My computer keeps restarting unprompted

Hi! I've probably messed up something because my computer came with some anti-virus software that has since expired. A few weeks ago, I noticed that my computer would suddenly restart unprompted with a blue screen and a progress bar with a note saying my computer needed to be restarted. I haven't noticed a pattern because sometimes I can go a few hours without restarting and sometimes it'll just go on and on for hours just restarting itself. I think my computer must be a little sick!

The other day, I was streaming Hulu and I couldn't get through an episode of anything without this computer restarting MULTIPLE times. Each time goes to that blue screen with a restart progress bar. It was super frustrating.

Here are my logs:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-11-2019

Ran by nicz8 (administrator) on DESKTOP-T35MG81 (LENOVO 80X6) (20-11-2019 19:32:45)

Running from C:\Users\nicz8\Desktop

Loaded Profiles: nicz8 (Available Profiles: nicz8)

Platform: Windows 10 Home Version 1903 18362.476 (X64) Language: English (United States)

Default browser: Chrome

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Dolby Laboratories, Inc. -> ) C:\Program Files\Dolby\Dolby DAX3\API\DAX3API.exe

(Dolby Laboratories, Inc. -> ) C:\Program Files\Dolby\Dolby DAX3\APP\DAX3TrayIcon.exe

(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.342\GoogleCrashHandler.exe

(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.342\GoogleCrashHandler64.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe

(Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\igfxCUIService.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\igfxEM.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\IntelCpHDCPSvc.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\IntelCpHeciSvc.exe

(Intel® Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe

(Intuit, Inc. -> Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe

(LENOVO -> ) C:\ProgramData\Lenovo\PLHotkeyService\PLHotkeyService.exe

(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe

(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe

(Lenovo -> Lenovo Group Ltd.) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe

(Lenovo -> Lenovo Group Ltd.) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe

(Lenovo -> Lenovo Group Ltd.) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe

(Lenovo -> Lenovo Group Ltd.) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe

(LENOVO -> Lenovo(beijing) Limited) C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe

(LENOVO -> Lenovo) C:\Program Files\Lenovo\YMC\ymc.exe

(McAfee, Inc. -> McAfee LLC) C:\Program Files\Common Files\mcafee\SystemCore\mfefire.exe

(McAfee, Inc. -> McAfee LLC) C:\Program Files\Common Files\mcafee\SystemCore\mfemms.exe

(McAfee, Inc. -> McAfee LLC) C:\Windows\System32\mfevtps.exe

(McAfee, Inc. -> McAfee LLC.) C:\Program Files\Common Files\mcafee\amcore\mcshield.exe

(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\mcafee\csp\2.7.371.0\McCSPServiceHost.exe

(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\mcafee\MMSSHost\MMSSHOST.exe

(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\mcafee\modulecore\ModuleCoreService.exe

(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\mcafee\PEF\CORE\PEFService.exe

(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe

(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\mcafee\VSCore_15_8\mcapexe.exe

(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.717\SSScheduler.exe

(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\mcafee\MfeAV\MfeAVSvc.exe

(McAfee, LLC -> McAfee, Inc.) C:\Program Files\mcafee\WebAdvisor\browserhost.exe

(McAfee, LLC -> McAfee, Inc.) C:\Program Files\mcafee\WebAdvisor\servicehost.exe

(McAfee, LLC -> McAfee, Inc.) C:\Program Files\mcafee\WebAdvisor\uihost.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Users\nicz8\AppData\Local\Microsoft\OneDrive\OneDrive.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11911.1001.9.0_x64__8wekyb3d8bbwe\WinStore.App.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\InputMethod\CHS\ChsIME.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\MsMpEng.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\NisSrv.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(SweetLabs Inc. -> SweetLabs, Inc) C:\Users\nicz8\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe

(Wacom Technology Corp. -> Wacom Technology) C:\Program Files\Tablet\ISD\WacomHost.exe

(Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_Tablet.exe

(Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_TabletUser.exe

(Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\WTabletServiceISD.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16781312 2017-02-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2017-02-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2017-02-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (LENOVO -> Lenovo(beijing) Limited)

HKLM\...\Run: [APP] => C:\Program Files\Dolby\Dolby DAX3\APP\DAX3TrayIcon.exe [963376 2016-10-27] (Dolby Laboratories, Inc. -> )

HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\78.0.3904.108\Installer\chrmstp.exe [2019-11-18] (Google LLC -> Google LLC)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2018-04-11]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.717\SSScheduler.exe (McAfee, Inc. -> McAfee, Inc.)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01012FD2-E0CF-4E47-8B37-6C7E0B1EEFEC} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [54144 2019-09-23] (Lenovo -> Lenovo Group Ltd.)

Task: {15BB4449-4D8F-4783-9619-C4BFE15E534D} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\890a25a6-4935-4e0b-b6e8-29d308b6b79e => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208 2019-09-23] (Lenovo -> Lenovo Group Ltd.)

Task: {1D6FA44E-65B7-4121-B01C-2A7224353DDE} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe

Task: {20FCB285-F71C-4139-92A9-1378737678B7} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1423464 2019-11-15] (Microsoft Corporation -> Microsoft Corporation)

Task: {254353FB-348E-43EF-B4CF-B19F952F5D95} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [745296 2017-10-04] (McAfee, Inc. -> McAfee, Inc.)

Task: {2D307D1D-335C-4266-9E6E-96C03BF27E97} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\49253dfd-6b2d-4211-8d44-fa1b48f6234b => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208 2019-09-23] (Lenovo -> Lenovo Group Ltd.)

