                  CSI    00000020 [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:43, Info                  CSI    00000021 [SR] Verify complete
2020-12-16 10:53:43, Info                  CSI    00000022 [SR] Verifying 100 components
2020-12-16 10:53:43, Info                  CSI    00000023 [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:46, Info                  CSI    00000024 [SR] Verify complete
2020-12-16 10:53:46, Info                  CSI    00000025 [SR] Verifying 100 components
2020-12-16 10:53:46, Info                  CSI    00000026 [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:48, Info                  CSI    00000027 [SR] Verify complete
2020-12-16 10:53:48, Info                  CSI    00000028 [SR] Verifying 100 components
2020-12-16 10:53:48, Info                  CSI    00000029 [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:54, Info                  CSI    0000002a [SR] Verify complete
2020-12-16 10:53:54, Info                  CSI    0000002b [SR] Verifying 100 components
2020-12-16 10:53:54, Info                  CSI    0000002c [SR] Beginning Verify and Repair transaction
2020-12-16 10:53:59, Info                  CSI    0000002d [SR] Verify complete
2020-12-16 10:54:00, Info                  CSI    0000002e [SR] Verifying 100 components
2020-12-16 10:54:00, Info                  CSI    0000002f [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:01, Info                  CSI    00000030 [SR] Verify complete
2020-12-16 10:54:01, Info                  CSI    00000031 [SR] Verifying 100 components
2020-12-16 10:54:01, Info                  CSI    00000032 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:02, Info                  CSI    00000033 [SR] Verify complete
2020-12-16 10:54:02, Info                  CSI    00000034 [SR] Verifying 100 components
2020-12-16 10:54:02, Info                  CSI    00000035 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:04, Info                  CSI    00000037 [SR] Verify complete
2020-12-16 10:54:04, Info                  CSI    00000038 [SR] Verifying 100 components
2020-12-16 10:54:04, Info                  CSI    00000039 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:04, Info                  CSI    0000003a [SR] Verify complete
2020-12-16 10:54:04, Info                  CSI    0000003b [SR] Verifying 100 components
2020-12-16 10:54:04, Info                  CSI    0000003c [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:05, Info                  CSI    0000003d [SR] Verify complete
2020-12-16 10:54:05, Info                  CSI    0000003e [SR] Verifying 100 components
2020-12-16 10:54:05, Info                  CSI    0000003f [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:08, Info                  CSI    00000040 [SR] Verify complete
2020-12-16 10:54:08, Info                  CSI    00000041 [SR] Verifying 100 components
2020-12-16 10:54:08, Info                  CSI    00000042 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:09, Info                  CSI    00000043 [SR] Verify complete
2020-12-16 10:54:10, Info                  CSI    00000044 [SR] Verifying 100 components
2020-12-16 10:54:10, Info                  CSI    00000045 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:11, Info                  CSI    00000046 [SR] Verify complete
2020-12-16 10:54:11, Info                  CSI    00000047 [SR] Verifying 100 components
2020-12-16 10:54:11, Info                  CSI    00000048 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:13, Info                  CSI    00000049 [SR] Verify complete
2020-12-16 10:54:13, Info                  CSI    0000004a [SR] Verifying 100 components
2020-12-16 10:54:13, Info                  CSI    0000004b [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:14, Info                  CSI    0000004c [SR] Verify complete
2020-12-16 10:54:14, Info                  CSI    0000004d [SR] Verifying 100 components
2020-12-16 10:54:14, Info                  CSI    0000004e [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:15, Info                  CSI    0000004f [SR] Verify complete
2020-12-16 10:54:15, Info                  CSI    00000050 [SR] Verifying 100 components
2020-12-16 10:54:15, Info                  CSI    00000051 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:18, Info                  CSI    00000053 [SR] Verify complete
2020-12-16 10:54:18, Info                  CSI    00000054 [SR] Verifying 100 components
2020-12-16 10:54:18, Info                  CSI    00000055 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:19, Info                  CSI    00000056 [SR] Verify complete
2020-12-16 10:54:19, Info                  CSI    00000057 [SR] Verifying 100 components
2020-12-16 10:54:19, Info                  CSI    00000058 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:21, Info                  CSI    00000059 [SR] Verify complete
2020-12-16 10:54:21, Info                  CSI    0000005a [SR] Verifying 100 components
2020-12-16 10:54:21, Info                  CSI    0000005b [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:22, Info                  CSI    0000005d [SR] Verify complete
2020-12-16 10:54:22, Info                  CSI    0000005e [SR] Verifying 100 components
2020-12-16 10:54:22, Info                  CSI    0000005f [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:25, Info                  CSI    00000061 [SR] Verify complete
2020-12-16 10:54:25, Info                  CSI    00000062 [SR] Verifying 100 components
2020-12-16 10:54:25, Info                  CSI    00000063 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:27, Info                  CSI    00000064 [SR] Verify complete
2020-12-16 10:54:27, Info                  CSI    00000065 [SR] Verifying 100 components
2020-12-16 10:54:27, Info                  CSI    00000066 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:28, Info                  CSI    00000067 [SR] Verify complete
2020-12-16 10:54:28, Info                  CSI    00000068 [SR] Verifying 100 components
2020-12-16 10:54:28, Info                  CSI    00000069 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:29, Info                  CSI    0000006a [SR] Verify complete
2020-12-16 10:54:29, Info                  CSI    0000006b [SR] Verifying 100 components
2020-12-16 10:54:29, Info                  CSI    0000006c [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:30, Info                  CSI    0000006d [SR] Verify complete
2020-12-16 10:54:30, Info                  CSI    0000006e [SR] Verifying 100 components
2020-12-16 10:54:30, Info                  CSI    0000006f [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:32, Info                  CSI    00000070 [SR] Verify complete
2020-12-16 10:54:32, Info                  CSI    00000071 [SR] Verifying 100 components
2020-12-16 10:54:32, Info                  CSI    00000072 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:33, Info                  CSI    00000073 [SR] Verify complete
2020-12-16 10:54:33, Info                  CSI    00000074 [SR] Verifying 100 components
2020-12-16 10:54:33, Info                  CSI    00000075 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:35, Info                  CSI    00000076 [SR] Verify complete
2020-12-16 10:54:35, Info                  CSI    00000077 [SR] Verifying 100 components
2020-12-16 10:54:35, Info                  CSI    00000078 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:37, Info                  CSI    0000007a [SR] Verify complete
2020-12-16 10:54:37, Info                  CSI    0000007b [SR] Verifying 100 components
2020-12-16 10:54:37, Info                  CSI    0000007c [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:42, Info                  CSI    00000081 [SR] Verify complete
2020-12-16 10:54:42, Info                  CSI    00000082 [SR] Verifying 100 components
2020-12-16 10:54:42, Info                  CSI    00000083 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:46, Info                  CSI    00000084 [SR] Verify complete
2020-12-16 10:54:46, Info                  CSI    00000085 [SR] Verifying 100 components
2020-12-16 10:54:46, Info                  CSI    00000086 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:50, Info                  CSI    00000088 [SR] Verify complete
2020-12-16 10:54:50, Info                  CSI    00000089 [SR] Verifying 100 components
2020-12-16 10:54:50, Info                  CSI    0000008a [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:51, Info                  CSI    0000008b [SR] Verify complete
2020-12-16 10:54:51, Info                  CSI    0000008c [SR] Verifying 100 components
2020-12-16 10:54:51, Info                  CSI    0000008d [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:53, Info                  CSI    0000008f [SR] Verify complete
2020-12-16 10:54:53, Info                  CSI    00000090 [SR] Verifying 100 components
2020-12-16 10:54:53, Info                  CSI    00000091 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:56, Info                  CSI    00000093 [SR] Verify complete
2020-12-16 10:54:56, Info                  CSI    00000094 [SR] Verifying 100 components
2020-12-16 10:54:56, Info                  CSI    00000095 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:56, Info                  CSI    00000096 [SR] Verify complete
2020-12-16 10:54:56, Info                  CSI    00000097 [SR] Verifying 100 components
2020-12-16 10:54:56, Info                  CSI    00000098 [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:56, Info                  CSI    00000099 [SR] Verify complete
2020-12-16 10:54:56, Info                  CSI    0000009a [SR] Verifying 100 components
2020-12-16 10:54:56, Info                  CSI    0000009b [SR] Beginning Verify and Repair transaction
2020-12-16 10:54:58, Info                  CSI    0000009c [SR] Verify complete
2020-12-16 10:54:58, Info                  CSI    0000009d [SR] Verifying 100 components
2020-12-16 10:54:58, Info                  CSI    0000009e [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:02, Info                  CSI    000000a1 [SR] Verify complete
2020-12-16 10:55:02, Info                  CSI    000000a2 [SR] Verifying 100 components
2020-12-16 10:55:02, Info                  CSI    000000a3 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:05, Info                  CSI    000000a4 [SR] Verify complete
2020-12-16 10:55:05, Info                  CSI    000000a5 [SR] Verifying 100 components
2020-12-16 10:55:05, Info                  CSI    000000a6 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:07, Info                  CSI    000000a7 [SR] Verify complete
2020-12-16 10:55:07, Info                  CSI    000000a8 [SR] Verifying 100 components
2020-12-16 10:55:07, Info                  CSI    000000a9 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:09, Info                  CSI    000000aa [SR] Verify complete
2020-12-16 10:55:09, Info                  CSI    000000ab [SR] Verifying 100 components
2020-12-16 10:55:09, Info                  CSI    000000ac [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:12, Info                  CSI    000000ad [SR] Verify complete
2020-12-16 10:55:12, Info                  CSI    000000ae [SR] Verifying 100 components
2020-12-16 10:55:12, Info                  CSI    000000af [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:14, Info                  CSI    000000b1 [SR] Verify complete
2020-12-16 10:55:15, Info                  CSI    000000b2 [SR] Verifying 100 components
2020-12-16 10:55:15, Info                  CSI    000000b3 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:17, Info                  CSI    000000b4 [SR] Verify complete
2020-12-16 10:55:17, Info                  CSI    000000b5 [SR] Verifying 100 components
2020-12-16 10:55:17, Info                  CSI    000000b6 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:19, Info                  CSI    000000b8 [SR] Verify complete
2020-12-16 10:55:19, Info                  CSI    000000b9 [SR] Verifying 100 components
2020-12-16 10:55:19, Info                  CSI    000000ba [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:24, Info                  CSI    000000bd [SR] Verify complete
2020-12-16 10:55:24, Info                  CSI    000000be [SR] Verifying 100 components
2020-12-16 10:55:24, Info                  CSI    000000bf [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:27, Info                  CSI    000000c0 [SR] Verify complete
2020-12-16 10:55:27, Info                  CSI    000000c1 [SR] Verifying 100 components
2020-12-16 10:55:27, Info                  CSI    000000c2 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:29, Info                  CSI    000000c3 [SR] Verify complete
2020-12-16 10:55:29, Info                  CSI    000000c4 [SR] Verifying 100 components
2020-12-16 10:55:29, Info                  CSI    000000c5 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:33, Info                  CSI    000000c6 [SR] Verify complete
2020-12-16 10:55:33, Info                  CSI    000000c7 [SR] Verifying 100 components
2020-12-16 10:55:33, Info                  CSI    000000c8 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:36, Info                  CSI    000000c9 [SR] Verify complete
2020-12-16 10:55:36, Info                  CSI    000000ca [SR] Verifying 100 components
2020-12-16 10:55:36, Info                  CSI    000000cb [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:40, Info                  CSI    000000cc [SR] Verify complete
2020-12-16 10:55:40, Info                  CSI    000000cd [SR] Verifying 100 components
2020-12-16 10:55:40, Info                  CSI    000000ce [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:44, Info                  CSI    000000cf [SR] Verify complete
2020-12-16 10:55:44, Info                  CSI    000000d0 [SR] Verifying 100 components
2020-12-16 10:55:44, Info                  CSI    000000d1 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:46, Info                  CSI    000000d2 [SR] Verify complete
2020-12-16 10:55:46, Info                  CSI    000000d3 [SR] Verifying 100 components
2020-12-16 10:55:46, Info                  CSI    000000d4 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:51, Info                  CSI    000000d6 [SR] Verify complete
2020-12-16 10:55:51, Info                  CSI    000000d7 [SR] Verifying 100 components
2020-12-16 10:55:51, Info                  CSI    000000d8 [SR] Beginning Verify and Repair transaction
2020-12-16 10:55:57, Info                  CSI    000000d9 [SR] Verify complete
2020-12-16 10:55:58, Info                  CSI    000000da [SR] Verifying 100 components
2020-12-16 10:55:58, Info                  CSI    000000db [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:01, Info                  CSI    000000dc [SR] Verify complete
2020-12-16 10:56:01, Info                  CSI    000000dd [SR] Verifying 100 components
2020-12-16 10:56:01, Info                  CSI    000000de [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:03, Info                  CSI    000000df [SR] Verify complete
2020-12-16 10:56:03, Info                  CSI    000000e0 [SR] Verifying 100 components
2020-12-16 10:56:03, Info                  CSI    000000e1 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:05, Info                  CSI    000000e2 [SR] Verify complete
2020-12-16 10:56:05, Info                  CSI    000000e3 [SR] Verifying 100 components
2020-12-16 10:56:05, Info                  CSI    000000e4 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:08, Info                  CSI    000000e5 [SR] Verify complete
2020-12-16 10:56:08, Info                  CSI    000000e6 [SR] Verifying 100 components
2020-12-16 10:56:08, Info                  CSI    000000e7 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:11, Info                  CSI    000000e8 [SR] Verify complete
2020-12-16 10:56:11, Info                  CSI    000000e9 [SR] Verifying 100 components
2020-12-16 10:56:11, Info                  CSI    000000ea [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:14, Info                  CSI    000000ec [SR] Verify complete
2020-12-16 10:56:14, Info                  CSI    000000ed [SR] Verifying 100 components
2020-12-16 10:56:14, Info                  CSI    000000ee [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:18, Info                  CSI    000000ef [SR] Verify complete
2020-12-16 10:56:18, Info                  CSI    000000f0 [SR] Verifying 100 components
2020-12-16 10:56:18, Info                  CSI    000000f1 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:22, Info                  CSI    000000f2 [SR] Verify complete
2020-12-16 10:56:22, Info                  CSI    000000f3 [SR] Verifying 100 components
2020-12-16 10:56:22, Info                  CSI    000000f4 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:25, Info                  CSI    000000f6 [SR] Verify complete
2020-12-16 10:56:25, Info                  CSI    000000f7 [SR] Verifying 100 components
2020-12-16 10:56:25, Info                  CSI    000000f8 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:29, Info                  CSI    000000fa [SR] Verify complete
2020-12-16 10:56:29, Info                  CSI    000000fb [SR] Verifying 100 components
2020-12-16 10:56:29, Info                  CSI    000000fc [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:34, Info                  CSI    000000fe [SR] Verify complete
2020-12-16 10:56:34, Info                  CSI    000000ff [SR] Verifying 100 components
2020-12-16 10:56:34, Info                  CSI    00000100 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:37, Info                  CSI    00000104 [SR] Verify complete
2020-12-16 10:56:37, Info                  CSI    00000105 [SR] Verifying 100 components
2020-12-16 10:56:37, Info                  CSI    00000106 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:42, Info                  CSI    00000108 [SR] Verify complete
2020-12-16 10:56:42, Info                  CSI    00000109 [SR] Verifying 100 components
2020-12-16 10:56:42, Info                  CSI    0000010a [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:48, Info                  CSI    0000010b [SR] Verify complete
2020-12-16 10:56:49, Info                  CSI    0000010c [SR] Verifying 100 components
2020-12-16 10:56:49, Info                  CSI    0000010d [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:53, Info                  CSI    0000010f [SR] Verify complete
2020-12-16 10:56:53, Info                  CSI    00000110 [SR] Verifying 100 components
2020-12-16 10:56:53, Info                  CSI    00000111 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:56, Info                  CSI    00000113 [SR] Verify complete
2020-12-16 10:56:56, Info                  CSI    00000114 [SR] Verifying 100 components
2020-12-16 10:56:56, Info                  CSI    00000115 [SR] Beginning Verify and Repair transaction
2020-12-16 10:56:59, Info                  CSI    00000116 [SR] Verify complete
2020-12-16 10:56:59, Info                  CSI    00000117 [SR] Verifying 100 components
2020-12-16 10:56:59, Info                  CSI    00000118 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:03, Info                  CSI    00000119 [SR] Verify complete
2020-12-16 10:57:03, Info                  CSI    0000011a [SR] Verifying 100 components
2020-12-16 10:57:03, Info                  CSI    0000011b [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:09, Info                  CSI    0000011d [SR] Verify complete
