Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019 Ran by acer1 (administrator) on JOSECARLOS-PC (09-04-2019 16:05:03) Running from C:\Users\acer1\Desktop Loaded Profiles: acer1 (Available Profiles: acer1) Platform: Windows 10 Pro Version 1809 17763.379 (X64) Language: Español (España, internacional) Default browser: Chrome Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Solid Documents -> Solid Documents, LLC) C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1903.4-0\MsMpEng.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (philandro Software GmbH -> ) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe (Mixbyte Inc -> Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1903.4-0\NisSrv.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation -> ) C:\Windows\System32\igfxTray.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler.exe (TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler64.exe (Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.42.60.0_x64__kzf8qxf38zg5c\SkypeApp.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.42.60.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19031.57.0_x64__8wekyb3d8bbwe\YourPhone.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Google Inc -> ) C:\Program Files\Google\Drive\googledrivesync.exe (Disc Soft Ltd -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (IntelliBreeze Software AB -> IntelliBreeze Software AB) C:\Program Files (x86)\Gmail Notifier Pro\GmailNotifierPro.exe (philandro Software GmbH -> ) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Trimla Soft, Inc.) [File not signed] C:\Users\acer1\Desktop\Teclado.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Google Inc -> ) C:\Program Files\Google\Drive\googledrivesync.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\QtWebEngineProcess.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19021.18010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mstsc.exe (ShowMyPC -> ShowMyPC) C:\Users\acer1\AppData\Local\Temp\ShowMyPC\CBEFD509050864BA30D6137C141EF48A-showmypc\SMPCSetup.exe (ShowMyPC -> ShowMyPC) C:\Users\acer1\AppData\Local\Temp\ShowMyPC\CBEFD509050864BA30D6137C141EF48A-showmypc\spcplink.exe (GlavSoft LLC. -> GlavSoft LLC.) C:\Program Files (x86)\ShowMyPCService\tvnserver.exe (GlavSoft LLC. -> GlavSoft LLC.) C:\Program Files (x86)\ShowMyPCService\tvnserver.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIC.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9197568 2017-05-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [4426560 2019-04-03] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation) HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\ShowMyPCService\tvnserver.exe [815704 2010-07-08] (GlavSoft LLC. -> GlavSoft LLC.) HKU\S-1-5-21-3545106304-3766720184-4112346381-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-07] (Disc Soft Ltd -> Disc Soft Ltd) HKU\S-1-5-21-3545106304-3766720184-4112346381-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46504696 2018-12-07] (Google Inc -> ) HKU\S-1-5-21-3545106304-3766720184-4112346381-1000\...\Run: [GmailNotifierPro] => C:\Program Files (x86)\Gmail Notifier Pro\GmailNotifierPro.exe [2882400 2017-05-14] (IntelliBreeze Software AB -> IntelliBreeze Software AB) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\Installer\chrmstp.exe [2019-04-05] (Google LLC -> Google Inc.) HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> Startup: C:\Users\acer1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\UpperNow2.0.lnk [2017-05-26] ShortcutTarget: UpperNow2.0.lnk -> C:\Users\acer1\Desktop\Teclado.exe (Trimla Soft, Inc.) [File not signed] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2018-08-27] ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> ) GroupPolicy: Restriction ? <==== ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\..\Interfaces\{e6df3f20-722e-49d1-b2da-7c2ede8d742c}: [NameServer] 192.168.0.5,80.58.61.254,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Tcpip\..\Interfaces\{e6e3d141-e698-4135-a100-2ae867bc5e8f}: [NameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-3545106304-3766720184-4112346381-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.es/ HKU\S-1-5-21-3545106304-3766720184-4112346381-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/es-es/?ocid=iehp SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3545106304-3766720184-4112346381-1000 -> DefaultScope {26080cad-4adc-49ac-8c63-eda16e595cbd} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00 SearchScopes: HKU\S-1-5-21-3545106304-3766720184-4112346381-1000 -> {26080cad-4adc-49ac-8c63-eda16e595cbd} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00 SearchScopes: HKU\S-1-5-21-3545106304-3766720184-4112346381-1000 -> {81B833C4-7080-45F8-9B81-B2F7D40373E2} URL = hxxp://www.google.com/search?q={searchTerms} BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-01-18] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-18] (Oracle America, Inc. -> Oracle Corporation) DPF: HKLM-x32 {444785F1-DE89-4295-863A-D46C3A781394} hxxp://webplayer.unity3d.com/download_webplayer/UnityWebPlayer.cab Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF DefaultProfile: w5k0s2gm.default-1542282642506 FF ProfilePath: C:\Users\acer1\AppData\Roaming\Mozilla\Firefox\Profiles\w5k0s2gm.default-1542282642506 [2019-04-09] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-11-10] (Intel(R) Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-11-10] (Intel(R) Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-18] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-18] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-04-04] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.) Chrome: ======= CHR NewTab: Default -> Active:"chrome-extension://jpfpebmajhhopeonhlcgidhclcccjcik/newtab.html" CHR Profile: C:\Users\acer1\AppData\Local\Google\Chrome\User Data\Default [2019-04-09] CHR Extension: (Google Drive) - C:\Users\acer1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-05-25] CHR Extension: (YouTube) - C:\Users\acer1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-05-25] CHR Extension: (AdBlock) - C:\Users\acer1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-04-09] CHR Extension: (Speed Dial 2 New