This topic is locked
I got an automated call today on our home phone saying my mom's bank account would be charged over $200 for something unless they got a call cancelling the service. My mom has dementia so, I was worried she ordered something not knowing what she was doing. When I called, they said it was for PC protection & started giving me instructions for how to cancel the service. They had me download 2 apps. One was AnyDesk, the other was TeamViewer. Then I saw them take command of my computer & click all sorts of things. Finally a box came up and they wanted me to enter a debit card. Well, that sounded fishy because if my mom ordered something, they should already have the debit card. Also, they said the email address I gave them was wrong. Well, mom doesn't have an email address so, there's no way she ever gave them one. After that I hung up & uninstalled the apps and threw away the app folders in my programs directories. I also went to AppData files & threw away everything there that related to the two programs. Then I ran Malwarebytes & SuperAntiSpyware. Malwarebytes found nothing & SuperAntiSpyware just found a bunch of tracking cookies that I deleted. Still, I'm left afraid that they may have a back door open into my computer and either could or already have downloaded malware. Whatever they did also messed up my slide show on my desktop. Is there any way to check and make sure they didn't leave anything malicious on my computer and shut any back doors they may have access to now?
Thanks,
LollyGagin
FRST.txt Log
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-12-2020
Ran by Acer (administrator) on DESKTOP-58JI9LT (Acer Nitro AN515-53) (15-12-2020 17:08:45)
Running from C:\Users\Acer\Desktop
Loaded Profiles: Acer
Platform: Windows 10 Home Version 20H2 19042.685 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(A.V.M. SOFTWARE, INC. -> AVM Software) C:\Program Files (x86)\Paltalk\update\pt_update_service.exe
(Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\scalc.exe
(Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <26>
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt\IGCC.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe
(Intel® Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_e335ebb186115025\RstMwService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Acer\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) [File not signed] [File is in use] C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
(SUPERAntiSpyware.com -> SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Support.com Inc -> SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19677472 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_ASC] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [11219376 2020-12-08] (Support.com Inc -> SUPERAntiSpyware)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [Paltalk] => C:\Program Files (x86)\Paltalk\Paltalk.exe [27189688 2020-09-15] (A.V.M. SOFTWARE, INC. -> AVM Software)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [PaltalkLauncher] => C:\Program Files (x86)\Paltalk\PaltalkLauncher.exe [771512 2020-09-15] (A.V.M. SOFTWARE, INC. -> AVM Software)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32414392 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\87.0.4280.88\Installer\chrmstp.exe [2020-12-08] (Google LLC -> Google LLC)
Startup: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar.lnk [2020-12-08]
ShortcutTarget: Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) [File not signed] [File is in use]
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {038FD82F-DDC0-46E0-860D-1688186A7C51} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {0A797F8C-A747-46F2-8088-C6BE208AF7FD} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {37BB4993-E3D2-4594-B22D-3152A88B82A2} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3B62CFDE-161B-425D-B756-729ED895E823} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [670928 2020-11-12] (Mozilla Corporation -> Mozilla Foundation)
Task: {80628385-F804-4B2A-AE05-B520587D1E4F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8D4B220D-1E26-42C9-9A4C-419552D59CEC} - System32\Tasks\NCH Software\FastFoxSevenDays => C:\Program Files (x86)\NCH Software\FastFox\FastFox.exe
Task: {986F54A4-241E-4241-9244-4440F69B231F} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A659040A-42A6-478F-983A-D6B3B46E544B} - System32\Tasks\Opera scheduled Autoupdate 1607479406 => C:\Program Files (x86)\Opera\launcher.exe [1529880 2020-11-25] (Opera Software AS -> Opera Software)
Task: {B84A3225-9359-4B6E-8A3D-80972F500724} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2020-12-08] (Google Inc -> Google Inc.)
Task: {BA5FE7FD-1342-4603-83E1-95A123F7A0BF} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {BC99A069-7D58-48CF-BA2D-747CB811D89A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2020-12-08] (Google Inc -> Google Inc.)
Task: {C4435EF8-0CCA-478C-9863-4C430D3D40BB} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C67758DB-7623-4C8D-941C-661B33EFE78F} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DC3B4102-0FF6-49B5-93AD-C90D392908E9} - System32\Tasks\FreeFileViewerUpdateChecker => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe [1635512 2013-03-25] (Bitberry Software -> Bitberry Software) <==== ATTENTION
Task: {E0AEE404-E861-4628-95FA-336978E99255} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {E0DD7E13-5C05-4B77-9C9D-62C2A1AC6D91} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F25EDDD8-6DC5-4A4F-BA86-A4CA1BDEE531} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FB673557-D924-4F5A-AE31-91E16A4BAD17} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FD1F8905-F67C-4228-BAB3-4780E1301D84} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26896568 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{bb8a466b-6536-41d3-8809-c8cf6a4049a9}: [DhcpNameServer] 192.168.43.1
Edge:
======
DownloadDir: C:\Users\Acer\Downloads
Edge Profile: C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default [2020-12-12]
Edge DownloadDir: C:\Users\Acer\Downloads
Edge Extension: (Outlook) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb [2020-12-09]
Edge Extension: (Word) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi [2020-12-09]
Edge Extension: (Excel) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm [2020-12-09]
Edge Extension: (PowerPoint) - C:\Users\Acer\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf [2020-12-09]
FireFox:
========
FF DefaultProfile: y876i4d5.default
FF ProfilePath: C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\y876i4d5.default [2020-12-08]
FF ProfilePath: C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\wzavswk4.default-release [2020-12-15]
Chrome:
=======
CHR Profile: C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default [2020-12-15]
CHR HomePage: Default -> hxxp://www.google.com/
CHR Extension: (Slides) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-12-08]
CHR Extension: (Docs) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-12-08]
CHR Extension: (Google Drive) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-08]
CHR Extension: (YouTube) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-12-08]
CHR Extension: (Sheets) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-12-08]
CHR Extension: (Google Docs Offline) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-12-08]
CHR Extension: (Lionbridge Extension) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\hggdekahccifhildkadlnnfkdcmlmpah [2020-12-09]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-12-08]
CHR Extension: (Gmail) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-08]
CHR Extension: (Chrome Media Router) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-08]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2020-12-08] (SUPERAntiSpyware.com -> SUPERAntiSpyware.com)
R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2019-01-22] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R2 paltalk_update_service; C:\Program Files (x86)\Paltalk\update\pt_update_service.exe [1337784 2020-09-15] (A.V.M. SOFTWARE, INC. -> AVM Software)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-02-28] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AcerAirplaneModeController; C:\Windows\System32\drivers\AcerAirplaneModeController.sys [30168 2020-05-13] (Acer Incorporated -> Acer Incorporated)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153312 2020-12-09] (Malwarebytes Corporation -> Malwarebytes)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220160 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2020-12-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [197792 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [77496 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [139424 2020-12-09] (Malwarebytes Inc -> Malwarebytes)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 USBPcap; C:\Windows\system32\DRIVERS\USBPcap.sys [41720 2015-12-10] (Wireshark Foundation, Inc. -> USBPcap)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [48536 2020-12-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [429296 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-12-15 17:08 - 2020-12-15 17:09 - 000019020 _____ C:\Users\Acer\Desktop\FRST.txt
2020-12-15 17:08 - 2020-12-15 17:09 - 000000000 ____D C:\FRST
2020-12-15 17:02 - 2020-12-15 17:02 - 002286592 _____ (Farbar) C:\Users\Acer\Desktop\FRST64.exe
2020-12-15 12:00 - 2020-12-15 12:05 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Wireshark
2020-12-15 09:15 - 2020-12-15 09:15 - 000000000 ____D C:\Users\Acer\AppData\Roaming\TeamViewer
2020-12-15 09:11 - 2020-12-15 09:33 - 000000000 ____D C:\Users\Acer\AppData\Roaming\AnyDesk
2020-12-12 09:36 - 2020-12-12 09:36 - 011289960 _____ C:\Users\Acer\Downloads\mb-support-1.8.0.848.exe
2020-12-11 19:34 - 2020-12-11 19:35 - 000000000 ____D C:\Users\Acer\AppData\Local\FreeFileViewer
2020-12-11 19:23 - 2020-12-11 19:23 - 000000000 ____D C:\Windows\system32\Tasks\Apple
2020-12-11 19:22 - 2020-12-11 19:22 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2020-12-10 18:56 - 2020-12-10 18:56 - 000174055 _____ C:\Users\Acer\Documents\ASULLIVAN Revised Liability Release Notice_Global Resolution Services_Barclay Mercury Card.pdf
2020-12-09 21:19 - 2020-12-09 21:19 - 000077496 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2020-12-09 21:18 - 2020-12-09 21:18 - 000197792 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2020-12-09 21:18 - 2020-12-09 21:18 - 000139424 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2020-12-09 21:11 - 2020-12-09 21:11 - 000002914 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2020-12-09 21:11 - 2020-12-09 21:11 - 000002908 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2020-12-09 21:11 - 2020-12-09 21:11 - 000002904 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2020-12-09 21:11 - 2020-12-09 21:11 - 000002902 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk
2020-12-09 21:07 - 2020-12-09 21:21 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-12-09 21:07 - 2020-12-09 21:21 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-12-09 21:07 - 2020-12-09 21:21 - 000002276 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2020-12-09 21:06 - 2020-12-11 11:17 - 000003480 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-12-09 21:06 - 2020-12-11 11:17 - 000003356 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-12-09 20:52 - 2020-12-09 20:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2020-12-09 20:52 - 2020-12-09 20:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2020-12-09 20:52 - 2020-12-09 20:52 - 001822272 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2020-12-09 20:52 - 2020-12-09 20:52 - 001393496 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2020-12-09 20:52 - 2020-12-09 20:52 - 001333248 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000266240 _____ C:\Windows\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000240640 _____ C:\Windows\SysWOW64\CoreMas.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\ncpa.cpl
2020-12-09 20:52 - 2020-12-09 20:52 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncpa.cpl
2020-12-09 20:52 - 2020-12-09 20:52 - 000060928 _____ C:\Windows\system32\runexehelper.exe
2020-12-09 20:52 - 2020-12-09 20:52 - 000048640 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000039936 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2020-12-09 20:52 - 2020-12-09 20:52 - 000010912 _____ C:\Windows\system32\DrtmAuthTxt.wim
2020-12-09 20:52 - 2020-12-09 20:52 - 000010752 _____ C:\Windows\SysWOW64\agentactivationruntimestarter.exe
2020-12-09 20:52 - 2020-12-09 20:52 - 000001370 _____ C:\Windows\system32\ThirdPartyNoticesBySHS.txt
