Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 03.05.2018 Ran by sean (administrator) on TOXINBURN (05-05-2018 19:30:05) Running from H:\ Loaded Profiles: sean (Available Profiles: sean & Mcx1-TOXINBURN & Mcx2-TOXINBURN) Platform: Windows 10 Pro Version 1709 16299.371 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe () C:\Program Files (x86)\Visualware BCS\NetQCheckHTML5Agent.exe (Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1813.286.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe (Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe (MediaMall Technologies, Inc.) C:\Program Files (x86)\MediaMall\MediaMallServer.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Corsair Components, Inc.) C:\Program Files (x86)\Corsair\Corsair Utility Engine\CUE.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Discord Inc.) C:\Users\sean\AppData\Local\Discord\app-0.0.301\Discord.exe (Discord Inc.) C:\Users\sean\AppData\Local\Discord\app-0.0.301\Discord.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe () C:\Program Files\ScreenShooter5\ScreenShooter5.exe (TODO: ) C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe (ASUSTek) C:\Program Files (x86)\ASUS\GPU TweakII\ASUSGPUFanService.exe (TODO: ) C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15040.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe () C:\Program Files\WindowsApps\Microsoft.XboxApp_39.39.21002.0_x64__8wekyb3d8bbwe\XboxApp.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16781824 2017-01-11] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2017-01-11] (Realtek Semiconductor) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508104 2015-10-30] (Adobe Systems Incorporated) HKLM\...\Run: [boinctray] => C:\Program Files\BOINC\boinctray.exe [69416 2015-12-17] (Space Sciences Laboratory) HKLM\...\Run: [boincmgr] => C:\Program Files\BOINC\boincmgr.exe [8746792 2015-12-17] (Space Sciences Laboratory) HKLM\...\Run: [Windows Mobile Device Center] => C:\WINDOWS\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17406072 2017-01-23] (Logitech Inc.) HKLM\...\Run: [Connectify Hotspot] => C:\Program Files (x86)\Connectify\Connectify.exe [3036216 2017-07-27] (Connectify) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880 2018-01-05] (Adobe Systems, Incorporated) HKLM-x32\...\Run: [VPN Watcher] => C:\Users\sean\Desktop\VPN WATCHER\VPNWatcher.exe [305664 2013-06-30] (Freddi.de) HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3642688 2018-04-23] (Dropbox, Inc.) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [1057240 2017-11-17] (DivX, LLC) HKLM-x32\...\Run: [IncrediBuild Agent Monitor] => C:\Program Files (x86)\Xoreax\IncrediBuild\BuildTrayIcon.exe [189920 2017-02-28] (Xoreax Software Ltd.) HKLM-x32\...\Run: [SoundDeck] => C:\Program Files (x86)\Samson\SoundDeck\SoundDeck.exe [2969288 2015-10-16] (Andrea Electronics Corporation) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1314432 2017-03-16] (CANON INC.) HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596664 2018-01-15] (Razer Inc.) HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [51416 2017-12-12] (Copyright (c) 2017 Plays.tv, LLC) HKLM-x32\...\Run: [Sound Blaster Z-Series Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe [877056 2014-11-24] (Creative Technology Ltd) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation) HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CUE.exe [21430992 2018-03-27] (Corsair Components, Inc.) HKLM\...\Policies\Explorer: [NoViewOnDrive] 0 HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKLM\...\Policies\Explorer: [NoViewContextMenu] 0 HKLM\...\Policies\Explorer: [NoShellSearchButton] 0 HKLM\...\Policies\Explorer: [NoFind] 0 HKLM\...\Policies\Explorer: [NoFile] 0 HKLM\...\Policies\Explorer: [HideClock] 0 HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0 HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0 HKLM\...\Policies\Explorer: [NoSetFolders] 0 HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKLM\...\Policies\Explorer: [NoSetTaskbar] 0 HKLM\...\Policies\Explorer: [NoDeletePrinter] 0 HKLM\...\Policies\Explorer: [NoDFSTab] 0 HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0 HKLM\...\Policies\Explorer: [NoLogoff] 0 HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0 HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0 HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKLM\...\Policies\Explorer: [NoResolveSearch] 0 HKLM\...\Policies\Explorer: [NoSaveSettings] 0 HKLM\...\Policies\Explorer: [NoHardwareTab] 0 HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0 HKLM\...\Policies\Explorer: [NoDesktop] 0 HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0 HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0 HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0 HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0 HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoShellSearchButton] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoFind] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0 HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoTrayItemsDisplay] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0 HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0 HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0 HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0 HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0 HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoShellSearchButton] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoFind] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0 HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoTrayItemsDisplay] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [5142664 2014-12-21] (Plex, Inc.) HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [Uploader] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe [127080 2014-09-17] (Seagate Technology LLC) HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [Speech Recognition] => C:\WINDOWS\Speech\Common\sapisvr.exe [44032 2017-09-29] (Microsoft Corporation) HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [ScreenShooter] => C:\Program Files\ScreenShooter5\ScreenShooter5.exe [967680 2015-09-19] () HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [Octoshape Streaming Services] => C:\Users\sean\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS) HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9856176 2017-09-20] (Piriform Ltd) HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [Clipdiary] => C:\Program Files (x86)\Clipdiary\clipdiary.exe [5579776 2017-02-17] () HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [VideoGuardMonitor] => C:\Users\sean\AppData\Local\Cisco\VideoGuardPlayer\VideoGuardMonitor\CiscoVideoGuardMonitor.exe [4155656 2017-06-20] (Cisco) HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [f.lux] => C:\Users\sean\AppData\Local\FluxSoftware\Flux\flux.exe [1681400 2018-01-11] (f.lux Software LLC) HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46214128 2018-04-12] () HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Run: [Spotify Web Helper] => C:\Users\sean\AppData\Roaming\Spotify\SpotifyWebHelper.exe [782736 2018-03-27] (Spotify Ltd) HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\system: [DisableCMD] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\system: [NoDispAppearancePage] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\system: [NoDispBackgroundPage] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\system: [NoDispSettingsPage] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoViewOnDrive] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoShellSearchButton] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoFind] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoFile] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [HideClock] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoTrayContextMenu] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoTrayItemsDisplay] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoSetFolders] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoSetTaskbar] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoDeletePrinter] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoDFSTab] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoLogoff] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoWindowsUpdate] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoEncryptOnMove] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoResolveSearch] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoHardwareTab] 0 HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Policies\Explorer: [NoStartMenuSubFolders] 0 HKU\S-1-5-18\...\Policies\system: [DisableCMD] 0 HKU\S-1-5-18\...\Policies\system: [NoDispAppearancePage] 0 HKU\S-1-5-18\...\Policies\system: [NoDispBackgroundPage] 0 HKU\S-1-5-18\...\Policies\system: [NoDispSettingsPage] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoViewOnDrive] 0 HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoShellSearchButton] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoFind] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0 HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoTrayContextMenu] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoTrayItemsDisplay] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoWindowsUpdate] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoHardwareTab] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk [2018-03-14] ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (No File) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2018-03-14] ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (No File) Startup: C:\Users\sean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Emby Server.lnk [2018-03-05] ShortcutTarget: Emby Server.lnk -> C:\Users\sean\AppData\Roaming\MediaBrowser-Server\System\MediaBrowser.ServerApplication.exe () Startup: C:\Users\sean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2017-07-12] ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\sean\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook) Startup: C:\Users\sean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Media Browser Server.lnk [2016-03-13] ShortcutTarget: Media Browser Server.lnk -> C:\Users\sean\AppData\Roaming\MediaBrowser-Server\System\MediaBrowser.ServerApplication.exe () Startup: C:\Users\sean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\munich.lnk [2018-05-02] ShortcutTarget: munich.lnk -> C:\Program Files (x86)\Brugge\Obese.exe (No File) Startup: C:\Users\sean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Twitch.lnk [2018-03-25] ShortcutTarget: Twitch.lnk -> C:\Users\sean\AppData\Roaming\Twitch\Bin\Twitch.exe (Twitch Interactive, Inc.) Startup: C:\Users\sean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VPNWatcher.exe - Shortcut.lnk [2016-03-13] ShortcutTarget: VPNWatcher.exe - Shortcut.lnk -> C:\Users\sean\Desktop\VPN WATCHER\VPNWatcher.exe (Freddi.de) CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{11f25a4c-0e2f-4a4d-9189-a3a6a063cbb8}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{11f25a4c-0e2f-4a4d-9189-a3a6a063cbb8}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{1574334f-ef5f-485e-865e-8141024f0afb}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{1574334f-ef5f-485e-865e-8141024f0afb}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{6aebca8c-7a27-44fc-9a87-4e4bf81e3012}: [NameServer] 10.4.0.1 Tcpip\..\Interfaces\{6aebca8c-7a27-44fc-9a87-4e4bf81e3012}: [DhcpNameServer] 8.8.8.8 8.8.4.4 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{a20d2dd0-07ef-4e81-a86f-03c086424bb1}: [NameServer] 208.67.222.222,208.67.220.220 Tcpip\..\Interfaces\{a4dbc93d-ad59-454c-9609-8050311bd8f8}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{b1144dad-6cc1-42cf-9f35-1be552e9aa26}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{b1144dad-6cc1-42cf-9f35-1be552e9aa26}: [DhcpNameServer] 8.8.8.8 8.8.4.4 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{c3e92e90-2a49-4604-918c-6454d171eb5b}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{df7a0101-7772-4ac2-8ace-0919af3ef14c}: [DhcpNameServer] 192.168.44.1 Internet Explorer: ================== SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2037235347-66412534-4019770740-1001 -> {10B86091-E83E-409B-BE22-B12932D7A968} URL = hxxps://search.yahoo.com/search?p={searchTerms}&intl=us&fr=chrf-iryus&type=ypi_znlrm_00_00_ie SearchScopes: HKU\S-1-5-21-2037235347-66412534-4019770740-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2017-12-13] (Internet Download Manager, Tonec Inc.) BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2016-02-03] (RealDownloader) BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> G:\Applications\Office15\OCHelper.dll [2018-02-15] (Microsoft Corporation) BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO: No Name -> {56bc31de-97ab-4563-8599-ad5d4e9800f9} -> No File BHO: No Name -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> No File BHO: PlayOn -> {9A87E478-A2BD-44C4-9F8C-D3989A5271B1} -> C:\Program Files (x86)\MediaMall\toolbar\pobho64.dll [2015-10-29] (MediaMall Technologies, Inc.) BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar64.dll => No File BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> G:\Applications\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation) BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2017-12-13] (Internet Download Manager, Tonec Inc.) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2016-02-03] (RealDownloader) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24] (Microsoft Corporation) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-19] (Oracle Corporation) BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll [2016-08-03] (Perfect World Entertainment Inc) BHO-x32: No Name -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> No File BHO-x32: PlayOn -> {9A87E478-A2BD-44C4-9F8C-D3989A5271B1} -> C:\Program Files (x86)\MediaMall\toolbar\pobho.dll [2015-10-29] (MediaMall Technologies, Inc.) BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated) BHO-x32: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar.dll => No File BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-19] (Oracle Corporation) BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated) Toolbar: HKLM - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - No File Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKLM - PlayOn - {9A87E478-A2BD-44C4-9F8C-D3989A5271B1} - C:\Program Files (x86)\MediaMall\toolbar\pobho64.dll [2015-10-29] (MediaMall Technologies, Inc.) Toolbar: HKLM - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar64.dll No File Toolbar: HKLM-x32 - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - No File Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - PlayOn - {9A87E478-A2BD-44C4-9F8C-D3989A5271B1} - C:\Program Files (x86)\MediaMall\toolbar\pobho.dll [2015-10-29] (MediaMall Technologies, Inc.) Toolbar: HKLM-x32 - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar.dll No File Toolbar: HKU\S-1-5-21-2037235347-66412534-4019770740-1001 -> VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - No File Toolbar: HKU\S-1-5-21-2037235347-66412534-4019770740-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2013-04-16] (Belarc, Inc.) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - G:\Applications\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation) Handler: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - No File FireFox: ======== FF ProfilePath: C:\Users\sean\AppData\Roaming\Mozilla\Firefox\Profiles\59fz5dpy.default-1490461102585 [2018-05-05] FF NetworkProxy: Mozilla\Firefox\Profiles\59fz5dpy.default-1490461102585 -> http", "localhost" FF Extension: (YouTube2mp3.to: Convert YouTube Video to MP3) - C:\Users\sean\AppData\Roaming\Mozilla\Firefox\Profiles\59fz5dpy.default-1490461102585\Extensions\contact@youtube2mp3.to.xpi [2017-05-17] [Legacy] FF Extension: (PureVPN – Best VPN Proxy Service for Privacy) - C:\Users\sean\AppData\Roaming\Mozilla\Firefox\Profiles\59fz5dpy.default-1490461102585\Extensions\enquiry@purevpn.com.xpi [2017-12-08] FF Extension: (MetaMask) - C:\Users\sean\AppData\Roaming\Mozilla\Firefox\Profiles\59fz5dpy.default-1490461102585\Extensions\webextension@metamask.io.xpi [2018-03-06] FF Extension: (YouTube MP3) - C:\Users\sean\AppData\Roaming\Mozilla\Firefox\Profiles\59fz5dpy.default-1490461102585\Extensions\yt2mp3@waldemar.b.xpi [2017-09-06] FF Extension: (CacheViewer) - C:\Users\sean\AppData\Roaming\Mozilla\Firefox\Profiles\59fz5dpy.default-1490461102585\Extensions\{71328583-3CA7-4809-B4BA-570A85818FBB}.xpi [2017-06-12] [Legacy] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - G:\Program Files (x86)\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: (Adobe Acrobat - Create PDF) - G:\Program Files (x86)\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2015-12-16] [Legacy] [not signed] FF HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi FF Extension: (IDM Integration Module) - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2018-02-28] FF HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\sean\AppData\Roaming\IDM\idmmzcc5 FF Extension: (IDM CC) - C:\Users\sean\AppData\Roaming\IDM\idmmzcc5 [2017-04-21] [Legacy] [not signed] FF HKU\S-1-5-21-2037235347-66412534-4019770740-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] [Legacy] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_29_0_0_140.dll [2018-05-04] () FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB) FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> G:\APPLIC~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-11-25] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_140.dll [2018-05-04] () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2017-10-17] (CANON INC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2017-11-21] (DivX, LLC) FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [No File] FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-19] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-19] (Oracle Corporation) FF Plugin-x32: @kingsfot.com/npkws -> C:\Program Files (x86)\Kingsoft\kingsoft antivirus\npkws.dll [No File] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-04-22] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-04-22] (NVIDIA Corporation) FF Plugin-x32: @pages.tvunetworks.com/WebPlayer -> C:\Program Files (x86)\TVUPlayer\npTVUAx.dll [2010-04-23] (TVU networks) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll [2016-08-03] (Perfect World Entertainment Inc) FF Plugin-x32: @playon.tv/PlayOnToolbar -> C:\Program Files (x86)\MediaMall\toolbar\npVT.dll [2015-10-29] (MediaMall Technologies, Inc.) FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\sean\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall) FF Plugin-x32: @real.com/nppl3260;version=18.1.3.100 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2016-03-09] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=18.1.3.100 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2016-03-09] (RealPlayer) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: Adobe Acrobat -> G:\Program Files (x86)\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2015-09-24] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-11-25] (Adobe Systems) FF Plugin HKU\S-1-5-21-2037235347-66412534-4019770740-1001: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\sean\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1702150-0-npoctoshape.dll [2017-02-15] (Octoshape ApS) FF Plugin HKU\S-1-5-21-2037235347-66412534-4019770740-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\sean\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-03-10] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-2037235347-66412534-4019770740-1001: electronicarts.com/GameFacePlugin -> C:\Users\sean\AppData\Roaming\Electronic Arts\Game Face\npGameFacePlugin.dll [2012-12-20] (Electronic Arts) FF Plugin HKU\S-1-5-21-2037235347-66412534-4019770740-1001: ubisoft.com/uplaypc -> D:\H.A.W.X. 2\orbit\npuplaypc.dll [No File] FF Plugin ProgramFiles/Appdata: C:\Users\sean\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2016-08-17] (Octoshape ApS) Chrome: ======= CHR DefaultProfile: Default CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?p={searchTerms}&fr=chrf-iryus&type=ypi_znlrm_00_00_chr CHR DefaultSearchKeyword: Default -> Yahoo CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10 CHR Profile: C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default [2018-05-03] CHR Extension: (Google Drive) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-08] CHR Extension: (VS Launcher) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmhicdplfejcchpmimlnohfadpimciaa [2016-10-02] CHR Extension: (Videostream for Google Chromecast™) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2017-10-07] CHR Extension: (RokuCast) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehplcmkdgicjjbiekngnhohcebckjfgj [2017-03-04] CHR Extension: (Google Docs Offline) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-04-08] CHR Extension: (AdBlock) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-04-24] CHR Extension: (Yahoo Partner) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpacaholihkepnhgeeiipghhgonbhdfb [2017-04-26] CHR Extension: (PlayOn) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\lggaaajacmlhgbpldaboipiinndchjgm [2017-03-09] CHR Extension: (Skype) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-12-05] CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-09-09] CHR Extension: (Streamers Connected) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbheinpjbaajkgnfjkkmkbcochbjknoa [2017-09-18] CHR Extension: (Webroot Password Manager) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngkhgikojglcgnckopipfdajaifmmnnc [2018-03-16] CHR Extension: (IDM Integration Module) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2018-03-05] CHR Extension: (Chrome Web Store Payments) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07] CHR Extension: (Chrome Media Router) - C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-27] CHR HKLM\...\Chrome\Extension: [ngkhgikojglcgnckopipfdajaifmmnnc] - hxxp://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2018-03-30] CHR HKU\S-1-5-21-2037235347-66412534-4019770740-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\sean\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2017-03-25] CHR HKU\S-1-5-21-2037235347-66412534-4019770740-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hpacaholihkepnhgeeiipghhgonbhdfb] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-2037235347-66412534-4019770740-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lggaaajacmlhgbpldaboipiinndchjgm] - C:\Program Files (x86)\MediaMall\toolbar\ce.crx [2015-10-29] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ngkhgikojglcgnckopipfdajaifmmnnc] - hxxp://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2018-03-30] ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [683696 2015-11-16] (Adobe Systems Incorporated) S2 AESMFilters; C:\WINDOWS\system32\AESMSr64.exe [103112 2014-06-08] (Andrea Electronics Corporation) S2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated) S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [88024 2016-08-03] (Perfect World Entertainment Inc) S2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe [382424 2018-01-05] (ASUSTeK Computer Inc.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6076936 2018-03-26] () S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2017-09-29] (Microsoft Corporation) S2 CLDTVHNService; C:\Program Files (x86)\DirecTV\DirecTV\Kernel\DMP\CLDTVHNService.exe [75048 2009-09-17] () R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [254520 2017-07-27] (Connectify) S2 CtHdaSvc; C:\WINDOWS\sysWow64\CtHdaSvc.exe [122888 2015-06-22] (Creative Technology Ltd) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-04] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-04] (Dropbox, Inc.) S2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2018-04-23] (Dropbox, Inc.) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [771240 2018-04-23] (EasyAntiCheat Ltd) S3 Emby; C:\Users\sean\AppData\Roaming\MediaBrowser-Server\System\MediaBrowser.ServerApplication.exe [146912 2017-07-25] () [File not signed] S2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [542320 2018-01-10] (Intel Corporation) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] () S2 IncrediBuild_Agent; C:\Program Files (x86)\Xoreax\IncrediBuild\BuildService.exe [1336800 2017-02-28] (Xoreax Software Ltd.) S2 IncrediBuild_Coordinator; C:\Program Files (x86)\Xoreax\IncrediBuild\CoordService.exe [3204576 2017-02-28] (Xoreax Software Ltd.) S2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21312 2017-03-30] (Microsoft Corporation) S2 KinectManagement; C:\Program Files\Microsoft Kinect Drivers\Service\KinectManagementService.exe [98816 2013-02-27] (Microsoft Corporation) [File not signed] S2 LightingService; C:\Program Files (x86)\LightingService\1.00.35\LightingService.exe [1224664 2017-11-24] (ASUSTek Computer Inc.) S2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-01-23] (Logitech Inc.) R2 MediaMall Server; C:\Program Files (x86)\MediaMall\MediaMallServer.exe [8277608 2017-04-13] (MediaMall Technologies, Inc.) R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2014-04-08] (Motorola Mobility LLC) S3 MsMpiLaunchSvc; C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe [27760 2016-06-13] () [File not signed] R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [523152 2018-03-14] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [523152 2018-03-14] (NVIDIA Corporation) S3 OpenVpnService; C:\Program Files (x86)\PureVPN\bin\openvpnserv2.exe [15872 2016-11-24] ( ) [File not signed] S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2158912 2018-04-10] (Electronic Arts) S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3028808 2018-04-10] (Electronic Arts) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed] S2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [55000 2017-12-12] (Copyright (c) 2017 Plays.tv, LLC) S2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2014-09-13] () S2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2015-02-05] () R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed] S2 PureVPNService; C:\Program Files (x86)\PureVPN\PureVPNService.exe [28672 2018-02-22] () [File not signed] S2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [439936 2018-01-09] (Razer Inc.) S2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [943232 2018-01-09] (Razer Inc.) S2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [147792 2017-08-11] (Razer Inc) R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2017-07-19] () S2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [282864 2018-04-17] () S2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [32544 2016-02-03] () S2 RealTimes Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1095440 2016-03-09] (RealNetworks, Inc.) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [320512 2017-01-11] (Realtek Semiconductor) S2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [533376 2018-03-25] (Razer Inc.) S2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [175752 2015-06-23] (Sandboxie Holdings, LLC) S2 Seagate Dashboard Services; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [16000 2014-09-17] (Seagate Technology LLC) S2 Seagate MobileBackup Service; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe [157776 2014-09-17] (Seagate Technology LLC) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2018-02-04] (Microsoft Corporation) S2 SpliCamService; C:\Program Files (x86)\SplitCam\SplitCamService.exe [321056 2017-05-18] (SplitCam Co.) S2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] S3 Te.Service; G:\CRACKING\DEBUG\Testing\Runtimes\TAEF\Wex.Services.exe [185344 2017-02-13] (Microsoft Corporation) [File not signed] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11293936 2018-04-03] (TeamViewer GmbH) S2 TVersityMediaServer; C:\ProgramData\TVersity\Media Server\MediaServer.exe [5279528 2012-08-10] () S2 Visualware application manager - NetQCheckHTML5Agent.exe; C:\Program Files (x86)\Visualware BCS\bcs.exe [128856 2017-03-04] () S2 VMAuthdService; Z:\VMWARE\vmware-authd.exe [87744 2014-11-20] (VMware, Inc.) S2 VMwareHostd; Z:\VMWARE\vmware-hostd.exe [12730560 2014-11-20] () S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [128232 2017-02-08] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation) S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.3.1.204\WsAppService.exe [437392 2016-11-16] (Wondershare) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 AESMAudL; C:\WINDOWS\system32\drivers\AESMAudL64.sys [23496 2014-06-08] (Andrea Electronics Corporation) S3 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc.) S3 AndnetBus; C:\WINDOWS\System32\drivers\lgandnetbus64.sys [29696 2016-03-02] (LG Electronics Inc.) S3 AndNetDiag; C:\WINDOWS\system32\DRIVERS\lgandnetdiag64.sys [30720 2016-03-02] (LG Electronics Inc.) S3 ANDNetModem; C:\WINDOWS\system32\DRIVERS\lgandnetmodem64.sys [37376 2016-03-02] (LG Electronics Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2017-04-15] () S3 atillk64; C:\ATIFLASH\atillk64.sys [14608 2006-07-19] (ATI Technologies Inc.) R3 automap; C:\WINDOWS\system32\DRIVERS\automap.sys [18776 2012-04-19] (Focusrite Audio Engineering Limited) R1 cfywlan2; C:\WINDOWS\system32\DRIVERS\cfywlan2.sys [46088 2017-08-27] (Connectify) R1 cnnctfy4; C:\WINDOWS\system32\DRIVERS\cnnctfy4.sys [53216 2017-08-27] (Connectify) R3 CorsairGamingAudioService; C:\WINDOWS\system32\DRIVERS\CorsairGamingAudioamd64.sys [95184 2018-01-03] (Corsair Components, Inc.) R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45528 2018-01-03] (Corsair) R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21968 2018-01-03] (Corsair) S3 cthda; C:\WINDOWS\system32\drivers\cthda.sys [1074472 2015-06-22] (Creative Technology Ltd) S3 cthdb; C:\WINDOWS\system32\DRIVERS\cthdb.sys [42792 2015-06-22] (Creative Technology Ltd) S3 CtxHdb; C:\WINDOWS\system32\DRIVERS\Ctxhdb.sys [48400 2017-06-22] (Creative Technology Ltd) S4 dndmykk; C:\WINDOWS\System32\drivers\tqufnlvu.sys [79064 2018-05-03] (Malwarebytes) S1 gahcqqkd; C:\WINDOWS\system32\drivers\gahcqqkd.sys [72816 2018-05-04] (Microsoft Corporation) S3 GLCKIO; C:\Program Files (x86)\ASUS\AURA\690b33e1-0462-4e84-9bea-c7552b45432a.sys [14976 2018-02-23] () S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [43664 2015-02-25] () R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [136128 2018-01-10] (Intel Corporation) S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [36568 2013-09-30] (IObit) R3 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [34064 2017-05-08] (ASUSTeK Computer Inc.) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-01-23] (Logitech Inc.) R3 msvad_simple; C:\WINDOWS\system32\drivers\povrtdev.sys [28528 2013-12-17] (MediaMall Technologies, Inc.) S3 mt7612US; C:\WINDOWS\System32\drivers\mt7612US.sys [377864 2015-12-09] (MediaTek Inc.) R3 Neo_VPN; C:\WINDOWS\System32\drivers\neo_vpn.sys [29744 2016-07-22] (PureVPN) S3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2017-09-29] (Intel Corporation) R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_2a800e6ebddb7f48\nvlddmkm.sys [17161248 2018-04-27] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31632 2018-03-14] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [59240 2018-04-24] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [59272 2018-03-14] (NVIDIA Corporation) R1 pfmfs_A1C; C:\WINDOWS\System32\Drivers\pfmfs_A1C.sys [258656 2014-07-11] (Pismo Technic Inc.) S3 pmxdrv; C:\WINDOWS\system32\drivers\pmxdrv.sys [31152 2017-02-15] () S3 psdrv3; C:\WINDOWS\System32\Drivers\psdrv3.sys [24472 2012-05-10] (Prime Sense Ltd.) R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] () S3 qcusbser; C:\WINDOWS\system32\DRIVERS\qcusbser.sys [252432 2016-03-24] (QUALCOMM Incorporated) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [1849752 2017-09-29] (Microsoft Corporation) S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-04-18] (Realtek ) S3 RtsUpx; C:\WINDOWS\system32\drivers\RtsUpx.sys [30328 2018-02-23] (Realtek Semiconductor Corp.) S3 rtux64w10; C:\WINDOWS\System32\drivers\rtux64w10.sys [348672 2017-09-29] (Realtek ) R3 rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [51736 2016-06-23] (Razer Inc) R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [45752 2017-07-19] (Razer, Inc.) R2 rzpnk; C:\WINDOWS\system32\drivers\rzpnk.sys [139704 2017-08-19] (Razer, Inc.) S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [190088 2015-06-23] (Sandboxie Holdings, LLC) R3 scvad_simple; C:\WINDOWS\system32\drivers\SplitCamAudio.sys [23552 2014-06-30] (Windows (R) Win 7 DDK provider) S3 splitcam_hd_driver; C:\WINDOWS\system32\DRIVERS\splitcam_hd_driver.sys [37600 2016-02-08] (Windows (R) Win 7 DDK provider) S4 ssheqmv; C:\WINDOWS\System32\drivers\rbinbhc.sys [79064 2018-05-02] (Malwarebytes) S3 USBPcap; C:\WINDOWS\system32\DRIVERS\USBPcap.sys [50224 2017-08-20] (USBPcap) S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [23040 2017-09-29] (Microsoft Corporation) R3 VBAudioVMAUXVAIOMME; C:\WINDOWS\system32\DRIVERS\vbaudio_vmauxvaio64_win7.sys [41192 2017-12-10] (Windows (R) Win 7 DDK provider) R3 VBAudioVMVAIOMME; C:\WINDOWS\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2016-06-20] (Windows (R) Win 7 DDK provider) R1 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [132120 2016-11-21] (Oracle Corporation) R3 voxaldriver; C:\WINDOWS\system32\DRIVERS\voxaldriverx64.sys [52976 2018-04-29] () R0 vsock; C:\WINDOWS\System32\drivers\vsock.sys [76480 2014-11-17] (VMware, Inc.) R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-08-28] (VMware, Inc.) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (MBB) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation) R1 Win10Pcap; C:\WINDOWS\system32\DRIVERS\Win10Pcap.sys [50304 2015-10-07] (Daiyuu Nobori, University of Tsukuba, Japan) R3 XSplit_Dummy; C:\WINDOWS\system32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited) S3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-06-06] (Intel Corporation) U0 cxtodk; system32\drivers\mbrbehlo.sys [X] U0 SR; no ImagePath U2 srservice; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-05-05 19:18 - 2018-05-05 19:18 - 000005275 _____ C:\Users\sean\Downloads\Fixlist(1).txt 2018-05-05 00:08 - 2018-05-05 18:40 - 000004150 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{7254CEF0-2680-427D-9146-9AF005F9C45B} 2018-05-04 23:31 - 2018-05-04 23:31 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gahcqqkd.sys 2018-05-04 23:14 - 2018-05-04 23:14 - 000032962 _____ C:\Users\sean\Desktop\mb-clean-results.txt 2018-05-04 23:14 - 2018-05-04 23:14 - 000000025 _____ C:\Users\sean\Desktop\mb-licenseinfo.txt 2018-05-04 23:12 - 2018-05-04 23:12 - 000004576 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier 2018-05-04 23:11 - 2018-05-04 23:12 - 000004422 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2018-05-04 23:11 - 2018-05-04 23:11 - 000004564 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier 2018-05-04 23:08 - 2018-05-04 23:08 - 000003178 _____ C:\WINDOWS\System32\Tasks\AdwCleaner_onReboot 2018-05-04 22:35 - 2018-05-04 22:35 - 061251584 _____ C:\WINDOWS\system32\config\BCD00000000 2018-05-04 21:02 - 2018-05-04 21:03 - 043604600 _____ (Microsoft Corporation) C:\Users\sean\Downloads\Windows-KB890830-x64-V5.59.exe 2018-05-04 21:00 - 2018-05-04 21:00 - 000003296 _____ C:\Users\sean\Downloads\fixlist.txt 2018-05-04 20:56 - 2018-05-04 20:56 - 000000112 ___RH C:\Users\sean\Downloads\Stinger.opt 2018-05-04 20:51 - 2018-05-04 20:51 - 000000000 ___DC C:\Quarantine 2018-05-04 20:47 - 2018-05-04 20:54 - 000000966 _____ C:\Users\sean\Downloads\Stinger_04052018_204748.html 2018-05-04 20:47 - 2018-05-04 20:47 - 000000000 ____D C:\Program Files\McAfee 2018-05-04 20:46 - 2018-05-04 20:56 - 000000000 ____D C:\Program Files (x86)\stinger 2018-05-04 20:45 - 2018-05-04 20:45 - 016855688 _____ (McAfee Inc) C:\Users\sean\Downloads\stinger32.exe 2018-05-04 20:44 - 2018-05-04 20:45 - 006762640 _____ (McAfee Inc.) C:\Users\sean\Downloads\realprotect.exe 2018-05-04 20:34 - 2018-05-04 20:51 - 000004578 _____ C:\Users\sean\Desktop\Rkill.txt 2018-05-04 20:34 - 2018-05-04 20:34 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\sean\Downloads\rkill.exe 2018-05-04 20:34 - 2018-05-04 20:34 - 000988112 _____ (Bleeping Computer, LLC) C:\Users\sean\Downloads\rkill64.exe 2018-05-03 23:43 - 2018-05-03 23:48 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2018-05-03 23:40 - 2018-05-03 23:41 - 000000000 ____D C:\Users\sean\Desktop\mbar 2018-05-03 23:27 - 2018-05-03 23:36 - 000063162 ____C C:\TDSSKiller.3.1.0.17_03.05.2018_23.27.14_log.txt 2018-05-03 23:27 - 2018-05-03 23:27 - 000000000 ____D C:\Program Files\Malwarebytes 2018-05-03 23:15 - 2018-05-03 23:15 - 000000000 ____D C:\Users\sean\AppData\Roaming\Obsidium 2018-05-03 22:15 - 2018-05-03 22:16 - 000000000 ____D C:\Users\sean\Desktop\Malwarebytes Anti-Malware Premium 3.4.5.2467 - SeuPirate 2018-05-03 22:06 - 2018-05-03 22:06 - 002405376 _____ (Farbar) C:\Users\sean\Downloads\FRST64.exe 2018-05-03 22:02 - 2018-05-03 22:02 - 000040304 _____ (Greatis Software) C:\WINDOWS\SysWOW64\Drivers\Partizan.sys 2018-05-03 21:46 - 2016-05-17 19:56 - 000000000 ____D C:\Users\sean\Desktop\TakeOwnership 2018-05-03 21:08 - 2018-05-04 02:11 - 000000000 ____D C:\Users\Public\Documents\RegRunInfo 2018-05-03 21:08 - 2018-05-03 21:08 - 000001113 _____ C:\Users\sean\Desktop\UnHackMe.lnk 2018-05-03 21:08 - 2018-05-03 21:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe 2018-05-03 21:08 - 2018-04-25 15:03 - 000014984 _____ (Greatis Software, LLC.) C:\WINDOWS\SysWOW64\Drivers\UnHackMeDrv.sys 2018-05-03 21:08 - 2015-12-28 11:32 - 000049968 _____ (Greatis Software) C:\WINDOWS\system32\partizan.exe 2018-05-03 20:43 - 2018-05-04 23:50 - 000003080 _____ C:\WINDOWS\System32\Tasks\GPU Tweak II 2018-05-03 20:07 - 2018-05-03 21:26 - 000000000 ___DC C:\ESD 2018-05-03 20:06 - 2018-05-03 20:06 - 000000000 __HDC C:\$Windows.~WS 2018-05-03 19:03 - 2018-05-03 19:07 - 000001098 _____ C:\Users\sean\Desktop\reset priveledges.txt.cmd 2018-05-03 19:02 - 2018-05-03 19:02 - 000000000 ____D C:\Program Files (x86)\Windows Resource Kits 2018-05-03 19:00 - 2018-05-03 19:00 - 000379392 _____ C:\Users\sean\Downloads\subinacl.msi 2018-05-03 18:55 - 2018-05-03 19:00 - 000001166 _____ C:\Users\sean\Desktop\update fix.txt.cmd 2018-05-03 18:48 - 2018-05-03 18:48 - 000079064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\tqufnlvu.sys 2018-05-03 06:45 - 2018-05-05 00:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico 2018-05-03 00:20 - 2018-05-03 00:20 - 000001247 _____ C:\Users\sean\Desktop\Windows10UpgraderApp.exe - Shortcut.lnk 2018-05-03 00:07 - 2018-05-03 00:10 - 000000269 _____ C:\Users\sean\Desktop\how i will fix this shitty computer and windows updates.txt 2018-05-02 23:58 - 2018-05-03 00:02 - 000062238 ____C C:\TDSSKiller.3.1.0.17_02.05.2018_23.58.08_log.txt 2018-05-02 23:57 - 2018-04-20 04:21 - 004949824 _____ (AO Kaspersky Lab) C:\Users\sean\Desktop\TDSSKiller.exe 2018-05-02 23:56 - 2018-05-02 23:56 - 000000434 ____C C:\TDSSKiller.3.1.0.5_02.05.2018_23.56.41_log.txt 2018-05-02 22:46 - 2018-05-02 22:46 - 000000000 ____D C:\Users\sean\AppData\Roaming\NVIDIA 2018-05-02 21:27 - 2018-05-02 21:41 - 000000000 ____D C:\Users\sean\AppData\Local\NVIDIA 2018-05-02 21:27 - 2018-02-22 21:54 - 000000122 _____ C:\Users\sean\Desktop\Keys.txt 2018-05-02 21:15 - 2018-05-02 21:39 - 000001522 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2018-05-02 21:05 - 2018-05-02 21:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2018-05-02 21:05 - 2018-03-14 08:01 - 002480520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2018-05-02 21:05 - 2018-03-14 08:01 - 002137488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2018-05-02 21:05 - 2018-03-14 08:01 - 001310608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll 2018-05-02 21:04 - 2018-05-02 21:04 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2018-05-02 21:04 - 2018-04-22 02:00 - 000132392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2018-05-02 21:04 - 2018-03-14 07:44 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat 2018-05-02 21:04 - 2018-03-05 01:18 - 000189784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2018-05-02 21:04 - 2018-03-05 01:18 - 000152408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2018-05-02 21:04 - 2018-03-01 21:04 - 000828216 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2018-05-02 21:04 - 2018-03-01 21:03 - 000960312 _____ C:\WINDOWS\system32\vulkan-1.dll 2018-05-02 21:04 - 2018-03-01 21:03 - 000683832 _____ C:\WINDOWS\system32\vulkaninfo.exe 2018-05-02 21:04 - 2018-03-01 21:03 - 000575800 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2018-05-02 20:59 - 2018-04-27 21:05 - 001418168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2018-05-02 20:59 - 2018-04-27 21:05 - 001091160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2018-05-02 20:59 - 2018-04-27 21:05 - 000626776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2018-05-02 20:59 - 2018-04-27 21:05 - 000517536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2018-05-02 20:59 - 2018-04-27 21:04 - 013725560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2018-05-02 20:59 - 2018-04-27 21:04 - 011271400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2018-05-02 20:59 - 2018-04-27 21:04 - 001990584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6439731.dll 2018-05-02 20:59 - 2018-04-27 21:04 - 001561688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2018-05-02 20:59 - 2018-04-27 21:04 - 001467992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6439731.dll 2018-05-02 20:59 - 2018-04-27 21:04 - 001215848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 031273728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 025987296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 001358536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 001349528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 001157208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 001070688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 001064240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 000904904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 000813912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 000652528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2018-05-02 20:59 - 2018-04-27 21:03 - 000634760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll 2018-05-02 20:59 - 2018-04-27 19:25 - 000068112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\SETB0B0.tmp 2018-05-02 20:59 - 2018-04-24 14:33 - 001688104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2018-05-02 20:59 - 2018-04-24 14:33 - 000226280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2018-05-02 20:59 - 2018-04-24 14:33 - 000046064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2018-05-02 20:59 - 2018-04-24 13:52 - 000059240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2018-05-02 20:59 - 2018-03-14 08:01 - 000059272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2018-05-02 20:58 - 2018-04-27 21:04 - 040346712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2018-05-02 20:58 - 2018-04-27 21:04 - 035250776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2018-05-02 20:58 - 2018-04-27 21:04 - 004347752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2018-05-02 20:58 - 2018-04-27 21:04 - 003759032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2018-05-02 20:58 - 2018-04-27 21:04 - 000749472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2018-05-02 20:58 - 2018-04-27 21:04 - 000608160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2018-05-02 20:58 - 2018-04-27 21:03 - 017779256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2018-05-02 20:58 - 2018-04-27 21:03 - 015191272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2018-05-02 20:58 - 2018-04-27 21:03 - 004822864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2018-05-02 20:58 - 2018-04-27 21:03 - 004085592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2018-05-02 20:39 - 2018-04-22 01:52 - 005947328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2018-05-02 20:39 - 2018-04-22 01:52 - 002612808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2018-05-02 20:39 - 2018-04-22 01:52 - 001768008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2018-05-02 20:39 - 2018-04-22 01:52 - 000634304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2018-05-02 20:39 - 2018-04-22 01:52 - 000451144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2018-05-02 20:39 - 2018-04-22 01:52 - 000124200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2018-05-02 20:39 - 2018-04-22 01:52 - 000082880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2018-05-02 20:39 - 2018-04-05 10:12 - 008153222 _____ C:\WINDOWS\system32\nvcoproc.bin 2018-05-02 20:38 - 2018-05-04 23:22 - 000000000 ____D C:\ProgramData\NVIDIA 2018-05-02 20:38 - 2018-03-05 01:34 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2018-05-02 20:37 - 2018-05-02 21:42 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2018-05-02 20:37 - 2018-05-02 21:38 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2018-05-02 20:37 - 2018-04-27 21:06 - 000552480 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2018-05-02 20:37 - 2018-04-27 21:06 - 000457144 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2018-05-02 20:23 - 2018-05-02 20:23 - 000046682 _____ C:\Users\sean\Downloads\wushowhide.diagcab 