tab) - C:\Users\acer1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik [2018-03-28] CHR Extension: (Email Tracking for Gmail - Mailtrack) - C:\Users\acer1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndnaehgpjlnokgebbaldlmgkapkpjkkb [2019-03-29] CHR Extension: (Chrome Web Store Payments) - C:\Users\acer1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03] CHR Extension: (Gmail) - C:\Users\acer1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-05-25] CHR Extension: (Chrome Media Router) - C:\Users\acer1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-03-23] CHR HKU\S-1-5-21-3545106304-3766720184-4112346381-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [2066632 2018-08-27] (philandro Software GmbH -> ) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11082312 2019-03-28] (Microsoft Corporation -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-25] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-25] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2019-04-03] (Dropbox, Inc -> Dropbox, Inc.) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-07] (Disc Soft Ltd -> Disc Soft Ltd) S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2019-03-22] (Mixbyte Inc -> Freemake) R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [15744 2019-03-22] (Mixbyte Inc -> Ellora Assets Corp.) R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [361992 2019-03-13] (Intel Corporation -> Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel® Trusted Connect Service -> Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2014-11-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes) R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MICRO-STAR INTERNATIONAL CO., LTD.) R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1293936 2018-11-15] (Bitdefender SRL -> Bitdefender) R2 SCPDFReadSpool; C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe [193392 2012-10-29] (Solid Documents -> Solid Documents, LLC) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5381128 2019-03-14] (Microsoft Windows Publisher -> Microsoft Corporation) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2018-09-28] (TeamViewer GmbH -> TeamViewer GmbH) R2 tvnserver; C:\Program Files (x86)\ShowMyPCService\tvnserver.exe [815704 2010-07-08] (GlavSoft LLC. -> GlavSoft LLC.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\NisSrv.exe [3856504 2019-04-09] (Microsoft Corporation -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MsMpEng.exe [113992 2019-04-09] (Microsoft Corporation -> Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-05-25] (Disc Soft Ltd -> Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-05-25] (Disc Soft Ltd -> Disc Soft Ltd) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes) R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-05-29] (Martin Malik - REALiX -> REALiX(tm)) R3 ISCT; C:\WINDOWS\System32\drivers\ISCTD.sys [44744 2017-05-29] (Intel CASE -> ) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [198512 2019-04-09] (Malwarebytes Corporation -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [127136 2019-04-09] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73912 2019-04-09] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [274416 2019-04-09] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [114040 2019-04-09] (Malwarebytes Corporation -> Malwarebytes) R3 NPF; C:\WINDOWS\System32\drivers\NPF.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.) R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] (MiniTool Solution Ltd -> ) S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] (MiniTool Solution Ltd -> ) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1137928 2019-03-23] (Realtek Semiconductor Corp. -> Realtek ) R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [56840 2019-03-13] (Synaptics Incorporated -> Synaptics Incorporated) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-04-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [343520 2019-04-09] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [68576 2019-04-09] (Microsoft Windows -> Microsoft Corporation) R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [53912 2019-03-13] (Intel Corporation -> Intel Corporation) U3 idsvc; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-04-09 16:05 - 2019-04-09 16:06 - 000024427 _____ C:\Users\acer1\Desktop\FRST.txt 2019-04-09 16:03 - 2019-04-09 16:03 - 002434048 _____ (Farbar) C:\Users\acer1\Desktop\FRST64.exe 2019-04-09 13:14 - 2019-04-09 13:14 - 000000000 ____D C:\Program Files (x86)\ShowMyPCService 2019-04-09 11:37 - 2019-04-09 11:37 - 000127136 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2019-04-09 11:37 - 2019-04-09 11:37 - 000114040 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2019-04-09 11:37 - 2019-04-09 11:37 - 000073912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2019-04-09 11:36 - 2019-04-09 11:36 - 000274416 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2019-04-09 10:42 - 2019-04-09 12:18 - 000007607 _____ C:\Users\acer1\AppData\Local\Resmon.ResmonCfg 2019-04-09 08:15 - 2019-04-09 08:15 - 000198512 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2019-04-09 08:15 - 2019-04-09 08:15 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2019-04-09 08:15 - 2019-04-09 08:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2019-04-09 08:15 - 2019-04-09 08:15 - 000000000 ____D C:\Program Files\Malwarebytes 2019-04-09 08:15 - 2019-02-01 12:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2019-04-09 08:15 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2019-04-08 08:27 - 2019-04-08 08:27 - 000409660 _____ C:\ProgramData\cl.uninstall.1554704737.bdinstall.v2.bin 2019-04-05 23:23 - 2019-04-05 23:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2019-04-05 18:01 - 2019-04-05 18:01 - 000000000 ____D C:\Users\acer1\AppData\Roaming\QuickScan 2019-04-05 17:58 - 2019-04-08 08:26 - 000000854 _____ C:\bdlog.txt 2019-04-05 17:54 - 2019-04-05 17:54 - 000811372 _____ C:\ProgramData\cl.1554479366.bdinstall.v2.bin 2019-04-05 17:54 - 2019-04-05 17:54 - 000101856 _____ C:\ProgramData\cl.kit.1554479344.bdinstall.v2.bin 2019-04-05 17:54 - 2019-04-05 17:54 - 000000000 ____D C:\ProgramData\Gemma 2019-04-05 17:54 - 2019-04-05 17:54 - 000000000 ____D C:\ProgramData\Atc 2019-04-05 