2020-12-16 10:57:09, Info                  CSI    0000011e [SR] Verifying 100 components
2020-12-16 10:57:09, Info                  CSI    0000011f [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:13, Info                  CSI    00000120 [SR] Verify complete
2020-12-16 10:57:13, Info                  CSI    00000121 [SR] Verifying 100 components
2020-12-16 10:57:13, Info                  CSI    00000122 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:16, Info                  CSI    00000123 [SR] Verify complete
2020-12-16 10:57:16, Info                  CSI    00000124 [SR] Verifying 100 components
2020-12-16 10:57:16, Info                  CSI    00000125 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:18, Info                  CSI    00000126 [SR] Verify complete
2020-12-16 10:57:18, Info                  CSI    00000127 [SR] Verifying 100 components
2020-12-16 10:57:18, Info                  CSI    00000128 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:21, Info                  CSI    0000012a [SR] Verify complete
2020-12-16 10:57:21, Info                  CSI    0000012b [SR] Verifying 100 components
2020-12-16 10:57:21, Info                  CSI    0000012c [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:24, Info                  CSI    0000012d [SR] Verify complete
2020-12-16 10:57:24, Info                  CSI    0000012e [SR] Verifying 100 components
2020-12-16 10:57:24, Info                  CSI    0000012f [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:27, Info                  CSI    00000130 [SR] Verify complete
2020-12-16 10:57:28, Info                  CSI    00000131 [SR] Verifying 100 components
2020-12-16 10:57:28, Info                  CSI    00000132 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:30, Info                  CSI    00000134 [SR] Verify complete
2020-12-16 10:57:30, Info                  CSI    00000135 [SR] Verifying 100 components
2020-12-16 10:57:30, Info                  CSI    00000136 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:33, Info                  CSI    00000137 [SR] Verify complete
2020-12-16 10:57:33, Info                  CSI    00000138 [SR] Verifying 100 components
2020-12-16 10:57:33, Info                  CSI    00000139 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:34, Info                  CSI    0000013a [SR] Verify complete
2020-12-16 10:57:34, Info                  CSI    0000013b [SR] Verifying 100 components
2020-12-16 10:57:34, Info                  CSI    0000013c [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:36, Info                  CSI    0000013d [SR] Verify complete
2020-12-16 10:57:36, Info                  CSI    0000013e [SR] Verifying 100 components
2020-12-16 10:57:36, Info                  CSI    0000013f [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:38, Info                  CSI    00000140 [SR] Verify complete
2020-12-16 10:57:38, Info                  CSI    00000141 [SR] Verifying 100 components
2020-12-16 10:57:38, Info                  CSI    00000142 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:41, Info                  CSI    00000143 [SR] Verify complete
2020-12-16 10:57:41, Info                  CSI    00000144 [SR] Verifying 100 components
2020-12-16 10:57:41, Info                  CSI    00000145 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:44, Info                  CSI    00000146 [SR] Verify complete
2020-12-16 10:57:44, Info                  CSI    00000147 [SR] Verifying 100 components
2020-12-16 10:57:44, Info                  CSI    00000148 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:47, Info                  CSI    0000014a [SR] Verify complete
2020-12-16 10:57:47, Info                  CSI    0000014b [SR] Verifying 100 components
2020-12-16 10:57:47, Info                  CSI    0000014c [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:51, Info                  CSI    0000014d [SR] Verify complete
2020-12-16 10:57:51, Info                  CSI    0000014e [SR] Verifying 100 components
2020-12-16 10:57:51, Info                  CSI    0000014f [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:53, Info                  CSI    00000150 [SR] Verify complete
2020-12-16 10:57:53, Info                  CSI    00000151 [SR] Verifying 100 components
2020-12-16 10:57:53, Info                  CSI    00000152 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:55, Info                  CSI    00000153 [SR] Verify complete
2020-12-16 10:57:55, Info                  CSI    00000154 [SR] Verifying 100 components
2020-12-16 10:57:55, Info                  CSI    00000155 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:56, Info                  CSI    00000156 [SR] Verify complete
2020-12-16 10:57:56, Info                  CSI    00000157 [SR] Verifying 100 components
2020-12-16 10:57:56, Info                  CSI    00000158 [SR] Beginning Verify and Repair transaction
2020-12-16 10:57:58, Info                  CSI    00000159 [SR] Verify complete
2020-12-16 10:57:58, Info                  CSI    0000015a [SR] Verifying 100 components
2020-12-16 10:57:58, Info                  CSI    0000015b [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:00, Info                  CSI    0000015c [SR] Verify complete
2020-12-16 10:58:00, Info                  CSI    0000015d [SR] Verifying 100 components
2020-12-16 10:58:00, Info                  CSI    0000015e [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:02, Info                  CSI    0000015f [SR] Verify complete
2020-12-16 10:58:02, Info                  CSI    00000160 [SR] Verifying 100 components
2020-12-16 10:58:02, Info                  CSI    00000161 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:04, Info                  CSI    00000162 [SR] Verify complete
2020-12-16 10:58:04, Info                  CSI    00000163 [SR] Verifying 100 components
2020-12-16 10:58:04, Info                  CSI    00000164 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:06, Info                  CSI    00000165 [SR] Verify complete
2020-12-16 10:58:07, Info                  CSI    00000166 [SR] Verifying 100 components
2020-12-16 10:58:07, Info                  CSI    00000167 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:09, Info                  CSI    00000168 [SR] Verify complete
2020-12-16 10:58:10, Info                  CSI    00000169 [SR] Verifying 100 components
2020-12-16 10:58:10, Info                  CSI    0000016a [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:11, Info                  CSI    0000016b [SR] Verify complete
2020-12-16 10:58:11, Info                  CSI    0000016c [SR] Verifying 100 components
2020-12-16 10:58:11, Info                  CSI    0000016d [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:13, Info                  CSI    0000016e [SR] Verify complete
2020-12-16 10:58:13, Info                  CSI    0000016f [SR] Verifying 100 components
2020-12-16 10:58:13, Info                  CSI    00000170 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:15, Info                  CSI    00000171 [SR] Verify complete
2020-12-16 10:58:15, Info                  CSI    00000172 [SR] Verifying 100 components
2020-12-16 10:58:15, Info                  CSI    00000173 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:17, Info                  CSI    00000174 [SR] Verify complete
2020-12-16 10:58:17, Info                  CSI    00000175 [SR] Verifying 100 components
2020-12-16 10:58:17, Info                  CSI    00000176 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:20, Info                  CSI    00000178 [SR] Verify complete
2020-12-16 10:58:20, Info                  CSI    00000179 [SR] Verifying 100 components
2020-12-16 10:58:20, Info                  CSI    0000017a [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:23, Info                  CSI    0000017b [SR] Verify complete
2020-12-16 10:58:23, Info                  CSI    0000017c [SR] Verifying 100 components
2020-12-16 10:58:23, Info                  CSI    0000017d [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:25, Info                  CSI    0000017e [SR] Verify complete
2020-12-16 10:58:26, Info                  CSI    0000017f [SR] Verifying 100 components
2020-12-16 10:58:26, Info                  CSI    00000180 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:28, Info                  CSI    00000181 [SR] Verify complete
2020-12-16 10:58:28, Info                  CSI    00000182 [SR] Verifying 100 components
2020-12-16 10:58:28, Info                  CSI    00000183 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:31, Info                  CSI    00000184 [SR] Verify complete
2020-12-16 10:58:31, Info                  CSI    00000185 [SR] Verifying 100 components
2020-12-16 10:58:31, Info                  CSI    00000186 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:33, Info                  CSI    00000187 [SR] Verify complete
2020-12-16 10:58:33, Info                  CSI    00000188 [SR] Verifying 100 components
2020-12-16 10:58:33, Info                  CSI    00000189 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:35, Info                  CSI    0000018a [SR] Verify complete
2020-12-16 10:58:35, Info                  CSI    0000018b [SR] Verifying 100 components
2020-12-16 10:58:35, Info                  CSI    0000018c [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:38, Info                  CSI    0000018d [SR] Verify complete
2020-12-16 10:58:38, Info                  CSI    0000018e [SR] Verifying 100 components
2020-12-16 10:58:38, Info                  CSI    0000018f [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:41, Info                  CSI    00000193 [SR] Verify complete
2020-12-16 10:58:41, Info                  CSI    00000194 [SR] Verifying 100 components
2020-12-16 10:58:41, Info                  CSI    00000195 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:44, Info                  CSI    00000196 [SR] Verify complete
2020-12-16 10:58:44, Info                  CSI    00000197 [SR] Verifying 100 components
2020-12-16 10:58:44, Info                  CSI    00000198 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:45, Info                  CSI    00000199 [SR] Verify complete
2020-12-16 10:58:45, Info                  CSI    0000019a [SR] Verifying 100 components
2020-12-16 10:58:45, Info                  CSI    0000019b [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:46, Info                  CSI    0000019c [SR] Verify complete
2020-12-16 10:58:47, Info                  CSI    0000019d [SR] Verifying 100 components
2020-12-16 10:58:47, Info                  CSI    0000019e [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:48, Info                  CSI    0000019f [SR] Verify complete
2020-12-16 10:58:48, Info                  CSI    000001a0 [SR] Verifying 100 components
2020-12-16 10:58:48, Info                  CSI    000001a1 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:51, Info                  CSI    000001a3 [SR] Verify complete
2020-12-16 10:58:51, Info                  CSI    000001a4 [SR] Verifying 100 components
2020-12-16 10:58:51, Info                  CSI    000001a5 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:53, Info                  CSI    000001a6 [SR] Verify complete
2020-12-16 10:58:53, Info                  CSI    000001a7 [SR] Verifying 100 components
2020-12-16 10:58:53, Info                  CSI    000001a8 [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:54, Info                  CSI    000001a9 [SR] Verify complete
2020-12-16 10:58:54, Info                  CSI    000001aa [SR] Verifying 100 components
2020-12-16 10:58:54, Info                  CSI    000001ab [SR] Beginning Verify and Repair transaction
2020-12-16 10:58:57, Info                  CSI    000001ac [SR] Verify complete
2020-12-16 10:58:58, Info                  CSI    000001ad [SR] Verifying 100 components
2020-12-16 10:58:58, Info                  CSI    000001ae [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:01, Info                  CSI    000001af [SR] Verify complete
2020-12-16 10:59:01, Info                  CSI    000001b0 [SR] Verifying 100 components
2020-12-16 10:59:01, Info                  CSI    000001b1 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:04, Info                  CSI    000001b2 [SR] Verify complete
2020-12-16 10:59:04, Info                  CSI    000001b3 [SR] Verifying 100 components
2020-12-16 10:59:04, Info                  CSI    000001b4 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:09, Info                  CSI    000001b6 [SR] Verify complete
2020-12-16 10:59:09, Info                  CSI    000001b7 [SR] Verifying 100 components
2020-12-16 10:59:09, Info                  CSI    000001b8 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:11, Info                  CSI    000001b9 [SR] Verify complete
2020-12-16 10:59:11, Info                  CSI    000001ba [SR] Verifying 100 components
2020-12-16 10:59:11, Info                  CSI    000001bb [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:13, Info                  CSI    000001bc [SR] Verify complete
2020-12-16 10:59:13, Info                  CSI    000001bd [SR] Verifying 100 components
2020-12-16 10:59:13, Info                  CSI    000001be [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:16, Info                  CSI    000001bf [SR] Verify complete
2020-12-16 10:59:16, Info                  CSI    000001c0 [SR] Verifying 100 components
2020-12-16 10:59:16, Info                  CSI    000001c1 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:18, Info                  CSI    000001c2 [SR] Verify complete
2020-12-16 10:59:18, Info                  CSI    000001c3 [SR] Verifying 100 components
2020-12-16 10:59:18, Info                  CSI    000001c4 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:20, Info                  CSI    000001c5 [SR] Verify complete
2020-12-16 10:59:20, Info                  CSI    000001c6 [SR] Verifying 100 components
2020-12-16 10:59:20, Info                  CSI    000001c7 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:23, Info                  CSI    000001cc [SR] Verify complete
2020-12-16 10:59:23, Info                  CSI    000001cd [SR] Verifying 100 components
2020-12-16 10:59:23, Info                  CSI    000001ce [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:25, Info                  CSI    000001cf [SR] Verify complete
2020-12-16 10:59:25, Info                  CSI    000001d0 [SR] Verifying 100 components
2020-12-16 10:59:25, Info                  CSI    000001d1 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:27, Info                  CSI    000001d2 [SR] Verify complete
2020-12-16 10:59:27, Info                  CSI    000001d3 [SR] Verifying 100 components
2020-12-16 10:59:27, Info                  CSI    000001d4 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:31, Info                  CSI    000001d5 [SR] Verify complete
2020-12-16 10:59:31, Info                  CSI    000001d6 [SR] Verifying 100 components
2020-12-16 10:59:31, Info                  CSI    000001d7 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:33, Info                  CSI    000001d8 [SR] Verify complete
2020-12-16 10:59:33, Info                  CSI    000001d9 [SR] Verifying 100 components
2020-12-16 10:59:33, Info                  CSI    000001da [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:36, Info                  CSI    000001dc [SR] Verify complete
2020-12-16 10:59:36, Info                  CSI    000001dd [SR] Verifying 100 components
2020-12-16 10:59:36, Info                  CSI    000001de [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:39, Info                  CSI    000001e0 [SR] Verify complete
2020-12-16 10:59:39, Info                  CSI    000001e1 [SR] Verifying 100 components
2020-12-16 10:59:39, Info                  CSI    000001e2 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:44, Info                  CSI    000001e3 [SR] Verify complete
2020-12-16 10:59:44, Info                  CSI    000001e4 [SR] Verifying 100 components
2020-12-16 10:59:44, Info                  CSI    000001e5 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:49, Info                  CSI    000001e6 [SR] Verify complete
2020-12-16 10:59:49, Info                  CSI    000001e7 [SR] Verifying 100 components
2020-12-16 10:59:49, Info                  CSI    000001e8 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:50, Info                  CSI    000001e9 [SR] Verify complete
2020-12-16 10:59:50, Info                  CSI    000001ea [SR] Verifying 100 components
2020-12-16 10:59:50, Info                  CSI    000001eb [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:53, Info                  CSI    000001ec [SR] Verify complete
2020-12-16 10:59:53, Info                  CSI    000001ed [SR] Verifying 100 components
2020-12-16 10:59:53, Info                  CSI    000001ee [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:55, Info                  CSI    000001ef [SR] Verify complete
2020-12-16 10:59:55, Info                  CSI    000001f0 [SR] Verifying 100 components
2020-12-16 10:59:55, Info                  CSI    000001f1 [SR] Beginning Verify and Repair transaction
2020-12-16 10:59:59, Info                  CSI    000001f2 [SR] Verify complete
2020-12-16 10:59:59, Info                  CSI    000001f3 [SR] Verifying 100 components
2020-12-16 10:59:59, Info                  CSI    000001f4 [SR] Beginning Verify and Repair transaction
2020-12-16 11:00:01, Info                  CSI    000001f5 [SR] Verify complete
2020-12-16 11:00:01, Info                  CSI    000001f6 [SR] Verifying 100 components
2020-12-16 11:00:01, Info                  CSI    000001f7 [SR] Beginning Verify and Repair transaction
2020-12-16 11:00:02, Info                  CSI    000001f8 [SR] Verify complete
2020-12-16 11:00:02, Info                  CSI    000001f9 [SR] Verifying 100 components
2020-12-16 11:00:02, Info                  CSI    000001fa [SR] Beginning Verify and Repair transaction
2020-12-16 11:00:04, Info                  CSI    000001fb [SR] Verify complete
2020-12-16 11:00:04, Info                  CSI    000001fc [SR] Verifying 100 components
2020-12-16 11:00:04, Info                  CSI    000001fd [SR] Beginning Verify and Repair transaction
2020-12-16 11:00:05, Info                  CSI    000001fe [SR] Verify complete
2020-12-16 11:00:05, Info                  CSI    000001ff [SR] Verifying 100 components
2020-12-16 11:00:05, Info                  CSI    00000200 [SR] Beginning Verify and Repair transaction
2020-12-16 11:00:07, Info                  CSI    00000202 [SR] Verify complete
2020-12-16 11:00:07, Info                  CSI    00000203 [SR] Verifying 100 components
2020-12-16 11:00:07, Info                  CSI    00000204 [SR] Beginning Verify and Repair transaction
2020-12-16 11:00:10, Info                  CSI    00000205 [SR] Verify complete
2020-12-16 11:00:10, Info                  CSI    00000206 [SR] Verifying 42 components
2020-12-16 11:00:10, Info                  CSI    00000207 [SR] Beginning Verify and Repair transaction
2020-12-16 11:00:12, Info                  CSI    00000208 [SR] Verify complete
2020-12-16 11:00:12, Info                  CSI    00000209 [SR] Repairing 0 components
2020-12-16 11:00:12, Info                  CSI    0000020a [SR] Beginning Verify and Repair transaction
2020-12-16 11:00:12, Info                  CSI    0000020b [SR] Repair complete
 