2020-12-09 20:51 - 2020-12-09 20:51 - 002260480 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000363520 _____ C:\Windows\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000287232 _____ C:\Windows\system32\CoreMas.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000165376 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2020-12-09 20:51 - 2020-12-09 20:51 - 000089088 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000073216 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-09 20:51 - 2020-12-09 20:51 - 000013312 _____ C:\Windows\system32\agentactivationruntimestarter.exe
2020-12-09 20:20 - 2020-12-09 20:20 - 000000000 ___HD C:\OneDriveTemp
2020-12-09 19:12 - 2020-12-09 19:12 - 030469496 _____ (Piriform Software Ltd) C:\Users\Acer\Downloads\ccsetup574.exe
2020-12-09 17:02 - 2020-12-09 17:02 - 000000000 ____D C:\Users\Acer\AppData\LocalLow\Temp
2020-12-09 16:01 - 2020-12-09 16:01 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-12-09 16:01 - 2020-12-09 16:01 - 000220160 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-12-09 16:01 - 2020-12-09 16:01 - 000019912 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2020-12-09 16:01 - 2020-12-09 16:01 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-12-09 15:31 - 2020-12-12 09:29 - 000000000 ____D C:\Users\Acer\AppData\Local\CrashDumps
2020-12-08 23:13 - 2020-12-08 23:16 - 000000000 ____D C:\Users\Acer\AppData\Roaming\FreeFileViewer
2020-12-08 22:39 - 2020-12-08 22:39 - 000000000 ____D C:\Users\Acer\AppData\Roaming\OpenOffice
2020-12-08 22:37 - 2020-12-08 22:37 - 000000458 _____ C:\Users\Acer\AppData\Roaming\Drives Monitor_Settings.ini
2020-12-08 22:35 - 2020-12-08 22:35 - 000001082 _____ C:\Users\Acer\Desktop\SQLiteStudio - Shortcut.lnk
2020-12-08 22:34 - 2020-12-08 22:34 - 000001816 _____ C:\Users\Acer\Desktop\ScreamingFrogSEOSpider - Shortcut.lnk
2020-12-08 22:29 - 2020-12-08 22:29 - 000002205 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk
2020-12-08 22:29 - 2020-12-08 22:29 - 000000000 ____D C:\Program Files (x86)\Belarc
2020-12-08 22:28 - 2020-12-08 22:28 - 000000877 _____ C:\Users\Acer\Desktop\HTTrack Website Copier.lnk
2020-12-08 22:28 - 2020-12-08 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2020-12-08 22:28 - 2020-12-08 22:28 - 000000000 ____D C:\Program Files\WinHTTrack
2020-12-08 22:19 - 2020-12-08 22:19 - 000003033 _____ C:\Users\Acer\Desktop\TaskMerlin.lnk
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Interfathom TaskMerlin
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\Users\Acer\AppData\Local\Interfathom
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\ProgramData\Interfathom
2020-12-08 22:19 - 2020-12-08 22:19 - 000000000 ____D C:\Program Files (x86)\Interfathom
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files\MSBuild
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-12-08 22:16 - 2020-12-08 22:16 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-12-08 21:49 - 2020-12-14 20:02 - 000000000 ____D C:\ProgramData\Paltalk Update
2020-12-08 21:49 - 2020-12-08 21:51 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk
2020-12-08 21:49 - 2020-12-08 21:49 - 000001060 _____ C:\Users\Acer\Desktop\Paltalk.lnk
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Users\Acer\AppData\Roaming\A.V.M
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Users\Acer\AppData\Local\Paltalk
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Users\Acer\AppData\Local\A.V.M
2020-12-08 21:49 - 2020-12-08 21:49 - 000000000 ____D C:\Program Files (x86)\Paltalk
2020-12-08 21:47 - 2020-12-08 21:47 - 000001192 _____ C:\Users\Acer\Desktop\blender.lnk
2020-12-08 21:47 - 2020-12-08 21:47 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender
2020-12-08 21:47 - 2020-12-08 21:47 - 000000000 ____D C:\Program Files\Blender Foundation
2020-12-08 21:45 - 2020-12-08 21:46 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Scribus
2020-12-08 21:44 - 2020-12-08 21:44 - 000000907 _____ C:\Users\Public\Desktop\Scribus 1.4.8.lnk
2020-12-08 21:44 - 2020-12-08 21:44 - 000000907 _____ C:\ProgramData\Desktop\Scribus 1.4.8.lnk
2020-12-08 21:44 - 2020-12-08 21:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Scribus 1.4.8
2020-12-08 21:43 - 2020-12-08 21:44 - 000000000 ____D C:\Program Files\Scribus 1.4.8
2020-12-08 21:42 - 2020-12-08 21:42 - 000000218 _____ C:\Users\Acer\AppData\Local\recently-used.xbel
2020-12-08 21:42 - 2020-12-08 21:42 - 000000000 ____D C:\Users\Acer\AppData\Roaming\inkscape
2020-12-08 21:42 - 2020-12-08 21:42 - 000000000 ____D C:\Users\Acer\.dbus-keyrings
2020-12-08 21:41 - 2020-12-08 21:41 - 000000939 _____ C:\Users\Public\Desktop\Inkscape.lnk
2020-12-08 21:41 - 2020-12-08 21:41 - 000000939 _____ C:\ProgramData\Desktop\Inkscape.lnk
2020-12-08 21:41 - 2020-12-08 21:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape
2020-12-08 21:40 - 2020-12-08 21:41 - 000000000 ____D C:\Program Files\Inkscape
2020-12-08 21:37 - 2020-12-08 21:37 - 000001363 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Frog SEO Spider.lnk
2020-12-08 21:37 - 2020-12-08 21:37 - 000001265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uninstall Screaming Frog SEO Spider.lnk
2020-12-08 21:37 - 2020-12-08 21:37 - 000000000 ____D C:\Program Files (x86)\Screaming Frog SEO Spider
2020-12-08 21:24 - 2020-12-08 21:25 - 000000000 ____D C:\Users\Acer\AppData\Roaming\sqlitestudio
2020-12-08 21:24 - 2020-12-08 21:24 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SQLiteStudio
2020-12-08 21:24 - 2020-12-08 21:24 - 000000000 ____D C:\Program Files\SQLiteStudio
2020-12-08 21:23 - 2020-12-08 21:23 - 000002989 _____ C:\Users\Acer\Desktop\Zinio Reader.lnk
2020-12-08 21:23 - 2020-12-08 21:23 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zinio Reader
2020-12-08 21:23 - 2020-12-08 21:23 - 000000000 ____D C:\Program Files (x86)\Zinio
2020-12-08 21:18 - 2020-12-08 21:19 - 000002287 _____ C:\Users\Acer\Desktop\Kindle.lnk
2020-12-08 21:18 - 2020-12-08 21:19 - 000000000 ____D C:\Users\Acer\AppData\Local\Amazon
2020-12-08 21:18 - 2020-12-08 21:18 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2020-12-08 21:17 - 2020-12-15 16:57 - 000000000 ____D C:\Program Files\CCleaner
2020-12-08 21:17 - 2020-12-15 15:57 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-12-08 21:17 - 2020-12-08 21:17 - 000002886 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-12-08 21:17 - 2020-12-08 21:17 - 000001128 _____ C:\Users\Public\Desktop\OpenOffice 4.1.4.lnk
2020-12-08 21:17 - 2020-12-08 21:17 - 000001128 _____ C:\ProgramData\Desktop\OpenOffice 4.1.4.lnk
2020-12-08 21:17 - 2020-12-08 21:17 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.4
2020-12-08 21:17 - 2020-12-08 21:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-12-08 21:16 - 2020-12-08 21:17 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4
2020-12-08 21:04 - 2020-12-08 21:04 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2020-12-08 21:03 - 2020-12-08 21:04 - 000003970 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1607479406
2020-12-08 21:03 - 2020-12-08 21:04 - 000000000 ____D C:\Program Files (x86)\Opera
2020-12-08 21:03 - 2020-12-08 21:03 - 000001204 _____ C:\Users\Public\Desktop\Opera Browser.lnk
2020-12-08 21:03 - 2020-12-08 21:03 - 000001204 _____ C:\ProgramData\Desktop\Opera Browser.lnk
2020-12-08 21:03 - 2020-12-08 21:03 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Opera Software
2020-12-08 21:03 - 2020-12-08 21:03 - 000000000 ____D C:\Users\Acer\AppData\Local\Opera Software
2020-12-08 20:59 - 2020-12-08 20:59 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Apple Computer
2020-12-08 20:59 - 2020-12-08 20:59 - 000000000 ____D C:\Users\Acer\AppData\Local\Apple Computer
2020-12-08 20:58 - 2020-12-08 20:58 - 000002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2020-12-08 20:58 - 2020-12-08 20:58 - 000002507 _____ C:\Users\Public\Desktop\Safari.lnk
2020-12-08 20:58 - 2020-12-08 20:58 - 000002507 _____ C:\ProgramData\Desktop\Safari.lnk
2020-12-08 20:58 - 2020-12-08 20:58 - 000000000 ____D C:\ProgramData\Apple Computer
2020-12-08 20:58 - 2020-12-08 20:58 - 000000000 ____D C:\Program Files (x86)\Safari
2020-12-08 20:55 - 2020-12-08 20:55 - 000001827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2020-12-08 20:55 - 2020-12-08 20:55 - 000000000 ____D C:\Program Files\USBPcap
2020-12-08 20:54 - 2020-12-08 20:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2020-12-08 20:54 - 2020-12-08 20:54 - 000000000 ____D C:\Program Files (x86)\WinPcap
2020-12-08 20:52 - 2020-12-08 20:55 - 000000000 ____D C:\Program Files\Wireshark
2020-12-08 20:52 - 2020-12-08 20:52 - 000001567 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark Legacy.lnk
2020-12-08 20:45 - 2020-12-08 20:45 - 000000000 ____D C:\Users\Acer\AppData\Local\mbamtray
2020-12-08 20:45 - 2020-12-08 20:45 - 000000000 ____D C:\Users\Acer\AppData\Local\mbam
2020-12-08 20:44 - 2020-12-09 16:01 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-12-08 20:44 - 2020-12-08 20:44 - 000000000 ____D C:\ProgramData\MB2Migration
2020-12-08 20:44 - 2020-12-08 20:44 - 000000000 ____D C:\Program Files\Malwarebytes
2020-12-08 20:17 - 2020-12-11 19:22 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\Users\Acer\AppData\Local\Apple
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\ProgramData\Apple
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\Program Files\Bonjour
2020-12-08 20:17 - 2020-12-08 20:17 - 000000000 ____D C:\Program Files (x86)\Bonjour
2020-12-08 20:14 - 2020-12-08 20:14 - 000000000 ____D C:\Users\Acer\AppData\Roaming\SUPERAntiSpyware.com
2020-12-08 20:12 - 2020-12-14 09:14 - 000000000 ____D C:\Program Files\SUPERAntiSpyware
2020-12-08 20:12 - 2020-12-08 20:12 - 000000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2020-12-08 20:12 - 2020-12-08 20:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2020-12-08 20:09 - 2020-12-08 20:44 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-12-08 20:09 - 2020-12-08 20:44 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2020-12-08 19:58 - 2020-12-15 12:05 - 000000000 ____D C:\Users\Acer\AppData\LocalLow\Mozilla
2020-12-08 19:58 - 2020-12-08 19:58 - 000000000 ____D C:\Users\Acer\AppData\Roaming\Mozilla
2020-12-08 19:58 - 2020-12-08 19:58 - 000000000 ____D C:\Users\Acer\AppData\Local\Mozilla
2020-12-08 19:57 - 2020-12-15 12:05 - 000000000 ____D C:\ProgramData\Mozilla
2020-12-08 19:57 - 2020-12-08 19:58 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-12-08 19:57 - 2020-12-08 19:57 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-12-08 19:57 - 2020-12-08 19:57 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2020-12-08 19:57 - 2020-12-08 19:57 - 000000993 _____ C:\ProgramData\Desktop\Firefox.lnk
2020-12-08 19:57 - 2020-12-08 19:57 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2020-12-08 19:57 - 2020-12-08 19:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-12-08 19:51 - 2020-12-08 23:12 - 000000000 ____D C:\Program Files (x86)\NCH Software
2020-12-08 19:51 - 2020-12-08 19:55 - 000000000 ____D C:\ProgramData\NCH Software
2020-12-08 19:51 - 2020-12-08 19:51 - 000000000 ____D C:\Windows\system32\Tasks\NCH Software
2020-12-08 19:01 - 2020-12-09 21:22 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-12-08 19:01 - 2020-12-09 21:22 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-12-08 19:01 - 2020-12-09 21:22 - 000002206 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-12-08 19:01 - 2020-12-08 19:01 - 000000000 ____D C:\Program Files\Google
2020-12-08 19:00 - 2020-12-14 10:46 - 000000000 ____D C:\Users\Acer\AppData\Local\Google
2020-12-08 19:00 - 2020-12-08 19:10 - 000003418 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-12-08 19:00 - 2020-12-08 19:10 - 000003294 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-12-08 19:00 - 2020-12-08 19:10 - 000000000 ____D C:\Program Files (x86)\Google
2020-12-08 18:59 - 2020-12-08 19:00 - 000000000 ____D C:\Users\Acer\.gimp-2.8
2020-12-08 18:59 - 2020-12-08 18:59 - 000001523 _____ C:\Users\Acer\Desktop\gimp-2.8 - Shortcut.lnk
2020-12-08 18:59 - 2020-12-08 18:59 - 000000000 ____D C:\Users\Acer\AppData\Local\gegl-0.2
2020-12-08 18:59 - 2020-12-08 18:59 - 000000000 ____D C:\Users\Acer\AppData\Local\fontconfig
2020-12-08 18:56 - 2020-12-15 14:23 - 000004164 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{A1AF80D2-8AD8-45C1-8789-A12E5128EF6B}
2020-12-08 18:56 - 2020-12-08 18:56 - 000000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2020-12-08 18:56 - 2020-12-08 18:56 - 000000000 ____D C:\Program Files\GIMP 2
2020-12-08 18:55 - 2020-12-08 23:11 - 000000400 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2020-12-08 18:55 - 2020-12-08 18:55 - 000003164 _____ C:\Windows\system32\Tasks\FreeFileViewerUpdateChecker
2020-12-08 18:55 - 2020-12-08 18:55 - 000001154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\FreeFileViewer.lnk
2020-12-08 18:55 - 2020-12-08 18:55 - 000001148 _____ C:\Users\Acer\Desktop\FreeFileViewer.lnk
2020-12-08 18:55 - 2020-12-08 18:55 - 000001020 _____ C:\Users\Acer\Desktop\Compare It!.lnk
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileViewer
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Compare It!