17:50 - 2019-04-05 17:50 - 000000000 ____D C:\WINDOWS\system32\elambkup 2019-04-05 17:50 - 2019-04-05 17:50 - 000000000 ____D C:\ProgramData\BDLogging 2019-04-05 17:50 - 2007-04-11 11:11 - 000511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll 2019-04-05 17:46 - 2019-04-05 17:46 - 000003802 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2019-04-05 17:44 - 2019-04-05 17:55 - 000000000 ____D C:\Program Files\Bitdefender Agent 2019-04-05 17:44 - 2019-04-05 17:44 - 000103100 _____ C:\ProgramData\agent.1554479076.bdinstall.v2.bin 2019-04-05 17:44 - 2019-04-05 17:44 - 000000000 ____D C:\ProgramData\Bitdefender Agent 2019-04-04 16:09 - 2019-04-04 16:09 - 000000000 _____ C:\WINDOWS\system32\last.dump 2019-04-03 22:59 - 2019-04-03 22:59 - 000051024 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2019-04-03 22:59 - 2019-04-03 22:59 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2019-04-03 22:59 - 2019-04-03 22:59 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2019-04-03 22:59 - 2019-04-03 22:59 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2019-04-03 19:05 - 2019-04-03 19:05 - 000000000 ___HD C:\$AV_ASW 2019-04-03 18:03 - 2019-04-03 18:03 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software 2019-04-03 18:02 - 2019-04-03 18:02 - 000000000 ____D C:\Program Files\Common Files\AVAST Software 2019-04-03 18:00 - 2019-04-05 17:35 - 000000000 ____D C:\ProgramData\AVAST Software 2019-04-03 17:27 - 2019-04-03 17:28 - 000000000 ____D C:\AdwCleaner 2019-04-03 17:23 - 2019-04-09 16:05 - 000000000 ____D C:\FRST 2019-04-03 17:06 - 2019-04-03 17:06 - 000000000 ____D C:\Users\acer1\AppData\Local\mbam 2019-04-03 17:05 - 2019-04-03 17:05 - 000000000 ____D C:\Users\acer1\AppData\Local\mbamtray 2019-04-03 13:19 - 2019-04-03 13:19 - 000000000 ____D C:\Users\Public\Documents\Office Tab 2019-04-03 13:19 - 2019-04-03 13:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Office Tab Enterprise 2019-04-03 13:19 - 2019-04-03 13:19 - 000000000 ____D C:\Program Files\Detong 2019-03-28 08:06 - 2019-03-28 08:06 - 000003662 _____ C:\WINDOWS\System32\Tasks\Credentials 2019-03-26 09:46 - 2019-03-26 09:46 - 000001397 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk 2019-03-26 09:46 - 2019-03-26 09:46 - 000000000 ____D C:\Users\acer1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2019-03-26 09:46 - 2019-03-26 09:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake 2019-03-26 09:46 - 2019-03-26 09:46 - 000000000 ____D C:\ProgramData\Freemake 2019-03-26 09:45 - 2019-03-26 09:46 - 000000000 ____D C:\Program Files (x86)\Freemake 2019-03-21 17:46 - 2019-03-21 17:51 - 000001666 _____ C:\Users\acer1\Desktop\ESCANER KYOCERA.lnk 2019-03-21 17:45 - 2019-03-21 17:49 - 000000000 ____D C:\escanner 2019-03-21 17:24 - 2019-03-21 17:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kyocera 2019-03-21 17:24 - 2019-03-21 17:24 - 000000000 ____D C:\usr 2019-03-21 17:24 - 2019-03-21 17:24 - 000000000 ____D C:\Users\Default\AppData\Local\Kyocera 2019-03-21 17:24 - 2019-03-21 17:24 - 000000000 ____D C:\Users\Default User\AppData\Local\Kyocera 2019-03-21 17:24 - 2019-03-21 17:24 - 000000000 ____D C:\Program Files\Kyocera 2019-03-21 17:22 - 2018-09-13 11:54 - 000134784 _____ (KYOCERA Document Solutions Inc.) C:\WINDOWS\system32\KXPLM64.DLL 2019-03-21 17:15 - 2019-03-27 09:29 - 000002686 _____ C:\Users\acer1\advanced_ip_scanner_MAC.bin 2019-03-21 17:15 - 2019-03-27 09:29 - 000000015 _____ C:\Users\acer1\advanced_ip_scanner_Comments.bin 2019-03-21 17:15 - 2019-03-27 09:29 - 000000015 _____ C:\Users\acer1\advanced_ip_scanner_Aliases.bin 2019-03-14 12:59 - 2019-03-14 12:59 - 005436184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 004920832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 003566080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 003551408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 002752360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 002323688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 002278240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 001294856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 001289192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 001200920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 001077912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 001072720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 000866152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 000573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 000421688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 000263360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2019-03-14 12:59 - 2019-03-14 12:59 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll 2019-03-14 12:58 - 2019-03-14 12:59 - 001258808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2019-03-14 12:58 - 2019-03-14 12:58 - 026810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 024616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 023440896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 020814848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 019284480 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 019023872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 015224320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 012857856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 012151296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 008875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 007897088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 007882240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 007251456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 006548168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 006069760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 005915936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 005588184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 004883968 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 004689408 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 003923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 003761664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 003744256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 003729808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2019-03-14 