2018-05-02 19:47 - 2018-05-02 19:47 - 000079064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\rbinbhc.sys 2018-05-02 18:53 - 2018-05-02 18:53 - 000037552 _____ (Basil) C:\WINDOWS\system32\Drivers\WinDivert64.sys 2018-05-02 18:50 - 2018-05-03 18:48 - 000000000 ____D C:\Program Files (x86)\KMSPico 10.2.1 Final 2018-05-02 18:37 - 2018-05-04 23:16 - 000000000 ____D C:\Users\sean\AppData\LocalLow\uTorrent 2018-05-02 17:00 - 2018-05-03 00:14 - 000000792 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10 Update Assistant.lnk 2018-05-02 17:00 - 2018-05-03 00:14 - 000000780 _____ C:\Users\sean\Desktop\Windows 10 Update Assistant.lnk 2018-05-02 17:00 - 2018-05-02 17:57 - 000000000 __HDC C:\$GetCurrent 2018-05-02 17:00 - 2018-05-02 17:32 - 000000000 ___DC C:\Windows10Upgrade 2018-05-01 18:47 - 2018-05-01 18:47 - 000000000 ___DC C:\Windows.old 2018-04-30 23:28 - 2018-04-30 23:28 - 000000000 ___DC C:\NVIDIA 2018-04-30 22:21 - 2018-04-30 22:21 - 000000000 ____D C:\Users\sean\Desktop\acerxf270h driver 2018-04-30 20:50 - 2018-05-02 21:02 - 000000000 ____D C:\WINDOWS\LastGood 2018-04-29 12:38 - 2018-04-29 12:46 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software 2018-04-29 12:38 - 2018-04-29 12:38 - 000052976 _____ C:\WINDOWS\system32\Drivers\voxaldriverx64.sys 2018-04-29 12:38 - 2018-04-29 12:38 - 000002318 _____ C:\Users\sean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk 2018-04-29 12:38 - 2018-04-29 12:38 - 000002110 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk 2018-04-29 12:38 - 2018-04-29 12:38 - 000001346 _____ C:\Users\Public\Desktop\NCH Suite.lnk 2018-04-29 12:38 - 2018-04-29 12:38 - 000001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voxal Voice Changer.lnk 2018-04-29 12:38 - 2018-04-29 12:38 - 000001202 _____ C:\Users\Public\Desktop\Voxal Voice Changer.lnk 2018-04-29 12:38 - 2018-04-29 12:38 - 000001167 _____ C:\Users\sean\AppData\Roaming\trace_FilterInstaller.txt 2018-04-29 12:38 - 2018-04-29 12:38 - 000000000 ____D C:\Users\sean\AppData\Roaming\NCH Software 2018-04-29 12:38 - 2018-04-29 12:38 - 000000000 ____D C:\ProgramData\NCH Software 2018-04-29 12:38 - 2018-04-29 12:38 - 000000000 ____D C:\Program Files (x86)\NCH Software 2018-04-29 12:38 - 2018-04-29 12:38 - 000000000 _____ C:\Users\sean\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt 2018-04-28 23:28 - 2018-05-02 21:02 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation 2018-04-28 23:16 - 2018-04-30 22:48 - 000000000 ____D C:\WINDOWS\SysWOW64\directx 2018-04-27 23:56 - 2018-04-27 23:56 - 000001236 _____ C:\Users\Public\Desktop\Corsair Utility Engine.lnk 2018-04-27 23:56 - 2018-04-27 23:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Corsair Utility Engine 2018-04-26 19:41 - 2018-04-26 19:46 - 000000000 ____D C:\WINDOWS\LastGood.Tmp 2018-04-26 19:38 - 2018-04-26 19:38 - 000001595 _____ C:\Users\Public\Desktop\Razer Synapse.lnk 2018-04-26 17:35 - 2018-04-26 17:35 - 000000000 ____D C:\Users\sean\AppData\Roaming\npm-cache 2018-04-26 17:35 - 2018-04-26 17:35 - 000000000 ____D C:\Users\sean\.config 2018-04-26 17:31 - 2018-04-26 17:35 - 000000000 ____D C:\Users\sean\AppData\Roaming\npm 2018-04-26 17:31 - 2018-04-26 17:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js 2018-04-26 17:31 - 2018-04-26 17:34 - 000000000 ____D C:\Program Files\nodejs 2018-04-26 01:16 - 2018-04-26 01:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2018-04-25 18:35 - 2018-04-25 18:35 - 000000000 ____D C:\Users\sean\AppData\Local\HellbladeGame 2018-04-24 15:37 - 2018-04-24 15:37 - 000000000 ___DC C:\QUARANTINE-0000c449 2018-04-24 14:47 - 2018-04-24 14:47 - 000000000 ____D C:\Users\sean\AppData\Local\CrashReportClient 2018-04-24 09:11 - 2018-04-24 09:11 - 000000000 ____D C:\Users\sean\AppData\Local\Squad 2018-04-23 20:10 - 2018-04-23 20:10 - 000000222 _____ C:\Users\sean\Desktop\Squad.url 2018-04-23 05:15 - 2018-04-23 05:15 - 000051024 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2018-04-23 05:15 - 2018-04-23 05:15 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2018-04-23 05:15 - 2018-04-23 05:15 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2018-04-23 05:15 - 2018-04-23 05:15 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2018-04-15 17:34 - 2018-04-15 17:34 - 000000000 ____D C:\Users\sean\AppData\Local\PlayVig 2018-04-15 17:30 - 2018-04-15 17:30 - 000001718 _____ C:\Users\Public\Desktop\PlayVIG.lnk 2018-04-15 17:30 - 2018-04-15 17:30 - 000000000 ____D C:\Users\sean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlayVIG 2018-04-15 17:30 - 2018-04-15 17:30 - 000000000 ____D C:\Program Files (x86)\PlayVIG 2018-04-14 23:03 - 2018-04-03 14:37 - 000835064 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2018-04-14 23:03 - 2018-04-03 14:37 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2018-04-14 22:16 - 2018-04-14 22:16 - 000001150 _____ C:\Users\Public\Desktop\CpuCoreParking.lnk 2018-04-14 22:16 - 2018-04-14 22:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CpuCoreParking 2018-04-14 22:16 - 2018-04-14 22:16 - 000000000 ____D C:\Program Files (x86)\CpuCoreParking 2018-04-13 05:45 - 2018-04-13 05:45 - 004279968 _____ (NeoSoft Tools ) C:\Users\sean\AppData\Roaming\ctask.exe 2018-04-12 20:38 - 2018-04-12 20:38 - 000000549 _____ C:\Users\Public\Desktop\HellbladeGame.lnk 2018-04-12 20:38 - 2018-04-12 20:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hellblade Senuas Sacrifice 2018-04-12 16:07 - 2018-04-12 16:07 - 000000000 ____D C:\Users\sean\Desktop\Internet Download Manager IDM 6.30 Build 8 (Fixed) - SeuPirate 2018-04-12 05:19 - 2018-05-05 02:44 - 000000000 ___HD C:\$WINDOWS.~BT 2018-04-10 23:32 - 2018-03-30 00:08 - 001568160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2018-04-10 23:32 - 2018-03-30 00:08 - 000137112 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2018-04-10 23:32 - 2018-03-30 00:07 - 000300448 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2018-04-10 23:32 - 2018-03-30 00:07 - 000069528 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2018-04-10 23:32 - 2018-03-30 00:06 - 000166304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2018-04-10 23:32 - 2018-03-30 00:05 - 001206688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2018-04-10 23:32 - 2018-03-30 00:05 - 001056152 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2018-04-10 23:32 - 2018-03-30 00:04 - 000608160 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2018-04-10 23:32 - 2018-03-30 00:03 - 001277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2018-04-10 23:32 - 2018-03-30 00:03 - 000664992 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2018-04-10 23:32 - 2018-03-30 00:03 - 000059808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys 2018-04-10 23:32 - 2018-03-30 00:01 - 008600480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2018-04-10 23:32 - 2018-03-30 00:01 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2018-04-10 23:32 - 2018-03-30 00:01 - 000471968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2018-04-10 23:32 - 2018-03-30 00:00 - 002395040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2018-04-10 23:32 - 2018-03-29 23:59 - 000398744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2018-04-10 23:32 - 2018-03-29 23:59 - 000082840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2018-04-10 23:32 - 2018-03-29 23:58 - 000129432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys 2018-04-10 23:32 - 2018-03-29 23:54 - 002574240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2018-04-10 23:32 - 2018-03-29 23:53 - 007676304 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2018-04-10 23:32 - 2018-03-29 23:53 - 002710736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2018-04-10 23:32 - 2018-03-29 23:53 - 002220952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2018-04-10 23:32 - 2018-03-29 23:53 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2018-04-10 23:32 - 2018-03-29 23:52 - 021351632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2018-04-10 23:32 - 2018-03-29 23:52 - 002457504 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2018-04-10 23:32 - 2018-03-29 23:52 - 000428960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2018-04-10 23:32 - 2018-03-29 23:51 - 000902928 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2018-04-10 23:32 - 2018-03-29 23:51 - 000147872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2018-04-10 23:32 - 2018-03-29 23:19 - 006092152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2018-04-10 23:32 - 2018-03-29 23:13 - 002193176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2018-04-10 23:32 - 2018-03-29 23:10 - 000704080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2018-04-10 23:32 - 2018-03-29 23:09 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2018-04-10 23:32 - 2018-03-29 23:05 - 001491360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2018-04-10 23:32 - 2018-03-29 22:55 - 025253888 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2018-04-10 23:32 - 2018-03-29 22:46 - 018925056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2018-04-10 23:32 - 2018-03-29 22:46 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2018-04-10 23:32 - 2018-03-29 22:45 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2018-04-10 23:32 - 2018-03-29 22:43 - 019355136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2018-04-10 23:32 - 2018-03-29 22:41 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2018-04-10 23:32 - 2018-03-29 22:41 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2018-04-10 23:32 - 2018-03-29 22:40 - 011924992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2018-04-10 23:32 - 2018-03-29 22:40 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2018-04-10 23:32 - 2018-03-29 22:39 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2018-04-10 23:32 - 2018-03-29 22:38 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2018-04-10 23:32 - 2018-03-29 22:38 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2018-04-10 23:32 - 2018-03-29 22:37 - 003677184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2018-04-10 23:32 - 2018-03-29 22:36 - 003664384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2018-04-10 23:32 - 2018-03-29 22:36 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2018-04-10 23:32 - 2018-03-29 22:36 - 001560064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2018-04-10 23:32 - 2018-03-29 22:36 - 000825856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2018-04-10 23:32 - 2018-03-29 22:36 - 000098304 _____ C:\WINDOWS\system32\runexehelper.exe 2018-04-10 23:32 - 2018-03-29 22:35 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2018-04-10 23:32 - 2018-03-29 22:32 - 023674880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2018-04-10 23:32 - 2018-03-29 22:31 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2018-04-10 23:32 - 2018-03-29 22:30 - 012833280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2018-04-10 23:32 - 2018-03-29 22:30 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2018-04-10 23:32 - 2018-03-29 22:30 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2018-04-10 23:32 - 2018-03-29 22:29 - 001495552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2018-04-10 23:32 - 2018-03-29 22:29 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2018-04-10 23:32 - 2018-03-29 22:28 - 003121664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll 2018-04-10 23:32 - 2018-03-29 22:28 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2018-04-10 23:32 - 2018-03-29 22:28 - 000721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2018-04-10 23:32 - 2018-03-29 22:28 - 000595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2018-04-10 23:32 - 2018-03-29 22:28 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2018-04-10 23:32 - 2018-03-29 22:27 - 003170816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2018-04-10 23:32 - 2018-03-29 22:27 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2018-04-10 23:32 - 2018-03-29 22:27 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2018-04-10 23:32 - 2018-03-29 22:26 - 004747776 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2018-04-10 23:32 - 2018-03-29 22:26 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2018-04-10 23:32 - 2018-03-29 22:26 - 002209280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2018-04-10 23:32 - 2018-03-29 22:26 - 002086400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2018-04-10 23:32 - 2018-03-29 22:25 - 002628608 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2018-04-10 23:32 - 2018-03-29 22:25 - 001822720 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2018-04-10 23:32 - 2018-03-29 22:25 - 001548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2018-04-10 23:32 - 2018-03-29 22:25 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2018-04-10 23:32 - 2018-03-29 22:25 - 001055744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2018-04-10 23:32 - 2018-03-29 22:25 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2018-04-10 23:32 - 2018-03-29 22:24 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2018-04-10 23:32 - 2018-03-29 22:24 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2018-04-10 23:32 - 2018-03-29 22:23 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2018-04-10 23:32 - 2018-03-29 22:21 - 002511360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2018-04-10 23:32 - 2018-03-13 02:03 - 005907288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2018-04-10 23:32 - 2018-03-13 02:03 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2018-04-10 23:32 - 2018-03-13 02:02 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2018-04-10 23:32 - 2018-03-13 01:55 - 000979352 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2018-04-10 23:32 - 2018-03-13 01:54 - 000555936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2018-04-10 23:32 - 2018-03-13 01:53 - 001054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2018-04-10 23:32 - 2018-03-13 01:52 - 007384576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2018-04-10 23:32 - 2018-03-13 00:35 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2018-04-10 23:32 - 2018-03-13 00:33 - 007544832 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2018-04-10 23:32 - 2018-03-13 00:33 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2018-04-10 23:32 - 2018-03-13 00:33 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2018-04-10 23:32 - 2018-03-13 00:29 - 003211776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2018-04-10 23:32 - 2018-03-13 00:28 - 002857984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2018-04-10 23:32 - 2018-03-13 00:19 - 001615712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2018-04-10 23:32 - 2018-03-13 00:15 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2018-04-10 23:32 - 2018-03-13 00:08 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2018-04-10 23:32 - 2018-03-13 00:04 - 006481096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2018-04-10 23:32 - 2018-03-13 00:04 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2018-04-10 23:32 - 2018-03-12 23:38 - 006466560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2018-04-10 23:32 - 2018-03-12 23:37 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2018-04-10 