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\Program Files (x86)\Unknown File Handler
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\Program Files (x86)\FreeFileViewer
2020-12-08 18:55 - 2020-12-08 18:55 - 000000000 ____D C:\Program Files (x86)\Compare It!
2020-12-08 18:45 - 2020-12-08 18:49 - 000000000 ____D C:\Users\Acer\AppData\Local\Sidebar7
2020-12-08 18:44 - 2020-12-08 18:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\8GadgetPack
2020-12-08 18:07 - 2020-12-09 17:51 - 000264894 _____ C:\Users\Acer\Downloads\OTL.Txt
2020-12-08 18:07 - 2020-11-02 16:15 - 001008377 _____ C:\Users\Acer\Downloads\message (1).html
2020-12-08 18:07 - 2020-10-23 17:42 - 001008377 _____ C:\Users\Acer\Downloads\message.html
2020-12-08 18:07 - 2020-09-29 13:07 - 000016670 _____ C:\Users\Acer\Downloads\Receipt.pdf
2020-12-08 18:07 - 2020-09-20 15:38 - 089009584 _____ (AVM Software, Inc.) C:\Users\Acer\Downloads\PaltalkSetup.exe
2020-12-08 18:07 - 2020-07-21 20:43 - 000289427 _____ C:\Users\Acer\Downloads\Time Sheet Directions for RATERS 10.19.17.pdf
2020-12-08 18:07 - 2020-07-21 20:23 - 000305820 _____ C:\Users\Acer\Downloads\Sun Life EF Business (1).pdf
2020-12-08 18:07 - 2020-07-21 20:22 - 000305820 _____ C:\Users\Acer\Downloads\Sun Life EF Business.pdf
2020-12-08 18:07 - 2020-07-21 20:13 - 000120622 _____ C:\Users\Acer\Downloads\Lionbridge Plan Highlights 2019 (1).pdf
2020-12-08 18:07 - 2020-07-21 20:12 - 000120622 _____ C:\Users\Acer\Downloads\Lionbridge Plan Highlights 2019.pdf
2020-12-08 18:07 - 2020-07-11 11:33 - 001197171 _____ C:\Users\Acer\Downloads\rep_Barefoot_Writer_9_Ways_You_Can_Do_It.pdf
2020-12-08 18:07 - 2020-07-10 19:31 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (4).pdf
2020-12-08 18:07 - 2020-07-10 19:23 - 000242337 _____ C:\Users\Acer\Downloads\Remote Hire Authorized Agent Instructions .pdf
2020-12-08 18:07 - 2020-07-10 19:23 - 000242337 _____ C:\Users\Acer\Downloads\Remote Hire Authorized Agent Instructions (1).pdf
2020-12-08 18:07 - 2020-07-10 19:16 - 000155782 _____ C:\Users\Acer\Downloads\Software Code of Ethics_ENG (2).pdf
2020-12-08 18:07 - 2020-07-10 19:15 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (3).pdf
2020-12-08 18:07 - 2020-07-10 19:15 - 000155782 _____ C:\Users\Acer\Downloads\Software Code of Ethics_ENG (1).pdf
2020-12-08 18:07 - 2020-07-10 18:48 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (2).pdf
2020-12-08 18:07 - 2020-07-10 18:48 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement (1).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (4).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (3).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (2).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000351198 _____ C:\Users\Acer\Downloads\Lionbridge Code of Conduct March 2020 English branded (ARIAL) (1).pdf
2020-12-08 18:07 - 2020-07-10 18:47 - 000184332 _____ C:\Users\Acer\Downloads\LB Remote Employee I-9 Employment Eligibility Verification Acknowledgement.pdf
2020-12-08 18:07 - 2020-07-05 22:46 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (4).pdf
2020-12-08 18:07 - 2020-07-05 22:45 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (3).pdf
2020-12-08 18:07 - 2020-07-05 22:42 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (2).pdf
2020-12-08 18:07 - 2020-07-05 22:41 - 003344286 _____ C:\Users\Acer\Downloads\SendtoDeviceandAppInstructions (1).pdf
2020-12-08 18:07 - 2020-06-14 20:20 - 095911542 _____ (The Scribus Team) C:\Users\Acer\Downloads\scribus-1.4.8-windows-x64.exe
2020-12-08 18:07 - 2020-04-23 20:54 - 002132245 _____ C:\Users\Acer\Downloads\mail-4404-60314-2237990-4-c350 (2).pdf
2020-12-08 18:07 - 2020-04-23 20:53 - 002132245 _____ C:\Users\Acer\Downloads\mail-4404-60314-2237990-4-c350 (1).pdf
2020-12-08 18:07 - 2020-04-23 20:51 - 002132245 _____ C:\Users\Acer\Downloads\mail-4404-60314-2237990-4-c350.pdf
2020-12-08 18:07 - 2020-03-08 20:40 - 253293008 _____ (Screaming Frog Ltd) C:\Users\Acer\Downloads\ScreamingFrogSEOSpider-12.6.exe
2020-12-08 18:07 - 2018-01-08 12:10 - 000000736 _____ C:\Users\Acer\Downloads\OneDrive - Shortcut.lnk
2020-12-08 18:07 - 2017-07-14 15:08 - 002756168 _____ (mIRC Co. Ltd.) C:\Users\Acer\Downloads\mirc749.exe
2020-12-08 18:07 - 2017-07-13 18:54 - 013469937 _____ C:\Users\Acer\Downloads\san1122a.zip
2020-12-08 18:07 - 2017-07-13 18:54 - 000068768 _____ C:\Users\Acer\Downloads\memtest86+-4.10.iso.zip
2020-12-08 18:07 - 2017-03-22 12:10 - 078613984 _____ (Slack Technologies) C:\Users\Acer\Downloads\SlackSetup.exe
2020-12-08 18:07 - 2017-01-10 15:35 - 043291656 _____ (Opera Software) C:\Users\Acer\Downloads\Opera_42.0.2393.94_Setup.exe
2020-12-08 18:07 - 2016-12-06 16:43 - 092229176 _____ (TryMyUI, Inc.) C:\Users\Acer\Downloads\TryMyUIRecorder_windows-x64_1_0_2.exe
2020-12-08 18:07 - 2016-11-17 04:00 - 012300288 _____ C:\Users\Acer\Downloads\SmartApp.msi
2020-12-08 18:07 - 2016-02-20 22:14 - 002587312 _____ (Microsoft Corporation) C:\Users\Acer\Downloads\TMSetup_2_1_0_3.exe
2020-12-08 18:07 - 2016-02-18 01:18 - 088572984 _____ (TryMyUI, Inc.) C:\Users\Acer\Downloads\TryMyUIRecorder_windows_1_0_2.exe
2020-12-08 18:07 - 2016-02-10 22:24 - 038494576 _____ (Apple Inc.) C:\Users\Acer\Downloads\SafariSetup.exe
2020-12-08 18:07 - 2016-02-06 21:05 - 024642208 _____ (SUPERAntiSpyware) C:\Users\Acer\Downloads\SUPERAntiSpyware.exe
2020-12-08 18:07 - 2016-02-06 01:15 - 000602112 _____ (OldTimer Tools) C:\Users\Acer\Downloads\OTL.exe
2020-12-08 18:07 - 2016-02-05 23:03 - 022908888 _____ (Malwarebytes ) C:\Users\Acer\Downloads\mbam-setup-2.2.0.1024.exe
2020-12-08 18:06 - 2020-12-09 17:51 - 000075246 _____ C:\Users\Acer\Downloads\Extras.Txt
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\Wireless LAN_Atheros_10.0.0.285_W81x64_A
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\san1122a
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\memtest86+-4.10.iso
2020-12-08 18:06 - 2020-12-08 18:06 - 000000000 ____D C:\Users\Acer\Downloads\IO Drivers_Intel_603.9600.1948.28229_W81x64_A
2020-12-08 18:06 - 2020-09-08 19:58 - 018423902 _____ C:\Users\Acer\Downloads\General_Guidelines (2).pdf
2020-12-08 18:06 - 2020-08-11 21:57 - 000268874 _____ C:\Users\Acer\Downloads\Decide Who You'll Write For.pdf
2020-12-08 18:06 - 2020-07-22 17:29 - 018423902 _____ C:\Users\Acer\Downloads\General_Guidelines.pdf
2020-12-08 18:06 - 2020-07-21 20:18 - 000284509 _____ C:\Users\Acer\Downloads\401(k) Summary Plan Description (SPD).pdf
2020-12-08 18:06 - 2020-07-14 02:13 - 000599536 _____ C:\Users\Acer\Downloads\i-9instr.pdf
2020-12-08 18:06 - 2020-07-10 16:18 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history (3).json
2020-12-08 18:06 - 2020-07-10 16:18 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history (2).json
2020-12-08 18:06 - 2020-07-10 16:17 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history.json
2020-12-08 18:06 - 2020-07-10 16:17 - 000739199 _____ C:\Users\Acer\Downloads\chrome_history (1).json
2020-12-08 18:06 - 2020-07-09 00:29 - 000060411 _____ C:\Users\Acer\Downloads\1998-03-01 The Mind Has No Firewall (Thomas).pdf
2020-12-08 18:06 - 2020-07-04 20:03 - 018423902 _____ C:\Users\Acer\Downloads\General_Guidelines (1).pdf
2020-12-08 18:06 - 2020-06-19 13:33 - 141488128 _____ C:\Users\Acer\Downloads\blender-2.83.0-windows64.msi
2020-12-08 18:06 - 2020-06-07 17:05 - 024155704 _____ C:\Users\Acer\Downloads\_29c594d9b502c2b8365da10cdaf76de9_SM_Course-4_Lecuture-Slides.zip
2020-12-08 18:06 - 2020-06-07 17:05 - 024155704 _____ C:\Users\Acer\Downloads\_29c594d9b502c2b8365da10cdaf76de9_SM_Course-4_Lecuture-Slides (1).zip
2020-12-08 18:06 - 2020-05-31 20:21 - 092830805 _____ C:\Users\Acer\Downloads\inkscape-1.0-x64.exe
2020-12-08 18:06 - 2020-05-13 02:10 - 028421710 _____ C:\Users\Acer\Downloads\_05caea0f1b6cd495b344fc30f07e0642_Course-2-PDF-Slide-Presentations.zip
2020-12-08 18:06 - 2020-05-05 18:43 - 043454652 _____ C:\Users\Acer\Downloads\_54c0cb153cfa03ec39e34a1c40919c17_Course-1-PDF-Slide-Presentations.zip
2020-12-08 18:06 - 2020-05-05 18:43 - 043454652 _____ C:\Users\Acer\Downloads\_54c0cb153cfa03ec39e34a1c40919c17_Course-1-PDF-Slide-Presentations (1).zip
2020-12-08 18:06 - 2020-04-26 19:40 - 000308303 _____ C:\Users\Acer\Downloads\facebook-angelasullivan9041083.zip
2020-12-08 18:06 - 2020-03-11 19:58 - 056563704 _____ (Amazon.com) C:\Users\Acer\Downloads\KindleForPC_installer_1_27_56109.exe
2020-12-08 18:06 - 2020-01-13 16:14 - 034862967 _____ C:\Users\Acer\Downloads\InstallSQLiteStudio-3.2.1.exe
2020-12-08 18:06 - 2019-01-27 14:53 - 056454776 _____ (Amazon.com) C:\Users\Acer\Downloads\Kindle_for_PC_Download.exe
2020-12-08 18:06 - 2018-11-18 20:27 - 018071560 _____ (Piriform Software Ltd) C:\Users\Acer\Downloads\ccsetup549.exe
2020-12-08 18:06 - 2017-12-13 16:41 - 140792144 _____ C:\Users\Acer\Downloads\Apache_OpenOffice_4.1.4_Win_x86_install_en-US.exe
2020-12-08 18:06 - 2017-11-10 14:15 - 000245816 _____ (Mozilla) C:\Users\Acer\Downloads\Firefox Installer.exe
2020-12-08 18:06 - 2017-07-28 17:47 - 000300984 _____ (LogMeIn, Inc.) C:\Users\Acer\Downloads\GoToMeeting Opener.exe
2020-12-08 18:06 - 2017-07-13 18:58 - 000002035 _____ C:\Users\Acer\Downloads\cdgone.zip
2020-12-08 18:06 - 2017-07-13 18:55 - 000641975 _____ (EFD Software ) C:\Users\Acer\Downloads\hdtune_253.exe
2020-12-08 18:06 - 2017-07-12 17:20 - 000001130 _____ C:\Users\Acer\Downloads\HijackThis - Shortcut.lnk
2020-12-08 18:06 - 2017-06-20 19:40 - 001202184 _____ (Adobe Systems Incorporated) C:\Users\Acer\Downloads\flashplayer26ppau_ha_install.exe
2020-12-08 18:06 - 2017-04-14 13:36 - 000813354 _____ C:\Users\Acer\Downloads\IO Drivers_Intel_603.9600.1948.28229_W81x64_A.zip
2020-12-08 18:06 - 2017-04-14 13:16 - 010861118 _____ C:\Users\Acer\Downloads\CardReader_Realtek_6.3.9600.21245_W81x64_A.zip
2020-12-08 18:06 - 2017-04-14 12:53 - 001761632 _____ (Acer Incorporated) C:\Users\Acer\Downloads\AcerCareCenterLiveUpdater.exe
2020-12-08 18:06 - 2017-03-12 20:56 - 001201256 _____ (Adobe Systems Incorporated) C:\Users\Acer\Downloads\flashplayer24_ka_install.exe
2020-12-08 18:06 - 2017-02-18 18:30 - 000000053 _____ C:\Users\Acer\Downloads\google652d5eb6c60f3700.html
2020-12-08 18:06 - 2017-01-13 23:16 - 017797624 _____ C:\Users\Acer\Downloads\InstallUserTesting-v2.0.exe
2020-12-08 18:06 - 2017-01-10 17:21 - 000898024 _____ (Ginger Software) C:\Users\Acer\Downloads\Ginger.exe
2020-12-08 18:06 - 2017-01-08 23:46 - 106310681 _____ (GnuCash Development Team ) C:\Users\Acer\Downloads\gnucash-2.6.15-setup.exe
2020-12-08 18:06 - 2017-01-08 14:14 - 000517912 _____ (NCH Software) C:\Users\Acer\Downloads\ffsetup.exe
2020-12-08 18:06 - 2017-01-08 14:13 - 000964896 _____ (NCH Software) C:\Users\Acer\Downloads\essetup.exe
2020-12-08 18:06 - 2017-01-06 13:02 - 017956136 _____ C:\Users\Acer\Downloads\InstallScreencastOMatic-2.0.exe
2020-12-08 18:06 - 2017-01-02 19:47 - 004952208 _____ C:\Users\Acer\Downloads\advisorinstaller.exe
2020-12-08 18:06 - 2016-12-29 23:03 - 393440944 _____ C:\Users\Acer\Downloads\Audio_Realtek_6.0.1.7209_W81x64_A.zip
