Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-02-2020 Ran by Morgan (administrator) on LAPTOP-R6TLN1T8 (HP HP Laptop 15-da0xxx) (19-02-2020 00:32:55) Running from C:\Users\Morgan\Desktop Loaded Profiles: Morgan (Available Profiles: Morgan) Platform: Windows 10 Home Version 1903 18362.657 (X64) Language: English (United States) Default browser: FF Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnService.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe (Conexant Systems LLC -> Conexant Systems LLC.) C:\Windows\System32\CxAudioSvc.exe (Conexant Systems LLC -> Synaptics Incorporated.) C:\Windows\System32\SynAudSrv.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_d52c63e0e1c02c96\jhi_service.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130274.inf_amd64_bafd2440fa1ffdd6\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130274.inf_amd64_bafd2440fa1ffdd6\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130274.inf_amd64_bafd2440fa1ffdd6\IntelCpHDCPSvc.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130274.inf_amd64_bafd2440fa1ffdd6\IntelCpHeciSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_8559c34713c70ce4\RstMwService.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\Morgan\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.3\bin\pg_ctl.exe (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.3\bin\postgres.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe (Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe (TEFINCOM S.A. -> ) C:\Program Files (x86)\NordVPN\nordvpn-service.exe (WildTangent Inc -> ) C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320584 2018-02-14] (Intel(R) Rapid Storage Technology -> Intel Corporation) HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1000736 2019-10-31] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [BdVpnApp] => C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe [451928 2020-02-18] (Bitdefender SRL -> Bitdefender) HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [709152 2018-03-23] (HP Inc. -> HP Inc.) HKLM-x32\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-02-24] (Realtek Semiconductor Corp. -> Realtek) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645648 2019-10-05] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-21-3634397225-2155854724-2012029720-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-16] (Piriform Software Ltd -> Piriform Ltd) HKU\S-1-5-21-3634397225-2155854724-2012029720-1001\...\Run: [Discord] => C:\Users\Morgan\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.) HKU\S-1-5-21-3634397225-2155854724-2012029720-1001\...\Run: [f.lux] => C:\Users\Morgan\AppData\Local\FluxSoftware\Flux\flux.exe [1385480 2019-08-31] (F.lux Software LLC -> f.lux Software LLC) HKU\S-1-5-21-3634397225-2155854724-2012029720-1001\...\Run: [NordVPN] => C:\Program Files (x86)\NordVPN\NordVPN.exe [1951264 2020-02-11] (TEFINCOM S.A. -> NordVPN) HKU\S-1-5-21-3634397225-2155854724-2012029720-1001\...\Run: [electron.app.NordPass] => C:\Users\Morgan\AppData\Local\Programs\nordpass\NordPass.exe [104699392 2020-02-12] (NordPass Team) [File not signed] HKU\S-1-5-21-3634397225-2155854724-2012029720-1001\...\MountPoints2: {f5d52fac-e304-11e9-948a-dca26619eb54} - "E:\Setup.exe" HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-23] (Google LLC -> Google LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\80.1.3.115\Installer\chrmstp.exe [2020-02-11] (Brave Software, Inc.) [File not signed] FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {22EB17F4-9B80-48EE-AAFF-C701B1D7ACD8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1057648 2017-09-28] (HP Inc. -> HP Inc.) Task: {3C0949CE-3CB2-4904-8AD4-A59E8BC75F21} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1490800 2017-09-28] (HP Inc. -> HP Inc.) Task: {3CE338C7-5E18-4DDA-BAE7-CD05A43CFD8B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [651632 2017-09-28] (HP Inc. -> HP Inc.) Task: {46160ABC-E388-43BA-BB06-2E89C4FBEFB9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-16] (Piriform Software Ltd -> Piriform Ltd) Task: {49DE1631-D04C-49EB-A68A-C61A200F9583} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [490808 2019-11-27] (Bitdefender SRL -> Bitdefender) Task: {63329E71-36D3-49ED-B744-9AD1932F443F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-16] (Piriform Software Ltd -> Piriform Software Ltd) Task: {6A09FD15-95D3-4D5B-87E8-9FD4D889BC88} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [525632 2020-01-27] (Bitdefender SRL -> Bitdefender) Task: {706ED8D0-87C0-4195-8F52-08B181481837} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs] Task: {7DFFFD98-23E4-432D-8748-FE3FA0A2B2EE} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-02-07] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {952CA996-F071-4FE5-935F-2F2D2EAEDEC3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-08-06] (Google Inc -> Google Inc.) Task: {AAD8292E-4BE5-480F-9A35-4EF76E4825D4} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-02-07] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {C39786AB-D0F5-47EE-9318-B7EFA4B93A93} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [461824 2017-10-07] (HP Inc. -> HP Inc.) Task: {DEBDA1A2-BBC9-4978-B117-2B117452F61F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1490800 2017-09-28] (HP Inc. -> HP Inc.) Task: {E60EA91E-8594-493D-8C1F-E5BEE7421728} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2017-09-28] (HP Inc. -> HP Inc.) Task: {E8DC7910-90BD-47D3-8289-0EFC10AA63F7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [216432 2017-09-28] (HP Inc. -> HP Inc.) Task: {F4645F36-B637-46B5-9861-8BED6E63E19B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-08-06] (Google Inc -> Google Inc.) Task: {FC7A69B9-1EC9-42CF-967A-2B0D2304F786} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644960 2017-02-03] (HP Inc. -> HP Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 203.113.131.2 203.113.131.3 Tcpip\..\Interfaces\{a851bee7-4da6-44fd-80a8-5535f63eb76c}: [DhcpNameServer] 180.178.124.12 96.9.64.12 Tcpip\..\Interfaces\{ec45dbe8-8501-46f8-9ec0-3877ecd96f99}: [DhcpNameServer] 203.113.131.2 203.113.131.3 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE HKU\S-1-5-21-3634397225-2155854724-2012029720-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE HKU\S-1-5-21-3634397225-2155854724-2012029720-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2020-01-27] (Bitdefender SRL -> Bitdefender) BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-01-27] (Bitdefender SRL -> Bitdefender) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-12-20] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-12-20] (Oracle America, Inc. -> Oracle Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-09-28] (HP Inc. -> HP Inc.) BHO-x32: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll [2020-01-27] (Bitdefender SRL -> Bitdefender) BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-01-27] (Bitdefender SRL -> Bitdefender) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-09-28] (HP Inc. -> HP Inc.) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-01-27] (Bitdefender SRL -> Bitdefender) Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-01-27] (Bitdefender SRL -> Bitdefender) FireFox: ======== FF DefaultProfile: k0n54dq5.default FF ProfilePath: C:\Users\Morgan\AppData\Roaming\Mozilla\Firefox\Profiles\k0n54dq5.default [2020-02-18] FF Extension: (Avast Online Security) - C:\Users\Morgan\AppData\Roaming\Mozilla\Firefox\Profiles\k0n54dq5.default\Extensions\wrc@avast.com.xpi [2019-08-06] FF ProfilePath: C:\Users\Morgan\AppData\Roaming\Mozilla\Firefox\Profiles\2vsr4od7.default-release [2020-02-19] FF Extension: (Français Language Pack) - C:\Users\Morgan\AppData\Roaming\Mozilla\Firefox\Profiles\2vsr4od7.default-release\Extensions\langpack-fr@firefox.mozilla.org.xpi [2020-02-17] FF Extension: (NordPass® Password Manager & Digital Vault) - C:\Users\Morgan\AppData\Roaming\Mozilla\Firefox\Profiles\2vsr4od7.default-release\Extensions\nordpass@nordpass.com.xpi [2020-01-30] FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2019-12-16] FF HKLM\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi FF Extension: (Bitdefender Anti-tracker) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi [2020-01-27] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-02-10] [Legacy] [not signed] FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi FF HKLM-x32\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext FF Plugin: @java.com/DTPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\dtplugin\npDeployJava1.dll [2019-12-20] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-12-20] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-15] (VideoLAN -> VideoLAN) FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-02-07] (Brave Software, Inc. -> BraveSoftware Inc.) FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-02-07] (Brave Software, Inc. -> BraveSoftware Inc.) FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2020-02-18] <==== ATTENTION (Points to *.cfg file) FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2020-02-18] <==== ATTENTION Chrome: ======= CHR Profile: C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default [2020-02-18] CHR StartupUrls: Default -> "hxxps://www.google.com/" CHR Extension: (Slides) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-08-06] CHR Extension: (Docs) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-08-06] CHR Extension: (Google Drive) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-08-06] CHR Extension: (YouTube) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-08-06] CHR Extension: (Sheets) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-08-06] CHR Extension: (Google Docs Offline) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-08-16] CHR Extension: (Avast Online Security) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-08-16] CHR Extension: (Chrome Web Store Payments) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-01] CHR Extension: (Gmail) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-08-06] CHR Extension: (Chrome Media Router) - C:\Users\Morgan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-11-01] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof] ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 AfVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\vpnservice.exe [3401600 2020-02-17] (AnchorFree Inc -> AnchorFree Inc.) R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-01-27] (Bitdefender SRL -> Bitdefender) R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-01-27] (Bitdefender SRL -> Bitdefender) R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195344 2018-03-22] (Bitdefender SRL -> Bitdefender) R2 BdVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnservice.exe [465424 2020-02-18] (Bitdefender SRL -> Bitdefender) S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-02-07] (Brave Software, Inc. -> BraveSoftware Inc.) S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-02-07] (Brave Software, Inc. -> BraveSoftware Inc.) R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [679400 2018-04-03] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [119368 2019-11-14] (Bitdefender SRL -> Bitdefender) R2 esifsvc; C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [1696312 2018-04-10] (Intel Corporation -> Intel Corporation) S4 HfcDisableService; C:\WINDOWS\System32\DriverStore\FileRepository\iastorac.inf_amd64_8559c34713c70ce4\HfcDisableService.exe [1710736 2018-12-06] (Intel(R) Rapid Storage Technology -> Intel Corporation) R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1322632 2017-12-14] (HP Inc. -> HP Inc.) R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [477184 2017-10-07] (HP Inc. -> HP Inc.) S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-04] (Hewlett-Packard Company -> HP) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-09-28] (HP Inc. -> HP Inc.) R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-14] (HP Inc. -> HP Inc.) S3 iaStorAfsService; C:\WINDOWS\System32\iaStorAfsService.exe [2788496 2018-12-06] (Intel(R) Rapid Storage Technology -> Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_e3f9b958faa255f1\lib\SocketHeciServer.exe [876304 2019-08-30] (Intel(R) Trust Services -> Intel(R) Corporation) S2 Intel(R) TPM Provisioning Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_e3f9b958faa255f1\lib\TPMProvisioningService.exe [806152 2019-08-30] (Intel(R) Trust Services -> Intel(R) Corporation) R2 jhi_service; C:\WINDOWS\System32\DriverStore\FileRepository\dal.inf_amd64_d52c63e0e1c02c96\jhi_service.exe [648080 2019-07-18] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [222240 2020-02-11] (TEFINCOM S.A. -> ) R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1329240 2020-01-15] (Bitdefender SRL -> Bitdefender) R2 RstMwService; C:\WINDOWS\System32\DriverStore\FileRepository\iastorac.inf_amd64_8559c34713c70ce4\RstMwService.exe [1969288 2018-12-06] (Intel(R) Rapid Storage Technology -> Intel Corporation) R2 RtkAudioUniversalService; C:\WINDOWS\System32\RtkAudUService64.exe [1000736 2019-10-31] (Realtek Semiconductor Corp. -> Realtek Semiconductor) R2 RtkBtManServ; C:\WINDOWS\RtkBtManServ.exe [738712 2019-11-30] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) R2 SECOMNService; C:\WINDOWS\System32\SECOMN64.exe [161296 2019-07-31] (Sound Research Corporation -> Sound Research, Corp.) R2 SynaAPOService; C:\WINDOWS\System32\SynAudSrv.exe [595176 2019-05-20] (Conexant Systems LLC -> Synaptics Incorporated.) R2 SynaAudioService; C:\WINDOWS\System32\CxAudioSvc.exe [83464 2019-05-20] (Conexant Systems LLC -> Conexant Systems LLC.) R2 SynTPEnhService; C:\WINDOWS\System32\SynTPEnhService.exe [383240 2019-12-04] (Synaptics Incorporated -> Synaptics Incorporated) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [151656 2020-01-27] (Bitdefender SRL -> Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-01-27] (Bitdefender SRL -> Bitdefender) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2019-12-13] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1657136 2020-02-06] (WildTangent Inc -> ) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2019-12-13] (Microsoft Windows Publisher -> Microsoft Corporation) R2 postgresql-x64-9.3; "C:\Program Files\PostgreSQL\9.3\bin\pg_ctl.exe" runservice -N "postgresql-x64-9.3" -D "C:/Program Files/PostgreSQL/9.3/data" -w [X] <==== ATTENTION ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2019-12-16] (AnchorFree Inc -> The OpenVPN Project) S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStor.SYS [108992 2018-04-27] (Alcorlink Corp. -> ) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1693368 2019-09-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA) R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [739264 2019-07-29] (Bitdefender SRL -> Bitdefender) S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-03-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender) R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2020-01-17] (Bitdefender SRL -> © Bitdefender SRL) R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96448 2018-04-27] (Bitdefender SRL -> BitDefender) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [136040 2019-09-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [70088 2018-04-10] (Intel Corporation -> Intel Corporation) R3 esif_lf; C:\WINDOWS\System32\drivers\esif_lf.sys [383432 2018-04-10] (Intel Corporation -> Intel Corporation) R0 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [564136 2019-11-18] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA) R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2018-11-28] (Bitdefender SRL -> BitDefender LLC) R0 iaStorAC; C:\WINDOWS\System32\drivers\iaStorAC.sys [1094800 2018-12-06] (Intel(R) Rapid Storage Technology -> Intel Corporation) S3 iaStorAfs; C:\WINDOWS\System32\drivers\iaStorAfs.sys [73360 2018-12-06] (Intel(R) Rapid Storage Technology -> Intel Corporation) R2 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [196392 2019-07-04] (Bitdefender SRL -> Bitdefender) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1026896 2018-04-12] (Realtek Semiconductor Corp. -> Realtek ) R3 RtkBtFilter; C:\WINDOWS\System32\drivers\RtkBtfilter.sys [787232 2019-11-30] (WDKTestCert VSAuto,131800073559665678 -> Realtek Semiconductor Corporation) R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [11722328 2019-12-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation ) S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [45096 2018-04-20] (Synaptics Incorporated -> Synaptics Incorporated) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [49416 2019-12-04] (Synaptics Incorporated -> Synaptics Incorporated) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166760 2019-09-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2018-07-24] (TEFINCOM S.A. -> The OpenVPN Project) R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [610640 2019-01-14] (Bitdefender SRL -> Bitdefender) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2019-12-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2019-12-13] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2019-12-13] (Microsoft Windows -> Microsoft Corporation) R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2019-11-15] (HP Inc. -> HP) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) =================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-02-19 00:14 - 2020-02-19 00:34 - 000031328 _____ C:\Users\Morgan\Desktop\FRST.txt 2020-02-19 00:08 - 2020-02-19 00:33 - 000000000 ____D C:\FRST 2020-02-19 00:07 - 2020-02-19 00:30 - 002279424 _____ (Farbar) C:\Users\Morgan\Desktop\FRST64.exe 2020-02-18 23:45 - 2020-02-18 23:45 - 000001991 _____ C:\Users\Morgan\Desktop\Winamax Poker.lnk 2020-02-18 23:45 - 2020-02-18 23:45 - 000001977 _____ C:\Users\Morgan\Desktop\WinaChat.lnk 2020-02-18 23:44 - 2020-02-18 23:45 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamax 2020-02-18 23:43 - 2020-02-18 23:45 - 000000000 ____D C:\Users\Morgan\Winamax 2020-02-18 23:42 - 2020-02-18 23:42 - 006752304 _____ (Winamax) C:\Users\Morgan\Downloads\wamInstall(2).exe 2020-02-18 23:34 - 2020-02-19 00:13 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\ZHP 2020-02-18 23:34 - 2020-02-18 23:38 - 000625162 _____ C:\Users\Morgan\Downloads\wamInstall.exe.part 2020-02-18 23:34 - 2020-02-18 23:34 - 000000873 _____ C:\Users\Morgan\Desktop\ZHPDiag.lnk 2020-02-18 23:34 - 2020-02-18 23:34 - 000000000 ____D C:\Users\Morgan\AppData\Local\ZHP 2020-02-18 23:34 - 2020-02-18 23:34 - 000000000 _____ C:\Users\Morgan\Downloads\wamInstall.exe 2020-02-18 23:33 - 2020-02-18 23:34 - 003270016 _____ (Nicolas Coolman) C:\Users\Morgan\Downloads\ZHPDiag3.exe 2020-02-18 23:10 - 2020-02-18 23:13 - 000066234 _____ C:\Users\Morgan\Downloads\wamInstall(1).exe.part 2020-02-18 23:10 - 2020-02-18 23:10 - 000000000 _____ C:\Users\Morgan\Downloads\wamInstall(1).exe 2020-02-18 23:06 - 2020-02-18 23:06 - 000170180 _____ C:\ProgramData\vpn.1582038299.bdinstall.v2.bin 2020-02-18 23:06 - 2020-02-18 23:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender VPN 2020-02-18 23:06 - 2020-02-18 23:06 - 000000000 ____D C:\ProgramData\Bitdefender VPN 2020-02-18 23:05 - 2019-12-16 12:49 - 000048624 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\aftap0901.sys 2020-02-18 23:00 - 2020-02-18 23:00 - 000063636 _____ C:\ProgramData\dm.1582038020.bdinstall.bin 2020-02-18 23:00 - 2020-02-18 23:00 - 000000000 ____D C:\ProgramData\Bitdefender Device Management 2020-02-18 22:54 - 2020-02-18 22:54 - 000810676 _____ C:\ProgramData\cl.1582037401.bdinstall.v2.bin 2020-02-18 22:54 - 2020-02-18 22:54 - 000102260 _____ C:\ProgramData\cl.kit.1582037371.bdinstall.v2.bin 2020-02-18 22:54 - 2020-02-18 22:54 - 000003420 _____ C:\WINDOWS\system32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C 