23:32 - 2018-03-12 23:33 - 002464768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2018-04-10 23:31 - 2018-03-30 07:34 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe 2018-04-10 23:31 - 2018-03-30 00:18 - 001092008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2018-04-10 23:31 - 2018-03-30 00:14 - 000423320 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2018-04-10 23:31 - 2018-03-30 00:12 - 000599448 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2018-04-10 23:31 - 2018-03-30 00:12 - 000270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2018-04-10 23:31 - 2018-03-30 00:12 - 000075168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys 2018-04-10 23:31 - 2018-03-30 00:10 - 000924648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2018-04-10 23:31 - 2018-03-30 00:08 - 002513920 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2018-04-10 23:31 - 2018-03-30 00:08 - 001415296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2018-04-10 23:31 - 2018-03-30 00:06 - 000053152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pcw.sys 2018-04-10 23:31 - 2018-03-30 00:05 - 000748448 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2018-04-10 23:31 - 2018-03-30 00:05 - 000191824 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2018-04-10 23:31 - 2018-03-30 00:05 - 000073120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2018-04-10 23:31 - 2018-03-30 00:05 - 000066720 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll 2018-04-10 23:31 - 2018-03-30 00:05 - 000059808 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvhostsvc.dll 2018-04-10 23:31 - 2018-03-30 00:05 - 000035744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SDFHost.dll 2018-04-10 23:31 - 2018-03-30 00:05 - 000022800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumbase.dll 2018-04-10 23:31 - 2018-03-30 00:05 - 000022208 _____ (Microsoft Corporation) C:\WINDOWS\system32\IumSdk.dll 2018-04-10 23:31 - 2018-03-30 00:05 - 000020888 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2018-04-10 23:31 - 2018-03-30 00:05 - 000015632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumdll.dll 2018-04-10 23:31 - 2018-03-30 00:04 - 002002336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2018-04-10 23:31 - 2018-03-30 00:04 - 000035224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2018-04-10 23:31 - 2018-03-30 00:03 - 000508272 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2018-04-10 23:31 - 2018-03-30 00:03 - 000479920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll 2018-04-10 23:31 - 2018-03-30 00:03 - 000460704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2018-04-10 23:31 - 2018-03-30 00:03 - 000319864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2018-04-10 23:31 - 2018-03-30 00:03 - 000292384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2018-04-10 23:31 - 2018-03-30 00:03 - 000272288 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2018-04-10 23:31 - 2018-03-30 00:03 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll 2018-04-10 23:31 - 2018-03-30 00:03 - 000139680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2018-04-10 23:31 - 2018-03-30 00:03 - 000077216 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2018-04-10 23:31 - 2018-03-30 00:03 - 000022400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2018-04-10 23:31 - 2018-03-30 00:02 - 000128416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2018-04-10 23:31 - 2018-03-30 00:01 - 001209760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2018-04-10 23:31 - 2018-03-30 00:01 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2018-04-10 23:31 - 2018-03-30 00:01 - 000034208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fs_rec.sys 2018-04-10 23:31 - 2018-03-30 00:00 - 000103320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys 2018-04-10 23:31 - 2018-03-30 00:00 - 000094104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys 2018-04-10 23:31 - 2018-03-29 23:58 - 000898216 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2018-04-10 23:31 - 2018-03-29 23:58 - 000039328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys 2018-04-10 23:31 - 2018-03-29 23:57 - 001173576 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2018-04-10 23:31 - 2018-03-29 23:57 - 000711944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2018-04-10 23:31 - 2018-03-29 23:57 - 000540064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2018-04-10 23:31 - 2018-03-29 23:57 - 000121248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2018-04-10 23:31 - 2018-03-29 23:57 - 000109976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys 2018-04-10 23:31 - 2018-03-29 23:57 - 000081304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys 2018-04-10 23:31 - 2018-03-29 23:57 - 000031640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhv.sys 2018-04-10 23:31 - 2018-03-29 23:56 - 000018680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshhyperv.dll 2018-04-10 23:31 - 2018-03-29 23:55 - 000367344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2018-04-10 23:31 - 2018-03-29 23:55 - 000062880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fsdepends.sys 2018-04-10 23:31 - 2018-03-29 23:54 - 000749984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2018-04-10 23:31 - 2018-03-29 23:54 - 000670112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll 2018-04-10 23:31 - 2018-03-29 23:54 - 000645536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll 2018-04-10 23:31 - 2018-03-29 23:54 - 000461728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2018-04-10 23:31 - 2018-03-29 23:54 - 000408992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2018-04-10 23:31 - 2018-03-29 23:53 - 000831392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll 2018-04-10 23:31 - 2018-03-29 23:53 - 000549552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2018-04-10 23:31 - 2018-03-29 23:53 - 000495008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll 2018-04-10 23:31 - 2018-03-29 23:53 - 000246176 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2018-04-10 23:31 - 2018-03-29 23:53 - 000163744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2018-04-10 23:31 - 2018-03-29 23:53 - 000094080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll 2018-04-10 23:31 - 2018-03-29 23:53 - 000040352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClientPS.dll 2018-04-10 23:31 - 2018-03-29 23:52 - 000727456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2018-04-10 23:31 - 2018-03-29 23:52 - 000677280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2018-04-10 23:31 - 2018-03-29 23:52 - 000282528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys 2018-04-10 23:31 - 2018-03-29 23:52 - 000247480 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2018-04-10 23:31 - 2018-03-29 23:52 - 000192416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys 2018-04-10 23:31 - 2018-03-29 23:52 - 000054688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vdrvroot.sys 2018-04-10 23:31 - 2018-03-29 23:52 - 000047512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys 2018-04-10 23:31 - 2018-03-29 23:52 - 000028520 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll 2018-04-10 23:31 - 2018-03-29 23:51 - 000125568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll 2018-04-10 23:31 - 2018-03-29 23:51 - 000123800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys 2018-04-10 23:31 - 2018-03-29 23:51 - 000071208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys 2018-04-10 23:31 - 2018-03-29 23:50 - 001336344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2018-04-10 23:31 - 2018-03-29 23:50 - 000057760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbios.sys 2018-04-10 23:31 - 2018-03-29 23:49 - 000204184 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll 2018-04-10 23:31 - 2018-03-29 23:48 - 001778584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2018-04-10 23:31 - 2018-03-29 23:48 - 001628064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll 2018-04-10 23:31 - 2018-03-29 23:48 - 001420696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2018-04-10 23:31 - 2018-03-29 23:48 - 001101728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2018-04-10 23:31 - 2018-03-29 23:48 - 000819104 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe 2018-04-10 23:31 - 2018-03-29 23:48 - 000813984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll 2018-04-10 23:31 - 2018-03-29 23:48 - 000744856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll 2018-04-10 23:31 - 2018-03-29 23:48 - 000614304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2018-04-10 23:31 - 2018-03-29 23:48 - 000586800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp110_win.dll 2018-04-10 23:31 - 2018-03-29 23:48 - 000397720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll 2018-04-10 23:31 - 2018-03-29 23:48 - 000231328 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe 2018-04-10 23:31 - 2018-03-29 23:28 - 001929712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2018-04-10 23:31 - 2018-03-29 23:28 - 000777912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2018-04-10 23:31 - 2018-03-29 23:27 - 000481464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2018-04-10 23:31 - 2018-03-29 23:24 - 000212896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2018-04-10 23:31 - 2018-03-29 23:23 - 000566664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2018-04-10 23:31 - 2018-03-29 23:18 - 000016600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshhyperv.dll 2018-04-10 23:31 - 2018-03-29 23:16 - 000289824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2018-04-10 23:31 - 2018-03-29 23:13 - 000450936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2018-04-10 23:31 - 2018-03-29 23:13 - 000073896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll 2018-04-10 23:31 - 2018-03-29 23:12 - 000186520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2018-04-10 23:31 - 2018-03-29 23:10 - 000099240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll 2018-04-10 23:31 - 2018-03-29 23:07 - 001003160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2018-04-10 23:31 - 2018-03-29 23:06 - 000180632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll 2018-04-10 23:31 - 2018-03-29 23:05 - 000027040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVClientPS.dll 2018-04-10 23:31 - 2018-03-29 23:04 - 000417368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp110_win.dll 2018-04-10 23:31 - 2018-03-29 22:46 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2018-04-10 23:31 - 2018-03-29 22:46 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2018-04-10 23:31 - 2018-03-29 22:45 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2018-04-10 23:31 - 2018-03-29 22:44 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2018-04-10 23:31 - 2018-03-29 22:43 - 006576128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2018-04-10 23:31 - 2018-03-29 22:43 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2018-04-10 23:31 - 2018-03-29 22:43 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2018-04-10 23:31 - 2018-03-29 22:43 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2018-04-10 23:31 - 2018-03-29 22:43 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsnmp32.dll 2018-04-10 23:31 - 2018-03-29 22:43 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll 2018-04-10 23:31 - 2018-03-29 22:42 - 000397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2018-04-10 23:31 - 2018-03-29 22:42 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2018-04-10 23:31 - 2018-03-29 22:42 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2018-04-10 23:31 - 2018-03-29 22:41 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2018-04-10 23:31 - 2018-03-29 22:41 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2018-04-10 23:31 - 2018-03-29 22:41 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec 2018-04-10 23:31 - 2018-03-29 22:41 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll 2018-04-10 23:31 - 2018-03-29 22:41 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll 2018-04-10 23:31 - 2018-03-29 22:40 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll 2018-04-10 23:31 - 2018-03-29 22:40 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2018-04-10 23:31 - 2018-03-29 22:39 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2018-04-10 23:31 - 2018-03-29 22:38 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2018-04-10 23:31 - 2018-03-29 22:38 - 000966656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2018-04-10 23:31 - 2018-03-29 22:38 - 000956928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2018-04-10 23:31 - 2018-03-29 22:38 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2018-04-10 23:31 - 2018-03-29 22:38 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2018-04-10 23:31 - 2018-03-29 22:37 - 001298944 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2018-04-10 23:31 - 2018-03-29 22:36 - 002014720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2018-04-10 23:31 - 2018-03-29 22:36 - 001474560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2018-04-10 23:31 - 2018-03-29 22:36 - 000897024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2018-04-10 23:31 - 2018-03-29 22:35 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2018-04-10 23:31 - 2018-03-29 22:35 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2018-04-10 23:31 - 2018-03-29 22:35 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2018-04-10 23:31 - 2018-03-29 22:35 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2018-04-10 23:31 - 2018-03-29 22:35 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2018-04-10 23:31 - 2018-03-29 22:35 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\convertvhd.exe 2018-04-10 23:31 - 2018-03-29 22:35 - 000206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2018-04-10 23:31 - 2018-03-29 22:35 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2018-04-10 23:31 - 2018-03-29 22:35 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys 2018-04-10 23:31 - 2018-03-29 22:35 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys 2018-04-10 23:31 - 2018-03-29 22:33 - 008031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2018-04-10 23:31 - 2018-03-29 22:33 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe 2018-04-10 23:31 - 2018-03-29 22:33 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irda.sys 2018-04-10 23:31 - 2018-03-29 22:33 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2018-04-10 23:31 - 2018-03-29 22:33 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys 2018-04-10 23:31 - 2018-03-29 22:33 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys 2018-04-10 23:31 - 2018-03-29 22:33 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2018-04-10 23:31 - 2018-03-29 22:33 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dmvsc.sys 2018-04-10 23:31 - 2018-03-29 22:33 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2018-04-10 23:31 - 2018-03-29 22:32 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2018-04-10 23:31 - 2018-03-29 22:32 - 000212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll 2018-04-10 23:31 - 