2020-12-08 18:06 - 2016-12-29 21:55 - 026496761 _____ (Audacity Team ) C:\Users\Acer\Downloads\audacity-win-2.1.2.exe
2020-12-08 18:06 - 2016-12-26 17:05 - 004498888 _____ (HTTrack ) C:\Users\Acer\Downloads\httrack_x64-3.48.22.exe
2020-12-08 18:06 - 2016-12-23 12:46 - 006337437 _____ C:\Users\Acer\Downloads\Chipset_Intel_9.4.4.1006_W81x64_A.zip
2020-12-08 18:06 - 2016-12-09 00:51 - 001878323 _____ C:\Users\Acer\Downloads\bookmark_merger-0.2.3.exe.zip
2020-12-08 18:06 - 2016-12-08 01:21 - 001381582 _____ (Igor Pavlov) C:\Users\Acer\Downloads\7z1604-x64.exe
2020-12-08 18:06 - 2016-11-27 20:23 - 001065376 _____ (Google Inc.) C:\Users\Acer\Downloads\ChromeSetup.exe
2020-12-08 18:06 - 2016-11-27 19:29 - 000737344 _____ (Oracle Corporation) C:\Users\Acer\Downloads\jxpiinstall.exe
2020-12-08 18:06 - 2016-11-16 12:57 - 102359936 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Acer\Downloads\Evernote_6.4.2.3788.exe
2020-12-08 18:06 - 2016-02-06 01:06 - 000388608 _____ (Trend Micro Inc.) C:\Users\Acer\Downloads\HijackThis.exe
2020-12-08 18:06 - 2016-02-05 22:15 - 006968048 _____ (IvoSoft) C:\Users\Acer\Downloads\ClassicShellSetup_4_2_5.exe
2020-12-08 18:06 - 2016-02-03 21:00 - 017935112 _____ C:\Users\Acer\Downloads\InstallScreenRecorderLauncher-2.0.exe
2020-12-08 18:06 - 2016-02-02 19:58 - 024394248 _____ C:\Users\Acer\Downloads\InstallUserTestingPlugin-v1.8.exe
2020-12-08 18:06 - 2016-01-29 23:39 - 096819488 _____ (The GIMP Team ) C:\Users\Acer\Downloads\gimp-2.8.16-setup.exe
2020-12-08 18:06 - 2015-11-17 11:04 - 017787368 _____ (Bitberry Software ) C:\Users\Acer\Downloads\FreeFileViewerSetup [1].exe
2020-12-08 18:06 - 2013-07-28 20:09 - 017948672 _____ C:\Users\Acer\Downloads\8GadgetPackSetup.msi
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\Chipset_Intel_9.4.4.1006_W81x64_A
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\CardReader_Realtek_6.3.9600.21245_W81x64_A
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\bookmark_merger-0.2.3.exe
2020-12-08 18:05 - 2020-12-08 18:05 - 000000000 ____D C:\Users\Acer\Downloads\backups
2020-12-08 18:04 - 2020-12-08 18:04 - 000000000 ____D C:\Users\Acer\Downloads\Audio_Realtek_6.0.1.7209_W81x64_A
2020-12-08 18:04 - 2020-05-18 13:19 - 001193337 _____ C:\Users\Acer\Downloads\work-search-all-rev-10-9-17 (1).pdf
2020-12-08 18:04 - 2019-01-27 16:46 - 107806720 _____ C:\Users\Acer\Downloads\ZinioReader_1.1.9_win64.msi
2020-12-08 18:04 - 2016-05-20 14:30 - 238731365 _____ C:\Users\Acer\Downloads\Wireless LAN_Atheros_10.0.0.285_W81x64_A.zip
2020-12-08 18:04 - 2016-02-20 15:59 - 047333544 _____ (Wireshark development team) C:\Users\Acer\Downloads\Wireshark-win64-2.0.1.exe
2020-12-08 18:04 - 2016-02-02 20:49 - 111671512 _____ (WhatUsersDo Ltd ) C:\Users\Acer\Downloads\whatusersdo-recorder.exe
2020-12-08 18:04 - 2013-07-30 15:44 - 001795784 _____ (Grig Software ) C:\Users\Acer\Downloads\wincmp-setup.exe
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Work at Home
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\UserTesting
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\TI Stuff
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Taxes
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Targeting Gangstalking electromagnetic weapons
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Sound recordings
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Screencast-O-Matic
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Research Resources
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Racism
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Psychiatry_Psychology
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Politics
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\Police
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\People Find
2020-12-08 18:01 - 2020-12-08 18:01 - 000000000 ____D C:\Users\Acer\Documents\OpenOffice 4.1.4 (en-US) Installation Files_2
2020-12-08 18:01 - 2020-07-24 14:09 - 000000000 ____D C:\Users\Acer\Documents\Zoom
2020-12-08 18:00 - 2020-12-08 22:53 - 000000000 ____D C:\Users\Acer\Documents\OpenOffice 4.1.4 (en-US) Installation Files
2020-12-08 18:00 - 2020-12-08 21:19 - 000000000 ____D C:\Users\Acer\Documents\My Kindle Content
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\OpenOffice 4.0.0 (en-US) Installation Files
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Marketing
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Manuals Other
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Lionbridge Documents
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Letters
2020-12-08 18:00 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Law
2020-12-08 17:59 - 2020-12-08 18:00 - 000000000 ____D C:\Users\Acer\Documents\Jehovahs Witnesses Official
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Jehovahs Witnesses Con
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Hardware_Software Manuals_Documentation
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Geology
2020-12-08 17:59 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\Gardening
2020-12-08 17:55 - 2020-12-08 17:59 - 000000000 ____D C:\Users\Acer\Documents\From Orange StoreJet
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Forms
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Firefox bookmark and history files
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Facebook downloads
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Dreams
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\CyberLink
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Crying
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Coursera
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Computers
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Bluetooth Folder
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\Biophoton research
2020-12-08 17:55 - 2020-12-08 17:55 - 000000000 ____D C:\Users\Acer\Documents\12 Steps Debate
2020-12-08 17:55 - 2020-11-07 23:49 - 005035984 _____ C:\Users\Acer\Documents\New Patient Intake Forms Augusta University Psychiatry Outpatient.pdf
2020-12-08 17:55 - 2020-11-06 19:52 - 000012071 _____ C:\Users\Acer\Documents\Major illnesses Conditons Hospitalizations Surgery.odt
2020-12-08 17:55 - 2020-11-06 19:45 - 000011299 _____ C:\Users\Acer\Documents\Medication list.odt
2020-12-08 17:55 - 2020-11-03 21:07 - 000661695 _____ C:\Users\Acer\Documents\ADULT NEW PATIENT PSY PACKET (003).pdf
2020-12-08 17:55 - 2020-11-03 19:36 - 000229321 _____ C:\Users\Acer\Documents\Medical Records-Sullivan.pdf
2020-12-08 17:55 - 2020-10-28 11:59 - 000012402 _____ C:\Users\Acer\Documents\letter to dr montenegro about mom.odt
2020-12-08 17:55 - 2020-10-23 15:13 - 002682880 _____ C:\Users\Acer\Documents\MyTasks.tmdb
2020-12-08 17:55 - 2020-10-16 01:26 - 000011036 _____ C:\Users\Acer\Documents\Butternut squash soup.odt
2020-12-08 17:55 - 2020-10-16 01:24 - 000000831 _____ C:\Users\Acer\Documents\sweet potato stew recipe.txt
2020-12-08 17:55 - 2020-10-16 01:22 - 000031819 _____ C:\Users\Acer\Documents\sweet potato stew recipe.pdf
2020-12-08 17:55 - 2020-10-16 01:22 - 000010354 _____ C:\Users\Acer\Documents\sweet potato stew recipe.odt
2020-12-08 17:55 - 2020-09-29 12:30 - 000078598 _____ C:\Users\Acer\Documents\South Carolina REAL ID.pdf
2020-12-08 17:55 - 2020-09-02 11:33 - 000011471 _____ C:\Users\Acer\Documents\solicit help attorney mom mental health.odt
2020-12-08 17:55 - 2020-08-28 21:03 - 002103438 _____ C:\Users\Acer\Documents\Evidence of Coverage UHC 2020.pdf
2020-12-08 17:55 - 2020-08-21 20:30 - 002338093 _____ C:\Users\Acer\Documents\Wife Saver North Augusta Menu.cdr.pdf
2020-12-08 17:55 - 2020-08-19 18:38 - 000009047 _____ C:\Users\Acer\Documents\Money Hut Logo Type.odt
2020-12-08 17:55 - 2020-07-28 01:34 - 017669223 _____ C:\Users\Acer\Documents\Defense News_Mind Control.pdf
2020-12-08 17:55 - 2020-07-28 01:31 - 000093517 _____ C:\Users\Acer\Documents\Watchtower letter about AA.pdf
2020-12-08 17:55 - 2020-07-26 23:47 - 000045847 _____ C:\Users\Acer\Documents\mom.pdf
2020-12-08 17:55 - 2020-07-26 23:47 - 000015385 _____ C:\Users\Acer\Documents\mom.odt
2020-12-08 17:55 - 2020-07-23 15:20 - 000028897 _____ C:\Users\Acer\Documents\Second Opinion Letter for Wells Fargo Claim.pdf
2020-12-08 17:55 - 2020-07-23 15:19 - 000010729 _____ C:\Users\Acer\Documents\Second Opinion Letter for Wells Fargo Claim.odt
2020-12-08 17:55 - 2020-07-18 01:22 - 000033317 _____ C:\Users\Acer\Documents\resolutions_council_99_toronto_e.pdf
2020-12-08 17:55 - 2020-07-15 16:12 - 000086042 _____ C:\Users\Acer\Documents\Before crying _freedom of speech_ you should know what it means.pdf
2020-12-08 17:55 - 2020-07-11 16:04 - 000000110 ____H C:\Users\Acer\Documents\.~lock.My%20Life%20as%20a%20Jehovahs%20Witness.odt_1.odt#
2020-12-08 17:55 - 2020-07-11 15:33 - 000019230 _____ C:\Users\Acer\Documents\My%20Life%20as%20a%20Jehovahs%20Witness.odt_1.odt
2020-12-08 17:55 - 2020-07-09 23:43 - 006994316 _____ C:\Users\Acer\Documents\Biophoton Communication_ Can Cells Talk Using Light_ _ MIT Technology Review.pdf
2020-12-08 17:55 - 2020-07-09 23:41 - 020946601 _____ C:\Users\Acer\Documents\Are There Optical Communication Channels in Our Brains_ _ MIT Technology Review.pdf
2020-12-08 17:55 - 2020-07-09 23:25 - 000253086 _____ C:\Users\Acer\Documents\DO GENES DETERMINE WHETHER WE ARE LESBIAN, GAY, BISEXUAL, OR STRAIGHT_.pdf
2020-12-08 17:55 - 2020-07-09 23:24 - 000292065 _____ C:\Users\Acer\Documents\Brief on Sexual Orientation and Genetic Determinism.pdf
2020-12-08 17:55 - 2020-07-09 23:23 - 000134059 _____ C:\Users\Acer\Documents\T2TNTOWC0G crime gene.pdf
2020-12-08 17:55 - 2020-07-09 23:21 - 000134059 _____ C:\Users\Acer\Documents\is crime in the genes the gene illusion.pdf
2020-12-08 17:55 - 2020-07-09 21:33 - 000300264 _____ C:\Users\Acer\Documents\Truth about Behavioural Genetics.pdf
2020-12-08 17:55 - 2020-07-09 21:32 - 000316469 _____ C:\Users\Acer\Documents\A Brief History of the Gay Gene.pdf
2020-12-08 17:55 - 2020-07-09 12:28 - 000000886 _____ C:\Users\Acer\Documents\letter to ian willis freepdfhosting.txt
2020-12-08 17:55 - 2020-07-09 12:13 - 000287959 _____ C:\Users\Acer\Documents\Teacher Arrested at JFK_Funny.pdf
2020-12-08 17:55 - 2020-07-09 04:07 - 000045683 _____ C:\Users\Acer\Documents\Aquino From PSYOP to Mindwar.pdf
2020-12-08 17:55 - 2020-07-09 04:04 - 000131851 _____ C:\Users\Acer\Documents\Influence of Pharmaceutical industry.pdf
2020-12-08 17:55 - 2020-07-09 04:02 - 000589468 _____ C:\Users\Acer\Documents\UKReport_Influence of Pharmaceutical Industry.pdf
2020-12-08 17:55 - 2020-07-09 03:58 - 000256454 _____ C:\Users\Acer\Documents\no genetic association schizophrenia.pdf
2020-12-08 17:55 - 2020-07-09 03:53 - 000335600 _____ C:\Users\Acer\Documents\No evidence that schizophrenia candidate genes are more associated with schizophrenia than non-candidate genes.pdf
2020-12-08 17:55 - 2020-07-09 03:48 - 030629016 _____ C:\Users\Acer\Documents\Debunking the Two Chemical Imbalance Myths, Again _ Psychiatric Times.pdf