12:58 - 2019-03-14 12:58 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 003652656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 003504128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 003427840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 003108864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 002926904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 002776712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 002700792 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 002689536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 002626360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 002447360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 002275680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 002073240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 002001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001969152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001860608 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001782272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001711616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001701376 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001590072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001572176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001481488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001457544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001360696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 001332224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001272552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001180248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001098128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001047040 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl 2019-03-14 12:58 - 2019-03-14 12:58 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl 2019-03-14 12:58 - 2019-03-14 12:58 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000782968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000772408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000735760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCacheProvider.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000726416 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000655160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000652824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000649272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000619832 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000591832 _____ C:\WINDOWS\SysWOW64\InputHost.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2019-03-14 12:58 - 2019-03-14 12:58 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000474936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2019-03-14 12:58 - 2019-03-14 12:58 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSh.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2019-03-14 12:58 - 2019-03-14 12:58 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDistSh.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000279376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000272648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000262456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe 2019-03-14 12:58 - 2019-03-14 12:58 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe 2019-03-14 12:58 - 2019-03-14 12:58 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys 2019-03-14 12:58 - 2019-03-14 12:58 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe 2019-03-14 12:58 - 2019-03-14 12:58 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2019-03-14 12:58 - 2019-03-14 12:58 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureBioSysprep.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 017520640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 009683256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 009670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 007688088 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 007647256 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 007645392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 007556392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 005566464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 005296640 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 004588744 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 004245280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 003983360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 003660288 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 003399168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 003382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 003378488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 002871312 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 002842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 002766648 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 002720768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 002637312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 002630656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 002488320 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 002437344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 002199864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 002187776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 002141184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 002044416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 002021584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 002013696 _____ C:\WINDOWS\system32\rdpnano.