~ ZHPDiag v2019.11.3.156 By Nicolas Coolman (2019/11/03) ~ Run by USER (Administrator) (2019/11/04 00:16:36) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Certificate ZHPDiag: Legal ~ State version: Version OK ~ Mode: Scan ~ Report: C:\Users\USER\Desktop\ZHPDiag.txt ~ Report: C:\Users\USER\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ System startup: Normal (Normal boot) Windows 10 Pro, 64-bit (Build 18362) =>.Microsoft Corporation ---\\ Internet Browsers (3) - 0s ~ GCIE: Google Chrome v77.0.3865.120 ~ MSIE: Microsoft Edge v40 ~ MSIE: Internet Explorer v11.356.18362.0 ---\\ Windows Product Information (3) - 4s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : KO ---\\ System protection software (2) - 8s Windows Defender W10 (Deactivate) (Protection) Malwarebytes version 3.8.3.2965 v3.8.3.2965 (Protection) ---\\ Informations on the system (6) - 0s ~ Operating System: Intel64 Family 6 Model 142 Stepping 10, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 8295.564 MB (45% free) : OK =>.RAM Value System Restore: Activé (Enable) System drive C: has 359 GB (71%) free of 504 GB : OK =>.Disk Space ---\\ Connection to the system mode (3) - 0s ~ Computer Name: DESKTOP-O5FMDSM ~ User Name: USER ~ Logged in as Administrator ---\\ Enumeration of the disk units (3) - 0s ~ Drive C: has 359 GB free of 504 GB (System) ~ Drive D: has 696 GB free of 799 GB ~ Drive E: has 489 GB free of 602 GB ---\\ State of the Windows Security Center (8) - 0s [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Search Generic System Files (25) - 2s [MD5.9CFA2A65575B4313753BC52D268F7B85] - 19/09/2019 - (.Microsoft Corporation - Windows Explorer.) -- C:\WINDOWS\Explorer.exe [4551352] =>.Microsoft® [MD5.F68AF942FD7CCC0E7BAB1A2335D2AD26] - 19/03/2019 - (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [71168] =>.Microsoft Corporation [MD5.9520279A6AD9B4A25815135C6B39CE16] - 19/03/2019 - (.Microsoft Corporation - Windows Start-Up Application.) -- C:\WINDOWS\System32\Wininit.exe [371376] =>.Microsoft Corporation [MD5.E94DB88CE613026CBC025ECCE5400250] - 19/09/2019 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [5041664] =>.Microsoft Corporation [MD5.1690E047E23E9F89579D74DB747838A7] - 19/09/2019 - (.Microsoft Corporation - Windows Logon Application.) -- C:\WINDOWS\System32\Winlogon.exe [844800] =>.Microsoft Corporation [MD5.2A9B7F8A8EE29634709BFF80817AEFD8] - 19/03/2019 - (.Microsoft Corporation - Software Licensing Library.) -- C:\WINDOWS\System32\sppcomapi.dll [307712] =>.Microsoft Corporation [MD5.2F9444B55CDC2C66CD692D6088091EF4] - 19/09/2019 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [818656] =>.Microsoft® [MD5.8ECD87F592CF60DA7CCFB3AC80A52C10] - 19/09/2019 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\Syswow64\dnsapi.dll [588256] =>.Microsoft® [MD5.4BB305AEED92BB280760B127548E1DC2] - 19/03/2019 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] =>.Microsoft Corporation [MD5.DE2CAA60B963E5103B3543C0DE45D25D] - 19/03/2019 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [662032] =>.Microsoft Corporation [MD5.6CB8D419AD7A2D7D5373A7DDE2664D5C] - 19/03/2019 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [30224] =>.Microsoft Corporation [MD5.0F35318F3AB72D2BBEE26B247D372C70] - 19/03/2019 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [100352] =>.Microsoft Corporation [MD5.81E3779064C04790E30F25770F0AEADD] - 19/03/2019 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [173056] =>.Microsoft Corporation [MD5.D974C10E19DDC10622E30904AEE16FA3] - 19/03/2019 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [151040] =>.Microsoft Corporation [MD5.7F2568836476437410BC7E9E003CFD74] - 19/03/2019 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [114688] =>.Microsoft Corporation [MD5.B475892255B02D33CF29B24FBD4AFDC9] - 19/03/2019 - (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [119296] =>.Microsoft Corporation [MD5.5E05C0FEA671B910FEBC634E796C38B5] - 19/03/2019 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [224768] =>.Microsoft Corporation [MD5.29B1D7ED2CD18C3789EA0A32CF430FF5] - 19/09/2019 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [561680] =>.Microsoft Corporation [MD5.729ED379D3A960CFBE02C7634651AC63] - 19/09/2019 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [337408] =>.Microsoft Corporation [MD5.22CA7C1E11D7588B892B1A5CB8E91601] - 19/09/2019 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2698552] =>.Microsoft Corporation [MD5.AC682BC99BECA3A6C8C71234A9BC4225] - 19/03/2019 - (.Microsoft Corporation - Parallel Port Driver.) -- C:\WINDOWS\System32\drivers\Parport.sys [108032] =>.Microsoft Corporation [MD5.555E33527CC3C34620E49F5F86C8F7B0] - 19/03/2019 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [112128] =>.Microsoft Corporation [MD5.51D49770FD9D2E1956833C1F4D992893] - 19/09/2019 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [167936] =>.Microsoft Corporation [MD5.9AF99FB2DA176C88C68D886046C56B01] - 19/03/2019 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [132616] =>.Microsoft Corporation [MD5.B4D173B92E4715CEC1FB8C830747852A] - 19/03/2019 - (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [430096] =>.Microsoft Corporation ---\\ No disabled Windows Services (78) - 4s O23 - Service: Adobe Genuine Monitor Service (AGMService) . (.Adobe Systems, Incorporated - Adobe Genuine Software Service.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe =>.Adobe Inc.® O23 - Service: Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Inc.® O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atiesrxx.exe =>.Advanced Micro Devices, Inc.® O23 - Service: AtherosSvc (AtherosSvc) . (. - Windows Setup API.) - C:\WINDOWS\System32\drivers\AdminService.exe =>.Atheros O23 - Service: C:\WINDOWS\System32\AudioEndpointBuilder.dll (AudioEndpointBuilder) . (.Microsoft Corporation - Windows Audio Endpoint Builder.) - C:\WINDOWS\System32\AudioEndpointBuilder.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\audiosrv.dll (Audiosrv) . (.Microsoft Corporation - Windows Audio Service.) - C:\WINDOWS\System32\Audiosrv.dll =>.Microsoft Corporation O23 - Service: Avira Phantom VPN (AviraPhantomVPN) . (.Avira Operations GmbH & Co. KG - VpnService.) - C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: C:\WINDOWS\System32\bfe.dll (BFE) . (.Microsoft Corporation - Base Filtering Engine.) - C:\WINDOWS\System32\bfe.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\qmgr.dll (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) - C:\WINDOWS\System32\qmgr.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\system32\bisrv.dll (BrokerInfrastructure) . (.Microsoft Corporation - Process State Manager (PSM) Service.) - C:\WINDOWS\System32\psmsrv.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\cdpusersvc.dll (CDPUserSvc) . (.Microsoft Corporation - Microsoft (R) CDP User Components.) - C:\WINDOWS\System32\CDPUserSvc.dll =>.Microsoft Corporation O23 - Service: Connected Devices Platform User Service_e3cae (CDPUserSvc_e3cae) . (.Microsoft Corporation - Host Process for Windows Services.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher® O23 - Service: CyberLink FCL Service 5.18 (CLFCL5.18) . (.CyberLink Corp. - .) - C:\WINDOWS\System32\DRIVERS\CLFCL5.18\000.fcl =>.CyberLink Corp. O23 - Service: C:\Windows\System32\coremessaging.dll (CoreMessagingRegistrar) . (.Microsoft Corporation - Microsoft CoreMessaging Dll.) - C:\Windows\System32\coremessaging.dll =>.Microsoft Windows® O23 - Service: Corsair Service (CorsairService) . (.Corsair Memory, Inc. - Corsair.Service.) - C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe =>.Corsair Memory, Inc.® O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) . (.Intel Corporation - Intel HD Graphics Drivers for Windows(R).) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d14ddcba312bcfa8\IntelCpHDCPSvc.exe =>.Intel(R) pGFX® O23 - Service: C:\WINDOWS\System32\cryptsvc.dll (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) - C:\WINDOWS\System32\cryptsvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\das.dll (DeviceAssociationService) . (.Microsoft Corporation - Device Association Service.) - C:\WINDOWS\System32\das.dll =>.Microsoft Corporation O23 - Service: C:\Windows\System32\dhcpcore.dll (Dhcp) . (.Microsoft Corporation - DHCP Client Service.) - C:\Windows\System32\dhcpcore.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\diagtrack.dll (DiagTrack) . (.Microsoft Corporation - Microsoft Windows Diagnostics Tracking.) - C:\WINDOWS\System32\diagtrack.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\dispbroker.desktop.dll (DispBrokerDesktopSvc) . (.Microsoft Corporation - Desktop Display Broker.) - C:\WINDOWS\System32\DispBroker.Desktop.dll =>.Microsoft Corporation O23 - Service: C:\Windows\System32\dnsapi.dll (Dnscache) . (.Microsoft Corporation - DNS Caching Resolver Service.) - C:\WINDOWS\System32\dnsrslvr.dll =>.Microsoft Corporation O23 - Service: Dolby DAX2 API Service (Dolby DAX2 API Service) . (.Dolby Laboratories, Inc. - DolbyDAX2API.) - C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe =>.Dolby Laboratories, Inc.® O23 - Service: C:\WINDOWS\System32\dosvc.dll (DoSvc) . (.Microsoft Corporation - Host Process for Windows Services.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher® O23 - Service: C:\WINDOWS\System32\dusmsvc.dll (DusmSvc) . (.Microsoft Corporation - Data Usage Service.) - C:\WINDOWS\System32\dusmsvc.dll =>.Microsoft Corporation O23 - Service: ELAN Service (ETDService) . (.ELAN Microelectronics Corp. - Elan Service.) - C:\WINDOWS\System32\ETDService.exe =>.ELAN Microelectronics Corp. O23 - Service: C:\WINDOWS\System32\wevtsvc.dll (EventLog) . (.Microsoft Corporation - Event Logging Service.) - C:\WINDOWS\System32\wevtsvc.dll =>.Microsoft Corporation O23 - Service: @comres.dll,-2450 (EventSystem) . (.Microsoft Corporation - COM+.) - C:\Windows\System32\es.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\FntCache.dll (FontCache) . (.Microsoft Corporation - Windows Font Cache Service.) - C:\WINDOWS\System32\FntCache.dll =>.Microsoft Corporation O23 - Service: @gpapi.dll,-112 (gpsvc) . (.Microsoft Corporation - Group Policy Client.) - C:\WINDOWS\System32\gpsvc.dll =>.Microsoft Corporation O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google LLC - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: HitmanPro Scheduler (HitmanProScheduler) . (.SurfRight B.V. - HitmanPro Scheduler.) - C:\Program Files\HitmanPro\hmpsched.exe =>.SurfRight B.V.® O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel(R) Rapid Storage Technology® O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_22aac1442d387216\igfxCUIService.exe =>.Intel(R) pGFX® O23 - Service: System Interface Foundation Service (ImControllerService) . (...) - C:\WINDOWS\SysWOW64\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (.not file.) =>.Lenovo Group Limited O23 - Service: Intel(R) TPM Provisioning Service (Intel(R) TPM Provisioning Service) . (.Intel(R) Corporation - Intel(R) TPM Provisioning Service.) - C:\WINDOWS\System32\Intel\iCLS Client\lib\TPMProvisioningService.exe =>.Intel(R) Corporation O23 - Service: C:\WINDOWS\System32\iphlpsvc.dll (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) - C:\WINDOWS\System32\iphlpsvc.dll =>.Microsoft Corporation O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_0a3294d3216a4a83\jhi_service.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group® O23 - Service: C:\WINDOWS\System32\srvsvc.dll (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) - C:\WINDOWS\System32\srvsvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\wkssvc.dll (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) - C:\WINDOWS\System32\wkssvc.dll =>.Microsoft Corporation O23 - Service: LenovoVantageService (LenovoVantageService) . (.Lenovo Group Ltd. - LenovoVantageService.) - C:\Program Files (x86)\Lenovo\VantageService\LenovoVantageService.exe =>.Lenovo® O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Windows\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group® O23 - Service: C:\WINDOWS\system32\lsm.dll (LSM) . (.Microsoft Corporation - Local Session Manager Service.) - C:\WINDOWS\System32\lsm.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\moshost.dll (MapsBroker) . (.Microsoft Corporation - Downloaded Maps Manager.) - C:\WINDOWS\System32\moshost.dll =>.Microsoft Corporation O23 - Service: Malwarebytes Service (MBAMService) . (.Malwarebytes - Malwarebytes Service.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation® O23 - Service: C:\Windows\System32\FirewallAPI.dll (mpssvc) . (.Microsoft Corporation - Microsoft Protection Service.) - C:\WINDOWS\System32\mpssvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\nlasvc.dll (NlaSvc) . (.Microsoft Corporation - Network Location Awareness 2.) - C:\WINDOWS\System32\nlasvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\nsisvc.dll (nsi) . (.Microsoft Corporation - Network Store Interface RPC server.) - C:\WINDOWS\System32\nsisvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\APHostRes.dll (OneSyncSvc) . (.Microsoft Corporation - Accounts Host Service.) - C:\WINDOWS\System32\APHostService.dll =>.Microsoft Corporation O23 - Service: Sync Host_e3cae (OneSyncSvc_e3cae) . (.Microsoft Corporation - Host Process for Windows Services.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher® O23 - Service: C:\WINDOWS\System32\umpo.dll (Power) . (.Microsoft Corporation - User-mode Power Service.) - C:\WINDOWS\System32\umpo.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\profsvc.dll (ProfSvc) . (.Microsoft Corporation - ProfSvc.) - C:\WINDOWS\System32\profsvc.dll =>.Microsoft Corporation O23 - Service: Qualcomm Atheros WLAN Driver Service (QcomWlanSrv) . (.Qualcomm Technologies Inc. - Qualcomm Atheros Universal WLAN Driver Serv.) - C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe =>.Qualcomm Technologies Inc. O23 - Service: QMEmulatorService (QMEmulatorService) . (.Tencent - 腾讯手游助手.) - D:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe =>.Tencent Technology(Shenzhen) Company Limited® O23 - Service: C:\WINDOWS\System32\rasmans.dll (RasMan) . (.Microsoft Corporation - Remote Access Connection Manager.) - C:\WINDOWS\System32\rasmans.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\system32\RpcEpMap.dll (RpcEptMapper) . (.Microsoft Corporation - RPC Endpoint Mapper.) - C:\WINDOWS\System32\RpcEpMap.dll =>.Microsoft Corporation O23 - Service: @combase.dll,-5010 (RpcSs) . (.Microsoft Corporation - Distributed COM Services.) - C:\WINDOWS\System32\rpcss.dll =>.Microsoft Corporation O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp.® O23 - Service: C:\WINDOWS\System32\schedsvc.dll (Schedule) . (.Microsoft Corporation - Task Scheduler Service.) - C:\WINDOWS\System32\schedsvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\Sens.dll (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) - C:\WINDOWS\System32\sens.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\SgrmBroker.exe,-100 (SgrmBroker) . (.Microsoft Corporation - System Guard Runtime Monitor Broker Service.) - C:\WINDOWS\System32\SgrmBroker.exe =>.Microsoft Corporation O23 - Service: C:\Windows\System32\shsvcs.dll (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) - C:\Windows\System32\shsvcs.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\spoolsv.exe,-1 (Spooler) . (.Microsoft Corporation - Spooler SubSystem App.) - C:\WINDOWS\System32\spoolsv.exe =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\sppsvc.exe,-101 (sppsvc) . (.Microsoft Corporation - Microsoft Software Protection Platform Serv.) - C:\WINDOWS\System32\sppsvc.exe =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\wiaservc.dll (stisvc) . (.Microsoft Corporation - Still Image Devices Service.) - C:\WINDOWS\System32\wiaservc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\sysmain.dll (SysMain) . (.Microsoft Corporation - SysMain Service Host.) - C:\WINDOWS\System32\sysmain.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\system32\SystemEventsBrokerServer.dll (SystemEventsBroker) . (.Microsoft Corporation - System Events Broker.) - C:\WINDOWS\System32\SystemEventsBrokerServer.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\themeservice.dll (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) - C:\WINDOWS\System32\themeservice.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\usermgr.dll (UserManager) . (.Microsoft Corporation - UserMgr.) - C:\WINDOWS\System32\usermgr.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\usosvc.dll (UsoSvc) . (.Microsoft Corporation - Update Session Orchestrator Service.) - C:\WINDOWS\System32\usosvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\wcmsvc.dll (Wcmsvc) . (.Microsoft Corporation - Windows Connection Manager Service DLL.) - C:\WINDOWS\System32\wcmsvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\wbem\wmisvc.dll (Winmgmt) . (.Microsoft Corporation - WMI.) - C:\WINDOWS\System32\wbem\WMIsvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\wlansvc.dll (WlanSvc) . (.Microsoft Corporation - Windows WLAN AutoConfig Service DLL.) - C:\WINDOWS\System32\wlansvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\wpnservice.dll (WpnService) . (.Microsoft Corporation - Windows Push Notification System Service.) - C:\WINDOWS\System32\WpnService.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\WpnUserService.dll (WpnUserService) . (.Microsoft Corporation - Windows Push Notification User Service.) - C:\WINDOWS\System32\WpnUserService.dll =>.Microsoft Corporation O23 - Service: Windows Push Notifications User Service_e3cae (WpnUserService_e3cae) . (.Microsoft Corporation - Host Process for Windows Services.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher® O23 - Service: C:\WINDOWS\System32\wscsvc.dll (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) - C:\WINDOWS\System32\wscsvc.dll =>.Microsoft Corporation O23 - Service: C:\WINDOWS\System32\SearchIndexer.exe,-103 (WSearch) . (.Microsoft Corporation - Microsoft Windows Search Indexer.) - C:\Windows\System32\SearchIndexer.exe =>.Microsoft Corporation ---\\ Services not Microsoft (SR=Run, SS=Stop) (120) - 26s SR - Boot [19/03/2019] [ 107528] (3ware) . (.LSI.) - C:\WINDOWS\System32\drivers\3ware.sys =>.Microsoft Windows® SR - Demand [12/07/2018] [ 62296] Lenovo Virtual Power Controlle (ACPIVPC) . (.Lenovo Corporation.) - C:\WINDOWS\System32\drivers\AcpiVpc.sys =>.Lenovo (Beijing) Co., Ltd.® SR - Boot [19/03/2019] [ 1135632] (ADP80XX) . (.PMC-Sierra.) - C:\WINDOWS\System32\drivers\ADP80XX.SYS =>.Microsoft Windows® SR - Auto [08/10/2019] [ 3147344] Adobe Genuine Monitor Service (AGMService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe =>.Adobe Inc.® SR - Auto [08/10/2019] [ 2914896] Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Inc.® SR - Auto [03/04/2019] [ 508208] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atiesrxx.exe =>.Advanced Micro Devices, Inc.® SR - Demand [19/03/2019] [ 18432] AMD GPIO Client Driver (amdgpio2) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdgpio2.sys =>.Advanced Micro Devices, Inc SR - Demand [19/03/2019] [ 37888] AMD I2C Controller Service (amdi2c) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdi2c.sys =>.Advanced Micro Devices, Inc SR - Demand [03/04/2019] [52888368] (amdkmdag) . (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atikmdag.sys =>.Advanced Micro Devices, Inc.® SR - Demand [03/04/2019] [ 590128] (amdkmdap) . (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atikmpag.sys =>.Advanced Micro Devices, Inc.® SR - Boot [19/03/2019] [ 83464] (amdsata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdsata.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 259600] (amdsbs) . (.AMD Technologies Inc..) - C:\WINDOWS\System32\drivers\amdsbs.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 27176] (amdxata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdxata.sys =>.Microsoft Windows® SR - Auto [00/00/0000] [ 0] aow_drv (aow_drv) . (...) - \D:\Program Files\TxGameAssistant\UI\2.0.12832.123\aow_drv_x64_ev.sys (.not file.) SR - Boot [19/03/2019] [ 132112] Adaptec SAS/SATA-II RAID S (arcsas) . (.PMC-Sierra, Inc..) - C:\WINDOWS\System32\drivers\arcsas.sys =>.Microsoft Windows® SR - Auto [11/04/2019] [ 420472] AtherosSvc (AtherosSvc) . (.Microsoft.) - C:\WINDOWS\System32\drivers\AdminService.exe =>.Microsoft® SR - Auto [16/09/2019] [ 382232] Avira Phantom VPN (AviraPhantomVPN) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe =>.Avira Operations GmbH & Co. KG® SR - Boot [19/03/2019] [ 534032] QLogic Network Adapter VBD (b06bdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\bxvbda.sys =>.Microsoft Windows® SR - Demand [19/03/2019] [ 9728] bcmfn2 Service (bcmfn2) . (...) - C:\WINDOWS\System32\drivers\bcmfn2.sys =>.Broadcom Corporation SR - Demand [11/04/2019] [ 74216] BtFilter (BtFilter) . (.Qualcomm.) - C:\WINDOWS\System32\drivers\btfilter.sys =>.Qualcomm Atheros® SR - Boot [19/03/2019] [ 319528] (cht4iscsi) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4sx64.sys =>.Microsoft Windows® SR - Demand [19/03/2019] [ 1866768] Chelsio Virtual Bus Driver (cht4vbd) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4vx64.sys =>.Microsoft Windows® SR - Demand [14/03/2019] [ 96376] Corsair G (CorsairGamingAudioService) . (.Corsair Memory, Inc..) - C:\WINDOWS\System32\DRIVERS\CorsairGamingAudioamd64.sys =>.Microsoft® SR - Auto [22/04/2019] [ 50728] Corsair Service (CorsairService) . (.Corsair Memory, Inc..) - C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe =>.Corsair Memory, Inc.® SR - Demand [27/03/2019] [ 45456] Corsair Bus (CorsairVBusDriver) . (.Corsair.) - C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys =>.Microsoft® SR - Demand [27/03/2019] [ 21904] Corsair virtual device (CorsairVHidDriver) . (.Corsair.) - C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys =>.Microsoft® SS - Demand [25/07/2019] [ 509792] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d14ddcba312bcfa8\IntelCpHeciSvc.exe =>.Intel(R) pGFX® SR - Auto [25/07/2019] [ 517472] Intel(R) Content Protection HDCP Service (cplspcon) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d14ddcba312bcfa8\IntelCpHDCPSvc.exe =>.Intel(R) pGFX® SR - Demand [02/11/2019] [ 44648] cpuz148 (cpuz148) . (.CPUID.) - C:\Windows\Temp\cpuz148\cpuz148_x64.sys =>.CPUID S.A.R.L.U.® SR - Demand [09/07/2019] [ 135520] SAMSUNG Mobile USB Com (dg_ssudbus) . (.Samsung Electronics Co., Ltd..) - C:\WINDOWS\System32\DRIVERS\ssudbus.sys =>.Samsung Electronics Co., Ltd.® SR - Auto [21/01/2019] [ 189464] Dolby DAX2 API Service (Dolby DAX2 API Service) . (.Dolby Laboratories, Inc..) - C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe =>.Dolby Laboratories, Inc.® SR - Boot [19/03/2019] [ 3419176] QLogic 10 Gigabit Ethernet Ada (ebdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\evbda.sys =>.Microsoft Windows® SR - System [02/11/2019] [ 176128] epp (epp) . (.Emsisoft Ltd.) - C:\EEK\bin64\epp.sys =>.Emsisoft Ltd® SR - System [30/09/2019] [ 153312] Malwarebytes Anti-Exploit (ESProtectionDriver) . (.Malwarebytes.) - C:\WINDOWS\system32\drivers\mbae64.sys =>.Malwarebytes Corporation® SR - Demand [31/01/2019] [ 744088] ELAN PS/2 Port Input Device (ETD) . (.ELAN Microelectronics Corp..) - C:\WINDOWS\System32\drivers\ETD.sys =>.ELAN MICROELECTRONICS CORPORATION® SR - Demand [31/01/2019] [ 30360] ELAN HID Class Filter Service (ETDHCF) . (.ELAN Microelectronics Corp..) - C:\WINDOWS\System32\drivers\ETDHCF.sys =>.ELAN MICROELECTRONICS CORPORATION® SR - Auto [31/01/2019] [ 249496] ELAN Service (ETDService) . (.ELAN Microelectronics Corp..) - C:\WINDOWS\System32\ETDService.exe =>.ELAN MICROELECTRONICS CORPORATION® SS - Demand [09/10/2019] [ 1106416] Google Chrome Elevation Service (GoogleChromeElevationService) . (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.120\elevation_service.exe =>.Google LLC® SR - Auto [04/04/2019] [ 156456] Service Google Update (gupdate) (gupdate) . (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [04/04/2019] [ 156456] Service Google Update (gupdatem) (gupdatem) . (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Disabl [02/11/2019] [ 55232] HitmanPro 3.7 Support Driver (hitmanpro37) . (.© 2017 SurfRight B.V..) - C:\WINDOWS\system32\drivers\hitmanpro37.sys =>.SurfRight B.V.® SR - Auto [02/11/2019] [ 139504] HitmanPro Scheduler (HitmanProScheduler) . (.SurfRight B.V..) - C:\Program Files\HitmanPro\hmpsched.exe =>.SurfRight B.V.® SR - Boot [19/03/2019] [ 64528] (HpSAMD) . (.Hewlett-Packard Company.) - C:\WINDOWS\System32\drivers\HpSAMD.sys =>.Microsoft Windows® SR - System [27/05/2019] [ 66336] HWiNFO Kernel Driver (HWiNFO) . (.REALiX(tm).) - C:\Windows\system32\drivers\HWiNFO64A.SYS =>.Martin Malik - REALiX® SR - Demand [19/03/2019] [ 36352] Intel Serial IO GPIO Controlle (iagpio) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iagpio.sys =>.Intel(R) Corporation SR - Demand [19/03/2019] [ 91136] Intel(R) Serial IO I2C Host Cont (iai2c) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iai2c.sys =>.Intel(R) Corporation SR - Demand [19/03/2019] [ 79360] Intel(R) S (iaLPSS2i_GPIO2) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys =>.Intel Corporation SR - Demand [19/03/2019] [ 93184] In (iaLPSS2i_GPIO2_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys =>.Intel Corporation SR - Demand [19/03/2019] [ 112128] Intel( (iaLPSS2i_GPIO2_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys =>.Intel Corporation SR - Demand [19/03/2019] [ 96256] Intel( (iaLPSS2i_GPIO2_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys =>.Intel Corporation SR - Demand [19/03/2019] [ 171520] Intel(R) Seria (iaLPSS2i_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys =>.Intel Corporation SR - Demand [19/03/2019] [ 175104] Intel( (iaLPSS2i_I2C_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys =>.Intel Corporation SR - Demand [19/03/2019] [ 180736] Intel(R) S (iaLPSS2i_I2C_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys =>.Intel Corporation SR - Demand [19/03/2019] [ 177664] Intel(R) S (iaLPSS2i_I2C_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys =>.Intel Corporation SR - Demand [26/10/2018] [ 190920] Intel(R) Serial IO I2C Dri (iaLPSS2_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Demand [19/03/2019] [ 38128] Intel(R) Serial IO (iaLPSSi_GPIO) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys =>.Intel Corporation - Client Components Group® SR - Demand [19/03/2019] [ 113152] Intel(R) Serial IO I (iaLPSSi_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys =>.Intel Corporation SR - Boot [26/02/2019] [ 1018032] Intel(R) Chipset SATA/PCIe (iaStorAC) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorAC.sys =>.Intel(R) Rapid Storage Technology® SR - Boot [19/03/2019] [ 885048] Intel Chipset SATA RAI (iaStorAVC) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorAVC.sys =>.Microsoft Windows® SR - Auto [26/02/2019] [ 17464] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel(R) Rapid Storage Technology® SR - Boot [19/03/2019] [ 411960] Intel RAID Controller Wi (iaStorV) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorV.sys =>.Microsoft Windows® SR - Demand [19/03/2019] [ 566800] Mellanox InfiniBand Bus/A (ibbus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ibbus.sys =>.Microsoft Windows® SR - Auto [20/12/2018] [ 229296] IDMWFP (IDMWFP) . (.Tonec Inc..) - C:\WINDOWS\System32\DRIVERS\idmwfp.sys =>.Tonec Inc.® SR - Demand [25/07/2019] [20047208] (igfx) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d14ddcba312bcfa8\igdkmd64.sys =>.Intel(R) pGFX® SR - Auto [25/07/2019] [ 415072] Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_22aac1442d387216\igfxCUIService.exe =>.Intel(R) pGFX® SR - Auto [00/00/0000] [ 0] System Interface Foundation (ImControllerService) . (...) - C:\WINDOWS\SysWOW64\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (.not file.) =>.Lenovo Group Limited SR - Demand [02/05/2019] [ 6840408] Service for Realtek HD Audio (WDM) (IntcAzAudAddService) . (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\RTKVHD64.sys =>.Realtek Semiconductor Corp.® SR - Demand [25/07/2019] [ 340840] Son Intel(R) pour écrans (IntcDAud) . (.Intel(R) Corporation.) - C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_1cd2ec6e5cd924a2\IntcDAud.sys =>.Intel(R) pGFX® SS - Demand [16/11/2018] [ 780600] Intel(R) Capability Lice (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\Intel\iCLS Client\lib\SocketHeciServer.exe =>.Intel® SR - Auto [16/11/2018] [ 718656] Intel(R) TPM Provis (Intel(R) TPM Provisioning Service) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\Intel\iCLS Client\lib\TPMProvisioningService.exe =>.Intel® SR - Boot [19/03/2019] [ 148520] (ItSas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\ItSas35i.sys =>.Microsoft Windows® SR - Auto [16/11/2018] [ 578752] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_0a3294d3216a4a83\jhi_service.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Auto [16/09/2019] [ 18200] LenovoVantageService (LenovoVantageService) . (.Lenovo Group Ltd..) - C:\Program Files (x86)\Lenovo\VantageService\LenovoVantageService.exe =>.Lenovo® SR - Auto [16/11/2018] [ 633856] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Windows\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Boot [19/03/2019] [ 109064] (LSI_SAS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 124448] (LSI_SAS2i) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas2i.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 128528] (LSI_SAS3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\lsi_sas3i.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 82960] (LSI_SSS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sss.sys =>.Microsoft Windows® SR - Auto [02/11/2019] [ 199768] MBAMChameleon (MBAMChameleon) . (.Malwarebytes.) - C:\WINDOWS\System32\Drivers\MbamChameleon.sys =>.Malwarebytes Corporation® SR - Boot [26/06/2019] [ 20936] MbamElam (MbamElam) . (.Malwarebytes.) - C:\WINDOWS\System32\DRIVERS\MbamElam.sys =>.Microsoft® SR - Demand [02/11/2019] [ 224408] MBAMFarflt (MBAMFarflt) . (.Malwarebytes.) - C:\WINDOWS\System32\DRIVERS\farflt.sys =>.Malwarebytes Corporation® SR - Demand [02/11/2019] [ 73584] MBAMProtection (MBAMProtection) . (.Malwarebytes.) - C:\WINDOWS\system32\DRIVERS\mbam.sys =>.Malwarebytes Corporation® SR - Auto [26/06/2019] [ 6744288] Malwarebytes Service (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation® SR - Demand [02/11/2019] [ 275232] MBAMSwissArmy (MBAMSwissArmy) . (.Malwarebytes.) - C:\WINDOWS\System32\Drivers\mbamswissarmy.sys =>.Malwarebytes Corporation® SR - Demand [02/11/2019] [ 116832] MBAMWebProtection (MBAMWebProtection) . (.Malwarebytes.) - C:\WINDOWS\System32\DRIVERS\mwac.sys =>.Malwarebytes Corporation® SR - Boot [19/03/2019] [ 59920] (megasas) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 75280] (megasas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\MegaSas2i.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 94736] (megasas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas35i.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 576016] (megasr) . (.LSI Corporation, Inc..) - C:\WINDOWS\System32\drivers\megasr.sys =>.Microsoft Windows® SR - Demand [16/11/2018] [ 228808] Intel(R) Management Engine Interfa (MEIx64) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Demand [19/03/2019] [ 1150480] Mellanox ConnectX Bus E (mlx4_bus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\mlx4_bus.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 64016] (mvumis) . (.Marvell Semiconductor, Inc..) - C:\WINDOWS\System32\drivers\mvumis.sys =>.Microsoft Windows® SR - Demand [19/03/2019] [ 153616] NetworkDirect Service (ndfltr) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ndfltr.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 150544] (nvraid) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvraid.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 166408] (nvstor) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvstor.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 58896] (percsas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas2i.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 68624] (percsas3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas3i.sys =>.Microsoft Windows® SR - Demand [16/09/2019] [ 45056] Phantom TAP-Windows Adapter V9 (phantomtap) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\phantomtap.sys =>.Avira Operations GmbH & Co. KG® SR - Demand [15/03/2019] [ 2372072] Qualcomm Atheros Extensi (Qcamain10x64) . (.Qualcomm Atheros, Inc..) - C:\WINDOWS\System32\drivers\Qcamain10x64.sys =>.Qualcomm Atheros® SR - Auto [15/03/2019] [ 191976] Qualcomm Atheros WLAN Driver Service (QcomWlanSrv) . (.Qualcomm Technologies Inc..) - C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe =>.Qualcomm Atheros® SR - Auto [30/09/2019] [ 148840] QMEmulatorService (QMEmulatorService) . (.Tencent.) - D:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe =>.Tencent Technology(Shenzhen) Company Limited® SR - Demand [23/10/2018] [ 1131024] Realtek RT640 NT Driver (rt640x64) . (.Realtek.) - C:\WINDOWS\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp.® SR - Auto [02/05/2019] [ 267552] Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp.® SR - Boot [19/03/2019] [ 45072] (SiSRaid2) . (.Silicon Integrated Systems Corp..) - C:\WINDOWS\System32\drivers\SiSRaid2.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 81936] (SiSRaid4) . (.Silicon Integrated Systems.) - C:\WINDOWS\System32\drivers\sisraid4.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 220176] (SmartSAMD) . (.Microsemi Corportation.) - C:\WINDOWS\System32\drivers\SmartSAMD.sys =>.Microsoft Windows® SR - Demand [04/07/2018] [ 48168] (SmbDrvI) . (.Synaptics Incorporated.) - C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys =>.Synaptics Incorporated® SR - Demand [09/07/2019] [ 166752] SAMSUNG Mobile USB Modem Dr (ssudmdm) . (.Samsung Electronics Co., Ltd..) - C:\WINDOWS\System32\DRIVERS\ssudmdm.sys =>.Samsung Electronics Co., Ltd.