2020-02-18 22:53 - 2020-02-18 22:53 - 000000000 ____D C:\ProgramData\Gemma 2020-02-18 22:53 - 2020-02-18 22:53 - 000000000 ____D C:\ProgramData\Atc 2020-02-18 22:52 - 2020-02-18 23:06 - 000002162 _____ C:\Users\Public\Desktop\Bitdefender VPN.lnk 2020-02-18 22:52 - 2020-02-18 23:06 - 000002162 _____ C:\ProgramData\Desktop\Bitdefender VPN.lnk 2020-02-18 22:52 - 2020-02-18 22:52 - 000002309 _____ C:\Users\Public\Desktop\Bitdefender.lnk 2020-02-18 22:52 - 2020-02-18 22:52 - 000002309 _____ C:\ProgramData\Desktop\Bitdefender.lnk 2020-02-18 22:52 - 2020-02-18 22:52 - 000000000 ____D C:\WINDOWS\system32\elambkup 2020-02-18 22:52 - 2020-02-18 22:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security 2020-02-18 22:52 - 2020-02-18 22:52 - 000000000 ____D C:\ProgramData\BDLogging 2020-02-18 22:52 - 2020-01-17 02:03 - 000046056 _____ (© Bitdefender SRL) C:\WINDOWS\system32\Drivers\bdprivmon.sys 2020-02-18 22:52 - 2019-11-18 19:08 - 000564136 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys 2020-02-18 22:52 - 2019-09-23 09:43 - 001693368 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys 2020-02-18 22:52 - 2019-07-29 16:32 - 000739264 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys 2020-02-18 22:52 - 2019-03-21 00:12 - 000022960 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys 2020-02-18 22:52 - 2018-04-27 08:45 - 000096448 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys 2020-02-18 22:50 - 2020-02-18 23:05 - 000000000 ____D C:\Program Files\Bitdefender 2020-02-18 22:50 - 2020-02-18 22:59 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\Bitdefender 2020-02-18 22:50 - 2020-02-18 22:50 - 000000000 ____D C:\ProgramData\Bitdefender 2020-02-18 22:50 - 2019-07-04 12:15 - 000196392 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys 2020-02-18 22:50 - 2019-01-14 16:25 - 000610640 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\trufos.sys 2020-02-18 22:50 - 2018-11-28 05:45 - 000188384 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys 2020-02-18 22:49 - 2020-02-18 22:50 - 000000000 ____D C:\Program Files\Common Files\Bitdefender 2020-02-18 22:46 - 2020-02-18 23:56 - 000000000 ____D C:\ProgramData\McInstTemp0320841582037164 2020-02-18 22:46 - 2020-02-18 22:46 - 000003802 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2020-02-18 22:44 - 2020-02-18 23:00 - 000000000 ____D C:\Program Files\Bitdefender Agent 2020-02-18 22:44 - 2020-02-18 22:44 - 000113556 _____ C:\ProgramData\agent.1582037045.bdinstall.v2.bin 2020-02-18 22:44 - 2020-02-18 22:44 - 000000000 ____D C:\ProgramData\Bitdefender Agent 2020-02-18 22:43 - 2020-02-18 22:43 - 012422992 _____ C:\Users\Morgan\Downloads\bitdefender_windows_05febdee-4b6b-4206-a326-c733582fa788.exe 2020-02-17 17:44 - 2020-02-04 04:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2020-02-17 17:44 - 2020-02-04 04:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2020-02-14 09:23 - 2020-02-14 09:23 - 000000000 ____D C:\ProgramData\ssh 2020-02-14 08:33 - 2020-02-14 08:33 - 000000000 ____D C:\Users\Morgan\Downloads\RANGES 2020-02-14 08:32 - 2020-02-14 08:32 - 026675329 _____ C:\Users\Morgan\Downloads\RANGES.zip 2020-02-14 08:11 - 2020-02-14 08:33 - 000000000 ____D C:\Users\Morgan\Desktop\KO Ranges 2020-02-14 01:25 - 2020-02-14 01:25 - 000064085 _____ C:\Users\Morgan\Documents\Mes buts.xmind 2020-02-13 09:07 - 2020-02-13 09:07 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2020-02-13 09:07 - 2020-02-13 09:07 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe 2020-02-13 09:06 - 2020-02-13 09:06 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2020-02-13 09:06 - 2020-02-13 09:06 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2020-02-13 09:06 - 2020-02-13 09:06 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2020-02-13 09:06 - 2020-02-13 09:06 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2020-02-13 09:05 - 2020-02-13 09:05 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-02-13 09:05 - 2020-02-13 09:05 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2020-02-13 09:05 - 2020-02-13 09:05 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2020-02-13 09:05 - 2020-02-13 09:05 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2020-02-13 09:05 - 2020-02-13 09:05 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2020-02-13 09:05 - 2020-02-13 09:05 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll 2020-02-13 09:05 - 2020-02-13 09:05 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2020-02-13 09:04 - 2020-02-13 09:05 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2020-02-13 09:04 - 2020-02-13 09:04 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2020-02-13 09:04 - 2020-02-13 09:04 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2020-02-13 09:04 - 2020-02-13 09:04 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2020-02-13 09:04 - 2020-02-13 09:04 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2020-02-13 09:04 - 2020-02-13 09:04 