Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-09-2019 Ran by Piccole (administrator) on FRANCESE (Dell Inc. Inspiron 23 Model 5348) (10-09-2019 20:54:32) Running from C:\Users\Commun\Downloads Loaded Profiles: Piccole & Commun (Available Profiles: Piccole & Commun & Guest) Platform: Windows 10 Home Version 1809 17763.678 (X64) Language: Italien (Italie) Default browser: Edge Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () [File not signed] C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe () [File not signed] C:\Program Files (x86)\DELL\DELLOSD\MediaButtons.exe () [File not signed] C:\Windows\SysWOW64\srvany.exe (Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (CyberLink Corp. -> CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (CyberLink Corp. -> CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Dell Inc. -> SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avp.exe (Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avpui.exe (Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe (Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\Commun\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Windows Hardware Compatibility Publisher -> BayHubTech/O2Micro International) C:\Windows\System32\drivers\o2flash.exe (Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Techporch Incorporated -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe (Techporch Incorporated -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe (TODO: <公司名>) [File not signed] C:\Windows\SysWOW64\SDIOAssist.exe 0 C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.51.72.0_x64__kzf8qxf38zg5c\SkypeApp.exe 0 C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.51.72.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe 0 C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19071.901.0_x64__8wekyb3d8bbwe\YourPhone.exe 0 C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8721656 2016-03-09] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1416440 2016-03-09] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286056 2013-09-24] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) HKLM-x32\...\Run: [DropboxOEM] => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [462160 2014-09-02] (Dropbox, Inc -> ) HKLM-x32\...\Run: [C17A] => C:\WINDOWS\twain_32\Brimc17a\Common\TwDsUiLaunch.exe [86104 2018-11-14] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\...\RunOnce: [DEL_ST_CPL] => CMD /C del "C:\Program Files\Realtek\Audio\HDA\ST_CPL.XML" /F HKU\S-1-5-21-2549745364-3443181783-2265035364-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22714912 2019-08-15] (Piriform Software Ltd -> Piriform Ltd) HKU\S-1-5-21-2549745364-3443181783-2265035364-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2018-09-15] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-2549745364-3443181783-2265035364-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22714912 2019-08-15] (Piriform Software Ltd -> Piriform Ltd) HKU\S-1-5-21-2549745364-3443181783-2265035364-1002\...\MountPoints2: {890cc568-b442-11e8-833e-4cbb586877fb} - "E:\LaunchU3.exe" HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.132\Installer\chrmstp.exe [2019-08-27] (Google LLC -> Google LLC) HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-04-29] (Qualcomm Atheros -> Qualcomm®Atheros®) [File not signed] HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-04-29] (Qualcomm Atheros -> Qualcomm®Atheros®) [File not signed] ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {082480CD-DEF6-445B-AA69-EFA6FC1FB9FE} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe Task: {0D4B7F72-C6F8-428E-B98D-C41216440413} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {21CCC7C8-0CC6-4A25-A969-E6C509A740D2} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {29911F91-FE7A-45D7-8CF4-862817DC2213} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {2D77EEE3-6629-4FC6-8A90-CA570A73C278} - System32\Tasks\Dell\Dell Product Registration Update => C:\Program Files (x86)\Dell Product Registration\prodreg.exe [157216 2014-10-31] (Leader Technologies Inc -> Aviata Inc) Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe Task: {37DCC8CD-47DD-4925-9930-C1784C00D87D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe Task: {3F2DEA46-A612-4A25-BF33-BC77070454AF} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> No File <==== ATTENTION Task: {3FFD926A-C725-42B8-8CCD-F9DEF708DDE9} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> No File <==== ATTENTION Task: {55541E12-61A5-4AD6-9B56-EB73D187F548} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1416440 2016-03-09] (Realtek Semiconductor Corp -> Realtek Semiconductor) Task: {56C9FAD6-7F84-4344-A1C2-AFA2FCF35818} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION Task: {57BD5960-4888-411D-9F78-94BCA7F1F2BF} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [31232 2018-09-15] (Microsoft Windows -> Microsoft Corporation) Task: {5A455C1A-D405-4E79-B5E4-DCE36A344A77} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION Task: {60406EE0-5A53-4E56-B55B-6E0ACAA4F5DE} - System32\Tasks\UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337 => C:\WINDOWS\TEMP\DeleteFolderTask.exe <==== ATTENTION Task: {6958959A-A67D-4537-8A5E-5A84DF3DA31A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-20] (Google Inc -> Google Inc.) Task: {6A9196E7-9A9B-4880-BF9B-6394E32EEF65} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> No File <==== ATTENTION Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Task: {7306BBFB-4927-467D-98FD-883CB679D134} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> No File <==== ATTENTION Task: {7EE68063-D3E7-4C40-AAB8-15E555417F7E} - System32\Tasks\Dell\Dell Product Registration => C:\Program Files (x86)\Dell Product Registration\prodreg.exe [157216 2014-10-31] (Leader Technologies Inc -> Aviata Inc) Task: {82D1F34F-3E72-4395-A69E-B156274E42C0} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {83C19F56-57B3-400F-A320-86F7FFA13225} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> No File <==== ATTENTION Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE} Task: {8AF9D2C7-A786-4C75-96B5-1BB7306BBD7D} - System32\Tasks\AdwCleaner_onReboot => C:/Users/Commun/Downloads/adwcleaner_7.4.1(1).exe [7636680 2019-09-09] (Malwarebytes Inc -> Malwarebytes) Task: {90B9AE22-19BA-4650-9050-92ABD9007564} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {95607FC6-FF0C-41F0-9BCA-C3867B8208DB} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> No File <==== ATTENTION Task: {9B657AD7-450F-441C-981F-6787399FE8B1} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [110144 2013-03-05] (CyberLink Corp. -> CyberLink) Task: {A0AB4511-1CBD-4E97-9EE0-4F301E721019} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION Task: {B52AE8C9-4520-4003-8401-D061DDE98498} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16585328 2019-08-15] (Piriform Software Ltd -> Piriform Ltd) Task: {B66DA132-34BA-4750-8DE2-F57B9E574A0E} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA} Task: {BC6A2C4E-2F8F-4A47-BD8E-543EE5B1C0AB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems) Task: {C0D33FC4-B3F5-46B9-9B8A-D30593D37C67} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {CB095798-8C64-4A89-9606-DBCB61538FBB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {CCFDD8F6-DDC8-4E10-BC09-18315943E329} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-22] (Microsoft Corporation -> Microsoft Corporation) Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371} Task: {DB58EBF7-B88D-4649-A27F-1E1D8BCACA92} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-08-15] (Piriform Software Ltd -> Piriform Software Ltd) Task: {DFCA77BE-E5C1-4E08-A3B5-96AB9AE60079} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> No File <==== ATTENTION Task: {E0A62765-5131-4351-AF76-907A86D271E1} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION Task: {E817E9F7-059F-406E-B63B-EA011C6505DE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-20] (Google Inc -> Google Inc.) Task: {E9089D84-7E4A-480D-A948-AA7797E05C53} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {F11A2BD2-B704-41C4-BDED-6604AC5BE268} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {FB75BEC0-E7C1-4644-8E3F-2D91AD901220} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-22] (Microsoft Corporation -> Microsoft Corporation) Task: {FF80CE72-AA13-4A26-B0D4-A8A290761862} - \WPD\SqmUpload_S-1-5-21-2549745364-3443181783-2265035364-1001 -> No File <==== ATTENTION Task: {FFB4EB6A-FA4F-4DA9-AB29-44CB458D1AF3} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.51.1 Tcpip\..\Interfaces\{3fb96bf4-4c77-42fa-84cd-29f231c783db}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{d060f2aa-abac-4337-b9d2-3f45ed88f415}: [DhcpNameServer] 192.168.10.1 Tcpip\..\Interfaces\{fa8dc1b6-7c1b-409d-9249-22140eb5e2fe}: [DhcpNameServer] 192.168.51.1 Internet Explorer: ================== HKU\S-1-5-21-2549745364-3443181783-2265035364-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB HKU\S-1-5-21-2549745364-3443181783-2265035364-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie HKU\S-1-5-21-2549745364-3443181783-2265035364-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB SearchScopes: HKU\S-1-5-21-2549745364-3443181783-2265035364-1001 -> DefaultScope {51E9CE99-02B2-4F47-BA39-0BB51CF8DEDA} URL = SearchScopes: HKU\S-1-5-21-2549745364-3443181783-2265035364-1001 -> {51E9CE99-02B2-4F47-BA39-0BB51CF8DEDA} URL = SearchScopes: HKU\S-1-5-21-2549745364-3443181783-2265035364-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear SearchScopes: HKU\S-1-5-21-2549745364-3443181783-2265035364-1002 -> DefaultScope {51E9CE99-02B2-4F47-BA39-0BB51CF8DEDA} URL = BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation) BHO: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\IEExt\ie_plugin.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) Toolbar: HKLM - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\IEExt\ie_plugin.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) Toolbar: HKU\S-1-5-21-2549745364-3443181783-2265035364-1001 -> Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) Toolbar: HKU\S-1-5-21-2549745364-3443181783-2265035364-1002 -> Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) FireFox: ======== FF ProfilePath: C:\Users\Piccole\AppData\Roaming\Mozilla\Firefox\Profiles\5qe9gl7k.default [2019-09-05] FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor => not found FF HKLM\...