® SS - Demand [17/07/2019] [ 1695008] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe =>.Valve® SR - Boot [19/03/2019] [ 31240] (stexstor) . (.Promise Technology, Inc..) - C:\WINDOWS\System32\drivers\stexstor.sys =>.Microsoft Windows® SR - System [11/09/2017] [ 271600] TBox Support Driver (TBoxDrv) . (.Hyperv Corporation.) - C:\Program Files\AndroidTbox\TBoxDrv.sys =>.Tencent Technology(Shenzhen) Company Limited® SR - Demand [13/09/2019] [ 442128] tesrsdt (tesrsdt) . (.TENCENT.) - C:\Windows\system32\drivers\tesrsdt.sys =>.Tencent Technology(Shenzhen) Company Limited® SR - Demand [29/10/2019] [ 555064] TesSafe (TesSafe) . (.TENCENT.) - C:\Windows\system32\TesSafe.sys =>.Tencent Technology(Shenzhen) Company Limited® SS - Demand [26/05/2019] [ 2097008] Uncheater for BattleGroundsLite_SE (uncheater_bgl) . (.Wellbia.com Co., Ltd..) - C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe {1734520C9AABC257A502EC5DBF615354}. =>.Wellbia.com Co., Ltd. SR - Boot [19/03/2019] [ 166928] (vsmraid) . (.VIA Technologies Inc.,Ltd.) - C:\WINDOWS\System32\drivers\vsmraid.sys =>.Microsoft Windows® SR - Boot [19/03/2019] [ 305672] VIA StorX Storage RAID Co (VSTXRAID) . (.VIA Corporation.) - C:\WINDOWS\System32\drivers\vstxraid.sys =>.Microsoft Windows® SR - Demand [15/07/2016] [ 151184] (wdm_usb) . (.MBB.) - C:\WINDOWS\System32\DRIVERS\usb2ser.sys =>.NGO® SR - Demand [19/03/2019] [ 37928] WinMad Service (WinMad) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winmad.sys =>.Microsoft Windows® SR - Demand [19/03/2019] [ 77832] WinVerbs Service (WinVerbs) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winverbs.sys =>.Microsoft Windows® SR - Demand [29/05/2019] [ 74552] xhunter1 (xhunter1) . (.Wellbia.com Co., Ltd..) - C:\Windows\xhunter1.sys {674196C684611A58C69C9D14E7375896}. =>.Wellbia.com Co., Ltd. ---\\ Task Planned Automatically (Register) (30) - 10s O38 - TASK: {03D0632E-EA14-417F-9B01-F25E0FF599CE} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google LLC - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456] =>.Google LLC O38 - TASK: {0E76BA4A-081C-4AE4-BB42-8C3D4B1E817E} [64Bits][\Lenovo\Lenovo MigrationAssistant logon task] - (.Lenovo 2017 - Lenovo Migration Assistant Srv.) -- C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe [189720] O38 - TASK: {0EB8A589-40F6-4E0F-AFB5-D0B30BE5051F} [64Bits][\RTKCPL] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506176] =>.Realtek Semiconductor O38 - TASK: {113C5F3B-D19D-42FD-BB90-F6DB6F9C2506} [64Bits][\Lenovo\ImController\TimeBasedEvents\be277b5d-c68c-4d16-8f83-eccd8ed5ef23] - (.Lenovo Group Ltd. - Lenovo.Modern.ImController.) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208] =>.Lenovo Group Ltd. O38 - TASK: {2549A543-6AC4-40B6-9B5F-5C129DED6200} [64Bits][\StartCN] - (.Advanced Micro Devices, Inc. - Radeon Settings: Command Line Interface.) -- C:\Program Files\AMD\CNext\CNext\cncmd.exe [58760] =>.Advanced Micro Devices, Inc. O38 - TASK: {2EC8922E-4F44-4761-8A0D-CDACF7A99F6E} [64Bits][\ModifyLinkUpdate] - (.Advanced Micro Devices, Inc. - AMD Install Manager.) -- C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992] =>.Advanced Micro Devices, Inc. O38 - TASK: {4165D25B-86DD-4526-8EAE-55F5A9432F15} [64Bits][\RtHDVBg_Dolby] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506176] =>.Realtek Semiconductor O38 - TASK: {435BAC1D-3F8F-4755-B085-7D50F66C7FDC} [64Bits][\RtHDVBg_LENOVO_DOLBYDRAGON] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506176] =>.Realtek Semiconductor O38 - TASK: {521E3028-2BCB-43EC-B729-B81FC5EB493A} [64Bits][\AMDLinkUpdate] - (.Advanced Micro Devices, Inc. - AMD Install Manager.) -- C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992] =>.Advanced Micro Devices, Inc. O38 - TASK: {5DFF1443-9E68-43A5-8ED9-E29C73A17DE9} [64Bits][\Apple\AppleSoftwareUpdate] - (.Apple Inc. - Apple Software Update.) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416] =>.Apple Inc. O38 - TASK: {6A053283-C8F3-4E19-8C00-D283953575D0} [64Bits][\Lenovo\ImController\TimeBasedEvents\5e60727e-4e4f-46a6-9216-7b628c1e60e5] - (.Lenovo Group Ltd. - Lenovo.Modern.ImController.) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208] =>.Lenovo Group Ltd. O38 - TASK: {794FA99C-ED5F-4609-904E-37E7266F1EE0} [64Bits][\AdobeGCInvoker-1.0] - (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400] =>.Adobe Systems, Incorporated O38 - TASK: {7B651737-F549-4FEB-9AD6-DE77D57AC691} [64Bits][\Lenovo\ImController\Lenovo iM Controller Monitor] - (.Lenovo Group Ltd. - ImController.InfInstaller.) -- C:\WINDOWS\system32\ImController.InfInstaller.exe [54144] =>.Lenovo Group Ltd. O38 - TASK: {9841E9B3-DC48-424D-A471-47A5C2514243} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google LLC - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456] =>.Google LLC O38 - TASK: {DB3D104F-744B-4DE5-90B5-073613FB638A} [64Bits][\Lenovo\ImController\TimeBasedEvents\e1fa5cdc-2ae8-4f4d-ac32-c22fd54eff5f] - (.Lenovo Group Ltd. - Lenovo.Modern.ImController.) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208] =>.Lenovo Group Ltd. C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA - (.Google LLC.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/ua ./ua] =>.Google LLC C:\WINDOWS\System32\Tasks\Lenovo\Lenovo MigrationAssistant logon task - (.Lenovo 2017.) -- C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe [] C:\WINDOWS\System32\Tasks\RTKCPL - (.Realtek Semiconductor.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [/runcplsilence] =>.Realtek Semiconductor C:\WINDOWS\System32\Tasks\Lenovo\ImController\TimeBasedEvents\be277b5d-c68c-4d16-8f83-eccd8ed5ef23 - (.Lenovo Group Ltd..) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [/timebasedeventtrigger be277b5d-c68c-4d16-8f83-ecc] =>.Lenovo Group Ltd. C:\WINDOWS\System32\Tasks\StartCN - (.Advanced Micro Devices, Inc..) -- C:\Program Files\AMD\CNext\CNext\cncmd.exe [startwithdelay] =>.Advanced Micro Devices, Inc. C:\WINDOWS\System32\Tasks\ModifyLinkUpdate - (.Advanced Micro Devices, Inc..) -- C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [-UpdateCurrentUser] =>.Advanced Micro Devices, Inc. C:\WINDOWS\System32\Tasks\RtHDVBg_Dolby - (.Realtek Semiconductor.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [/FORPCEE4] =>.Realtek Semiconductor C:\WINDOWS\System32\Tasks\RtHDVBg_LENOVO_DOLBYDRAGON - (.Realtek Semiconductor.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [/LENOVO_DOLBYDRAGON] =>.Realtek Semiconductor C:\WINDOWS\System32\Tasks\AMDLinkUpdate - (.Advanced Micro Devices, Inc..) -- C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [-AMDLinkUpdate] =>.Advanced Micro Devices, Inc. C:\WINDOWS\System32\Tasks\Apple\AppleSoftwareUpdate - (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [-task] =>.Apple Inc. C:\WINDOWS\System32\Tasks\Lenovo\ImController\TimeBasedEvents\5e60727e-4e4f-46a6-9216-7b628c1e60e5 - (.Lenovo Group Ltd..) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [/timebasedeventtrigger 5e60727e-4e4f-46a6-9216-7b6] =>.Lenovo Group Ltd. C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0 - (.Adobe Systems, Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [-mode=scheduled] =>.Adobe Systems, Incorporated C:\WINDOWS\System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor - (.Lenovo Group Ltd..) -- C:\WINDOWS\system32\ImController.InfInstaller.exe [-checkremoval] =>.Lenovo Group Ltd. C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore - (.Google LLC.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/c] =>.Google LLC C:\WINDOWS\System32\Tasks\Lenovo\ImController\TimeBasedEvents\e1fa5cdc-2ae8-4f4d-ac32-c22fd54eff5f - (.Lenovo Group Ltd..) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [/timebasedeventtrigger e1fa5cdc-2ae8-4f4d-ac32-c22] =>.Lenovo Group Ltd. ---\\ Auto loading programs from Registry and folders (16) - 2s O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Security notification icon.) -- C:\WINDOWS\system32\SecurityHealthSystray.exe =>.Microsoft Corporation O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe =>.Intel(R) Rapid Storage Technology® O4 - HKLM\..\Run: [AdobeGCInvoker-1.0] . (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe =>.Adobe Inc.® O4 - HKLM\..\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconductor Corp.® O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation® O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc. O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe =>.Valve® O4 - HKCU\..\Run: [Viber] . (.Viber Media S.à r.l. - Viber.) -- C:\Users\USER\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l.® O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKLM\..\Wow6432Node\Run: [CORSAIR iCUE Software] . (.Corsair Memory, Inc. - iCUE.) -- C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE Launcher.exe =>.Corsair Memory, Inc.® O4 - HKLM\..\Wow6432Node\Run: [PowerDVD18Agent] . (.CyberLink Corp. - PowerDVD 18.) -- C:\Program Files (x86)\CyberLink\PowerDVD18\PowerDVD18Agent.exe =>.CyberLink Corp.® O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe =>.Apple Inc.® O4 - HKUS\S-1-5-21-1611984227-1131522694-2661748133-1001\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc. O4 - HKUS\S-1-5-21-1611984227-1131522694-2661748133-1001\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe =>.Valve® O4 - HKUS\S-1-5-21-1611984227-1131522694-2661748133-1001\..\Run: [Viber] . (.Viber Media S.à r.l. - Viber.) -- C:\Users\USER\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l.® ---\\ Process running (69) - 7s [MD5.23FA688708E31AA2D80D5CD501D7D29B] - (.Intel Corporation - igfxCUIService Module.) -- C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_22aac1442d387216\igfxCUIService.exe [415072] [PID.1992] =>.Intel(R) pGFX® [MD5.150F13FA5AB7EE8F195E7AB63FB71AA0] - (.Tencent - 腾讯手游助手.) -- D:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe [148840] [PID.2076] =>.Tencent Technology(Shenzhen) Company Limited® [MD5.B6F05C3614055A81CCDBDFAE8CCA8D9B] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atiesrxx.exe [508208] [PID.2372] =>.Advanced Micro Devices, Inc.® [MD5.1F6738D6E14E6C44685CAA9FFA460D28] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atieclxx.exe [758576] [PID.2596] =>.Advanced Micro Devices, Inc.® [MD5.0B5887E89D8D0D30DF119673D0D3E137] - (.ELAN Microelectronics Corp. - Elan Service.) -- C:\WINDOWS\System32\ETDService.exe [249496] [PID.2604] =>.ELAN Microelectronics Corp. [MD5.54C80CE4B484E5619E437BDC6978BD0D] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [267552] [PID.2980] =>.Realtek Semiconductor Corp.® [MD5.0D09BD1BCA2706BB19BC4AAC33C46FA8] - (.Corsair Memory, Inc. - Corsair.Service.) -- C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe [50728] [PID.3996] =>.Corsair Memory, Inc.® [MD5.1D47788F28C4474E6378A159F8438216] - (. - Windows Setup API.) -- C:\WINDOWS\System32\drivers\AdminService.exe [420472] [PID.4012] =>.Atheros [MD5.C381374F6E1BF3F1D61A636046C21BB7] - (.Avira Operations GmbH & Co. KG - VpnService.) -- C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [382232] [PID.4020] =>.Avira Operations GmbH & Co. KG® [MD5.D291CBD20523F60F5D5F2F7CC9EC7EBC] - (.Intel Corporation - Intel HD Graphics Drivers for Windows(R).) -- C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d14ddcba312bcfa8\IntelCpHDCPSvc.exe [517472] [PID.4036] =>.Intel(R) pGFX® [MD5.469A605BDD0C1839A0D91CF52B3546DA] - (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896] [PID.4048] =>.Adobe Inc.® [MD5.D84D0F91C8120BAB7D4797CC811FBD10] - (.Adobe Systems, Incorporated - Adobe Genuine Software Service.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344] [PID.4056] =>.Adobe Inc.® [MD5.D0244759921BFB5569D04B081C588503] - (.Lenovo Group Ltd. - LenovoVantageService.) -- C:\Program Files (x86)\Lenovo\VantageService\LenovoVantageService.exe [18200] [PID.3676] =>.Lenovo® [MD5.3914A2522E8FE6735D1D759F4499E41C] - (.Intel Corporation - Intel(R) Local Management Service.) -- C:\Windows\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [633856] [PID.4108] =>.Intel(R) Embedded Subsystems and IP Blocks Group® [MD5.03933373568F046C8328ABD8425C87BB] - (.Qualcomm Technologies Inc. - Qualcomm Atheros Universal WLAN Driver Serv.) -- C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [191976] [PID.4144] =>.Qualcomm Technologies Inc. [MD5.BF87C52B2276C1E8F6E70CAB9CA32A31] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_0a3294d3216a4a83\jhi_service.exe [578752] [PID.4268] =>.Intel(R) Embedded Subsystems and IP Blocks Group® [MD5.7B869BF1C486520C299CBBE9791D3740] - (.Intel Corporation - IntelCpHeciSvc Executable.) -- C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d14ddcba312bcfa8\IntelCpHeciSvc.exe [509792] [PID.4684] =>.Intel(R) pGFX® [MD5.020DB1EA4170B9C66D740728A314FCF7] - (.Corsair Memory, Inc. - Corsair.Service.CpuIdRemote.) -- C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.CpuIdRemote64.exe [18984] [PID.6844] =>.Corsair Memory, Inc.® [MD5.605B8989DDCEC3EA09EC9F75D8B6EF26] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506176] [PID.1860] =>.Realtek Semiconductor Corp.® [MD5.F2297ED01E6718BB1592151BD3070AF3] - (.ELAN Microelectronics Corp. - ETD Control Center Helper.) -- C:\WINDOWS\system32\ETDCtrlHelper.exe [399512] [PID.988] =>.ELAN Microelectronics Corp. [MD5.FD7746E71FFE5F206A101CB4770BC3A5] - (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\WINDOWS\system32\ETDCtrl.exe [1268368] [PID.6640] =>.ELAN Microelectronics Corp. [MD5.15C14719C4A89E4BF6381604ECE97ACA] - (.ELAN Microelectronics Corp. - ETDTouch.) -- C:\Windows\System32\ETDTouch.exe [133784] [PID.7836] =>.ELAN Microelectronics Corp. [MD5.E4B31CA33B59204D84B6412986654AE5] - (.Lenovo Group Ltd. - Lenovo.Modern.ImController.) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208] [PID.7960] =>.Lenovo® [MD5.93A71544CE0B7D29C32FCC9D20D8FB04] - (.Intel Corporation - igfxEM Module.) -- C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_22aac1442d387216\igfxEM.exe [1083232] [PID.2668] =>.Intel(R) pGFX® [MD5.20C4799ED85BAAFB587F2FC251C32F0F] - (.Lenovo Group Ltd. - Lenovo.Modern.ImController.PluginHost.) -- C:\Program Files\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe [45944] [PID.8320] =>.Lenovo® [MD5.CBFF87EA7176B8F63E9B97B59BA069A5] - (...) -- C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe [944144] [PID.8988] =>.Microsoft® [MD5.B38A351A03F325336E85E2DEEF93D242] - (.Dolby Laboratories, Inc. - DolbyDAX2API.) -- C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464] [PID.9248] =>.Dolby Laboratories, Inc.® [MD5.605B8989DDCEC3EA09EC9F75D8B6EF26] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506176] [PID.9568] =>.Realtek Semiconductor Corp.® [MD5.605B8989DDCEC3EA09EC9F75D8B6EF26] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506176] [PID.9736] =>.Realtek Semiconductor Corp.® [MD5.840A05356ADC2836BD1235D51573D03B] - (...) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.85.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe [182272] [PID.6636] =>.Microsoft Corporation [MD5.AE40C7065FBF3124E4A9F7320D150292] - (...) -- C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19101.469.0_x64__8wekyb3d8bbwe\YourPhone.exe [14536192] [PID.1704] =>.Microsoft Corporation [MD5.DA208BFB5355464DC548E672CF497D19] - (.Malwarebytes - Malwarebytes Tray Application.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe [4000072] [PID.4228] =>.Malwarebytes Inc® [MD5.DF4799C27943FD78EA74C7873B51C701] - (.Realtek Semiconductor - Realtek HD Audio Manager.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18390912] [PID.4720] =>.Realtek Semiconductor Corp.® [MD5.DA05B0D9C6019822A71805F1A61D9470] - (.Tencent - Gameloop.) -- D:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe [2728296] [PID.9176] =>.Tencent Technology(Shenzhen) Company Limited® [MD5.71F6073986864C6E9083DA19919093B3] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4038712] [PID.4712] =>.Tonec Inc. [MD5.B289C20C10B241F6016FECD92B267098] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe [275512] [PID.10320] =>.Tonec Inc.® [MD5.63B2EC855676A0F17D54B6C7A6EFCD62] - (.Advanced Micro Devices, Inc. - Radeon Settings: Host Application.) -- C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [16514440] [PID.10892] =>.Advanced Micro Devices, Inc.® [MD5.C8A33DD88593F7902EEA88C7CD1099FE] - (.Google LLC - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.35.302\GoogleCrashHandler.exe [299304] [PID.10860] =>.Google Inc® [MD5.799C70DF6FF5C485DE7A88F1D10D189E] - (.Google LLC - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.35.302\GoogleCrashHandler64.exe [380712] [PID.9632] =>.Google Inc® [MD5.80E0BCA3E8EF56AD86B19D0597EF81FF] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17464] [PID.3392] =>.Intel(R) Rapid Storage Technology® [MD5.E407C42454E8520DACA3EEA0353967FB] - (...) -- C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.17920.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe [484352] [PID.12720] =>.Microsoft Corporation [MD5.ABBAD4156F45CFEF3B43CF0249D7DAB4] - (.SurfRight B.V. - HitmanPro Scheduler.) -- C:\Program Files\HitmanPro\hmpsched.exe [139504] [PID.12820] =>.SurfRight B.V.® [MD5.5693AAC8DAA2A938B567FB3F49BE8D7B] - (.Lenovo Group Ltd. - Lenovo.Modern.ImController.PluginHost.) -- C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe [46760] [PID.8088] =>.Lenovo® [MD5.20C4799ED85BAAFB587F2FC251C32F0F] - (.Lenovo Group Ltd. - Lenovo.Modern.ImController.PluginHost.) -- C:\Program Files\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe [45944] [PID.13612] =>.Lenovo® [MD5.B9F6D8CC1728BBE3EAEA6B4BB157C78E] - (.Lenovo Group Ltd. - Lenovo.Modern.ImController.PluginHost.) -- C:\Program Files\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe [45952] [PID.15896] =>.Lenovo® [MD5.E443A2A050ADB8D636BCBEEF5F31E1BF] - (.Lenovo 2017 - Lenovo Migration Assistant Srv.) -- C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe [189720] [PID.14368] =>.Lenovo® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.15292] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.6204] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.11508] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.5048] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.13928] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.10876] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.15068] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.1368] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.14500] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.10624] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.13728] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.13416] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.18268] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.17624] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.10468] =>.Google LLC® [MD5.0A03755DEC4A05092CBC969D8995FB33] - (.Tonec Inc. - Internet Download Manager Native Messaging.) -- C:\Program Files (x86)\Internet Download Manager\IDMMsgHost.exe [35416] [PID.16080] =>.Tonec Inc.® [MD5.9C3E8744098FD4F8BE1CF389C38ECB3D] - (.Corsair Memory, Inc. - Corsair.Service.DisplayAdapter.) -- C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.DisplayAdapter.exe [17960] [PID.9012] =>.Corsair Memory, Inc.® [MD5.B9F6D8CC1728BBE3EAEA6B4BB157C78E] - (.Lenovo Group Ltd. - Lenovo.Modern.ImController.PluginHost.) -- C:\Program Files\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe [45952] [PID.17608] =>.Lenovo® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.7672] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.17988] =>.Google LLC® [MD5.4582085E6FE85931FD8A0750A57675F4] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\USER\Desktop\ZHPDiag3.exe [3244928] [PID.3116] =>.Nicolas Coolman [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.1208] =>.Google LLC® [MD5.8D59EFA9076145E5F5E9EC0470778E7E] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1694704] [PID.3232] =>.Google LLC® ---\\ Google Chrome, Start,Search,Extensions (36) - 3s G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.com =>.Google Inc. G2 - GCE: Preference [USER][User Data\Default\Extensions] [aapocclcgogkmnckokdopfmhonfmgoek] =>.Google Inc. {Slides} G2 - GCE: Preference [USER][User Data\Default\Extensions] [aiahmijlpehemcpleichkcokhegllfjl] http://www.duolingo.com G2 - GCE: Preference [USER][User Data\Default\Extensions] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs} G2 - GCE: Preference [USER][User Data\Default\Extensions] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive} G2 - GCE: Preference [USER][User Data\Default\Extensions] [bgnkhhnnamicmpeenaelnjfhikgbkllg] Adguard Software Ltd =>.adguard.com {AdBlocker} G2 - GCE: Preference [USER][User Data\Default\Extensions] [bkkbcggnhapdmkeljlodobbkopceiche] Poper Blocker =>.DingoSolutions G2 - GCE: Preference [USER][User Data\Default\Extensions] [bkpeohkfimdfogdnpcnokjkbpankkmil] Ads Link Skiper G2 - GCE: Preference [USER][User Data\Default\Extensions] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube} G2 - GCE: Preference [USER][User Data\Default\Extensions] [cedbddnnmhgnedpamoenmdkhnpnfbpjb] http://www.flyordie.com/ G2 - GCE: Preference [USER][User Data\Default\Extensions] [cifnddnffldieaamihfkhkdgnbhfmaci] =>.Foxit Corporation {PDF Creator} G2 - GCE: Preference [USER][User Data\Default\Extensions] [cjpalhdlnbpafiamejdnhcphjbkeiagm] uBlock Origin =>.Raymond Hill G2 - GCE: Preference [USER][User Data\Default\Extensions] [dhdgffkkebhmkfjojejmpbldmpobfkfo] Tampermonkey =>.tampermonkey.net G2 - GCE: Preference [USER][User Data\Default\Extensions] [fbcohnmimjicjdomonkcbcpbpnhggkip] MyJDownloader =>.MyJDownloader G2 - GCE: Preference [USER][User Data\Default\Extensions] [felcaaldnbdncclmgdcncolpebgiejap] =>.Google Inc. {Sheets} G2 - GCE: Preference [USER][User Data\Default\Extensions] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion} G2 - GCE: Preference [USER][User Data\Default\Extensions] [hhojmcideegachlhfgfdhailpfhgknjm] Disable right click G2 - GCE: Preference [USER][User Data\Default\Extensions] [hkopngnjabiaaibfkfgjhgdfpoholppn] Insightly =>.Insightly G2 - GCE: Preference [USER][User Data\Default\Extensions] [icppfcnhkcmnfdhfhphakoifcfokfdhg] http://play.google.com/ =>.Google Inc. G2 - GCE: Preference [USER][User Data\Default\Extensions] [ngpampappnmepgilojfohadhhmbhlaek] IDM Integration Module =>.IDM Computer Solutions, Inc. G2 - GCE: Preference [USER][User Data\Default\Extensions] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet} G2 - GCE: Preference [USER][User Data\Default\Extensions] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail} G2 - GCE: Preference [USER][User Data\Default\Extensions] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc. G2 - GCE: Preference [USER][User Data\Default\Local Extension Settings] [bgnkhhnnamicmpeenaelnjfhikgbkllg] =>.adguard.com {AdBlocker} G2 - GCE: Preference [USER][User Data\Default\Local Extension Settings] [bkkbcggnhapdmkeljlodobbkopceiche] =>.Legitimate G2 - GCE: Preference [USER][User Data\Default\Local Extension Settings] [bkpeohkfimdfogdnpcnokjkbpankkmil] G2 - GCE: Preference [USER][User Data\Default\Local Extension Settings] [cjpalhdlnbpafiamejdnhcphjbkeiagm] =>.uBlock Origin G2 - GCE: Preference [USER][User Data\Default\Local Extension Settings] [dhdgffkkebhmkfjojejmpbldmpobfkfo] G2 - GCE: Preference [USER][User Data\Default\Local Extension Settings] [fbcohnmimjicjdomonkcbcpbpnhggkip] =>.MyJDownloader G2 - GCE: Preference [USER][User Data\Default\Local Extension Settings] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion} G2 - GCE: Preference [USER][User Data\Default\Local Extension Settings] [ngpampappnmepgilojfohadhhmbhlaek] G2 - GCE: Preference [USER][User Data\Default\Managed Extension Settings] [cjpalhdlnbpafiamejdnhcphjbkeiagm] =>.uBlock Origin G2 - GCE: Preference [USER][User Data\Default\Sync Extension Settings] [dgjepfldodmdfmdidhhgamnklbdibndi] G2 - GCE: Preference [USER][User Data\Default\Sync Extension Settings] [gmlllbghnfkpflemihljekbapjopfjik] =>.Bookmark Manager G2 - GCE: Preference [USER][User Data\Default\Sync Extension Settings] [hhojmcideegachlhfgfdhailpfhgknjm] G2 - GCE: Preference [USER][User Data\Default\Sync Extension Settings] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] =>.Google Inc. {Chrome Media Router} ---\\ Internet Explorer Extensions, Start, Search (18) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com =>.Google Inc. R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com =>.Google Inc. R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com =>.Google Inc. R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com =>.Google Inc. R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation R1 - HKEY_USERS\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com =>.Google Inc. R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Browser.) (11.00.18362.356 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation ---\\ INTERNET EXPLORER, trusted site and sensitive site (1) - 0s ~ Microsoft Internet Explorer Restricted Site(s) Domains: 0(Good) / 0(Bad) ---\\ Internet Explorer, Proxy Management (3) - 0s R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 =>.Default.Value R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft ---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet= ---\\ Hosts file redirection (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (0) ---\\ Browser Helper Object (BHO) (3) - 0s O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll =>.Tonec Inc.® O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft Corporation® ---\\ Internet Explorer Toolbars (1) - 0s O3 - Toolbar: 0x00 - [HKLM]{BFD9D8A8-57FF-488A-B919-065EC77CF82F} . (...) -- C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll =>.Foxit Software Incorporated® ---\\ Global shortcuts Startup (52) - 6s O4 - GS\Desktop [USER]: Gameloop.lnk . (.Tencent - Gameloop.) D:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe -from AppMarketDesktopLink =>.Tencent Technology(Shenzhen) Company Limited® O4 - GS\Desktop [USER]: JDownloader 2.lnk . (.AppWork GmbH - JDownloader 2 Launcher.) C:\Users\USER\AppData\Local\JDownloader 2.0\JDownloader2.exe {263B2299B43270DC725B7EB1}. =>.AppWork GmbH O4 - GS\Desktop [USER]: PUBG Lite.lnk . (...) E:\PUBGLite\Launcher.exe O4 - GS\Desktop [USER]: Start Phoenix OS.lnk . (...) C:\Program Files\phoenixstart\RebootToPhoenixOS.bat O4 - GS\Desktop [USER]: Telegram.lnk . (.Telegram FZ-LLC - Telegram Desktop.) C:\Users\USER\AppData\Roaming\Telegram Desktop\Telegram.exe {00BD12AC19AF9EC0FA5283A824597C0A57}. O4 - GS\Desktop [USER]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\USER\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l.® O4 - GS\Desktop [USER]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\USER\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [USER]: Gameloop.lnk . (.Tencent - Gameloop.) D:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe -from AppMarketDesktopLink =>.Tencent Technology(Shenzhen) Company Limited® O4 - GS\Quicklaunch [USER]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC® O4 - GS\Quicklaunch [USER]: Tencent Gaming Buddy.lnk . (.Tencent - Gameloop.) D:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe -from AppMarketDesktopLink =>.Tencent Technology(Shenzhen) Company Limited® O4 - GS\sendTo [USER]: Bluetooth File Transfer.LNK . (.Microsoft Corporation - Transfers files between device.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation O4 - GS\sendTo [USER]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\sendTo [USER]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\sendTo [USER]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\USER\AppData\Local\Viber\Viber.exe ShareFiles =>.Viber Media S.à r.l.® O4 - GS\TaskBar [USER]: Avira Phantom VPN.lnk . (.Avira Operations GmbH & Co. KG - Avira Phantom VPN.) C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe =>.Avira Operations GmbH & Co. KG® O4 - GS\TaskBar [USER]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC® O4 - GS\TaskBar [USER]: Tencent Gaming Buddy.lnk . (.Tencent - Gameloop.) D:\Program Files\TxGameAssistant\UI\AndroidEmulator.exe =>.Tencent Technology(Shenzhen) Company Limited® O4 - GS\Programs [USER]: Illustrator.CC.2019.Crack.akoam.net.lnk . (.Adobe Systems Inc. - .) C:\Program Files (x86)\Adobe\Adobe Illustrator CC 2019\Support Files\Contents\Windows\Illustrator.CC.2019.Crack.akoam.net.exe =>.Adobe Systems Inc. O4 - GS\Programs [USER]: OneDrive.lnk . (...) C:\Users\USER\AppData\Local\Microsoft\OneDrive\OneDrive.exe O4 - GS\Programs [USER]: PUBG Lite.lnk . (...) E:\PUBGLite\Launcher.exe O4 - GS\CommonDesktop [Public]: HitmanPro.lnk . (.SurfRight B.V. - HitmanPro 3.8. True cloud comp.) C:\Program Files (x86)\HitmanPro\HitmanPro.exe =>.SurfRight B.V. O4 - GS\CommonDesktop [Public]: iCUE.lnk . (.Corsair Memory, Inc. - iCUE.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE.exe =>.Corsair Memory, Inc.® O4 - GS\CommonDesktop [Public]: Lenovo Diagnostics Tool .lnk . (.Flexera - InstallShield.) C:\Windows\Installer\{C7DB8EA5-C9C1-468F-B90C-CA206CA5C6BE}\Desktop_121ABE8FAE2B4955AAE9649259581E8F.exe =>.Lenovo® O4 - GS\CommonDesktop [Public]: Lenovo Migration Assistant.lnk . (.Lenovo 2019 - LenovoMigrationAssistant.) C:\Program Files\Lenovo\Lenovo Migration Assistant\MigrationAssistant.exe =>.Lenovo® O4 - GS\CommonDesktop [Public]: Malwarebytes.lnk . (.Malwarebytes - Malwarebytes.) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe =>.Malwarebytes Inc® O4 - GS\CommonDesktop [Public]: PES 2019 Settings.lnk . (...) D:\Pro Evolution Soccer 2019\Settings.exe O4 - GS\CommonDesktop [Public]: PES 2019.lnk . (...) D:\Pro Evolution Soccer 2019\PES2019.exe O4 - GS\CommonDesktop [Public]: QuickTime Player.lnk . (.Apple Inc. - QuickTime Player.) C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe =>.Apple Inc.® O4 - GS\CommonDesktop [Public]: Recuva.lnk . (.Piriform Ltd - Recuva.) C:\Program Files\Recuva\recuva64.exe =>.Piriform Ltd® O4 - GS\CommonDesktop [Public]: Sider SP19.lnk . (...) D:\Pro Evolution Soccer 2019\Sider SP19\sider.exe O4 - GS\CommonDesktop [Public]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) C:\Program Files (x86)\Steam\Steam.exe =>.Valve® O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLAN® O4 - GS\Programs [Public]: Illustrator.CC.2019.Crack.akoam.net.lnk . (.Adobe Systems Inc. - .) C:\Program Files (x86)\Adobe\Adobe Illustrator CC 2019\Support Files\Contents\Windows\Illustrator.CC.2019.Crack.akoam.net.exe =>.Adobe Systems Inc. O4 - GS\Programs [Public]: OneDrive.lnk . (...) C:\Users\USER\AppData\Local\Microsoft\OneDrive\OneDrive.exe O4 - GS\Programs [Public]: PUBG Lite.lnk . (...) E:\PUBGLite\Launcher.exe O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft® O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Notepad.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Remote Desktop Connection.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Snipping Tool.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Steps Recorder.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Windows Wordpad Application.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Character Map.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Apple Software Update.lnk . (...) C:\Windows\Installer\{56EC47AA-5813-4FF6-8E75-544026FBEA83}\AppleSoftwareUpdateIco.exe =>.Apple Inc. O4 - GS\ProgramsCommon [Public]: CyberLink PowerDVD 18.lnk . (.CyberLink Corp. - CyberLink PowerDVD18.) C:\Program Files (x86)\CyberLink\PowerDVD18\PDVDLP.exe =>.CyberLink Corp.® O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC® O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Notepad++.lnk . (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.) C:\Program Files\Notepad++\notepad++.exe =>.Notepad++® ---\\ Lop.com/Domain Hijackers (2) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{c2613277-ceb7-421a-89f0-29abb04e92dc}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress ---\\ Extra protocols (24) - 3s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ AppInit_DLLs Registry value Autorun (1) - 0s O20 - Winlogon : UserInit . (.Microsoft Corporation - Userinit Logon Application.) - C:\Windows\system32\userinit.exe =>.Microsoft Corporation ---\\ BootExecute (BEX) (1) - 0s O34 - HKLM BootExecute: (bootdelete) (.SurfRight B.V. - Hitman Pro 3.5 BootDelete.) -- C:\WINDOWS\System32\bootdelete.exe =>.SurfRight B.V. ---\\ List of key exploring StartupApproved (21) - 1s [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:IDMan =>.Tonec Inc [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Steam =>.Valve [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:488e079dfefbc10f4772a598dec1533f [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:bbfbc4924e05ad5079f50176b1746c3d [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder]:488e079dfefbc10f4772a598dec1533f.exe [HKEY_USERS\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:IDMan =>.Tonec Inc [HKEY_USERS\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Steam =>.Valve [HKEY_USERS\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:488e079dfefbc10f4772a598dec1533f [HKEY_USERS\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:bbfbc4924e05ad5079f50176b1746c3d [HKEY_USERS\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder]:488e079dfefbc10f4772a598dec1533f.exe [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SecurityHealth =>.Microsoft Corporation [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AdobeGCInvoker-1.0 [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:IAStorIcon =>.Intel Corporation [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:RtHDVBg_LENOVO_DOLBYDRAGON [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:RtHDVBg_Dolby =>.Realtek Semiconductor Corp. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:RTHDVCPL =>.Realtek Semiconductor Corp. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Adobe Creative Cloud =>.Adobe Inc. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:CORSAIR iCUE Software [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:PowerDVD18Agent [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:APSDaemon =>.Apple Inc. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:bbfbc4924e05ad5079f50176b1746c3d ---\\ ASIC (ActiveSetup Installed Components) (6) - 0s O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Microsoft Windows Media Player Setup Utilit.) -- C:\Windows\System32\unregmp2.exe =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Microsoft Windows Media Player Setup Utilit.) -- C:\Windows\System32\unregmp2.exe =>.Microsoft Corporation O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll =>.Microsoft Corporation® O40 - ASIC: Google Chrome [64Bits] - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google LLC - Google Chrome Installer.) -- C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.120\Installer\chrmstp.exe =>.Google LLC® ---\\ Software installed (117) - 31s O42 - Logiciel: AMD Problem Report Wizard - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {BEFEA793-BD63-8705-BA0A-8B3183F8A115} =>.Advanced Micro Devices, Inc. (Hidden) O42 - Logiciel: AMD Settings - (.Advanced Micro Devices Inc.) [HKLM][64Bits] -- {B9E94761-F871-9FB7-8F11-455D03BC515F} =>.Advanced Micro Devices Inc (Hidden) O42 - Logiciel: AMD Settings - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {40253233-C165-A807-0E31-324497960F33} =>.Advanced Micro Devices, Inc. (Hidden) O42 - Logiciel: AMD Software - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- AMD Catalyst Install Manager =>.Advanced Micro Devices, Inc.