2018-03-29 22:32 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2018-04-10 23:31 - 2018-03-29 22:32 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2018-04-10 23:31 - 2018-03-29 22:32 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys 2018-04-10 23:31 - 2018-03-29 22:32 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll 2018-04-10 23:31 - 2018-03-29 22:32 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2018-04-10 23:31 - 2018-03-29 22:32 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2018-04-10 23:31 - 2018-03-29 22:32 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll 2018-04-10 23:31 - 2018-03-29 22:32 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys 2018-04-10 23:31 - 2018-03-29 22:32 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndisuio.sys 2018-04-10 23:31 - 2018-03-29 22:32 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lltdio.sys 2018-04-10 23:31 - 2018-03-29 22:32 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Synth3dVsc.sys 2018-04-10 23:31 - 2018-03-29 22:32 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsnmp32.dll 2018-04-10 23:31 - 2018-03-29 22:32 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys 2018-04-10 23:31 - 2018-03-29 22:32 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RfxVmt.sys 2018-04-10 23:31 - 2018-03-29 22:31 - 000795136 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalAuth.dll 2018-04-10 23:31 - 2018-03-29 22:31 - 000675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2018-04-10 23:31 - 2018-03-29 22:31 - 000416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2018-04-10 23:31 - 2018-03-29 22:31 - 000316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys 2018-04-10 23:31 - 2018-03-29 22:31 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2018-04-10 23:31 - 2018-03-29 22:31 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2018-04-10 23:31 - 2018-03-29 22:31 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2018-04-10 23:31 - 2018-03-29 22:31 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000748032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000276480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2018-04-10 23:31 - 2018-03-29 22:30 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2018-04-10 23:31 - 2018-03-29 22:29 - 000791552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2018-04-10 23:31 - 2018-03-29 22:29 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys 2018-04-10 23:31 - 2018-03-29 22:29 - 000616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2018-04-10 23:31 - 2018-03-29 22:29 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2018-04-10 23:31 - 2018-03-29 22:29 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2018-04-10 23:31 - 2018-03-29 22:29 - 000436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2018-04-10 23:31 - 2018-03-29 22:29 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll 2018-04-10 23:31 - 2018-03-29 22:29 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll 2018-04-10 23:31 - 2018-03-29 22:29 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2018-04-10 23:31 - 2018-03-29 22:28 - 000984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2018-04-10 23:31 - 2018-03-29 22:28 - 000970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2018-04-10 23:31 - 2018-03-29 22:28 - 000951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2018-04-10 23:31 - 2018-03-29 22:28 - 000757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2018-04-10 23:31 - 2018-03-29 22:28 - 000624128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll 2018-04-10 23:31 - 2018-03-29 22:28 - 000366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2018-04-10 23:31 - 2018-03-29 22:27 - 008104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2018-04-10 23:31 - 2018-03-29 22:27 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2018-04-10 23:31 - 2018-03-29 22:27 - 001097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2018-04-10 23:31 - 2018-03-29 22:27 - 001002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2018-04-10 23:31 - 2018-03-29 22:27 - 000985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2018-04-10 23:31 - 2018-03-29 22:27 - 000889856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2018-04-10 23:31 - 2018-03-29 22:27 - 000258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2018-04-10 23:31 - 2018-03-29 22:26 - 001955328 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll 2018-04-10 23:31 - 2018-03-29 22:26 - 001816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2018-04-10 23:31 - 2018-03-29 22:26 - 001573376 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2018-04-10 23:31 - 2018-03-29 22:26 - 001343488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2018-04-10 23:31 - 2018-03-29 22:26 - 000765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2018-04-10 23:31 - 2018-03-29 22:26 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2018-04-10 23:31 - 2018-03-29 22:25 - 002528256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2018-04-10 23:31 - 2018-03-29 22:25 - 002083840 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2018-04-10 23:31 - 2018-03-29 22:25 - 001597952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2018-04-10 23:31 - 2018-03-29 22:25 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2018-04-10 23:31 - 2018-03-29 22:25 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2018-04-10 23:31 - 2018-03-29 22:25 - 000374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2018-04-10 23:31 - 2018-03-29 22:23 - 000963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2018-04-10 23:31 - 2018-03-29 22:23 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2018-04-10 23:31 - 2018-03-29 22:23 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll 2018-04-10 23:31 - 2018-03-29 22:23 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2018-04-10 23:31 - 2018-03-29 22:23 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys 2018-04-10 23:31 - 2018-03-29 22:22 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpbus.sys 2018-04-10 23:31 - 2018-03-29 22:21 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2018-04-10 23:31 - 2018-03-29 22:20 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2018-04-10 23:31 - 2018-03-29 22:20 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys 2018-04-10 23:31 - 2018-03-29 22:20 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys 2018-04-10 23:31 - 2018-03-29 22:20 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys 2018-04-10 23:31 - 2018-03-29 22:20 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys 2018-04-10 23:31 - 2018-03-29 22:20 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys 2018-04-10 23:31 - 2018-03-29 22:20 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys 2018-04-10 23:31 - 2018-03-29 22:20 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys 2018-04-10 23:31 - 2018-03-28 14:54 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2018-04-10 23:31 - 2018-03-13 02:03 - 000779960 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2018-04-10 23:31 - 2018-03-13 02:03 - 000382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2018-04-10 23:31 - 2018-03-13 02:03 - 000279960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2018-04-10 23:31 - 2018-03-13 01:59 - 000535968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2018-04-10 23:31 - 2018-03-13 01:58 - 000441248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2018-04-10 23:31 - 2018-03-13 01:58 - 000377760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys 2018-04-10 23:31 - 2018-03-13 01:58 - 000170904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2018-04-10 23:31 - 2018-03-13 01:55 - 001778360 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2018-04-10 23:31 - 2018-03-13 01:55 - 000417440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2018-04-10 23:31 - 2018-03-13 01:55 - 000334240 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2018-04-10 23:31 - 2018-03-13 01:54 - 000128928 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2018-04-10 23:31 - 2018-03-13 01:53 - 000774560 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2018-04-10 23:31 - 2018-03-13 01:53 - 000143264 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2018-04-10 23:31 - 2018-03-13 01:53 - 000113568 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll 2018-04-10 23:31 - 2018-03-13 01:53 - 000091152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys 2018-04-10 23:31 - 2018-03-13 01:52 - 000172112 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll 2018-04-10 23:31 - 2018-03-13 01:52 - 000127136 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2018-04-10 23:31 - 2018-03-13 01:51 - 002773408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2018-04-10 23:31 - 2018-03-13 01:50 - 000617312 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2018-04-10 23:31 - 2018-03-13 00:41 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll 2018-04-10 23:31 - 2018-03-13 00:40 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2018-04-10 23:31 - 2018-03-13 00:37 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll 2018-04-10 23:31 - 2018-03-13 00:36 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll 2018-04-10 23:31 - 2018-03-13 00:36 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll 2018-04-10 23:31 - 2018-03-13 00:35 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll 2018-04-10 23:31 - 2018-03-13 00:35 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2018-04-10 23:31 - 2018-03-13 00:35 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll 2018-04-10 23:31 - 2018-03-13 00:35 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsAuth.dll 2018-04-10 23:31 - 2018-03-13 00:35 - 000219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsCfg.dll 2018-04-10 23:31 - 2018-03-13 00:35 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlgpclnt.dll 2018-04-10 23:31 - 2018-03-13 00:34 - 008727552 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2018-04-10 23:31 - 2018-03-13 00:34 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll 2018-04-10 23:31 - 2018-03-13 00:34 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsExt.dll 2018-04-10 23:31 - 2018-03-13 00:34 - 000153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll 2018-04-10 23:31 - 2018-03-13 00:34 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll 2018-04-10 23:31 - 2018-03-13 00:33 - 001574912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll 2018-04-10 23:31 - 2018-03-13 00:33 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2018-04-10 23:31 - 2018-03-13 00:33 - 000278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2018-04-10 23:31 - 2018-03-13 00:33 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2018-04-10 23:31 - 2018-03-13 00:33 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll 2018-04-10 23:31 - 2018-03-13 00:32 - 005195776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2018-04-10 23:31 - 2018-03-13 00:32 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2018-04-10 23:31 - 2018-03-13 00:32 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll 2018-04-10 23:31 - 2018-03-13 00:32 - 000286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2018-04-10 23:31 - 2018-03-13 00:32 - 000200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll 2018-04-10 23:31 - 2018-03-13 00:31 - 001263104 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2018-04-10 23:31 - 2018-03-13 00:31 - 001173504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2018-04-10 23:31 - 2018-03-13 00:31 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll 2018-04-10 23:31 - 2018-03-13 00:30 - 007145472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2018-04-10 23:31 - 2018-03-13 00:30 - 003400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2018-04-10 23:31 - 2018-03-13 00:30 - 000893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2018-04-10 23:31 - 2018-03-13 00:30 - 000863744 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll 2018-04-10 23:31 - 2018-03-13 00:30 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe 2018-04-10 23:31 - 2018-03-13 00:30 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2018-04-10 23:31 - 2018-03-13 00:28 - 003160576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2018-04-10 23:31 - 2018-03-13 00:28 - 001967104 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2018-04-10 23:31 - 2018-03-13 00:28 - 001157632 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2018-04-10 23:31 - 2018-03-13 00:28 - 000939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2018-04-10 23:31 - 2018-03-13 00:28 - 000886272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2018-04-10 23:31 - 2018-03-13 00:28 - 000837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2018-04-10 23:31 - 2018-03-13 00:28 - 000508928 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2018-04-10 23:31 - 2018-03-13 00:27 - 003125760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2018-04-10 23:31 - 2018-03-13 00:27 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2018-04-10 23:31 - 2018-03-13 00:27 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll 2018-04-10 23:31 - 2018-03-13 00:26 - 001737728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll 2018-04-10 23:31 - 2018-03-13 00:26 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2018-04-10 23:31 - 2018-03-13 00:25 - 001346560 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2018-04-10 23:31 - 2018-03-13 00:24 - 001275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2018-04-10 23:31 - 2018-03-13 00:24 - 000389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll 2018-04-10 23:31 - 2018-03-13 00:24 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll 2018-04-10 23:31 - 2018-03-13 00:23 - 001556992 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2018-04-10 23:31 - 2018-03-13 00:23 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll 2018-04-10 23:31 - 2018-03-13 00:23 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2018-04-10 23:31 - 2018-03-13 00:22 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe 2018-04-10 23:31 - 2018-03-13 00:22 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll 2018-04-10 23:31 - 2018-03-13 00:22 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2018-04-10 23:31 - 2018-03-13 00:19 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2018-04-10 23:31 - 2018-03-13 00:19 - 000311200 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2018-04-10 23:31 - 2018-03-13 00:08 - 001555784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2018-04-10 23:31 - 2018-03-13 00:07 - 000115104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2018-04-10 23:31 - 2018-03-13 00:06 - 000564640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2018-04-10 23:31 - 2018-03-13 00:04 - 000140592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll 2018-04-10 23:31 - 2018-03-12 23:44 - 003490816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll 2018-04-10 23:31 - 2018-03-12 23:43 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2018-04-10 23:31 - 2018-03-12 23:40 - 006118400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2018-04-10 23:31 - 2018-03-12 23:40 