\Firefox\Extensions: [light_plugin_F88CEF8523DE460F9FA1D6E48BF8D340@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi [2019-04-15] FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F88CEF8523DE460F9FA1D6E48BF8D340@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google Inc -> Google, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-30] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-30] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2549745364-3443181783-2265035364-1002: SkypePlugin -> C:\Users\Commun\AppData\Local\SkypePlugin\7.32.6.278\npGatewayNpapi.dll [2017-04-18] (Microsoft Corporation -> Skype Technologies S.A.) FF Plugin HKU\S-1-5-21-2549745364-3443181783-2265035364-1002: SkypePlugin64 -> C:\Users\Commun\AppData\Local\SkypePlugin\7.32.6.278\npGatewayNpapi-x64.dll [2017-04-18] (Microsoft Corporation -> Skype Technologies S.A.) FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-01-09] <==== ATTENTION (Points to *.cfg file) FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-01-09] <==== ATTENTION Chrome: ======= CHR Profile: C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default [2019-09-10] CHR Extension: (Slides) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-09-09] CHR Extension: (Kaspersky Protection) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\amkpcclbbgegoafihnpgomddadjhcadd [2019-09-09] CHR Extension: (Docs) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-09-09] CHR Extension: (Google Drive) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-20] CHR Extension: (YouTube) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-20] CHR Extension: (Adobe Acrobat) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-09-09] CHR Extension: (Sheets) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-09-09] CHR Extension: (Google Docs hors connexion) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-09-09] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-09-09] CHR Extension: (Gmail) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-09-09] CHR Extension: (Chrome Media Router) - C:\Users\Piccole\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-09-09] CHR HKLM\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx CHR HKLM-x32\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AVP19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avp.exe [619640 2018-03-01] (Kaspersky Lab -> AO Kaspersky Lab) R2 Dell WMI Service; C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe [147456 2013-12-28] () [File not signed] R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2557136 2015-02-26] (Techporch Incorporated -> Dell Inc.) R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-02-26] (Techporch Incorporated -> Dell Inc.) S3 DellProdRegManager; C:\Program Files (x86)\Dell Product Registration\regmgrsvc.exe [278568 2014-10-31] (Leader Technologies Inc -> Aviata, Inc.) R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373728 2017-01-09] (Intel(R) pGFX -> Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-02-01] (Intel® Trusted Connect Service -> Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-30] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) S3 klvssbridge64_19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\vssbridge64.exe [414352 2019-01-09] (Kaspersky Lab -> AO Kaspersky Lab) R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-03-01] (Kaspersky Lab -> AO Kaspersky Lab) S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [File not signed] R2 O2FLASH; C:\WINDOWS\System32\drivers\o2flash.exe [65536 2014-03-07] (Microsoft Windows Hardware Compatibility Publisher -> BayHubTech/O2Micro International) R2 O2SDIOAssist; c:\Windows\SysWOW64\srvany.exe [8192 2012-03-09] () [File not signed] S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [File not signed] R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-07-30] (CyberLink Corp. -> CyberLink) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [316152 2016-03-09] (Realtek Semiconductor Corp -> Realtek Semiconductor) R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [1921768 2014-07-03] (Dell Inc. -> SoftThinks SAS) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\NisSrv.exe [2552416 2019-09-09] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\MsMpEng.exe [108832 2019-09-09] (Microsoft Windows Publisher -> Microsoft Corporation) S2 Dell Foundation Services; "C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe" [X] S2 SupportAssistAgent; "C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe" [X] ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 athr; C:\WINDOWS\System32\drivers\athw10x.sys [4325808 2016-07-28] (Qualcomm Atheros -> Qualcomm Atheros Communications, Inc.) R3 BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [610336 2016-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros) R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [243400 2018-01-27] (Kaspersky Lab -> AO Kaspersky Lab) R3 DDDriver; C:\WINDOWS\system32\drivers\DDDriver64Dcsa.sys [23760 2015-02-26] (Techporch Incorporated -> Dell Computer Corporation) R3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [23312 2015-02-26] (Techporch Incorporated -> Dell Computer Corporation) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R3 ikbevent; C:\WINDOWS\system32\DRIVERS\ikbevent.sys [22216 2014-05-27] (Intel CASE -> ) R3 imsevent; C:\WINDOWS\system32\DRIVERS\imsevent.sys [22728 2014-05-27] (Intel CASE -> ) R3 ISCT; C:\WINDOWS\System32\drivers\ISCTD.sys [44744 2014-05-27] (Intel CASE -> ) R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [75600 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [126288 2019-08-10] (Kaspersky Lab -> AO Kaspersky Lab) R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [91472 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [29208 2017-03-30] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab) R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [236672 2019-08-10] (Kaspersky Lab -> AO Kaspersky Lab) R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [1093240 2019-08-10] (Kaspersky Lab -> AO Kaspersky Lab) R3 klids; C:\ProgramData\Kaspersky Lab\AVP19.0.0\Bases\klids.sys [197760 2019-08-28] (Kaspersky Lab -> AO Kaspersky Lab) R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1168000 2019-08-10] (Kaspersky Lab -> AO Kaspersky Lab) R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [58704 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [60536 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [60784 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [50304 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) S3 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [46416 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [48080 2018-02-12] (AnchorFree Inc -> The OpenVPN Project) R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [245272 2019-04-24] (Kaspersky Lab -> AO Kaspersky Lab) R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [99152 2019-03-26] (Kaspersky Lab -> AO Kaspersky Lab) R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [302368 2019-04-24] (Kaspersky Lab -> AO Kaspersky Lab) R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [116104 2019-04-24] (Kaspersky Lab -> AO Kaspersky Lab) R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [198768 2019-04-29] (Kaspersky Lab -> AO Kaspersky Lab) R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [104576 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [184960 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [218240 2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [118272 2014-04-30] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) R3 O2FJ2RDR; C:\WINDOWS\System32\drivers\O2FJ2w8x64.sys [210616 2014-05-14] (O2Micro -> BayHubTech/O2Micro ) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [47496 2019-09-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [344288 2019-09-09] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54496 2019-09-09] (Microsoft Windows -> Microsoft Corporation) S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-09-10 20:54 - 2019-09-10 20:56 - 000034297 _____ C:\Users\Commun\Downloads\FRST.txt 2019-09-10 20:53 - 2019-09-10 20:54 - 000000000 ____D C:\FRST 2019-09-10 20:50 - 2019-09-10 20:52 - 001614848 _____ (Farbar) C:\Users\Commun\Downloads\FRST64.exe 2019-09-09 17:58 - 2019-09-09 17:58 - 003040640 _____ (Nicolas Coolman) C:\Users\Commun\Downloads\ZHPDiag3 (1).exe 2019-09-09 16:46 - 2019-09-10 16:56 - 000409756 _____ C:\Users\Piccole\Desktop\ZHPDiag.txt 2019-09-09 16:23 - 2019-09-09 16:23 - 000000869 _____ C:\Users\Piccole\Desktop\ZHPDiag.lnk 2019-09-09 16:22 - 2019-09-09 16:22 - 000000000 ____D C:\Users\Piccole\AppData\Local\ZHP 2019-09-09 16:19 - 2019-09-09 16:19 - 003040640 _____ (Nicolas Coolman) C:\Users\Commun\Downloads\ZHPDiag3.exe 2019-09-09 10:32 - 2019-09-09 10:33 - 000000000 ____D C:\Users\Commun\Downloads\CrystalDiskInfoPortable 2019-09-09 10:32 - 2019-09-09 10:32 - 004113760 _____ (PortableApps.com) C:\Users\Commun\Downloads\crystaldiskinfo-portable-7-0-2.exe 2019-09-09 08:34 - 2019-09-09 08:34 - 007636680 _____ (Malwarebytes) C:\Users\Commun\Downloads\adwcleaner_7.4.1(1).exe 2019-09-09 08:32 - 2019-09-09 08:32 - 007025360 _____ (Malwarebytes) C:\Users\Commun\Downloads\adwcleaner_7.3.exe 2019-09-08 09:57 - 2019-09-08 09:57 - 000000000 ____D C:\Users\Commun\Desktop\8 septembre 2019 2019-09-08 09:51 - 2019-09-08 09:51 - 789303813 _____ C:\WINDOWS\MEMORY.DMP 2019-09-07 10:56 - 2019-09-08 10:18 - 000000000 ____D C:\Users\Commun\Desktop\Eglises-Orientales 2019-09-05 17:14 - 2019-09-09 08:38 - 000003182 _____ C:\WINDOWS\System32\Tasks\AdwCleaner_onReboot 2019-09-05 17:10 - 2019-09-05 17:14 - 000000000 ____D C:\AdwCleaner 2019-09-05 17:10 - 2019-09-05 17:10 - 007622344 _____ (Malwarebytes) C:\Users\Commun\Downloads\adwcleaner_7.4.1.exe 2019-09-05 17:03 - 2019-09-05 17:03 - 020889016 _____ (Piriform Software Ltd) C:\Users\Commun\Downloads\ccsetup561.exe 2019-09-04 17:35 - 2019-09-09 09:10 - 000478840 _____ C:\WINDOWS\system32\perfh011.dat 2019-09-04 17:35 - 2019-09-09 09:10 - 000133118 _____ C:\WINDOWS\system32\perfc011.dat 2019-09-04 17:35 - 2019-09-04 17:29 - 000144624 _____ C:\WINDOWS\system32\perfi011.dat 2019-09-04 17:35 - 2019-09-04 17:29 - 000033402 _____ C:\WINDOWS\system32\perfd011.dat 2019-09-04 17:32 - 2019-09-04 17:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ja 2019-09-04 17:31 - 2019-09-04 17:31 - 000000000 ____D C:\WINDOWS\system32\ja 2019-08-19 17:29 - 2019-09-03 14:47 - 000000000 ____D C:\Program Files\Mozilla Firefox 2019-08-14 17:14 - 2019-08-14 17:14 - 011724288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2019-08-14 17:14 - 2019-08-14 17:14 - 009941504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2019-08-14 17:14 - 2019-08-14 17:14 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2019-08-14 17:14 - 2019-08-14 17:14 - 