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 001931264 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001893888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001884672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001751352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001742104 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001715712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001697744 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2019-03-14 12:57 - 2019-03-14 12:57 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001644048 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001612600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001604096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001563336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001522488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001496064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001479480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001468440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 001403920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001341880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2019-03-14 12:57 - 2019-03-14 12:57 - 001331536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001296576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001267712 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001199104 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001191512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001179168 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 001177088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001176064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 001087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001078072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001056272 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001054200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001043256 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000902144 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000895048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000888120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000865568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000860160 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2019-03-14 12:57 - 2019-03-14 12:57 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000836096 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000833064 _____ C:\WINDOWS\system32\InputHost.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000831288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000817464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000808464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000790328 _____ (Microsoft Corporation) C:\WINDOWS\system32\upshared.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000764216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000741888 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000651576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000649528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000646632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000605496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000604336 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2019-03-14 12:57 - 2019-03-14 12:57 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000511800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000505656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000484976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000460304 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000449368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000444728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000419128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000395064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000355360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000336744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000330464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000322576 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000246584 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpprov.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureTimeAggregator.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000147256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000138960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000115152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000071184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAppMonitor.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2019-03-14 12:57 - 2019-03-14 12:57 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys 2019-03-14 12:57 - 2019-03-14 12:57 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2019-03-14 12:57 - 2019-03-14 12:57 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2019-03-14 12:57 - 2019-03-14 12:57 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2019-03-14 12:57 - 2019-03-14 12:57 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2019-03-14 12:57 - 2019-03-14 12:57 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2019-03-14 12:57 - 2019-03-14 12:57 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2019-03-14 12:57 - 2019-03-14 12:57 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2019-03-14 12:57 - 2019-03-14 12:57 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2019-03-14 12:57 - 2019-03-14 12:57 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2019-03-13 11:56 - 2019-03-13 11:56 - 039510760 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 034516208 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 029092888 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 019852824 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 015336840 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 013358648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 011739672 _____ (Intel Corporation) C:\WINDOWS\system32\ig75icd64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 008726040 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig75icd32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 005674968 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 005254176 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 004922328 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 004360232 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 004223160 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 004195088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 003963432 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 002363880 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 001833960 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 001792416 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 001789792 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 001582040 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 001169984 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 001012232 _____ C:\WINDOWS\system32\igfxSDK.