========= End of CMD: =========
 
 
========= FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" =========
 
 
========= End of CMD: =========
 
 
 
The system needed a reboot.
 
==== End of Fixlog 11:01:14 ====
 
 
 
FRST.txt:
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-12-2020
Ran by Acer (administrator) on DESKTOP-58JI9LT (Acer Nitro AN515-53) (16-12-2020 11:09:36)
Running from C:\Users\Acer\Desktop
Loaded Profiles: Acer
Platform: Windows 10 Home Version 20H2 19042.685 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <23>
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt\IGCC.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe
(Intel® Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_e335ebb186115025\RstMwService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Acer\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
 
==================== Registry (Whitelisted) ===================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19677472 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_ASC] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32414392 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\87.0.4280.88\Installer\chrmstp.exe [2020-12-08] (Google LLC -> Google LLC)
 
==================== Scheduled Tasks (Whitelisted) ============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {038FD82F-DDC0-46E0-860D-1688186A7C51} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {0A797F8C-A747-46F2-8088-C6BE208AF7FD} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {37BB4993-E3D2-4594-B22D-3152A88B82A2} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3B62CFDE-161B-425D-B756-729ED895E823} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [670928 2020-11-12] (Mozilla Corporation -> Mozilla Foundation)
Task: {80628385-F804-4B2A-AE05-B520587D1E4F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8D4B220D-1E26-42C9-9A4C-419552D59CEC} - System32\Tasks\NCH Software\FastFoxSevenDays => C:\Program Files (x86)\NCH Software\FastFox\FastFox.exe
Task: {986F54A4-241E-4241-9244-4440F69B231F} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A659040A-42A6-478F-983A-D6B3B46E544B} - System32\Tasks\Opera scheduled Autoupdate 1607479406 => C:\Program Files (x86)\Opera\launcher.exe [1529880 2020-11-25] (Opera Software AS -> Opera Software)
Task: {B84A3225-9359-4B6E-8A3D-80972F500724} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2020-12-08] (Google Inc -> Google Inc.)
Task: {BA5FE7FD-1342-4603-83E1-95A123F7A0BF} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {BC99A069-7D58-48CF-BA2D-747CB811D89A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2020-12-08] (Google Inc -> Google Inc.)
Task: {C4435EF8-0CCA-478C-9863-4C430D3D40BB} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C67758DB-7623-4C8D-941C-661B33EFE78F} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E0AEE404-E861-4628-95FA-336978E99255} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {E0DD7E13-5C05-4B77-9C9D-62C2A1AC6D91} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F25EDDD8-6DC5-4A4F-BA86-A4CA1BDEE531} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FB673557-D924-4F5A-AE31-91E16A4BAD17} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FD1F8905-F67C-4228-BAB3-4780E1301D84} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26896568 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{bb8a466b-6536-41d3-8809-c8cf6a4049a9}: [DhcpNameServer] 192.168.43.1
 
Edge: 
======
DownloadDir: C:\Users\Acer\Downloads
Edge Profile: C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default [2020-12-12]
Edge DownloadDir: C:\Users\Acer\Downloads
Edge Extension: (Outlook) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb [2020-12-09]
Edge Extension: (Word) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi [2020-12-09]
Edge Extension: (Excel) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm [2020-12-09]
Edge Extension: (PowerPoint) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf [2020-12-09]
 
FireFox:
========
FF DefaultProfile: y876i4d5.default
FF ProfilePath: C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\y876i4d5.default [2020-12-08]
FF ProfilePath: C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\wzavswk4.default-release [2020-12-16]
 
Chrome: 
=======
CHR Profile: C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default [2020-12-16]
CHR HomePage: Default -> hxxp://www.google.com/
CHR Extension: (Slides) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-12-08]
CHR Extension: (Docs) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-12-08]
CHR Extension: (Google Drive) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-08]
CHR Extension: (YouTube) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-12-08]
CHR Extension: (Sheets) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-12-08]
CHR Extension: (Google Docs Offline) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-12-08]
CHR Extension: (Lionbridge Extension) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\hggdekahccifhildkadlnnfkdcmlmpah [2020-12-09]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-12-08]
CHR Extension: (Gmail) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-08]
CHR Extension: (Chrome Media Router) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-08]
 
==================== Services (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2019-01-22] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-02-28] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
 