Task: {32E35FAA-E1C6-4460-A03E-4A45F6655B77} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1423464 2019-11-15] (Microsoft Corporation -> Microsoft Corporation)

Task: {3862C50A-1A3B-4631-A5D5-CA9432A65B86} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => %windir%\system32\sc.exe START ImControllerService

Task: {3EA9AE3E-B88E-4801-94B7-CE010F95B7DB} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367800 2019-11-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {42717989-8C83-4FF2-9A75-01480415EBE9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367800 2019-11-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {5C81C31F-7042-4B3F-9FB2-B84A167E2639} - System32\Tasks\McAfee\DAD.Execute.Updates => C:\Program Files\Common Files\McAfee\DynamicAppDownloader\1.4.101\DADUpdater.exe [4134976 2019-10-17] (McAfee, Inc. -> McAfee, Inc.)

Task: {63C3EF5E-728E-4688-83F9-CC2E477A4542} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)

Task: {66D183F5-99B4-4211-BE7E-FB37780D1855} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent => {ABCECA3B-EA5A-496B-A021-5C6BAB365E5C} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [1015416 2017-07-24] (McAfee, Inc. -> McAfee, Inc.)

Task: {738E4976-97A8-4F05-86FB-8B7048892F29} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4427584 2019-11-03] (Microsoft Corporation -> Microsoft Corporation)

Task: {7B94BF6D-187D-48C7-AA8E-849A7152ACBA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-08-20] (Google Inc -> Google Inc.)

Task: {8B30D4AC-0967-4C93-8112-A6D4424DB57C} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe [4552376 2019-08-20] (McAfee, LLC -> McAfee, LLC.)

Task: {8E1F767A-698D-4829-BCCF-E2A7DFFFF087} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {8F7DFD44-90AC-4082-A727-11AE0E79EAC9} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114520 2019-11-15] (Microsoft Corporation -> Microsoft Corporation)

Task: {A1354EF1-3584-41FE-A7B2-2076EE82103F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)

"C:\Windows\System32\Tasks\McAfee\McAfee Idle Detection Task" was unlocked. <==== ATTENTION

Task: {AC4D8C0B-8AF9-4C7E-B768-72651E067634} - System32\Tasks\McAfee\McAfee Idle Detection Task => {ABCDCA3B-DE6B-5A7C-B132-6D7CBA63E5C5} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [1015416 2017-07-24] (McAfee, Inc. -> McAfee, Inc.)

Task: {ACF73185-B0DD-4C37-B2CC-230AAB80BD1B} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32

Task: {B7315C54-09D1-425A-A0D7-7400CB0752CB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4427584 2019-11-03] (Microsoft Corporation -> Microsoft Corporation)

Task: {C3341D8C-BA5E-4BD0-A776-24FFB20A1EF5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {D28DB70A-CE28-4B5C-AD61-7C82CC0CA571} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114520 2019-11-15] (Microsoft Corporation -> Microsoft Corporation)

Task: {DBFA0B5A-156B-4833-A5C6-70801BD8A83C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {DF6FF043-6596-4349-868A-1F0EC75BECC2} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\7bef0b18-1321-46fc-bf8e-0668f90a1b37 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208 2019-09-23] (Lenovo -> Lenovo Group Ltd.)

Task: {EA8E2548-A120-48D9-B56F-275CB8CA5E4C} - System32\Tasks\App Explorer => C:\Users\nicz8\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7399080 2019-06-03] (SweetLabs Inc. -> SweetLabs, Inc) <==== ATTENTION

Task: {F16E7B30-6F5E-4F07-8414-31B18ADD90F6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-08-20] (Google Inc -> Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1 mssplus.mcafee.com

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76

Tcpip\..\Interfaces\{d8bb469e-622d-452c-bc58-8ced83f41aba}: [DhcpNameServer] 75.75.75.75 75.75.76.76

Internet Explorer:

==================

HKU\S-1-5-21-2126566057-4181855661-943989508-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo17win10.msn.com/?pc=LCTE

HKU\S-1-5-21-2126566057-4181855661-943989508-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE

HKU\S-1-5-21-2126566057-4181855661-943989508-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-06-27] (Microsoft Corporation -> Microsoft Corporation)

BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2019-11-13] (McAfee, LLC -> McAfee, Inc.)

BHO: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2019-04-19] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2019-11-13] (McAfee, LLC -> McAfee, Inc.)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-03] (Microsoft Corporation -> Microsoft Corporation)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll No File

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2018-01-25] (McAfee, Inc. -> McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2018-01-25] (McAfee, Inc. -> McAfee, Inc.)

FireFox:

========

FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi

FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-11-13]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK

FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2018-03-26] [Legacy] [not signed]

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2018-01-25] (McAfee, Inc. -> )

FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2018-01-25] (McAfee, Inc. -> )

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-04-19] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-19] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-06] (Google Inc -> Google LLC)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-06] (Google Inc -> Google LLC)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-10-23] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:

=======

CHR StartupUrls: Default -> "hxxps://www.bing.com/?PC=PV02"

CHR Notifications: Default -> hxxps://www.bostonmarket.com; hxxps://www.youtube.com

CHR Profile: C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default [2019-11-20]

CHR Extension: (Slides) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-17]

CHR Extension: (Docs) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-17]

CHR Extension: (Google Drive) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-20]

CHR Extension: (YouTube) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-20]

CHR Extension: (Honey) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2019-11-20]

CHR Extension: (Adobe Acrobat) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-09-28]

CHR Extension: (Sheets) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-17]

CHR Extension: (McAfee® WebAdvisor) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2019-11-20]

CHR Extension: (Google Docs Offline) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-20]

CHR Extension: (Helium Backup) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpglbgbpeobllokpmeagpoagjbfknanl [2018-07-23]

CHR Extension: (Chrome Web Store Payments) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-05]

CHR Extension: (Gmail) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-15]

CHR Extension: (Chrome Media Router) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-11-02]

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11649912 2019-11-08] (Microsoft Corporation -> Microsoft Corporation)

S3 ClientAnalyticsService; C:\Program Files\Common Files\McAfee\ClientAnalytics\Legacy\McClientAnalytics.exe [1511728 2017-09-21] (McAfee, Inc. -> McAfee, Inc.)