2020-12-08 17:55 - 2020-07-09 03:45 - 005402216 _____ C:\Users\Acer\Documents\The Troubled History of Psychiatry _ The New Yorker.pdf
2020-12-08 17:55 - 2020-07-09 03:40 - 000184265 _____ C:\Users\Acer\Documents\Twin Concordance for Schizophrenia Is Not Entirely Hereditary.pdf
2020-12-08 17:55 - 2020-07-09 03:38 - 001095851 _____ C:\Users\Acer\Documents\Four False Pillars of biopsychiatry.pdf
2020-12-08 17:55 - 2020-07-09 02:19 - 000090107 _____ C:\Users\Acer\Documents\Playing the telephone game_linguistics.pdf
2020-12-08 17:55 - 2020-07-09 00:10 - 000342633 _____ C:\Users\Acer\Documents\CIA-RDP96-00792R000600440002-2_US Russia Mind Control Weapons.pdf
2020-12-08 17:55 - 2020-07-07 23:30 - 000062995 _____ C:\Users\Acer\Documents\Wells Fargo Claims Letter_Claim 10612208143_Engine Purchase.pdf
2020-12-08 17:55 - 2020-07-07 23:29 - 000014953 _____ C:\Users\Acer\Documents\Wells Fargo Claims Letter_Claim 10612208143_Engine Purchase.odt
2020-12-08 17:55 - 2020-07-05 16:23 - 000388826 _____ C:\Users\Acer\Documents\The_Phenomenology_pf_Group_Stalking.pdf
2020-12-08 17:55 - 2020-07-05 16:16 - 000001788 _____ C:\Users\Acer\Documents\Mind Control Papers.txt
2020-12-08 17:55 - 2020-05-23 18:47 - 001194121 _____ C:\Users\Acer\Documents\SCUI Unemployment Handbook.pdf
2020-12-08 17:55 - 2020-04-27 03:01 - 000014819 _____ C:\Users\Acer\Documents\Letter to SC UI.odt
2020-12-08 17:55 - 2020-04-25 17:53 - 000575982 _____ C:\Users\Acer\Documents\SC UI Certification 4_12 through 4_18 2020.oxps
2020-12-08 17:55 - 2020-04-25 17:50 - 000576319 _____ C:\Users\Acer\Documents\SC UI Certification 4_5 through 4_11 2020.oxps
2020-12-08 17:55 - 2020-04-25 17:30 - 000567717 _____ C:\Users\Acer\Documents\SC UI Certification 3_28 through 4_4 2020.oxps
2020-12-08 17:55 - 2020-04-25 17:25 - 000575895 _____ C:\Users\Acer\Documents\SC UI Certification 3_22 through 3_28 2020.oxps
2020-12-08 17:55 - 2020-04-25 16:26 - 000156190 _____ C:\Users\Acer\Documents\Pandemic Unemployment Assistance SC UI claim FYI.oxps
2020-12-08 17:55 - 2020-04-14 16:57 - 000032722 _____ C:\Users\Acer\Documents\SC UI Note.pdf
2020-12-08 17:55 - 2020-04-14 16:50 - 000009073 _____ C:\Users\Acer\Documents\SC UI Note.odt
2020-12-08 17:55 - 2020-03-30 17:13 - 000009864 _____ C:\Users\Acer\Documents\Nationwide Recovery Letter Requesting Itemized Statement.odt
2020-12-08 17:55 - 2020-03-29 16:31 - 001193337 _____ C:\Users\Acer\Documents\SC UI Benefits Handbook.pdf
2020-12-08 17:55 - 2020-03-18 00:10 - 000156432 _____ C:\Users\Acer\Documents\VerizonClaimAffidavit_451987788.pdf
2020-12-08 17:55 - 2020-02-28 21:28 - 000061021 _____ C:\Users\Acer\Documents\Annual_Care_Checklist_2020 Medical.pdf
2020-12-08 17:55 - 2020-01-16 19:19 - 002807578 _____ C:\Users\Acer\Documents\AU Health Bill 1_16_2017.pdf
2020-12-08 17:55 - 2020-01-14 15:21 - 000035500 _____ C:\Users\Acer\Documents\Dr. George Greg Text.odt
2020-12-08 17:55 - 2020-01-07 19:39 - 000309705 _____ C:\Users\Acer\Documents\Temporary Address Change Cancelled 1_7_2020 439pm.oxps
2020-12-08 17:55 - 2020-01-04 21:44 - 013483844 _____ C:\Users\Acer\Documents\SSDI Income Statement 2020.oxps
2020-12-08 17:55 - 2020-01-04 21:43 - 004832140 _____ C:\Users\Acer\Documents\Postal Service Temp Address Forward.oxps
2020-12-08 17:55 - 2020-01-01 16:10 - 001080377 _____ C:\Users\Acer\Documents\MS Healing Manual 2020.pdf
2020-12-08 17:55 - 2019-12-19 22:42 - 000852412 _____ C:\Users\Acer\Documents\Change of Address Confirmation USPS 12_19_2019 741pm.oxps
2020-12-08 17:55 - 2019-12-03 21:45 - 000495691 _____ C:\Users\Acer\Documents\Notary Public Reference Manual 2019_South Carolina.pdf
2020-12-08 17:55 - 2019-11-28 01:08 - 000582579 _____ C:\Users\Acer\Documents\form_1583 for anytime mailbox.pdf
2020-12-08 17:55 - 2019-11-27 04:12 - 000554272 _____ C:\Users\Acer\Documents\anytime mail box account info.oxps
2020-12-08 17:55 - 2019-09-21 23:50 - 006894124 _____ C:\Users\Acer\Documents\What Fullness Is_On getting weight loss surgery.pdf
2020-12-08 17:55 - 2019-09-21 23:29 - 012003166 _____ C:\Users\Acer\Documents\What Fullness Is_On getting weight loss surgery.oxps
2020-12-08 17:55 - 2019-09-17 17:23 - 001179828 _____ C:\Users\Acer\Documents\Itermitant fasting diet.oxps
2020-12-08 17:55 - 2019-09-10 17:03 - 000019848 _____ C:\Users\Acer\Documents\DoorDash Pay etc complaint 9_10_2019.odt
2020-12-08 17:55 - 2019-08-11 00:57 - 003739623 _____ C:\Users\Acer\Documents\Shepherd (sfl_E 2019) new or old.pdf
2020-12-08 17:55 - 2019-08-01 16:22 - 000144447 _____ C:\Users\Acer\Documents\jehovahs witnesses watchtower talking points for ex jws.pdf
2020-12-08 17:55 - 2019-06-25 16:36 - 000020992 _____ C:\Users\Acer\Documents\DoorDash App glitch report.odt
2020-12-08 17:55 - 2019-05-10 18:35 - 000470000 _____ C:\Users\Acer\Documents\Press release 2 jehovahs witnesses child abuse.oxps
2020-12-08 17:55 - 2019-05-10 18:28 - 000357719 _____ C:\Users\Acer\Documents\Jehovahs Witness Press Release 2 witness rule page 2.oxps
2020-12-08 17:55 - 2019-05-10 18:26 - 000406560 _____ C:\Users\Acer\Documents\Jehovahs Witness Press Release 2 witness rule page 1.oxps
2020-12-08 17:55 - 2019-05-03 17:27 - 000156236 _____ C:\Users\Acer\Documents\PineCone Research error message.pdf
2020-12-08 17:55 - 2019-04-22 20:57 - 000010134 _____ C:\Users\Acer\Documents\30 day notice to vacate mom to me_Angela S.odt
2020-12-08 17:55 - 2019-04-20 17:09 - 004645142 _____ C:\Users\Acer\Documents\Caring for patients who refuse blood a guide to good practice.pdf
2020-12-08 17:55 - 2019-04-18 00:40 - 001750936 _____ C:\Users\Acer\Documents\Everlance Mileage Instacart 2018.oxps
2020-12-08 17:55 - 2019-04-14 22:30 - 000359142 _____ C:\Users\Acer\Documents\darbbarbenterprises-outlook.com-trips-2018-01-01-2018-12-31.ods
2020-12-08 17:55 - 2019-04-14 22:19 - 000116943 _____ C:\Users\Acer\Documents\2018_1099-MISC_Instacart_Angela_Sullivan.pdf
2020-12-08 17:55 - 2019-03-26 15:37 - 000198953 _____ C:\Users\Acer\Documents\10 alternatives to Microsoft Word and Excel.pdf
2020-12-08 17:55 - 2019-02-12 17:14 - 000207300 _____ C:\Users\Acer\Documents\19 Words that don't belong on your resume_tech resumes.pdf
2020-12-08 17:55 - 2019-02-11 21:52 - 000059607 _____ C:\Users\Acer\Documents\Mediterranean-Food-List.pdf
2020-12-08 17:55 - 2019-02-05 02:39 - 004524722 _____ C:\Users\Acer\Documents\University will segragate white and black students_pluralist dot com.oxps
2020-12-08 17:55 - 2019-01-30 22:09 - 000002435 _____ C:\Users\Acer\Documents\Canon MX920 series On-screen Manual.lnk
2020-12-08 17:55 - 2019-01-22 14:48 - 002487740 _____ C:\Users\Acer\Documents\Watchtower says to destroy documents.oxps
2020-12-08 17:55 - 2019-01-22 14:37 - 001653333 _____ C:\Users\Acer\Documents\Sheparding the Flock elders manual book jehovahs witnesses.pdf
2020-12-08 17:55 - 2019-01-22 14:36 - 000145345 _____ C:\Users\Acer\Documents\Child abuse letter to congregations 2017.pdf
2020-12-08 17:55 - 2019-01-22 02:30 - 003504254 _____ C:\Users\Acer\Documents\something jehovah witness.pdf
2020-12-08 17:55 - 2019-01-20 19:48 - 000019890 _____ C:\Users\Acer\Documents\symbol and foreign language symbol fonts.odt
2020-12-08 17:55 - 2019-01-18 17:10 - 000011695 _____ C:\Users\Acer\Documents\10 yr retirement estimate at 100k per year.odt
2020-12-08 17:55 - 2018-12-26 15:25 - 000293276 _____ C:\Users\Acer\Documents\drug mule compensation report.pdf
2020-12-08 17:55 - 2018-07-21 17:54 - 007414001 _____ C:\Users\Acer\Documents\the gentile times reconsidered.pdf
2020-12-08 17:55 - 2018-04-18 02:14 - 000024595 _____ C:\Users\Acer\Documents\Liquid Needle uses.odt
2020-12-08 17:55 - 2017-12-19 18:14 - 000017018 _____ C:\Users\Acer\Documents\Last Will and Testament.odt
2020-12-08 17:55 - 2017-12-10 18:23 - 000000414 _____ C:\Users\Acer\Documents\small appliance repair shops north augusta.txt
2020-12-08 17:55 - 2017-08-21 17:37 - 007065656 _____ C:\Users\Acer\Documents\Helping Children Learn Mathematics.pdf
2020-12-08 17:55 - 2016-12-28 21:21 - 000017088 _____ C:\Users\Acer\Documents\Telephone work resume.odt
2020-12-08 17:55 - 2016-12-23 23:23 - 000061365 _____ C:\Users\Acer\Documents\Telephone work resume PDF.pdf
2020-12-08 17:55 - 2013-01-29 02:04 - 000117905 _____ C:\Users\Acer\Documents\Third_Party_Stalking and Abuse_by_Proxy Resources.pdf
2020-12-08 17:51 - 2020-12-15 16:53 - 000000000 ____D C:\Users\Acer\Desktop\Notes
2020-12-08 17:51 - 2020-12-08 17:51 - 000000000 ____D C:\Users\Acer\Desktop\Nicotine Anonymous Documents
2020-12-08 17:51 - 2020-12-08 17:51 - 000000000 ____D C:\Users\Acer\Desktop\Finances
2020-12-08 17:44 - 2020-12-12 00:58 - 000000000 ____D C:\Users\Acer\Desktop\Clean Up and Maintenance Tools
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Documents\SC UI Application Documents
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Work Product
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\UTB AFG Treasury
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Professional Writing
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Personal Writing
2020-12-08 17:44 - 2020-12-08 17:44 - 000000000 ____D C:\Users\Acer\Desktop\Alanon Meeting Documents
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-12-15 16:39 - 2019-12-07 04:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-12-15 16:03 - 2020-11-06 09:30 - 000000000 ___RD C:\Users\Acer\OneDrive
2020-12-15 16:01 - 2020-11-05 16:47 - 000840598 _____ C:\Windows\system32\PerfStringBackup.INI
2020-12-15 16:01 - 2019-12-07 04:13 - 000000000 ____D C:\Windows\INF
2020-12-15 16:00 - 2020-11-06 09:40 - 000000000 ____D C:\ProgramData\NVIDIA
2020-12-15 15:58 - 2020-11-06 10:33 - 000000000 __SHD C:\Users\Acer\IntelGraphicsProfiles
2020-12-15 15:54 - 2020-11-06 09:37 - 000000000 ____D C:\Intel
2020-12-15 15:54 - 2020-11-05 16:35 - 000008192 ___SH C:\DumpStack.log.tmp
2020-12-15 15:54 - 2020-11-05 16:35 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-12-15 15:54 - 2020-11-05 16:35 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-12-15 09:55 - 2020-11-05 16:35 - 000291144 _____ C:\Windows\system32\FNTCACHE.DAT
2020-12-15 09:31 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer
2020-12-15 09:23 - 2020-11-06 11:56 - 000000000 ____D C:\Users\Acer\AppData\Local\D3DSCache
2020-12-14 09:18 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\AppReadiness
2020-12-12 09:30 - 2020-11-06 09:30 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3878838876-3164344232-606169047-1001
2020-12-12 09:30 - 2020-11-06 09:27 - 000002360 _____ C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-09 21:17 - 2019-12-07 04:03 - 000524288 _____ C:\Windows\system32\config\BBI
2020-12-09 21:16 - 2019-12-07 04:03 - 000000000 ____D C:\Windows\CbsTemp
2020-12-09 21:10 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer\AppData\Local\Packages
2020-12-09 21:07 - 2019-12-07 04:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-12-09 21:03 - 2019-12-07 04:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SystemResources
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\setup
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\oobe