002323688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2019-08-14 17:14 - 2019-08-14 17:14 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll 2019-08-14 17:14 - 2019-08-14 17:14 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll 2019-08-14 17:14 - 2019-08-14 17:14 - 000092832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys 2019-08-14 17:13 - 2019-08-14 17:13 - 026808320 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 023453696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 020816896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 019011584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 012939776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 012244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 008900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 007921664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 007871488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 006925312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 006544552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 006441472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 006308016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 006065152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 005764608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 005587968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 005086208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 004628992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 004344832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 003818632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 003656704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002942976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002926096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2019-08-14 17:13 - 2019-08-14 17:13 - 002778760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002700792 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002346496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002298880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002278792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002177336 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002096128 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2019-08-14 17:13 - 2019-08-14 17:13 - 002073232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 002017792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2019-08-14 17:13 - 2019-08-14 17:13 - 001733120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001711104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001701888 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001668752 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001506304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001477432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001465984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001278808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001222160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 001221528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 001180464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000993792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000806024 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 000791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000791040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000783184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000763392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000730112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000658944 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000535056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2019-08-14 17:13 - 2019-08-14 17:13 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 000522104 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 000515440 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2PGraph.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000428032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000425984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000398928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000383504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys 2019-08-14 17:13 - 2019-08-14 17:13 - 000360960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2PGraph.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingDiagSpp.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000317952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposableShellProxyStub.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShellCommonCommonProxyStub.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.SystemManagement.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2019-08-14 17:13 - 2019-08-14 17:13 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2pnetsh.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutil.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2019-08-14 17:13 - 2019-08-14 17:13 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\p2pnetsh.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000173216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys 2019-08-14 17:13 - 2019-08-14 17:13 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000152576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComposableShellProxyStub.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000152576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsutil.exe 2019-08-14 17:13 - 2019-08-14 17:13 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000121656 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000114128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShellExtFramework.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Groupinghc.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000058882 _____ C:\WINDOWS\system32\srms.dat 2019-08-14 17:13 - 2019-08-14 17:13 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll 2019-08-14 17:13 - 2019-08-14 17:13 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shunimpl.dll 2019-08-14 17:12 - 2019-08-14 17:13 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 009682744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 007884288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 007645392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 005570968 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 004737536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 004588544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 004351656 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 004056576 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 003978240 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 003635200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 003385856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 003363856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 003333632 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 002842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 002438576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 002421760 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 002189312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001966904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 001715712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001701880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2019-08-14 17:12 - 2019-08-14 17:12 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001483872 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001479184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001472568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 001466880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001391096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 001344960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2019-08-14 17:12 - 2019-08-14 17:12 - 001321784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001267712 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001260560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 001182240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001098272 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 001054712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 001038336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000864568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 000771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000678680 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000586256 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShellCommonCommonProxyStub.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000519168 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingDiagSpp.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.SystemManagement.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 000262336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 000200504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000193040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2019-08-14 17:12 - 2019-08-14 17:12 - 000152080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys 2019-08-14 17:12 - 2019-08-14 17:12 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdcpw.dll 2019-08-14 17:12 - 2019-08-14 17:12 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\shunimpl.dll 2019-08-14 17:11 - 2019-08-14 17:12 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 007687784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 003567104 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 003335224 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 002999808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 002767160 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 002706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 002593544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 002031104 _____ C:\WINDOWS\system32\rdpnano.