R2 DAXAPI; C:\Program Files\Dolby\Dolby DAX3\API\DAX3API.exe [147760 2017-01-16] (Dolby Laboratories, Inc. -> )

R2 esifsvc; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2211448 2016-11-08] (Intel Corporation - pGFX -> Intel Corporation)

R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [530208 2019-04-23] (Intel® Wireless Connectivity Solutions -> Intel Corporation)

R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208 2019-09-23] (Lenovo -> Lenovo Group Ltd.)

R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [913208 2019-11-13] (McAfee, LLC -> McAfee, Inc.)

R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_15_8\McApExe.exe [728296 2018-01-31] (McAfee, Inc. -> McAfee, Inc.)

S3 McAWFwk; C:\Program Files\Common Files\mcafee\actwiz\McAWFwk.exe [454560 2016-11-15] (McAfee, Inc. -> McAfee, Inc.)

R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\2.7.371.0\\McCSPServiceHost.exe [2140888 2017-12-14] (McAfee, Inc. -> McAfee, Inc.)

S3 McSecDashboardService; C:\Program Files\McAfeeDashboard\McSecDashboardService.exe [1270536 2019-02-26] (McAfee, Inc. -> McAfee, Inc.)

S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [359888 2018-01-26] (McAfee, Inc. -> McAfee LLC)

R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [512976 2018-01-26] (McAfee, Inc. -> McAfee LLC)

R3 mfevtp; C:\Windows\system32\mfevtps.exe [475600 2018-01-26] (McAfee, Inc. -> McAfee LLC)

R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1666224 2017-12-19] (McAfee, Inc. -> McAfee, Inc.)

R2 PEFService; C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe [1045360 2018-01-30] (McAfee, Inc. -> McAfee, Inc.)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe [3201616 2019-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe [103168 2019-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WTabletServiceISD; C:\Program Files\Tablet\ISD\WTabletServiceISD.exe [1601176 2016-12-07] (Wacom Technology Corporation -> Wacom Technology, Corp.)

R2 ymc; C:\Program Files\Lenovo\YMC\ymc.exe [49032 2016-12-23] (LENOVO -> Lenovo)

R2 YogaPLService; C:\ProgramData\Lenovo\PLHotkeyService\PLHotkeyService.exe [29112 2015-06-27] (LENOVO -> )

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-04-26] (WDKTestCert build,131474841775766162 -> Apple Inc.)

R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [77216 2018-01-31] (McAfee, Inc. -> McAfee LLC)

R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [72592 2016-10-24] (Intel Corporation -> Intel Corporation)

R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [67984 2016-10-24] (Intel Corporation -> Intel Corporation)

R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [355216 2016-10-24] (Intel Corporation -> Intel Corporation)

S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [218336 2017-10-09] (McAfee, Inc. -> McAfee, Inc.)

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [729888 2019-04-23] (Intel® Wireless Connectivity Solutions -> Intel Corporation)

R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [496544 2018-01-31] (McAfee, Inc. -> McAfee LLC)

R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [357792 2018-01-31] (McAfee, Inc. -> McAfee LLC)

U3 mfeavfk01; no ImagePath

S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [83952 2018-01-31] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee LLC)

R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [528288 2018-01-31] (McAfee, Inc. -> McAfee LLC)

R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [948128 2018-01-31] (McAfee, Inc. -> McAfee LLC)

R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [521128 2017-11-21] (McAfee, Inc. -> McAfee LLC.)

S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [108464 2017-11-21] (McAfee, Inc. -> McAfee LLC.)

R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [115104 2018-01-31] (McAfee, Inc. -> McAfee LLC)

R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [252832 2018-01-31] (McAfee, Inc. -> McAfee LLC)

R3 Netwtw06; C:\WINDOWS\System32\drivers\Netwtw06.sys [8723968 2019-03-18] (Microsoft Windows -> Intel Corporation)

R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3227648 2017-03-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)

R3 WacHidRouterISD; C:\WINDOWS\system32\DRIVERS\wachidrouter_isd.sys [132248 2016-12-07] (Wacom Technology Corporation -> Wacom Technology, Corp.)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-10-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [351968 2019-10-28] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-10-28] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-11-20 19:32 - 2019-11-20 19:33 - 000032557 _____ C:\Users\nicz8\Desktop\FRST.txt

2019-11-20 19:30 - 2019-11-20 19:28 - 002260480 _____ (Farbar) C:\Users\nicz8\Desktop\FRST64.exe

2019-11-20 19:29 - 2019-11-20 19:33 - 000000000 ____D C:\FRST

2019-11-20 19:28 - 2019-11-20 19:28 - 002260480 _____ (Farbar) C:\Users\nicz8\Downloads\FRST64.exe

2019-11-20 19:00 - 2019-11-20 19:00 - 001548564 _____ C:\WINDOWS\Minidump\112019-6953-01.dmp

2019-11-20 18:51 - 2019-11-20 18:52 - 001532572 _____ C:\WINDOWS\Minidump\112019-9421-01.dmp

2019-11-13 21:03 - 2019-11-13 21:03 - 009711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2019-11-13 21:03 - 2019-11-13 21:03 - 005501952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2019-11-13 21:03 - 2019-11-13 21:03 - 004307968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2019-11-13 21:03 - 2019-11-13 21:03 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll

2019-11-13 21:03 - 2019-11-13 21:03 - 000249856 _____ (Gracenote, Inc.) C:\WINDOWS\SysWOW64\gnsdk_fp.dll