===================== Drivers (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 AcerAirplaneModeController; C:\Windows\System32\drivers\AcerAirplaneModeController.sys [30168 2020-05-13] (Acer Incorporated -> Acer Incorporated)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153312 2020-12-09] (Malwarebytes Corporation -> Malwarebytes)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220160 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2020-12-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [197792 2020-12-16] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [77496 2020-12-16] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [139424 2020-12-16] (Malwarebytes Inc -> Malwarebytes)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 USBPcap; C:\Windows\system32\DRIVERS\USBPcap.sys [41720 2015-12-10] (Wireshark Foundation, Inc. -> USBPcap)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [48536 2020-12-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [429296 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One month (created) (Whitelisted) =========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2020-12-16 11:09 - 2020-12-16 11:10 - 000016268 _____ C:\Users\Acer\Desktop\FRST.txt
2020-12-16 11:04 - 2020-12-16 11:04 - 000197792 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2020-12-16 11:04 - 2020-12-16 11:04 - 000139424 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2020-12-16 11:04 - 2020-12-16 11:04 - 000077496 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2020-12-16 10:35 - 2020-12-16 11:01 - 000082153 _____ C:\Users\Acer\Desktop\Fixlog.txt
2020-12-15 17:08 - 2020-12-16 11:10 - 000000000 ____D C:\FRST
2020-12-15 17:02 - 2020-12-15 17:02 - 002286592 _____ (Farbar) C:\Users\Acer\Desktop\FRST64.exe
2020-12-15 12:00 - 2020-12-15 12:05 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Wireshark
2020-12-12 09:36 - 2020-12-12 09:36 - 011289960 _____ C:\Users\Acer\Downloads\mb-support-1.8.0.848.exe
2020-12-11 19:23 - 2020-12-11 19:23 - 000000000 ____D C:\Windows\system32\Tasks\Apple
2020-12-11 19:22 - 2020-12-11 19:22 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2020-12-10 18:56 - 2020-12-10 18:56 - 000174055 _____ C:\Users\Acer\Documents\ASULLIVAN Revised Liability Release Notice_Global Resolution Services_Barclay Mercury Card.pdf
2020-12-09 21:11 - 2020-12-09 21:11 - 000002914 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2020-12-09 21:11 - 2020-12-09 21:11 - 000002908 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2020-12-09 21:11 - 2020-12-09 21:11 - 000002904 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2020-12-09 21:11 - 2020-12-09 21:11 - 000002902 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk
2020-12-09 21:07 - 2020-12-09 21:21 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-12-09 21:07 - 2020-12-09 21:21 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-12-09 21:07 - 2020-12-09 21:21 - 000002276 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2020-12-09 21:06 - 2020-12-11 11:17 - 000003480 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-12-09 21:06 - 2020-12-11 11:17 - 000003356 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-12-09 20:52 - 2020-12-09 20:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2020-12-09 20:52 - 2020-12-09 20:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2020-12-09 20:52 - 2020-12-09 20:52 - 001822272 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2020-12-09 20:52 - 2020-12-09 20:52 - 001393496 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2020-12-09 20:52 - 2020-12-09 20:52 - 001333248 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000266240 _____ C:\Windows\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000240640 _____ C:\Windows\SysWOW64\CoreMas.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\ncpa.cpl
2020-12-09 20:52 - 2020-12-09 20:52 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncpa.cpl
2020-12-09 20:52 - 2020-12-09 20:52 - 000060928 _____ C:\Windows\system32\runexehelper.exe
2020-12-09 20:52 - 2020-12-09 20:52 - 000048640 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000039936 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000010912 _____ C:\Windows\system32\DrtmAuthTxt.wim
2020-12-09 20:52 - 2020-12-09 20:52 - 000010752 _____ C:\Windows\SysWOW64\agentactivationruntimestarter.exe
2020-12-09 20:52 - 2020-12-09 20:52 - 000001370 _____ C:\Windows\system32\ThirdPartyNoticesBySHS.txt
2020-12-09 20:51 - 2020-12-09 20:51 - 002260480 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000363520 _____ C:\Windows\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000287232 _____ C:\Windows\system32\CoreMas.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000165376 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2020-12-09 20:51 - 2020-12-09 20:51 - 000089088 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000073216 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000013312 _____ C:\Windows\system32\agentactivationruntimestarter.exe
2020-12-09 20:20 - 2020-12-09 20:20 - 000000000 ___HD C:\OneDriveTemp
2020-12-09 19:12 - 2020-12-09 19:12 - 030469496 _____ (Piriform Software Ltd) C:\Users\Acer\Downloads\ccsetup574.exe
2020-12-09 17:02 - 2020-12-09 17:02 - 000000000 ____D C:\Users\Acer\AppData\LocalLow\Temp
2020-12-09 16:01 - 2020-12-09 16:01 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-12-09 16:01 - 2020-12-09 16:01 - 000220160 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-12-09 16:01 - 2020-12-09 16:01 - 000019912 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2020-12-09 16:01 - 2020-12-09 16:01 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-12-09 15:31 - 2020-12-12 09:29 - 000000000 ____D C:\Users\Acer\AppData\Local\CrashDumps
2020-12-08 22:39 - 2020-12-08 22:39 - 000000000 ____D C:\Users\Acer\AppData\Roaming\OpenOffice
2020-12-08 22:37 - 2020-12-08 22:37 - 000000458 _____ C:\Users\Acer\AppData\Roaming\Drives Monitor_Settings.ini
2020-12-08 22:35 - 2020-12-08 22:35 - 000001082 _____ C:\Users\Acer\Desktop\SQLiteStudio - Shortcut.lnk
2020-12-08 22:34 - 2020-12-08 22:34 - 000001816 _____ C:\Users\Acer\Desktop\ScreamingFrogSEOSpider - Shortcut.lnk
2020-12-08 22:29 - 2020-12-08 22:29 - 000002205 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk
2020-12-08 22:29 - 2020-12-08 22:29 - 000000000 ____D C:\Program Files (x86)\Belarc
2020-12-08 22:28 - 2020-12-08 22:28 - 000000877 _____ C:\Users\Acer\Desktop\HTTrack Website Copier.lnk
2020-12-08 22:28 - 2020-12-08 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2020-12-08 22:28 - 2020-12-08 22:28 - 000000000 ____D C:\Program Files\WinHTTrack
2020-12-08 22:19 - 2020-12-08 22:19 - 000003033 _____ C:\Users\Acer\Desktop\TaskMerlin.lnk
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Interfathom TaskMerlin
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\Users\Acer\AppData\Local\Interfathom
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\ProgramData\Interfathom
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\Program Files (x86)\Interfathom
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files\MSBuild
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-12-08 21:47 - 2020-12-08 21:47 - 000001192 _____ C:\Users\Acer\Desktop\blender.lnk
2020-12-08 21:47 - 2020-12-08 21:47 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender
2020-12-08 21:47 - 2020-12-08 21:47 - 000000000 ____D C:\Program Files\Blender Foundation
2020-12-08 21:45 - 2020-12-08 21:46 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Scribus
2020-12-08 21:44 - 2020-12-08 21:44 - 000000907 _____ C:\Users\Public\Desktop\Scribus 1.4.8.lnk
2020-12-08 21:44 - 2020-12-08 21:44 - 000000907 _____ C:\ProgramData\Desktop\Scribus 1.4.8.lnk
2020-12-08 21:44 - 2020-12-08 21:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Scribus 1.4.8
2020-12-08 21:43 - 2020-12-08 21:44 - 000000000 ____D C:\Program Files\Scribus 1.4.8
2020-12-08 21:42 - 2020-12-08 21:42 - 000000218 _____ C:\Users\Acer\AppData\Local\recently-used.xbel
2020-12-08 21:42 - 2020-12-08 21:42 - 000000000 ____D C:\Users\Acer\AppData\Roaming\inkscape
2020-12-08 21:42 - 2020-12-08 21:42 - 000000000 ____D C:\Users\Acer\.dbus-keyrings
2020-12-08 21:41 - 2020-12-08 21:41 - 000000939 _____ C:\Users\Public\Desktop\Inkscape.lnk
2020-12-08 21:41 - 2020-12-08 21:41 - 000000939 _____ C:\ProgramData\Desktop\Inkscape.lnk
2020-12-08 21:41 - 2020-12-08 21:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape
2020-12-08 21:40 - 2020-12-08 21:41 - 000000000 ____D C:\Program Files\Inkscape
2020-12-08 21:37 - 2020-12-08 21:37 - 000001363 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Frog SEO Spider.lnk
2020-12-08 21:37 - 2020-12-08 21:37 - 000001265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uninstall Screaming Frog SEO Spider.lnk
2020-12-08 21:37 - 2020-12-08 21:37 - 000000000 ____D C:\Program Files (x86)\Screaming Frog SEO Spider
2020-12-08 21:24 - 2020-12-08 21:25 - 000000000 ____D C:\Users\Acer\AppData\Roaming\sqlitestudio
2020-12-08 21:24 - 2020-12-08 21:24 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SQLiteStudio
2020-12-08 21:24 - 2020-12-08 21:24 - 000000000 ____D C:\Program Files\SQLiteStudio
2020-12-08 21:23 - 2020-12-08 21:23 - 000002989 _____ C:\Users\Acer\Desktop\Zinio Reader.lnk
2020-12-08 21:23 - 2020-12-08 21:23 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zinio Reader
2020-12-08 21:23 - 2020-12-08 21:23 - 000000000 ____D C:\Program Files (x86)\Zinio
2020-12-08 21:18 - 2020-12-08 21:19 - 000002287 _____ C:\Users\Acer\Desktop\Kindle.lnk
2020-12-08 21:18 - 2020-12-08 21:19 - 000000000 ____D C:\Users\Acer\AppData\Local\Amazon
2020-12-08 21:18 - 2020-12-08 21:18 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2020-12-08 21:17 - 2020-12-16 11:07 - 000000000 ____D C:\Program Files\CCleaner
2020-12-08 21:17 - 2020-12-16 08:51 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-12-08 21:17 - 2020-12-08 21:17 - 000002886 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-12-08 21:17 - 2020-12-08 21:17 - 000001128 _____ C:\Users\Public\Desktop\OpenOffice 4.1.4.lnk
2020-12-08 21:17 - 2020-12-08 21:17 - 000001128 _____ C:\ProgramData\Desktop\OpenOffice 4.1.4.lnk
2020-12-08 21:17 - 2020-12-08 21:17 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.4
2020-12-08 21:17 - 2020-12-08 21:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-12-08 21:16 - 2020-12-08 21:17 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4
2020-12-08 21:04 - 2020-12-08 21:04 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2020-12-08 21:03 - 2020-12-08 21:04 - 000003970 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1607479406
2020-12-08 21:03 - 2020-12-08 21:04 - 000000000 ____D C:\Program Files (x86)\Opera
2020-12-08 21:03 - 2020-12-08 21:03 - 000001204 _____ C:\Users\Public\Desktop\Opera Browser.lnk
2020-12-08 21:03 - 2020-12-08 21:03 - 000001204 _____ C:\ProgramData\Desktop\Opera Browser.lnk
2020-12-08 21:03 - 2020-12-08 21:03 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Opera Software
2020-12-08 21:03 - 2020-12-08 21:03 - 000000000 ____D C:\Users\Acer\AppData\Local\Opera Software
2020-12-08 20:59 - 2020-12-08 20:59 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Apple Computer
2020-12-08 20:59 - 2020-12-08 20:59 - 000000000 ____D C:\Users\Acer\AppData\Local\Apple Computer
2020-12-08 20:58 - 2020-12-08 20:58 - 000002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2020-12-08 20:58 - 2020-12-08 20:58 - 000002507 _____ C:\Users\Public\Desktop\Safari.lnk
2020-12-08 20:58 - 2020-12-08 20:58 - 000002507 _____ C:\ProgramData\Desktop\Safari.lnk
2020-12-08 20:58 - 2020-12-08 20:58 - 000000000 ____D C:\ProgramData\Apple Computer
2020-12-08 20:58 - 2020-12-08 20:58 - 000000000 ____D C:\Program Files (x86)\Safari
2020-12-08 20:55 - 2020-12-08 20:55 - 000001827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2020-12-08 20:55 - 2020-12-08 20:55 - 000000000 ____D C:\Program Files\USBPcap
2020-12-08 20:54 - 2020-12-08 20:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2020-12-08 20:54 - 2020-12-08 20:54 - 000000000 ____D C:\Program Files (x86)\WinPcap
2020-12-08 20:52 - 2020-12-08 20:55 - 000000000 ____D C:\Program Files\Wireshark
2020-12-08 20:52 - 2020-12-08 20:52 - 000001567 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark Legacy.lnk
2020-12-08 20:45 - 2020-12-08 20:45 - 000000000 ____D C:\Users\Acer\AppData\Local\mbamtray
2020-12-08 20:45 - 2020-12-08 20:45 - 000000000 ____D C:\Users\Acer\AppData\Local\mbam
2020-12-08 20:44 - 2020-12-09 16:01 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-12-08 20:44 - 2020-12-08 20:44 - 000000000 ____D C:\ProgramData\MB2Migration
2020-12-08 20:44 - 2020-12-08 20:44 - 000000000 ____D C:\Program Files\Malwarebytes
2020-12-08 20:17 - 2020-12-11 19:22 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\Users\Acer\AppData\Local\Apple
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\ProgramData\Apple
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\Program Files\Bonjour
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\Program Files (x86)\Bonjour
2020-12-08 20:09 - 2020-12-08 20:44 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-12-08 20:09 - 2020-12-08 20:44 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2020-12-08 19:58 - 2020-12-15 12:05 - 000000000 ____D C:\Users\Acer\AppData\LocalLow\Mozilla
2020-12-08 19:58 - 2020-12-08 19:58 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Mozilla
2020-12-08 19:58 - 2020-12-08 19:58 - 000000000 ____D C:\Users\Acer\AppData\Local\Mozilla
2020-12-08 19:57 - 2020-12-15 12:05 - 000000000 ____D C:\ProgramData\Mozilla
2020-12-08 19:57 - 2020-12-08 19:58 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-12-08 19:57 - 2020-12-08 19:57 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-12-08 19:57 - 2020-12-08 19:57 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2020-12-08 19:57 - 2020-12-08 19:57 - 000000993 _____ C:\ProgramData\Desktop\Firefox.lnk
2020-12-08 19:57 - 2020-12-08 19:57 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2020-12-08 19:57 - 2020-12-08 19:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-12-08 19:51 - 2020-12-08 23:12 - 000000000 ____D C:\Program Files (x86)\NCH Software
2020-12-08 19:51 - 2020-12-08 19:55 - 000000000 ____D C:\ProgramData\NCH Software
2020-12-08 19:51 - 2020-12-08 19:51 - 000000000 ____D C:\Windows\system32\Tasks\NCH Software
2020-12-08 19:01 - 2020-12-09 21:22 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-12-08 19:01 - 2020-12-09 21:22 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-12-08 19:01 - 2020-12-09 21:22 - 000002206 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-12-08 19:01 - 2020-12-08 19:01 - 000000000 ____D C:\Program Files\Google
2020-12-08 19:00 - 2020-12-14 10:46 - 000000000 ____D C:\Users\Acer\AppData\Local\Google
2020-12-08 19:00 - 2020-12-08 19:10 - 000003418 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-12-08 19:00 - 2020-12-08 19:10 - 000003294 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-12-08 19:00 - 2020-12-08 19:10 - 000000000 ____D C:\Program Files (x86)\Google
2020-12-08 18:59 - 2020-12-08 19:00 - 000000000 ____D C:\Users\Acer\.gimp-2.8
2020-12-08 18:59 - 2020-12-08 18:59 - 000001523 _____ C:\Users\Acer\Desktop\gimp-2.8 - Shortcut.lnk