® O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {46F044A5-CE8B-4196-984E-5BD6525E361D} =>.Apple Inc. O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {56EC47AA-5813-4FF6-8E75-544026FBEA83} =>.Apple Inc. O42 - Logiciel: Avira Phantom VPN v2.28.5.20306 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- Avira Phantom VPN =>.Avira Operations GmbH & Co. KG® O42 - Logiciel: Branding64 - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {EE2AFCE4-0238-4DE0-A140-1647021627C1} =>.Advanced Micro Devices, Inc. (Hidden) O42 - Logiciel: CORSAIR iCUE Software - (.Corsair.) [HKLM][64Bits] -- {E50CD42B-C944-4006-94DB-7A533DD3A0F1} =>.Corsair O42 - Logiciel: CyberLink PowerDVD 18 - (.CyberLink Corp..) [HKLM][64Bits] -- {0F4F617F-E8D5-46A3-A0F9-43855182A3B1} =>.CyberLink Corp.® O42 - Logiciel: Dolby Audio X2 Windows API SDK - (.Dolby Laboratories, Inc..) [HKLM][64Bits] -- {F290F786-5F69-48D4-B20B-D21C7DE56EF0} =>.Dolby Laboratories, Inc. (Hidden) O42 - Logiciel: Dolby Audio X2 Windows APP - (.Dolby Laboratories, Inc..) [HKLM][64Bits] -- {4A02DCED-C2B0-4DD3-87BD-7D8E68D6AF3C} =>.Dolby Laboratories, Inc. (Hidden) O42 - Logiciel: Dynamic Application Loader Host Interface Service - (.Intel Corporation.) [HKLM][64Bits] -- {4B6D4A5D-AB01-4F4A-ACAB-DE86A3C54D67} =>.Intel Corporation (Hidden) O42 - Logiciel: Foxit PhantomPDF - (.Foxit Software Inc..) [HKLM][64Bits] -- {ADF2C26E-09FD-11E9-81C9-000C296BF2A5} =>.Foxit Software Inc. O42 - Logiciel: Gameloop - (.Tencent Technology Company.) [HKLM][64Bits] -- MobileGamePC =>.Tencent Technology(Shenzhen) Company Limited® O42 - Logiciel: Google Chrome - (.Google LLC.) [HKLM][64Bits] -- Google Chrome =>.Google LLC® O42 - Logiciel: Google Update Helper - (.Google LLC.) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google LLC (Hidden) O42 - Logiciel: HitmanPro 3.8 - (.SurfRight B.V..) [HKLM][64Bits] -- HitmanPro38 =>.SurfRight B.V.® O42 - Logiciel: HWiNFO64 Version 6.06 - (.Martin Malík - REALiX.) [HKLM][64Bits] -- HWiNFO64_is1 =>.Martin Malík - REALiX O42 - Logiciel: Intel(R) C++ Redistributables on Intel(R) 64 - (.Intel Corporation.) [HKLM][64Bits] -- {F70BCE36-25F2-4475-A918-6209B3D85BF3} =>.Intel Corporation O42 - Logiciel: Intel(R) Icls - (.Intel Corporation.) [HKLM][64Bits] -- {1661F93B-9D7E-437D-9486-496ED4BCF2E1} =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) LMS - (.Intel Corporation.) [HKLM][64Bits] -- {CB5F56C2-FAFD-4604-B3E6-EBFFFCF330D1} =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {09DAB6B6-FBEF-4AC5-AE93-BFF01A0B796D} =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {1CEAC85D-2590-4760-800F-8DE5E91F3700} =>.Intel(R) Embedded Subsystems and IP Blocks Group® O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {444076C7-EE35-47FE-94CC-DBF66C5B9F86} =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {E987BDED-D78E-49D2-A6B6-FBD42338E20A} =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Management Engine Driver - (.Intel Corporation.) [HKLM][64Bits] -- {DCCA536A-ADE7-4973-B48F-32ABA0224325} =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) OEM Extension - (.Intel Corporation.) [HKLM][64Bits] -- {7E918F4A-6ECE-488A-9F6D-09FB57C210D4} =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel(R) pGFX® O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140} =>.Intel(R) Rapid Storage Technology® O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {8B93CAC3-6008-4C17-9FB0-B4F6F90FF316} =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Serial IO - (.Intel Corporation.) [HKLM][64Bits] -- {9FD91C5C-44AE-4D9D-85BE-AE52816B0294} =>.Intel(R) Serial IO® O42 - Logiciel: Intel(R) Serial IO - (.Intel Corporation.) [HKLM][64Bits] -- {FBC819D6-78B6-49AB-931E-3D127D43BE64} =>.Intel Corporation (Hidden) O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM][64Bits] -- Internet Download Manager =>.Tonec Inc.® O42 - Logiciel: JDownloader 2 - (.AppWork GmbH.) [HKLM][64Bits] -- jdownloader2 {263B2299B43270DC725B7EB1}. =>.AppWork GmbH O42 - Logiciel: Lenovo Diagnostics Tool - (.Lenovo.) [HKLM][64Bits] -- {C7DB8EA5-C9C1-468F-B90C-CA206CA5C6BE} =>.Lenovo O42 - Logiciel: Lenovo Migration Assistant - (.Lenovo.) [HKLM][64Bits] -- Lenovo Migration Assistant_is1 =>.Lenovo® O42 - Logiciel: Lenovo Vantage Service - (.Lenovo Group Ltd..) [HKLM][64Bits] -- VantageSRV_is1 =>.Lenovo® O42 - Logiciel: Malwarebytes version 3.8.3.2965 - (.Malwarebytes.) [HKLM][64Bits] -- {35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1 =>.Malwarebytes Inc® O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-0015-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{EC583796-6BBB-47DD-B9CE-B5DA12D71135} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{EC583796-6BBB-47DD-B9CE-B5DA12D71135} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-0018-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{EC583796-6BBB-47DD-B9CE-B5DA12D71135} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-0019-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{EC583796-6BBB-47DD-B9CE-B5DA12D71135} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-001A-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{EC583796-6BBB-47DD-B9CE-B5DA12D71135} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-001B-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{EC583796-6BBB-47DD-B9CE-B5DA12D71135} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{0242505C-4E90-407F-9299-B5B275F50D86} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUSR_{B51389C8-2890-4633-81D8-47D2A7402274} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0C0A-1000-0000000FF1CE}_Office14.PROPLUSR_{1779650B-2E44-4A19-8DF6-3866D645764A} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-002C-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{270CA0B9-9881-44DB-BC3B-37C7E66A044A} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F} =>.Microsoft Corporation® (Hidden) O42 - Logiciel: Microsoft Office Access MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0015-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Access Setup Metadata MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0117-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Excel MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0016-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Groove MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-00BA-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office InfoPath MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0044-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Office 32-bit Components 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office OneNote MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-00A1-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Outlook MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001A-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office PowerPoint MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0018-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Professional Plus 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {91140000-0011-0000-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Professional Plus 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- Office14.PROPLUSR =>.Microsoft Corporation® O42 - Logiciel: Microsoft Office Proof (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Proof (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-040C-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Proof (Spanish) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-0C0A-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Proofing (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-002C-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Publisher MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0019-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Shared 32-bit MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0043-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Shared MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-006E-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Shared Setup Metadata MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0115-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Office Word MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001B-0409-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft VC++ redistributables repacked. - (.Intel Corporation.) [HKLM][64Bits] -- {62678770-F459-4903-83E3-A2968F6CC242} =>.Intel Corporation (Hidden) O42 - Logiciel: Microsoft VC++ redistributables repacked. - (.Intel Corporation.) [HKLM][64Bits] -- {B81577B2-3AD0-4AFD-A19C-87F673C09D0C} =>.Intel Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {7299052b-02a4-4627-81f2-1818da5d550d} =>.Microsoft Corporation O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} =>.Microsoft Corporation O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {071c9b48-7c32-4621-a0ac-3f809523288f} =>.Microsoft Corporation O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8220EEFE-38CD-377E-8595-13398D740ACE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} =>.Microsoft Corporation O42 - Logiciel: Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D8E6291-B0D5-35EC-8441-6616F567A0F7} =>.Microsoft Corporation O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} =>.Microsoft Corporation O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} =>.Microsoft® O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} =>.Microsoft® O42 - Logiciel: Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {37B8F9C7-03FB-3253-8781-2517C99D7C00} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {B175520C-86A2-35A7-8619-86DC379688B9} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BD95A8CD-1D9F-35AD-981A-3E7925026EBB} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 - (.Microsoft Corporation.) [HKLM][64Bits] -- {050d4fc8-5d48-4b8f-8972-47c82c46020f} =>.Microsoft® O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ef6b00ec-13e1-4c25-9064-b2f383cb8412} =>.Microsoft® O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 - (.Microsoft Corporation.) [HKLM][64Bits] -- {f65db027-aff3-4070-886a-0d87064aabb1} =>.Microsoft® O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {61087a79-ac85-455c-934d-1fa22cc64f36} =>.Microsoft® O42 - Logiciel: Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {5740BD44-B58D-321A-AFC0-6D3D4556DD6C} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CB0836EC-B072-368D-82B2-D3470BF95707} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7DAD0258-515C-3DD4-8964-BD714199E0F7} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {E30D8B21-D82D-3211-82CC-0F0A5D1495E8} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d} =>.Microsoft Corporation® O42 - Logiciel: Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7e9fae12-5bbf-47fb-b944-09c49e75c061} =>.Microsoft Corporation® O42 - Logiciel: Microsoft Visual C++ 2017 x64 Additional Runtime - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F106B700-BFF8-3065-B305-14D36AD40539} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {C77195A4-CEB8-38EE-BDD6-C46CB459EF6E} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2017 x86 Additional Runtime - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2757496A-3E74-320A-B007-36120A9F126D} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {39E15475-23F2-345D-8977-B5DC47A94E26} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Notepad++ (64-bit x64) - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++ =>.Notepad++ Team O42 - Logiciel: pdfreader2019 version 19.16 - (..) [HKLM][64Bits] -- {A5D28E21-312E-40C2-8C04-4CE3DC335D36}_is1 O42 - Logiciel: Phoenix OS - (.ChaoZhuo Inc..) [HKCU][64Bits] -- PhoenixOS O42 - Logiciel: Pro Evolution Soccer 2019 - (..) [HKLM][64Bits] -- Pro Evolution Soccer 2019_is1 O42 - Logiciel: PUBG Lite - (..) [HKLM][64Bits] -- PUBG Lite_is1 O42 - Logiciel: Qualcomm Atheros Bluetooth Installer (64) - (.Qualcomm Atheros.) [HKLM][64Bits] -- {628988B4-3FA5-4EA6-BAA3-DA640F6718BD} =>.Qualcomm Atheros O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime O42 - Logiciel: Recuva - (.Piriform.) [HKLM][64Bits] -- Recuva =>.Piriform Ltd® O42 - Logiciel: SmokePatch19 - (..) [HKCU][64Bits] -- SmokePatch19 O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- Steam =>.Valve® O42 - Logiciel: Telegram Desktop version 1.8.15 - (.Telegram FZ-LLC.) [HKCU][64Bits] -- {53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1 O42 - Logiciel: Trapcode Suite - (.Red Giant LLC.) [HKLM][64Bits] -- Trapcode Suite v15.1.2 =>.Red Giant LLC O42 - Logiciel: Update for Windows 10 for x64-based Systems (KB4023057) - (.Microsoft Corporation.) [HKLM][64Bits] -- {32DC821E-4A7D-4878-BEE8-337FA153D7F2} =>.Microsoft Corporation (Hidden) O42 - Logiciel: Update for Windows 10 for x64-based Systems (KB4480730) - (.Microsoft Corporation.) [HKLM][64Bits] -- {344F3227-F502-4219-9DC4-1967E586FAFA} =>.Microsoft Corporation O42 - Logiciel: Viber - (.Viber Media S.a.r.l.) [HKCU][64Bits] -- {b1c8237e-4b8f-45b0-b266-b68cbb2c6f39} =>.Viber Media S.à r.l.® O42 - Logiciel: Viber - (.Viber Media S.a.r.l.) [HKLM][64Bits] -- {D00F7DF0-A37B-4C93-8FAB-994F2BE56FBA} =>.Viber Media S.a.r.l (Hidden) O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN O42 - Logiciel: WinRAR 5.70 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH® ---\\ HKCU & HKLM Software Keys (205) - 31s HKLM\SOFTWARE\Adobe =>.Adobe HKLM\SOFTWARE\AMD =>.AMD HKLM\SOFTWARE\AMDDVR HKLM\SOFTWARE\Atheros =>.Qualcomm Atheros HKLM\SOFTWARE\ATI =>.ATI HKLM\SOFTWARE\ATI Technologies =>.ATI Technologies HKLM\SOFTWARE\AVAST Software =>.AVAST Software HKLM\SOFTWARE\Corsair =>.RSA Security HKLM\SOFTWARE\CVSM HKLM\SOFTWARE\DefaultUserEnvironment =>.Microsoft Corporation HKLM\SOFTWARE\Dolby =>.Dolby HKLM\SOFTWARE\Emsisoft =>.Emsisoft HKLM\SOFTWARE\fdx HKLM\SOFTWARE\Fortemedia =>.Lugert Europe HKLM\SOFTWARE\Foxit Software =>.Foxit Software HKLM\SOFTWARE\Google =>.Google HKLM\SOFTWARE\HitmanPro =>.EIDOS hitman Game HKLM\SOFTWARE\INextUUID =>.Hewlett-Packard HKLM\SOFTWARE\Intel =>.Intel HKLM\SOFTWARE\Khronos =>.Khronos HKLM\SOFTWARE\Lenovo =>.Lenovo HKLM\SOFTWARE\Macromedia =>.Macromedia HKLM\SOFTWARE\ManageableUpdatePackage =>.Dell Inc. HKLM\SOFTWARE\Mozilla =>.Mozilla HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins HKLM\SOFTWARE\Notepad++ =>.Don Ho HKLM\SOFTWARE\Nuance =>.Nuance HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions HKLM\SOFTWARE\OEM =>.OEM HKLM\SOFTWARE\Partner =>.Google Inc. HKLM\SOFTWARE\Piriform =>.Piriform HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation HKLM\SOFTWARE\SAMSUNG =>.Samsung Electronics HKLM\SOFTWARE\SRS Labs =>.SRS Labs HKLM\SOFTWARE\Windows =>.Microsoft Corporation HKLM\SOFTWARE\WinRAR =>.WinRAR HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation HKLM\SOFTWARE\WOW6432Node\Adobe =>.Adobe HKLM\SOFTWARE\WOW6432Node\AndroidTBox HKLM\SOFTWARE\WOW6432Node\Apple Computer, Inc. =>.Apple Computer, Inc. HKLM\SOFTWARE\WOW6432Node\Apple Inc. =>.Apple Inc. HKLM\SOFTWARE\WOW6432Node\ATI =>.ATI HKLM\SOFTWARE\WOW6432Node\ATI Technologies =>.ATI Technologies HKLM\SOFTWARE\WOW6432Node\Caphyon =>.Caphyon HKLM\SOFTWARE\WOW6432Node\Corsair =>.RSA Security HKLM\SOFTWARE\WOW6432Node\CyberLink =>.CyberLink Corporation HKLM\SOFTWARE\WOW6432Node\DownloadManager =>.DownloadManager HKLM\SOFTWARE\WOW6432Node\ej-technologies =>.ej-technologies HKLM\SOFTWARE\WOW6432Node\Foxit Software =>.Foxit Software HKLM\SOFTWARE\WOW6432Node\Google =>.Google HKLM\SOFTWARE\WOW6432Node\HitmanPro =>.EIDOS hitman Game HKLM\SOFTWARE\WOW6432Node\Hummingbird =>.Hummingbird HKLM\SOFTWARE\WOW6432Node\Intel =>.Intel HKLM\SOFTWARE\WOW6432Node\Internet Download Manager =>.Tonec Inc HKLM\SOFTWARE\WOW6432Node\JavaSoft =>.JavaSoft HKLM\SOFTWARE\WOW6432Node\Khronos =>.Khronos HKLM\SOFTWARE\WOW6432Node\Lake =>.Lake Sofware HKLM\SOFTWARE\WOW6432Node\Lenovo =>.Lenovo HKLM\SOFTWARE\WOW6432Node\Macromedia =>.Macromedia HKLM\SOFTWARE\WOW6432Node\Mozilla =>.Mozilla HKLM\SOFTWARE\WOW6432Node\MozillaPlugins =>.MozillaPlugins HKLM\SOFTWARE\WOW6432Node\Nuance =>.Nuance HKLM\SOFTWARE\WOW6432Node\ODBC =>.DB Connectivity Solutions HKLM\SOFTWARE\WOW6432Node\Realtek =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\WOW6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\WOW6432Node\Tencent =>.Tencent HKLM\SOFTWARE\WOW6432Node\Valve =>.Valve HKLM\SOFTWARE\WOW6432Node\VideoLAN =>.VideoLan Team HKLM\SOFTWARE\WOW6432Node\Wow6432Node =>.Microsoft Corporation HKLM\SOFTWARE\WOW6432Node\RegisteredApplications =>.Microsoft Corporation HKCU\SOFTWARE\488e079dfefbc10f4772a598dec1533f =>Adware.CrossRider HKCU\SOFTWARE\Adobe =>.Adobe HKCU\SOFTWARE\Akeo Consulting =>.Akeo Consulting HKCU\SOFTWARE\All-in-One Checker HKCU\SOFTWARE\AMD =>.AMD HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation HKCU\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. =>.Apple Inc. HKCU\SOFTWARE\AppWork =>.Appwork GmbH HKCU\SOFTWARE\ATI =>.ATI HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKCU\SOFTWARE\bbfbc4924e05ad5079f50176b1746c3d =>Adware.CrossRider HKCU\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o HKCU\SOFTWARE\Chromium =>.Chromium HKCU\SOFTWARE\Corsair =>.RSA Security HKCU\SOFTWARE\CraveSoftware HKCU\SOFTWARE\CyberLink =>.CyberLink Corporation HKCU\SOFTWARE\DivXNetworks =>.DivXNetworks HKCU\SOFTWARE\DownloadManager =>.DownloadManager HKCU\SOFTWARE\ej-technologies =>.ej-technologies HKCU\SOFTWARE\Elantech =>.Elantech Inc. HKCU\SOFTWARE\Epic Games =>.Epic Games HKCU\SOFTWARE\Foxit Software =>.Foxit Software HKCU\SOFTWARE\Google =>.Google HKCU\SOFTWARE\HWiNFO64 HKCU\SOFTWARE\Imagineer Systems Ltd =>.Imagineer Systems Ltd HKCU\SOFTWARE\Intel =>.Intel HKCU\SOFTWARE\JavaSoft =>.JavaSoft HKCU\SOFTWARE\KC Softwares =>.KC Softwares HKCU\SOFTWARE\Lake =>.Lake Sofware HKCU\SOFTWARE\Lenovo =>.Lenovo HKCU\SOFTWARE\Macromedia =>.Macromedia HKCU\SOFTWARE\Malwarebytes =>.Malwarebytes HKCU\SOFTWARE\Maposafe HKCU\SOFTWARE\Mozilla =>.Mozilla HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins HKCU\SOFTWARE\Netscape =>.Netscape HKCU\SOFTWARE\NetVoyage HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions HKCU\SOFTWARE\Opera Software =>.Opera Software HKCU\SOFTWARE\Opera Stable Offer =>.Opera Software HKCU\SOFTWARE\PCurVersion =>.Unknown HKCU\SOFTWARE\Picture HKCU\SOFTWARE\Piriform =>.Piriform HKCU\SOFTWARE\QtProject =>.QtProject HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp. HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation HKCU\SOFTWARE\remixos-installation-tool =>.Legitimate HKCU\SOFTWARE\Rtp =>.RTP Software HKCU\SOFTWARE\SetupCompany HKCU\SOFTWARE\SYNCJM =>.SYNCJM HKCU\SOFTWARE\TelegramDesktop =>.TelegramDesktop HKCU\SOFTWARE\Tencent =>.Tencent HKCU\SOFTWARE\TesSafe HKCU\SOFTWARE\Valve =>.Valve HKCU\SOFTWARE\Viber =>.Viber HKCU\SOFTWARE\Viber Media S.à r.l =>.Viber Media HKCU\SOFTWARE\W10DigitalLicense HKCU\SOFTWARE\WinRAR =>.WinRAR HKCU\SOFTWARE\WinRAR SFX =>.RarLab HKCU\SOFTWARE\Wintertree =>.Wintertree Software HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation HKCU\SOFTWARE\ZHP =>.Nicolas Coolman HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation HKU\.DEFAULT\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc. HKU\.DEFAULT\SOFTWARE\ATI =>.ATI HKU\.DEFAULT\SOFTWARE\Caphyon =>.Caphyon HKU\.DEFAULT\SOFTWARE\Dolby =>.Dolby HKU\.DEFAULT\SOFTWARE\Foxit Software =>.Foxit Software HKU\.DEFAULT\SOFTWARE\Lenovo =>.Lenovo HKU\.DEFAULT\SOFTWARE\Piriform =>.Piriform HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\488e079dfefbc10f4772a598dec1533f =>Adware.CrossRider HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Adobe =>.Adobe HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Akeo Consulting =>.Akeo Consulting HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\All-in-One Checker HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\AMD =>.AMD HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\AppDataLow =>.Microsoft Corporation HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc. HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Apple Inc. =>.Apple Inc. HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\AppWork =>.Appwork GmbH HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\ATI =>.ATI HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\bbfbc4924e05ad5079f50176b1746c3d =>Adware.CrossRider HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Chromium =>.Chromium HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Corsair =>.RSA Security HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\CraveSoftware HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\CyberLink =>.CyberLink Corporation HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\DivXNetworks =>.DivXNetworks HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\DownloadManager =>.DownloadManager HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\ej-technologies =>.ej-technologies HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Elantech =>.Elantech Inc. HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Epic Games =>.Epic Games HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Foxit Software =>.Foxit Software HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Google =>.Google HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\HWiNFO64 HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Imagineer Systems Ltd =>.Imagineer Systems Ltd HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Intel =>.Intel HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\JavaSoft =>.JavaSoft HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\KC Softwares =>.KC Softwares HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Lake =>.Lake Sofware HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Lenovo =>.Lenovo HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Macromedia =>.Macromedia HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Malwarebytes =>.Malwarebytes HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Maposafe HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Mozilla =>.Mozilla HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\MozillaPlugins =>.MozillaPlugins HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Netscape =>.Netscape HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\NetVoyage HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\ODBC =>.DB Connectivity Solutions HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Opera Software =>.Opera Software HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Opera Stable Offer =>.Opera Software HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\PCurVersion =>.Unknown HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Picture HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Piriform =>.Piriform HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\QtProject =>.QtProject HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Realtek =>.Realtek Semiconductor Corp. HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\RegisteredApplications =>.Microsoft Corporation HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\remixos-installation-tool =>.Legitimate HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Rtp =>.RTP Software HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\SetupCompany HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\SYNCJM =>.SYNCJM HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\TelegramDesktop =>.TelegramDesktop HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Tencent =>.Tencent HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\TesSafe HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Valve =>.Valve HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Viber =>.Viber HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Viber Media S.à r.l =>.Viber Media HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\W10DigitalLicense HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\WinRAR =>.WinRAR HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\WinRAR SFX =>.RarLab HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Wintertree =>.Wintertree Software HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\Wow6432Node =>.Microsoft Corporation HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\SOFTWARE\ZHP =>.Nicolas Coolman ---\\ Contents of the Common Files folders (314) - 14s O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\3MWPLIA60L O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\4PGB642PL6 O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\72S724YS3S O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\80IUDWDSHP O43 - CFD: 05/09/2019 - [] D -- C:\Program Files\Adobe =>.Adobe O43 - CFD: 03/11/2019 - [] D -- C:\Program Files\AMD =>.Advanced Micro Devices, Inc.® O43 - CFD: 11/05/2019 - [] D -- C:\Program Files\AndroidTbox =>.Tencent Technology(Shenzhen) Company Limited® O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation O43 - CFD: 21/03/2019 - [] D -- C:\Program Files\CUAssistant =>.Microsoft Windows® O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\Dolby =>.Dolby Laboratories, Inc.® O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\FBTTBB1HIV O43 - CFD: 20/05/2018 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\HitmanPro =>.EIDOS hitman Game O43 - CFD: 27/05/2019 - [] D -- C:\Program Files\HWiNFO64 =>.Martin Malik - REALiX® O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\Intel =>.Intel Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\JUZJ1JSJ1A O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\LAHSCYJW66 O43 - CFD: 11/04/2019 - [] D -- C:\Program Files\Lenovo =>.Lenovo O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\Malwarebytes =>.Malwarebytes O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\Microsoft Analysis Services =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\Microsoft Sync Framework =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\Microsoft Synchronization Services =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\MKQP7L78PQ O43 - CFD: 19/03/2019 - [0] D -- C:\Program Files\ModifiableWindowsApps O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation O43 - CFD: 27/09/2019 - [] D -- C:\Program Files\Notepad++ =>.Don Ho O43 - CFD: 28/10/2019 - [] AD -- C:\Program Files\phoenixstart O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\Realtek =>.Realtek O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\Recuva =>.Piriform O43 - CFD: 05/06/2019 - [] D -- C:\Program Files\Red Giant =>.Red Giant O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation O43 - CFD: 20/09/2019 - [] D -- C:\Program Files\rempl =>.Microsoft Corporation O43 - CFD: 20/05/2018 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\UNP =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files\V5PH2A6JIE O43 - CFD: 21/09/2019 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\Windows Defender Advanced Threat Protection =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Security =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation O43 - CFD: 01/11/2019 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation O43 - CFD: 04/04/2019 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH® O43 - CFD: 05/09/2019 - [0] D -- C:\Program Files (x86)\Adobe =>.Adobe O43 - CFD: 11/05/2019 - [] D -- C:\Program Files (x86)\AMD =>.AMD O43 - CFD: 19/07/2019 - [] D -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc. O43 - CFD: 16/05/2019 - [] D -- C:\Program Files (x86)\Avira =>.Avira Software O43 - CFD: 21/03/2019 - [] D -- C:\Program Files (x86)\Bluetooth Suite =>.ASUSTeK O43 - CFD: 02/11/2019 - [] D -- C:\Program Files (x86)\COD O43 - CFD: 02/11/2019 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation O43 - CFD: 09/05/2019 - [] D -- C:\Program Files (x86)\Corsair =>.RSA Security O43 - CFD: 09/06/2019 - [] D -- C:\Program Files (x86)\CyberLink =>.CyberLink Corporation O43 - CFD: 25/05/2019 - [] D -- C:\Program Files (x86)\Foxit Software =>.Foxit Software O43 - CFD: 30/09/2019 - [] D -- C:\Program Files (x86)\Google =>.Google Inc® O43 - CFD: 09/06/2019 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield O43 - CFD: 21/03/2019 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation O43 - CFD: 22/09/2019 - [] D -- C:\Program Files (x86)\Internet Download Manager =>.Tonec Inc O43 - CFD: 19/09/2019 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation O43 - CFD: 13/08/2019 - [] D -- C:\Program Files (x86)\Lenovo =>.Lenovo O43 - CFD: 02/11/2019 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8 =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation O43 - CFD: 09/06/2019 - [] D -- C:\Program Files (x86)\NSIS Uninstall Information =>.MSIS O43 - CFD: 21/06/2019 - [] D -- C:\Program Files (x86)\QuickTime =>.Apple Inc.® =>Riskware.QuickTime O43 - CFD: 21/03/2019 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek O43 - CFD: 26/06/2019 - [] D -- C:\Program Files (x86)\Red Giant Link O43 - CFD: 19/09/2019 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation O43 - CFD: 01/08/2019 - [] D -- C:\Program Files (x86)\Steam =>.Steam Games O43 - CFD: 04/04/2019 - [0] HD -- C:\Program Files (x86)\Temp =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation O43 - CFD: 09/06/2019 - [] D -- C:\Program Files (x86)\VideoLAN =>.VideoLan Team O43 - CFD: 11/05/2019 - [] D -- C:\Program Files (x86)\VulkanRT =>.LunarG, Inc O43 - CFD: 19/09/2019 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings =>.Advanced Micro Devices Inc O43 - CFD: 21/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira =>.Avira Software O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby =>.Dolby O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF =>.Foxit Corporation O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro =>.EIDOS hitman Game O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64 O43 - CFD: 19/09/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel =>.Intel Corporation O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager =>.Tonec Inc O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo =>.Lenovo O43 - CFD: 03/11/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Migration Assistant O43 - CFD: 19/03/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes =>.Malwarebytes O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek =>.Realtek O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva =>.Piriform O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam =>.Steam Games O43 - CFD: 19/03/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tencent Software O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Adobe =>.Adobe O43 - CFD: 03/11/2019 - [] D -- C:\ProgramData\AMD =>.AMD O43 - CFD: 21/06/2019 - [] D -- C:\ProgramData\Apple =>.Apple Inc. O43 - CFD: 21/06/2019 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc. O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Application Data =>.Microsoft Corporation O43 - CFD: 05/04/2019 - [] D -- C:\ProgramData\ATI =>.ATI O43 - CFD: 02/07/2019 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software O43 - CFD: 16/05/2019 - [] D -- C:\ProgramData\Avira =>.Avira Software O43 - CFD: 20/05/2018 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation O43 - CFD: 09/06/2019 - [] D -- C:\ProgramData\CLSK =>.CLSK O43 - CFD: 31/05/2019 - [] D -- C:\ProgramData\CoolerMaster O43 - CFD: 24/04/2019 - [0] D -- C:\ProgramData\Coronet_SecureConnect O43 - CFD: 24/04/2019 - [] D -- C:\ProgramData\Corsair =>.RSA Security O43 - CFD: 09/06/2019 - [] HD -- C:\ProgramData\CyberLink =>.CyberLink Corporation O43 - CFD: 19/09/2019 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Dolby =>.Dolby O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\Emsisoft =>.Emsisoft O43 - CFD: 27/05/2019 - [] D -- C:\ProgramData\Foxit Software =>.Foxit Software O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\HitmanPro =>.EIDOS hitman Game O43 - CFD: 04/04/2019 - [0] D -- C:\ProgramData\IDM =>.IDM O43 - CFD: 09/06/2019 - [] D -- C:\ProgramData\install_backup O43 - CFD: 09/06/2019 - [] D -- C:\ProgramData\install_clap =>.Microsoft Corporation O43 - CFD: 21/03/2019 - [] D -- C:\ProgramData\Intel =>.Intel Corporation O43 - CFD: 08/04/2019 - [] D -- C:\ProgramData\KONAMI =>.Konami O43 - CFD: 22/10/2019 - [] D -- C:\ProgramData\Lenovo =>.Lenovo O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes O43 - CFD: 20/05/2018 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation O43 - CFD: 20/05/2018 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation O43 - CFD: 02/07/2019 - [] D -- C:\ProgramData\Oracle =>.Oracle O43 - CFD: 25/05/2019 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation O43 - CFD: 01/11/2019 - [] D -- C:\ProgramData\Packages =>.Microsoft Corporation O43 - CFD: 09/06/2019 - [] D -- C:\ProgramData\PDVD =>.PDVD O43 - CFD: 26/05/2019 - [] D -- C:\ProgramData\PUBG O43 - CFD: 02/11/2019 - [] D -- C:\ProgramData\R28FQRFM2FNDYTKGY479DBI8R O43 - CFD: 05/06/2019 - [] D -- C:\ProgramData\Red Giant =>.Red Giant O43 - CFD: 05/06/2019 - [] D -- C:\ProgramData\RedGiant =>.Red Giant Software LLC O43 - CFD: 04/11/2019 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation O43 - CFD: 12/09/2019 - [] D -- C:\ProgramData\Samsung =>.Samsung Electronics O43 - CFD: 19/03/2019 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation O43 - CFD: 04/10/2019 - [] SHD -- C:\ProgramData\Synaptics =>.Synaptics O43 - CFD: 04/04/2019 - [] D -- C:\ProgramData\Tencent =>.Tencent O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation O43 - CFD: 22/06/2019 - [0] D -- C:\ProgramData\VideoCopilot O43 - CFD: 19/03/2019 - [] D -- C:\ProgramData\WindowsHolographicDevices =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [0] D -- C:\ProgramData\{3962D9E3-EC24-FACE-5CF1-4D765C161427} O43 - CFD: 02/11/2019 - [0] D -- C:\ProgramData\{FB7E285D-1D9A-38D2-E200-51B4E2E708E5} O43 - CFD: 04/10/2019 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe O43 - CFD: 21/06/2019 - [] D -- C:\Program Files (x86)\Common Files\Apple =>.Apple Inc. O43 - CFD: 21/03/2019 - [0] D -- C:\Program Files (x86)\Common Files\Atheros =>.Qualcomm Atheros O43 - CFD: 11/05/2019 - [] D -- C:\Program Files (x86)\Common Files\Intel =>.Intel Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared =>.Microsoft Corporation O43 - CFD: 21/03/2019 - [] D -- C:\Program Files (x86)\Common Files\Qualcomm =>.Qualcomm Atheros O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation O43 - CFD: 22/07/2019 - [] D -- C:\Program Files (x86)\Common Files\Steam =>.Steam Games O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Roaming\0fnllvc2v0z O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Roaming\31ckzplcppg O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Roaming\5zh232qhjm5 O43 - CFD: 05/09/2019 - [] D -- C:\Users\USER\AppData\Roaming\Adobe =>.Adobe O43 - CFD: 11/05/2019 - [] D -- C:\Users\USER\AppData\Roaming\AndroidTbox O43 - CFD: 21/06/2019 - [] D -- C:\Users\USER\AppData\Roaming\Apple Computer =>.Apple Inc. O43 - CFD: 05/04/2019 - [] D -- C:\Users\USER\AppData\Roaming\ATI =>.ATI O43 - CFD: 24/04/2019 - [] D -- C:\Users\USER\AppData\Roaming\Corsair =>.RSA Security O43 - CFD: 09/06/2019 - [] D -- C:\Users\USER\AppData\Roaming\CyberLink =>.CyberLink Corporation O43 - CFD: 11/07/2019 - [] D -- C:\Users\USER\AppData\Roaming\Dat O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Roaming\DMCache =>.DMCache O43 - CFD: 27/05/2019 - [] D -- C:\Users\USER\AppData\Roaming\Foxit Software =>.Foxit Software O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Roaming\gglufebkwqm O43 - CFD: 04/04/2019 - [] D -- C:\Users\USER\AppData\Roaming\Google =>.Google O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Roaming\gqquxjaguhy O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Roaming\IDM =>.IDM O43 - CFD: 21/03/2019 - [] D -- C:\Users\USER\AppData\Roaming\Intel Corporation =>.Intel Corporation O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Roaming\jhilwpe3iol O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Roaming\l13lycvbpyi O43 - CFD: 02/11/2019 - [] SD -- C:\Users\USER\AppData\Roaming\Microsoft =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Roaming\Mozilla =>.Mozilla Corporation O43 - CFD: 27/09/2019 - [] D -- C:\Users\USER\AppData\Roaming\Notepad++ =>.Don Ho O43 - CFD: 02/07/2019 - [] D -- C:\Users\USER\AppData\Roaming\Opera Software =>.Opera Software O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Roaming\ScreenToGif =>.ScreenToGif O43 - CFD: 14/10/2019 - [] D -- C:\Users\USER\AppData\Roaming\Telegram Desktop =>.Telegram Messenger LLP O43 - CFD: 30/06/2019 - [] D -- C:\Users\USER\AppData\Roaming\Tencent =>.Tencent O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Roaming\ViberPC =>.Viber O43 - CFD: 27/10/2019 - [] D -- C:\Users\USER\AppData\Roaming\vlc =>.VideoLan Team O43 - CFD: 27/09/2019 - [] D -- C:\Users\USER\AppData\Roaming\vProxy O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Roaming\vupdejfwhrj O43 - CFD: 04/04/2019 - [] D -- C:\Users\USER\AppData\Roaming\WinRAR =>.WinRAR O43 - CFD: 30/09/2019 - [0] SHD -- C:\Users\USER\AppData\Roaming\WinSl O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Roaming\x0iryjohfsp O43 - CFD: 04/11/2019 - [] D -- C:\Users\USER\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 11/05/2019 - [] D -- C:\Users\USER\AppData\Local\Adobe =>.Adobe O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Local\AdvinstAnalytics =>.SUP.Various O43 - CFD: 11/05/2019 - [] D -- C:\Users\USER\AppData\Local\AMD =>.AMD O43 - CFD: 21/06/2019 - [] D -- C:\Users\USER\AppData\Local\Apple =>.Apple Inc. O43 - CFD: 21/06/2019 - [] D -- C:\Users\USER\AppData\Local\Apple Computer =>.Apple Inc. O43 - CFD: 19/09/2019 - [0] SHD -- C:\Users\USER\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 05/04/2019 - [] D -- C:\Users\USER\AppData\Local\ATI =>.ATI O43 - CFD: 31/05/2019 - [] D -- C:\Users\USER\AppData\Local\cache =>.Legitimate O43 - CFD: 04/04/2019 - [] D -- C:\Users\USER\AppData\Local\CEF =>.CEF O43 - CFD: 21/03/2019 - [] D -- C:\Users\USER\AppData\Local\Comms =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Users\USER\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation O43 - CFD: 24/04/2019 - [] D -- C:\Users\USER\AppData\Local\Corsair =>.RSA Security O43 - CFD: 26/05/2019 - [] D -- C:\Users\USER\AppData\Local\CorsairOsdLauncher =>.RSA Security O43 - CFD: 19/07/2019 - [] D -- C:\Users\USER\AppData\Local\CrashDumps =>.Microsoft Corporation O43 - CFD: 09/06/2019 - [] D -- C:\Users\USER\AppData\Local\CyberLink =>.CyberLink Corporation O43 - CFD: 03/11/2019 - [] D -- C:\Users\USER\AppData\Local\D3DSCache =>.Legitimate O43 - CFD: 04/04/2019 - [0] D -- C:\Users\USER\AppData\Local\DBG =>.DBG O43 - CFD: 01/11/2019 - [] D -- C:\Users\USER\AppData\Local\Diagnostics =>.Microsoft Corporation O43 - CFD: 11/04/2019 - [] D -- C:\Users\USER\AppData\Local\Downloaded Installations =>.Microsoft Corporation O43 - CFD: 01/11/2019 - [] D -- C:\Users\USER\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation O43 - CFD: 04/04/2019 - [] D -- C:\Users\USER\AppData\Local\Google =>.Google O43 - CFD: 19/09/2019 - [0] SHD -- C:\Users\USER\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 26/09/2019 - [] D -- C:\Users\USER\AppData\Local\Iheb_Briki O43 - CFD: 21/03/2019 - [] D -- C:\Users\USER\AppData\Local\Intel =>.Intel Corporation O43 - CFD: 28/09/2019 - [] D -- C:\Users\USER\AppData\Local\IsolatedStorage =>.id Software O43 - CFD: 27/09/2019 - [] D -- C:\Users\USER\AppData\Local\J0hnD03_SoftWare O43 - CFD: 28/10/2019 - [] D -- C:\Users\USER\AppData\Local\JDownloader 2.0 =>.JDownloader O43 - CFD: 11/04/2019 - [] D -- C:\Users\USER\AppData\Local\Lenovo =>.Lenovo O43 - CFD: 31/05/2019 - [] D -- C:\Users\USER\AppData\Local\MasterPlusApp O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Local\mbam =>.Malwarebytes O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Local\mbamtray =>.Malwarebytes O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [0] D -- C:\Users\USER\AppData\Local\Microsoft Help =>.Microsoft Corporation O43 - CFD: 21/03/2019 - [] D -- C:\Users\USER\AppData\Local\MicrosoftEdge =>.Microsoft Corporation O43 - CFD: 02/07/2019 - [0] D -- C:\Users\USER\AppData\Local\Opera Software =>.Opera Software O43 - CFD: 29/10/2019 - [] D -- C:\Users\USER\AppData\Local\Package Cache =>.Microsoft Corporation O43 - CFD: 02/10/2019 - [] D -- C:\Users\USER\AppData\Local\Packages =>.Microsoft Corporation O43 - CFD: 04/04/2019 - [0] D -- C:\Users\USER\AppData\Local\PeerDistRepub =>.Microsoft Corporation O43 - CFD: 27/09/2019 - [] D -- C:\Users\USER\AppData\Local\PlaceholderTileLogoFolder =>.Microsoft Corporation O43 - CFD: 02/07/2019 - [] D -- C:\Users\USER\AppData\Local\Programs =>.Microsoft Corporation O43 - CFD: 04/04/2019 - [] D -- C:\Users\USER\AppData\Local\Publishers =>.Microsoft Corporation O43 - CFD: 21/03/2019 - [] D -- C:\Users\USER\AppData\Local\RadeonInstaller O43 - CFD: 04/04/2019 - [] D -- C:\Users\USER\AppData\Local\RadeonSettings O43 - CFD: 26/05/2019 - [] D -- C:\Users\USER\AppData\Local\ShadowTrackerExtra O43 - CFD: 26/09/2019 - [] D -- C:\Users\USER\AppData\Local\SkinSoft =>.SkinSoft O43 - CFD: 16/06/2019 - [] D -- C:\Users\USER\AppData\Local\speech =>.Microsoft Corporation O43 - CFD: 03/07/2019 - [] D -- C:\Users\USER\AppData\Local\Steam =>.Steam Games O43 - CFD: 04/11/2019 - [] D -- C:\Users\USER\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [0] SHD -- C:\Users\USER\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 14/10/2019 - [] D -- C:\Users\USER\AppData\Local\Tencent =>.Tencent O43 - CFD: 26/05/2019 - [] D -- C:\Users\USER\AppData\Local\UnrealEngine =>.Unreal Software O43 - CFD: 30/10/2019 - [] D -- C:\Users\USER\AppData\Local\Viber =>.Viber O43 - CFD: 30/10/2019 - [] D -- C:\Users\USER\AppData\Local\Viber Media S.à r.l =>.Viber Media S.à r.l O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Local\VirtualStore =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\AppData\Local\Win_and_Office_Mini_KMS_A O43 - CFD: 04/11/2019 - [] D -- C:\Users\USER\AppData\Local\ZHP =>.Nicolas Coolman O43 - CFD: 08/04/2019 - [0] D -- C:\Users\USER\AppData\Local\Programs\Common =>.Microsoft Corporation O43 - CFD: 02/07/2019 - [] D -- C:\Users\USER\AppData\Local\Programs\Opera =>.Opera Software O43 - CFD: 09/06/2019 - [] D -- C:\Users\USER\AppData\LocalLow\Adobe =>.Adobe O43 - CFD: 21/06/2019 - [] D -- C:\Users\USER\AppData\LocalLow\Apple Computer =>.Apple Inc. O43 - CFD: 04/07/2019 - [] D -- C:\Users\USER\AppData\LocalLow\Lenovo =>.Lenovo O43 - CFD: 01/11/2019 - [] SD -- C:\Users\USER\AppData\LocalLow\Microsoft =>.Microsoft Corporation O43 - CFD: 17/09/2019 - [] D -- C:\Users\USER\AppData\LocalLow\Temp =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\Avira Phantom VPN Pro 2.23.1.32633.akoam.net O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\FaresCD.Com.Off.2010.14.0.7239.5000.x64 O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\hala O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\hein5.5 O43 - CFD: 27/09/2019 - [] D -- C:\Users\USER\Desktop\HTMLTag_plugin_v1.0.0_unicode O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\Hv50 New 3.7 O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\Imane O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\Net2 O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\Netflix O43 - CFD: 14/09/2019 - [] D -- C:\Users\USER\Desktop\Recuva Wizard By ADIL BOUALI O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\Steam Checkers O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\VN HAX OLD UI O43 - CFD: 02/11/2019 - [] D -- C:\Users\USER\Desktop\VNH-Loader-Shipping O43 - CFD: 19/09/2019 - [] RD -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] RD -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] RD -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 19/09/2019 - [] D -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager =>.Tonec Inc O43 - CFD: 19/09/2019 - [] D -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader =>.JDownloader O43 - CFD: 19/03/2019 - [] D -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] RD -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] RD -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation O43 - CFD: 14/10/2019 - [] D -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop =>.Telegram Messenger LLP O43 - CFD: 29/10/2019 - [] D -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber =>.Viber O43 - CFD: 19/03/2019 - [] RD -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] D -- C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR O43 - CFD: 19/09/2019 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 20/05/2018 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 20/05/2018 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 19/03/2019 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 02/11/2019 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 26/09/2019 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\PeerDistRepub =>.Microsoft Corporation O43 - CFD: 22/10/2019 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Programs =>.Microsoft Corporation O43 - CFD: 19/09/2019 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Tencent =>.Tencent ---\\ Latest files created in Prefetcher (1) - 10s O45 - LFCP:[MD5.4B737F3221F59B13C6FAA98BCCF22028] 02/11/2019 A -- C:\WINDOWS\Prefetch\MINI KMS ACTIVATOR ULTIMATE 1-AB159060.pf =>Hacktool.Office ---\\ ShellIconOverlayIdentifiers (SIOI) (8) - 1s O106 - SIOI: [ IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll =>.Tonec Inc.® O106 - SIOI: [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Windows Enhanced Storage Shell Extension DL.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation O106 - SIOI: Groove Explorer Icon Overlay 1 (GFS Unread Stub) [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] - {99FD978C-D287-4F50-827F-B2C658EDA8E7}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2 (GFS Stub) [Groove Explorer Icon Overlay 2 (GFS Stub)] - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] - {920E6DB1-9907-4370-B3A0-BAFC03D81399}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 3 (GFS Folder) [Groove Explorer Icon Overlay 3 (GFS Folder)] - {16F3DD56-1AF5-4347-846D-7C10C4192619}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 4 (GFS Unread Mark) [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - Client Side Caching UI.) -- C:\WINDOWS\System32\cscui.dll =>.Microsoft Corporation ---\\ Search Context Menu Handlers (SCMH) (43) - 3s O108 - CMH1: $PowerDVD18 [64Bits] - {EF1ED1FB-2224-4150-B12A-CDDE6D442D5A} . (.CyberLink Corp. - CyberLink PowerDVDShell.) -- C:\ProgramData\CyberLink\PowerDVD18\OpenWith\PDVD_Shell64.dll =>.CyberLink Corp.® O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (.2010 - ShellHandler for Notepad++ (64 bit).) -- C:\Program Files\Notepad++\NppShell_06.dll =>.Notepad++® O108 - CMH1: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows® O108 - CMH1: Foxit_ConvertToPDF [64Bits] - {C5269811-4A29-4818-A4BB-111F9FC63A5F} . (.Foxit Software Inc. - ConvertToPDFShellExtension.) -- C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_x64.dll =>.Foxit Software Incorporated® O108 - CMH1: ModernSharing [64Bits] - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation O108 - CMH1: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH® O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Work Folders Shell Extension.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation O108 - CMH1: XXX Groove GFS Context Menu Handler XXX [64Bits] - {6C467336-8281-4E60-8204-430CED96822D} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH2: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH® O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH3: MBAMShlExt [64Bits] - {57CE581A-0CB6-4266-9CA0-19364C90A0B3} . (.Malwarebytes - Malwarebytes.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll =>.Malwarebytes Corporation® O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH3: XXX Groove GFS Context Menu Handler XXX [64Bits] - {6C467336-8281-4E60-8204-430CED96822D} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH4: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows® O108 - CMH4: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - Client Side Caching UI.) -- C:\WINDOWS\System32\cscui.dll =>.Microsoft Corporation O108 - CMH4: RecuvaShellExt [64Bits] - {435E5DF5-2510-463C-B223-BDA47006D002} . (.Piriform Ltd - Recuva shell extensions.) -- C:\Program Files\Recuva\RecuvaShell64.dll =>.Piriform Ltd® O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Work Folders Shell Extension.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation O108 - CMH4: XXX Groove GFS Context Menu Handler XXX [64Bits] - {6C467336-8281-4E60-8204-430CED96822D} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O108 - CMH5: ACE [64Bits] - {5E2121EE-0300-11D4-8D3B-444553540000} . (.Advanced Micro Devices, Inc. - Radeon Settings: Desktop Control Panel.) -- C:\Program Files\AMD\CNext\CNext\atiacm64.dll =>.Advanced Micro Devices, Inc.® O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Work Folders Shell Extension.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation O108 - CMH5: XXX Groove GFS Context Menu Handler XXX [64Bits] - {6C467336-8281-4E60-8204-430CED96822D} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O108 - CMH6: Foxit_ConvertToPDF [64Bits] - {C5269811-4A29-4818-A4BB-111F9FC63A5F} . (.Foxit Software Inc. - ConvertToPDFShellExtension.) -- C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_x64.dll =>.Foxit Software Incorporated® O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH6: MBAMShlExt [64Bits] - {57CE581A-0CB6-4266-9CA0-19364C90A0B3} . (.Malwarebytes - Malwarebytes.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll =>.Malwarebytes Corporation® O108 - CMH6: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - Client Side Caching UI.) -- C:\WINDOWS\System32\cscui.dll =>.Microsoft Corporation O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - App Resolver.) -- C:\Windows\System32\appresolver.dll =>.Microsoft® O108 - CMH6: RecuvaShellExt [64Bits] - {435E5DF5-2510-463C-B223-BDA47006D002} . (.Piriform Ltd - Recuva shell extensions.) -- C:\Program Files\Recuva\RecuvaShell64.dll =>.Piriform Ltd® O108 - CMH6: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH® O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) O108 - CMH6: XXX Groove GFS Context Menu Handler XXX [64Bits] - {6C467336-8281-4E60-8204-430CED96822D} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - Windows Enhanced Storage Shell Extension DL.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation O108 - CMH7: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows® O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation ---\\ Image File Execution Options (10) - 1s O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - IE Per-User Initialization Utility.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - IE 7.0 Unattended Install Utility.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Microsoft Windows Malicious Software Remova.) [CFGOptions\\1] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Microsoft (R) HTML Application host.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] =>.Microsoft Corporation O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] =>.Microsoft Corporation O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Corporation O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Spooler SubSystem App.) [MitigationOptions\\2097152] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Host Process for Windows Services.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher® ---\\ System Drivers List (444) - 22s O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\WINDOWS\System32\drivers\1394ohci.sys [264704] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107528] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:07 A . (.Microsoft Corporation - ACPI Driver for NT.) -- C:\WINDOWS\System32\drivers\acpi.sys [804664] =>.Microsoft® O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - ACPI Devices Driver.) -- C:\WINDOWS\System32\drivers\AcpiDev.sys [20992] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - ACPIEx Driver.) -- C:\WINDOWS\System32\drivers\acpiex.sys [136712] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) -- C:\WINDOWS\System32\drivers\acpipagr.sys [12800] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:38 A . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\WINDOWS\System32\drivers\acpipmi.sys [16896] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - ACPI Wake Alarm.) -- C:\WINDOWS\System32\drivers\acpitime.sys [13824] =>.Microsoft Corporation O58 - SDL:2018/07/12 03:25:12 A . (.Lenovo Corporation - ACPI Virtual Power Controller Driver.) -- C:\WINDOWS\System32\drivers\AcpiVpc.sys [62296] =>.Lenovo (Beijing) Co., Ltd.® O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - Audio KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\Acx01000.sys [337920] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135632] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\afd.sys [662032] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:45:00 A . (.Microsoft Corporation - AF_UNIX socket provider.) -- C:\WINDOWS\System32\drivers\afunix.sys [40960] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:55 A . (.Microsoft Corporation - RAS Agile Vpn Miniport Call Manager.) -- C:\WINDOWS\System32\drivers\agilevpn.sys [114176] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:53 A . (.Microsoft Corporation - Application Compatibility Cache.) -- C:\WINDOWS\System32\drivers\ahcache.sys [291840] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:33 A . (.Advanced Micro Devices, Inc - AMD GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\amdgpio2.sys [18432] =>.Advanced Micro Devices, Inc O58 - SDL:2019/03/19 05:43:33 A . (.Advanced Micro Devices, Inc - AMD I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\amdi2c.sys [37888] =>.Advanced Micro Devices, Inc O58 - SDL:2019/09/19 20:01:07 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdk8.sys [199480] =>.Microsoft® O58 - SDL:2019/09/19 20:01:07 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdppm.sys [201016] =>.Microsoft® O58 - SDL:2019/03/19 05:43:39 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83464] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259600] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [27176] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:18 A . (.Microsoft Corporation - AppID Driver.) -- C:\WINDOWS\System32\drivers\appid.sys [202256] =>.Microsoft® O58 - SDL:2019/09/19 20:02:18 A . (.Microsoft Corporation - Applocker Filter.) -- C:\WINDOWS\System32\drivers\applockerfltr.sys [18432] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:05:50 A . (.Microsoft Corporation - Microsoft Application Virtualization Stream.) -- C:\WINDOWS\System32\drivers\AppVStrm.sys [137528] =>.Microsoft® O58 - SDL:2019/09/19 20:05:50 A . (.Microsoft Corporation - Microsoft Application Virtualization VE Man.) -- C:\WINDOWS\System32\drivers\AppvVemgr.sys [174392] =>.Microsoft® O58 - SDL:2019/09/19 20:05:50 A . (.Microsoft Corporation - Microsoft Application Virtualization VFS Fi.) -- C:\WINDOWS\System32\drivers\AppvVfs.sys [153912] =>.Microsoft® O58 - SDL:2019/03/19 05:43:39 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [132112] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\WINDOWS\System32\drivers\asyncmac.sys [31232] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [30224] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\WINDOWS\System32\drivers\ataport.sys [222728] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:01 A . (.Microsoft Corporation - BAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\bam.sys [70456] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Battery Class Driver.) -- C:\WINDOWS\System32\drivers\battc.sys [41784] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:34 A . (. - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Broadcom Corporation O58 - SDL:2019/03/19 05:44:32 A . (.Microsoft Corporation - BEEP Driver.) -- C:\WINDOWS\System32\drivers\beep.sys [10240] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:04 A . (.Microsoft Corporation - Windows Bind Filter Driver.) -- C:\WINDOWS\System32\drivers\bindflt.sys [117048] =>.Microsoft® O58 - SDL:2019/03/19 05:43:53 A . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\WINDOWS\System32\drivers\bowser.sys [117248] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:38 A . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\WINDOWS\System32\drivers\bridge.sys [127488] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:33 A . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Mana.) -- C:\WINDOWS\System32\drivers\BtaMPM.sys [36352] =>.Microsoft Corporation O58 - SDL:2019/04/11 09:24:10 A . (.Qualcomm - BT Filter.) -- C:\WINDOWS\System32\drivers\btfilter.sys [74216] =>.Qualcomm Atheros® O58 - SDL:2019/09/19 20:01:03 A . (.Microsoft Corporation - Bluetooth A2DP Driver.) -- C:\WINDOWS\System32\drivers\BthA2dp.sys [231936] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - Bluetooth Bus Extender.) -- C:\WINDOWS\System32\drivers\bthenum.sys [114688] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:33 A . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control.) -- C:\WINDOWS\System32\drivers\BthHfEnum.sys [131072] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - Bluetooth Transport Extensibility Miniport.) -- C:\WINDOWS\System32\drivers\BthMini.SYS [36864] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\WINDOWS\System32\drivers\bthmodem.sys [76288] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - Bluetooth Bus Driver.) -- C:\WINDOWS\System32\drivers\bthport.sys [1428992] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - Bluetooth Miniport Driver.) -- C:\WINDOWS\System32\drivers\BTHUSB.SYS [98304] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - VHD BTT Filter Driver.) -- C:\WINDOWS\System32\drivers\bttflt.sys [42808] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Button Converter Driver.) -- C:\WINDOWS\System32\drivers\buttonconverter.sys [43008] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:38 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [534032] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:34 A . (.Microsoft Corporation - Charge Arbiration Driver.) -- C:\WINDOWS\System32\drivers\CAD.sys [64312] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:45:38 A . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\cdfs.sys [100352] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\cdrom.sys [173056] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:01 A . (.Microsoft Corporation - Event Aggregation Kernel Mode Library.) -- C:\WINDOWS\System32\drivers\CEA.sys [82448] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:40 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [142864] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:40 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [319528] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Chelsio Communications - VF library for Chelsio ® T5/T6 Chipset.) -- C:\WINDOWS\System32\drivers\cht4vfx.sys [29696] =>.Chelsio Communications O58 - SDL:2019/03/19 05:43:41 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T5/T6 Chip.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [1866768] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\WINDOWS\System32\drivers\circlass.sys [51200] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:35 A . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\WINDOWS\System32\drivers\Classpnp.sys [416272] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:19 A . (.Microsoft Corporation - Cloud Files Mini Filter Driver.) -- C:\WINDOWS\System32\drivers\cldflt.sys [456704] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:35 A . (.Microsoft Corporation - Common Log File System Driver.) -- C:\WINDOWS\System32\drivers\clfs.sys [401208] =>.Microsoft® O58 - SDL:2019/03/19 05:44:06 A . (.Microsoft Corporation - CLIP Service.) -- C:\WINDOWS\System32\drivers\ClipSp.sys [1029944] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\WINDOWS\System32\drivers\CmBatt.sys [36864] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - Kernel Configuration Manager Initial Config.) -- C:\WINDOWS\System32\drivers\cmimcext.sys [29200] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:32 A . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\WINDOWS\System32\drivers\cng.sys [752792] =>.Microsoft® O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - CNG Hardware Assist algorithm provider.) -- C:\WINDOWS\System32\drivers\cnghwassist.sys [40760] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:16 A . (.Microsoft Corporation - Console Driver.) -- C:\WINDOWS\System32\drivers\condrv.sys [58896] =>.Microsoft Windows® O58 - SDL:2019/03/14 11:07:44 A . (.Corsair Memory, Inc. - Corsair Gaming Headset drivers package.) -- C:\WINDOWS\System32\drivers\CorsairGamingAudioamd64.sys [96376] =>.Microsoft® O58 - SDL:2019/03/27 12:15:02 A . (.Corsair - Corsair virtual bus driver.) -- C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45456] =>.Microsoft® O58 - SDL:2019/03/27 12:15:02 A . (.Corsair - Corsair virtual device driver.) -- C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21904] =>.Microsoft® O58 - SDL:2019/03/19 05:44:38 A . (.Microsoft Corporation - Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\crashdmp.sys [98104] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:05:55 A . (.Microsoft Corporation - Windows Client Side Caching Driver.) -- C:\WINDOWS\System32\drivers\csc.sys [577024] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:00 A . (.Microsoft Corporation - DAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\dam.sys [100152] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:04 A . (.Microsoft Corporation - Xbox Device Authentication Driver.) -- C:\WINDOWS\System32\drivers\devauthe.sys [47104] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:38 A . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\dfsc.sys [151040] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - PnP Disk Driver.) -- C:\WINDOWS\System32\drivers\disk.sys [98104] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:45 A . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\WINDOWS\System32\drivers\Diskdump.sys [37928] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:45 A . (.Microsoft Corporation - Boot Over USB Dump Driver.) -- C:\WINDOWS\System32\drivers\Dmpusbstor.sys [15360] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Dynamic Memory.) -- C:\WINDOWS\System32\drivers\dmvsc.sys [58168] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmk.sys [98304] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmkaud.sys [16344] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:28 A . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpata.sys [36904] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:06:31 A . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\WINDOWS\System32\drivers\dumpfve.sys [93104] =>.Microsoft® O58 - SDL:2019/09/19 20:01:09 A . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsd.sys [193848] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - SD Host Controller Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsdport.sys [32256] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:45 A . (.Microsoft Corporation - Storport Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpstorport.sys [34616] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:46 A . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\WINDOWS\System32\drivers\dxgkrnl.sys [3590672] =>.Microsoft® O58 - SDL:2019/09/19 20:01:46 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms1.sys [441360] =>.Microsoft® O58 - SDL:2019/09/19 20:01:46 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms2.sys [874296] =>.Microsoft® O58 - SDL:2019/03/19 05:45:38 A . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667.) -- C:\WINDOWS\System32\drivers\EhStorClass.sys [85520] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - Microsoft driver for storage devices suppor.) -- C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys [114696] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Error Device Driver.) -- C:\WINDOWS\System32\drivers\errdev.sys [14336] =>.Microsoft Corporation O58 - SDL:2019/01/31 22:50:26 A . (.ELAN Microelectronics Corp. - ELAN KMDF Driver.) -- C:\WINDOWS\System32\drivers\ETD.sys [744088] =>.ELAN MICROELECTRONICS CORPORATION® O58 - SDL:2019/01/31 22:50:28 A . (.ELAN Microelectronics Corp. - ETD Kernel Center (HIDClass Filter).) -- C:\WINDOWS\System32\drivers\ETDHCF.sys [30360] =>.ELAN MICROELECTRONICS CORPORATION® O58 - SDL:2019/03/19 05:43:38 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3419176] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:45 A . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\WINDOWS\System32\drivers\exfat.sys [404480] =>.Microsoft Corporation O58 - SDL:2019/11/02 20:14:22 A . (.Malwarebytes - Malwarebytes Anti-Ransomware Protection.) -- C:\WINDOWS\System32\drivers\farflt.sys [224408] =>.Malwarebytes Corporation® O58 - SDL:2019/03/19 05:43:45 A . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\WINDOWS\System32\drivers\fastfat.sys [422712] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\WINDOWS\System32\drivers\fdc.sys [35328] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - Windows sandboxing and encryption filter.) -- C:\WINDOWS\System32\drivers\filecrypt.sys [59392] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:28 A . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\WINDOWS\System32\drivers\fileinfo.sys [94520] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:28 A . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\WINDOWS\System32\drivers\filetrace.sys [40960] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Floppy Driver.) -- C:\WINDOWS\System32\drivers\flpydisk.sys [28160] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:33 A . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\System32\drivers\fltMgr.sys [437776] =>.Microsoft® O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - File System Dependency Manager Mini Filter.) -- C:\WINDOWS\System32\drivers\fsdepends.sys [67896] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:35 A . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\WINDOWS\System32\drivers\fs_rec.sys [34320] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:06:31 A . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\WINDOWS\System32\drivers\fvevol.sys [800568] =>.Microsoft® O58 - SDL:2019/09/19 20:02:34 A . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\WINDOWS\System32\drivers\FWPKCLNT.SYS [477712] =>.Microsoft® O58 - SDL:2019/03/19 05:43:45 A . (.Microsoft Corporation - GPU Energy Kernel Driver.) -- C:\WINDOWS\System32\drivers\gpuenergydrv.sys [8704] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [114688] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:04 A . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\HdAudio.sys [425472] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Hid Battery Driver.) -- C:\WINDOWS\System32\drivers\hidbatt.sys [39736] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Bluetooth Miniport Driver for HID Devices.) -- C:\WINDOWS\System32\drivers\hidbth.sys [121344] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - Hid Class Library.) -- C:\WINDOWS\System32\drivers\hidclass.sys [211968] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - I2C HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidi2c.sys [54784] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - HID Button over Interrupt Driver.) -- C:\WINDOWS\System32\drivers\hidinterrupt.sys [53560] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidir.sys [48640] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\System32\drivers\hidparse.sys [46080] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - SPI HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidspi.sys [63488] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidusb.sys [45568] =>.Microsoft Corporation O58 - SDL:2019/11/02 23:16:18 A . (.© 2017 SurfRight B.V. - HitmanPro 3.7 Support Driver.) -- C:\WINDOWS\System32\drivers\hitmanpro37.sys [55232] =>.SurfRight B.V.® O58 - SDL:2019/03/19 05:43:39 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64528] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:32 A . (.Microsoft Corporation - HTTP Protocol Stack.) -- C:\WINDOWS\System32\drivers\http.sys [1301008] =>.Microsoft® O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Hyper-V Crashdump.) -- C:\WINDOWS\System32\drivers\hvcrash.sys [32568] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:03:27 A . (.Microsoft Corporation - Hypervisor Boot Driver.) -- C:\WINDOWS\System32\drivers\hvservice.sys [84280] =>.Microsoft® O58 - SDL:2019/03/19 05:45:54 A . (.Microsoft Corporation - Microsoft Hyper-V Socket Provider.) -- C:\WINDOWS\System32\drivers\hvsocket.sys [145208] =>.Microsoft Windows® O58 - SDL:2019/05/27 02:58:42 A . (.REALiX(tm) - HWiNFO AMD64 Kernel Driver.) -- C:\WINDOWS\System32\drivers\HWiNFO64A.SYS [66336] =>.Martin Malik - REALiX® O58 - SDL:2019/03/19 05:44:35 A . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\WINDOWS\System32\drivers\hwpolicy.sys [29704] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) -- C:\WINDOWS\System32\drivers\hyperkbd.sys [25400] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Drive.) -- C:\WINDOWS\System32\drivers\HyperVideo.sys [42000] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [119296] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [36352] =>.Intel(R) Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [91136] =>.Intel(R) Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [79360] =>.Intel Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [93184] =>.Intel Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [112128] =>.Intel Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [96256] =>.Intel Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [171520] =>.Intel Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [175104] =>.Intel Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [180736] =>.Intel Corporation O58 - SDL:2019/03/19 05:43:34 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [177664] =>.Intel Corporation O58 - SDL:2018/10/26 20:59:58 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys [190920] =>.Intel(R) Embedded Subsystems and IP Blocks Group® O58 - SDL:2019/03/19 05:43:38 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group® O58 - SDL:2019/03/19 05:43:37 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation O58 - SDL:2019/02/26 15:13:44 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver -.) -- C:\WINDOWS\System32\drivers\iaStorAC.sys [1018032] =>.Intel(R) Rapid Storage Technology® O58 - SDL:2019/03/19 05:43:41 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAVC.sys [885048] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [411960] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [566800] =>.Microsoft Windows® O58 - SDL:2018/12/20 11:05:20 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\WINDOWS\System32\drivers\idmwfp.sys [229296] =>.Tonec Inc.® O58 - SDL:2019/03/19 05:44:16 A . (.Microsoft Corporation - Indirect displays kernel-mode filter driver.) -- C:\WINDOWS\System32\drivers\IndirectKmd.sys [46592] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\WINDOWS\System32\drivers\intelide.sys [20008] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:07 A . (.Microsoft Corporation - Intel Power Engine Plugin.) -- C:\WINDOWS\System32\drivers\intelpep.sys [352232] =>.Microsoft® O58 - SDL:2019/03/19 05:43:34 A . (.Microsoft Corporation - Intel Power Limit Driver.) -- C:\WINDOWS\System32\drivers\intelpmax.sys [28672] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:07 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\intelppm.sys [225080] =>.Microsoft® O58 - SDL:2019/03/19 05:43:45 A . (.Microsoft Corporation - I/O rate control Filter.) -- C:\WINDOWS\System32\drivers\iorate.sys [56632] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\WINDOWS\System32\drivers\ipfltdrv.sys [90624] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - WMI IPMI DRIVER.) -- C:\WINDOWS\System32\drivers\IPMIDrv.sys [110904] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:16 A . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\ipnat.sys [224768] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - IPT Driver.) -- C:\WINDOWS\System32\drivers\ipt.sys [54584] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:07 A . (.Microsoft Corporation - PNP ISA Bus Driver.) -- C:\WINDOWS\System32\drivers\isapnp.sys [23352] =>.Microsoft® O58 - SDL:2019/03/19 05:43:39 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\ItSas35i.sys [148520] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Keyboard Class Driver.) -- C:\WINDOWS\System32\drivers\kbdclass.sys [70968] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - HID Keyboard Filter Driver.) -- C:\WINDOWS\System32\drivers\kbdhid.sys [46592] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) -- C:\WINDOWS\System32\drivers\kdnic.sys [32568] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:20 A . (.Microsoft Corporation - Network Power Dependency Broker.) -- C:\WINDOWS\System32\drivers\KNetPwrDepBroker.sys [30720] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:49 A . (.Microsoft Corporation - Kernel CSA Library.) -- C:\WINDOWS\System32\drivers\ks.sys [455680] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:34 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecdd.sys [146744] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:32 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecpkg.sys [179512] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:52 A . (.Microsoft Corporation - Kernel Streaming WOW Thunk Service.) -- C:\WINDOWS\System32\drivers\ksthunk.sys [29184] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:48 A . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\WINDOWS\System32\drivers\lltdio.sys [72192] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [109064] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [124448] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [128528] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82960] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:49 A . (.Microsoft Corporation - LUA File Virtualization Filter Driver.) -- C:\WINDOWS\System32\drivers\luafv.sys [141312] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - MA-USB Host Controller Driver.) -- C:\WINDOWS\System32\drivers\mausbhost.sys [535864] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - MA-USB IP Driver.) -- C:\WINDOWS\System32\drivers\mausbip.sys [62264] =>.Microsoft Windows® O58 - SDL:2019/09/30 06:25:00 A . (.Malwarebytes - Malwarebytes Anti-Exploit.) -- C:\WINDOWS\System32\drivers\mbae64.sys [153312] =>.Malwarebytes Corporation® O58 - SDL:2019/11/02 20:14:40 A . (.Malwarebytes - Malwarebytes Real-Time Protection.) -- C:\WINDOWS\System32\drivers\mbam.sys [73584] =>.Malwarebytes Corporation® O58 - SDL:2019/11/02 20:04:56 A . (.Malwarebytes - Malwarebytes Chameleon.) -- C:\WINDOWS\System32\drivers\MbamChameleon.sys [199768] =>.Malwarebytes Corporation® O58 - SDL:2019/06/26 13:00:48 A . (.Malwarebytes - Malwarebytes Early Launch Anti-Malware Driv.) -- C:\WINDOWS\System32\drivers\MbamElam.sys [20936] =>.Microsoft® O58 - SDL:2019/11/02 20:14:08 A . (.Malwarebytes - Malwarebytes SwissArmy.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [275232] =>.Malwarebytes Corporation® O58 - SDL:2019/09/19 20:01:20 A . (.Microsoft Corporation - Windows Mobile Broadband Class Extension.) -- C:\WINDOWS\System32\drivers\MbbCx.sys [358912] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:33 A . (.Microsoft Corporation - Medium changer class driver.) -- C:\WINDOWS\System32\drivers\mcd.sys [24576] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59920] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [75280] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas35i.sys [94736] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [576016] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:33 A . (.Microsoft Corporation - Microsoft Bluetooth Avrcp Transport Driver.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [64512] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Legacy Bluetooth LE Bus Enumerator.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [97280] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [1150480] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:47 A . (.Microsoft Corporation - MMCSS Driver.) -- C:\WINDOWS\System32\drivers\mmcss.sys [53760] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:53 A . (.Microsoft Corporation - Modem Device Driver.) -- C:\WINDOWS\System32\drivers\modem.sys [46592] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:07 A . (.Microsoft Corporation - Monitor Driver.) -- C:\WINDOWS\System32\drivers\monitor.sys [69632] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Mouse Class Driver.) -- C:\WINDOWS\System32\drivers\mouclass.sys [66872] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - HID Mouse Filter Driver.) -- C:\WINDOWS\System32\drivers\mouhid.sys [35840] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:35 A . (.Microsoft Corporation - Mount Point Manager.) -- C:\WINDOWS\System32\drivers\mountmgr.sys [113680] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:15 A . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\WINDOWS\System32\drivers\mpsdrv.sys [80384] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:56 A . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\WINDOWS\System32\drivers\mrxdav.sys [158208] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:35 A . (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\mrxsmb.sys [561680] =>.Microsoft® O58 - SDL:2019/09/19 20:02:35 A . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\WINDOWS\System32\drivers\mrxsmb20.sys [260920] =>.Microsoft® O58 - SDL:2019/09/19 20:02:33 A . (.Microsoft Corporation - Mailslot driver.) -- C:\WINDOWS\System32\drivers\msfs.sys [43536] =>.Microsoft® O58 - SDL:2019/09/19 20:01:47 A . (.Microsoft Corporation - GPIO Class Extension Driver.) -- C:\WINDOWS\System32\drivers\msgpioclx.sys [182288] =>.Microsoft® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - GPIO Button Driver.) -- C:\WINDOWS\System32\drivers\msgpiowin32.sys [54072] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:16 A . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\WINDOWS\System32\drivers\mshidkmdf.sys [8704] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - Pass-through Driver for HID-UMDF Interface.) -- C:\WINDOWS\System32\drivers\mshidumdf.sys [12288] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:16 A . (.Microsoft Corporation - Hardware Notification Class Extension Drive.) -- C:\WINDOWS\System32\drivers\mshwnclx.sys [28672] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:07 A . (.Microsoft Corporation - ISA Driver.) -- C:\WINDOWS\System32\drivers\msisadrv.sys [19256] =>.Microsoft® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\WINDOWS\System32\drivers\msiscsi.sys [292880] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:49 A . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\System32\drivers\mskssrv.sys [34816] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:00 A . (.Microsoft Corporation - Microsoft Link-Layer Discovery Protocol Dri.) -- C:\WINDOWS\System32\drivers\mslldp.sys [78848] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:52 A . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\System32\drivers\mspclock.sys [11264] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:52 A . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\System32\drivers\mspqm.sys [11264] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\WINDOWS\System32\drivers\msrpc.sys [372752] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:19 A . (.Microsoft Corporation - Microsoft Security Events Component file sy.) -- C:\WINDOWS\System32\drivers\mssecflt.sys [252944] =>.Microsoft® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\WINDOWS\System32\drivers\mssmbios.sys [48440] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:52 A . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\WINDOWS\System32\drivers\mstee.sys [12800] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - Microsoft Multi-Touch HID Driver.) -- C:\WINDOWS\System32\drivers\MTConfig.sys [16384] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:35 A . (.Microsoft Corporation - Multiple UNC Provider Driver.) -- C:\WINDOWS\System32\drivers\mup.sys [129848] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [64016] =>.Microsoft Windows® O58 - SDL:2019/11/02 20:14:22 A . (.Malwarebytes - Malwarebytes Web Protection.) -- C:\WINDOWS\System32\drivers\mwac.sys [116832] =>.Malwarebytes Corporation® O58 - SDL:2019/03/19 05:43:41 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [153616] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:34 A . (.Microsoft Corporation - Network Driver Interface Specification (NDI.) -- C:\WINDOWS\System32\drivers\ndis.sys [1482256] =>.Microsoft® O58 - SDL:2019/03/19 05:45:50 A . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) -- C:\WINDOWS\System32\drivers\ndiscap.sys [56320] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:00 A . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) -- C:\WINDOWS\System32\drivers\NdisImPlatform.sys [135168] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:55 A . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\WINDOWS\System32\drivers\ndistapi.sys [28672] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:35 A . (.Microsoft Corporation - NDIS User mode I/O driver.) -- C:\WINDOWS\System32\drivers\ndisuio.sys [70656] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:00 A . (.Microsoft Corporation - Microsoft Virtual Network Adapter Enumerato.) -- C:\WINDOWS\System32\drivers\NdisVirtualBus.sys [22016] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\WINDOWS\System32\drivers\ndiswan.sys [206336] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:50 A . (.Microsoft Corporation - RDMA Sample Driver.) -- C:\WINDOWS\System32\drivers\NDKPing.sys [63488] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:55 A . (.Microsoft Corporation - NDIS Proxy.) -- C:\WINDOWS\System32\drivers\ndproxy.sys [244736] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:32 A . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) -- C:\WINDOWS\System32\drivers\Ndu.sys [132096] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - Network Adapter Class Extension for WDF.) -- C:\WINDOWS\System32\drivers\NetAdapterCx.sys [187904] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:58 A . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\WINDOWS\System32\drivers\netbios.sys [64824] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:53 A . (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netbt.sys [337408] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:34 A . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\WINDOWS\System32\drivers\netio.sys [586760] =>.Microsoft® O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Virtual NDIS Miniport.) -- C:\WINDOWS\System32\drivers\netvsc.sys [246072] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:33 A . (.Microsoft Corporation - NPFS Driver.) -- C:\WINDOWS\System32\drivers\npfs.sys [87048] =>.Microsoft® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Named pipe service triggers.) -- C:\WINDOWS\System32\drivers\npsvctrig.sys [27136] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - NSI Proxy.) -- C:\WINDOWS\System32\drivers\nsiproxy.sys [48128] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:33 A . (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2698552] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:53 A . (.Microsoft Corporation - NTOS extension host driver.) -- C:\WINDOWS\System32\drivers\ntosext.sys [20496] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:35 A . (.Microsoft Corporation - NULL Driver.) -- C:\WINDOWS\System32\drivers\null.sys [7680] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - NVDIMM device driver.) -- C:\WINDOWS\System32\drivers\nvdimm.sys [158520] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150544] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166408] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:29 A . (.Microsoft Corporation - NativeWiFi Miniport Driver.) -- C:\WINDOWS\System32\drivers\nwifi.sys [701952] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:15 A . (.Microsoft Corporation - QoS Packet Scheduler.) -- C:\WINDOWS\System32\drivers\pacer.sys [160784] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Parallel Port Driver.) -- C:\WINDOWS\System32\drivers\parport.sys [108032] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:34 A . (.Microsoft Corporation - Partition driver.) -- C:\WINDOWS\System32\drivers\partmgr.sys [178192] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - NT Plug and Play PCI Enumerator.) -- C:\WINDOWS\System32\drivers\pci.sys [435728] =>.Microsoft® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\pciide.sys [16936] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\WINDOWS\System32\drivers\pciidex.sys [56848] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:34 A . (.Microsoft Corporation - PCMCIA Bus Driver.) -- C:\WINDOWS\System32\drivers\pcmcia.sys [127504] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:33 A . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\WINDOWS\System32\drivers\pcw.sys [58384] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:25 A . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\WINDOWS\System32\drivers\pdc.sys [180240] =>.Microsoft® O58 - SDL:2019/09/19 20:01:26 A . (.Microsoft Corporation - Protected Environment Authentication and Au.) -- C:\WINDOWS\System32\drivers\PEAuth.sys [817152] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58896] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [68624] =>.Microsoft Windows® O58 - SDL:2019/09/16 10:14:36 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\phantomtap.sys [45056] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2019/03/19 05:45:50 A . (.Microsoft Corporation - Packet Monitor Driver.) -- C:\WINDOWS\System32\drivers\PktMon.sys [96056] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Persistent memory driver.) -- C:\WINDOWS\System32\drivers\pmem.sys [127800] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:38 A . (.Microsoft Corporation - Plug and Play Memory Driver.) -- C:\WINDOWS\System32\drivers\pnpmem.sys [17408] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - Port Device Class Configuration Filter Driv.) -- C:\WINDOWS\System32\drivers\portcfg.sys [25600] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\System32\drivers\portcls.sys [390656] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:07 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\processr.sys [208184] =>.Microsoft® O58 - SDL:2019/03/19 05:44:15 A . (.Microsoft Corporation - Process Launch Monitor driver.) -- C:\WINDOWS\System32\drivers\ProcLaunchMon.sys [36248] =>.Microsoft Windows® O58 - SDL:2019/03/15 14:46:14 A . (.Qualcomm Atheros, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2372072] =>.Qualcomm Atheros® O58 - SDL:2019/03/19 05:45:00 A . (.Microsoft Corporation - Microsoft Quality Windows Audio Video Exper.) -- C:\WINDOWS\System32\drivers\qwavedrv.sys [53760] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - RAM Disk Driver.) -- C:\WINDOWS\System32\drivers\ramdisk.sys [41784] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\WINDOWS\System32\drivers\rasacd.sys [19968] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\rasl2tp.sys [112128] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\raspppoe.sys [87552] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\WINDOWS\System32\drivers\raspptp.sys [103424] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\WINDOWS\System32\drivers\rassstp.sys [85504] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:35 A . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) -- C:\WINDOWS\System32\drivers\rdbss.sys [457016] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\WINDOWS\System32\drivers\rdpbus.sys [28672] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:04:33 A . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [167936] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:47 A . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\WINDOWS\System32\drivers\rdpvideominiport.sys [32056] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:45:56 A . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\WINDOWS\System32\drivers\rdyboost.sys [294928] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:28 A . (.Microsoft Corporation - NT ReFS FS Driver.) -- C:\WINDOWS\System32\drivers\refs.sys [1974288] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:28 A . (.Microsoft Corporation - NT ReFS FS Driver.) -- C:\WINDOWS\System32\drivers\refsv1.sys [987152] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\System32\drivers\rfcomm.sys [211456] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Microsoft RemoteFX VM Transport.) -- C:\WINDOWS\System32\drivers\RfxVmt.sys [41472] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:38 A . (.Microsoft Corporation - ResourceHub Proxy Driver.) -- C:\WINDOWS\System32\drivers\rhproxy.sys [113152] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:43 A . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\WINDOWS\System32\drivers\rmcast.sys [159232] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\WINDOWS\System32\drivers\RNDISMP.sys [37376] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:53 A . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\WINDOWS\System32\drivers\rootmdm.sys [13824] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:48 A . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) -- C:\WINDOWS\System32\drivers\rspndr.sys [89088] =>.Microsoft Corporation O58 - SDL:2018/10/23 20:24:26 A . (.Realtek - Realtek 8125/8136/8168/8169 NDIS 6.40 64-bi.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [1131024] =>.Realtek Semiconductor Corp.® O58 - SDL:2019/03/19 05:43:49 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys [57856] =>.Realtek O58 - SDL:2019/05/02 01:36:52 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [6840408] =>.Realtek Semiconductor Corp.® O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\WINDOWS\System32\drivers\sbp2port.sys [117288] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:30 A . (.Microsoft Corporation - Microsoft Smart Card Reader Filter Driver.) -- C:\WINDOWS\System32\drivers\scfilter.sys [45056] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Storage Class Memory Bus Driver.) -- C:\WINDOWS\System32\drivers\scmbus.sys [151352] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:33 A . (.Microsoft Corporation - SCSI Port Driver.) -- C:\WINDOWS\System32\drivers\scsiport.sys [187408] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:09 A . (.Microsoft Corporation - SecureDigital Bus Driver.) -- C:\WINDOWS\System32\drivers\sdbus.sys [296976] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:38 A . (.Microsoft Corporation - SDF Reflector.) -- C:\WINDOWS\System32\drivers\SDFRd.sys [33592] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - SD Host Controller Port Driver.) -- C:\WINDOWS\System32\drivers\sdport.sys [105784] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - SD Storage Class Driver.) -- C:\WINDOWS\System32\drivers\sdstor.sys [103736] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - Serial Class Extension.) -- C:\WINDOWS\System32\drivers\SerCx.sys [84792] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - Serial Class Extension V2.) -- C:\WINDOWS\System32\drivers\SerCx2.sys [170808] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\WINDOWS\System32\drivers\serenum.sys [27648] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Serial Device Driver.) -- C:\WINDOWS\System32\drivers\serial.sys [89600] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Serial Mouse Filter Driver.) -- C:\WINDOWS\System32\drivers\sermouse.sys [29696] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\WINDOWS\System32\drivers\sfloppy.sys [19456] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:32 A . (.Microsoft Corporation - System Guard Runtime Monitor Agent Driver.) -- C:\WINDOWS\System32\drivers\SgrmAgent.sys [89096] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [45072] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81936] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - Sleep Study Helper.) -- C:\WINDOWS\System32\drivers\SleepStudyHelper.sys [38200] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Microsemi Corportation - Storport Miniport Driver for SmartRAID/Smar.) -- C:\WINDOWS\System32\drivers\SmartSAMD.sys [220176] =>.Microsoft Windows® O58 - SDL:2019/03/19 13:03:51 A . (.Microsoft Corporation - SMB Network Direct Driver.) -- C:\WINDOWS\System32\drivers\smbdirect.sys [171008] =>.Microsoft Corporation O58 - SDL:2018/07/04 02:50:42 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [48168] =>.Synaptics Incorporated® O58 - SDL:2019/03/19 05:44:30 A . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\WINDOWS\System32\drivers\smclib.sys [21504] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - Storage Spaces Dump Driver.) -- C:\WINDOWS\System32\drivers\spacedump.sys [204816] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\WINDOWS\System32\drivers\spaceport.sys [657208] =>.Microsoft Windows® O58 - SDL:2019/03/19 13:03:48 A . (.Microsoft Corporation - Holographic Spatial Graph Filter.) -- C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [76088] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - SPB Class Extension.) -- C:\WINDOWS\System32\drivers\SpbCx.sys [85816] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:35 A . (.Microsoft Corporation - Smb 2.0 Server driver.) -- C:\WINDOWS\System32\drivers\srv2.sys [771584] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:35 A . (.Microsoft Corporation - Server Network driver.) -- C:\WINDOWS\System32\drivers\srvnet.sys [309760] =>.Microsoft Corporation O58 - SDL:2019/07/09 02:29:44 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [135520] =>.Samsung Electronics Co., Ltd.® O58 - SDL:2019/07/09 02:29:48 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [166752] =>.Samsung Electronics Co., Ltd.® O58 - SDL:2019/03/19 05:43:39 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31240] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storahci.sys [174392] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Microsoft NVM Express Storport Miniport Dri.) -- C:\WINDOWS\System32\drivers\stornvme.sys [142648] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\WINDOWS\System32\drivers\storport.sys [639288] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - Storage QoS Filter.) -- C:\WINDOWS\System32\drivers\storqosflt.sys [93200] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - MS UFS Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storufs.sys [55304] =>.Microsoft® O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Storage VSC Driver.) -- C:\WINDOWS\System32\drivers\storvsc.sys [42296] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:33 A . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\WINDOWS\System32\drivers\stream.sys [82432] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Microsoft RemoteFX Synth3D Video VSC.) -- C:\WINDOWS\System32\drivers\Synth3dVsc.sys [66560] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:33 A . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\WINDOWS\System32\drivers\tape.sys [33280] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:54 A . (.Microsoft Corporation - Export driver for kernel mode TPM API.) -- C:\WINDOWS\System32\drivers\tbs.sys [29496] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:34 A . (.Microsoft Corporation - TCP/IP Driver.) -- C:\WINDOWS\System32\drivers\tcpip.sys [2990096] =>.Microsoft® O58 - SDL:2019/03/19 05:44:58 A . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\WINDOWS\System32\drivers\tcpipreg.sys [54784] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - TDI Wrapper.) -- C:\WINDOWS\System32\drivers\tdi.sys [39440] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:45:32 A . (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [132616] =>.Microsoft Windows® O58 - SDL:2018/11/16 12:27:14 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [228808] =>.Intel(R) Embedded Subsystems and IP Blocks Group® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Terminal Server Input Driver.) -- C:\WINDOWS\System32\drivers\terminpt.sys [41488] =>.Microsoft Windows® O58 - SDL:2019/09/13 01:50:57 A . (.TENCENT - tesrsdt64 NT Driver.) -- C:\WINDOWS\System32\drivers\tesrsdt.sys [442128] =>.Tencent Technology(Shenzhen) Company Limited® O58 - SDL:2019/09/19 20:02:35 A . (.Microsoft Corporation - Kernel Transaction Manager Driver.) -- C:\WINDOWS\System32\drivers\tm.sys [141840] =>.Microsoft® O58 - SDL:2019/09/19 20:01:09 A . (.Microsoft Corporation - TPM Device Driver.) -- C:\WINDOWS\System32\drivers\tpm.sys [249656] =>.Microsoft® O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - Remote Desktop USB Hub Filter Driver.) -- C:\WINDOWS\System32\drivers\TsUsbFlt.sys [65024] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\WINDOWS\System32\drivers\TsUsbGD.sys [35328] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:14 A . (.Microsoft Corporation - Remote Desktop USB Hub.) -- C:\WINDOWS\System32\drivers\tsusbhub.sys [130560] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:58 A . (.Microsoft Corporation - Microsoft Tunnel Interface Driver.) -- C:\WINDOWS\System32\drivers\tunnel.sys [128512] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Microsoft Uasp Driver.) -- C:\WINDOWS\System32\drivers\uaspstor.sys [79160] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - USB Connector Manager KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmCx.sys [160256] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - UCM-TCPCI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmTcpciCx.sys [186368] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - UCM-UCSI ACPI Client Driver.) -- C:\WINDOWS\System32\drivers\UcmUcsiAcpiClient.sys [34816] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - UCM-UCSI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmUcsiCx.sys [111104] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - USB Controller Extension.) -- C:\WINDOWS\System32\drivers\Ucx01000.sys [244024] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:49 A . (.Microsoft Corporation - "udecx.DRIVER".) -- C:\WINDOWS\System32\drivers\Udecx.sys [51200] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:53 A . (.Microsoft Corporation - UDF File System Driver.) -- C:\WINDOWS\System32\drivers\udfs.sys [342528] =>.Microsoft Corporation O58 - SDL:2019/03/19 13:03:49 A . (.Microsoft Corporation - Microsoft User Experience Virtualization Ag.) -- C:\WINDOWS\System32\drivers\UevAgentDriver.sys [41272] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - USB Function Driver Class Extension.) -- C:\WINDOWS\System32\drivers\ufx01000.sys [311096] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - UFX Synopsys Client Driver.) -- C:\WINDOWS\System32\drivers\ufxsynopsys.sys [181048] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Generic pass-through driver.) -- C:\WINDOWS\System32\drivers\umpass.sys [13312] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - USB Role-Switch Class Extension.) -- C:\WINDOWS\System32\drivers\urscx01000.sys [74552] =>.Microsoft Windows® O58 - SDL:2016/07/15 20:10:44 A . (.MBB - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\usb2ser.sys [151184] =>.NGO® O58 - SDL:2019/03/19 05:45:02 A . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\WINDOWS\System32\drivers\usb8023.sys [24576] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\WINDOWS\System32\drivers\USBAUDIO.sys [198656] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:04 A . (.Microsoft Corporation - Microsoft USB Audio Class 2.0 Driver.) -- C:\WINDOWS\System32\drivers\usbaudio2.sys [257536] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:38 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\System32\drivers\USBCAMD2.sys [39936] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\WINDOWS\System32\drivers\usbccgp.sys [183608] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\WINDOWS\System32\drivers\usbcir.sys [107008] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\WINDOWS\System32\drivers\usbd.sys [33592] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbehci.sys [100664] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\WINDOWS\System32\drivers\usbhub.sys [545592] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - USB3 HUB Driver.) -- C:\WINDOWS\System32\drivers\USBHUB3.SYS [618296] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbohci.sys [30208] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:18 A . (...) -- C:\WINDOWS\System32\drivers\UsbPmApi.sys [50688] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - USB 1.1 & 2.0 Port Driver.) -- C:\WINDOWS\System32\drivers\usbport.sys [475144] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:37 A . (.Microsoft Corporation - USB Printer driver.) -- C:\WINDOWS\System32\drivers\usbprint.sys [34304] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - USB Serial Driver.) -- C:\WINDOWS\System32\drivers\usbser.sys [79360] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS [134968] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbuhci.sys [39936] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:38 A . (.Microsoft Corporation - USB Video Class Driver.) -- C:\WINDOWS\System32\drivers\usbvideo.sys [306192] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:09 A . (.Microsoft Corporation - USB XHCI Driver.) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS [531976] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Virtual Drive Root Enumerator.) -- C:\WINDOWS\System32\drivers\vdrvroot.sys [60216] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:35 A . (.Microsoft Corporation - Driver Verifier Extension.) -- C:\WINDOWS\System32\drivers\VerifierExt.sys [321040] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:08 A . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\WINDOWS\System32\drivers\vhdmp.sys [804880] =>.Microsoft® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Virtual HID Framework (VHF) Driver.) -- C:\WINDOWS\System32\drivers\vhf.sys [39936] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:13 A . (.Microsoft Corporation - Microsoft Hyper-V Virtualization Infrastruc.) -- C:\WINDOWS\System32\drivers\Vid.sys [551736] =>.Microsoft® O58 - SDL:2019/03/19 05:44:38 A . (.Microsoft Corporation - Video Port Driver.) -- C:\WINDOWS\System32\drivers\videoprt.sys [47104] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:45:54 A . (.Microsoft Corporation - Hyper-V VMBus KMCL.) -- C:\WINDOWS\System32\drivers\vmbkmcl.sys [99128] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:14 A . (.Microsoft Corporation - Microsoft Hyper-V Virtual Machine Bus Child.) -- C:\WINDOWS\System32\drivers\vmbus.sys [142136] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) -- C:\WINDOWS\System32\drivers\VMBusHID.sys [36152] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Virtual Machine Generation Counter.) -- C:\WINDOWS\System32\drivers\vmgencounter.sys [22328] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Virtual Machine Guest Infrastructure Driver.) -- C:\WINDOWS\System32\drivers\vmgid.sys [18232] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) -- C:\WINDOWS\System32\drivers\vms3cap.sys [17208] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Virtual Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\vmstorfl.sys [52536] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - Volume Manager Driver.) -- C:\WINDOWS\System32\drivers\volmgr.sys [90120] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:45:38 A . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\WINDOWS\System32\drivers\volmgrx.sys [388112] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:00 A . (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [430096] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - Volume driver.) -- C:\WINDOWS\System32\drivers\volume.sys [16696] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:44 A . (.Microsoft Corporation - Virtual PCI Bus.) -- C:\WINDOWS\System32\drivers\vpci.sys [83768] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:40 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166928] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:40 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305672] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:55 A . (.Microsoft Corporation - Virtual Wireless Bus Driver.) -- C:\WINDOWS\System32\drivers\vwifibus.sys [27648] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:55 A . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\WINDOWS\System32\drivers\vwififlt.sys [77312] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:55 A . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\WINDOWS\System32\drivers\vwifimp.sys [50176] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:39 A . (.Microsoft Corporation - Wacom Serial Pen Tablet HID Driver.) -- C:\WINDOWS\System32\drivers\wacompen.sys [31744] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:55 A . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\WINDOWS\System32\drivers\wanarp.sys [92672] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:06 A . (.Microsoft Corporation - Watchdog Driver.) -- C:\WINDOWS\System32\drivers\watchdog.sys [66048] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:05 A . (.Microsoft Corporation - Windows Container Isolation FS Filter Drive.) -- C:\WINDOWS\System32\drivers\wcifs.sys [201528] =>.Microsoft® O58 - SDL:2019/03/19 05:44:16 A . (.Microsoft Corporation - Windows Container Name Virtualization FS Fi.) -- C:\WINDOWS\System32\drivers\wcnfs.sys [92672] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:57 A . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\WINDOWS\System32\drivers\WdBoot.sys [46472] =>.Microsoft® O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\System32\drivers\Wdf01000.sys [847376] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:57 A . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\WINDOWS\System32\drivers\WdFilter.sys [333784] =>.Microsoft® O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\WINDOWS\System32\drivers\WdfLdr.sys [58896] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:55 A . (.Microsoft Corporation - WDI Driver Framework Driver.) -- C:\WINDOWS\System32\drivers\WdiWiFi.sys [931840] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:21 A . (.Microsoft Corporation - WDM Companion Filter.) -- C:\WINDOWS\System32\drivers\WdmCompanionFilter.sys [21816] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:57 A . (.Microsoft Corporation - Windows Defender Network Stream Filter.) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys [62432] =>.Microsoft® O58 - SDL:2019/03/19 05:44:35 A . (.Microsoft Corporation - Windows Error Reporting Kernel Driver.) -- C:\WINDOWS\System32\drivers\werkernel.sys [50488] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:03 A . (.Microsoft Corporation - WFP NDIS 6.30 Lightweight Filter Driver.) -- C:\WINDOWS\System32\drivers\wfplwfs.sys [180536] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:30 A . (.Microsoft Corporation - Wim file system Driver.) -- C:\WINDOWS\System32\drivers\wimmount.sys [37176] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:18 A . (.Microsoft Corporation - Windows Trusted Runtime Interface Driver.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys [75752] =>.Microsoft® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Windows Trusted Runtime Service Proxy Drive.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys [17896] =>.Microsoft® O58 - SDL:2019/03/19 05:45:54 A . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) -- C:\WINDOWS\System32\drivers\winhv.sys [32568] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:03:27 A . (.Microsoft Corporation - Windows Hypervisor Root Interface Driver.) -- C:\WINDOWS\System32\drivers\winhvr.sys [84280] =>.Microsoft® O58 - SDL:2019/03/19 05:43:41 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [37928] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:01:25 A . (.Microsoft Corporation - Windows NAT Driver.) -- C:\WINDOWS\System32\drivers\winnat.sys [250880] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:31 A . (.Microsoft Corporation - Windows QUIC Driver.) -- C:\WINDOWS\System32\drivers\winquic.sys [205112] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:43 A . (.Microsoft Corporation - Windows WinUSB Class Driver.) -- C:\WINDOWS\System32\drivers\winusb.sys [105472] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:41 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [77832] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:43:41 A . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\WINDOWS\System32\drivers\wmiacpi.sys [19456] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\WINDOWS\System32\drivers\wmilib.sys [20496] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:30 A . (.Microsoft Corporation - Windows Overlay Filter.) -- C:\WINDOWS\System32\drivers\wof.sys [225080] =>.Microsoft Windows® O58 - SDL:2019/03/19 13:03:51 A . (.Microsoft Corporation - Windows Portable Device Upper Class Filter.) -- C:\WINDOWS\System32\drivers\WpdUpFltr.sys [31248] =>.Microsoft Windows® O58 - SDL:2019/03/19 05:44:36 A . (.Microsoft Corporation - WPP Trace Recorder.) -- C:\WINDOWS\System32\drivers\WppRecorder.sys [39976] =>.Microsoft Windows® O58 - SDL:2019/09/19 20:02:35 A . (.Microsoft Corporation - Winsock2 IFS Layer.) -- C:\WINDOWS\System32\drivers\ws2ifsl.sys [25088] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:53 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFPf.sys [134656] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:53 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFRd.sys [297984] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:04 A . (.Microsoft Corporation - Game Input Protocol Driver.) -- C:\WINDOWS\System32\drivers\xboxgip.sys [324608] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:43:33 A . (.Microsoft Corporation - XINPUT filter driver for HID.) -- C:\WINDOWS\System32\drivers\xinputhid.sys [48128] =>.Microsoft Corporation O58 - SDL:2019/10/29 22:21:50 A . (.TENCENT - Loader64 NT Driver.) -- C:\WINDOWS\System32\TesSafe.sys [555064] =>.Tencent Technology(Shenzhen) Company Limited® O58 - SDL:2019/09/19 20:02:04 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) -- C:\WINDOWS\System32\win32k.sys [550400] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:01:47 A . (.Microsoft Corporation - Base Win32k Kernel Driver.) -- C:\WINDOWS\System32\win32kbase.sys [2723840] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:02:04 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\System32\win32kfull.sys [3724800] =>.Microsoft Corporation O58 - SDL:2019/03/19 05:44:15 A . (.Microsoft Corporation - Win32k non session driver.) -- C:\WINDOWS\System32\win32kns.sys [30208] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:03:15 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) -- C:\WINDOWS\SysWOW64\win32k.sys [324096] =>.Microsoft Corporation O58 - SDL:2019/09/19 20:03:15 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\SysWOW64\win32kfull.sys [2798080] =>.Microsoft Corporation ---\\ Last modified or created user files (30) - 83s O61 - LFC: 2019/10/18 09:29:34 A . (.Lenovo Group Limited (R).) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\ldiagio.sys [39048] {713F1370B67539BA13CFCD360E6DE2FB}. O61 - LFC: 2019/10/18 09:29:34 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\LenovoDiagnosticsCLI.exe [993792] O61 - LFC: 2019/10/18 09:29:34 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\module_cpu.dll [632832] O61 - LFC: 2019/10/18 09:29:34 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\module_memory.dll [508928] O61 - LFC: 2019/10/18 09:29:34 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\module_motherboard.dll [787968] O61 - LFC: 2019/10/18 09:29:34 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\module_pci_express.dll [225792] O61 - LFC: 2019/10/18 09:29:34 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\module_storage.dll [10823680] O61 - LFC: 2019/10/18 09:29:34 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\module_wireless.dll [233984] O61 - LFC: 2019/10/18 09:29:34 A . (.2018.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\RmaDll.dll [4608] O61 - LFC: 2019/10/18 09:29:34 A . (.2018 Sam Lantinga.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\SDL2.dll [1331712] O61 - LFC: 2019/10/18 09:29:36 A . (.Lenovo Group Limited (R).) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\ldiagio.sys [35976] {713F1370B67539BA13CFCD360E6DE2FB}. O61 - LFC: 2019/10/18 09:29:36 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\LenovoDiagnosticsCLI.exe [722944] O61 - LFC: 2019/10/18 09:29:36 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\module_cpu.dll [464896] O61 - LFC: 2019/10/18 09:29:36 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\module_memory.dll [359936] O61 - LFC: 2019/10/18 09:29:36 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\module_motherboard.dll [565760] O61 - LFC: 2019/10/18 09:29:36 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\module_pci_express.dll [169984] O61 - LFC: 2019/10/18 09:29:36 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\module_storage.dll [7611904] O61 - LFC: 2019/10/18 09:29:36 A . (.© 2011-2019 Lenovo.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\module_wireless.dll [168448] O61 - LFC: 2019/10/18 09:29:36 A . (.2018.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\RmaDll.dll [4608] O61 - LFC: 2019/10/18 09:29:36 A . (.2018 Sam Lantinga.) -- C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\SDL2.dll [1088000] O61 - LFC: 2019/10/28 21:40:04 A . (..) -- C:\Users\USER\AppData\Local\JDownloader 2.0\tmp\7zip\SevenZipJBinding-N8q7X\lib7-Zip-JBinding.dll [2593168] O61 - LFC: 2019/10/28 21:39:32 N . (.Java(TM) Native Access (JNA).) -- C:\Users\USER\AppData\Local\JDownloader 2.0\tmp\jna\jna8419906808649037491.dll [227897] O61 - LFC: 2019/10/07 19:41:46 A . (.Telegram FZ-LLC.) -- C:\Users\USER\AppData\Roaming\Telegram Desktop\Telegram.exe [48553024] {00BD12AC19AF9EC0FA5283A824597C0A57}. O61 - LFC: 2019/10/14 16:40:11 A . (..) -- C:\Users\USER\AppData\Roaming\Telegram Desktop\unins000.exe [1567953] O61 - LFC: 2019/10/07 19:41:50 A . (.Telegram FZ-LLC.) -- C:\Users\USER\AppData\Roaming\Telegram Desktop\Updater.exe [129088] {00BD12AC19AF9EC0FA5283A824597C0A57}. O61 - LFC: 2019/10/26 16:08:48 A . (..) -- C:\Users\USER\Desktop\VN HAX OLD UI\VnHaxPUBGM-Win32-Shipping.dll [11294720] O61 - LFC: 2019/10/26 16:14:24 A . (..) -- C:\Users\USER\Desktop\VN HAX OLD UI\VnHaxPUBGM-Win64-Shipping.dll [13295104] O61 - LFC: 2019/10/29 22:26:28 A . (..) -- C:\Users\USER\Desktop\VnHaxPUBGM-Win64-Shipping.dll [13295104] O61 - LFC: 2019/11/02 16:39:45 A . (..) -- C:\Users\USER\Downloads\Programs\EmsisoftEmergencyKit.exe [355785416] {00824D35691DA5571A70200E2F67EFCAF3}. O61 - LFC: 2019/11/02 17:39:38 A . (..) -- C:\Users\USER\Downloads\Programs\SH-Alt-Install.exe [2755584] ---\\ File Associations Shell Spawning (10) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value ---\\ Start Menu Internet (8) - 0s O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC® O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft® O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\WINDOWS\System32\ie4ushowIE.exe =>.Microsoft Corporation O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\WINDOWS\System32\ie4ushowIE.exe =>.Microsoft Corporation ---\\ Search Browser Infection (2) - 0s O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com ---\\ Search Svchost Services (49) - 4s O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\WINDOWS\System32\certprop.dll [192512] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [192512] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\Windows\System32\srvsvc.dll [280064] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\Windows\System32\gpsvc.dll [1255936] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\IKEEXT.DLL [1042944] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [830976] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\Windows\System32\seclogon.dll [31232] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\Windows\System32\iscsiexe.dll [151040] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll [110080] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\Windows\System32\schedsvc.dll [858112] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [231424] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [491520] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [479232] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\Windows\System32\wercplsupport.dll [122368] =>.Microsoft Corporation O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll [269824] =>.Microsoft Corporation O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [2448384] =>.Microsoft Corporation O83 - Search Svchost Services: TroubleshootingSvc (TroubleshootingSvc) . (.Microsoft Corporation - MitigationClient.) -- C:\Windows\System32\MitigationClient.dll [394752] =>.Microsoft Corporation O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Provides infrastructure support for deployi.) -- C:\Windows\System32\LanguageOverlayServer.dll [317952] =>.Microsoft Corporation O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [239104] =>.Microsoft Corporation O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [1263616] =>.Microsoft Corporation O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - Windows Managent Service DLL.) -- C:\Windows\System32\Windows.Internal.Management.dll [919040] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\Windows\System32\themeservice.dll [67072] =>.Microsoft Corporation O83 - Search Svchost Services: WManSvc (WManSvc) . (.Microsoft Corporation - Windows Management Service DLL.) -- C:\Windows\System32\Windows.Management.Service.dll [863744] =>.Microsoft Corporation O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Token Broker.) -- C:\Windows\System32\TokenBroker.dll [1497088] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Geolocation Service.) -- C:\Windows\System32\lfsvc.dll [47104] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\Windows\System32\rasauto.dll [104448] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll [913408] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [500224] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\Windows\System32\Sens.dll [73728] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll [629760] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [309248] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\Windows\System32\qmgr.dll [1581056] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [252928] =>.Microsoft Corporation O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [58368] =>.Microsoft Corporation O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Flight Settings.) -- C:\Windows\System32\flightsettings.dll [893440] =>.Microsoft Corporation O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Network Setup Service.) -- C:\Windows\System32\NetSetupSvc.dll [336896] =>.Microsoft Corporation O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Windows Push Notification System Service.) -- C:\Windows\System32\WpnService.dll [253440] =>.Microsoft Corporation O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [1268224] =>.Microsoft Corporation O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Update Session Orchestrator Service.) -- C:\Windows\System32\usosvc.dll [518144] =>.Microsoft Corporation O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [1282048] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\Windows\System32\DeviceSetupManager.dll [265728] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\Windows\System32\wlidsvc.dll [2157568] =>.Microsoft Corporation O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll [72704] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\Windows\System32\NcaSvc.dll [170496] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\Windows\System32\appinfo.dll [160256] =>.Microsoft Corporation O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [1063936] =>.Microsoft Corporation O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Natural Authentication Service.) -- C:\Windows\System32\NaturalAuth.dll [831488] =>.Microsoft Corporation O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Software installation Service.) -- C:\Windows\System32\appmgmts.dll [198656] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\Windows\System32\bdesvc.dll [524800] =>.Microsoft Corporation ---\\ Firewall Active Exception List (105) - 8s O87 - FAEL: "{444B12E5-3B1B-4C8B-BC0C-D4E63B84CE52}" [In-None-P17-TRUE] .(.Tencent - Gameloop - Update.) -- d:\program files\txgameassistant\appmarket\GF186\TUpdate.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{C1209623-79D9-4075-B583-00BEF5CB7B56}" [In-None-P17-TRUE] .(.Tencent - Gameloop - Install.) -- d:\program files\txgameassistant\appmarket\GameDownload.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{F1285CAE-0508-49BC-B079-001D7D79FB0E}" [In-None-P17-TRUE] .(...) -- d:\program files\txgameassistant\appmarket\QQExternal.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{97C15752-489D-4338-B1A3-77F23ADBBA4A}" [In-None-P17-TRUE] .(.腾讯公司 - 腾讯手游助手-crash上报.) -- d:\program files\txgameassistant\appmarket\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{C1A62EC6-1864-45C4-A996-61E6882C3863}" [In-None-P17-TRUE] .(.2017 Tencent. All Rights Reserved. - TMarketInst.) -- d:\program files\txgameassistant\appmarket\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{0F7C3DB8-AA21-48D7-B4E8-ABD92F63CC77}" [In-None-P17-TRUE] .(.Tencent - Gameloop.) -- d:\program files\txgameassistant\appmarket\AppMarket.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{77F8653F-9076-458A-BE8E-AFA6D2DB7CCA}" [In-None-P17-TRUE] .(.Tencent - 腾讯手游助手辅助程序.) -- d:\program files\txgameassistant\ui\TxGaDcc.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{9B50D85D-CFA8-4105-BD11-06AA2CDD1151}" [In-None-P17-TRUE] .(.Tencent - Gameloop - Crash Report.) -- d:\program files\txgameassistant\ui\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{C176CE10-98BD-40A4-90D2-AD1C7F98B807}" [In-None-P17-TRUE] .(.2017 Tencent. All Rights Reserved. - TUiInst.) -- d:\program files\txgameassistant\ui\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{B56048C9-333A-491F-869A-F6A2B0FEBD8D}" [In-None-P17-TRUE] .(...) -- d:\program files\txgameassistant\ui\adb.exe O87 - FAEL: "{F0FA193E-12A8-4646-A1AF-22CAFF9258B9}" [In-None-P17-TRUE] .(.Tencent - Gameloop.) -- d:\program files\txgameassistant\ui\AndroidEmulator.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{BDDE7C4F-066E-4C3A-B27C-04F1B14432E5}" [In-None-P17-TRUE] .(...) -- C:\Users\USER\AppData\Local\Temp\pubg.exe (.not file.) =>.Temporary file not necessary O87 - FAEL: "{E1A4DB56-6AAD-4F79-B4F1-03FEA369F6D5}" [In-None-P6-TRUE] .(...) -- C:\Users\USER\AppData\Local\Temp\pubg.exe (.not file.) =>.Temporary file not necessary O87 - FAEL: "{065ACB19-09D3-4B17-88CC-9161A847EE23}" [In-None-P17-TRUE] .(.Valve Corporation - Steam Client WebHelper.) -- C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe =>.Valve® O87 - FAEL: "{7A6D478A-031C-40B7-B7BF-09921498DC09}" [In-None-P6-TRUE] .(.Valve Corporation - Steam Client WebHelper.) -- C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe =>.Valve® O87 - FAEL: "{FBC8A52E-467C-4F05-91F4-317E3A2E0CC3}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{49922C4C-717C-4B32-B053-30E6FA3CB295}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{AD394235-30FB-4D89-9723-B2245312E30E}" [In-None-P17-TRUE] .(.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe =>.Valve® O87 - FAEL: "{785212FA-C266-4C86-83F6-7236B401BC79}" [In-None-P6-TRUE] .(.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe =>.Valve® O87 - FAEL: "{E3913A66-8834-4817-A4F1-CE94D67A28BE}" [In-None-P17-TRUE] .(...) -- C:\Users\USER\AppData\Local\Programs\Opera\62.0.3331.18\opera.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "UDP Query User{EABE8897-4F58-4D88-9411-8FA2F31C5E6A}C:\program files\adobe\adobe media encoder cc 2019\adobe media encoder.exe" [In-None-P17-TRUE] .(...) -- C:\program files\adobe\adobe media encoder cc 2019\adobe media encoder.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "TCP Query User{27E63183-C1C2-4DC6-AAB8-27370B3E6B72}C:\program files\adobe\adobe media encoder cc 2019\adobe media encoder.exe" [In-None-P6-TRUE] .(...) -- C:\program files\adobe\adobe media encoder cc 2019\adobe media encoder.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{07EEC602-0480-468A-B2B5-273826B76166}" [In-None-P6-TRUE] .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe =>.Apple Inc.® O87 - FAEL: "{E4C56F90-1F06-4530-9F30-75B339AEE000}" [In-None-P17-FALSE] .(...) -- C:\program files\adobe\adobe after effects cc 2019\support files\afterfx.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{23C7C0BD-1B23-4C45-BC1C-9A72BE1E727E}" [In-None-P6-FALSE] .(...) -- C:\program files\adobe\adobe after effects cc 2019\support files\afterfx.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{A81DA13C-DBD8-4EF0-BDBD-2D792F8CF1CC}" [In-None-P6-TRUE] .(.CyberLink Corp. - CyberLink PowerDVD18.) -- C:\Program Files (x86)\CyberLink\PowerDVD18\CastingStation.exe =>.CyberLink Corp.® O87 - FAEL: "{41F8F579-0CBB-457B-8A70-78445A8F68F5}" [In-None-P6-TRUE] .(.CyberLink Corp. - PowerDVD 18.0.) -- C:\Program Files (x86)\CyberLink\PowerDVD18\Movie\PowerDVDMovie.exe =>.CyberLink Corp.® O87 - FAEL: "{0940E8C4-8A11-4720-AE98-3352B98B1CD9}" [In-None-P6-TRUE] .(.CyberLink Corp. - PowerDVD 18.) -- C:\Program Files (x86)\CyberLink\PowerDVD18\PowerDVD18Agent.exe =>.CyberLink Corp.® O87 - FAEL: "{A3F95253-4C9F-4448-9B1F-EFC28971D70D}" [In-None-P6-TRUE] .(.CyberLink - Media Server Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD18\Kernel\DMS\CLMSServerPDVD18.exe =>.CyberLink Corp.® O87 - FAEL: "{35918ECF-089F-40AD-B37F-B6F6F5FF5AB2}" [In-None-P6-TRUE] .(.CyberLink Corp. - PowerDVD 18.) -- C:\Program Files (x86)\CyberLink\PowerDVD18\PowerDVD.exe =>.CyberLink Corp.® O87 - FAEL: "UDP Query User{A3B2515B-BBA7-414E-8FD3-0DF2FF03137F}C:\program files\adobe\adobe premiere pro cc 2019\adobe premiere pro.exe" [In-None-P17-TRUE] .(...) -- C:\program files\adobe\adobe premiere pro cc 2019\adobe premiere pro.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "TCP Query User{07DD880F-0B5B-4ED1-A2BD-D6DE8465D734}C:\program files\adobe\adobe premiere pro cc 2019\adobe premiere pro.exe" [In-None-P6-TRUE] .(...) -- C:\program files\adobe\adobe premiere pro cc 2019\adobe premiere pro.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "UDP Query User{1F9602C0-8A4E-4653-8898-601C7238C5CA}C:\program files\adobe\adobe after effects cc 2019\support files\afterfx.exe" [In-None-P17-FALSE] .(...) -- C:\program files\adobe\adobe after effects cc 2019\support files\afterfx.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "TCP Query User{6007517C-EBA9-4961-AC8F-352A233ED83F}C:\program files\adobe\adobe after effects cc 2019\support files\afterfx.exe" [In-None-P6-FALSE] .(...) -- C:\program files\adobe\adobe after effects cc 2019\support files\afterfx.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "UDP Query User{05FEDCD0-4C99-41ED-AFBB-AE997A5E4BA4}E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe" [In-None-P17-TRUE] .(...) -- E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "TCP Query User{588947F4-A31C-4F20-8306-51601FE9BEC9}E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe" [In-None-P6-TRUE] .(...) -- E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{2D2D9A81-AB25-4013-A0CB-2C4D361A8AC2}" [In-None-P6-TRUE] .(.Tencent - Gameloop - Update.) -- d:\program files\txgameassistant\appmarket\GF186\TUpdate.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{A3BD012A-E7E2-4D5C-99D9-1B6ED7E50C60}" [In-None-P6-TRUE] .(.Tencent - Gameloop - Install.) -- d:\program files\txgameassistant\appmarket\GameDownload.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{745C800E-CBD9-4B45-AB16-1BA3FBA03D2C}" [In-None-P6-TRUE] .(...) -- d:\program files\txgameassistant\appmarket\QQExternal.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{2FBE9DFD-2867-468B-AE91-FA1C5755D531}" [In-None-P6-TRUE] .(.腾讯公司 - 腾讯手游助手-crash上报.) -- d:\program files\txgameassistant\appmarket\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{41758DD4-BEE6-44D6-840B-133F12A7B8CB}" [In-None-P6-TRUE] .(.2017 Tencent. All Rights Reserved. - TMarketInst.) -- d:\program files\txgameassistant\appmarket\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{92F1DD79-9865-4FF8-8FBB-313693ABB882}" [In-None-P6-TRUE] .(.Tencent - Gameloop.) -- d:\program files\txgameassistant\appmarket\AppMarket.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{9FEACED4-A31E-424B-8E8C-AC91AD503AAD}" [In-None-P6-TRUE] .(.Tencent - 腾讯手游助手辅助程序.) -- d:\program files\txgameassistant\ui\TxGaDcc.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{E4D3BBD1-CAE2-4ECB-9EF3-78C55CE5B98E}" [In-None-P6-TRUE] .(.Tencent - Gameloop - Crash Report.) -- d:\program files\txgameassistant\ui\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{679BC204-A5DD-41DE-A047-4E3D565AAD0C}" [In-None-P6-TRUE] .(.2017 Tencent. All Rights Reserved. - TUiInst.) -- d:\program files\txgameassistant\ui\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{28D05E91-077F-424C-B6B6-FDF3248D7302}" [In-None-P6-TRUE] .(...) -- d:\program files\txgameassistant\ui\adb.exe O87 - FAEL: "{E2F32148-D995-416A-BE9C-7C92AE9D6B0E}" [In-None-P6-TRUE] .(.Tencent - Gameloop.) -- d:\program files\txgameassistant\ui\AndroidEmulator.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "UDP Query User{99E419D6-AB8F-4EBC-9220-1A1477B180B3}E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe" [In-None-P17-TRUE] .(...) -- E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "TCP Query User{98BAA2D8-4BB4-45EA-B7E1-0D375441ED48}E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe" [In-None-P6-TRUE] .(...) -- E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{B3D13C91-0E72-4CEB-A3F6-C2FD5DA33055}" [In-None-P6-TRUE] .(.Hyperv Corporation - THypervBox Interface.) -- C:\Program Files\AndroidTbox\TBoxSVC.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{96C1ED41-F7B9-4204-847B-0B16AFAD5E87}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AndroidTbox\SUPInstall.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{7560F7D6-61DC-4B35-B48C-464736D1D7FE}" [In-None-P6-TRUE] .(.Hyperv Corporation - THypervBox Balloon Control Tool.) -- C:\Program Files\AndroidTbox\TBoxBalloonCtrl.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{85D913C3-DAE2-41E3-87EA-9E11F94CDCDD}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AndroidTbox\SUPUninstall.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{45C0333D-7B0B-4937-93C6-8628F743994C}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AndroidTbox\NetFltInstall.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{0A7E5F25-D35E-4E8D-BD83-F2A63061273F}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AndroidTbox\NetFltUninstall.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{31964D01-A25F-4AA3-813E-7183C17AEAE3}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AndroidTbox\SUPLoggerCtl.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{E8B91AF6-0D2E-4B0D-BD88-904700937160}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AndroidTbox\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{9BC9B446-9C51-457A-9518-59A5DDA42CF4}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AndroidTbox\USBUninstall.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{31B6DCB1-B19E-4B5E-8E46-BEB437789980}" [In-None-P6-TRUE] .(.Hyperv Corporation - THypervBox Command Line Tool.) -- C:\Program Files\AndroidTbox\TBoxManage.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{0FA62017-4AC0-4B97-A2A2-16A810699877}" [In-None-P6-TRUE] .(.Hyperv Corporation - THypervBox DHCP Server.) -- C:\Program Files\AndroidTbox\TBoxNetDHCP.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{5E3EEA3D-070B-46AF-96F2-331A08D274FA}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AndroidTbox\USBInstall.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{CFF23A28-2258-4669-BC14-4EB19CBCA79E}" [In-None-P6-TRUE] .(.Hyperv Corporation - THypervBox ExtPack Helper.) -- C:\Program Files\AndroidTbox\TBoxExtPackHelperApp.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{87AAB00B-74F4-4EA8-997D-8CDCA6956265}" [In-None-P6-TRUE] .(.Hyperv Corporation - THypervBox Pure SDL Frontend.) -- C:\Program Files\AndroidTbox\TBoxSDL.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{5A9C56BD-7F99-4EC1-8054-A0ED0288AE3B}" [In-None-P6-TRUE] .(.Hyperv Corporation - THypervBox NAT Engine.) -- C:\Program Files\AndroidTbox\TBoxNetNAT.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{491B9101-5E15-49BE-A292-FF6DA4008E73}" [In-None-P6-TRUE] .(.Hyperv Corporation - THypervBox Headless Frontend.) -- C:\Program Files\AndroidTbox\TBoxHeadless.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{73352F8A-3F8D-4F79-894F-70F48F75AD60}" [In-None-P6-TRUE] .(.Hyperv Corporation - THypervBox Manager.) -- C:\Program Files\AndroidTbox\THypervBox.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "UDP Query User{DCE925CB-86CC-458F-B88C-9AF1477C0C79}C:\users\user\desktop\hein5.5\hein5.exe" [In-None-P17-TRUE] .(...) -- C:\users\user\desktop\hein5.5\hein5.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "TCP Query User{B66A5345-9B22-478A-83F1-61920CE13DAD}C:\users\user\desktop\hein5.5\hein5.exe" [In-None-P6-TRUE] .(...) -- C:\users\user\desktop\hein5.5\hein5.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "UDP Query User{C32DD8C7-46E7-4993-B161-EFCD6518C8BE}C:\users\user\desktop\embratoriag\iexplore.exe" [In-None-P17-TRUE] .(...) -- C:\users\user\desktop\embratoriag\iexplore.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "TCP Query User{30E7C5AA-30AD-41E5-BCDB-B326F987E49C}C:\users\user\desktop\embratoriag\iexplore.exe" [In-None-P6-TRUE] .(...) -- C:\users\user\desktop\embratoriag\iexplore.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{BE38491C-1FF8-4251-A874-3FFDFDAFFD46}" [In-None-P6-TRUE] .(.Tencent - 腾讯手游助手辅助程序.) -- D:\Program Files\TxGameAssistant\UI\TxGaDcc.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{1B96326B-91D5-409B-B9B9-B7FC746C2A46}" [In-None-P6-TRUE] .(.Tencent - Gameloop - Crash Report.) -- D:\Program Files\TxGameAssistant\UI\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{C5284433-C957-4082-9058-2045C053B09D}" [In-None-P6-TRUE] .(.2017 Tencent. All Rights Reserved. - TUiInst.) -- D:\Program Files\TxGameAssistant\UI\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{984D98F9-E28F-493D-A51A-7CB57C427908}" [In-None-P6-TRUE] .(...) -- D:\Program Files\TxGameAssistant\UI\adb.exe O87 - FAEL: "{05CB16B8-5B08-4125-BCCB-71677E82019B}" [In-None-P6-TRUE] .(.Tencent - Gameloop.) -- D:\Program Files\TxGameAssistant\UI\AndroidEmulator.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{6610B8F9-3345-42CA-B7F2-DF26F2A8A555}" [In-None-P17-TRUE] .(.Tencent - 腾讯游戏云加速下载引擎(旋风Inside).) -- C:\Users\USER\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{EA7AAEE1-2E90-4CA3-A53D-487D63720D0C}" [In-None-P6-TRUE] .(.Tencent - 腾讯游戏云加速下载引擎(旋风Inside).) -- C:\Users\USER\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{5C66133B-DD2C-4126-947D-2FECF08A5F9E}" [In-None-P17-TRUE] .(.Tencent - 腾讯游戏云加速下载引擎(旋风Inside).) -- C:\Users\USER\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{FF679B25-66E4-4F31-A8B6-2DA1B8916773}" [In-None-P6-TRUE] .(.Tencent - 腾讯游戏云加速下载引擎(旋风Inside).) -- C:\Users\USER\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{81F018AB-7DB3-4C5B-A39D-516CB5037545}" [In-None-P17-TRUE] .(.Tencent - 腾讯游戏云加速下载引擎(旋风Inside).) -- C:\Users\USER\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{804E577C-8F55-479A-B7C0-D353C8E9C459}" [In-None-P6-TRUE] .(.Tencent - 腾讯游戏云加速下载引擎(旋风Inside).) -- C:\Users\USER\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{AE46D499-62AE-43FD-AEB4-42E792C1FF8C}" [In-None-P6-TRUE] .(.Tencent - Gameloop - Update.) -- D:\Program Files\TxGameAssistant\AppMarket\GF186\TUpdate.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{0950B508-C1D1-46BE-AF1F-6EE7D6266F72}" [In-None-P6-TRUE] .(.Tencent - Gameloop - Install.) -- D:\Program Files\TxGameAssistant\AppMarket\GameDownload.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{5ED31419-A985-4F63-8BE0-F94A991E6167}" [In-None-P6-TRUE] .(...) -- D:\Program Files\TxGameAssistant\AppMarket\QQExternal.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{52EA268D-127F-48EE-AFC7-E13D2DB4661B}" [In-None-P6-TRUE] .(.腾讯公司 - 腾讯手游助手-crash上报.) -- D:\Program Files\TxGameAssistant\AppMarket\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{6883682A-3FEF-458F-A671-DDEA43B7022B}" [In-None-P6-TRUE] .(.2017 Tencent. All Rights Reserved. - TMarketInst.) -- D:\Program Files\TxGameAssistant\AppMarket\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{91581E4F-4E0F-4BE3-88F4-0A5579CB3671}" [In-None-P6-TRUE] .(.Tencent - Gameloop.) -- D:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{41F3E464-F2F8-4CA3-8103-5CAEC9E32D3F}" [In-None-P17-TRUE] .(...) -- C:\Program Files\DriversCloud.com\DriversCloud.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{2C41F7B2-9960-4723-AD44-9949EB2AB907}" [In-None-P6-TRUE] .(...) -- C:\Program Files\DriversCloud.com\DriversCloud.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{C5660909-FC81-4DF1-BAC6-8A40B19FF011}" [In-None-P17-TRUE] .(.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC® O87 - FAEL: "{23C16783-58F4-427A-9BC6-395855AEB2A6}" [In-None-P17-TRUE] .(.Tencent - Gameloop.) -- d:\program files\txgameassistant\ui\AndroidEmulator.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{7A021687-4805-4A7C-B041-10956131E014}" [In-None-P17-TRUE] .(...) -- d:\program files\txgameassistant\ui\adb.exe O87 - FAEL: "{D92E7175-E77E-4A11-A757-F079E4F72458}" [In-None-P17-TRUE] .(.2017 Tencent. All Rights Reserved. - TUiInst.) -- d:\program files\txgameassistant\ui\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{C2FC2C18-7EF0-41A3-ADEE-E2A2C4972AFC}" [In-None-P17-TRUE] .