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\migwiz
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Dism
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\bcastdvr
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Windows Defender
2020-12-09 21:02 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-12-09 20:51 - 2020-11-05 16:38 - 002876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2020-12-09 20:38 - 2020-11-06 10:38 - 000000000 ____D C:\Windows\system32\MRT
2020-12-09 20:37 - 2020-11-06 10:38 - 133736600 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-12-09 20:35 - 2020-11-05 16:35 - 000000000 ____D C:\Windows\system32\Drivers\wd
2020-12-09 20:19 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer\AppData\Local\ConnectedDevicesPlatform
2020-12-09 20:16 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\LiveKernelReports
2020-12-09 19:16 - 2020-11-05 16:34 - 000000000 ____D C:\Windows\Panther
2020-12-09 17:04 - 2020-11-06 09:27 - 000000000 ____D C:\Users\Acer\AppData\Local\VirtualStore
2020-12-09 16:01 - 2019-12-07 04:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-12-09 15:47 - 2020-11-06 09:28 - 000000000 ____D C:\Users\Acer\AppData\Local\Publishers
2020-12-09 00:50 - 2020-11-06 09:27 - 000000000 ____D C:\ProgramData\Packages
2020-12-09 00:48 - 2020-11-06 09:35 - 000000000 ____D C:\Users\Acer\AppData\Local\PlaceholderTileLogoFolder
2020-12-09 00:36 - 2020-11-06 09:27 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-12-08 23:50 - 2020-11-06 09:38 - 000000000 ____D C:\Users\Acer\AppData\Local\Comms
2020-12-08 21:44 - 2020-11-06 11:49 - 000000000 ____D C:\ProgramData\Package Cache
2020-12-08 21:16 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-12-08 19:00 - 2020-11-06 09:40 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2020-12-08 18:44 - 2019-12-07 04:14 - 000000000 ___SD C:\Program Files\Windows Sidebar
2020-12-08 18:44 - 2019-12-07 04:14 - 000000000 ___SD C:\Program Files (x86)\Windows Sidebar
2020-12-08 18:43 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\appcompat
2020-12-08 17:10 - 2020-11-06 10:32 - 000000000 ____D C:\ProgramData\Intel
2020-12-08 17:09 - 2020-11-06 10:33 - 000000000 ____D C:\Users\Acer\AppData\Local\Intel
2020-12-08 16:31 - 2020-11-06 11:51 - 000000000 ____D C:\Users\Acer\AppData\Local\NVIDIA Corporation
==================== Files in the root of some directories ========
2020-12-08 22:37 - 2020-12-08 22:37 - 000000458 _____ () C:\Users\Acer\AppData\Roaming\Drives Monitor_Settings.ini
2020-12-08 21:42 - 2020-12-08 21:42 - 000000218 _____ () C:\Users\Acer\AppData\Local\recently-used.xbel
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Addition.txt:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2020
Ran by Acer (15-12-2020 17:11:00)
Running from C:\Users\Acer\Desktop
Windows 10 Home Version 20H2 19042.685 (X64) (2020-11-05 21:43:14)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Acer (S-1-5-21-3878838876-3164344232-606169047-1001 - Administrator - Enabled) => C:\Users\Acer
Administrator (S-1-5-21-3878838876-3164344232-606169047-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3878838876-3164344232-606169047-503 - Limited - Disabled)
Guest (S-1-5-21-3878838876-3164344232-606169047-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3878838876-3164344232-606169047-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
8GadgetPack (HKLM-x32\...\{2F503139-7C61-4A82-9B0B-59A7A110FACB}) (Version: 7.0.0 - Helmut Buhler)
Amazon Kindle (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\Amazon Kindle) (Version: 1.27.0.56109 - Amazon)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Belarc Advisor 8.5c (HKLM-x32\...\Belarc Advisor) (Version: 8.5.3.0 - Belarc Inc.)
Blender (HKLM\...\{C39F5740-3CB7-44AC-B0A2-FA3B2754D02F}) (Version: 2.83.0 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.75 - Piriform)
Compare It! (HKLM-x32\...\Compare It!_is1) (Version: 4.0 - Grig Software)
Dolby Audio X2 Windows API SDK (HKLM\...\{F290F786-5F69-48D4-B20B-D21C7DE56EF0}) (Version: 0.8.8.88 - Dolby Laboratories, Inc.)
Excel (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\1fc5b090eab9aa41f8a2f5987367e6da) (Version: 1.0 - Excel)
Free File Viewer 2014 (HKLM-x32\...\FreeFileViewer_is1) (Version: 2014.2.16.0 - Bitberry Software) <==== ATTENTION
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 87.0.4280.88 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
Inkscape (HKLM-x32\...\Inkscape) (Version: 1.0.0- - Inkscape)
Interfathom TaskMerlin (HKLM-x32\...\{9994DB2E-5B78-4D7A-B446-1A071A4C4CD9}) (Version: 2.1.3 - Interfathom)
Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 85.0.564.67 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.59 - )
Microsoft OneDrive (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Mozilla Firefox 83.0 (x64 en-US) (HKLM\...\Mozilla Firefox 83.0 (x64 en-US)) (Version: 83.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 83.0 - Mozilla)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)
NVIDIA Graphics Driver 457.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 457.09 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
OpenOffice 4.1.4 (HKLM-x32\...\{BDB210E1-06C5-451F-BDAC-C18DDC7C2F14}) (Version: 4.14.9788 - Apache Software Foundation)
Opera Stable 42.0.2393.94 (HKLM-x32\...\Opera 42.0.2393.94) (Version: 42.0.2393.94 - Opera Software)
Opera Stable 72.0.3815.400 (HKLM-x32\...\Opera 72.0.3815.400) (Version: 72.0.3815.400 - Opera Software)
Outlook (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\6b0f23e57a39ebfbf2814acb1a24293d) (Version: 1.0 - Outlook)
Paltalk (HKLM-x32\...\Paltalk) (Version: - )
PowerPoint (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\319814cb56b667dff88f54e08be8f51f) (Version: 1.0 - PowerPoint)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8907.1 - Realtek Semiconductor Corp.)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 12.6 - Screaming Frog Ltd)
Scribus 1.4.8 (64bit) (HKLM\...\Scribus 1.4.8) (Version: 1.4.8 - The Scribus Team)
SQLiteStudio (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\{6e1c2c8a-4202-4c3e-b24b-b367e402d224}) (Version: 3.2.1 - SalSoft)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1212 - SUPERAntiSpyware.com)
Unknown File Handler (HKLM-x32\...\UFH_is1) (Version: 2015.10.20.0 - File.org)
USBPcap 1.1.0.0-g794bf26 (HKLM\...\USBPcap) (Version: - )
WinHTTrack Website Copier 3.48-22 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.22 - HTTrack)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
Wireshark 2.0.1 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.0.1 - The Wireshark developer community, hxxps://www.wireshark.org)
Word (HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\1b837d0bf93d01407352736c91b7bf50) (Version: 1.0 - Word)
Zinio Reader (HKLM-x32\...\{CFC139F4-4978-6A73-2616-38A2EC2812F4}) (Version: 1.1.9.100 - Zinio LLC)
Packages:
=========
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1910.3.0_x86__kgqvnymyfvs32 [2020-12-09] (king.com)
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation)
Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt [2020-11-06] (INTEL CORP) [Startup Task]
Mahjong Epic -> C:\Program Files\WindowsApps\KristanixStudiosAS.MahjongEpic_1.1.5.0_x64__nafbvgh473e28 [2020-12-09] (Kristanix Studios AS)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Studios) [MS Ad]
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation) [MS Ad]
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c [2020-12-09] (Skype)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0 [2020-11-06] (Spotify AB) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3878838876-3164344232-606169047-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Users\Acer\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\CoreTempReader.dll (AddGadgets IT -> )
CustomCLSID: HKU\S-1-5-21-3878838876-3164344232-606169047-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\Acer\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler) [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2020-10-22] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk\Remove settings.lnk -> C:\Program Files (x86)\Paltalk\ng_clean_settings.bat (No File)
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=leffmjdabcgaflkikcefahmlgpodjkdm
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=bjhmmnoficofgoiacjaajpkfndojknpb
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=opfacbhaojodjaojgocnibmklknchehf
ShortcutWithArgument: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=hikhggiobiflkdfdgdajcfklmcibbopi
==================== Loaded Modules (Whitelisted) =============
2017-10-12 08:23 - 2017-10-12 08:23 - 000988160 _____ () [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libxml2.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000170496 _____ () [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libxslt.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000164352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\apr-util.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000297472 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\avmedia.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001143808 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\basegfx.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000596992 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\bootstrap.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001175552 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\comphelpMSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000487936 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\configmgr.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000238080 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\cppu3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000587776 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\cppuhelper3MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000652800 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\deployment.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000353792 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\deploymentgui.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000151040 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\deploymentmisc.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000126464 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\dnd.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000887296 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\drawinglayer.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000047104 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\dtrans.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001580544 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\editeng.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000160768 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\emser.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000051712 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fileacc.