2020-12-08 18:59 - 2020-12-08 18:59 - 000000000 ____D C:\Users\Acer\AppData\Local\gegl-0.2
2020-12-08 18:59 - 2020-12-08 18:59 - 000000000 ____D C:\Users\Acer\AppData\Local\fontconfig
2020-12-08 18:56 - 2020-12-16 08:56 - 000004164 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{A1AF80D2-8AD8-45C1-8789-A12E5128EF6B}
2020-12-08 18:56 - 2020-12-08 18:56 - 000000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2020-12-08 18:56 - 2020-12-08 18:56 - 000000000 ____D C:\Program Files\GIMP 2
2020-12-08 18:55 - 2020-12-08 18:55 - 000001020 _____ C:\Users\Acer\Desktop\Compare It!.lnk
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Compare It!
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\Program Files (x86)\Unknown File Handler
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\Program Files (x86)\Compare It!
2020-12-08 18:07 - 2020-12-09 17:51 - 000264894 _____ C:\Users\Acer\Downloads\OTL.Txt
2020-12-08 18:07 - 2020-11-02 16:15 - 001008377 _____ C:\Users\Acer\Downloads\message (1).html
2020-12-08 18:07 - 2020-10-23 17:42 - 001008377 _____ C:\Users\Acer\Downloads\message.html
2020-12-08 18:07 - 2020-09-29 13:07 - 000016670 _____ C:\Users\Acer\Downloads\Receipt.pdf
2020-12-08 18:07 - 2020-07-21 20:43 - 000289427 _____ C:\Users\Acer\Downloads\Time Sheet Directions for RATERS 10.19.17.pdf
2020-12-08 18:07 - 2020-07-21 20:23 - 000305820 _____ C:\Users\Acer\Downloads\Sun Life EF Business (1).pdf
2020-12-08 18:07 - 2020-07-21 20:22 - 000305820 _____ C:\Users\Acer\Downloads\Sun Life EF Business.pdf
2020-12-08 18:07 - 2020-07-21 20:13 - 000120622 _____ C:\Users\Acer\Downloads\Lionbridge Plan Highlights 2019 (1).pdf
2020-12-08 18:07 - 2020-07-21 20:12 - 000120622 _____ C:\Users\Acer\Downloads\Lionbridge Plan Highlights 2019.pdf
2020-12-08 18:07 - 2020-07-11 11:33 - 001197171 _____ C:\Users\Acer\Downloads\rep_Barefoot_Writer_9_Ways_You_Can_Do_It.pdf
2020-12-08 18:07 - 2020-07-10 19:31 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (4).pdf
2020-12-08 18:07 - 2020-07-10 19:23 - 000242337 _____ C:\Users\Acer\Downloads\Remote Hire Authorized Agent Instructions .pdf
2020-12-08 18:07 - 2020-07-10 19:23 - 000242337 _____ C:\Users\Acer\Downloads\Remote Hire Authorized Agent Instructions  (1).pdf
2020-12-08 18:07 - 2020-07-10 19:16 - 000155782 _____ C:\Users\Acer\Downloads\Software Code of Ethics_ENG (2).pdf
2020-12-08 18:07 - 2020-07-10 19:15 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (3).pdf
2020-12-08 18:07 - 2020-07-10 19:15 - 000155782 _____ C:\Users\Acer\Downloads\Software Code of Ethics_ENG (1).pdf
2020-12-08 18:07 - 2020-07-10 18:48 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (2).pdf
2020-12-08 18:07 - 2020-07-10 18:48 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (1).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (4).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (3).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (2).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (1).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement.pdf
2020-12-08 18:07 - 2020-07-05 22:46 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (4).pdf
2020-12-08 18:07 - 2020-07-05 22:45 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (3).pdf
2020-12-08 18:07 - 2020-07-05 22:42 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (2).pdf
2020-12-08 18:07 - 2020-07-05 22:41 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (1).pdf
2020-12-08 18:07 - 2020-06-14 20:20 - 095911542 _____ (The Scribus Team) C:\Users\Acer\Downloads\scribus-1.4.8-windows-x64.exe
2020-12-08 18:07 - 2020-04-23 20:54 - 002132245 _____ C:\Users\Acer\Downloads\mail-4404-60314-2237990-4-c350 (2).pdf
2020-12-08 18:07 - 2020-04-23 20:53 - 002132245 _____ C:\Users\Acer\Downloads\mail-4404-60314-2237990-4-c350 (1).pdf
2020-12-08 18:07 - 2020-04-23 20:51 - 002132245 _____ C:\Users\Acer\Downloads\mail-4404-60314-2237990-4-c350.pdf
2020-12-08 18:07 - 2020-03-08 20:40 - 253293008 _____ (Screaming Frog Ltd) C:\Users\Acer\Downloads\ScreamingFrogSEOSpider-12.6.exe
2020-12-08 18:07 - 2018-01-08 12:10 - 000000736 _____ C:\Users\Acer\Downloads\OneDrive - Shortcut.lnk
2020-12-08 18:07 - 2017-07-14 15:08 - 002756168 _____ (mIRC Co. Ltd.) C:\Users\Acer\Downloads\mirc749.exe
2020-12-08 18:07 - 2017-07-13 18:54 - 013469937 _____ C:\Users\Acer\Downloads\san1122a.zip
2020-12-08 18:07 - 2017-07-13 18:54 - 000068768 _____ C:\Users\Acer\Downloads\memtest86+-4.10.iso.zip
2020-12-08 18:07 - 2017-03-22 12:10 - 078613984 _____ (Slack Technologies) C:\Users\Acer\Downloads\SlackSetup.exe
2020-12-08 18:07 - 2017-01-10 15:35 - 043291656 _____ (Opera Software) C:\Users\Acer\Downloads\Opera_42.0.2393.94_Setup.exe
2020-12-08 18:07 - 2016-12-06 16:43 - 092229176 _____ (TryMyUI, Inc.) C:\Users\Acer\Downloads\TryMyUIRecorder_windows-x64_1_0_2.exe
2020-12-08 18:07 - 2016-11-17 04:00 - 012300288 _____ C:\Users\Acer\Downloads\SmartApp.msi
2020-12-08 18:07 - 2016-02-20 22:14 - 002587312 _____ (Microsoft Corporation) C:\Users\Acer\Downloads\TMSetup_2_1_0_3.exe
2020-12-08 18:07 - 2016-02-18 01:18 - 088572984 _____ (TryMyUI, Inc.) C:\Users\Acer\Downloads\TryMyUIRecorder_windows_1_0_2.exe
2020-12-08 18:07 - 2016-02-10 22:24 - 038494576 _____ (Apple Inc.) C:\Users\Acer\Downloads\SafariSetup.exe
2020-12-08 18:07 - 2016-02-05 23:03 - 022908888 _____ (Malwarebytes ) C:\Users\Acer\Downloads\mbam-setup-2.2.0.1024.exe
2020-12-08 18:06 - 2020-12-09 17:51 - 000075246 _____ C:\Users\Acer\Downloads\Extras.Txt
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\Wireless LAN_Atheros_10.0.0.285_W81x64_A
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\san1122a
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\memtest86+-4.10.iso
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\IO Drivers_Intel_603.9600.1948.28229_W81x64_A
2020-12-08 18:06 - 2020-09-08 19:58 - 018423902 _____ C:\Users\Acer\Downloads\General_Guidelines (2).pdf
2020-12-08 18:06 - 2020-08-11 21:57 - 000268874 _____ C:\Users\Acer\Downloads\Decide Who You'll Write For.pdf
2020-12-08 18:06 - 2020-07-22 17:29 - 018423902 _____ C:\Users\Acer\Downloads\General_Guidelines.pdf
2020-12-08 18:06 - 2020-07-21 20:18 - 000284509 _____ C:\Users\Acer\Downloads\401(k) Summary Plan Description (SPD).pdf
2020-12-08 18:06 - 2020-07-14 02:13 - 000599536 _____ C:\Users\Acer\Downloads\i-9instr.pdf
2020-12-08 18:06 - 2020-07-10 16:18 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history (3).json
2020-12-08 18:06 - 2020-07-10 16:18 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history (2).json
2020-12-08 18:06 - 2020-07-10 16:17 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history.json
2020-12-08 18:06 - 2020-07-10 16:17 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history (1).json
2020-12-08 18:06 - 2020-07-09 00:29 - 000060411 _____ C:\Users\Acer\Downloads\1998-03-01 The Mind Has No Firewall (Thomas).pdf
2020-12-08 18:06 - 2020-07-04 20:03 - 018423902 _____ C:\Users\Acer\Downloads\General_Guidelines (1).pdf
2020-12-08 18:06 - 2020-06-19 13:33 - 141488128 _____ C:\Users\Acer\Downloads\blender-2.83.0-windows64.msi
2020-12-08 18:06 - 2020-06-07 17:05 - 024155704 _____ C:\Users\Acer\Downloads\_29c594d9b502c2b8365da10cdaf76de9_SM_Course-4_Lecuture-Slides.zip
2020-12-08 18:06 - 2020-06-07 17:05 - 024155704 _____ C:\Users\Acer\Downloads\_29c594d9b502c2b8365da10cdaf76de9_SM_Course-4_Lecuture-Slides (1).zip
2020-12-08 18:06 - 2020-05-31 20:21 - 092830805 _____ C:\Users\Acer\Downloads\inkscape-1.0-x64.exe
2020-12-08 18:06 - 2020-05-13 02:10 - 028421710 _____ C:\Users\Acer\Downloads\_05caea0f1b6cd495b344fc30f07e0642_Course-2-PDF-Slide-Presentations.zip
2020-12-08 18:06 - 2020-05-05 18:43 - 043454652 _____ C:\Users\Acer\Downloads\_54c0cb153cfa03ec39e34a1c40919c17_Course-1-PDF-Slide-Presentations.zip
2020-12-08 18:06 - 2020-05-05 18:43 - 043454652 _____ C:\Users\Acer\Downloads\_54c0cb153cfa03ec39e34a1c40919c17_Course-1-PDF-Slide-Presentations (1).zip
2020-12-08 18:06 - 2020-04-26 19:40 - 000308303 _____ C:\Users\Acer\Downloads\facebook-angelasullivan9041083.zip
2020-12-08 18:06 - 2020-03-11 19:58 - 056563704 _____ (Amazon.com) C:\Users\Acer\Downloads\KindleForPC_installer_1_27_56109.exe
2020-12-08 18:06 - 2020-01-13 16:14 - 034862967 _____ C:\Users\Acer\Downloads\InstallSQLiteStudio-3.2.1.exe
2020-12-08 18:06 - 2019-01-27 14:53 - 056454776 _____ (Amazon.com) C:\Users\Acer\Downloads\Kindle_for_PC_Download.exe
2020-12-08 18:06 - 2018-11-18 20:27 - 018071560 _____ (Piriform Software Ltd) C:\Users\Acer\Downloads\ccsetup549.exe
2020-12-08 18:06 - 2017-12-13 16:41 - 140792144 _____ C:\Users\Acer\Downloads\Apache_OpenOffice_4.1.4_Win_x86_install_en-US.exe
2020-12-08 18:06 - 2017-11-10 14:15 - 000245816 _____ (Mozilla) C:\Users\Acer\Downloads\Firefox Installer.exe
2020-12-08 18:06 - 2017-07-28 17:47 - 000300984 _____ (LogMeIn, Inc.) C:\Users\Acer\Downloads\GoToMeeting Opener.exe
2020-12-08 18:06 - 2017-07-13 18:58 - 000002035 _____ C:\Users\Acer\Downloads\cdgone.zip
2020-12-08 18:06 - 2017-07-13 18:55 - 000641975 _____ (EFD Software ) C:\Users\Acer\Downloads\hdtune_253.exe
2020-12-08 18:06 - 2017-07-12 17:20 - 000001130 _____ C:\Users\Acer\Downloads\HijackThis - Shortcut.lnk
2020-12-08 18:06 - 2017-06-20 19:40 - 001202184 _____ (Adobe Systems Incorporated) C:\Users\Acer\Downloads\flashplayer26ppau_ha_install.exe
2020-12-08 18:06 - 2017-04-14 13:36 - 000813354 _____ C:\Users\Acer\Downloads\IO Drivers_Intel_603.9600.1948.28229_W81x64_A.zip
2020-12-08 18:06 - 2017-04-14 13:16 - 010861118 _____ C:\Users\Acer\Downloads\CardReader_Realtek_6.3.9600.21245_W81x64_A.zip
2020-12-08 18:06 - 2017-04-14 12:53 - 001761632 _____ (Acer Incorporated) C:\Users\Acer\Downloads\AcerCareCenterLiveUpdater.exe
2020-12-08 18:06 - 2017-03-12 20:56 - 001201256 _____ (Adobe Systems Incorporated) C:\Users\Acer\Downloads\flashplayer24_ka_install.exe
2020-12-08 18:06 - 2017-02-18 18:30 - 000000053 _____ C:\Users\Acer\Downloads\google652d5eb6c60f3700.html
2020-12-08 18:06 - 2017-01-13 23:16 - 017797624 _____ C:\Users\Acer\Downloads\InstallUserTesting-v2.0.exe
2020-12-08 18:06 - 2017-01-10 17:21 - 000898024 _____ (Ginger Software) C:\Users\Acer\Downloads\Ginger.exe
2020-12-08 18:06 - 2017-01-08 23:46 - 106310681 _____ (GnuCash Development Team ) C:\Users\Acer\Downloads\gnucash-2.6.15-setup.exe
2020-12-08 18:06 - 2017-01-08 14:14 - 000517912 _____ (NCH Software) C:\Users\Acer\Downloads\ffsetup.exe
2020-12-08 18:06 - 2017-01-08 14:13 - 000964896 _____ (NCH Software) C:\Users\Acer\Downloads\essetup.exe
2020-12-08 18:06 - 2017-01-06 13:02 - 017956136 _____ C:\Users\Acer\Downloads\InstallScreencastOMatic-2.0.exe
2020-12-08 18:06 - 2017-01-02 19:47 - 004952208 _____ C:\Users\Acer\Downloads\advisorinstaller.exe
2020-12-08 18:06 - 2016-12-29 23:03 - 393440944 _____ C:\Users\Acer\Downloads\Audio_Realtek_6.0.1.7209_W81x64_A.zip
2020-12-08 18:06 - 2016-12-29 21:55 - 026496761 _____ (Audacity Team ) C:\Users\Acer\Downloads\audacity-win-2.1.2.exe
2020-12-08 18:06 - 2016-12-26 17:05 - 004498888 _____ (HTTrack ) C:\Users\Acer\Downloads\httrack_x64-3.48.22.exe
2020-12-08 18:06 - 2016-12-23 12:46 - 006337437 _____ C:\Users\Acer\Downloads\Chipset_Intel_9.4.4.1006_W81x64_A.zip
2020-12-08 18:06 - 2016-12-09 00:51 - 001878323 _____ C:\Users\Acer\Downloads\bookmark_merger-0.2.3.exe.zip
2020-12-08 18:06 - 2016-12-08 01:21 - 001381582 _____ (Igor Pavlov) C:\Users\Acer\Downloads\7z1604-x64.exe
2020-12-08 18:06 - 2016-11-27 20:23 - 001065376 _____ (Google Inc.) C:\Users\Acer\Downloads\ChromeSetup.exe
2020-12-08 18:06 - 2016-11-27 19:29 - 000737344 _____ (Oracle Corporation) C:\Users\Acer\Downloads\jxpiinstall.exe
2020-12-08 18:06 - 2016-11-16 12:57 - 102359936 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Acer\Downloads\Evernote_6.4.2.3788.exe
2020-12-08 18:06 - 2016-02-06 01:06 - 000388608 _____ (Trend Micro Inc.) C:\Users\Acer\Downloads\HijackThis.exe
2020-12-08 18:06 - 2016-02-05 22:15 - 006968048 _____ (IvoSoft) C:\Users\Acer\Downloads\ClassicShellSetup_4_2_5.exe
2020-12-08 18:06 - 2016-02-03 21:00 - 017935112 _____ C:\Users\Acer\Downloads\InstallScreenRecorderLauncher-2.0.exe
2020-12-08 18:06 - 2016-02-02 19:58 - 024394248 _____ C:\Users\Acer\Downloads\InstallUserTestingPlugin-v1.8.exe
2020-12-08 18:06 - 2016-01-29 23:39 - 096819488 _____ (The GIMP Team ) C:\Users\Acer\Downloads\gimp-2.8.16-setup.exe
2020-12-08 18:06 - 2015-11-17 11:04 - 017787368 _____ (Bitberry Software ) C:\Users\Acer\Downloads\FreeFileViewerSetup [1].exe
2020-12-08 18:06 - 2013-07-28 20:09 - 017948672 _____ C:\Users\Acer\Downloads\8GadgetPackSetup.msi
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\Chipset_Intel_9.4.4.1006_W81x64_A
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\CardReader_Realtek_6.3.9600.21245_W81x64_A
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\bookmark_merger-0.2.3.exe
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\backups
2020-12-08 18:04 - 2020-12-08 18:04 - 000000000 ____D C:\Users\Acer\Downloads\Audio_Realtek_6.0.1.7209_W81x64_A
2020-12-08 18:04 - 2020-05-18 13:19 - 001193337 _____ C:\Users\Acer\Downloads\work-search-all-rev-10-9-17 (1).pdf
2020-12-08 18:04 - 2019-01-27 16:46 - 107806720 _____ C:\Users\Acer\Downloads\ZinioReader_1.1.9_win64.msi
2020-12-08 18:04 - 2016-05-20 14:30 - 238731365 _____ C:\Users\Acer\Downloads\Wireless LAN_Atheros_10.0.0.285_W81x64_A.zip
2020-12-08 18:04 - 2016-02-20 15:59 - 047333544 _____ (Wireshark development team) C:\Users\Acer\Downloads\Wireshark-win64-2.0.1.exe
2020-12-08 18:04 - 2016-02-02 20:49 - 111671512 _____ (WhatUsersDo Ltd ) C:\Users\Acer\Downloads\whatusersdo-recorder.exe
2020-12-08 18:04 - 2013-07-30 15:44 - 001795784 _____ (Grig Software ) C:\Users\Acer\Downloads\wincmp-setup.exe
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Work at Home
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\UserTesting
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\TI Stuff
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Taxes
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Targeting Gangstalking electromagnetic weapons
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Sound recordings
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Screencast-O-Matic
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Research Resources
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Racism
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Psychiatry_Psychology
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Politics
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Police
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\People Find
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\OpenOffice 4.1.4 (en-US) Installation Files_2
2020-12-08 18:01 - 2020-07-24 14:09 - 000000000 ____D C:\Users\Acer\Documents\Zoom
2020-12-08 18:00 - 2020-12-08 22:53 - 000000000 ____D C:\Users\Acer\Documents\OpenOffice 4.1.4 (en-US) Installation Files
2020-12-08 18:00 - 2020-12-08 21:19 - 000000000 ____D C:\Users\Acer\Documents\My Kindle Content
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\OpenOffice 4.0.0 (en-US) Installation Files
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Marketing
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Manuals Other
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Lionbridge Documents
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Letters
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Law