2019-11-13 21:03 - 2019-11-13 21:03 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll

2019-11-13 21:03 - 2019-11-13 21:03 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx

2019-11-13 21:03 - 2019-11-13 21:03 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll

2019-11-13 21:03 - 2019-11-13 21:03 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL

2019-11-13 21:02 - 2019-11-13 21:02 - 025901056 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 022627840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 019849216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 018020352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 008011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 007754240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 007195648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 007015936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 006232576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 005914112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 005763848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 004578816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 004129408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 003487232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 002956472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 002399232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 002258848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001866272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001691648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001610752 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001413864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001399096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001283072 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001098712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001072952 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 001059840 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 001017680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000892696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000774456 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 000768528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000689664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000679152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000452920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 000429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000404904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000380944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE

2019-11-13 21:02 - 2019-11-13 21:02 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE

2019-11-13 21:02 - 2019-11-13 21:02 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000136536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinHvPlatform.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcXtrnal.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000084488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys

2019-11-13 21:02 - 2019-11-13 21:02 - 000084488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys

2019-11-13 21:02 - 2019-11-13 21:02 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl

2019-11-13 21:02 - 2019-11-13 21:02 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\reg.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl

2019-11-13 21:02 - 2019-11-13 21:02 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000061240 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvhostsvc.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\reg.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe

2019-11-13 21:02 - 2019-11-13 21:02 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000021304 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcXtrnal.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL

2019-11-13 21:02 - 2019-11-13 21:02 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2019-11-13 21:02 - 2019-11-13 21:02 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll

2019-11-13 21:01 - 2019-11-13 21:02 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 006521768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 004150272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 002800640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2019-11-13 21:01 - 2019-11-13 21:01 - 002586816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 001664688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 000415544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 000354816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe

2019-11-13 21:01 - 2019-11-13 21:01 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2019-11-13 21:01 - 2019-11-13 21:01 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe

2019-11-13 21:01 - 2019-11-13 21:01 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accessibilitycpl.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Utilman.exe

2019-11-13 21:01 - 2019-11-13 21:01 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe

2019-11-13 21:01 - 2019-11-13 21:01 - 000089568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll

2019-11-13 21:01 - 2019-11-13 21:01 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe

2019-11-13 21:01 - 2019-11-13 21:01 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AtBroker.exe

2019-11-13 21:00 - 2019-11-13 21:00 - 014816256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 006082808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 005943296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 003967920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2019-11-13 21:00 - 2019-11-13 21:00 - 003752960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 002576384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 002562048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 001916984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 001154656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000822072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000700416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe

2019-11-13 21:00 - 2019-11-13 21:00 - 000669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000375720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

2019-11-13 21:00 - 2019-11-13 21:00 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000251512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe

2019-11-13 21:00 - 2019-11-13 21:00 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe

2019-11-13 21:00 - 2019-11-13 21:00 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys

2019-11-13 21:00 - 2019-11-13 21:00 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000073024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe

2019-11-13 21:00 - 2019-11-13 21:00 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\posetup.dll

2019-11-13 21:00 - 2019-11-13 21:00 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 009928208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 007262456 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 003791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 003371928 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 002988344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 002871848 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 002772272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 002763016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 002698768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 002081976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 001974824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 001856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2019-11-13 20:59 - 2019-11-13 20:59 - 001743888 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 001647064 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 001327064 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 001171704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000982840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000975872 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000874936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000822200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000811536 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000638264 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000586768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000517432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000514576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000513336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000510792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000477712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2019-11-13 20:59 - 2019-11-13 20:59 - 000466928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000461320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000372752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 000324624 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000220472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000164776 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000113160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 000047616 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000036368 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000028344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnsi.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidtel.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000024792 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000020352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nsi.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\applockerfltr.sys

2019-11-13 20:59 - 2019-11-13 20:59 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe

2019-11-13 20:59 - 2019-11-13 20:59 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll

2019-11-13 20:59 - 2019-11-13 20:59 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 007904152 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 007849424 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 007278592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 006166016 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 005890048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 004047360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 003728384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2019-11-13 20:58 - 2019-11-13 20:58 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 003591208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2019-11-13 20:58 - 2019-11-13 20:58 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 003105792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 002870784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2019-11-13 20:58 - 2019-11-13 20:58 - 002284032 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 002114048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 001920512 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 001656392 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 001451520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 001069064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000911824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000874536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2019-11-13 20:58 - 2019-11-13 20:58 - 000849920 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000642560 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000598016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2019-11-13 20:58 - 2019-11-13 20:58 - 000530944 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2019-11-13 20:58 - 2019-11-13 20:58 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\accessibilitycpl.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Utilman.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000105488 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AtBroker.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll

2019-11-13 20:58 - 2019-11-13 20:58 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe

2019-11-13 20:58 - 2019-11-13 20:58 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll

2019-11-13 20:57 - 2019-11-13 20:58 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 006227104 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 004615616 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2019-11-13 20:57 - 2019-11-13 20:57 - 002126112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 002120704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 001428992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2019-11-13 20:57 - 2019-11-13 20:57 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 001259416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe

2019-11-13 20:57 - 2019-11-13 20:57 - 001094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe

2019-11-13 20:57 - 2019-11-13 20:57 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000657424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys

2019-11-13 20:57 - 2019-11-13 20:57 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2019-11-13 20:57 - 2019-11-13 20:57 - 000551736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys

2019-11-13 20:57 - 2019-11-13 20:57 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.UserService.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000416016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys

2019-11-13 20:57 - 2019-11-13 20:57 - 000322504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000292664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys

2019-11-13 20:57 - 2019-11-13 20:57 - 000291256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe

2019-11-13 20:57 - 2019-11-13 20:57 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys

2019-11-13 20:57 - 2019-11-13 20:57 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000204816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys

2019-11-13 20:57 - 2019-11-13 20:57 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe

2019-11-13 20:57 - 2019-11-13 20:57 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe

2019-11-13 20:57 - 2019-11-13 20:57 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe

2019-11-13 20:57 - 2019-11-13 20:57 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys

2019-11-13 20:57 - 2019-11-13 20:57 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS

2019-11-13 20:57 - 2019-11-13 20:57 - 000088568 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000065272 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthMini.SYS

2019-11-13 20:57 - 2019-11-13 20:57 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscisvif.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilotdiag.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll

2019-11-13 20:57 - 2019-11-13 20:57 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscadminui.exe

2019-11-13 19:20 - 2019-10-17 00:17 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe

2019-11-13 19:20 - 2019-10-17 00:01 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe

2019-11-12 19:30 - 2019-11-12 19:30 - 000934499 _____ C:\Users\nicz8\Downloads\Domestic Shrimp Wonton Transition Plan v3.pdf

2019-11-12 19:24 - 2019-11-12 19:30 - 001910670 _____ C:\Users\nicz8\Downloads\Domestic Shrimp Wonton Transition Plan v3.pptx

2019-11-08 22:42 - 2019-11-08 22:42 - 000025109 _____ C:\Users\nicz8\Downloads\ShippingLabel(400223757).pdf

2019-11-01 17:27 - 2019-09-23 21:54 - 000206208 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.CoreTypes.dll

2019-11-01 17:27 - 2019-09-23 21:54 - 000131448 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.Utilities.dll

2019-11-01 17:27 - 2019-09-23 21:54 - 000098176 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.ImController.ImClient.dll

2019-11-01 17:27 - 2019-09-23 21:54 - 000044440 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.ImController.EventLogging.dll

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-11-20 19:31 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\AppReadiness

2019-11-20 19:30 - 2019-03-18 22:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2019-11-20 19:07 - 2019-09-28 21:03 - 000429012 _____ C:\WINDOWS\system32\prfh0804.dat

2019-11-20 19:07 - 2019-09-28 21:03 - 000133420 _____ C:\WINDOWS\system32\prfc0804.dat

2019-11-20 19:07 - 2019-09-28 18:24 - 001390718 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2019-11-20 19:07 - 2019-03-18 22:50 - 000000000 ____D C:\WINDOWS\INF

2019-11-20 19:03 - 2018-04-19 18:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

2019-11-20 19:03 - 2017-08-20 00:54 - 000000000 ____D C:\Users\nicz8\AppData\Local\Host App Service

2019-11-20 19:00 - 2019-10-01 23:05 - 966480360 _____ C:\WINDOWS\MEMORY.DMP

2019-11-20 19:00 - 2019-10-01 23:05 - 000000000 ____D C:\WINDOWS\Minidump

2019-11-20 19:00 - 2019-09-28 18:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2019-11-20 19:00 - 2017-08-20 00:57 - 000000000 __SHD C:\Users\nicz8\IntelGraphicsProfiles

2019-11-20 19:00 - 2017-07-29 22:58 - 000000000 ____D C:\Program Files (x86)\McAfee

2019-11-20 18:52 - 2019-09-28 18:21 - 000003706 _____ C:\WINDOWS\system32\Tasks\McAfee Remediation (Prepare)

2019-11-20 18:52 - 2019-03-18 22:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2019-11-20 18:52 - 2017-07-29 22:50 - 000000000 ____D C:\Program Files (x86)\Microsoft Office

2019-11-20 18:51 - 2019-09-28 18:15 - 000000000 ____D C:\Users\nicz8

2019-11-20 18:49 - 2019-09-28 18:14 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2019-11-18 18:52 - 2017-08-20 01:06 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2019-11-18 18:52 - 2017-08-20 01:06 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2019-11-18 18:52 - 2017-08-20 01:06 - 000002267 _____ C:\ProgramData\Desktop\Google Chrome.lnk

2019-11-17 00:28 - 2019-03-18 22:52 - 000000000 ___HD C:\Program Files\WindowsApps

2019-11-16 15:53 - 2017-08-23 00:52 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2019-11-13 23:48 - 2018-04-11 01:55 - 000000000 ___RD C:\Users\nicz8\3D Objects

2019-11-13 23:48 - 2017-03-23 11:27 - 000000000 __RHD C:\Users\Public\AccountPictures

2019-11-13 23:47 - 2019-09-28 18:14 - 000473928 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2019-11-13 23:47 - 2019-03-18 22:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2019-11-13 23:46 - 2019-03-18 22:52 - 000000000 ___RD C:\WINDOWS\PrintDialog

2019-11-13 23:46 - 2019-03-18 22:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2019-11-13 23:46 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\SystemResources

2019-11-13 23:46 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\system32\appraiser

2019-11-13 23:46 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\ShellExperiences

2019-11-13 23:46 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\ShellComponents

2019-11-13 23:46 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2019-11-13 23:46 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\DiagTrack

2019-11-13 23:46 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\bcastdvr

2019-11-13 21:28 - 2017-08-21 05:48 - 000000000 ____D C:\WINDOWS\system32\MRT

2019-11-13 21:26 - 2019-03-18 22:37 - 000000000 ____D C:\WINDOWS\CbsTemp

2019-11-13 21:26 - 2017-08-21 05:48 - 128443096 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2019-11-12 19:30 - 2017-08-28 21:33 - 000000000 ____D C:\Users\nicz8\AppData\LocalLow\Adobe

2019-11-12 19:26 - 2018-04-19 19:18 - 000000000 ____D C:\Users\nicz8\AppData\Local\Packages