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2020-02-13 09:04 - 2020-02-13 09:04 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000059221 _____ C:\WINDOWS\system32\srms.dat 2020-02-13 09:04 - 2020-02-13 09:04 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2020-02-13 09:04 - 2020-02-13 09:04 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll 2020-02-13 09:04 - 2020-02-13 09:04 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2020-02-13 09:04 - 2020-02-13 09:04 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-02-13 09:03 - 2020-02-13 09:03 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2020-02-13 09:03 - 2020-02-13 09:03 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2020-02-13 09:03 - 2020-02-13 09:03 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2020-02-13 09:03 - 2020-02-13 09:03 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe 2020-02-13 09:03 - 2020-02-13 09:03 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin 2020-02-13 09:03 - 2020-02-13 09:03 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2020-02-13 09:02 - 2020-02-13 09:03 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-02-13 09:02 - 2020-02-13 09:02 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2020-02-13 09:02 - 2020-02-13 09:02 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2020-02-13 09:02 - 2020-02-13 09:02 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2020-02-13 09:02 - 2020-02-13 09:02 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2020-02-13 09:02 - 2020-02-13 09:02 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe 2020-02-13 09:02 - 2020-02-13 09:02 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll 2020-02-13 09:02 - 2020-02-13 09:02 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2020-02-13 09:01 - 2020-02-13 09:01 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2020-02-13 09:01 - 2020-02-13 09:01 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2020-02-13 09:01 - 2020-02-13 09:01 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2020-02-13 09:01 - 2020-02-13 09:01 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2020-02-13 09:01 - 2020-02-13 09:01 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2020-02-13 09:01 - 2020-02-13 09:01 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe 2020-02-13 09:01 - 2020-02-13 09:01 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2020-02-13 09:01 - 2020-02-13 09:01 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll 2020-02-13 09:01 - 2020-02-13 09:01 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe 2020-02-13 08:48 - 2020-01-16 13:07 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2020-02-13 08:48 - 2020-01-16 12:23 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2020-02-13 05:44 - 2020-02-13 05:44 - 000002046 _____ C:\Users\Public\Desktop\NordVPN.lnk 2020-02-13 05:44 - 2020-02-13 05:44 - 000002046 _____ C:\ProgramData\Desktop\NordVPN.lnk 2020-02-13 05:43 - 2020-02-13 05:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordVPN 2020-02-13 05:43 - 2020-02-13 05:44 - 000000000 ____D C:\Program Files (x86)\NordVPN 2020-02-12 06:34 - 2020-02-19 00:29 - 000000000 ____D C:\Program Files\Mozilla Firefox 2020-02-07 06:09 - 2020-02-07 06:09 - 000002172 _____ C:\Users\Morgan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk 2020-02-07 06:09 - 2020-02-07 06:09 - 000000000 ____D C:\Users\Morgan\AppData\Local\FluxSoftware 2020-02-07 06:08 - 2020-02-07 06:08 - 000654152 _____ C:\Users\Morgan\Downloads\f-lux_4-111_fr_278130.exe 2020-02-07 06:06 - 2020-02-11 07:50 - 000002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk 2020-02-07 06:06 - 2020-02-11 07:50 - 000002382 _____ C:\Users\Public\Desktop\Brave.lnk 2020-02-07 06:06 - 2020-02-11 07:50 - 000002382 _____ C:\ProgramData\Desktop\Brave.lnk 2020-02-07 06:04 - 2020-02-18 21:39 - 000003364 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA 2020-02-07 06:04 - 2020-02-18 21:39 - 000003140 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore 2020-02-07 06:04 - 2020-02-07 06:06 - 000000000 ____D C:\Users\Morgan\AppData\Local\BraveSoftware 2020-02-07 06:04 - 2020-02-07 06:06 - 000000000 ____D C:\Program Files (x86)\BraveSoftware 2020-02-07 06:04 - 2020-02-07 06:04 - 001298840 _____ (BraveSoftware Inc.) C:\Users\Morgan\Downloads\BraveBrowserSetup-CLU884.exe 2020-02-07 04:15 - 2020-02-18 21:41 - 000002535 _____ C:\Users\Morgan\Desktop\NordPass.lnk 2020-02-07 04:15 - 2020-02-08 16:34 - 000000000 ____D C:\Users\Morgan\AppData\Local\nordpass-updater 2020-02-07 04:15 - 2020-02-07 04:15 - 000002543 _____ C:\Users\Morgan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NordPass.lnk 2020-02-07 04:14 - 2020-02-07 04:15 - 049898440 _____ (NordPass Team) C:\Users\Morgan\Downloads\NordPassSetup.exe 2020-02-06 04:18 - 2020-02-08 01:05 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\ICMIZER 2020-02-06 04:18 - 2020-02-06 04:18 - 000002249 _____ C:\Users\Morgan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICMIZER.lnk 2020-02-06 04:18 - 2020-02-06 04:18 - 000002241 _____ C:\Users\Morgan\Desktop\ICMIZER.lnk 2020-02-06 04:18 - 2020-02-06 04:18 - 000000000 ____D C:\Users\Morgan\AppData\Local\icmizer-updater 2020-02-06 04:16 - 2020-02-06 04:17 - 038668648 _____ (Valentin Kuzub) C:\Users\Morgan\Downloads\icmizer_setup.exe 2020-02-06 01:13 - 2020-02-10 15:40 - 000000000 ____D C:\Users\Morgan\Documents\POKER 2020-01-31 07:28 - 2020-01-31 07:29 - 000000000 ____D C:\Users\Morgan\Desktop\Report PT4 2020-01-30 06:45 - 2020-01-30 06:45 - 000001935 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XMind ZEN.lnk 2020-01-30 06:45 - 2020-01-30 06:45 - 000001923 _____ C:\Users\Public\Desktop\XMind ZEN.lnk 2020-01-30 06:45 - 2020-01-30 06:45 - 000001923 _____ C:\ProgramData\Desktop\XMind ZEN.lnk 2020-01-30 06:45 - 2020-01-30 06:45 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\XMind ZEN 2020-01-30 06:45 - 2020-01-30 06:45 - 000000000 ____D C:\Users\Morgan\AppData\Local\xmind-vana-updater 2020-01-30 06:44 - 2020-01-30 06:45 - 000000000 ____D C:\Program Files\XMind ZEN 2020-01-30 06:41 - 2020-02-06 01:35 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\Anki2 2020-01-30 06:41 - 2020-01-30 06:41 - 000000000 ____D C:\Users\Morgan\AppData\Local\Anki 2020-01-30 06:38 - 2020-01-30 06:39 - 000000000 ____D C:\Program Files\Anki 2020-01-30 06:38 - 2020-01-30 06:38 - 000000531 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anki.lnk 2020-01-30 06:38 - 2020-01-30 06:38 - 000000519 _____ C:\Users\Public\Desktop\Anki.lnk 2020-01-30 06:38 - 2020-01-30 06:38 - 000000519 _____ C:\ProgramData\Desktop\Anki.lnk 2020-01-28 06:00 - 2020-01-28 06:13 - 923699978 _____ C:\Users\Morgan\Downloads\Vikings.S06E08.720p.HDTV.x264-KILLERS[eztv].mkv 2020-01-28 05:59 - 2020-01-28 06:10 - 1134040674 _____ C:\Users\Morgan\Downloads\Vikings.S06E07.720p.WEB.H264-GHOSTS[eztv].mkv 2020-01-28 05:59 - 2020-01-28 06:07 - 1159408704 _____ C:\Users\Morgan\Downloads\Vikings.S06E06.720p.WEB.H264-GHOSTS[eztv].mkv 2020-01-28 05:59 - 2020-01-28 05:59 - 000043790 _____ C:\Users\Morgan\Downloads\Vikings (S06E07) (720p).torrent 2020-01-28 05:59 - 2020-01-28 05:59 - 000035797 _____ C:\Users\Morgan\Downloads\Vikings (S06E08) (720p).torrent 2020-01-27 00:13 - 2019-10-31 01:29 - 005601536 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPOU64.dll 2020-01-27 00:13 - 2019-10-31 01:29 - 001126336 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCOM64.dll 2020-01-27 00:13 - 2019-10-31 01:29 - 000833616 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64U.dll 2020-01-27 00:13 - 2019-10-31 01:29 - 000481888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll 2020-01-27 00:13 - 2019-10-31 01:02 - 036422448 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2020-01-26 07:26 - 2020-02-07 06:14 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\CareUEyes 2020-01-24 08:41 - 2019-12-04 02:16 - 019840776 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPRes.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 001106944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 001020032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000571392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000432256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000363840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2020-01-23 22:19 - 2020-01-23 22:19 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000127520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll 2020-01-23 22:19 - 2020-01-23 22:19 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 002473976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 001985928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 001697280 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 001330952 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000162696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2020-01-23 22:18 - 2020-01-23 22:18 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2020-01-23 22:18 - 2020-01-23 22:18 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll 2020-01-22 23:18 - 2020-01-22 23:18 - 000002170 _____ C:\Users\Public\Desktop\SharkScope Desktop.lnk 2020-01-22 23:18 - 2020-01-22 23:18 - 000002170 _____ C:\ProgramData\Desktop\SharkScope Desktop.lnk 2020-01-22 23:18 - 2020-01-22 23:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharkScope Desktop ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-02-19 00:32 - 2019-09-09 19:06 - 000000000 ____D C:\Users\Morgan\Desktop\New folder 2020-02-19 00:32 - 2019-08-06 14:43 - 000000000 ____D C:\Users\Morgan\AppData\LocalLow\Mozilla 2020-02-19 00:25 - 2019-03-19 12:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-02-19 00:11 - 2020-01-04 06:18 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\NordPass 2020-02-19 00:11 - 2019-11-14 09:46 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\Discord 2020-02-19 00:00 - 2019-03-19 12:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2020-02-18 23:56 - 2019-10-13 11:36 - 000000000 ____D C:\Users\Morgan 2020-02-18 23:56 - 2018-08-19 08:08 - 000000000 __SHD C:\Users\Morgan\IntelGraphicsProfiles 2020-02-18 23:55 - 2019-10-13 11:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-02-18 23:55 - 2019-10-13 11:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-02-18 23:55 - 2019-08-06 14:43 - 000000000 ____D C:\ProgramData\AVAST Software 2020-02-18 23:20 - 2019-03-19 12:50 - 000000000 ____D C:\WINDOWS\INF 2020-02-18 22:50 - 2019-03-19 12:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2020-02-18 22:49 - 2019-10-13 11:50 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee 2020-02-18 22:49 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-02-18 22:49 - 2018-08-19 08:08 - 000000000 ____D C:\Users\Morgan\AppData\Local\Packages 2020-02-18 22:36 - 2020-01-10 13:11 - 000004170 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{C351D95F-AB61-4DE3-ADC2-9F78968C7E71} 2020-02-18 22:36 - 2019-10-14 05:10 - 000833568 _____ C:\WINDOWS\system32\perfh00C.dat 2020-02-18 22:36 - 2019-10-14 05:10 - 000168254 _____ C:\WINDOWS\system32\perfc00C.dat 2020-02-18 22:36 - 2019-10-13 11:44 - 001925046 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-02-18 22:27 - 2019-08-06 14:43 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2020-02-18 22:27 - 2019-03-19 12:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2020-02-18 21:39 - 2019-10-13 11:50 - 000003518 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2020-02-18 21:39 - 2019-10-13 11:50 - 000003294 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2020-02-18 21:39 - 2019-10-13 11:50 - 000003194 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2020-02-18 21:39 - 2019-10-13 11:50 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3634397225-2155854724-2012029720-1001 2020-02-18 21:39 - 2019-10-13 11:50 - 000002856 _____ C:\WINDOWS\system32\Tasks\HPJumpStartLaunch 2020-02-18 21:39 - 2019-10-13 11:50 - 000002770 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task v2 2020-02-18 21:39 - 2019-10-13 11:50 - 000002502 _____ C:\WINDOWS\system32\Tasks\HPEA3JOBS 2020-02-18 21:39 - 2019-10-13 11:50 - 000002440 _____ C:\WINDOWS\system32\Tasks\HPAudioSwitch 2020-02-18 21:39 - 2019-10-13 11:50 - 000002238 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC 2020-02-18 00:25 - 2019-03-19 12:52 - 000000000 ___HD C:\Program Files\WindowsApps 2020-02-17 23:13 - 2019-09-28 12:50 - 000000000 ____D C:\Users\Morgan\AppData\Local\BitTorrentHelper 2020-02-17 17:48 - 2019-08-06 14:43 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2020-02-17 17:45 - 2018-08-19 08:08 - 000000000 ___RD C:\Users\Morgan\3D Objects 2020-02-17 17:45 - 2018-04-28 14:07 - 000000000 __RHD C:\Users\Public\AccountPictures 2020-02-17 17:42 - 2019-10-13 11:30 - 000294224 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ___RD C:\WINDOWS\PrintDialog 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\SystemResources 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\system32\oobe 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\system32\Dism 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\ShellExperiences 2020-02-14 09:23 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-02-14 09:23 - 2019-03-19 12:37 - 000000000 ____D C:\WINDOWS\servicing 2020-02-13 09:16 - 2019-03-19 12:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-02-13 09:15 - 2019-08-06 15:06 - 000000000 ____D C:\WINDOWS\system32\MRT 2020-02-13 09:11 - 2019-08-06 15:06 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2020-02-13 05:43 - 2020-01-03 14:19 - 000000000 ____D C:\Users\Morgan\AppData\Local\NordVPN 2020-02-12 00:36 - 2019-11-12 14:19 - 000000000 ____D C:\Users\Morgan\AppData\Roaming\vlc 2020-02-10 14:32 - 2019-10-13 11:36 - 000002377 _____ C:\Users\Morgan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2020-02-10 14:32 - 2018-08-19 08:10 - 000000000 ___RD C:\Users\Morgan\OneDrive 2020-02-09 19:49 - 2019-12-07 07:54 - 000000000 ____D C:\Users\Morgan\AppData\Local\Equilab 2020-02-08 01:21 - 2019-11-28 07:07 - 000000000 ____D C:\Users\Morgan\AppData\Local\D3DSCache 2020-02-07 06:19 - 2019-03-19 12:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2020-02-04 00:01 - 2018-08-19 08:08 - 000000000 ____D C:\Users\Morgan\AppData\Local\Publishers 2020-01-30 09:20 - 2019-12-12 09:29 - 000000000 ____D C:\Users\Morgan\Downloads\The Wire Season 3 2020-01-23 22:46 - 2019-03-19 12:52 - 000000000 ___SD C:\WINDOWS\system32\UNP 2020-01-23 19:51 - 2019-08-06 14:50 - 000002306 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2020-01-23 19:51 - 2019-08-06 14:50 - 000002265 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2020-01-23 19:51 - 2019-08-06 14:50 - 000002265 _____ C:\ProgramData\Desktop\Google Chrome.lnk 2020-01-22 23:18 - 2019-08-06 14:48 - 000000000 ____D C:\Program Files (x86)\SharkScope Desktop ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================