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000226304 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\filterconfig1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000132608 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\for.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000202240 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\forui.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000091648 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fsstorage.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000055808 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ftransl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000485888 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwe.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000210432 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwi.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 002193920 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwk.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000313344 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000187392 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\helplinker.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000070656 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\hyphen.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000027136 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18nisolang1MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000029696 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18npaper.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001333248 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18npool.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000067072 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18nutilMSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000136192 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\introspection.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000107008 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\jvmfwk3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000134144 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libapr-1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000099840 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\librdf.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001257472 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\lng.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000068608 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\lnth.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000024064 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localebe1.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000104448 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localedata_en.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000107520 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localedata_es.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000718848 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localedata_euro.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000833536 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localedata_others.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000038912 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\mcnttype.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000083456 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\msci_uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000812032 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\msfilter.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000344576 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\oleautobridge.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000008704 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\onlinecheck.DLL
2017-10-12 08:23 - 2017-10-12 08:23 - 002456064 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ootk.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000368640 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\package2.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000097280 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\passwordcontainer.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000286720 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\raptor.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000156160 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\rasqal.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000121344 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\reflection.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000107008 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\reg3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001792512 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sal3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000013824 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\salhelper3MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000093184 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sax.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000168448 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sax.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 002291200 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sb.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 007617536 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sc.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000041984 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\scd.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000082944 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\serf.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 003658240 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sfx.dll
2017-10-12 09:28 - 2017-10-12 09:28 - 009828864 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
2017-10-12 08:23 - 2017-10-12 08:23 - 000290304 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sofficeapp.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000279040 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sot.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000183296 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\spell.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000205824 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\spl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000096768 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\stocservices.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000053760 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\store3.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000901120 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 003373056 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svt.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 003235328 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svx.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 006034432 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svxcore.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000117760 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sysdtrans.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000620544 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\tl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000231936 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucb1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000388608 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucbhelper4MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000344576 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpchelp1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000412160 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpdav1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000024576 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpexpand1.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000309248 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpfile1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000162816 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucppkg1.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000167424 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\unordf.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000367616 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\unoxml.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000053248 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\updatefeed.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000186880 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\updchk.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001104384 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\utl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000254976 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\uui.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000085504 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\uwinapi.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000662528 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\vbahelper.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 004172800 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\vcl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000099328 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\vos3MSC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000028672 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\wininetbe1.uno.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000791040 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xcr.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000045056 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xmlreader.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000238592 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xmlsecurity.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 003469312 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xo.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000396288 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xstor.dll
2020-12-08 18:44 - 2013-07-20 22:45 - 000056320 _____ (Helmut Buhler) [File not signed] C:\Program Files\Windows Sidebar\dwmapi.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 013914112 _____ (IBM Corporation and others) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\icudt40.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001072128 _____ (IBM Corporation and others) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\icuin40.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000951808 _____ (IBM Corporation and others) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\icuuc40.dll
2020-11-06 09:37 - 2020-11-06 09:37 - 040592896 _____ (Intel) [File not signed] C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2765.0_x64__8j3eq9eme6ctt\IGCC.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000180224 _____ (The cURL library, hxxp://curl.haxx.se/) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libcurl.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 001020928 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\LIBEAY32.dll