2019-11-12 19:16 - 2017-10-23 17:53 - 000748816 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2019-11-07 18:24 - 2018-10-27 08:21 - 000000000 ____D C:\ProgramData\Packages

2019-11-06 21:17 - 2019-09-28 18:21 - 000003420 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2019-11-06 21:17 - 2019-09-28 18:21 - 000003296 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2019-11-06 21:17 - 2017-08-20 01:04 - 000000000 ____D C:\Program Files (x86)\Google

2019-11-01 17:29 - 2019-09-28 18:21 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task

2019-10-28 18:42 - 2019-09-28 18:21 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2126566057-4181855661-943989508-1001

2019-10-28 18:42 - 2019-09-28 18:15 - 000002370 _____ C:\Users\nicz8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2019-10-28 18:42 - 2017-08-20 00:59 - 000000000 ___RD C:\Users\nicz8\OneDrive

2019-10-28 18:32 - 2018-01-20 09:27 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2019-10-27 18:41 - 2019-09-28 18:21 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-11-2019

Ran by nicz8 (20-11-2019 19:34:29)

Running from C:\Users\nicz8\Desktop

Windows 10 Home Version 1903 18362.476 (X64) (2019-09-29 00:22:04)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2126566057-4181855661-943989508-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2126566057-4181855661-943989508-503 - Limited - Disabled)

Guest (S-1-5-21-2126566057-4181855661-943989508-501 - Limited - Disabled)

nicz8 (S-1-5-21-2126566057-4181855661-943989508-1001 - Administrator - Enabled) => C:\Users\nicz8

WDAGUtilityAccount (S-1-5-21-2126566057-4181855661-943989508-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: McAfee VirusScan (Disabled - Up to date) {8BCDACFA-D264-3528-5EF8-E94FD0BC1FBC}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: McAfee VirusScan (Disabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}

FW: McAfee Firewall (Disabled) {B3F62DDF-980B-3470-75A7-407A2E6F58C7}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.021.20056 - Adobe Systems Incorporated)

Dolby Atmos Windows API SDK (HKLM\...\{4A2D8823-7CFF-4B1D-9A8A-1807645FFB4E}) (Version: 1.0.1.12 - Dolby Laboratories, Inc.)

Dolby Atmos Windows APP (HKLM\...\{3FC92273-FEF4-4C0B-9AF4-F38D747EB765}) (Version: 1.0.0.10 - Dolby Laboratories, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 78.0.3904.108 - Google LLC)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.341 - Google LLC) Hidden

Intel® Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel® Corporation) Hidden

Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1039 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4836 - Intel Corporation) Hidden

Lenovo App Explorer (HKU\S-1-5-21-2126566057-4181855661-943989508-1001\...\Host App Service) (Version: 0.273.3.522 - SweetLabs for Lenovo)

Lenovo Yoga Mode Control (HKLM\...\{3F2E25D6-49D3-45D5-A7BD-13F5D6F64171}_is1) (Version: 2.0.0.9 - Lenovo)

LINE (HKU\S-1-5-21-2126566057-4181855661-943989508-1001\...\LINE) (Version: 5.11.4.1836 - LINE Corporation)

McAfee LiveSafe (HKLM-x32\...\MSC) (Version: 16.0 R8 - McAfee, Inc.)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.717.1 - McAfee, Inc.)

McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.48 - McAfee, LLC.)

Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 16.0.12130.20344 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2126566057-4181855661-943989508-1001\...\OneDriveSetup.exe) (Version: 19.174.0902.0013 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12130.20344 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12130.20344 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12130.20344 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.12130.20344 - Microsoft Corporation) Hidden

Sparkol VideoScribe (HKLM-x32\...\{DD0825FB-0B47-48B8-BAC2-B27F1D63FEAB}) (Version: 3.0.9003 - Sparkol) Hidden

Sparkol VideoScribe (HKLM-x32\...\Sparkol VideoScribe 3.0.9003) (Version: 3.0.9003 - Sparkol)

Stagelight (HKLM\...\Stagelight) (Version: 3.0.3.6229 - Open Labs, LLC.)

TurboTax Business 2017 (HKLM-x32\...\TurboTax Business 2017) (Version: 2017.0 - Intuit, Inc)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden

UpdateAssistant (HKLM\...\{52C1DD03-104E-4AC6-9DC6-21D585721ED1}) (Version: 1.19.0.0 - Microsoft Corporation) Hidden

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.) Hidden

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1-2) (Version: 1.0.54.1 - Intel Corporation Inc.) Hidden

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1-3) (Version: 1.0.54.1 - Intel Corporation Inc.) Hidden

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1-4) (Version: 1.0.54.1 - Intel Corporation Inc.)

Wacom Pen (HKLM\...\ISD Tablet Driver) (Version: 7.3.4-23 - Wacom Technology Corp.)

Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22395 - Microsoft Corporation)

Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )

Packages:

=========

Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-09] (Autodesk Inc.)

Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.2.6.0_x86__kgqvnymyfvs32 [2019-11-07] (king.com)

Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.151.300.0_x86__kgqvnymyfvs32 [2019-11-01] (king.com)

Keeper - Password Manager & Secure File Storage -> C:\Program Files\WindowsApps\KeeperSecurityInc.Keeper_14.0.33.0_x64__kejf07qmg0jnm [2019-07-29] (Keeper Security Inc)

Lenovo Account Portal -> C:\Program Files\WindowsApps\LenovoCorporation.LenovoID_2.0.37.0_x86__4642shxvsv8s2 [2017-08-20] (LENOVO INCORPORATED.)

Lenovo Settings -> C:\Program Files\WindowsApps\LenovoCorporation.LenovoSettings_3.177.0.0_x86__4642shxvsv8s2 [2018-03-26] (LENOVO INCORPORATED.)

Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.1910.16.0_x64__k1h2ywk1493x8 [2019-11-01] (LENOVO INC.)

Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12026.20368.0_x64__8wekyb3d8bbwe [2019-11-09] (Microsoft Corporation) [MS Ad]

March of Empires: War of Lords -> C:\Program Files\WindowsApps\A278AB0D.MarchofEmpires_4.4.0.10_x86__h6adky7gbf63m [2019-11-06] (Gameloft.)

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-17] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-17] (Microsoft Corporation) [MS Ad]

Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.33.13094.0_x64__8wekyb3d8bbwe [2019-11-13] (Microsoft Corporation) [MS Ad]

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.11052.0_x64__8wekyb3d8bbwe [2019-11-09] (Microsoft Studios) [MS Ad]

Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.13.105.0_x64__8wekyb3d8bbwe [2019-11-13] (Microsoft Studios)

MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-19] (Microsoft Corporation) [MS Ad]

Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.95.602.0_x64__mcm4njqhnhss8 [2019-11-07] (Netflix, Inc.)

Plex -> C:\Program Files\WindowsApps\CAF9E577.Plex_3.2.20.0_x64__aam28m9va5cke [2017-08-20] (Plex)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-01-25] (McAfee, Inc. -> McAfee, Inc.)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\igfxDTCM.dll [2017-11-24] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-01-25] (McAfee, Inc. -> McAfee, Inc.)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\nicz8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Helium Backup.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gpglbgbpeobllokpmeagpoagjbfknanl

==================== Loaded Modules (Whitelisted) =============

2019-09-02 09:51 - 2019-05-28 14:06 - 001021440 _____ () [File not signed] C:\ProgramData\Lenovo\iMController\Plugins\LenovoWiFiSecurityPlugin\x86\x86\e_sqlite3.dll

2019-09-19 17:27 - 2019-06-08 15:48 - 001257472 _____ (Robert Simpson, et al.) [File not signed] C:\ProgramData\Lenovo\iMController\Plugins\GenericMessagingPlugin\x86\x86\SQLite.Interop.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-18 15:03 - 2018-03-26 19:29 - 000000859 _____ C:\WINDOWS\system32\drivers\etc\hosts

0.0.0.1 mssplus.mcafee.com

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2126566057-4181855661-943989508-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Lenovo\LenovoWallPaper.jpg

DNS Servers: 75.75.75.75 - 75.75.76.76

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BA941032-7012-49CB-B414-B12414655DFB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{67599174-D798-4DCB-A7AD-4682C2C104B8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{57B419E6-0FC7-4573-B832-C089AF6EEEBC}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{3ACF6AEB-1F49-4A7B-AF4D-9A70E2725DE6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{358C1194-1C30-4061-B8AC-13BEA2DF7FA5}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)

FirewallRules: [{B278BA47-688C-4BE0-AFBB-E84944891CBC}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)

FirewallRules: [{DCB5FC85-43C8-498A-9E82-B4DB7E409DAA}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)

FirewallRules: [{753327F0-9644-4966-822D-31080D36E3B8}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)

FirewallRules: [{F8D8559A-1435-470C-AC86-27CC10B2571E}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)

FirewallRules: [{D7D21A45-BD6D-4360-80DF-7C31046B76A0}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe (Intuit, Inc. -> Intuit Inc.)

FirewallRules: [{8F5B8066-4388-4586-98DF-A4993BDAF0AD}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)

FirewallRules: [{99D4DF19-76F3-4F1B-BB1C-4FF49029C914}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)

FirewallRules: [{BC30834D-13FE-4617-89C9-D23B3F9DE2B6}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc. -> McAfee, Inc.)

FirewallRules: [{C3F1FE33-25B1-4678-B08B-4FB738626F9C}] => (Allow) C:\Users\nicz8\AppData\Local\LINE\bin\5.10.0.1789\LINE.exe (LINE Corporation -> LINE Corporation)

FirewallRules: [{2F923BAD-A768-4736-B430-EC55D5F7BA60}] => (Allow) C:\Users\nicz8\AppData\Local\LINE\bin\5.10.0.1789\LINE.exe (LINE Corporation -> LINE Corporation)

FirewallRules: [{5E47C5B4-6BF5-498F-83BE-A639A48521E4}] => (Allow) C:\Users\nicz8\AppData\Local\LINE\bin\5.10.0.1789\LineUpdater.exe (LINE Corporation -> LINE Corporation)

FirewallRules: [{985C433C-047D-4602-97E1-0ED887339089}] => (Allow) C:\Users\nicz8\AppData\Local\LINE\bin\5.10.0.1789\LineUpdater.exe (LINE Corporation -> LINE Corporation)

FirewallRules: [{785D1A40-8D7E-415F-BE40-45274AAB78EC}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{2D2218D9-A0FD-4DCE-8AF5-2E31F7D931F8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

13-11-2019 19:20:12 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:

==================

Error: (11/20/2019 07:21:11 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (14416,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (11/20/2019 07:15:57 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: wwahost.exe, version: 10.0.18362.1, time stamp: 0xd44a1ada

Faulting module name: wwahost.exe, version: 10.0.18362.1, time stamp: 0xd44a1ada

Exception code: 0xc0000409

Fault offset: 0x000000000005f62b

Faulting process id: 0x2bec

Faulting application start time: 0x01d5a0093a7f2806

Faulting application path: C:\WINDOWS\system32\wwahost.exe

Faulting module path: C:\WINDOWS\system32\wwahost.exe

Report Id: 13bddac3-5ca8-465f-bdd5-96b3941d6aef

Faulting package full name: Microsoft.Windows.CloudExperienceHost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy

Faulting package-relative application ID: App

Error: (11/20/2019 07:13:50 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: DESKTOP-T35MG81)

Description: Windows cannot load the extensible counter DLL "C:\WINDOWS\system32\sysmain.dll" (Win32 error code 126).