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 002022096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 001892864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 001674752 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 001662264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 001294488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 001232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 001205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 001048376 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 001020416 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 001004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000980992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000900096 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000895792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000850976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000799784 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000794040 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000788480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000764416 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000758688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000732168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000652088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 000603280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000508968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000482104 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000449576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000444728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000375752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000310072 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000294512 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000278624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000253256 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000248120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 000230848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000212792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000203064 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000189712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000141736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 000125016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000118480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pmem.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2019-08-14 17:11 - 2019-08-14 17:11 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiskSnapshot.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000087056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsUpdateElevatedInstaller.exe 2019-08-14 17:11 - 2019-08-14 17:11 - 000032784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhv.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 000032568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys 2019-08-14 17:11 - 2019-08-14 17:11 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2019-08-14 17:11 - 2019-08-14 17:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2019-08-14 17:11 - 2019-08-14 17:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2019-08-14 17:11 - 2019-08-14 17:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2019-08-14 17:11 - 2019-08-14 17:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2019-08-14 17:11 - 2019-08-14 17:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2019-08-14 17:11 - 2019-08-14 17:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2019-08-14 17:11 - 2019-08-14 17:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2019-08-14 17:11 - 2019-08-14 17:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-09-10 20:53 - 2019-01-09 10:34 - 000000000 ____D C:\ProgramData\Kaspersky Lab 2019-09-10 20:48 - 2019-01-28 22:38 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-09-10 20:48 - 2018-09-15 09:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-09-10 16:56 - 2016-11-30 13:34 - 000000000 ____D C:\Users\Piccole\AppData\Roaming\ZHP 2019-09-10 16:47 - 2018-09-15 08:09 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2019-09-10 15:29 - 2016-12-01 17:27 - 000000000 ____D C:\Users\Commun\AppData\LocalLow\Mozilla 2019-09-10 15:22 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\NDF 2019-09-10 11:33 - 2019-06-27 12:32 - 000000000 ____D C:\Users\Commun\Desktop\denis 2019-09-10 08:55 - 2018-09-15 09:31 - 000000000 ____D C:\WINDOWS\INF 2019-09-10 08:46 - 2016-10-01 18:03 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2019-09-10 08:46 - 2016-06-18 13:48 - 000000000 __SHD C:\Users\Commun\IntelGraphicsProfiles 2019-09-09 16:24 - 2018-05-13 16:49 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2019-09-09 10:37 - 2019-01-28 23:21 - 000004178 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B2C3D06E-5578-4146-AA8C-020AD78C0A43} 2019-09-09 09:10 - 2019-01-28 23:01 - 003301334 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-09-09 09:10 - 2019-01-28 18:46 - 000780710 _____ C:\WINDOWS\system32\perfh00C.dat 2019-09-09 09:10 - 2019-01-28 18:46 - 000149278 _____ C:\WINDOWS\system32\perfc00C.dat 2019-09-09 09:10 - 2018-09-15 18:58 - 000779938 _____ C:\WINDOWS\system32\perfh010.dat 2019-09-09 09:10 - 2018-09-15 18:58 - 000146148 _____ C:\WINDOWS\system32\perfc010.dat 2019-09-09 09:08 - 2014-12-23 05:56 - 000000000 ____D C:\Program Files (x86)\Dell Backup and Recovery 2019-09-09 09:03 - 2019-01-28 23:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-09-09 09:03 - 2018-09-15 08:09 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2019-09-09 08:47 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-09-09 08:29 - 2019-01-28 23:21 - 000004210 _____ C:\WINDOWS\System32\Tasks\CCleaner Update 2019-09-08 09:57 - 2019-03-27 09:26 - 000000000 ____D C:\WINDOWS\Minidump 2019-09-07 10:54 - 2018-09-15 09:33 - 000000000 ___HD C:\Program Files\WindowsApps 2019-09-05 17:14 - 2014-12-23 06:00 - 000000000 ____D C:\Program Files\Dell 2019-09-05 