2020-12-08 17:59 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Jehovahs Witnesses Official
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Jehovahs Witnesses Con
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Hardware_Software Manuals_Documentation
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Geology
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Gardening
2020-12-08 17:55 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\From Orange StoreJet
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Forms
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Firefox bookmark and history files
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Facebook downloads
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Dreams
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\CyberLink
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Crying
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Coursera
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Computers
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Bluetooth Folder
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Biophoton research
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\12 Steps Debate
2020-12-08 17:55 - 2020-11-07 23:49 - 005035984 _____ C:\Users\Acer\Documents\New Patient Intake Forms Augusta University Psychiatry Outpatient.pdf
2020-12-08 17:55 - 2020-11-06 19:52 - 000012071 _____ C:\Users\Acer\Documents\Major illnesses Conditons Hospitalizations Surgery.odt
2020-12-08 17:55 - 2020-11-06 19:45 - 000011299 _____ C:\Users\Acer\Documents\Medication list.odt
2020-12-08 17:55 - 2020-11-03 21:07 - 000661695 _____ C:\Users\Acer\Documents\ADULT NEW PATIENT PSY PACKET (003).pdf
2020-12-08 17:55 - 2020-11-03 19:36 - 000229321 _____ C:\Users\Acer\Documents\Medical Records-Sullivan.pdf
2020-12-08 17:55 - 2020-10-28 11:59 - 000012402 _____ C:\Users\Acer\Documents\letter to dr montenegro about mom.odt
2020-12-08 17:55 - 2020-10-23 15:13 - 002682880 _____ C:\Users\Acer\Documents\MyTasks.tmdb
2020-12-08 17:55 - 2020-10-16 01:26 - 000011036 _____ C:\Users\Acer\Documents\Butternut squash soup.odt
2020-12-08 17:55 - 2020-10-16 01:24 - 000000831 _____ C:\Users\Acer\Documents\sweet potato stew recipe.txt
2020-12-08 17:55 - 2020-10-16 01:22 - 000031819 _____ C:\Users\Acer\Documents\sweet potato stew recipe.pdf
2020-12-08 17:55 - 2020-10-16 01:22 - 000010354 _____ C:\Users\Acer\Documents\sweet potato stew recipe.odt
2020-12-08 17:55 - 2020-09-29 12:30 - 000078598 _____ C:\Users\Acer\Documents\South Carolina REAL ID.pdf
2020-12-08 17:55 - 2020-09-02 11:33 - 000011471 _____ C:\Users\Acer\Documents\solicit help attorney mom mental health.odt
2020-12-08 17:55 - 2020-08-28 21:03 - 002103438 _____ C:\Users\Acer\Documents\Evidence of Coverage UHC 2020.pdf
2020-12-08 17:55 - 2020-08-21 20:30 - 002338093 _____ C:\Users\Acer\Documents\Wife Saver North Augusta Menu.cdr.pdf
2020-12-08 17:55 - 2020-08-19 18:38 - 000009047 _____ C:\Users\Acer\Documents\Money Hut Logo Type.odt
2020-12-08 17:55 - 2020-07-28 01:34 - 017669223 _____ C:\Users\Acer\Documents\Defense News_Mind Control.pdf
2020-12-08 17:55 - 2020-07-28 01:31 - 000093517 _____ C:\Users\Acer\Documents\Watchtower letter about AA.pdf
2020-12-08 17:55 - 2020-07-26 23:47 - 000045847 _____ C:\Users\Acer\Documents\mom.pdf
2020-12-08 17:55 - 2020-07-26 23:47 - 000015385 _____ C:\Users\Acer\Documents\mom.odt
2020-12-08 17:55 - 2020-07-23 15:20 - 000028897 _____ C:\Users\Acer\Documents\Second Opinion Letter for Wells Fargo Claim.pdf
2020-12-08 17:55 - 2020-07-23 15:19 - 000010729 _____ C:\Users\Acer\Documents\Second Opinion Letter for Wells Fargo Claim.odt
2020-12-08 17:55 - 2020-07-18 01:22 - 000033317 _____ C:\Users\Acer\Documents\resolutions_council_99_toronto_e.pdf
2020-12-08 17:55 - 2020-07-15 16:12 - 000086042 _____ C:\Users\Acer\Documents\Before crying _freedom of speech_ you should know what it means.pdf
2020-12-08 17:55 - 2020-07-11 16:04 - 000000110 ____H C:\Users\Acer\Documents\.~lock.My%20Life%20as%20a%20Jehovahs%20Witness.odt_1.odt#
2020-12-08 17:55 - 2020-07-11 15:33 - 000019230 _____ C:\Users\Acer\Documents\My%20Life%20as%20a%20Jehovahs%20Witness.odt_1.odt
2020-12-08 17:55 - 2020-07-09 23:43 - 006994316 _____ C:\Users\Acer\Documents\Biophoton Communication_ Can Cells Talk Using Light_ _ MIT Technology Review.pdf
2020-12-08 17:55 - 2020-07-09 23:41 - 020946601 _____ C:\Users\Acer\Documents\Are There Optical Communication Channels in Our Brains_ _ MIT Technology Review.pdf
2020-12-08 17:55 - 2020-07-09 23:25 - 000253086 _____ C:\Users\Acer\Documents\DO GENES DETERMINE WHETHER WE ARE LESBIAN, GAY, BISEXUAL, OR STRAIGHT_.pdf
2020-12-08 17:55 - 2020-07-09 23:24 - 000292065 _____ C:\Users\Acer\Documents\Brief on Sexual Orientation and Genetic Determinism.pdf
2020-12-08 17:55 - 2020-07-09 23:23 - 000134059 _____ C:\Users\Acer\Documents\T2TNTOWC0G crime gene.pdf
2020-12-08 17:55 - 2020-07-09 23:21 - 000134059 _____ C:\Users\Acer\Documents\is crime in the genes the gene illusion.pdf
2020-12-08 17:55 - 2020-07-09 21:33 - 000300264 _____ C:\Users\Acer\Documents\Truth about Behavioural Genetics.pdf
2020-12-08 17:55 - 2020-07-09 21:32 - 000316469 _____ C:\Users\Acer\Documents\A Brief History of the Gay Gene.pdf
2020-12-08 17:55 - 2020-07-09 12:28 - 000000886 _____ C:\Users\Acer\Documents\letter to ian willis freepdfhosting.txt
2020-12-08 17:55 - 2020-07-09 12:13 - 000287959 _____ C:\Users\Acer\Documents\Teacher Arrested at JFK_Funny.pdf
2020-12-08 17:55 - 2020-07-09 04:07 - 000045683 _____ C:\Users\Acer\Documents\Aquino From PSYOP to Mindwar.pdf
2020-12-08 17:55 - 2020-07-09 04:04 - 000131851 _____ C:\Users\Acer\Documents\Influence of Pharmaceutical industry.pdf
2020-12-08 17:55 - 2020-07-09 04:02 - 000589468 _____ C:\Users\Acer\Documents\UKReport_Influence of Pharmaceutical Industry.pdf
2020-12-08 17:55 - 2020-07-09 03:58 - 000256454 _____ C:\Users\Acer\Documents\no genetic association schizophrenia.pdf
2020-12-08 17:55 - 2020-07-09 03:53 - 000335600 _____ C:\Users\Acer\Documents\No evidence that schizophrenia candidate genes are more associated with schizophrenia than non-candidate genes.pdf
2020-12-08 17:55 - 2020-07-09 03:48 - 030629016 _____ C:\Users\Acer\Documents\Debunking the Two Chemical Imbalance Myths, Again _ Psychiatric Times.pdf
2020-12-08 17:55 - 2020-07-09 03:45 - 005402216 _____ C:\Users\Acer\Documents\The Troubled History of Psychiatry _ The New Yorker.pdf
2020-12-08 17:55 - 2020-07-09 03:40 - 000184265 _____ C:\Users\Acer\Documents\Twin Concordance for Schizophrenia Is Not Entirely Hereditary.pdf
2020-12-08 17:55 - 2020-07-09 03:38 - 001095851 _____ C:\Users\Acer\Documents\Four False Pillars of biopsychiatry.pdf
2020-12-08 17:55 - 2020-07-09 02:19 - 000090107 _____ C:\Users\Acer\Documents\Playing the telephone game_linguistics.pdf
2020-12-08 17:55 - 2020-07-09 00:10 - 000342633 _____ C:\Users\Acer\Documents\CIA-RDP96-00792R000600440002-2_US Russia Mind Control Weapons.pdf
2020-12-08 17:55 - 2020-07-07 23:30 - 000062995 _____ C:\Users\Acer\Documents\Wells Fargo Claims Letter_Claim 10612208143_Engine Purchase.pdf
2020-12-08 17:55 - 2020-07-07 23:29 - 000014953 _____ C:\Users\Acer\Documents\Wells Fargo Claims Letter_Claim 10612208143_Engine Purchase.odt
2020-12-08 17:55 - 2020-07-05 16:23 - 000388826 _____ C:\Users\Acer\Documents\The_Phenomenology_pf_Group_Stalking.pdf
2020-12-08 17:55 - 2020-07-05 16:16 - 000001788 _____ C:\Users\Acer\Documents\Mind Control Papers.txt
2020-12-08 17:55 - 2020-05-23 18:47 - 001194121 _____ C:\Users\Acer\Documents\SCUI Unemployment Handbook.pdf
2020-12-08 17:55 - 2020-04-27 03:01 - 000014819 _____ C:\Users\Acer\Documents\Letter to SC UI.odt
2020-12-08 17:55 - 2020-04-25 17:53 - 000575982 _____ C:\Users\Acer\Documents\SC UI Certification 4_12 through 4_18 2020.oxps
2020-12-08 17:55 - 2020-04-25 17:50 - 000576319 _____ C:\Users\Acer\Documents\SC UI Certification 4_5 through 4_11 2020.oxps
2020-12-08 17:55 - 2020-04-25 17:30 - 000567717 _____ C:\Users\Acer\Documents\SC UI Certification 3_28 through 4_4 2020.oxps
2020-12-08 17:55 - 2020-04-25 17:25 - 000575895 _____ C:\Users\Acer\Documents\SC UI Certification 3_22 through 3_28 2020.oxps
2020-12-08 17:55 - 2020-04-25 16:26 - 000156190 _____ C:\Users\Acer\Documents\Pandemic Unemployment Assistance SC UI claim FYI.oxps
2020-12-08 17:55 - 2020-04-14 16:57 - 000032722 _____ C:\Users\Acer\Documents\SC UI Note.pdf
2020-12-08 17:55 - 2020-04-14 16:50 - 000009073 _____ C:\Users\Acer\Documents\SC UI Note.odt
2020-12-08 17:55 - 2020-03-30 17:13 - 000009864 _____ C:\Users\Acer\Documents\Nationwide Recovery Letter Requesting Itemized Statement.odt
2020-12-08 17:55 - 2020-03-29 16:31 - 001193337 _____ C:\Users\Acer\Documents\SC UI Benefits Handbook.pdf
2020-12-08 17:55 - 2020-03-18 00:10 - 000156432 _____ C:\Users\Acer\Documents\VerizonClaimAffidavit_451987788.pdf
2020-12-08 17:55 - 2020-02-28 21:28 - 000061021 _____ C:\Users\Acer\Documents\Annual_Care_Checklist_2020 Medical.pdf
2020-12-08 17:55 - 2020-01-16 19:19 - 002807578 _____ C:\Users\Acer\Documents\AU Health Bill 1_16_2017.pdf
2020-12-08 17:55 - 2020-01-14 15:21 - 000035500 _____ C:\Users\Acer\Documents\Dr. George Greg Text.odt
2020-12-08 17:55 - 2020-01-07 19:39 - 000309705 _____ C:\Users\Acer\Documents\Temporary Address Change Cancelled 1_7_2020 439pm.oxps
2020-12-08 17:55 - 2020-01-04 21:44 - 013483844 _____ C:\Users\Acer\Documents\SSDI Income Statement 2020.oxps
2020-12-08 17:55 - 2020-01-04 21:43 - 004832140 _____ C:\Users\Acer\Documents\Postal Service Temp Address Forward.oxps
2020-12-08 17:55 - 2020-01-01 16:10 - 001080377 _____ C:\Users\Acer\Documents\MS Healing Manual 2020.pdf
2020-12-08 17:55 - 2019-12-19 22:42 - 000852412 _____ C:\Users\Acer\Documents\Change of Address Confirmation USPS 12_19_2019 741pm.oxps
2020-12-08 17:55 - 2019-12-03 21:45 - 000495691 _____ C:\Users\Acer\Documents\Notary Public Reference Manual 2019_South Carolina.pdf
2020-12-08 17:55 - 2019-11-28 01:08 - 000582579 _____ C:\Users\Acer\Documents\form_1583 for anytime mailbox.pdf
2020-12-08 17:55 - 2019-11-27 04:12 - 000554272 _____ C:\Users\Acer\Documents\anytime mail box account info.oxps
2020-12-08 17:55 - 2019-09-21 23:50 - 006894124 _____ C:\Users\Acer\Documents\What Fullness Is_On getting weight loss surgery.pdf
2020-12-08 17:55 - 2019-09-21 23:29 - 012003166 _____ C:\Users\Acer\Documents\What Fullness Is_On getting weight loss surgery.oxps
2020-12-08 17:55 - 2019-09-17 17:23 - 001179828 _____ C:\Users\Acer\Documents\Itermitant fasting diet.oxps
2020-12-08 17:55 - 2019-09-10 17:03 - 000019848 _____ C:\Users\Acer\Documents\DoorDash Pay etc complaint 9_10_2019.odt
2020-12-08 17:55 - 2019-08-11 00:57 - 003739623 _____ C:\Users\Acer\Documents\Shepherd (sfl_E 2019) new or old.pdf
2020-12-08 17:55 - 2019-08-01 16:22 - 000144447 _____ C:\Users\Acer\Documents\jehovahs witnesses watchtower talking points for ex jws.pdf
2020-12-08 17:55 - 2019-06-25 16:36 - 000020992 _____ C:\Users\Acer\Documents\DoorDash App glitch report.odt
2020-12-08 17:55 - 2019-05-10 18:35 - 000470000 _____ C:\Users\Acer\Documents\Press release 2 jehovahs witnesses child abuse.oxps
2020-12-08 17:55 - 2019-05-10 18:28 - 000357719 _____ C:\Users\Acer\Documents\Jehovahs Witness Press Release 2 witness rule page 2.oxps
2020-12-08 17:55 - 2019-05-10 18:26 - 000406560 _____ C:\Users\Acer\Documents\Jehovahs Witness Press Release 2 witness rule page 1.oxps
2020-12-08 17:55 - 2019-05-03 17:27 - 000156236 _____ C:\Users\Acer\Documents\PineCone Research error message.pdf
2020-12-08 17:55 - 2019-04-22 20:57 - 000010134 _____ C:\Users\Acer\Documents\30 day notice to vacate mom to me_Angela S.odt
2020-12-08 17:55 - 2019-04-20 17:09 - 004645142 _____ C:\Users\Acer\Documents\Caring for patients who refuse blood  a guide to good practice.pdf
2020-12-08 17:55 - 2019-04-18 00:40 - 001750936 _____ C:\Users\Acer\Documents\Everlance Mileage Instacart 2018.oxps
2020-12-08 17:55 - 2019-04-14 22:30 - 000359142 _____ C:\Users\Acer\Documents\darbbarbenterprises-outlook.com-trips-2018-01-01-2018-12-31.ods
2020-12-08 17:55 - 2019-04-14 22:19 - 000116943 _____ C:\Users\Acer\Documents\2018_1099-MISC_Instacart_Angela_Sullivan.pdf
2020-12-08 17:55 - 2019-03-26 15:37 - 000198953 _____ C:\Users\Acer\Documents\10 alternatives to Microsoft Word and Excel.pdf
2020-12-08 17:55 - 2019-02-12 17:14 - 000207300 _____ C:\Users\Acer\Documents\19 Words that don't belong on your resume_tech resumes.pdf
2020-12-08 17:55 - 2019-02-11 21:52 - 000059607 _____ C:\Users\Acer\Documents\Mediterranean-Food-List.pdf
2020-12-08 17:55 - 2019-02-05 02:39 - 004524722 _____ C:\Users\Acer\Documents\University will segragate white and black students_pluralist dot com.oxps
2020-12-08 17:55 - 2019-01-30 22:09 - 000002435 _____ C:\Users\Acer\Documents\Canon MX920 series On-screen Manual.lnk
2020-12-08 17:55 - 2019-01-22 14:48 - 002487740 _____ C:\Users\Acer\Documents\Watchtower says to destroy documents.oxps
2020-12-08 17:55 - 2019-01-22 14:37 - 001653333 _____ C:\Users\Acer\Documents\Sheparding the Flock elders manual book jehovahs witnesses.pdf
2020-12-08 17:55 - 2019-01-22 14:36 - 000145345 _____ C:\Users\Acer\Documents\Child abuse letter to congregations 2017.pdf
2020-12-08 17:55 - 2019-01-22 02:30 - 003504254 _____ C:\Users\Acer\Documents\something jehovah witness.pdf
2020-12-08 17:55 - 2019-01-20 19:48 - 000019890 _____ C:\Users\Acer\Documents\symbol and foreign language symbol fonts.odt
2020-12-08 17:55 - 2019-01-18 17:10 - 000011695 _____ C:\Users\Acer\Documents\10 yr retirement estimate at 100k per year.odt
2020-12-08 17:55 - 2018-12-26 15:25 - 000293276 _____ C:\Users\Acer\Documents\drug mule compensation report.pdf
2020-12-08 17:55 - 2018-07-21 17:54 - 007414001 _____ C:\Users\Acer\Documents\the gentile times reconsidered.pdf
2020-12-08 17:55 - 2018-04-18 02:14 - 000024595 _____ C:\Users\Acer\Documents\Liquid Needle uses.odt
2020-12-08 17:55 - 2017-12-19 18:14 - 000017018 _____ C:\Users\Acer\Documents\Last Will and Testament.odt
2020-12-08 17:55 - 2017-12-10 18:23 - 000000414 _____ C:\Users\Acer\Documents\small appliance repair shops north augusta.txt
2020-12-08 17:55 - 2017-08-21 17:37 - 007065656 _____ C:\Users\Acer\Documents\Helping Children Learn Mathematics.pdf
2020-12-08 17:55 - 2016-12-28 21:21 - 000017088 _____ C:\Users\Acer\Documents\Telephone work resume.odt
2020-12-08 17:55 - 2016-12-23 23:23 - 000061365 _____ C:\Users\Acer\Documents\Telephone work resume PDF.pdf
2020-12-08 17:55 - 2013-01-29 02:04 - 000117905 _____ C:\Users\Acer\Documents\Third_Party_Stalking and Abuse_by_Proxy Resources.pdf
2020-12-08 17:51 - 2020-12-15 22:12 - 000000000 ____D C:\Users\Acer\Desktop\Notes
2020-12-08 17:51 - 2020-12-08 17:51 - 000000000 ____D C:\Users\Acer\Desktop\Nicotine Anonymous Documents
2020-12-08 17:51 - 2020-12-08 17:51 - 000000000 ____D C:\Users\Acer\Desktop\Finances
2020-12-08 17:44 - 2020-12-16 10:25 - 000000000 ____D C:\Users\Acer\Desktop\Clean Up and Maintenance Tools
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Documents\SC UI Application Documents
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Work Product
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\UTB AFG Treasury
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Professional Writing
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Personal Writing
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Alanon Meeting Documents
 