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000956408 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000952824 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000830871 _____ C:\WINDOWS\system32\DisplayAudiox64.cab 2019-03-13 11:56 - 2019-03-13 11:56 - 000696344 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000455160 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000437176 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000430144 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000407512 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000384440 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000380992 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000379928 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000309720 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000300912 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000285880 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000264664 _____ C:\WINDOWS\system32\igfxCPL.cpl 2019-03-13 11:56 - 2019-03-13 11:56 - 000257496 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000246312 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000231272 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000226264 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v5058.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000224696 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000220664 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000220160 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000216536 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000212104 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000194832 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000184352 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000173680 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000172576 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000171560 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000164896 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000163832 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe 2019-03-13 11:56 - 2019-03-13 11:56 - 000150144 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000150144 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000102952 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000095256 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000094680 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000092120 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000091160 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000086568 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000076248 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000056840 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys 2019-03-13 11:56 - 2019-03-13 11:56 - 000045912 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000043992 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000020520 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000020440 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000018984 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000018904 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000013888 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000013888 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll 2019-03-13 11:56 - 2019-03-13 11:56 - 000004846 _____ C:\WINDOWS\system32\iglhxs64.vp 2019-03-13 11:55 - 2019-03-13 11:55 - 001804640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll 2019-03-13 11:55 - 2019-03-13 11:55 - 000206488 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-04-09 16:03 - 2018-09-15 09:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-04-09 15:58 - 2019-01-18 20:45 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-04-09 12:00 - 2019-01-18 21:04 - 000003656 _____ C:\WINDOWS\System32\Tasks\AutoKMS 2019-04-09 11:42 - 2019-01-18 20:58 - 001928864 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-04-09 11:42 - 2018-09-15 18:37 - 000829046 _____ C:\WINDOWS\system32\perfh00A.dat 2019-04-09 11:42 - 2018-09-15 18:37 - 000175290 _____ C:\WINDOWS\system32\perfc00A.dat 2019-04-09 11:42 - 2018-09-15 09:31 - 000000000 ____D C:\WINDOWS\INF 2019-04-09 11:39 - 2017-05-25 16:26 - 000000000 ___RD C:\Users\acer1\Google Drive 2019-04-09 11:38 - 2017-05-25 12:18 - 000000000 __SHD C:\Users\acer1\IntelGraphicsProfiles 2019-04-09 11:37 - 2019-01-18 20:45 - 000436464 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-04-09 11:37 - 2017-06-07 18:11 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2019-04-09 11:36 - 2019-01-18 21:04 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-04-09 11:36 - 2017-05-25 12:26 - 000000128 _____ C:\WINDOWS\system32\config\netlogon.ftl 2019-04-09 11:35 - 2018-09-15 08:09 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2019-04-09 11:28 - 2017-05-25 18:40 - 000000000 ____D C:\Users\acer1\AppData\Roaming\TeamViewer 2019-04-09 11:28 - 2017-05-25 18:40 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2019-04-09 11:28 - 2017-05-25 17:41 - 000000000 ____D C:\Users\acer1\AppData\Roaming\MPC-HC 2019-04-09 11:28 - 2017-05-25 16:20 - 000000000 ____D C:\Users\acer1\AppData\Roaming\uTorrent 2019-04-09 11:28 - 2017-05-25 12:36 - 000000000 ____D C:\Users\acer1\AppData\Roaming\DAEMON Tools Lite 2019-04-09 11:21 - 2019-01-18 11:36 - 000000000 ___DC C:\WINDOWS\Panther 2019-04-09 11:21 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2019-04-09 11:06 - 2017-05-25 15:49 - 000000000 ___RD C:\Users\acer1\Dropbox 2019-04-09 10:52 - 2018-09-15 09:33 - 000000000 ___HD C:\Program Files\WindowsApps 2019-04-09 10:52 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-04-09 08:15 - 2018-09-15 09:33 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2019-04-09 08:15 - 2017-11-20 20:20 - 000000000 ____D C:\ProgramData\Malwarebytes 2019-04-09 08:12 - 2018-02-19 09:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2019-04-08 19:04 - 2017-05-25 13:22 - 000002290 ____H