17:14 - 2014-12-23 05:54 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell 2019-09-05 17:14 - 2014-12-23 05:47 - 000000000 ____D C:\ProgramData\Dell 2019-09-05 17:14 - 2014-12-23 05:47 - 000000000 ____D C:\Program Files (x86)\DELL 2019-09-05 17:14 - 2014-12-23 05:41 - 000000000 ____D C:\Program Files (x86)\CyberLink 2019-09-05 17:09 - 2015-11-08 22:07 - 000001145 _____ C:\Users\Public\Desktop\VLC media player.lnk 2019-09-05 17:08 - 2016-06-28 12:19 - 000000000 ____D C:\Users\Commun\AppData\Roaming\vlc 2019-09-05 17:04 - 2018-01-15 10:03 - 000000865 _____ C:\Users\Public\Desktop\CCleaner.lnk 2019-09-05 17:01 - 2018-09-15 09:33 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2019-09-04 18:19 - 2018-09-15 09:23 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-09-04 18:16 - 2018-03-06 15:01 - 000000000 ____D C:\Users\Commun\AppData\Local\PlaceholderTileLogoFolder 2019-09-04 17:32 - 2019-01-28 18:06 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2019-09-04 17:32 - 2018-09-15 18:58 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm 2019-09-04 17:32 - 2018-09-15 18:58 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN 2019-09-04 17:32 - 2018-09-15 18:58 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr 2019-09-04 17:32 - 2018-09-15 18:58 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2019-09-04 17:32 - 2018-09-15 18:58 - 000000000 ____D C:\WINDOWS\system32\winrm 2019-09-04 17:32 - 2018-09-15 18:58 - 000000000 ____D C:\WINDOWS\system32\WCN 2019-09-04 17:32 - 2018-09-15 18:58 - 000000000 ____D C:\WINDOWS\system32\slmgr 2019-09-04 17:32 - 2018-09-15 18:58 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\com 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\oobe 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\MUI 2019-09-04 17:32 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\migwiz 2019-09-04 17:32 - 2018-09-15 08:09 - 000000000 ____D C:\WINDOWS\system32\Sysprep 2019-09-04 17:31 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\system32\F12 2019-09-04 17:31 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\system32\dsc 2019-09-04 17:31 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2019-09-04 17:31 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\com 2019-09-04 17:31 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2019-09-04 17:31 - 2018-09-15 08:09 - 000000000 ____D C:\WINDOWS\system32\Dism 2019-09-04 17:31 - 2018-09-15 08:09 - 000000000 ____D C:\WINDOWS\servicing 2019-09-04 17:30 - 2018-09-15 19:00 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2019-09-04 17:30 - 2018-09-15 19:00 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2019-09-04 17:30 - 2018-09-15 09:33 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2019-09-04 17:30 - 2018-09-15 09:33 - 000000000 ___RD C:\Program Files\Windows Defender 2019-09-04 17:30 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\IME 2019-09-04 17:30 - 2018-09-15 09:33 - 000000000 ____D C:\Program Files\Common Files\system 2019-09-04 17:30 - 2018-09-15 09:33 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2019-09-04 17:01 - 2017-12-20 19:09 - 000000000 ____D C:\Users\Commun\AppData\Local\Packages 2019-09-04 15:56 - 2019-01-28 23:21 - 000003368 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2549745364-3443181783-2265035364-1002 2019-09-04 15:55 - 2019-01-28 22:46 - 000002430 _____ C:\Users\Commun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-09-04 15:55 - 2016-06-18 13:51 - 000000000 ___RD C:\Users\Commun\OneDrive 2019-09-03 14:47 - 2016-12-01 17:26 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2019-08-27 22:03 - 2019-01-28 22:46 - 000000000 ____D C:\Users\Commun 2019-08-27 15:16 - 2016-12-01 17:26 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2019-08-27 08:36 - 2019-01-28 22:46 - 000000000 ____D C:\Users\Piccole 2019-08-27 08:36 - 2019-01-28 22:46 - 000000000 ____D C:\Users\Guest 2019-08-27 08:34 - 2017-09-20 09:25 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-08-27 08:34 - 2017-09-20 09:25 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-08-25 12:24 - 2017-04-14 10:24 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-08-15 18:07 - 2019-01-28 23:21 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2019-08-15 17:30 - 2016-10-20 10:21 - 000000000 ____D C:\Users\Commun\AppData\Roaming\dvdcss 2019-08-14 18:51 - 2017-12-20 19:41 - 000000000 ___RD C:\Users\Commun\3D Objects 2019-08-14 18:51 - 2016-04-27 07:40 - 000000000 __RHD C:\Users\Public\AccountPictures 2019-08-14 18:48 - 2019-01-28 22:38 - 000526376 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-08-14 18:43 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\system32\UNP 2019-08-14 18:43 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\Provisioning 2019-08-14 18:43 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\bcastdvr 2019-08-14 17:26 - 2015-06-22 10:02 - 000000000 ____D C:\WINDOWS\system32\MRT 2019-08-14 17:22 - 2015-06-22 10:02 - 134272480 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2019-08-14 17:22 - 2015-06-17 09:29 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2019-08-14 17:20 - 2013-08-22 15:25 - 000000167 _____ C:\WINDOWS\win.ini ==================== SigCheck =============================== (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ============================