==================== One month (modified) ==================
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2020-12-16 11:11 - 2019-12-07 04:13 - 000000000 ____D C:\Windows\INF
2020-12-16 11:08 - 2020-11-06 09:40 - 000000000 ____D C:\ProgramData\NVIDIA
2020-12-16 11:07 - 2020-11-06 09:30 - 000000000 ___RD C:\Users\Acer\OneDrive
2020-12-16 11:07 - 2019-12-07 04:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-12-16 11:05 - 2020-11-06 10:33 - 000000000 __SHD C:\Users\Acer\IntelGraphicsProfiles
2020-12-16 11:04 - 2020-11-06 09:37 - 000000000 ____D C:\Intel
2020-12-16 11:04 - 2020-11-05 16:35 - 000008192 ___SH C:\DumpStack.log.tmp
2020-12-16 11:04 - 2020-11-05 16:35 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-12-16 11:03 - 2019-12-07 04:03 - 000524288 _____ C:\Windows\system32\config\BBI
2020-12-16 11:02 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer
2020-12-16 10:53 - 2019-12-07 04:03 - 000000000 ____D C:\Windows\CbsTemp
2020-12-16 08:52 - 2020-11-05 16:47 - 000840598 _____ C:\Windows\system32\PerfStringBackup.INI
2020-12-16 08:48 - 2020-11-05 16:35 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-12-15 09:55 - 2020-11-05 16:35 - 000291144 _____ C:\Windows\system32\FNTCACHE.DAT
2020-12-15 09:23 - 2020-11-06 11:56 - 000000000 ____D C:\Users\Acer\AppData\Local\D3DSCache
2020-12-14 09:18 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\AppReadiness
2020-12-12 09:30 - 2020-11-06 09:30 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3878838876-3164344232-606169047-1001
2020-12-12 09:30 - 2020-11-06 09:27 - 000002360 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-09 21:10 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer\AppData\Local\Packages
2020-12-09 21:07 - 2019-12-07 04:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-12-09 21:03 - 2019-12-07 04:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SystemResources
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\setup
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\oobe
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\migwiz
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Dism
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\bcastdvr
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Windows Defender
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-12-09 20:51 - 2020-11-05 16:38 - 002876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2020-12-09 20:38 - 2020-11-06 10:38 - 000000000 ____D C:\Windows\system32\MRT
2020-12-09 20:37 - 2020-11-06 10:38 - 133736600 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-12-09 20:35 - 2020-11-05 16:35 - 000000000 ____D C:\Windows\system32\Drivers\wd
2020-12-09 20:19 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer\AppData\Local\ConnectedDevicesPlatform
2020-12-09 20:16 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\LiveKernelReports
2020-12-09 19:16 - 2020-11-05 16:34 - 000000000 ____D C:\Windows\Panther
2020-12-09 17:04 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer\AppData\Local\VirtualStore
2020-12-09 16:01 - 2019-12-07 04:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-12-09 15:47 - 2020-11-06 09:28 - 000000000 ____D C:\Users\Acer\AppData\Local\Publishers
2020-12-09 00:50 - 2020-11-06 09:27 - 000000000 ____D C:\ProgramData\Packages
2020-12-09 00:48 - 2020-11-06 09:35 - 000000000 ____D C:\Users\Acer\AppData\Local\PlaceholderTileLogoFolder
2020-12-09 00:36 - 2020-11-06 09:27 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-12-08 23:50 - 2020-11-06 09:38 - 000000000 ____D C:\Users\Acer\AppData\Local\Comms
2020-12-08 21:44 - 2020-11-06 11:49 - 000000000 ____D C:\ProgramData\Package Cache
2020-12-08 21:16 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-12-08 19:00 - 2020-11-06 09:40 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2020-12-08 18:43 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\appcompat
2020-12-08 17:10 - 2020-11-06 10:32 - 000000000 ____D C:\ProgramData\Intel
2020-12-08 17:09 - 2020-11-06 10:33 - 000000000 ____D C:\Users\Acer\AppData\Local\Intel
2020-12-08 16:31 - 2020-11-06 11:51 - 000000000 ____D C:\Users\Acer\AppData\Local\NVIDIA Corporation
 