C:\Users\acer1\Documents\Default.rdp 2019-04-08 11:36 - 2017-05-25 17:03 - 000000000 ____D C:\Users\acer1\AppData\Local\GmailNotifierPro 2019-04-08 11:06 - 2017-05-25 15:56 - 000000000 ____D C:\ProgramData\TEMP 2019-04-08 08:38 - 2018-09-15 08:09 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2019-04-05 23:24 - 2017-05-25 15:45 - 000000000 ____D C:\Program Files (x86)\Dropbox 2019-04-05 18:40 - 2017-11-21 09:44 - 000002375 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-04-05 18:37 - 2018-09-15 09:23 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-04-05 10:02 - 2017-12-18 15:25 - 000000000 ____D C:\Users\acer1\AppData\Local\Packages 2019-04-04 15:59 - 2018-09-15 09:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2019-04-04 15:56 - 2018-09-28 18:19 - 000000000 ____D C:\Program Files\Microsoft Office 2019-04-03 18:16 - 2017-05-25 12:27 - 000000000 ____D C:\Users\acer1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2019-04-03 18:16 - 2017-05-25 12:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2019-04-03 18:16 - 2017-05-25 12:27 - 000000000 ____D C:\Program Files\WinRAR 2019-04-03 17:14 - 2019-01-18 21:04 - 000000000 ____D C:\WINDOWS\System32\Tasks\System 2019-04-03 13:20 - 2017-05-25 15:56 - 000000000 ____D C:\ProgramData\Licenses 2019-04-02 16:00 - 2017-05-25 16:44 - 000000000 ___HD C:\ProgramData\RICOH_DRV 2019-04-01 08:16 - 2019-01-18 21:04 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3545106304-3766720184-4112346381-1000 2019-04-01 08:16 - 2019-01-18 20:51 - 000002401 _____ C:\Users\acer1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-04-01 08:16 - 2017-06-07 18:44 - 000000000 ___RD C:\Users\acer1\OneDrive 2019-03-30 10:08 - 2017-09-11 12:45 - 000000000 ____D C:\Users\acer1\.afirma 2019-03-28 05:43 - 2019-01-18 21:04 - 000003618 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2019-03-28 05:43 - 2019-01-18 21:04 - 000003494 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2019-03-26 09:24 - 2017-05-26 18:04 - 000000000 ____D C:\Users\acer1\AppData\Local\FreemakeVideoConverter 2019-03-23 10:01 - 2017-05-29 18:58 - 000000000 ____D C:\ProgramData\IObit 2019-03-23 09:59 - 2017-05-29 18:58 - 000000000 ____D C:\ProgramData\ProductData 2019-03-23 09:56 - 2017-06-10 11:39 - 001137928 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys 2019-03-22 09:05 - 2017-12-18 16:46 - 000000000 ____D C:\Users\acer1\AppData\Local\PlaceholderTileLogoFolder 2019-03-21 17:15 - 2019-01-18 20:51 - 000000000 ____D C:\Users\acer1 2019-03-18 14:20 - 2017-05-25 16:44 - 000000587 _____ C:\WINDOWS\system32\ricdb.ini 2019-03-15 09:10 - 2017-12-18 16:44 - 000000000 ___RD C:\Users\acer1\3D Objects 2019-03-15 09:10 - 2017-06-07 18:40 - 000000000 __RHD C:\Users\Public\AccountPictures 2019-03-14 20:10 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2019-03-14 20:10 - 2018-09-15 09:33 - 000000000 ___RD C:\Program Files\Windows Defender 2019-03-14 20:10 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\TextInput 2019-03-14 20:10 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\oobe 2019-03-14 20:10 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\appraiser 2019-03-14 20:10 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\ShellExperiences 2019-03-14 20:10 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\bcastdvr 2019-03-14 12:57 - 2019-01-18 20:47 - 002865152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2019-03-14 12:57 - 2017-05-25 12:52 - 000408364 __RSH C:\bootmgr 2019-03-14 12:52 - 2018-09-15 09:36 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2019-03-14 12:52 - 2018-09-15 09:36 - 000179608 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2019-03-13 12:36 - 2018-06-04 09:26 - 000000000 ____D C:\Users\acer1\AppData\Local\MSfree Inc 2019-03-13 11:58 - 2017-06-07 18:11 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2019-03-13 11:56 - 2019-01-18 20:47 - 000091160 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2019-03-13 11:56 - 2018-09-15 18:40 - 000095256 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll 2019-03-13 11:56 - 2017-10-20 17:42 - 002133032 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll 2019-03-13 11:56 - 2017-10-20 17:42 - 000390072 _____ C:\WINDOWS\system32\igfxTray.exe 2019-03-13 11:56 - 2017-10-20 17:42 - 000389672 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll 2019-03-13 11:56 - 2017-10-20 17:42 - 000342456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe 2019-03-13 11:56 - 2017-10-20 17:42 - 000256520 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe 2019-03-13 11:56 - 2017-10-20 17:41 - 007963576 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys 2019-03-13 11:56 - 2017-10-20 17:41 - 000746536 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll 2019-03-13 11:56 - 2017-10-20 17:41 - 000361992 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe 2019-03-13 11:56 - 2017-10-20 17:37 - 006628792 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll 2019-03-13 11:56 - 2017-10-20 17:37 - 005083448 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll 2019-03-13 11:56 - 2017-10-20 17:36 - 038561080 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll 2019-03-13 11:56 - 2017-10-20 17:36 - 033175360 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll 2019-03-13 11:56 - 2017-10-20 17:36 - 016301032 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll 2019-03-13 11:56 - 2017-10-20 17:36 - 012941904 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll 2019-03-13 11:56 - 2017-05-29 19:07 - 000574528 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorA.sys 2019-03-13 11:55 - 2016-11-22 01:52 - 000053912 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\XtuAcpiDriver.sys 2019-03-11 09:11 - 2017-05-25 15:45 - 000000990 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2019-03-11 09:11 - 2017-05-25 15:45 - 000000986 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job ==================== Files in the root of some directories ======= 2019-04-09 10:42 - 2019-04-09 12:18 - 000007607 _____ () C:\Users\acer1\AppData\Local\Resmon.ResmonCfg ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\dllhost.exe => File is digitally signed C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End of FRST.txt ============================