(.Tencent - Gameloop - Crash Report.) -- d:\program files\txgameassistant\ui\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{FCFDC955-9742-49C0-9253-8D667CF8C3B2}" [In-None-P17-TRUE] .(.Tencent - 腾讯手游助手辅助程序.) -- d:\program files\txgameassistant\ui\TxGaDcc.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{1F16B01B-5D45-4184-B9BB-D03DCED25DAF}" [In-None-P17-TRUE] .(.Tencent - Gameloop.) -- d:\program files\txgameassistant\appmarket\AppMarket.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{44F22B80-7949-494A-BB57-CAF2049F0238}" [In-None-P17-TRUE] .(.2017 Tencent. All Rights Reserved. - TMarketInst.) -- d:\program files\txgameassistant\appmarket\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{211BBBD9-0188-408C-B2ED-2C098FF1ADD9}" [In-None-P17-TRUE] .(.腾讯公司 - 腾讯手游助手-crash上报.) -- d:\program files\txgameassistant\appmarket\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{8ECD8D3F-06E3-49D9-B1F8-4369804DB339}" [In-None-P17-TRUE] .(...) -- d:\program files\txgameassistant\appmarket\QQExternal.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{0B68C47C-4055-456B-BF2D-F32596D3D7F2}" [In-None-P17-TRUE] .(.Tencent - Gameloop - Install.) -- d:\program files\txgameassistant\appmarket\GameDownload.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{DA703C0E-4ADF-4065-9A86-1A5189821D63}" [In-None-P17-TRUE] .(.Tencent - Gameloop - Update.) -- d:\program files\txgameassistant\appmarket\GF186\TUpdate.exe =>.Tencent Technology(Shenzhen) Company Limited® O87 - FAEL: "{AE511E43-D480-48F5-85E7-327425A18C90}" [In-None-P17-TRUE] .(.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC® O87 - FAEL: "{061EB0F2-3F57-4047-AC11-16587D13EC26}" [In-None-P6-TRUE] .(...) -- C:\Users\USER\AppData\Local\Temp\localhost.exe (.not file.) =>.Temporary file not necessary O87 - FAEL: "{270C834F-DAC8-40D3-9368-A2D88AA36CED}" [In-None-P17-TRUE] .(...) -- C:\Users\USER\AppData\Local\Temp\localhost.exe (.not file.) =>.Temporary file not necessary O87 - FAEL: "{0CA3AE31-F8DC-4E29-943F-0D500BDE18DA}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Mini KMS Activator Ultimate 1.8\Mini KMS Activator Ultimate 1.8.exe (.not file.) =>Hacktool.Office ---\\ Product Upgrade Codes (70) - 2s O90 - PUC: "000041091A0090400100000000F01FEC" [HKLM] . (.Microsoft Office OneNote MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109340000000100000000F01FEC" [HKLM] . (.Microsoft Office Office 32-bit Components 2010.) =>.Microsoft Corporation O90 - PUC: "00004109340090400100000000F01FEC" [HKLM] . (.Microsoft Office Shared 32-bit MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109440090400100000000F01FEC" [HKLM] . (.Microsoft Office InfoPath MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109510090400100000000F01FEC" [HKLM] . (.Microsoft Office Access MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109511090400100000000F01FEC" [HKLM] . (.Microsoft Office Shared Setup Metadata MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109610090400100000000F01FEC" [HKLM] . (.Microsoft Office Excel MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109711090400100000000F01FEC" [HKLM] . (.Microsoft Office Access Setup Metadata MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109810090400100000000F01FEC" [HKLM] . (.Microsoft Office PowerPoint MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109910090400100000000F01FEC" [HKLM] . (.Microsoft Office Publisher MUI (English) 2010.) =>.bl.org O90 - PUC: "00004109A10090400100000000F01FEC" [HKLM] . (.Microsoft Office Outlook MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109AB0090400100000000F01FEC" [HKLM] . (.Microsoft Office Groove MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109B10090400100000000F01FEC" [HKLM] . (.Microsoft Office Word MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109C20090400100000000F01FEC" [HKLM] . (.Microsoft Office Proofing (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109E60090400100000000F01FEC" [HKLM] . (.Microsoft Office Shared MUI (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109F10090400100000000F01FEC" [HKLM] . (.Microsoft Office Proof (English) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109F100A0C00100000000F01FEC" [HKLM] . (.Microsoft Office Proof (Spanish) 2010.) =>.Microsoft Corporation O90 - PUC: "00004109F100C0400100000000F01FEC" [HKLM] . (.Microsoft Office Proof (French) 2010.) =>.Microsoft Corporation O90 - PUC: "00004119110000000100000000F01FEC" [HKLM] . (.Microsoft Office Professional Plus 2010.) =>.Microsoft Corporation O90 - PUC: "007B601F8FFB56033B50413DA64D5093" [HKLM] . (.Microsoft Visual C++ 2017 x64 Additional Runtime - 14.15.26706.) =>.Microsoft Corporation O90 - PUC: "07787626954F3094383E2A69F8C62C24" [HKLM] . (.Microsoft VC++ redistributables repacked..) =>.bl.org O90 - PUC: "12B8D03ED28D112328CCF0A0D541598E" [HKLM] . (.Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660.) =>.Microsoft Corporation O90 - PUC: "16749E9B178F7BF9F81154D530CB15F5" [HKLM] . (.AMD Settings.) -- C:\Windows\Installer\{B9E94761-F871-9FB7-8F11-455D03BC515F}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc O90 - PUC: "1926E8D15D0BCE53481466615F760A7F" [HKLM] . (.Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219.) =>.bl.org O90 - PUC: "1D5E3C0FEDA1E123187686FED06E995A" [HKLM] . (.Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219.) =>.bl.org O90 - PUC: "2B77518B0DA3DFA41AC9786F370CD9C0" [HKLM] . (.Microsoft VC++ redistributables repacked..) =>.bl.org O90 - PUC: "2C65F5BCDFAF40643B6EBEFFCF3F031D" [HKLM] . (.Intel(R) LMS.) =>.Intel Corporation O90 - PUC: "33235204561C708AE01323447969F033" [HKLM] . (.AMD Settings.) -- C:\Windows\Installer\{40253233-C165-A807-0E31-324497960F33}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc O90 - PUC: "397AEFEB36DB5078ABA0B813388F1A51" [HKLM] . (.AMD Problem Report Wizard.) -- C:\Windows\Installer\{BEFEA793-BD63-8705-BA0A-8B3183F8A115}\ARPPRODUCTICON.exe =>.bl.org O90 - PUC: "3CAC39B8800671C4F90B4B6F9FF03F61" [HKLM] . (.Intel(R) Rapid Storage Technology.) =>.Intel Corporation O90 - PUC: "3e43b73803c7c394f8a6b2f0402e19c2" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable.) =>.bl.org O90 - PUC: "436F6625D7B77354DBCD89DDC6CFAB1A" [HKLM] . (.Online Application.) -- C:\WINDOWS\Installer\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}\online.exe =>SUP.Optional.Microleaves O90 - PUC: "44DB0475D85BA123FA0CD6D35465DDC6" [HKLM] . (.Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660.) =>.Microsoft Corporation O90 - PUC: "4A59177C8BECEE83DB6D4CC64B95FEE6" [HKLM] . (.Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.15.26706.) =>.Microsoft Corporation O90 - PUC: "4B8898265AF36AE4AB3AAD46F07681DB" [HKLM] . (.Qualcomm Atheros Bluetooth Installer (64).) -- C:\Windows\Installer\{628988B4-3FA5-4EA6-BAA3-DA640F6718BD}\ARPPRODUCTICON.exe =>.bl.org O90 - PUC: "4ECFA2EE83200ED41A0461742061721C" [HKLM] . (.Branding64.) -- C:\Windows\Installer\{EE2AFCE4-0238-4DE0-A140-1647021627C1}\ARPPRODUCTICON.exe O90 - PUC: "57451E932F32D54398775BCD749AE462" [HKLM] . (.Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.15.26706.) =>.Microsoft Corporation O90 - PUC: "57DB95FFA664A5D4DA32AA8DC7F54DC4" [HKLM] . (.QuickTime 7.) -- C:\Windows\Installer\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}\Installer.ico =>.Riskware.QuickTime O90 - PUC: "5A440F64B8EC691489E4B56D25E563D1" [HKLM] . (.Apple Application Support.) -- C:\Windows\Installer\{46F044A5-CE8B-4196-984E-5BD6525E361D}\WinInstall.ico =>.Apple Inc. O90 - PUC: "5AE8BD7C1C9CF8649BC0AC02C65A6CEB" [HKLM] . (.Lenovo Diagnostics Tool .) -- C:\Windows\Installer\{C7DB8EA5-C9C1-468F-B90C-CA206CA5C6BE}\ARPPRODUCTICON.exe O90 - PUC: "63ECB07F2F5257449A8126903B8DB53F" [HKLM] . (.Intel(R) C++ Redistributables on Intel(R) 64.) =>.bl.org O90 - PUC: "687F092F96F54D842BB02DC1D75EE60F" [HKLM] . (.Dolby Audio X2 Windows API SDK.) -- C:\WINDOWS\Installer\{F290F786-5F69-48D4-B20B-D21C7DE56EF0}\DolbyBlue.exe =>.Legitimate O90 - PUC: "6B6BAD90FEBF5CA4EA39FB0FA1B097D6" [HKLM] . (.Intel(R) Management Engine Components.) =>.Intel Corporation O90 - PUC: "6D918CBF6B87BA9439E1D321D734EB46" [HKLM] . (.Intel(R) Serial IO.) =>.Intel Corporation O90 - PUC: "7223F443205F9124D94C91765E68AFAF" [HKLM] . (.Update for Windows 10 for x64-based Systems (KB4480730).) =>.Microsoft Corporation O90 - PUC: "7C67044453EEEF7449CCBD6FC6B5F968" [HKLM] . (.Intel(R) Management Engine Components.) =>.Intel Corporation O90 - PUC: "7C9F8B73BF303523781852719CD9C700" [HKLM] . (.Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030.) =>.Microsoft Corporation O90 - PUC: "84b9c17023c712640acaf308593282f8" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable (x64).) =>.bl.org O90 - PUC: "8520DAD7C5154DD39846DB1714990E7F" [HKLM] . (.Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660.) =>.Microsoft Corporation O90 - PUC: "A089CE062ADB6BC44A720BA745894BAC" [HKLM] . (.Google Update Helper.) =>.Google Inc. O90 - PUC: "A4F819E7ECE6A884F9D690BF752C014D" [HKLM] . (.Intel(R) OEM Extension.) =>.Intel Corporation O90 - PUC: "A635ACCD7EDA37944BF823BA0A223452" [HKLM] . (.Intel(R) Management Engine Driver.) =>.Intel Corporation O90 - PUC: "A694757247E3A0230B706321A0F921D6" [HKLM] . (.Microsoft Visual C++ 2017 x86 Additional Runtime - 14.15.26706.) =>.Microsoft Corporation O90 - PUC: "AA74CE6531856FF4E857450462BFAE38" [HKLM] . (.Apple Software Update.) -- C:\Windows\Installer\{56EC47AA-5813-4FF6-8E75-544026FBEA83}\Installer.ico =>.Apple Inc. O90 - PUC: "B24DC05E449C600449BDA735D33D0A1F" [HKLM] . (.CORSAIR iCUE Software.) -- C:\Windows\Installer\{E50CD42B-C944-4006-94DB-7A533DD3A0F1}\ProgramIcon O90 - PUC: "b25099274a207264182f8181add555d0" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable.) =>.bl.org O90 - PUC: "B39F1661E7D9D734496894E64DCB2F1E" [HKLM] . (.Intel(R) Icls.) =>.Intel Corporation O90 - PUC: "C025571B2A687A53689168CD7369889B" [HKLM] . (.Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030.) =>.Microsoft Corporation O90 - PUC: "C3AEB2FCAE628F23AAB933F1E743AB79" [HKLM] . (.Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030.) =>.Microsoft Corporation O90 - PUC: "CE6380BC270BD863282B3D74B09F7570" [HKLM] . (.Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660.) =>.Microsoft Corporation O90 - PUC: "D20352A90C039D93DBF6126ECE614057" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17.) =>.bl.org O90 - PUC: "D5A4D6B410BAA4F4CABAED683A5CD476" [HKLM] . (.Dynamic Application Loader Host Interface Service.) O90 - PUC: "DC8A59DBF9D1DA5389A1E3975220E6BB" [HKLM] . (.Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030.) =>.Microsoft Corporation O90 - PUC: "DECD20A40B2C3DD478DBD7E8866DFAC3" [HKLM] . (.Dolby Audio X2 Windows APP.) -- C:\WINDOWS\Installer\{4A02DCED-C2B0-4DD3-87BD-7D8E68D6AF3C}\DolbyBlue.exe =>.Legitimate O90 - PUC: "DEDB789EE87D2D946A6BBF4D32832EA0" [HKLM] . (.Intel(R) Management Engine Components.) =>.Intel Corporation O90 - PUC: "E128CD23D7A48784EB8E33F71A357D2F" [HKLM] . (.Update for Windows 10 for x64-based Systems (KB4023057).) =>.Microsoft Corporation O90 - PUC: "E62C2FDADF909E11189C00C092B62F5A" [HKLM] . (.Foxit PhantomPDF.) -- C:\Windows\Installer\{ADF2C26E-09FD-11E9-81C9-000C296BF2A5}\IconName.exe =>.Foxit Corporation O90 - PUC: "EFEE0228DC83E77358593193D847A0EC" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17.) =>.bl.org O90 - PUC: "0FD7F00DB73A39C4F8BA99F4B25EF6AB" [HKCU] . (.Viber.) =>.Viber O90 - PUC: "0FD7F00DB73A39C4F8BA99F4B25EF6AB" [HKU] . (.Viber.) =>.Viber ---\\ Windows Installer Scan (30) - 17s [MD5.484BE36C04E189B5A0F66C40B1BA08F8] [WIS][2018/10/02 00:45:36] (.Intel Corporation - Intel(R) C++ Redistributables on Intel(R) 6.) -- C:\WINDOWS\Installer\12175451.msi [9863168] =>.Intel Corporation [MD5.DB164AA0B1BFD580389903DEC9101772] [WIS][2019/02/26 15:16:26] (.Intel Corporation - Intel(R) Rapid Storage Technology.) -- C:\WINDOWS\Installer\13cc4f.msi [10584064] =>.Intel Corporation [MD5.4DD433F001FC486FC83DECC70469633E] [WIS][2019/04/16 04:27:50] (.Advanced Micro Devices, Inc. - AMD Settings.) -- C:\WINDOWS\Installer\141cfc08.msi [32695760] =>.Advanced Micro Devices, Inc. [MD5.B303C47E0BD2C92B3FC572FB3D692A02] [WIS][2019/04/16 04:31:58] (.Advanced Micro Devices, Inc. - AMD Settings.) -- C:\WINDOWS\Installer\141cfc0f.msi [75951072] =>.Advanced Micro Devices, Inc. [MD5.43112189FBEEB48F0364916D6667074B] [WIS][2018/06/18 08:41:40] (.Advanced Micro Devices, Inc. - Branding.) -- C:\WINDOWS\Installer\141cfc15.msi [2486272] =>.Advanced Micro Devices, Inc. [MD5.DDD194FB7BECB9559AD1ED48E04503E3] [WIS][2019/04/22 00:43:36] (.Advanced Micro Devices, Inc. - AMD Problem Report Wizard (64 bit).) -- C:\WINDOWS\Installer\141cfc21.msi [7096832] =>.Advanced Micro Devices, Inc. [MD5.5376B2262B6E9773801520B6735C6DE9] [WIS][2015/12/15 15:18:36] (.Apple Inc. - QuickTime Installer.) -- C:\WINDOWS\Installer\15d43a.msi [28397568] =>.Apple Inc. [MD5.1B720C225226D66085F7F08371F28909] [WIS][2015/12/08 15:03:34] (.Apple Inc. - Apple Application Support Installer.) -- C:\WINDOWS\Installer\15d686.msi [21402624] =>.Apple Inc. [MD5.DD64840A35A4C5FC46146FF769E5E2B7] [WIS][2019/05/25 20:03:57] (.Foxit Software Inc. - Foxit PhantomPDF.) -- C:\WINDOWS\Installer\1ee66bf4.msi [548884480] =>.Foxit Software Inc. [MD5.FFA5CA321C54E70ECE6EDE89519F92D6] [WIS][2019/03/21 20:16:45] (.InstallShield.) -- C:\WINDOWS\Installer\2903e3.msi [33266688] =>.InstallShield [MD5.457F3956B6254E2E4C442EF1B2E82A7B] [WIS][2018/11/16 12:36:40] (.Intel Corporation - Intel(R) Management Engine Driver.) -- C:\WINDOWS\Installer\2903e7.msi [1437696] =>.Intel Corporation [MD5.EDC2B2634AA470BC01EEF065D3F5C38D] [WIS][2018/11/16 12:35:48] (.Intel Corporation - Intel(R) OEM Extension.) -- C:\WINDOWS\Installer\2903eb.msi [1003520] =>.Intel Corporation [MD5.481FEF6CEE485ACC73464E9B9300ED65] [WIS][2018/11/16 12:32:06] (.Intel Corporation - Intel(R) Management Engine Components.) -- C:\WINDOWS\Installer\2903ef.msi [1003520] =>.Intel Corporation [MD5.06676059A93987388068FAFD587B4CB3] [WIS][2018/11/16 12:30:18] (.Intel Corporation - Intel(R) Management Engine Components.) -- C:\WINDOWS\Installer\2903f3.msi [323584] =>.Intel Corporation [MD5.84BE4DCCDA5794FFDC2FBB7039CC66A4] [WIS][2018/11/16 12:30:44] (.Intel Corporation - Microsoft VC++ redistributables repacked..) -- C:\WINDOWS\Installer\2903f7.msi [12840960] =>.Intel Corporation [MD5.FE989013A94F948630E773D3DA6313C3] [WIS][2018/11/16 12:30:52] (.Intel Corporation - Microsoft VC++ redistributables repacked..) -- C:\WINDOWS\Installer\2903fb.msi [14307328] =>.Intel Corporation [MD5.67A9EF44D9F452435BA68F8DD2C91F2D] [WIS][2018/11/16 12:35:50] (.Intel Corporation - Dynamic Application Loader Host Interface S.) -- C:\WINDOWS\Installer\2903ff.msi [3936256] =>.Intel Corporation [MD5.692623F30C6AB10DC94D56E94E178BB4] [WIS][2018/11/16 12:36:30] (.Intel Corporation - Intel(R) Icls.) -- C:\WINDOWS\Installer\290403.msi [14016512] =>.Intel Corporation [MD5.EE9C1B733D4E1C0E9AC0A30989D29BDA] [WIS][2018/11/16 12:35:56] (.Intel Corporation - Intel(R) LMS.) -- C:\WINDOWS\Installer\290407.msi [58675200] =>.Intel Corporation [MD5.E472E3A3F20F9852B68C0C35C80EFB39] [WIS][2018/11/16 12:36:20] (.Intel Corporation - Intel(R) Management Engine Components.) -- C:\WINDOWS\Installer\29040b.msi [9815621] =>.Intel Corporation [MD5.30FA2B554541E28E83A7DC062FD77807] [WIS][2017/11/09 09:00:50] (.Intel Corporation - Intel(R) Serial IO.) -- C:\WINDOWS\Installer\29040f.msi [1347584] =>.Intel Corporation [MD5.2B5B3AC4B0286ABC8BC95F6DC28B5768] [WIS][2019/07/19 00:03:40] (.Apple Inc. - Apple Software Update Installer.) -- C:\WINDOWS\Installer\29677c2a.msi [2412544] =>.Apple Inc. [MD5.DDA077A2672648AF7ACFCB62E00F4F32] [WIS][2019/10/16 18:28:26] (.Viber Media S.a.r.l - Viber.) -- C:\WINDOWS\Installer\2a7ff9d.msi [86650880] =>.Viber Media S.a.r.l [MD5.BAB85911E99F454B8231466E33969F7C] [WIS][2017/11/02 12:18:13] (.Microleaves - Online Application.) -- C:\WINDOWS\Installer\2d2f38.msi [2806272] =>SUP.Optional.Microleaves [MD5.4F51A4FD3AC6F60ABA93303C6FD2C551] [WIS][2019/09/30 23:43:53] (.Google LLC - Google Update Helper.) -- C:\WINDOWS\Installer\33816fc4.msi [40960] =>.Google LLC [MD5.DEC378885F20DFA5D0F2AD4D09517799] [WIS][2019/01/21 21:06:16] (.Dolby Laboratories, Inc. - Dolby Audio X2 Windows API SDK.) -- C:\WINDOWS\Installer\4b6524.msi [5664768] =>.Dolby Laboratories, Inc. [MD5.AA080C6D4672BA64F8DCA926820DA7AB] [WIS][2017/10/13 15:01:04] (.Dolby Laboratories, Inc. - Dolby Audio X2 Windows APP.) -- C:\WINDOWS\Installer\4b652b.msi [22040576] =>.Dolby Laboratories, Inc. [MD5.97BD011DD392A83281856BD27AF454EF] [WIS][2019/05/09 15:26:02] (.Corsair - * CORSAIR iCUE Software 3.15.101.) -- C:\WINDOWS\Installer\82ac676.msi [341962752] =>.Corsair [MD5.088EC3191A9D9B96465F3B6E929CFA61] [WIS][2019/04/11 21:59:11] (.Lenovo - LENOVO~1Lenovo Diagnostics Tool .) -- C:\WINDOWS\Installer\f1b2a26.msi [51320832] =>.Lenovo ---\\ FEATURE CONTROL. (133) - 0s [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPURPOSEDETECTION]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:infopath.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:AcqWeb.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:Activation.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:FoxitPhantomPDF.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:PowerDVD.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:mbamtray.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:mbam.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPfewgsrv.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGUI.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGuiIT.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLgPad.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLOGON.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:Scale_for_R3.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:ieuser.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOCUMENT_COMPATIBLE_MODE]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:devenv.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:dexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:helppane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FEEDS]:msfeedssync.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PROLOG]:msiexec.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:cs.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:waol.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:wm.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHELL_FOLDERS]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPARAMS]:helppane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONTROL_BEHAVIORS]:wlmail.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:mshta.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:outlook.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:sidebar.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING]:communicator.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msimn.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:winmail.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:msimn.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:outlook.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:winmail.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:excel.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:infopath.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:powerpnt.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:winword.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEBOC_IS_UNSAFE]:HelpPane.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]:msn.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:wmplayer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:explorer.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:iexplore.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:PresentationHost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:prevhost.exe =>.Legitimate [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:wmplayer.exe =>.Legitimate ---\\ Additional Scan (O88) (84) - 17s HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime C:\Program Files (x86)\QuickTime =>Riskware.QuickTime C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime C:\Users\USER\AppData\Local\AdvinstAnalytics =>.SUP.Various C:\WINDOWS\Prefetch\MINI KMS ACTIVATOR ULTIMATE 1-AB159060.pf =>Hacktool.Office HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan [HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{0CA3AE31-F8DC-4E29-943F-0D500BDE18DA} =>Hacktool.Office HKLM\SOFTWARE\Wow6432Node\Classes\Installer\Products\436F6625D7B77354DBCD89DDC6CFAB1A =>SUP.Optional.Microleaves HKLM\SOFTWARE\Wow6432Node\Classes\Installer\Features\436F6625D7B77354DBCD89DDC6CFAB1A =>SUP.Optional.Microleaves C:\WINDOWS\Installer\2d2f38.msi =>SUP.Optional.Microleaves C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\000 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\001 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\002 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\003 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\004 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\005 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\006 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\007 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\009 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\010 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\011 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\012 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\013 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\014 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\015 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\016 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\017 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\018 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\019 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\020 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\021 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\022 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\023 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\024 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\025 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\026 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\027 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\028 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\029 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\030 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\031 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\032 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\033 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\034 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\035 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\036 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\037 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\038 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\039 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\040 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\041 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\042 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\043 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\044 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\045 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\046 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\047 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\048 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\049 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\050 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\051 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\052 =>.SUP.Temporary.Chrome C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins =>.SUP.Temporary.Chrome [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\VnHaxLoader-Win32-Shiping.out.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\Sniper_5.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\Sniper_5.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\Net2\Text Editors and tools\TextUtils.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\Net2\Text Editors and tools\TextUtils.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\VnHaxLoader-Win64-Shipping.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\MicroSoft Office Pro 2007\setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\MicroSoft\setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\VnHaxLoader-Win32-Shiping.out.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\Sniper_5.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\Sniper_5.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\Net2\Text Editors and tools\TextUtils.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\Net2\Text Editors and tools\TextUtils.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\USER\Desktop\VnHaxLoader-Win64-Shipping.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\MicroSoft Office Pro 2007\setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1611984227-1131522694-2661748133-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\MicroSoft\setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache ---\\ Summary of the elements found (8) - 0s https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Various https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Hacktool.Office https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan https://nicolascoolman.eu/2017/12/24/sup-microleaves/ =>SUP.Optional.Microleaves https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Chrome https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Orphan.MUICache ---\\ Serial Number [00824D35691DA5571A70200E2F67EFCAF3] [02/11/2019] (.Emsisoft Ltd.) - C:\Users\USER\Desktop\decrypt_STOPDjvu.exe =>.Not verified [00824D35691DA5571A70200E2F67EFCAF3] [02/11/2019] (.Emsisoft Ltd.) - C:\Users\USER\Downloads\Programs\EmsisoftEmergencyKit.exe =>.Not verified [00BD12AC19AF9EC0FA5283A824597C0A57] [07/10/2019] (.Telegram FZ-LLC.) - C:\Users\USER\AppData\Roaming\Telegram Desktop\Telegram.exe =>.Not verified [00BD12AC19AF9EC0FA5283A824597C0A57] [07/10/2019] (.Telegram FZ-LLC.) - C:\Users\USER\AppData\Roaming\Telegram Desktop\Updater.exe =>.Not verified [01342592A0010CB1109C11C0519CFD24] [16/06/2019] (.Notepad++.) - C:\Program Files\Notepad++\notepad++.exe =>.Notepad++ [01342592A0010CB1109C11C0519CFD24] [16/06/2019] (.Notepad++.) - C:\Program Files\Notepad++\NppShell_06.dll =>.Notepad++ [019BB53DD06F10B3DBA82E8D3FAF6588] [21/01/2019] (.Dolby Laboratories, Inc..) - C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe =>.Dolby Laboratories, Inc. [0260E45D081C25B7009679C8AF553D8C] [22/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\SystemPluginData\LenovoSystemUpdatePlugin\session\Repository\btswiftpair0806\getw10ver6.exe =>.Not verified [0305EC138E94A1DB6EB7DC7905083F04] [02/11/2019] (.CPUID S.A.R.L.U..) - C:\Windows\Temp\cpuz148\cpuz148_x64.sys =>.CPUID S.A.R.L.U. [0320BE3EB866526927F999B97B04346E] [02/05/2019] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconductor Corp. [0320BE3EB866526927F999B97B04346E] [02/05/2019] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp. [0320BE3EB866526927F999B97B04346E] [23/10/2018] (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp. [044E3BF58976880FFD074448A8F7A058] [02/11/2019] (.Malwarebytes Corporation.) - C:\WINDOWS\System32\DRIVERS\farflt.sys =>.Malwarebytes Corporation [044E3BF58976880FFD074448A8F7A058] [02/11/2019] (.Malwarebytes Corporation.) - C:\WINDOWS\system32\DRIVERS\mbam.sys =>.Malwarebytes Corporation [044E3BF58976880FFD074448A8F7A058] [02/11/2019] (.Malwarebytes Corporation.) - C:\WINDOWS\System32\Drivers\MbamChameleon.sys =>.Malwarebytes Corporation [044E3BF58976880FFD074448A8F7A058] [02/11/2019] (.Malwarebytes Corporation.) - C:\WINDOWS\System32\Drivers\mbamswissarmy.sys =>.Malwarebytes Corporation [044E3BF58976880FFD074448A8F7A058] [02/11/2019] (.Malwarebytes Corporation.) - C:\WINDOWS\System32\DRIVERS\mwac.sys =>.Malwarebytes Corporation [044E3BF58976880FFD074448A8F7A058] [26/06/2019] (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation [044E3BF58976880FFD074448A8F7A058] [26/06/2019] (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll =>.Malwarebytes Corporation [044E3BF58976880FFD074448A8F7A058] [30/09/2019] (.Malwarebytes Corporation.) - C:\WINDOWS\system32\drivers\mbae64.sys =>.Malwarebytes Corporation [054F466CECCBE9D6BEE81F5435E64D47] [17/07/2019] (.Valve.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe =>.Valve [054F466CECCBE9D6BEE81F5435E64D47] [17/07/2019] (.Valve.) - C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe =>.Valve [054F466CECCBE9D6BEE81F5435E64D47] [17/07/2019] (.Valve.) - C:\Program Files (x86)\Steam\Steam.exe =>.Valve [063D0C011B143C57893FE839779AFCD0] [02/05/2019] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp. [063D0C011B143C57893FE839779AFCD0] [02/05/2019] (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\RTKVHD64.sys =>.Realtek Semiconductor Corp. [06E9579AAB763E72079989C689D2B42D] [18/10/2019] (.The Qt Company Oy.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\Qt5Gui.dll =>.Not verified [06E9579AAB763E72079989C689D2B42D] [18/10/2019] (.The Qt Company Oy.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\Qt5Network.dll =>.Not verified [06E9579AAB763E72079989C689D2B42D] [18/10/2019] (.The Qt Company Oy.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\Qt5PrintSupport.dll =>.Not verified [06E9579AAB763E72079989C689D2B42D] [18/10/2019] (.The Qt Company Oy.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\Qt5Svg.dll =>.Not verified [06E9579AAB763E72079989C689D2B42D] [18/10/2019] (.The Qt Company Oy.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\Qt5Widgets.dll =>.Not verified [06F24D9F4DB07BD7ECAD067F5EE26C29] [08/10/2019] (.Adobe Inc..) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe =>.Adobe Inc. [06F24D9F4DB07BD7ECAD067F5EE26C29] [08/10/2019] (.Adobe Inc..) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe =>.Adobe Inc. [06F24D9F4DB07BD7ECAD067F5EE26C29] [08/10/2019] (.Adobe Inc..) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Inc. [0739378AAA468C162A3816A9E0B04EE8] [11/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TBoxDrv.sys =>.Tencent Technology(Shenzhen) Company Limited [07D9088DD3014622FC5BA95BA2614B87] [12/07/2018] (.Lenovo (Beijing) Co., Ltd..) - C:\WINDOWS\System32\drivers\AcpiVpc.sys =>.Lenovo (Beijing) Co., Ltd. [084CAF4DF499141D404B7199AA2C2131] [22/05/2018] (.Valve.) - C:\Program Files (x86)\Steam\uninstall.exe =>.Valve [08A2EC4E78A09E174B192E5535984B59] [02/11/2019] (.Malwarebytes Inc.) - C:\Program Files\Malwarebytes\Anti-Malware\unins000.exe =>.Malwarebytes Inc [08A2EC4E78A09E174B192E5535984B59] [02/11/2019] (.Malwarebytes Inc.) - C:\Users\USER\Downloads\Programs\mb3-setup-consumer-3.8.3.2965-1.0.629-1.0.13137.exe =>.Malwarebytes Inc [08A2EC4E78A09E174B192E5535984B59] [10/10/2019] (.Malwarebytes Inc.) - C:\ProgramData\Malwarebytes\MBAMService\dbclsupdate\staging\BrowserSDKDLL.dll =>.Malwarebytes Inc [08A2EC4E78A09E174B192E5535984B59] [20/08/2019] (.Malwarebytes Inc.) - C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe =>.Malwarebytes Inc [08A2EC4E78A09E174B192E5535984B59] [20/08/2019] (.Malwarebytes Inc.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe =>.Malwarebytes Inc [0942FCB8A736EC41CD37568CC5B88C49] [22/04/2019] (.Corsair Memory, Inc..) - C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.CpuIdRemote64.exe =>.Corsair Memory, Inc. [0942FCB8A736EC41CD37568CC5B88C49] [22/04/2019] (.Corsair Memory, Inc..) - C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.DisplayAdapter.exe =>.Corsair Memory, Inc. [0942FCB8A736EC41CD37568CC5B88C49] [22/04/2019] (.Corsair Memory, Inc..) - C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe =>.Corsair Memory, Inc. [0942FCB8A736EC41CD37568CC5B88C49] [22/04/2019] (.Corsair Memory, Inc..) - C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE Launcher.exe =>.Corsair Memory, Inc. [0942FCB8A736EC41CD37568CC5B88C49] [22/04/2019] (.Corsair Memory, Inc..) - C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE.exe =>.Corsair Memory, Inc. [0A40E89815E6F8C9470558D093D702D4] [12/10/2017] (.Dolby Laboratories, Inc..) - C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDax2Acknowledgement.exe =>.Dolby Laboratories, Inc. [0A8D9239E7564A3723D632ADF8D6847A] [15/05/2019] (.Martin Malik - REALiX.) - C:\Program Files\HWiNFO64\HWiNFO64.EXE =>.Martin Malik - REALiX [0A8D9239E7564A3723D632ADF8D6847A] [27/05/2019] (.Martin Malik - REALiX.) - C:\Windows\system32\drivers\HWiNFO64A.SYS =>.Martin Malik - REALiX [0C15BE4A15BB0903C901B1D6C265302F] [09/10/2019] (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.120\elevation_service.exe =>.Google LLC [0C15BE4A15BB0903C901B1D6C265302F] [09/10/2019] (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC [0C15BE4A15BB0903C901B1D6C265302F] [15/10/2019] (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.120\Installer\chrmstp.exe =>.Google LLC [0C15BE4A15BB0903C901B1D6C265302F] [15/10/2019] (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.120\Installer\setup.exe =>.Google LLC [0C5396DCB2949C70FAC48AB08A07338E] [02/11/2019] (.Mozilla Corporation.) - C:\ProgramData\mozglue.dll =>.Mozilla Corporation [0C5396DCB2949C70FAC48AB08A07338E] [02/11/2019] (.Mozilla Corporation.) - C:\ProgramData\nss3.dll =>.Mozilla Corporation [0D2CACCD3E9EEC06738410BA31BF6595] [10/10/2019] (.Adobe Inc..) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\PepperFlash\32.0.0.270\pepflashplayer.dll =>.Adobe Inc. [0D3E15F326CFAA9525CA67DCB0A420F6] [02/11/2019] (.SurfRight B.V..) - C:\Program Files\HitmanPro\HitmanPro.exe =>.SurfRight B.V. [0D3E15F326CFAA9525CA67DCB0A420F6] [02/11/2019] (.SurfRight B.V..) - C:\Program Files\HitmanPro\hmpsched.exe =>.SurfRight B.V. [0D3E15F326CFAA9525CA67DCB0A420F6] [02/11/2019] (.SurfRight B.V..) - C:\Users\USER\Downloads\Programs\HitmanPro.exe =>.SurfRight B.V. [0D3E15F326CFAA9525CA67DCB0A420F6] [02/11/2019] (.SurfRight B.V..) - C:\Users\USER\Downloads\Programs\HitmanPro_x64.exe =>.SurfRight B.V. [0F5A6ABA731E01102C7311464DBED0BA] [02/11/2019] (.Emsisoft Ltd.) - C:\EEK\bin64\epp.sys =>.Emsisoft Ltd [0FA5B80428F4624CF9672211E1956FBE] [14/08/2019] (.VideoLAN.) - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLAN [14F8FDD167F92402B1570B5DC495C815] [04/04/2019] (.Google Inc.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc [14F8FDD167F92402B1570B5DC495C815] [30/09/2019] (.Google Inc.) - C:\Program Files (x86)\Google\Update\1.3.35.302\GoogleCrashHandler.exe =>.Google Inc [14F8FDD167F92402B1570B5DC495C815] [30/09/2019] (.Google Inc.) - C:\Program Files (x86)\Google\Update\1.3.35.302\GoogleCrashHandler64.exe =>.Google Inc [166059DCFDEF4F88CE2AD4A6E9FEE748] [02/11/2019] (.SurfRight B.V..) - C:\WINDOWS\system32\drivers\hitmanpro37.sys =>.SurfRight B.V. [1734520C9AABC257A502EC5DBF615354] [26/05/2019] (.Wellbia.com Co., Ltd..) - C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe =>.Not verified [19FE2B7721886C7BCAC1364C90CD7FA9] [04/07/2018] (.Synaptics Incorporated.) - C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys =>.Synaptics Incorporated [2355895F1759E9E3648026F4] [16/09/2019] (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe =>.Avira Operations GmbH & Co. KG [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-console-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-datetime-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-debug-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-errorhandling-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-file-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-file-l1-2-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-file-l2-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-handle-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-heap-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-interlocked-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-libraryloader-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-localization-l1-2-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-memory-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-namedpipe-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-processenvironment-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-processthreads-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-processthreads-l1-1-1.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-profile-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-rtlsupport-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-string-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-synch-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-synch-l1-2-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-sysinfo-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-timezone-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-core-util-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-conio-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-convert-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-environment-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-filesystem-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-heap-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-locale-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-math-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-multibyte-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-private-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-process-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-runtime-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-stdio-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-string-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-time-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\api-ms-win-crt-utility-l1-1-0.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\audio\qtaudio_windows.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\d3dcompiler_47.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\geoservices\qtgeoservices_esri.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\geoservices\qtgeoservices_itemsoverlay.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\geoservices\qtgeoservices_mapbox.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\geoservices\qtgeoservices_nokia.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\geoservices\qtgeoservices_osm.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\iconengines\qsvgicon.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\icudt63.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\icuin63.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\icuuc63.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\imageformats\qgif.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\imageformats\qicns.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\imageformats\qico.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\imageformats\qjpeg.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\imageformats\qsvg.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\imageformats\qtga.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\imageformats\qtiff.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\imageformats\qwbmp.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\imageformats\qwebp.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\libEGL.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\libGLESV2.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\mediaservice\dsengine.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\mediaservice\qtmedia_audioengine.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\mediaservice\wmfengine.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\msvcp140.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\msvcp140_1.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\msvcp140_2.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\opengl32sw.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\platforms\qwindows.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\playlistformats\qtmultimedia_m3u.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\position\qtposition_positionpoll.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\position\qtposition_winrt.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_debugger.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_inspector.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_local.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_messages.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_native.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_nativedebugger.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_preview.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_profiler.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_quickprofiler.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_server.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qmltooling\qmldbg_tcp.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\qrencode.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt\labs\folderlistmodel\qmlfolderlistmodelplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt\labs\platform\qtlabsplatformplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt\labs\settings\qmlsettingsplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Core.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Gui.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Location.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Multimedia.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5MultimediaQuick.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Network.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Positioning.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5PositioningQuick.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Qml.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Quick.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5QuickControls2.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5QuickTemplates2.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5RemoteObjects.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Sql.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Svg.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5WebChannel.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5WebEngine.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5WebEngineCore.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5WebSockets.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5Widgets.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Qt5WinExtras.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtGraphicalEffects\qtgraphicaleffectsplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtLocation\declarative_location.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtMultimedia\declarative_multimedia.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtPositioning\declarative_positioning.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQml\Models.2\modelsplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQml\RemoteObjects\qtqmlremoteobjects.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQml\StateMachine\qtqmlstatemachine.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick.2\qtquick2plugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Controls.2\Fusion\qtquickcontrols2fusionstyleplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Controls.2\Imagine\qtquickcontrols2imaginestyleplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Controls.2\Material\qtquickcontrols2materialstyleplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Controls.2\qtquickcontrols2plugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Controls.2\Universal\qtquickcontrols2universalstyleplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Controls\qtquickcontrolsplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Controls\Styles\Flat\qtquickextrasflatplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Dialogs\dialogplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Dialogs\Private\dialogsprivateplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Extras\qtquickextrasplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Layouts\qquicklayoutsplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\PrivateWidgets\widgetsplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Templates.2\qtquicktemplates2plugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtQuick\Window.2\windowplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtWebChannel\declarative_webchannel.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtWebEngine\qtwebengineplugin.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\QtWebEngineProcess.exe =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\scenegraph\qsgd3d12backend.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\sqldrivers\qsqlite.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\sqldrivers\qsqlodbc.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\styles\qwindowsvistastyle.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\ucrtbase.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\vccorlib140.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\vcruntime140.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\ViberRTC.dll =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [16/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Viber\ViberSandbox.exe =>.Viber Media S.à r.l. [243C767E33053FAAE0F0131C103D7A17] [29/10/2019] (.Viber Media S.à r.l..) - C:\Users\USER\AppData\Local\Package Cache\{b1c8237e-4b8f-45b0-b266-b68cbb2c6f39}\ViberSetup.exe =>.Viber Media S.à r.l. [263B2299B43270DC725B7EB1] [09/05/2018] (.Appwork GmbH.) - C:\Users\USER\AppData\Local\JDownloader 2.0\JDownloader2.exe =>.Not verified [263B2299B43270DC725B7EB1] [09/05/2018] (.Appwork GmbH.) - C:\Users\USER\AppData\Local\JDownloader 2.0\Uninstall JDownloader.exe =>.Not verified [2A0950263E06496A2781F550] [16/09/2019] (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe =>.Avira Operations GmbH & Co. KG [2A0950263E06496A2781F550] [16/09/2019] (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\VPN\uninstaller.exe =>.Avira Operations GmbH & Co. KG [2B20EB3380792AB011F662C064FDB473] [15/12/2015] (.Apple Inc..) - C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe =>.Apple Inc. [2CD2C5777BFC596CE3F6EBFDFB9B9469] [04/09/2018] (.CyberLink Corp..) - C:\WINDOWS\System32\DRIVERS\CLFCL5.18\000.fcl =>.CyberLink Corp. [36AC037AA81D63FD] [25/12/2018] (.Foxit Software Incorporated.) - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_x64.dll =>.Foxit Software Incorporated [36AC037AA81D63FD] [25/12/2018] (.Foxit Software Incorporated.) - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll =>.Foxit Software Incorporated [3B67CCB62247A0435B0555089243D6F7] [11/04/2019] (.Lenovo.) - C:\Windows\Installer\{C7DB8EA5-C9C1-468F-B90C-CA206CA5C6BE}\Desktop_121ABE8FAE2B4955AAE9649259581E8F.exe =>.Lenovo [3B67CCB62247A0435B0555089243D6F7] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\libcryptoMD.dll =>.Lenovo [3B67CCB62247A0435B0555089243D6F7] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\libsslMD.dll =>.Lenovo [3B67CCB62247A0435B0555089243D6F7] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\libcryptoMD.dll =>.Lenovo [3B67CCB62247A0435B0555089243D6F7] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\libsslMD.dll =>.Lenovo [3DD79449EA86A17D1AED3D553A987DDF] [11/04/2019] (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\btfilter.sys =>.Qualcomm Atheros [3DD79449EA86A17D1AED3D553A987DDF] [15/03/2019] (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\Qcamain10x64.sys =>.Qualcomm Atheros [3DD79449EA86A17D1AED3D553A987DDF] [15/03/2019] (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe =>.Qualcomm Atheros [4AA171E744F3217C6CB05B4128DF7A8F] [05/09/2018] (.CyberLink Corp..) - C:\Program Files (x86)\CyberLink\PowerDVD18\Movie\PowerDVDMovie.exe =>.CyberLink Corp. [4AA171E744F3217C6CB05B4128DF7A8F] [07/09/2018] (.CyberLink Corp..) - C:\Program Files (x86)\CyberLink\PowerDVD18\CastingStation.exe =>.CyberLink Corp. [4AA171E744F3217C6CB05B4128DF7A8F] [07/09/2018] (.CyberLink Corp..) - C:\Program Files (x86)\CyberLink\PowerDVD18\Kernel\DMS\CLMSServerPDVD18.exe =>.CyberLink Corp. [4AA171E744F3217C6CB05B4128DF7A8F] [07/09/2018] (.CyberLink Corp..) - C:\Program Files (x86)\CyberLink\PowerDVD18\PDVDLP.exe =>.CyberLink Corp. [4AA171E744F3217C6CB05B4128DF7A8F] [07/09/2018] (.CyberLink Corp..) - C:\Program Files (x86)\CyberLink\PowerDVD18\PowerDVD.exe =>.CyberLink Corp. [4AA171E744F3217C6CB05B4128DF7A8F] [07/09/2018] (.CyberLink Corp..) - C:\Program Files (x86)\CyberLink\PowerDVD18\PowerDVD18Agent.exe =>.CyberLink Corp. [4AA171E744F3217C6CB05B4128DF7A8F] [07/09/2018] (.CyberLink Corp..) - C:\Program Files (x86)\NSIS Uninstall Information\{0F4F617F-E8D5-46A3-A0F9-43855182A3B1}\Setup.exe =>.CyberLink Corp. [4AA171E744F3217C6CB05B4128DF7A8F] [07/09/2018] (.CyberLink Corp..) - C:\ProgramData\CyberLink\PowerDVD18\OpenWith\PDVD_Shell64.dll =>.CyberLink Corp. [52048B9C8A67E28F0CC8CC75813DDC5A] [04/04/2019] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Users\USER\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\NetFltInstall.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\NetFltUninstall.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\SUPInstall.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\SUPLoggerCtl.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\SUPUninstall.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TBoxBalloonCtrl.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TBoxExtPackHelperApp.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TBoxHeadless.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TBoxManage.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TBoxNetDHCP.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TBoxNetNAT.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TBoxSDL.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TBoxSVC.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\THypervBox.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\USBInstall.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [25/09/2017] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Program Files\AndroidTbox\USBUninstall.exe =>.Tencent Technology(Shenzhen) Company Limited [52048B9C8A67E28F0CC8CC75813DDC5A] [30/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - d:\program files\txgameassistant\appmarket\QQExternal.exe =>.Tencent Technology(Shenzhen) Company Limited [529E3F9FCF7D58D520D607AB74395002] [24/02/2019] (.win.rar GmbH.) - C:\Program Files\WinRAR\Rar.exe =>.win.rar GmbH [529E3F9FCF7D58D520D607AB74395002] [24/02/2019] (.win.rar GmbH.) - C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH [529E3F9FCF7D58D520D607AB74395002] [25/02/2019] (.win.rar GmbH.) - C:\Program Files\WinRAR\uninstall.exe =>.win.rar GmbH [56000001757376CD78AD000C9A000000000175] [16/11/2018] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group [56000001757376CD78AD000C9A000000000175] [26/10/2018] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group [56000002630B69CF9D33644CF0000000000263] [21/03/2019] (.Intel(R) Serial IO.) - C:\ProgramData\Intel\Package Cache\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}\Setup.exe =>.Intel(R) Serial IO [56000005DAB0988313DA8AB3E10000000005DA] [25/02/2019] (.Intel(R) pGFX.) - C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\igxpin.exe =>.Intel(R) pGFX [56000005DAB0988313DA8AB3E10000000005DA] [25/07/2019] (.Intel(R) pGFX.) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_22aac1442d387216\igfxCUIService.exe =>.Intel(R) pGFX [56000005DAB0988313DA8AB3E10000000005DA] [25/07/2019] (.Intel(R) pGFX.) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_22aac1442d387216\igfxEM.exe =>.Intel(R) pGFX [56000005DAB0988313DA8AB3E10000000005DA] [25/07/2019] (.Intel(R) pGFX.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d14ddcba312bcfa8\igdkmd64.sys =>.Intel(R) pGFX [56000005DAB0988313DA8AB3E10000000005DA] [25/07/2019] (.Intel(R) pGFX.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d14ddcba312bcfa8\IntelCpHDCPSvc.exe =>.Intel(R) pGFX [56000005DAB0988313DA8AB3E10000000005DA] [25/07/2019] (.Intel(R) pGFX.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d14ddcba312bcfa8\IntelCpHeciSvc.exe =>.Intel(R) pGFX [56000005DAB0988313DA8AB3E10000000005DA] [25/07/2019] (.Intel(R) pGFX.) - C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_1cd2ec6e5cd924a2\IntcDAud.sys =>.Intel(R) pGFX [56000006D958B302C85AF7518C0000000006D9] [16/11/2018] (.Intel(R) Trust Services.) - C:\WINDOWS\System32\Intel\iCLS Client\lib\SocketHeciServer.exe =>.Not verified [56000006D958B302C85AF7518C0000000006D9] [16/11/2018] (.Intel(R) Trust Services.) - C:\WINDOWS\System32\Intel\iCLS Client\lib\TPMProvisioningService.exe =>.Not verified [560000082B1E36C56B00276A8A00000000082B] [16/11/2018] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Windows\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group [560000082B1E36C56B00276A8A00000000082B] [16/11/2018] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_0a3294d3216a4a83\jhi_service.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group [560000082B1E36C56B00276A8A00000000082B] [21/03/2019] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\ProgramData\Intel\Package Cache\{1CEAC85D-2590-4760-800F-8DE5E91F3700}\Setup.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group [56000008BB9E3BC97B3AE35DEB0000000008BB] [21/03/2019] (.Intel(R) Rapid Storage Technology.) - C:\Program Files (x86)\Intel\Package Cache\{409CB30E-E457-4008-9B1A-ED1B9EA21140}\Setup.exe =>.Intel(R) Rapid Storage Technology [56000008BB9E3BC97B3AE35DEB0000000008BB] [26/02/2019] (.Intel(R) Rapid Storage Technology.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel(R) Rapid Storage Technology [56000008BB9E3BC97B3AE35DEB0000000008BB] [26/02/2019] (.Intel(R) Rapid Storage Technology.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe =>.Intel(R) Rapid Storage Technology [56000008BB9E3BC97B3AE35DEB0000000008BB] [26/02/2019] (.Intel(R) Rapid Storage Technology.) - C:\WINDOWS\System32\drivers\iaStorAC.sys =>.Intel(R) Rapid Storage Technology [5FA2A6E514B187C52E1FEA5240CB04E9] [13/09/2013] (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe =>.Apple Inc. [5FA2A6E514B187C52E1FEA5240CB04E9] [13/09/2013] (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe =>.Apple Inc. [6658C5BF86E99124F99748B0A7A0154C] [03/11/2019] (.Lenovo.) - C:\Program Files\Lenovo\Lenovo Migration Assistant\unins000.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [04/10/2019] (.Lenovo.) - C:\Program Files (x86)\Lenovo\VantageService\unins000.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\DuiLib.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\HeartbeatMetrics.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\LenovoBatteryGaugePackage.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\PluginsContract.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\PluginSeeker.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\QuickSetting.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\QuickSettingEx.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\SetThinkTouchPad.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\ShowBatteryLowToastNotification.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x86\DuiLib.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x86\LenovoBatteryGaugePackage.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x86\PluginsContract.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x86\PluginSeeker.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x86\QuickSetting.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x86\QuickSettingEx.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x86\SetThinkTouchPad.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [08/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x86\ShowBatteryLowToastNotification.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [16/09/2019] (.Lenovo.) - C:\Program Files (x86)\Lenovo\VantageService\LenovoVantageService.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\Contract_Keyboard.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\IdeaBatteryAgent.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\IdeaNotebookPlugin.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\IdeaPowerAgent.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\Lenovo.Modern.Contracts.BatteryInformation.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\Lenovo.Modern.Contracts.BatteryManagement.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\Lenovo.Modern.Contracts.PointingDevice.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\Lenovo.Modern.Contracts.Power.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\Lenovo.Modern.Contracts.PowerProfile.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\Lenovo.Modern.CoreTypes.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\Lenovo.Modern.ImController.ImClient.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\Lenovo.Modern.Utilities.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\PowerBattery.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x64\SystemManagement.BatteryPolicy.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\Contract_Keyboard.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\IdeaBatteryAgent.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\IdeaNotebookPlugin.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\IdeaPowerAgent.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\Lenovo.Modern.Contracts.BatteryInformation.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\Lenovo.Modern.Contracts.BatteryManagement.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\Lenovo.Modern.Contracts.PointingDevice.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\Lenovo.Modern.Contracts.Power.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\Lenovo.Modern.Contracts.PowerProfile.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\Lenovo.Modern.CoreTypes.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\Lenovo.Modern.ImController.ImClient.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\Lenovo.Modern.Utilities.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\PowerBattery.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [17/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\IdeaNotebookPlugin\x86\SystemManagement.BatteryPolicy.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\ar\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\cs\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\da\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\de\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\el\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\es\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\fi\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\fr\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\HardwareScanContract.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\he\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\hr\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\hu\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\it\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\ja\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\ko\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LenovoHardwareScanPlugin.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\nb\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\nl\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\pl\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\pt\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\pt-BR\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\ro\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\ru\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\sk\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\sl\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\sr-latn\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\sv\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\tr\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\uk\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\zh-hans\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\zh-hant\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\ar\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\cs\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\da\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\de\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\el\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\es\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\fi\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\fr\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\HardwareScanContract.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\he\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\hr\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\hu\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\it\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\ja\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\ko\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LenovoHardwareScanPlugin.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\nb\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\nl\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\pl\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\pt\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\pt-BR\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\ro\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\ru\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\sk\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\sl\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\sr-latn\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\sv\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\tr\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\uk\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\zh-hans\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\zh-hant\LenovoHardwareScanPlugin.resources.dll =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\MigrationAssistant\Update\MigrationAssistant_setup_2.0.2.22.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [23/09/2019] (.Lenovo.) - C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [23/09/2019] (.Lenovo.) - C:\Program Files\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [23/09/2019] (.Lenovo.) - C:\Program Files\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [23/09/2019] (.Lenovo.) - C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [25/09/2019] (.Lenovo.) - C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe =>.Lenovo [6658C5BF86E99124F99748B0A7A0154C] [25/09/2019] (.Lenovo.) - C:\Program Files\Lenovo\Lenovo Migration Assistant\MigrationAssistant.exe =>.Lenovo [674196C684611A58C69C9D14E7375896] [29/05/2019] (.Wellbia.com Co., Ltd..) - C:\Windows\xhunter1.sys =>.Not verified [67E00021F1FA4B5D54545C0302FCFE0A] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\ludp.dll =>.Not verified [67E00021F1FA4B5D54545C0302FCFE0A] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\ludp.dll =>.Not verified [713F1370B67539BA13CFCD360E6DE2FB] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\ldiagio.sys =>.Not verified [713F1370B67539BA13CFCD360E6DE2FB] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x64\LSCDiags\pcicsa_x64.sys =>.Not verified [713F1370B67539BA13CFCD360E6DE2FB] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\ldiagio.sys =>.Not verified [713F1370B67539BA13CFCD360E6DE2FB] [18/10/2019] (.Lenovo.) - C:\ProgramData\Lenovo\ImController\Plugins\LenovoHardwareScanPlugin\x86\LSCDiags\pcicsa_x86.sys =>.Not verified [72DCD35B1DBBF28F0F9848EC766A1BDF] [03/04/2019] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atieclxx.exe =>.Advanced Micro Devices, Inc. [72DCD35B1DBBF28F0F9848EC766A1BDF] [03/04/2019] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atiesrxx.exe =>.Advanced Micro Devices, Inc. [72DCD35B1DBBF28F0F9848EC766A1BDF] [03/04/2019] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atikmdag.sys =>.Advanced Micro Devices, Inc. [72DCD35B1DBBF28F0F9848EC766A1BDF] [03/04/2019] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0340998.inf_amd64_f156c252858e0346\B340755\atikmpag.sys =>.Advanced Micro Devices, Inc. [72DCD35B1DBBF28F0F9848EC766A1BDF] [15/04/2019] (.Advanced Micro Devices, Inc..) - C:\Program Files\AMD\CNext\CNext\amdow.exe =>.Advanced Micro Devices, Inc. [72DCD35B1DBBF28F0F9848EC766A1BDF] [15/04/2019] (.Advanced Micro Devices, Inc..) - C:\Program Files\AMD\CNext\CNext\atiacm64.dll =>.Advanced Micro Devices, Inc. [72DCD35B1DBBF28F0F9848EC766A1BDF] [15/04/2019] (.Advanced Micro Devices, Inc..) - C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe =>.Advanced Micro Devices, Inc. [72DCD35B1DBBF28F0F9848EC766A1BDF] [16/04/2019] (.Advanced Micro Devices, Inc..) - C:\Program Files\AMD\CIM\BIN64\RadeonInstaller.exe =>.Advanced Micro Devices, Inc. [737BE9572E71E147EB7F035C287710BD] [31/01/2019] (.ELAN MICROELECTRONICS CORPORATION.) - C:\WINDOWS\System32\drivers\ETD.sys =>.ELAN MICROELECTRONICS CORPORATION [737BE9572E71E147EB7F035C287710BD] [31/01/2019] (.ELAN MICROELECTRONICS CORPORATION.) - C:\WINDOWS\System32\drivers\ETDHCF.sys =>.ELAN MICROELECTRONICS CORPORATION [737BE9572E71E147EB7F035C287710BD] [31/01/2019] (.ELAN MICROELECTRONICS CORPORATION.) - C:\WINDOWS\System32\ETDService.exe =>.ELAN MICROELECTRONICS CORPORATION [75B5499C96D676A5FAE2656B351E1FD6] [09/07/2019] (.Samsung Electronics Co., Ltd..) - C:\WINDOWS\System32\DRIVERS\ssudbus.sys =>.Samsung Electronics Co., Ltd. [75B5499C96D676A5FAE2656B351E1FD6] [09/07/2019] (.Samsung Electronics Co., Ltd..) - C:\WINDOWS\System32\DRIVERS\ssudmdm.sys =>.Samsung Electronics Co., Ltd. [76BA9423DDBCE7B145A95F01EE015F17] [16/09/2019] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\phantomtap.sys =>.Avira Operations GmbH & Co. KG [7828C7315808BC8717710E13FA3C0B24] [10/02/2019] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\Uninstall.exe =>.Tonec Inc. [7828C7315808BC8717710E13FA3C0B24] [12/05/2018] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll =>.Tonec Inc. [7828C7315808BC8717710E13FA3C0B24] [18/10/2018] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\IDMMsgHost.exe =>.Tonec Inc. [7828C7315808BC8717710E13FA3C0B24] [20/05/2016] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe =>.Tonec Inc. [7828C7315808BC8717710E13FA3C0B24] [20/12/2018] (.Tonec Inc..) - C:\WINDOWS\System32\DRIVERS\idmwfp.sys =>.Tonec Inc. [7828C7315808BC8717710E13FA3C0B24] [21/11/2018] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll =>.Tonec Inc. [785AF6D521F67E132D53385742CE9B35] [02/01/2014] (.Piriform Ltd.) - C:\Program Files\Recuva\recuva64.exe =>.Piriform Ltd [785AF6D521F67E132D53385742CE9B35] [02/01/2014] (.Piriform Ltd.) - C:\Program Files\Recuva\RecuvaShell64.dll =>.Piriform Ltd [785AF6D521F67E132D53385742CE9B35] [02/01/2014] (.Piriform Ltd.) - C:\Program Files\Recuva\uninst.exe =>.Piriform Ltd [7C443D7DBB054E459C513D665DFA8DB7] [13/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Windows\system32\drivers\tesrsdt.sys =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [27/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - D:\Program Files\TxGameAssistant\UI\AndroidEmulator.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [27/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - d:\program files\txgameassistant\ui\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [27/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - d:\program files\txgameassistant\ui\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [27/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - d:\program files\txgameassistant\ui\TxGaDcc.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [29/10/2019] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Windows\system32\TesSafe.sys =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [30/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - D:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [30/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - d:\program files\txgameassistant\appmarket\bugreport.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [30/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - d:\program files\txgameassistant\appmarket\GameDownload.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [30/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - d:\program files\txgameassistant\appmarket\GF186\TUninstall.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [30/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - d:\program files\txgameassistant\appmarket\GF186\TUpdate.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [30/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - D:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe =>.Tencent Technology(Shenzhen) Company Limited [7C443D7DBB054E459C513D665DFA8DB7] [30/09/2019] (.Tencent Technology(Shenzhen) Company Limited.) - d:\program files\txgameassistant\appmarket\TInst.exe =>.Tencent Technology(Shenzhen) Company Limited [7FE63AB8AB9D36964BC29EAD7641180A] [15/07/2016] (.NGO.) - C:\WINDOWS\System32\DRIVERS\usb2ser.sys =>.NGO ~ Unselected Options: O82, ~ End of the scan, 13116 items in 05mn06s (2764)(0)