Error: (11/20/2019 07:13:50 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-T35MG81)

Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (11/20/2019 07:13:35 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (6480,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (11/20/2019 07:08:35 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: svchost.exe_FrameServer, version: 10.0.18362.1, time stamp: 0x32d6c210

Faulting module name: ntdll.dll, version: 10.0.18362.418, time stamp: 0x99ca0526

Exception code: 0xc0000005

Fault offset: 0x000000000001cd03

Faulting process id: 0x5f0

Faulting application start time: 0x01d5a007f9aa7abf

Faulting application path: C:\WINDOWS\System32\svchost.exe

Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll

Report Id: 7c3422cb-d9db-42a9-985e-e399e6ed6ce9

Faulting package full name:

Faulting package-relative application ID:

Error: (11/20/2019 07:02:40 PM) (Source: SecurityCenter) (EventID: 17) (User: )

Description: Security Center failed to validate caller with error %1.

Error: (11/20/2019 07:01:01 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: svchost.exe_FrameServer, version: 10.0.18362.1, time stamp: 0x32d6c210

Faulting module name: combase.dll, version: 10.0.18362.449, time stamp: 0xac52ea46

Exception code: 0xc0000005

Fault offset: 0x00000000000bf898

Faulting process id: 0x744

Faulting application start time: 0x01d5a007121ae982

Faulting application path: C:\WINDOWS\System32\svchost.exe

Faulting module path: C:\WINDOWS\System32\combase.dll

Report Id: d5c6102b-45f7-4954-a9c4-a90c394cb864

Faulting package full name:

Faulting package-relative application ID:

System errors:

=============

Error: (11/20/2019 07:00:40 PM) (Source: BugCheck) (EventID: 1001) (User: )

Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0xffff87d0246c7070, 0x0000000000000002, 0xfffff80668882793, 0x0000000000000002). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: cb661257-a332-46eb-a0fc-096075a7c9de.

Error: (11/20/2019 07:00:30 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: The previous system shutdown at 6:51:37 PM on ‎11/‎20/‎2019 was unexpected.

Error: (11/20/2019 06:52:43 PM) (Source: BugCheck) (EventID: 1001) (User: )

Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0xffffdc5335d21070, 0x0000000000000002, 0xfffff80136e62793, 0x0000000000000002). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 33ef1ad1-c8d4-4c07-97c4-c0f0f1e32ec5.

Error: (11/20/2019 06:51:37 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: The previous system shutdown at 7:00:08 PM on ‎11/‎18/‎2019 was unexpected.

Error: (11/17/2019 12:28:32 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9WZDNCRFJ364-MICROSOFT.SKYPEAPP.

Error: (11/13/2019 11:47:08 PM) (Source: Service Control Manager) (EventID: 7043) (User: )

Description: The Windows Biometric Service service did not shut down properly after receiving a preshutdown control.

Error: (11/13/2019 11:46:05 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)

Description: The server {924DC564-16A6-42EB-929A-9A61FA7DA06F} did not register with DCOM within the required timeout.

Error: (11/13/2019 11:46:05 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)

Description: The server {924DC564-16A6-42EB-929A-9A61FA7DA06F} did not register with DCOM within the required timeout.

Windows Defender:

===================================

Date: 2019-10-07 18:35:47.727

Description:

Windows Defender Antivirus scan has been stopped before completion.

Scan ID: {56E41852-E92C-44C9-81C9-3582D9B949F8}

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2019-10-07 18:30:58.687

Description:

Windows Defender Antivirus scan has been stopped before completion.

Scan ID: {69FDCE00-86C2-497B-9B8F-4B1020AA0634}

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2019-11-13 21:02:41.283

Description:

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.305.1981.0

Update Source: Microsoft Update Server

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.16500.1

Error code: 0x80240016

Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

Date: 2019-11-13 19:24:35.844

Description:

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.305.1981.0

Update Source: Microsoft Update Server

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.16500.1

Error code: 0x80240016

Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

CodeIntegrity:

===================================

Date: 2019-11-10 15:36:20.228

Description:

Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\mcafee.com\agent\mcupdate.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-11-10 15:36:20.188

Description:

==================== Memory info ===========================

BIOS: LENOVO 1YCN30WW(V1.07) 06/14/2017

Motherboard: LENOVO Lenovo YOGA 720-13IKB

Processor: Intel® Core™ i5-7200U CPU @ 2.50GHz

Percentage of memory in use: 72%

Total physical RAM: 8034.39 MB

Available physical RAM: 2239.72 MB

Total Virtual: 14178.39 MB

Available Virtual: 7050.74 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:212.23 GB) (Free:138.41 GB) NTFS

Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:23.43 GB) NTFS

\\?\Volume{518f5e61-ba9f-4b70-852c-9437ce5de1a4}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.49 GB) NTFS

\\?\Volume{e17cf99c-0739-4dd5-8122-ae65e303b6d9}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================

Disk: 0 (Size: 238.5 GB) (Disk ID: B9DA0316)

Partition: GPT.

==================== End of Addition.txt =======================

#1
newzies

Posted 20 November 2019 - 07:41 PM

Advertisements

#2
newzies

Posted 20 November 2019 - 07:44 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us

My computer keeps restarting unprompted

#1 newzies Posted 20 November 2019 - 07:41 PM

Advertisements

#2 newzies Posted 20 November 2019 - 07:44 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us

Sign In

#1
newzies

Posted 20 November 2019 - 07:41 PM

#2
newzies

Posted 20 November 2019 - 07:44 PM