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll 2018-04-10 23:31 - 2018-03-12 23:40 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll 2018-04-10 23:31 - 2018-03-12 23:39 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll 2018-04-10 23:31 - 2018-03-12 23:39 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2018-04-10 23:31 - 2018-03-12 23:39 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll 2018-04-10 23:31 - 2018-03-12 23:39 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsCfg.dll 2018-04-10 23:31 - 2018-03-12 23:38 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlgpclnt.dll 2018-04-10 23:31 - 2018-03-12 23:37 - 003181568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2018-04-10 23:31 - 2018-03-12 23:37 - 000981504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2018-04-10 23:31 - 2018-03-12 23:37 - 000537088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll 2018-04-10 23:31 - 2018-03-12 23:37 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2018-04-10 23:31 - 2018-03-12 23:37 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2018-04-10 23:31 - 2018-03-12 23:37 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingMonitor.dll 2018-04-10 23:31 - 2018-03-12 23:36 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2018-04-10 23:31 - 2018-03-12 23:35 - 006204416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2018-04-10 23:31 - 2018-03-12 23:34 - 002409984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2018-04-10 23:31 - 2018-03-12 23:34 - 000706048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2018-04-10 23:31 - 2018-03-12 23:33 - 000981504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2018-04-10 23:31 - 2018-03-12 23:32 - 002577408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2018-04-10 23:31 - 2018-03-12 23:31 - 001348608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll 2018-04-10 23:31 - 2018-03-12 23:31 - 000862208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2018-04-10 23:31 - 2018-03-12 23:31 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll 2018-04-10 23:31 - 2018-03-12 23:31 - 000402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2018-04-10 23:31 - 2018-03-12 23:30 - 002349568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2018-04-10 23:31 - 2018-03-12 23:30 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2018-04-10 23:31 - 2018-03-12 23:28 - 000328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll 2018-04-10 23:31 - 2018-03-12 23:27 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll 2018-04-10 23:31 - 2018-03-12 23:27 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2018-04-10 23:31 - 2018-03-12 23:26 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll 2018-04-10 23:31 - 2017-11-26 08:32 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2018-04-10 23:31 - 2017-11-26 06:12 - 000123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2018-04-10 23:30 - 2018-03-29 22:44 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2018-04-10 23:30 - 2018-03-29 22:43 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll 2018-04-10 23:30 - 2018-03-29 22:43 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe 2018-04-10 23:30 - 2018-03-29 22:43 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe 2018-04-10 23:30 - 2018-03-29 22:43 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll 2018-04-10 23:30 - 2018-03-29 22:43 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll 2018-04-10 23:30 - 2018-03-29 22:43 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2018-04-10 23:30 - 2018-03-29 22:43 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll 2018-04-10 23:30 - 2018-03-29 22:43 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2018-04-10 23:30 - 2018-03-29 22:43 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2018-04-10 23:30 - 2018-03-29 22:43 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll 2018-04-10 23:30 - 2018-03-29 22:43 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll 2018-04-10 23:30 - 2018-03-29 22:43 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2018-04-10 23:30 - 2018-03-29 22:42 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2018-04-10 23:30 - 2018-03-29 22:42 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2018-04-10 23:30 - 2018-03-29 22:42 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll 2018-04-10 23:30 - 2018-03-29 22:42 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll 2018-04-10 23:30 - 2018-03-29 22:41 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll 2018-04-10 23:30 - 2018-03-29 22:40 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2018-04-10 23:30 - 2018-03-29 22:33 - 000072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe 2018-04-10 23:30 - 2018-03-29 22:33 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HyperVideo.sys 2018-04-10 23:30 - 2018-03-29 22:33 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\VMBusHID.sys 2018-04-10 23:30 - 2018-03-29 22:33 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidtel.exe 2018-04-10 23:30 - 2018-03-29 22:33 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasacd.sys 2018-04-10 23:30 - 2018-03-29 22:33 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll 2018-04-10 23:30 - 2018-03-29 22:33 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hyperkbd.sys 2018-04-10 23:30 - 2018-03-29 22:33 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmgencounter.sys 2018-04-10 23:30 - 2018-03-29 22:33 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmgid.sys 2018-04-10 23:30 - 2018-03-29 22:33 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vms3cap.sys 2018-04-10 23:30 - 2018-03-29 22:33 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2018-04-10 23:30 - 2018-03-29 22:32 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe 2018-04-10 23:30 - 2018-03-29 22:32 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe 2018-04-10 23:30 - 2018-03-29 22:32 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2018-04-10 23:30 - 2018-03-29 22:32 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2018-04-10 23:30 - 2018-03-29 22:32 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll 2018-04-10 23:30 - 2018-03-29 22:32 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys 2018-04-10 23:30 - 2018-03-29 22:31 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2018-04-10 23:30 - 2018-03-29 22:31 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll 2018-04-10 23:30 - 2018-03-29 22:31 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2018-04-10 23:30 - 2018-03-29 22:31 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll 2018-04-10 23:30 - 2018-03-29 22:31 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2018-04-10 23:30 - 2018-03-29 22:30 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2018-04-10 23:30 - 2018-03-29 22:28 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2018-04-10 23:30 - 2018-03-29 22:22 - 000826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll 2018-04-10 23:30 - 2018-03-29 22:22 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\beep.sys 2018-04-10 23:30 - 2018-03-29 22:20 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\null.sys 2018-04-10 23:30 - 2018-03-13 00:38 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2018-04-10 23:30 - 2018-03-13 00:38 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2018-04-10 23:30 - 2018-03-13 00:38 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2018-04-10 23:30 - 2018-03-13 00:37 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll 2018-04-10 23:30 - 2018-03-13 00:37 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll 2018-04-10 23:30 - 2018-03-13 00:25 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2018-04-10 23:30 - 2018-03-13 00:22 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll 2018-04-10 23:30 - 2018-03-12 23:37 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2018-04-10 23:30 - 2018-03-12 23:36 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll 2018-04-10 23:29 - 2018-03-29 22:45 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2018-04-10 23:29 - 2018-03-29 22:44 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll 2018-04-10 23:29 - 2018-03-29 22:43 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2018-04-10 23:29 - 2018-03-29 22:43 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2018-04-10 23:29 - 2018-03-29 22:43 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe 2018-04-10 23:29 - 2018-03-29 22:43 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2018-04-10 23:29 - 2018-03-29 22:42 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp 2018-04-10 23:29 - 2018-03-29 22:42 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2018-04-10 23:29 - 2018-03-29 22:42 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll 2018-04-10 23:29 - 2018-03-29 22:40 - 000314880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2018-04-10 23:29 - 2018-03-29 22:40 - 000257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2018-04-10 23:29 - 2018-03-29 22:40 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll 2018-04-10 23:29 - 2018-03-29 22:39 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2018-04-10 23:29 - 2018-03-29 22:36 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2018-04-10 23:29 - 2018-03-29 22:35 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll 2018-04-10 23:29 - 2018-03-29 22:35 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2018-04-10 23:29 - 2018-03-29 22:35 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2018-04-10 23:29 - 2018-03-29 22:34 - 000339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2018-04-10 23:29 - 2018-03-29 22:33 - 000707584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll 2018-04-10 23:29 - 2018-03-29 22:33 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll 2018-04-10 23:29 - 2018-03-29 22:33 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmictimeprovider.dll 2018-04-10 23:29 - 2018-03-29 22:33 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysntfy.dll 2018-04-10 23:29 - 2018-03-29 22:33 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\nrpsrv.dll 2018-04-10 23:29 - 2018-03-29 22:33 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\efslsaext.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\efssvc.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdPnp.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiprop.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWNet.dll 2018-04-10 23:29 - 2018-03-29 22:32 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfhost.exe 2018-04-10 23:29 - 2018-03-29 22:32 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe 2018-04-10 23:29 - 2018-03-29 22:32 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2018-04-10 23:29 - 2018-03-29 22:31 - 000306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2018-04-10 23:29 - 2018-03-29 22:31 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp 2018-04-10 23:29 - 2018-03-29 22:31 - 000286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll 2018-04-10 23:29 - 2018-03-29 22:31 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll 2018-04-10 23:29 - 2018-03-29 22:31 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll 2018-04-10 23:29 - 2018-03-29 22:31 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2018-04-10 23:29 - 2018-03-29 22:31 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2018-04-10 23:29 - 2018-03-29 22:31 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll 2018-04-10 23:29 - 2018-03-29 22:31 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll 2018-04-10 23:29 - 2018-03-29 22:30 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll 2018-04-10 23:29 - 2018-03-29 22:30 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2018-04-10 23:29 - 2018-03-29 22:30 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll 2018-04-10 23:29 - 2018-03-29 22:29 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2018-04-10 23:29 - 2018-03-29 22:29 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2018-04-10 23:29 - 2018-03-29 22:29 - 000253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll 2018-04-10 23:29 - 2018-03-29 22:28 - 001245184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2018-04-10 23:29 - 2018-03-29 22:28 - 000820224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2018-04-10 23:29 - 2018-03-29 22:27 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2018-04-10 23:29 - 2018-03-29 22:27 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2018-04-10 23:29 - 2018-03-29 22:27 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll 2018-04-10 23:29 - 2018-03-29 22:25 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2018-04-10 23:29 - 2018-03-29 22:25 - 000276480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll 2018-04-10 23:29 - 2018-03-29 22:25 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2018-04-10 23:29 - 2018-03-29 22:23 - 000387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2018-04-10 23:29 - 2018-03-29 22:20 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPnp.dll 2018-04-10 23:29 - 2018-03-29 22:20 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiprop.dll 2018-04-10 23:29 - 2018-03-29 22:20 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWNet.dll 2018-04-10 23:29 - 2018-03-13 00:40 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2018-04-10 23:29 - 2018-03-13 00:32 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2018-04-10 23:29 - 2018-03-13 00:31 - 002849792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2018-04-10 23:29 - 2018-03-13 00:31 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll 2018-04-10 23:29 - 2018-03-12 23:44 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2018-04-10 23:29 - 2018-03-12 23:36 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll 2018-04-10 23:29 - 2018-03-12 23:32 - 001948672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2018-04-10 21:57 - 2018-04-10 21:57 - 000000214 _____ C:\Users\sean\Desktop\add coreparking to power plan.reg 2018-04-10 21:49 - 2018-04-19 20:53 - 000098760 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2018-04-10 21:48 - 2018-04-19 20:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2018-04-10 21:48 - 2018-04-10 21:49 - 000000191 _____ C:\Users\sean\Desktop\disable fast startup.reg 2018-04-07 19:35 - 2018-04-07 19:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\obs-ndi 2018-04-07 19:35 - 2018-04-07 19:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewTek NDI Redist 2018-04-07 19:35 - 2018-04-07 19:35 - 000000000 ____D C:\Program Files\NewTek 2018-04-05 18:10 - 2018-04-05 18:10 - 000000000 ____D C:\Users\sean\AppData\LocalLow\Lighthouse Games Studio 2018-04-05 18:09 - 2018-04-05 18:09 - 000000222 _____ C:\Users\sean\Desktop\Comedy Night.url 2018-04-05 13:05 - 2018-04-05 13:09 - 000000000 ____D C:\Users\sean\Desktop\ethnocentric ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-05-05 19:30 - 2015-02-26 18:43 - 000000000 ___DC C:\FRST 2018-05-05 19:26 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\Registration 2018-05-05 19:16 - 2016-11-18 01:58 - 000000000 ____D C:\Users\sean\AppData\LocalLow\Mozilla 2018-05-05 19:15 - 2018-02-04 05:05 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-05-05 11:36 - 2014-12-25 04:45 - 000000000 ____D C:\ProgramData\MediaMall 2018-05-05 10:48 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization 2018-05-05 03:47 - 2018-01-28 18:43 - 000000000 ___DC C:\WINDOWS\Panther 2018-05-05 03:19 - 2018-02-04 05:54 - 000019035 _____ C:\WINDOWS\diagwrn.xml 2018-05-05 03:19 - 2018-02-04 05:54 - 000019035 _____ C:\WINDOWS\diagerr.xml 2018-05-05 01:39 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2018-05-05 01:39 - 2013-08-22 10:36 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy 2018-05-05 00:39 - 2018-03-12 21:27 - 000000000 ____D C:\Users\sean\AppData\Roaming\obs-studio 2018-05-05 00:39 - 2014-09-30 17:34 - 000000000 ____D C:\Program Files (x86)\Steam 2018-05-05 00:00 - 2014-10-27 07:15 - 000000000 ____D C:\Program Files\KMSpico 2018-05-04 23:31 - 2018-01-06 00:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MinerGate 2018-05-04 23:31 - 2016-12-11 04:49 - 000000000 ____D C:\Program Files\MinerGate 2018-05-04 23:20 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-05-04 23:16 - 2018-03-12 19:35 - 000000000 ____D C:\Users\sean\AppData\Roaming\DMCache 2018-05-04 23:16 - 2017-09-29 08:46 - 000000000 ___HD C:\Program Files\WindowsApps 2018-05-04 23:16 - 2014-12-04 02:47 - 000000000 ____D C:\Users\sean\AppData\Roaming\uTorrent 2018-05-04 23:12 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2018-05-04 23:12 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\Macromed 2018-05-04 23:12 - 2015-12-06 16:04 - 000000000 ____D C:\Users\sean\AppData\Local\Adobe 2018-05-04 23:08 - 2014-11-11 01:26 - 000000000 ____D C:\Users\sean\Documents\Assassin's Creed Unity 2018-05-04 23:05 - 2014-12-14 20:10 - 000000000 ___DC C:\AdwCleaner 2018-05-04 22:58 - 2014-09-12 00:04 - 000548000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2018-05-04 22:54 - 2017-09-29 03:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2018-05-04 22:51 - 2018-02-04 05:13 - 002352262 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-05-04 22:47 - 2016-10-02 00:29 - 000000000 ___DC C:\Temp 2018-05-04 22:46 - 2014-10-18 00:46 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2018-05-04 22:45 - 2018-02-04 05:58 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-05-04 22:45 - 2017-08-27 02:41 - 000000000 ____D C:\Program Files (x86)\Connectify 2018-05-04 22:45 - 2015-07-31 22:06 - 000000008 ___SH C:\ProgramData\ntuser.pol 2018-05-04 22:45 - 2015-04-18 16:49 - 000000000 ____D C:\ProgramData\VMware 2018-05-04 22:45 - 2015-01-11 18:59 - 000000091 ____C C:\HaxLogs.txt 2018-05-04 09:44 - 2017-09-29 03:45 - 061341696 _____ C:\WINDOWS\system32\config\HARDWARE 2018-05-04 06:24 - 2015-10-12 13:14 - 000000000 ____D C:\Users\sean\Documents\RegRun2 2018-05-04 03:39 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2018-05-04 01:38 - 2018-01-28 20:08 - 000000000 ____D C:\Users\sean\AppData\Local\CrashDumps 2018-05-04 01:12 - 2017-09-29 03:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2018-05-03 22:28 - 2018-02-04 05:14 - 000000000 ____D C:\Users\sean 2018-05-03 22:18 - 2014-09-30 16:16 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2018-05-03 22:08 - 2014-09-21 10:36 - 000333824 ___SH C:\Users\sean\Downloads\Thumbs.db 2018-05-03 21:23 - 2015-10-12 15:17 - 000000000 ____D C:\ProgramData\RegRun 2018-05-03 21:11 - 2018-01-20 18:48 - 000000000 ____D C:\Program Files (x86)\UnHackMe 2018-05-03 19:59 - 2018-02-04 05:05 - 005102416 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-05-03 18:55 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\NDF 2018-05-03 06:44 - 2018-02-23 19:00 - 000000000 ____D C:\WINDOWS\System32\Tasks\ASUS 2018-05-02 23:54 - 2014-09-16 11:51 - 001478144 ___SH C:\Users\sean\Desktop\Thumbs.db 2018-05-02 23:47 - 2016-08-11 20:06 - 000000000 ____D C:\Users\sean\AppData\Roaming\discord 2018-05-02 22:33 - 2017-08-09 22:30 - 000000000 ____D C:\Users\sean\AppData\Local\NVIDIA Corporation 2018-05-02 22:05 - 2016-05-30 14:50 - 000000000 ____D C:\Users\sean\Desktop\STREAMING STUFF 2018-05-02 21:52 - 2018-03-23 15:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google 2018-05-02 21:52 - 2016-02-07 22:33 - 000002110 _____ C:\Users\Public\Desktop\Google Slides.lnk 2018-05-02 21:52 - 2016-02-07 22:33 - 000002108 _____ C:\Users\Public\Desktop\Google Sheets.lnk 2018-05-02 21:52 - 2016-02-07 22:33 - 000002098 _____ C:\Users\Public\Desktop\Google Docs.lnk 2018-05-02 21:40 - 2017-09-29 08:44 - 000000000 ____D C:\WINDOWS\INF 2018-05-02 21:38 - 2016-03-21 06:22 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2018-05-02 20:39 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\Help 2018-05-02 20:22 - 2014-09-12 00:22 - 000000000 ____D C:\Users\sean\AppData\Local\ElevatedDiagnostics 2018-05-02 19:47 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\ModemLogs 2018-05-02 19:40 - 2016-03-23 22:50 - 000000000 ____D C:\Users\sean\AppData\Roaming\TakeOwnershipEx 2018-05-02 17:55 - 2018-03-14 00:06 - 000000000 ____D C:\ProgramData\WRData 2018-05-02 17:55 - 2018-03-14 00:06 - 000000000 ____D C:\Program Files\Webroot 2018-05-01 22:48 - 2015-04-02 22:44 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2018-05-01 22:43 - 2013-08-22 08:25 - 000000203 _____ C:\WINDOWS\win.ini 2018-05-01 14:15 - 2017-12-11 18:19 - 000002267 _____ C:\Users\sean\Desktop\Discord.lnk 2018-05-01 14:15 - 2016-08-11 20:05 - 000000000 ____D C:\Users\sean\AppData\Local\Discord 2018-04-30 23:38 - 2014-11-11 01:27 - 000000000 ____D C:\Users\sean\AppData\Local\Ubisoft Game Launcher 2018-04-30 22:53 - 2017-02-15 23:26 - 000000000 ____D C:\Users\sean\Desktop\DDU 2018-04-30 21:05 - 2015-11-06 23:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2018-04-30 21:05 - 2014-09-13 19:21 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-04-30 20:55 - 2015-09-17 20:03 - 000001265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2018-04-28 23:33 - 2018-02-06 17:59 - 000000000 ____D C:\Users\sean\AppData\Local\Deployment 2018-04-27 23:45 - 2015-07-08 18:34 - 000000000 ____D C:\Users\sean\AppData\Local\Spotify 2018-04-27 22:09 - 2015-07-08 18:34 - 000000000 ____D C:\Users\sean\AppData\Roaming\Spotify 2018-04-27 17:12 - 2016-08-13 14:25 - 000001282 _____ C:\Users\sean\Desktop\Roblox Studio.lnk 2018-04-27 17:12 - 2016-03-12 16:01 - 000000000 ____D C:\Users\sean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox 2018-04-26 23:59 - 2015-01-22 23:02 - 000000000 ____D C:\Program Files (x86)\Origin 2018-04-26 19:58 - 2014-10-06 18:33 - 000002368 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-04-26 19:38 - 2015-07-31 20:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer 2018-04-26 17:54 - 2017-01-23 05:58 - 000000000 ___HD C:\Users\sean\AppData\Local\daN6X0LGirE 2018-04-26 17:32 - 2015-09-07 14:20 - 000000000 ____D C:\Users\sean\AppData\Roaming\PACE Anti-Piracy 2018-04-26 17:32 - 2015-09-07 14:20 - 000000000 ____D C:\ProgramData\PACE Anti-Piracy 2018-04-26 01:17 - 2015-07-23 19:32 - 000000000 ____D C:\Program Files (x86)\Dropbox 2018-04-25 18:35 - 2018-01-28 20:14 - 000000000 ____D C:\Users\sean\ansel 2018-04-25 18:35 - 2016-07-17 13:16 - 000000000 ____D C:\Users\sean\AppData\Local\UnrealEngine 2018-04-24 20:13 - 2014-11-11 23:45 - 000000000 ____D C:\Program Files (x86)\Entropia Universe 2018-04-24 09:10 - 2017-03-10 22:40 - 000000000 ____D C:\Users\sean\AppData\Roaming\EasyAntiCheat 2018-04-23 19:31 - 2017-09-29 08:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-04-23 10:39 - 2017-09-29 08:41 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\telnet.exe 2018-04-22 06:04 - 2017-11-09 03:57 - 000044277 _____ C:\WINDOWS\system32\nvinfo.pb 2018-04-20 19:05 - 2014-09-18 23:24 - 000000000 ___DC C:\movies 2018-04-20 17:53 - 2018-03-23 15:10 - 000000000 ____D C:\Users\sean\Desktop\DOCUMENTS FOR LENDER 2018-04-19 20:55 - 2015-05-11 12:17 - 000000000 ____D C:\Program Files (x86)\Java 2018-04-19 20:55 - 2015-01-11 18:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2018-04-18 15:45 - 2016-12-11 04:57 - 000000000 ____D C:\Users\sean\AppData\Local\minergate 2018-04-17 17:48 - 2015-04-02 15:32 - 000000000 ____D C:\ProgramData\CanonIJPLM 2018-04-15 17:30 - 2014-09-12 01:07 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2018-04-14 23:08 - 2016-02-13 08:22 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-04-14 23:08 - 2015-09-16 19:48 - 000000000 ___RD C:\Users\sean\3D Objects 2018-04-14 22:40 - 2017-09-29 08:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2018-04-14 22:38 - 2017-09-29 08:46 - 000000000 ___SD C:\WINDOWS\system32\F12 2018-04-14 22:38 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\appraiser 2018-04-14 22:36 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\ShellExperiences 2018-04-14 22:34 - 2014-11-02 14:38 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager 2018-04-14 22:03 - 2015-07-31 20:36 - 000000000 ____D C:\ProgramData\Package Cache 2018-04-12 16:08 - 2015-11-22 00:52 - 000001115 _____ C:\Users\sean\Desktop\Internet Download Manager.lnk 2018-04-11 01:13 - 2010-01-31 17:00 - 000000000 ____D C:\Users\sean\Desktop\OpenHardwareMonitor 2018-04-10 21:49 - 2014-09-08 17:50 - 000000000 ____D C:\ProgramData\Oracle 2018-04-10 19:14 - 2016-09-02 19:17 - 000000000 ____D C:\Users\sean\AppData\Roaming\LG Electronics 2018-04-10 19:14 - 2016-09-02 18:52 - 000000000 ____D C:\Users\sean\AppData\Local\LG Electronics 2018-04-10 19:14 - 2016-09-02 18:50 - 000000000 ____D C:\Program Files (x86)\LG Electronics 2018-04-08 16:01 - 2014-11-16 03:23 - 000000000 ____D C:\Users\sean\AppData\Roaming\TeamViewer 2018-04-07 20:53 - 2018-01-29 08:28 - 000001077 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 13.lnk 2018-04-07 19:35 - 2017-02-01 19:39 - 000000000 ____D C:\Program Files (x86)\obs-studio 2018-04-05 13:17 - 2015-12-06 16:07 - 000000000 ____D C:\ProgramData\Adobe ==================== Files in the root of some directories ======= 2016-05-18 18:41 - 2016-05-18 18:41 - 000000132 _____ () C:\Users\sean\AppData\Roaming\Adobe BMP Format CS6 Prefs 2016-05-18 18:43 - 2016-05-18 18:43 - 000000132 _____ () C:\Users\sean\AppData\Roaming\Adobe PNG Format CS6 Prefs 2018-04-13 05:45 - 2018-04-13 05:45 - 004279968 _____ (NeoSoft Tools ) C:\Users\sean\AppData\Roaming\ctask.exe 2015-02-13 21:00 - 2015-02-13 21:27 - 000096320 _____ () C:\Users\sean\AppData\Roaming\net.telestream.wirecast.xml 2015-02-13 21:00 - 2015-02-13 21:00 - 000014120 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_AFL0681655000_brandingimage_destination.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000005028 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_AFL0681655000_brandingimage_main.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000014543 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_AFL9067099885_brandingimage_destination.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000014186 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_AFL9067099885_brandingimage_main.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000067454 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_AKAMAI_AFFILIATE_ID_brandingimage_destination.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000004755 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_BAMBUSER_AFFILIATE_ID_brandingimage_destination.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000004935 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_CHURCHSTREAMING_AFFILIATE_ID_brandingimage_destination.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000003123 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_DACAST_AFFILIATE_ID_brandingimage_destination.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000003213 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_HIGH_SCHOOL_CUBE_AFFIALITE_ID_brandingimage_destination.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000004356 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_MAKETV_AFFIALITE_ID_brandingimage_destination.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000003439 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_MERIDIX_AFFIALITE_ID_brandingimage_destination.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000003825 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_MERIDIX_AFFIALITE_ID_brandingimage_main.png 2015-02-13 21:00 - 2015-02-13 21:00 - 000005621 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_NETBRIEFINGS_AFFIALITE_ID_brandingimage_destination.png 2015-02-13 21:01 - 2015-02-13 21:01 - 000007122 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMING_MEDIA_HOSTING_AFFILIATE_ID_brandingimage_destination.png 2015-02-13 21:01 - 2015-02-13 21:01 - 000010619 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMVU_AFFIALITE_ID_brandingimage_destination.png 2015-02-13 21:01 - 2015-02-13 21:01 - 000016966 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_STRETCH_INTERNET_AFFIALITE_ID_brandingimage_destination.png 2015-02-13 21:01 - 2015-02-13 21:01 - 000008986 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_SUNDAY_STREAMS_AFFIALITE_ID_brandingimage_destination.png 2015-02-13 21:01 - 2015-02-13 21:01 - 000003302 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_TULIX_AFFIALITE_ID_brandingimage_destination.png 2015-02-13 21:01 - 2015-02-13 21:01 - 000008683 _____ () C:\Users\sean\AppData\Roaming\net_telestream_wirecast_partner_NO_ZIXI_AFFILIATE_ID_brandingimage_destination.png 2015-02-13 21:10 - 2015-02-13 21:10 - 000000118 _____ () C:\Users\sean\AppData\Roaming\pc-capture-log.txt 2016-04-15 23:20 - 2016-04-15 23:20 - 000000054 _____ () C:\Users\sean\AppData\Roaming\SBAMWsc.log 2018-04-29 12:38 - 2018-04-29 12:38 - 000001167 _____ () C:\Users\sean\AppData\Roaming\trace_FilterInstaller.txt 2018-04-29 12:38 - 2018-04-29 12:38 - 000000000 _____ () C:\Users\sean\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt 2016-06-20 21:12 - 2018-04-04 16:00 - 000034095 _____ () C:\Users\sean\AppData\Roaming\VoiceMeeterDefault.xml 2015-11-23 13:45 - 2015-11-23 13:45 - 000000046 _____ () C:\Users\sean\AppData\Roaming\WB.CFG 2016-09-29 16:03 - 2016-09-29 16:03 - 000000004 _____ () C:\Users\sean\AppData\Local\.dotcache 2016-01-21 02:11 - 2016-05-27 23:25 - 000018944 _____ () C:\Users\sean\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-10-19 15:01 - 2014-10-19 15:01 - 000000000 ___SH () C:\Users\sean\AppData\Local\LumaEmu 2015-10-14 13:58 - 2015-11-17 23:45 - 000000600 _____ () C:\Users\sean\AppData\Local\PUTTY.RND 2015-07-26 15:03 - 2016-10-12 17:02 - 000007603 _____ () C:\Users\sean\AppData\Local\Resmon.ResmonCfg Some files in TEMP: ==================== 2018-04-19 20:52 - 2018-04-19 20:52 - 001884616 _____ (Oracle Corporation) C:\Users\sean\AppData\Local\Temp\jre-8u171-windows-au.exe 2018-05-03 23:16 - 2018-05-03 22:16 - 074269016 ____R (Malwarebytes ) C:\Users\sean\AppData\Local\Temp\mb3-setup-consumer-3.4.5.2467-1.0.342-1.0.4890.exe 2018-03-27 20:46 - 2018-04-22 02:00 - 000639272 _____ (NVIDIA Corporation) C:\Users\sean\AppData\Local\Temp\nvSCPAPI.dll 2018-03-27 20:46 - 2018-03-23 18:05 - 000880024 _____ (NVIDIA Corporation) C:\Users\sean\AppData\Local\Temp\nvSCPAPI64.dll 2018-04-26 19:37 - 2018-03-23 18:05 - 000374152 _____ (NVIDIA Corporation) C:\Users\sean\AppData\Local\Temp\nvStInst.exe ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2018-02-14 07:18 ==================== End of FRST.txt ============================