2017-10-12 08:23 - 2017-10-12 08:23 - 000218624 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\SSLEAY32.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2016-01-04] (Belarc, Inc. -> Belarc, Inc.)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 04:14 - 2019-12-07 04:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.43.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\StartupApproved\Run: => "Paltalk"
HKU\S-1-5-21-3878838876-3164344232-606169047-1001\...\StartupApproved\Run: => "PaltalkLauncher"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{6A2D2A66-9853-446E-B4FC-22E2C0E9CFF3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BF656232-9C11-4848-A765-4E241DFF9810}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0C4CA283-4764-451D-9B99-6085AFC28718}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B8952EF3-3C30-443D-89EF-CAFC332A5789}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7060C766-208C-4A39-843C-3D52D81049EE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{90169997-B8F4-4EFB-A46F-8103EEE89073}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C8C34533-5AED-4F3D-968F-E0DEE14859A5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8697360A-8862-4DE7-8E34-AD2198D27693}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EC7A070A-8D44-419D-A50B-90BDC4FD852B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A01D9A97-831D-4CDD-B8F2-0B5EDEBDDEA9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{AA4DD873-6849-4817-8BE4-8F6272B512D6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A77B4497-155F-4BE3-B4AE-8B075BE81088}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{D3757526-2AF8-40F2-9394-004CE80A948A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{CCD7EA49-7544-4CAF-B9CB-4B07D34A8479}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A9153E74-4888-4959-8503-E61E14985BE2}] => (Allow) C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe (Bitberry Software -> Bitberry Software)
FirewallRules: [{6A1F4259-9FFB-4DBF-8D04-360579F5F540}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{F69B725A-8995-40BB-9B57-12031F980D68}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9CDCFAA7-5FDB-4D31-9E79-C0C69E59A675}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{DC9FA7F7-6597-47F9-909F-B3383919A345}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A362483B-8096-4EB6-89C6-4A0BED9818A1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B6BDEC30-994C-4365-8489-45337BEAE590}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E3E8AEA7-05F2-4532-83F7-E1F2696D3590}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C31D4D85-B2B5-4AAB-BD22-EF9881C4B388}] => (Allow) C:\Program Files (x86)\Opera\72.0.3815.400\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{8B907B0D-9A35-4E12-B96C-46A6F868FC66}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{F656578D-0C7B-42D3-AE38-E733E8D2B463}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [TCP Query User{3D364531-7BDD-4379-82AC-C8FB6B8F8211}C:\program files (x86)\paltalk\qtwebengineprocess.exe] => (Block) C:\program files (x86)\paltalk\qtwebengineprocess.exe (The Qt Company Oy -> )
FirewallRules: [UDP Query User{562F02A7-F708-4C66-8058-C99B6B71BAC0}C:\program files (x86)\paltalk\qtwebengineprocess.exe] => (Block) C:\program files (x86)\paltalk\qtwebengineprocess.exe (The Qt Company Oy -> )
FirewallRules: [TCP Query User{947966D1-2D61-4DE0-90A3-ED0E9EAA0264}C:\users\acer\downloads\anydesk.exe] => (Allow) C:\users\acer\downloads\anydesk.exe => No File
FirewallRules: [UDP Query User{53D9CF2A-2D12-4A2F-A27D-9C008111AEFA}C:\users\acer\downloads\anydesk.exe] => (Allow) C:\users\acer\downloads\anydesk.exe => No File
FirewallRules: [{29F5CEB3-6478-4875-844C-A7F6251051CD}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{42237FB2-845A-479B-BFD6-9B6B47B9E741}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{41ED1713-3777-47E1-ABE5-900CDDD9B9AD}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{FB854711-00B7-49ED-903F-C8FA3ED6340F}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{CD558D1D-163E-4C56-B01B-456A6E14BA9E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
FirewallRules: [{93910515-2E87-4FB5-AE1F-47873CA841A7}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File
==================== Restore Points =========================
08-12-2020 18:06:26 Windows Modules Installer
09-12-2020 19:36:11 Dec92020735pm
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (12/15/2020 07:39:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbamtray.exe, version: 4.0.0.865, time stamp: 0x5fc55b58
Faulting module name: Qt5Core.dll, version: 5.14.1.0, time stamp: 0x5f84e8d4
Exception code: 0xc0000005
Fault offset: 0x0000000000219dc5
Faulting process id: 0x15b4
Faulting application start time: 0x01d6d2de95d07466
Faulting application path: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Faulting module path: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
Report Id: 2626b0fa-3b28-49f8-a8e6-3fab45a92ee2
Faulting package full name:
Faulting package-relative application ID:
Error: (12/12/2020 10:48:12 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: The storage optimizer couldn't complete retrim on (C:) because: The operation requested is not supported by the hardware backing the volume. (0x8900002A)
Error: (12/12/2020 09:29:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbamtray.exe, version: 4.0.0.865, time stamp: 0x5fc55b58
Faulting module name: Qt5Core.dll, version: 5.14.1.0, time stamp: 0x5f84e8d4
Exception code: 0xc0000005
Fault offset: 0x0000000000219dc5
Faulting process id: 0x358
Faulting application start time: 0x01d6d092bb12bbbd
Faulting application path: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Faulting module path: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
Report Id: 58ec6cb9-31e7-424a-a22a-9eba150a830d
Faulting package full name:
Faulting package-relative application ID:
Error: (12/09/2020 08:08:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.19041.508, time stamp: 0xcd97c98b
Faulting module name: KERNELBASE.dll, version: 10.0.19041.572, time stamp: 0x1183946c
Exception code: 0xe0464645
Fault offset: 0x000000000010b65c
Faulting process id: 0x4ac
Faulting application start time: 0x01d6cdec18eba223
Faulting application path: C:\Windows\system32\dwm.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: 12f2620f-7279-4eec-9e87-03daa2fa8b17
Faulting package full name:
Faulting package-relative application ID:
Error: (12/09/2020 04:01:10 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center failed to validate caller with error %1.
Error: (12/09/2020 03:31:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: YourPhone.exe, version: 1.20111.125.0, time stamp: 0x5fc72458
Faulting module name: KERNELBASE.dll, version: 10.0.19041.572, time stamp: 0x1183946c
Exception code: 0xc000027b
Fault offset: 0x000000000010b65c
Faulting process id: 0x23d0
Faulting application start time: 0x01d6ce665ac22f5c
Faulting application path: C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20111.125.0_x64__8wekyb3d8bbwe\YourPhone.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: b9c4d4c3-0abd-4479-b519-f05195a0ac38
Faulting package full name: Microsoft.YourPhone_1.20111.125.0_x64__8wekyb3d8bbwe
Faulting package-relative application ID: App
Error: (12/09/2020 02:53:39 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 DESKTOP-58JI9LT.local. AAAA FE80:0000:0000:0000:208A:5A1D:BEB4:BD91
Error: (12/09/2020 02:53:39 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.43.77:5353 16 DESKTOP-58JI9LT.local. AAAA 2600:1005:B01F:1B23:208A:5A1D:BEB4:BD91
System errors:
=============
Error: (12/15/2020 03:54:42 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 3:38:15 PM on 12/15/2020 was unexpected.
Error: (12/15/2020 09:55:32 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 9:30:08 AM on 12/15/2020 was unexpected.
Error: (12/15/2020 09:30:08 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 9:05:36 AM on 12/15/2020 was unexpected.
Error: (12/14/2020 11:09:09 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 10:19:40 AM on 12/14/2020 was unexpected.
Error: (12/14/2020 09:10:25 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 6:48:41 PM on 12/12/2020 was unexpected.
Error: (12/12/2020 12:02:52 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:27:00 AM on 12/12/2020 was unexpected.
Error: (12/12/2020 12:56:24 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 7:22:53 PM on 12/11/2020 was unexpected.
Error: (12/11/2020 10:43:53 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:49:42 PM on 12/10/2020 was unexpected.
Windows Defender:
===================================
Date: 2020-12-09 20:59:27.6780000Z
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {E8341D21-0E4B-41AD-8452-3AA816B3DFD5}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2020-12-08 18:37:05.5870000Z
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {E5FA8A57-1444-4579-AF0F-63EAACC3E40F}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2020-12-08 17:30:31.3160000Z
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2020-12-08 17:30:31.3150000Z
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2020-12-08 17:30:31.3140000Z
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2020-12-08 17:30:31.3050000Z
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2020-12-08 17:30:31.3040000Z
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.327.446.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.17600.5
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
CodeIntegrity:
===================================
Date: 2020-12-15 16:59:57.6320000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-12-15 16:59:57.6310000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-12-15 16:59:57.1720000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-12-15 16:59:57.1710000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-12-15 16:59:49.1360000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-12-15 16:59:49.1340000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-12-15 16:59:48.5180000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-12-15 16:59:48.5170000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: Insyde Corp. V1.19 07/13/2018
Motherboard: CFL Freed_CFS
Processor: Intel® Core™ i5-8300H CPU @ 2.30GHz
Percentage of memory in use: 64%
Total physical RAM: 8034.3 MB
Available physical RAM: 2816.8 MB
Total Virtual: 9314.3 MB
Available Virtual: 2093.98 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:930.9 GB) (Free:864.58 GB) NTFS
\\?\Volume{322fa14b-4559-4851-a221-10eeeb564196}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{90d6380f-062f-490e-8a47-7615603a4aa9}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
. Thanks again.
Sign In
Create Account