==================== Files in the root of some directories ========
 
2020-12-08 22:37 - 2020-12-08 22:37 - 000000458 _____ () C:\Users\Acer\AppData\Roaming\Drives Monitor_Settings.ini
2020-12-08 21:42 - 2020-12-08 21:42 - 000000218 _____ () C:\Users\Acer\AppData\Local\recently-used.xbel
 
==================== SigCheck ============================
 
(There is no automatic fix for files that do not pass verification.)
 
==================== End of FRST.txt ========================
 
 
 
Addition.txt
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2020
Ran by Acer (16-12-2020 11:12:04)
Running from C:\Users\Acer\Desktop
Windows 10 Home Version 20H2 19042.685 (X64) (2020-11-05 21:43:14)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Acer (S-1-5-21-3878838876-3164344232-606169047-1001 - Administrator - Enabled) => C:\Users\Acer
Administrator (S-1-5-21-3878838876-3164344232-606169047-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3878838876-3164344232-606169047-503 - Limited - Disabled)
Guest (S-1-5-21-3878838876-3164344232-606169047-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3878838876-3164344232-606169047-504 - Limited - Disabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Amazon Kindle (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Amazon Kindle) (Version: 1.27.0.56109 - Amazon)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Belarc Advisor 8.5c (HKLM-x32\...\Belarc Advisor) (Version: 8.5.3.0 - Belarc Inc.)
Blender (HKLM\...\{C39F5740-3CB7-44AC-B0A2-FA3B2754D02F}) (Version: 2.83.0 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.75 - Piriform)
Compare It! (HKLM-x32\...\Compare It!_is1) (Version: 4.0 - Grig Software)
Dolby Audio X2 Windows API SDK (HKLM\...\{F290F786-5F69-48D4-B20B-D21C7DE56EF0}) (Version: 0.8.8.88 - Dolby Laboratories, Inc.)
Excel (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\1fc5b090eab9aa41f8a2f5987367e6da) (Version: 1.0 - Excel)
Free File Viewer 2014 (HKLM-x32\...\FreeFileViewer_is1) (Version: 2014.2.16.0 - Bitberry Software) <==== ATTENTION
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 87.0.4280.88 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
Inkscape (HKLM-x32\...\Inkscape) (Version: 1.0.0- - Inkscape)
Interfathom TaskMerlin (HKLM-x32\...\{9994DB2E-5B78-4D7A-B446-1A071A4C4CD9}) (Version: 2.1.3 - Interfathom)
Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 85.0.564.67 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.59 - )
Microsoft OneDrive (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Mozilla Firefox 83.0 (x64 en-US) (HKLM\...\Mozilla Firefox 83.0 (x64 en-US)) (Version: 83.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 83.0 - Mozilla)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)
NVIDIA Graphics Driver 457.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 457.09 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
OpenOffice 4.1.4 (HKLM-x32\...\{BDB210E1-06C5-451F-BDAC-C18DDC7C2F14}) (Version: 4.14.9788 - Apache Software Foundation)
Opera Stable 42.0.2393.94 (HKLM-x32\...\Opera 42.0.2393.94) (Version: 42.0.2393.94 - Opera Software)
Opera Stable 72.0.3815.400 (HKLM-x32\...\Opera 72.0.3815.400) (Version: 72.0.3815.400 - Opera Software)
Outlook (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\6b0f23e57a39ebfbf2814acb1a24293d) (Version: 1.0 - Outlook)
PowerPoint (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\319814cb56b667dff88f54e08be8f51f) (Version: 1.0 - PowerPoint)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8907.1 - Realtek Semiconductor Corp.)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 12.6 - Screaming Frog Ltd)
Scribus 1.4.8 (64bit) (HKLM\...\Scribus 1.4.8) (Version: 1.4.8 - The Scribus Team)
SQLiteStudio (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\{6e1c2c8a-4202-4c3e-b24b-b367e402d224}) (Version: 3.2.1 - SalSoft)
Unknown File Handler (HKLM-x32\...\UFH_is1) (Version: 2015.10.20.0 - File.org)
USBPcap 1.1.0.0-g794bf26 (HKLM\...\USBPcap) (Version:  - )
WinHTTrack Website Copier 3.48-22 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.22 - HTTrack)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
Wireshark 2.0.1 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.0.1 - The Wireshark developer community, hxxps://www.wireshark.org)
Word (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\1b837d0bf93d01407352736c91b7bf50) (Version: 1.0 - Word)
Zinio Reader (HKLM-x32\...\{CFC139F4-4978-6A73-2616-38A2EC2812F4}) (Version: 1.1.9.100 - Zinio LLC)
 
Packages:
=========
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1910.3.0_x86__kgqvnymyfvs32 [2020-12-09] (king.com)
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation)
Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt [2020-11-06] (INTEL CORP) [Startup Task]
Mahjong Epic -> C:\Program Files\WindowsApps\KristanixStudiosAS.MahjongEpic_1.1.5.0_x64__nafbvgh473e28 [2020-12-09] (Kristanix Studios AS)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Studios) [MS Ad]
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation) [MS Ad]
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c [2020-12-09] (Skype)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0 [2020-11-06] (Spotify AB) [Startup Task]
 
==================== Custom CLSID (Whitelisted): ==============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2020-10-22] (NVIDIA Corporation -> NVIDIA Corporation)
 
==================== Codecs (Whitelisted) ====================
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=leffmjdabcgaflkikcefahmlgpodjkdm
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=bjhmmnoficofgoiacjaajpkfndojknpb
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=opfacbhaojodjaojgocnibmklknchehf
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --profile-directory=Default --app-id=hikhggiobiflkdfdgdajcfklmcibbopi
 
==================== Loaded Modules (Whitelisted) =============
 
2020-11-06 09:37 - 2020-11-06 09:37 - 040592896 _____ (Intel) [File not signed] C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt\IGCC.dll
 
==================== Alternate Data Streams (Whitelisted) ========
 
==================== Safe Mode (Whitelisted) ==================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 
==================== Association (Whitelisted) =================
 
==================== Internet Explorer (Whitelisted) ==========
 
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2016-01-04] (Belarc, Inc. -> Belarc, Inc.)
 
==================== Hosts content: =========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2019-12-07 04:14 - 2019-12-07 04:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
 
==================== Other Areas ===========================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.43.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
==================== FirewallRules (Whitelisted) ================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [TCP Query User{C42A8E6F-D28E-4CBB-BF47-FE5064822BF4}C:\program files\google\chrome\application\chrome.exe] => (Block) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{285A6786-2F39-4AE7-99D3-82A0182F2F8C}C:\program files\google\chrome\application\chrome.exe] => (Block) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
 
==================== Restore Points =========================
 
08-12-2020 18:06:26 Windows Modules Installer
09-12-2020 19:36:11 Dec92020735pm
16-12-2020 10:27:53 Removed 8GadgetPack
 
==================== Faulty Device Manager Devices ============
 
 
==================== Event log errors: ========================
 
Application errors:
==================
 
System errors:
=============
Error: (12/16/2020 11:02:43 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-58JI9LT)
Description: The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout.
 
 
CodeIntegrity:
===================================
 
Date: 2020-12-16 11:10:04.7050000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-16 11:10:04.7040000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-16 11:10:04.1610000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-16 11:10:04.1600000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-16 11:07:26.3960000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-16 11:07:26.3920000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-16 11:07:26.1100000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2020-12-16 11:07:26.1090000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
==================== Memory info =========================== 
 
BIOS: Insyde Corp. V1.19 07/13/2018
Motherboard: CFL Freed_CFS
Processor: Intel® Core™ i5-8300H CPU @ 2.30GHz
Percentage of memory in use: 58%
Total physical RAM: 8034.3 MB
Available physical RAM: 3368.54 MB
Total Virtual: 9314.3 MB
Available Virtual: 3186.26 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:930.9 GB) (Free:864.33 GB) NTFS
 
\\?\Volume{322fa14b-4559-4851-a221-10eeeb564196}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{90d6380f-062f-490e-8a47-7615603a4aa9}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 
==================== MBR & Partition Table ====================
 
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt =======================
 
 
 

Thank you,

LollyGagin'


  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,593 posts
  • MVP

Looks clean now.  How is it running? 


  • 0

#5
LollyGagin

LollyGagin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

The desktop slide show is still missing but, it's running great!  I was so worried & now I'm SO relieved!

 

Thank you SO much!

LollyGagin'


  • 0

#6
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,593 posts
  • MVP

If by desktop slide show you mean something like the screensaver from Google that uses pictures stored on your PC that was probably not killed off by malware or your hackers.  I've noticed that almost every time Windows does an update that my own slide show stops working.  Have to go back in and turn it on again.

 

Right click on the Desktop and Personalize then Lock Screen.  Scroll down to the bottom and Screen Saver Settings.  Under Screen Saver, change None to Google Photos Screensaver (or whatever yours is called)  OK.


  • 0

#7
LollyGagin

LollyGagin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

Got it!  Everything is back to normal again.  Thanks again for all of your help.  It is  much appreciated.

 

LollyGagin'


  • 0

#8
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,593 posts
  • MVP

Time to clean up:
If we used FRST to clean your PC:

right click on FRST.exe or FRST64.exe (whichever you used) and rename it to uninstall.exe.  Then right click on uninstall.exe and Run as Admin.

 

Also make sure you have the latest versions of any adobe.com products you use like Shockwave, Flash or Acrobat.  Flash is now officially obsolete so rmust be removed.   Be careful with Adobe.  They are fond of offering optional downloads like yahoo or Ask toolbars or that worthless McAfee Security Scan.  Go slow and uncheck the optional stuff.

Whether you use adobe reader, acrobat or fox-it to read pdf files you need to disable Javascript in the program.  There is an exploit out there now that can use it to get on your PC.  For Adobe Reader:  Start, All Programs, Adobe Reader, Edit, Preferences, Click on Javascript in the left column and uncheck Enable Acrobat Javascript.  OK Close program.  It's the same for Foxit reader except you uncheck Enable Javascript Actions.


If you use Chrome/Firefox/Edge then get the Ublock Origin extension.  For IE go to adblockplus.org  and get the program.
If Chrome/Firefox is slow loading make sure it only has the current Java add-on.  Then download and run Speedy Fox.
http://www.crystalidea.com/speedyfox. Close Chrome/Firefox/Skpe. Hit Optimize.   You can run it any time that Chrome/Firefox seems slow starting..
(If it complains about Chrome still running you can stop it with Task Manager or go into Chrome then go to:

chrome://settings/

Hit Advanced at the bottom of the page then scroll down to near the bottom where it says System.

Change
Continue running background apps when Google Chrome is closed
to Off (slide the blue thing to the left and it turns brown)
Close Chrome.


If the browser is still slow then go in and disable all of your extensions, close the browser and Optimize with SpeedyFox then restart the browser.  If that helps then one or more of your extensions is at fault.  Go back in and turn them on one at a time and see if you can figure out which ones slow things down the most.

If you are a Facebook user get the FB Purity extension for your browser:
http://www.fbpurity.com/
This will stop all of the suggested pages and ads so that Facebook loads much quicker.


Be warned:  If you use Limewire, utorrent or any of the other P2P programs you will probably be coming back to the Malware Removal forum.  If you must use P2P then submit any files you get to http://virustotal.combeforeyouopen them.

Due to a recent rise in the number of Cryptolocker infections I am now recommending you install:

https://www.bleeping...somware/dl/306/
It's currently a free version.

If you have a router, log on to it today and change the default password!  If using a Wireless router you really should be using encryption on the link.  Use the strongest (newest) encryption method that your router and PC wireless adapter support especially if you own a business.
 If you don't know how, visit the router maker's website.  They all have detailed step by step instructions or a wizard you can download.

Special note on Java.  Old Java versions should be removed after first clearing the Java Cache by following the instructions in:
http://www.java.com/...lugin_cache.xml
Then remove the old versions by going to Control Panel, Programs and Features and Uninstall all Java programs which are not the latest.  If in doubt uninstall all.  These may call themselves: Java Runtime, Runtime Environment, Runtime, JRE, Java Virtual Machine, Virtual Machine, Java VM, JVM, VM, J2RE, J2SE.  Get the latest version from Java.com.  They will usually attempt to foist some garbage like the Ask toolbar, Yahoo toolbar or McAfee Security Scan on you as part of the download.  Just uncheck the garbage before the download (or install) starts.  If you use a 64-bit browser and want the 64-bit version of Java you need to use it to visit java.com.
Due to multiple security problems with Java we are now recommending that it not be installed unless you absolutely know you need it.  IF that is the case then go to Control Panel, Java, Security and slide it up to the highest level.  OK.

If you are running Win 10 you probably want OpenShell:

https://github.com/O...Open-Shell-Menu

  This program will make Win 10 act like Win 7 with the same controls you are used to.
Download Link:
https://github.com/O...tup_4_4_131.exe


Recommended free software: (I'm not saying you should download these just that if you have a need for a new program these are safe and work)  
Compression:  7-zip.  Avoid WinRar and WinZip as the free versions have adware.
Video Player:  VLC  Unlike Windows Media Player it never seems to need extra files to work.
Office like free program:  Open Office: https://www.openoffice.org/download/
or
LibreOffice: https://www.libreoffice.org/
Free Anti-Virus:  Avast
Free Malware prevention:  MBAM: Free version at https://www.malwareb...m/mwb-download/
Can run with your anti-virus.
Paid Anti-Virus:  Kaspersky or BitDefender
Utilities:
Root Kit Detector:  MBAR: https://www.malwareb...om/antirootkit/
Process Explorer:  Show you what is running on the PC.  Like Task manager but better:  http://live.sysinter...com/procexp.exe
WhoCrashed: Why did your system crash?
http://www.resplendence.com/downloads
Then click on Download free home edition
where it says:
WhoCrashed 5.51
Comprehensible crash dump analysis tool
for Windows 10/8.1/8/7/Vista/XP/2012/2008/2003 (x86 and x64)
System Health:
Speccy:  
http://www.filehippo...download_speccy(Look in the upper right for the Download
Latest Version button  - Do NOT press the large Start Download button on the upper left!)  Decline CCleaner if offered.  Pay attention to SMART info on your hard drives and to temps.  If in doubt about temps try:
SpeedFan:  Try speedfan
http://www.filehippo...nload_speedfan/
Download, save and Install it (Win 7 or Vista right click and Run As Admin.) then run it.
Video Downloader Professional  To save online video.   This extension (available for Chrome or Firefox)  allows you to start a recording and then switch to a different window and record another video.
Download YouTube Videos:  4K Video Downloader (Separate Program) https://www.4kdownlo...videodownloader
You have to copy the URL then hit the + button on the program.  Then select quality. There is a license activate window but you just close it.
With Win 10 only there is a new Game recorder program.  It's supposed to only work for games but it works nicely to record any video you watch.  Hit the Win key + Alt + r to start the recorder.  The first time it asks you if it is looking at a game.  Just tell it yes.  After that it starts recording whenever you bring it up.  Videos are saved to the Captures folder under Videos.  You can only record what you watch so limited to only one video at a time.  Best to go to full screen before starting the recorder.

Avoid:  
Advanced System Care
SuperAntiSpyware
HitmanPro
Spybot S&D
Any P2P software especially if it comes from Conduit.
Registry Cleaners
Driver updating software.
PC fixing or Speed up software.
Running more than one anti-virus.
Seagate hard drives.  If you have one it's going to fail on you so backup your data now!



 


  • 0

#9
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,593 posts
  • MVP

Also you should probably change any passwords that might have been stored by your browser.  It is always possible that they grabbed your browser's password file (if your browser remembers passwords for you).


  • 0

#10
LollyGagin

LollyGagin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

Got it,  :thumbsup: .  Thanks again.

 

LollyGagin'


  • 0

#11
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,593 posts
  • MVP

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP