Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Explorer Errors and svchost.exe USing CPU/memory


  • This topic is locked This topic is locked
6 replies to this topic

#1 sea_summit

sea_summit

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:22 PM

Posted 29 January 2018 - 01:26 PM

Hello. I have a computer that has been acting strange for quite some time. The problem behavior is random, but usually seems to involve explorer.exe. One of the main symptoms is an error moving files from any exterior component (i.e. external USB hard drive, USB flash drive, iPhone). The moving file process will spontaneously abort, usually stating that the device has been removed, or some sort of random access error. When I reboot the computer, a warning screen will pop up stating that explorer.exe is preventing the computer from restarting. This does not always happen, sometimes allowing the process to complete fully without errors. Also, explorer.exe seems to always use a lot of CPU. In addition, there are several instances of svchost.exe running, using up memory and CPU.

 

I have tried many troubleshooting steps, including updating drivers, multiple virus scans (Windows Defender and Malwarebytes), moving the USB device to other USB inputs, multiple check on hardware, etc. The USB devices work fine on other computers.

 

I have tried reformatting the hard drive and re-installing Windows 10 a few times over the past few months, but the problem seems to reappear within a few weeks. 

 

My major concern is that I have some sort of virus. Is there a way to tell?

 

The computer is running Windows 10 Home 64-bit, Version 1709, OS Build 16299.192

 

Thank you!

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27.01.2018
Ran by Jason (administrator) on DESKTOP-P5SEDTF (29-01-2018 11:23:01)
Running from C:\Users\Jason\Desktop
Loaded Profiles: Jason (Available Profiles: Jason)
Platform: Windows 10 Home Version 1709 16299.192 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki125121.inf_amd64_26ca8ba649abc040\igfxCUIService.exe
(HP) C:\Windows\System32\HP3DDGService.exe
(HP) C:\Windows\System32\hpservice.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Conexant Systems, Inc) C:\Windows\CxSvc\CxMonSvc.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Conexant Systems, Inc.) C:\Windows\CxSvc\CxUtilSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Alesis) C:\Program Files (x86)\Alesis\VX49\AudioDevMon.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki125121.inf_amd64_26ca8ba649abc040\IntelCpHDCPSvc.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki125121.inf_amd64_26ca8ba649abc040\IntelCpHeciSvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\NisSrv.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Conexant) C:\Windows\System32\MicTray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki125121.inf_amd64_26ca8ba649abc040\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP Officejet Pro 6830\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP Officejet Pro 6830\Bin\HPNetworkCommunicatorCom.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
(HP) C:\Program Files (x86)\HP\HP 3D DriveGuard\AccelerometerSt.exe
(HP Development Company, L.P.) C:\Program Files (x86)\HP\HP CoolSense\CoolSense.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(HP) C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\SA3\HP-NB-AIO\SmartAudio3.exe
(Conexant Systems, Inc) C:\Program Files\CONEXANT\Flow\Flow.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(Ableton) C:\ProgramData\Ableton\Live 9 Lite\Program\Ableton Live 9 Lite.exe
() C:\ProgramData\Ableton\Live 9 Lite\Resources\Extensions\Index\Ableton Index.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11712.1001.13.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Windows\System32\Windows.WARP.JITService.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.13411.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Windows\System32\Windows.WARP.JITService.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Windows\System32\Windows.WARP.JITService.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Windows\System32\Windows.WARP.JITService.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-01-22] (Apple Inc.)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\HP\HP 3D DriveGuard\AccelerometerST.exe [129048 2016-05-20] (HP)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [664848 2016-04-26] (HP Inc.)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [268896 2016-04-14] (HP)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3567936 2018-01-22] (Dropbox, Inc.)
HKU\S-1-5-21-2044686696-813384955-1182592829-1001\...\Run: [HP Officejet Pro 6830 (NET)] => C:\Program Files\HP\HP Officejet Pro 6830\Bin\ScanToPCActivationApp.exe [3493952 2014-07-18] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-2044686696-813384955-1182592829-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-01-10] (Apple Inc.)
HKU\S-1-5-21-2044686696-813384955-1182592829-1001\...\Run: [AppleIEDAV] => C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [68408 2018-01-10] (Apple Inc.)
HKU\S-1-5-21-2044686696-813384955-1182592829-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2018-01-10] (Apple Inc.)
HKU\S-1-5-21-2044686696-813384955-1182592829-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2018-01-10] (Apple Inc.)
HKU\S-1-5-21-2044686696-813384955-1182592829-1001\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2018-01-10] (Apple Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Audio Switch.lnk [2016-07-19]
ShortcutTarget: HP Audio Switch.lnk -> C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitchLC.vbs ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP JumpStart Launch.lnk [2016-11-23]
ShortcutTarget: HP JumpStart Launch.lnk -> c:\Windows\Installer\{0F5EBB0D-DF6D-4DBE-9789-57BF05B3B0FD}\HPlogo_blue.ico ()
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1a194c22-3a4a-4b37-8dc2-ff19f6454ba3}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6d95e7f0-dce7-4a80-872c-03d28f251174}: [DhcpNameServer] 172.168.0.7
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\S-1-5-21-2044686696-813384955-1182592829-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/
HKU\S-1-5-21-2044686696-813384955-1182592829-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
SearchScopes: HKLM -> {3059095C-E5A3-4C56-9B22-0147F3EDA633} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {3059095C-E5A3-4C56-9B22-0147F3EDA633} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-2044686696-813384955-1182592829-1001 -> {3059095C-E5A3-4C56-9B22-0147F3EDA633} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-01-22] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-05-27] (HP Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-05-27] (HP Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-01-22] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-01-22] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-01-22] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-01-22] (Microsoft Corporation)
FireFox:
========
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-01-22] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-01-05] (Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7780528 2018-01-15] (Microsoft Corporation)
R2 CxMonSvc; C:\WINDOWS\CxSvc\CxMonSvc.exe [31352 2017-04-21] (Conexant Systems, Inc)
R2 CxUtilSvc; C:\WINDOWS\CxSvc\CxUtilSvc.exe [148600 2017-04-13] (Conexant Systems, Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-01-09] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-01-09] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2018-01-22] (Dropbox, Inc.)
R2 esifsvc; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2210936 2017-07-10] (Intel Corporation)
R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [38328 2017-12-12] ()
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [892928 2016-05-05] (HP Inc.) [File not signed]
R2 hp3ddgsrv; C:\WINDOWS\system32\HP3DDGService.exe [130072 2017-10-03] (HP)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [459800 2016-06-02] (HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-04-07] (HP)
R2 hpsrv; C:\windows\system32\Hpservice.exe [33632 2016-03-09] (HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [332144 2017-11-21] (HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-04-18] (HP Inc.)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [17992 2016-06-01] (Intel Corporation)
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [515768 2017-04-13] (Intel Corporation)
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel® Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [215328 2016-05-16] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [269480 2017-08-07] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-08-18] (Synaptics Incorporated)
R2 VX49AudioDevMon; C:\Program Files (x86)\Alesis\VX49\AudioDevMon.exe [2290448 2015-09-16] (Alesis)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\NisSrv.exe [356168 2018-01-19] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MsMpEng.exe [105792 2018-01-19] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3756200 2017-08-07] (Intel® Corporation)
R2 PaceLicenseDServices; "C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe" -u https://activation.paceap.com/InitiateActivation [X] <==== ATTENTION
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 Accelerometer; C:\WINDOWS\System32\drivers\Accelerometer.sys [54296 2017-10-03] (HP)
R3 CnxtHdAudService; C:\WINDOWS\system32\drivers\CHDRT64ISST.sys [1668632 2017-05-14] (Conexant Systems Inc.)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [72584 2017-07-10] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [67976 2017-07-10] (Intel Corporation)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [355208 2017-07-10] (Intel Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77432 2017-11-29] ()
R3 HID_PCI; C:\WINDOWS\System32\drivers\HID_PCI.sys [31328 2016-08-10] (Intel)
R0 hpdskflt; C:\WINDOWS\System32\drivers\hpdskflt.sys [40472 2017-10-03] (HP)
S3 iaLPSS2_GPIO2; C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [89912 2016-10-26] (Intel Corporation)
U5 iaStorA; C:\Windows\System32\Drivers\iaStorA.sys [791560 2016-06-01] (Intel Corporation)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [244744 2017-04-13] (Intel Corporation)
R3 ISH; C:\WINDOWS\System32\drivers\ISH.sys [143984 2016-08-18] (Intel)
R3 ISH_BusDriver; C:\WINDOWS\System32\drivers\ISH_BusDriver.sys [80496 2016-08-18] (Intel)
R0 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [193968 2018-01-09] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [110016 2018-01-28] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [46008 2018-01-28] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2018-01-28] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [94144 2018-01-29] (Malwarebytes)
R1 MpKsl0608cc91; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{26F626FD-8930-4410-9C83-0D6C5EB7A85F}\MpKsl0608cc91.sys [58120 2018-01-28] (Microsoft Corporation)
R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [7647232 2017-10-17] (Intel Corporation)
R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [781792 2017-07-10] (Realsil Semiconductor Corporation)
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [53848 2017-08-18] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [55384 2017-08-18] (Synaptics Incorporated)
R3 VirtualButtons; C:\WINDOWS\System32\drivers\VirtualButtons.sys [42000 2017-07-10] (Intel Corporation)
R3 VX49; C:\WINDOWS\system32\DRIVERS\AlesisVX49.sys [461584 2015-09-16] (Alesis)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-01-19] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288848 2018-01-19] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2018-01-19] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30368 2017-06-21] (HP)
U3 aspnet_state; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-01-29 11:23 - 2018-01-29 11:23 - 000021318 _____ C:\Users\Jason\Desktop\FRST.txt
2018-01-29 11:22 - 2018-01-29 11:23 - 000000000 ____D C:\FRST
2018-01-29 11:07 - 2018-01-29 11:06 - 002393088 _____ (Farbar) C:\Users\Jason\Desktop\FRST64.exe
2018-01-29 11:06 - 2018-01-29 11:06 - 002393088 _____ (Farbar) C:\Users\Jason\Downloads\FRST64.exe
2018-01-28 19:48 - 2018-01-28 21:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-01-25 22:17 - 2018-01-28 19:55 - 000000000 ___RD C:\Users\Jason\iCloudDrive
2018-01-25 22:17 - 2018-01-28 19:33 - 000003504 _____ C:\WINDOWS\System32\Tasks\Apple Diagnostics
2018-01-25 22:17 - 2018-01-25 22:18 - 000000000 ____D C:\Users\Jason\Documents\Outlook Files
2018-01-25 22:17 - 2018-01-25 22:18 - 000000000 ____D C:\Users\Jason\AppData\Local\305F1F14-8F8C-4AD3-A1DD-180A5265915F.aplzod
2018-01-25 22:17 - 2018-01-25 22:17 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iCloud
2018-01-25 22:17 - 2018-01-25 22:17 - 000000000 ____D C:\Users\Jason\AppData\Local\Apple Inc
2018-01-25 21:58 - 2018-01-25 21:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2018-01-25 21:57 - 2018-01-25 21:57 - 000001823 _____ C:\Users\Public\Desktop\iTunes.lnk
2018-01-25 21:57 - 2018-01-25 21:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2018-01-25 21:57 - 2018-01-25 21:57 - 000000000 ____D C:\Program Files\iPod
2018-01-25 21:56 - 2018-01-25 21:57 - 000000000 ____D C:\Program Files\iTunes
2018-01-25 21:50 - 2018-01-25 21:50 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
2018-01-25 21:50 - 2018-01-25 21:50 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2018-01-24 18:06 - 2018-01-24 18:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-01-24 17:51 - 2018-01-24 17:51 - 000002800 _____ C:\Users\Jason\Downloads\SJD_to_DEN_outlook.ics
2018-01-24 17:51 - 2018-01-24 17:51 - 000002800 _____ C:\Users\Jason\Downloads\DEN_to_SJD_outlook.ics
2018-01-24 13:57 - 2018-01-24 13:57 - 000000847 _____ C:\Users\Jason\Desktop\Ableton Live 9 Lite.lnk
2018-01-22 04:19 - 2018-01-22 04:19 - 000051024 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2018-01-22 04:19 - 2018-01-22 04:19 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2018-01-22 04:19 - 2018-01-22 04:19 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2018-01-22 04:19 - 2018-01-22 04:19 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2018-01-17 19:32 - 2018-01-25 21:44 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForJason.job
2018-01-17 19:32 - 2018-01-25 21:38 - 000003256 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForJason
2018-01-17 19:32 - 2018-01-17 19:32 - 000000000 ____D C:\Users\Jason\AppData\Local\HP_Development_Company,_L
2018-01-15 21:32 - 2018-01-22 10:25 - 000000000 ____D C:\Users\Jason\Documents\My Karaoke
2018-01-15 21:32 - 2018-01-15 21:32 - 000001189 _____ C:\Users\Jason\Desktop\SMC Karaoke Manager.lnk
2018-01-15 21:32 - 2018-01-15 21:32 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Doblon
2018-01-15 21:32 - 2018-01-15 21:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMC Karaoke Manager
2018-01-15 21:32 - 2018-01-15 21:32 - 000000000 ____D C:\Program Files (x86)\Doblon
2018-01-15 21:32 - 2007-03-09 15:59 - 000184320 _____ (Industrial Streams) C:\WINDOWS\SysWOW64\erdmpg-5.3.dll
2018-01-15 21:31 - 2018-01-15 21:31 - 011050946 _____ C:\Users\Jason\Downloads\smc_download_manager.zip
2018-01-15 13:25 - 2018-01-15 13:25 - 000000000 ____D C:\Program Files\Common Files\Intel
2018-01-15 13:25 - 2018-01-15 13:25 - 000000000 ____D C:\Program Files (x86)\Cisco
2018-01-15 13:23 - 2018-01-15 13:24 - 155125560 _____ (Apple Inc.) C:\Users\Jason\Downloads\iCloudSetup.exe
2018-01-15 13:22 - 2018-01-15 13:22 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2018-01-15 13:20 - 2018-01-15 13:20 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2018-01-15 13:19 - 2018-01-25 21:58 - 000000000 ____D C:\Users\Jason\AppData\Local\Apple Computer
2018-01-11 13:03 - 2018-01-11 13:03 - 000001306 _____ C:\Users\Jason\Desktop\Dropbox.lnk
2018-01-11 13:03 - 2018-01-11 13:03 - 000000000 ___RD C:\Users\Jason\Dropbox
2018-01-11 12:59 - 2018-01-11 12:59 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Dropbox
2018-01-11 12:58 - 2018-01-11 13:34 - 000000000 ____D C:\Users\Jason\AppData\Local\Dropbox
2018-01-10 15:42 - 2018-01-10 15:42 - 000000000 ____D C:\Users\Jason\AppData\Local\Starry Night Orion SE
2018-01-10 15:08 - 2018-01-10 15:08 - 000000000 ____D C:\Users\Jason\AppData\Local\Simulation Curriculum
2018-01-10 15:08 - 2018-01-10 15:08 - 000000000 ____D C:\Users\Jason\AppData\Local\CrashRpt
2018-01-10 15:01 - 2018-01-10 15:01 - 000002077 _____ C:\Users\Public\Desktop\Starry Night Orion SE 7.lnk
2018-01-10 15:01 - 2018-01-10 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Starry Night Orion SE 7
2018-01-10 15:01 - 2018-01-10 15:01 - 000000000 ____D C:\Program Files (x86)\Starry Night Orion SE 7
2018-01-10 15:00 - 2018-01-10 15:00 - 000001324 _____ C:\Users\Public\Desktop\Gemini Telescope.lnk
2018-01-10 15:00 - 2018-01-10 15:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EQMOD
2018-01-10 15:00 - 2018-01-10 15:00 - 000000000 ____D C:\ProgramData\ASCOM
2018-01-10 15:00 - 2018-01-10 15:00 - 000000000 ____D C:\Program Files (x86)\EQMOD
2018-01-10 14:59 - 2018-01-10 15:00 - 000000000 ____D C:\Program Files\Common Files\ASCOM
2018-01-10 14:59 - 2018-01-10 14:59 - 000001350 _____ C:\Users\Public\Desktop\ASCOM Diagnostics.lnk
2018-01-10 14:59 - 2018-01-10 14:59 - 000001188 _____ C:\Users\Public\Desktop\ProfileExplorer.lnk
2018-01-10 14:59 - 2018-01-10 14:59 - 000000000 __HDC C:\ProgramData\{E0B47103-4E21-4452-A6E3-5895D02D18B1}
2018-01-10 14:59 - 2018-01-10 14:59 - 000000000 ____D C:\WINDOWS\Symbols
2018-01-10 14:59 - 2018-01-10 14:59 - 000000000 ____D C:\Users\Jason\Documents\ASCOM
2018-01-10 14:59 - 2018-01-10 14:59 - 000000000 ____D C:\Users\Jason\AppData\Local\PackageAware
2018-01-10 14:59 - 2018-01-10 14:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASCOM Platform 6
2018-01-10 14:59 - 2018-01-10 14:59 - 000000000 ____D C:\Program Files (x86)\ASCOM
2018-01-10 14:58 - 2018-01-10 14:58 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2018-01-10 14:58 - 2018-01-10 14:58 - 000002103 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2018-01-10 14:58 - 2018-01-10 14:58 - 000000000 ____D C:\ProgramData\Adobe
2018-01-10 14:58 - 2018-01-10 14:58 - 000000000 ____D C:\Program Files (x86)\Adobe
2018-01-10 14:57 - 2018-01-10 14:57 - 000000000 ____D C:\Users\Jason\AppData\Local\AdvinstAnalytics
2018-01-10 14:50 - 2018-01-28 20:12 - 000000000 ____D C:\Users\Jason\AppData\Local\GoPro
2018-01-10 14:50 - 2018-01-10 14:50 - 000466456 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2018-01-10 14:50 - 2018-01-10 14:50 - 000444952 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2018-01-10 14:50 - 2018-01-10 14:50 - 000122904 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll
2018-01-10 14:50 - 2018-01-10 14:50 - 000109080 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll
2018-01-10 14:50 - 2018-01-10 14:50 - 000000888 _____ C:\Users\Public\Desktop\GoPro Quik.lnk
2018-01-10 14:50 - 2018-01-10 14:50 - 000000000 ____D C:\Users\Jason\.GoPro
2018-01-10 14:50 - 2018-01-10 14:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2018-01-10 14:50 - 2018-01-10 14:50 - 000000000 ____D C:\Program Files\GoPro
2018-01-10 14:50 - 2018-01-10 14:50 - 000000000 ____D C:\Program Files (x86)\OpenAL
2018-01-10 14:42 - 2018-01-10 14:45 - 000000000 ____D C:\Users\Jason\Documents\Ableton
2018-01-10 14:39 - 2018-01-10 14:44 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Ableton
2018-01-10 14:39 - 2018-01-10 14:39 - 000000258 __RSH C:\ProgramData\ntuser.pol
2018-01-10 14:39 - 2018-01-10 14:39 - 000000000 ____D C:\Program Files\Common Files\Propellerhead Software
2018-01-10 14:37 - 2018-01-28 19:46 - 000000000 ____D C:\ProgramData\Ableton
2018-01-10 14:37 - 2018-01-10 14:37 - 000000847 _____ C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Lite.lnk
2018-01-10 14:19 - 2018-01-10 14:19 - 000001324 _____ C:\Users\Public\Desktop\EightyEight Authorizer.lnk
2018-01-10 14:19 - 2018-01-10 14:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SONiVOX
2018-01-10 14:19 - 2011-08-19 14:36 - 000232960 _____ C:\WINDOWS\system32\libpng15.dll
2018-01-10 14:19 - 2011-08-19 14:36 - 000119296 _____ C:\WINDOWS\system32\zlib1.dll
2018-01-10 14:05 - 2018-01-10 14:05 - 000000000 ____D C:\ProgramData\SONiVOX
2018-01-10 14:05 - 2018-01-10 14:05 - 000000000 ____D C:\Program Files (x86)\SONiVOX
2018-01-10 14:04 - 2018-01-11 14:09 - 000000000 ____D C:\Users\Jason\AppData\Roaming\VIP
2018-01-10 13:41 - 2018-01-10 13:41 - 000000000 ____D C:\Users\Jason\Documents\VIP
2018-01-10 13:38 - 2018-01-10 13:38 - 000000000 ____D C:\Users\Jason\AppData\Local\PACE
2018-01-10 13:37 - 2018-01-10 13:37 - 000000000 ____D C:\ProgramData\PACE
2018-01-10 13:35 - 2018-01-10 13:35 - 000002459 _____ C:\Users\Public\Desktop\VIP Authorizer.lnk
2018-01-10 13:35 - 2018-01-10 13:35 - 000002459 _____ C:\Users\Public\Desktop\AIR Instruments for VIP Authorizer.lnk
2018-01-10 13:33 - 2018-01-10 14:29 - 000000000 ____D C:\ProgramData\AIR Music Technology
2018-01-10 13:31 - 2018-01-10 13:31 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLok License Manager.lnk
2018-01-10 13:31 - 2018-01-10 13:31 - 000002081 _____ C:\Users\Public\Desktop\iLok License Manager.lnk
2018-01-10 12:41 - 2018-01-10 12:41 - 000000000 ____D C:\Program Files (x86)\iLok License Manager
2018-01-10 12:37 - 2018-01-10 14:29 - 000000000 ____D C:\Program Files (x86)\AIR Music Technology
2018-01-10 12:37 - 2018-01-10 12:37 - 000001122 _____ C:\Users\Public\Desktop\VIP 32-bit.lnk
2018-01-10 12:37 - 2018-01-10 12:37 - 000000923 _____ C:\Users\Public\Desktop\VIP 64-bit.lnk
2018-01-10 12:34 - 2018-01-24 13:56 - 000000000 ____D C:\ProgramData\VIP
2018-01-10 12:34 - 2018-01-10 13:35 - 000000000 ____D C:\Program Files (x86)\VIP
2018-01-10 12:34 - 2018-01-10 12:34 - 000000000 ____D C:\Program Files\Common Files\Avid
2018-01-10 12:32 - 2018-01-10 14:29 - 000000000 ____D C:\Program Files\VST Plugins 64 Bit
2018-01-10 12:32 - 2018-01-10 14:29 - 000000000 ____D C:\Program Files (x86)\VST Plugins 32 Bit
2018-01-10 12:26 - 2018-01-10 12:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alesis
2018-01-10 12:26 - 2018-01-10 12:26 - 000000000 ____D C:\Program Files\Alesis
2018-01-10 12:26 - 2018-01-10 12:26 - 000000000 ____D C:\Program Files (x86)\Alesis
2018-01-10 12:25 - 2018-01-10 12:25 - 000000000 ____D C:\ProgramData\inMusic
2018-01-10 12:21 - 2018-01-10 12:21 - 000000000 ____D C:\Users\Jason\AppData\Local\ScreenCapture
2018-01-10 12:21 - 2018-01-10 12:21 - 000000000 ____D C:\Users\Jason\AppData\Local\Movavi
2018-01-10 12:20 - 2018-01-10 12:20 - 000001262 _____ C:\Users\Public\Desktop\Movavi Screen Capture Studio 8.lnk
2018-01-10 12:20 - 2018-01-10 12:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Screen Capture Studio 8
2018-01-10 12:19 - 2018-01-10 12:22 - 000000000 ____D C:\ProgramData\Movavi Screen Capture Studio 8
2018-01-10 12:19 - 2018-01-10 12:20 - 000000000 ____D C:\Program Files (x86)\Movavi Screen Capture Studio 8
2018-01-10 12:19 - 2018-01-10 12:19 - 000005019 _____ C:\ProgramData\dfnpcrng.nwi
2018-01-10 12:19 - 2018-01-10 12:19 - 000000016 _____ C:\ProgramData\mntemp
2018-01-10 11:05 - 2018-01-17 12:06 - 000000000 ____D C:\Users\Jason\AppData\Roaming\HpUpdate
2018-01-10 11:05 - 2018-01-10 11:05 - 000003776 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP Officejet Pro 6830
2018-01-10 11:05 - 2018-01-10 11:05 - 000002284 _____ C:\Users\Public\Desktop\HP Officejet Pro 6830.lnk
2018-01-10 11:05 - 2018-01-10 11:05 - 000001236 _____ C:\Users\Public\Desktop\Shop for Supplies - HP Officejet Pro 6830.lnk
2018-01-10 11:05 - 2018-01-10 11:05 - 000000978 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR Registration.lnk
2018-01-10 11:05 - 2018-01-10 11:05 - 000000057 _____ C:\ProgramData\Ament.ini
2018-01-10 11:05 - 2018-01-10 11:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2018-01-10 11:05 - 2014-07-18 19:48 - 000763968 ____N (Hewlett-Packard Development Company, LP) C:\WINDOWS\system32\HPDiscoPM7212.dll
2018-01-10 11:02 - 2018-01-10 11:05 - 000000000 ____D C:\Users\Jason\AppData\Local\HP
2018-01-10 10:48 - 2018-01-10 10:49 - 179306328 _____ C:\Users\Jason\Downloads\OJ6830_73.exe
2018-01-10 10:42 - 2018-01-10 10:43 - 000000000 ____D C:\Users\Jason\Documents\Medical
2018-01-10 09:32 - 2018-01-10 09:34 - 000000000 ____D C:\Users\Jason\Documents\National Parks Foundation
2018-01-09 12:43 - 2018-01-10 11:59 - 000000000 ____D C:\Users\Jason\AppData\Local\PlaceholderTileLogoFolder
2018-01-09 12:32 - 2018-01-09 12:32 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Macromedia
2018-01-09 12:31 - 2018-01-09 12:31 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Hewlett-Packard
2018-01-09 12:29 - 2018-01-25 21:46 - 000002370 _____ C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-01-09 12:29 - 2018-01-25 21:46 - 000000000 ___RD C:\Users\Jason\OneDrive
2018-01-09 12:28 - 2018-01-25 22:17 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Apple Computer
2018-01-09 12:28 - 2018-01-09 12:28 - 000000000 ____D C:\Users\Jason\AppData\Roaming\HP
2018-01-09 12:27 - 2018-01-10 11:58 - 000000000 ____D C:\Users\Jason\AppData\Local\Packages
2018-01-09 12:27 - 2018-01-09 14:41 - 000000000 ____D C:\Users\Jason\AppData\Local\Publishers
2018-01-09 12:27 - 2018-01-09 12:27 - 000000000 ___RD C:\Users\Jason\3D Objects
2018-01-09 12:27 - 2018-01-09 12:27 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Synaptics
2018-01-09 12:27 - 2018-01-09 12:27 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Adobe
2018-01-09 12:27 - 2018-01-09 12:27 - 000000000 ____D C:\Users\Jason\AppData\Local\VirtualStore
2018-01-09 12:27 - 2018-01-09 12:27 - 000000000 ____D C:\Users\Jason\AppData\Local\Conexant
2018-01-09 12:27 - 2018-01-09 11:34 - 000000000 ____D C:\Users\Jason\AppData\Local\Hewlett-Packard
2018-01-09 12:26 - 2018-01-28 19:55 - 000000000 __SHD C:\Users\Jason\IntelGraphicsProfiles
2018-01-09 12:26 - 2018-01-09 15:37 - 000000000 ____D C:\Users\Jason\AppData\Local\ConnectedDevicesPlatform
2018-01-09 12:26 - 2018-01-09 12:26 - 000000000 ____D C:\Users\Jason\AppData\Roaming\Intel
2018-01-09 12:25 - 2018-01-25 22:17 - 000000000 ____D C:\Users\Jason
2018-01-09 12:25 - 2018-01-09 12:25 - 000000020 ___SH C:\Users\Jason\ntuser.ini
2018-01-09 12:25 - 2018-01-09 12:13 - 000000000 ___HD C:\Users\Jason\Documents\hp.system.package.metadata
2018-01-09 12:25 - 2016-07-19 07:49 - 000000000 ___HD C:\Users\Jason\Documents\hp.applications.package.appdata
2018-01-09 12:22 - 2018-01-09 12:22 - 000000000 _SHDL C:\Users\Default User
2018-01-09 12:22 - 2018-01-09 12:22 - 000000000 _SHDL C:\Users\All Users
2018-01-09 12:22 - 2018-01-09 12:22 - 000000000 _SHDL C:\Documents and Settings
2018-01-09 12:21 - 2018-01-28 19:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-01-09 12:21 - 2018-01-11 12:58 - 000004008 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA
2018-01-09 12:21 - 2018-01-11 12:58 - 000003776 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore
2018-01-09 12:21 - 2018-01-09 12:31 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2018-01-09 12:21 - 2018-01-09 12:21 - 000003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2018-01-09 12:21 - 2018-01-09 12:21 - 000002500 _____ C:\WINDOWS\System32\Tasks\HPEA3JOBS
2018-01-09 12:21 - 2018-01-09 12:21 - 000002252 _____ C:\WINDOWS\System32\Tasks\HPJumpStartProvider
2018-01-09 12:21 - 2018-01-09 12:21 - 000000000 ____D C:\WINDOWS\System32\Tasks\HP
2018-01-09 12:21 - 2018-01-09 11:47 - 000000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2018-01-09 12:20 - 2018-01-09 12:20 - 000022744 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-01-09 12:19 - 2018-01-09 12:19 - 000000000 ____D C:\ProgramData\Apple Computer
2018-01-09 12:19 - 2017-09-29 06:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-01-09 12:18 - 2018-01-25 21:50 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2018-01-09 12:18 - 2018-01-09 12:18 - 000000000 ____D C:\Users\Jason\AppData\Local\Apple
2018-01-09 12:18 - 2018-01-09 12:18 - 000000000 ____D C:\Program Files\Bonjour
2018-01-09 12:18 - 2018-01-09 12:18 - 000000000 ____D C:\Program Files (x86)\Bonjour
2018-01-09 12:16 - 2018-01-25 21:58 - 000000000 ____D C:\Program Files\Common Files\Apple
2018-01-09 12:15 - 2018-01-09 12:15 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-01-09 12:12 - 2018-01-09 12:14 - 264339784 _____ (Apple Inc.) C:\Users\Jason\Downloads\iTunes64Setup.exe
2018-01-09 12:08 - 2018-01-09 12:08 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-01-09 12:08 - 2018-01-09 12:08 - 000000000 ____D C:\Users\Jason\AppData\Local\DBG
2018-01-09 12:07 - 2018-01-09 12:07 - 000000000 ____D C:\ProgramData\USOShared
2018-01-09 12:01 - 2018-01-09 12:12 - 000000000 ____D C:\ProgramData\Conexant
2018-01-09 12:01 - 2018-01-09 12:01 - 000002192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bang & Olufsen Audio Control Panel.lnk
2018-01-09 12:01 - 2018-01-09 12:01 - 000000000 ____D C:\WINDOWS\UCI
2018-01-09 12:01 - 2018-01-09 12:01 - 000000000 ____D C:\WINDOWS\CxSvc
2018-01-09 12:01 - 2018-01-09 12:01 - 000000000 ____D C:\ProgramData\SRS Labs
2018-01-09 12:01 - 2017-05-14 11:09 - 002758232 _____ (Conexant) C:\WINDOWS\system32\MicTray64.exe
2018-01-09 12:01 - 2016-10-14 16:32 - 000002988 _____ C:\WINDOWS\system32\MicTray64.xml
2018-01-09 12:01 - 2016-10-04 11:42 - 000007412 _____ C:\WINDOWS\system32\cxapo.prop
2018-01-09 12:01 - 2016-10-04 11:41 - 000007412 _____ C:\WINDOWS\system32\cxapo2.prop
2018-01-09 12:01 - 2016-04-19 14:46 - 000004664 _____ C:\WINDOWS\system32\Drivers\SSPTunePt.DAT
2018-01-09 12:00 - 2018-01-09 12:09 - 000000000 ____D C:\Program Files\CONEXANT
2018-01-09 12:00 - 2018-01-09 12:01 - 001705080 _____ (TODO: <Company name>) C:\WINDOWS\SysWOW64\RebootPrompt.exe
2018-01-09 12:00 - 2018-01-09 12:00 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2018-01-09 12:00 - 2018-01-09 12:00 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2018-01-09 12:00 - 2018-01-09 12:00 - 000000000 ____D C:\ProgramData\UIU
2018-01-09 12:00 - 2016-01-14 16:09 - 000004664 _____ C:\WINDOWS\system32\Drivers\CxSfPt.dat
2018-01-09 11:59 - 2018-01-15 13:27 - 000000000 ____D C:\Intel
2018-01-09 11:59 - 2018-01-15 13:22 - 000000000 ____D C:\Program Files\Intel
2018-01-09 11:59 - 2018-01-09 11:59 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_esif_umdf2_02_00_00.Wdf
2018-01-09 11:59 - 2018-01-09 11:59 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2018-01-09 11:59 - 2018-01-09 11:59 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_esif_lf_01011.Wdf
2018-01-09 11:59 - 2018-01-09 11:59 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2018-01-09 11:59 - 2018-01-09 11:59 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-01-09 11:59 - 2018-01-09 11:59 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2018-01-09 11:59 - 2017-11-03 01:26 - 000140288 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2018-01-09 11:59 - 2017-11-03 01:26 - 000116736 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2018-01-09 11:59 - 2017-02-24 16:23 - 000536864 _____ C:\WINDOWS\system32\vulkan-1.dll
2018-01-09 11:59 - 2017-02-24 16:23 - 000525600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2018-01-09 11:59 - 2017-02-24 16:23 - 000254240 _____ C:\WINDOWS\system32\vulkaninfo.exe
2018-01-09 11:59 - 2017-02-24 16:23 - 000233760 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2018-01-09 11:58 - 2018-01-29 10:36 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2018-01-09 11:58 - 2018-01-28 19:48 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-01-09 11:58 - 2018-01-28 19:48 - 000110016 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2018-01-09 11:58 - 2018-01-28 19:48 - 000046008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2018-01-09 11:58 - 2018-01-09 11:58 - 000193968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2018-01-09 11:58 - 2018-01-09 11:58 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-01-09 11:58 - 2018-01-09 11:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-01-09 11:58 - 2018-01-09 11:58 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-01-09 11:58 - 2018-01-09 11:58 - 000000000 ____D C:\Program Files\Malwarebytes
2018-01-09 11:58 - 2017-11-29 10:11 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2018-01-09 11:57 - 2018-01-25 21:46 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2044686696-813384955-1182592829-1001
2018-01-09 11:57 - 2018-01-09 11:58 - 083316440 _____ (Malwarebytes ) C:\Users\Jason\Downloads\mb3-setup-consumer-3.3.1.2183-1.0.262-1.0.3374.exe
2018-01-09 11:57 - 2018-01-09 11:57 - 000000000 ___HD C:\Users\Jason\MicrosoftEdgeBackups
2018-01-09 11:56 - 2018-01-29 10:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-01-09 11:56 - 2018-01-09 12:17 - 000388712 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-01-09 11:56 - 2018-01-09 11:57 - 000000000 ____D C:\Users\Jason\AppData\Local\MicrosoftEdge
2018-01-09 11:56 - 2018-01-09 11:56 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-01-09 11:54 - 2018-01-24 08:31 - 000548000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2018-01-09 11:50 - 2018-01-09 12:13 - 000000000 ___HD C:\system.sav
2018-01-09 11:50 - 2016-11-23 19:45 - 000000000 __RSH C:\WINDOWS\system32\Drivers\103C_HP_cNB_ENVY x360 m6 Convertible_Y5335KV_0U_Q8CG6472BSC_EABC61902TS DPS_4A_I81AD_SHP_V58.53_BF.20_T161013_W1101-0_L409_M16257_J1000_7Intel_86E9_92.90_#161123_N8086095A_(W2K44UA#ABA)_XMOBILE_CN10_Z.MRK
2018-01-09 11:49 - 2018-01-09 11:49 - 000000000 ____D C:\WINDOWS\InfusedApps
2018-01-09 11:47 - 2018-01-09 11:47 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-01-09 11:47 - 2018-01-09 11:47 - 000000000 ____D C:\Program Files\Synaptics
2018-01-09 11:46 - 2018-01-09 11:59 - 000000000 ____D C:\WINDOWS\system32\Intel
2018-01-09 11:46 - 2018-01-09 11:46 - 000000000 ____D C:\WINDOWS\system32\cAVS
2018-01-09 11:45 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\Setup
2018-01-09 11:44 - 2018-01-10 08:06 - 000000000 ____D C:\Users\Jason\AppData\Local\Comms
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\si-LK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\am-ET
2018-01-09 11:43 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\OCR
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\Program Files\MSBuild
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-01-09 11:43 - 2018-01-09 11:43 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\system32\winrm
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\system32\WCN
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\system32\slmgr
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\system32\0409
2018-01-09 11:41 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\DigitalLocker
2018-01-09 11:39 - 2017-12-22 06:45 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-01-09 11:39 - 2017-12-22 06:45 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-01-09 11:37 - 2018-01-28 19:36 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-01-09 11:37 - 2018-01-25 21:50 - 000000000 ___RD C:\Program Files (x86)
2018-01-09 11:37 - 2018-01-25 21:36 - 000000000 ___HD C:\Program Files\WindowsApps
2018-01-09 11:37 - 2018-01-25 21:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-01-09 11:37 - 2018-01-22 10:40 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-01-09 11:37 - 2018-01-19 21:13 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2018-01-09 11:37 - 2018-01-15 21:50 - 000000000 ____D C:\WINDOWS\rescache
2018-01-09 11:37 - 2018-01-10 14:39 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2018-01-09 11:37 - 2018-01-09 14:47 - 000000000 ____D C:\WINDOWS\appcompat
2018-01-09 11:37 - 2018-01-09 14:36 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-01-09 11:37 - 2018-01-09 12:21 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-01-09 11:37 - 2018-01-09 12:21 - 000000000 ____D C:\WINDOWS\Registration
2018-01-09 11:37 - 2018-01-09 12:20 - 000000000 __RHD C:\Users\Public\Libraries
2018-01-09 11:37 - 2018-01-09 12:19 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2018-01-09 11:37 - 2018-01-09 12:13 - 000000000 ____D C:\WINDOWS\system32\spool
2018-01-09 11:37 - 2018-01-09 12:13 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2018-01-09 11:37 - 2018-01-09 12:09 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-01-09 11:37 - 2018-01-09 12:07 - 000000000 ____D C:\ProgramData\USOPrivate
2018-01-09 11:37 - 2018-01-09 12:04 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2018-01-09 11:37 - 2018-01-09 12:02 - 000000000 ___RD C:\WINDOWS\PrintDialog
2018-01-09 11:37 - 2018-01-09 12:02 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-01-09 11:37 - 2018-01-09 11:50 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-01-09 11:37 - 2018-01-09 11:49 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-01-09 11:37 - 2018-01-09 11:48 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\TextInput
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\migwiz
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\WINDOWS\Provisioning
2018-01-09 11:37 - 2018-01-09 11:45 - 000000000 ____D C:\Program Files\Windows Defender
2018-01-09 11:37 - 2018-01-09 11:43 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2018-01-09 11:37 - 2018-01-09 11:42 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ___SD C:\WINDOWS\system32\dsc
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\com
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\system32\setup
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\system32\MUI
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\system32\com
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\IME
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\Help
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\Program Files\Common Files\system
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-01-09 11:37 - 2018-01-09 11:41 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 __SHD C:\Program Files\Windows Sidebar
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 __RSD C:\WINDOWS\media
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ___SD C:\WINDOWS\system32\UNP
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ___SD C:\WINDOWS\system32\Nui
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\Web
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\Vss
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\tracing
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\TAPI
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\Msdtc
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SystemResources
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SystemApps
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\winevt
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\ras
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\IME
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\icsxml
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\ias
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\hydrogen
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\downlevel
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\DDFs
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\System
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SKB
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\security
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\schemas
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\SchCache
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\Resources
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\PLA
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\Performance
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\ModemLogs
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\L2Schemas
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\InputMethod
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\Globalization
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\Cursors
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\Branding
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\addins
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\Program Files\Windows Security
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\Program Files\Windows Portable Devices
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\Program Files\windows nt
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\Program Files\Common Files\Services
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\Program Files (x86)\windows nt
2018-01-09 11:37 - 2018-01-09 11:37 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2018-01-09 11:37 - 2018-01-09 11:35 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2018-01-09 11:37 - 2018-01-09 11:35 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2018-01-09 11:37 - 2018-01-09 11:35 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2018-01-09 11:37 - 2018-01-09 11:35 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2018-01-09 11:37 - 2018-01-09 11:35 - 000017572 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2018-01-09 11:37 - 2018-01-09 11:35 - 000004096 _____ C:\WINDOWS\system32\config\VSMIDK
2018-01-09 11:37 - 2018-01-09 11:35 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2018-01-09 11:37 - 2018-01-09 11:35 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2018-01-09 11:37 - 2018-01-09 11:35 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2018-01-09 11:37 - 2018-01-09 11:35 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2018-01-09 11:36 - 2018-01-15 13:22 - 000000000 ____D C:\WINDOWS\INF
2018-01-09 11:36 - 2018-01-09 11:38 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-01-09 11:35 - 2018-01-09 11:35 - 129365736 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-01-09 11:35 - 2018-01-09 11:35 - 129365736 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-01-09 11:33 - 2018-01-17 11:15 - 000000000 ____D C:\Users\Jason\AppData\Roaming\hpqLog
2018-01-09 11:29 - 2018-01-09 12:13 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-01-09 11:25 - 2018-01-28 19:47 - 111149056 _____ C:\WINDOWS\system32\config\SOFTWARE
2018-01-09 11:25 - 2018-01-28 19:47 - 087556096 _____ C:\WINDOWS\system32\config\SYSTEM
2018-01-09 11:25 - 2018-01-28 19:47 - 000786432 _____ C:\WINDOWS\system32\config\DEFAULT
2018-01-09 11:25 - 2018-01-28 19:47 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2018-01-09 11:25 - 2018-01-28 19:47 - 000065536 _____ C:\WINDOWS\system32\config\SECURITY
2018-01-09 11:25 - 2018-01-09 12:22 - 000000000 ____D C:\WINDOWS\Panther
2018-01-09 11:25 - 2018-01-09 11:48 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-01-09 11:25 - 2018-01-09 11:41 - 000000000 ____D C:\WINDOWS\servicing
2018-01-09 11:25 - 2018-01-09 11:39 - 000131072 _____ C:\WINDOWS\system32\config\SAM
2018-01-09 11:25 - 2018-01-09 11:37 - 000000000 ____D C:\WINDOWS\system32\SMI
2018-01-09 10:23 - 2018-01-09 11:50 - 000000000 ___HD C:\$SysReset
2018-01-04 10:09 - 2018-01-01 05:50 - 005905752 ____N (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2018-01-04 10:09 - 2018-01-01 05:49 - 008605080 ____N (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-01-04 10:09 - 2018-01-01 05:48 - 007831760 ____N (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-01-04 10:09 - 2018-01-01 05:41 - 007676296 ____N (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-01-04 10:09 - 2018-01-01 05:38 - 003904808 ____N (Microsoft Corporation) C:\WINDOWS\explorer.exe
2018-01-04 10:09 - 2018-01-01 05:34 - 007385088 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-01-04 10:09 - 2018-01-01 05:23 - 021352144 ____N (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-01-04 10:09 - 2018-01-01 04:45 - 006092152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-01-04 10:09 - 2018-01-01 04:43 - 020286120 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-01-04 10:09 - 2018-01-01 04:42 - 006479552 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-01-04 10:09 - 2018-01-01 04:37 - 025247232 ____N (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-01-04 10:09 - 2018-01-01 04:24 - 003668480 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-01-04 10:09 - 2018-01-01 04:20 - 019337216 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-01-04 10:09 - 2018-01-01 04:20 - 018917888 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-01-04 10:09 - 2018-01-01 04:19 - 008014848 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-01-04 10:09 - 2018-01-01 04:17 - 011923968 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-01-04 10:09 - 2018-01-01 04:15 - 012687872 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-01-04 10:09 - 2018-01-01 04:15 - 006029312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-01-04 10:09 - 2018-01-01 04:14 - 023655936 ____N (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-01-04 10:09 - 2018-01-01 04:13 - 013657600 ____N (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-01-04 10:09 - 2018-01-01 04:13 - 012830208 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-01-04 10:09 - 2018-01-01 04:11 - 008108544 ____N (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-01-04 10:09 - 2018-01-01 04:11 - 004748288 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-01-04 10:09 - 2018-01-01 04:11 - 003165696 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-01-04 10:08 - 2018-01-01 10:15 - 000956416 ____N (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-01-04 10:08 - 2018-01-01 05:54 - 000924648 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-01-04 10:08 - 2018-01-01 05:53 - 001090984 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-01-04 10:08 - 2018-01-01 05:52 - 000066712 ____N (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2018-01-04 10:08 - 2018-01-01 05:51 - 001414784 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-01-04 10:08 - 2018-01-01 05:51 - 001209240 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-01-04 10:08 - 2018-01-01 05:51 - 001055128 ____N (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-01-04 10:08 - 2018-01-01 05:51 - 000191816 ____N (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-01-04 10:08 - 2018-01-01 05:51 - 000059800 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2018-01-04 10:08 - 2018-01-01 05:50 - 000780464 ____N (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2018-01-04 10:08 - 2018-01-01 05:50 - 000479912 ____N (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-01-04 10:08 - 2018-01-01 05:50 - 000077208 ____N (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-01-04 10:08 - 2018-01-01 05:49 - 000599448 ____N (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-01-04 10:08 - 2018-01-01 05:49 - 000319352 ____N (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2018-01-04 10:08 - 2018-01-01 05:49 - 000292376 ____N (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2018-01-04 10:08 - 2018-01-01 05:48 - 001954048 ____N (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-01-04 10:08 - 2018-01-01 05:48 - 000382360 ____N (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2018-01-04 10:08 - 2018-01-01 05:47 - 000649304 ____N (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2018-01-04 10:08 - 2018-01-01 05:47 - 000082840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2018-01-04 10:08 - 2018-01-01 05:46 - 002709704 ____N (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-01-04 10:08 - 2018-01-01 05:46 - 000898216 ____N (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-01-04 10:08 - 2018-01-01 05:46 - 000733592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2018-01-04 10:08 - 2018-01-01 05:46 - 000471960 ____N (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2018-01-04 10:08 - 2018-01-01 05:45 - 002395032 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-01-04 10:08 - 2018-01-01 05:45 - 001277848 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2018-01-04 10:08 - 2018-01-01 05:45 - 000398744 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2018-01-04 10:08 - 2018-01-01 05:43 - 001173576 ____N (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-01-04 10:08 - 2018-01-01 05:43 - 000367336 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2018-01-04 10:08 - 2018-01-01 05:43 - 000062872 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fsdepends.sys
2018-01-04 10:08 - 2018-01-01 05:42 - 001029016 ____N (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2018-01-04 10:08 - 2018-01-01 05:42 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-01-04 10:08 - 2018-01-01 05:42 - 000494488 ____N (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2018-01-04 10:08 - 2018-01-01 05:42 - 000184984 ____N (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2018-01-04 10:08 - 2018-01-01 05:42 - 000109976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2018-01-04 10:08 - 2018-01-01 05:41 - 000559512 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-01-04 10:08 - 2018-01-01 05:41 - 000549552 ____N (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2018-01-04 10:08 - 2018-01-01 05:40 - 001206680 ____N (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-01-04 10:08 - 2018-01-01 05:39 - 000902416 ____N (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2018-01-04 10:08 - 2018-01-01 05:39 - 000677784 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-01-04 10:08 - 2018-01-01 05:39 - 000508264 ____N (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-01-04 10:08 - 2018-01-01 05:39 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2018-01-04 10:08 - 2018-01-01 05:39 - 000129432 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-01-04 10:08 - 2018-01-01 05:38 - 000727448 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2018-01-04 10:08 - 2018-01-01 05:38 - 000519152 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-01-04 10:08 - 2018-01-01 05:38 - 000103320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-01-04 10:08 - 2018-01-01 05:38 - 000038808 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Diskdump.sys
2018-01-04 10:08 - 2018-01-01 05:37 - 001426664 ____N (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-01-04 10:08 - 2018-01-01 05:37 - 000461720 ____N (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2018-01-04 10:08 - 2018-01-01 05:36 - 000413888 ____N (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-01-04 10:08 - 2018-01-01 05:36 - 000374032 ____N (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2018-01-04 10:08 - 2018-01-01 05:36 - 000166296 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2018-01-04 10:08 - 2018-01-01 05:36 - 000113560 ____N (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2018-01-04 10:08 - 2018-01-01 05:36 - 000057752 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbios.sys
2018-01-04 10:08 - 2018-01-01 05:35 - 001170008 ____N (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-01-04 10:08 - 2018-01-01 05:35 - 000075160 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-01-04 10:08 - 2018-01-01 05:34 - 001336344 ____N (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2018-01-04 10:08 - 2018-01-01 05:34 - 000260896 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-01-04 10:08 - 2018-01-01 05:34 - 000087384 ____N (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2018-01-04 10:08 - 2018-01-01 05:33 - 002773400 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-01-04 10:08 - 2018-01-01 05:33 - 000603920 ____N (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-01-04 10:08 - 2018-01-01 05:32 - 004481240 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-01-04 10:08 - 2018-01-01 05:32 - 000617304 ____N (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2018-01-04 10:08 - 2018-01-01 05:27 - 000713624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-01-04 10:08 - 2018-01-01 05:27 - 000163736 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-01-04 10:08 - 2018-01-01 05:26 - 000428952 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-01-04 10:08 - 2018-01-01 05:26 - 000081304 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2018-01-04 10:08 - 2018-01-01 05:25 - 000615768 ____N (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2018-01-04 10:08 - 2018-01-01 05:25 - 000147864 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2018-01-04 10:08 - 2018-01-01 05:21 - 001103768 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-01-04 10:08 - 2018-01-01 05:21 - 000614296 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2018-01-04 10:08 - 2018-01-01 05:06 - 000311192 ____N (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2018-01-04 10:08 - 2018-01-01 05:03 - 000777904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-01-04 10:08 - 2018-01-01 05:03 - 000650328 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2018-01-04 10:08 - 2018-01-01 05:03 - 000566664 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-01-04 10:08 - 2018-01-01 05:03 - 000123512 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2018-01-04 10:08 - 2018-01-01 04:53 - 001615712 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-01-04 10:08 - 2018-01-01 04:49 - 000481464 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2018-01-04 10:08 - 2018-01-01 04:49 - 000258808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2018-01-04 10:08 - 2018-01-01 04:46 - 003485392 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2018-01-04 10:08 - 2018-01-01 04:46 - 000289816 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2018-01-04 10:08 - 2018-01-01 04:45 - 005615968 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-01-04 10:08 - 2018-01-01 04:45 - 002192624 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-01-04 10:08 - 2018-01-01 04:45 - 000450928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2018-01-04 10:08 - 2018-01-01 04:42 - 004644912 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-01-04 10:08 - 2018-01-01 04:42 - 001246432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-01-04 10:08 - 2018-01-01 04:42 - 001003152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2018-01-04 10:08 - 2018-01-01 04:42 - 000982528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-01-04 10:08 - 2018-01-01 04:42 - 000386424 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2018-01-04 10:08 - 2018-01-01 04:42 - 000129184 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-01-04 10:08 - 2018-01-01 04:42 - 000074992 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2018-01-04 10:08 - 2018-01-01 04:34 - 000703568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2018-01-04 10:08 - 2018-01-01 04:25 - 002905600 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-01-04 10:08 - 2018-01-01 04:25 - 001008640 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-01-04 10:08 - 2018-01-01 04:25 - 000475648 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2018-01-04 10:08 - 2018-01-01 04:25 - 000344576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-01-04 10:08 - 2018-01-01 04:25 - 000097792 ____N C:\WINDOWS\system32\runexehelper.exe
2018-01-04 10:08 - 2018-01-01 04:24 - 000240640 ____N (Microsoft Corporation) C:\WINDOWS\system32\AboutSettingsHandlers.dll
2018-01-04 10:08 - 2018-01-01 04:24 - 000202240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2018-01-04 10:08 - 2018-01-01 04:24 - 000096256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2018-01-04 10:08 - 2018-01-01 04:24 - 000038912 ____N (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2018-01-04 10:08 - 2018-01-01 04:23 - 001313792 ____N (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-01-04 10:08 - 2018-01-01 04:23 - 000561152 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2018-01-04 10:08 - 2018-01-01 04:23 - 000536576 ____N (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-01-04 10:08 - 2018-01-01 04:23 - 000385024 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2018-01-04 10:08 - 2018-01-01 04:23 - 000250368 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2018-01-04 10:08 - 2018-01-01 04:23 - 000232960 ____N (Microsoft Corporation) C:\WINDOWS\system32\convertvhd.exe
2018-01-04 10:08 - 2018-01-01 04:23 - 000121344 ____N (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2018-01-04 10:08 - 2018-01-01 04:23 - 000080384 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2018-01-04 10:08 - 2018-01-01 04:23 - 000047104 ____N (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2018-01-04 10:08 - 2018-01-01 04:22 - 000031744 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2018-01-04 10:08 - 2018-01-01 04:22 - 000025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpstorport.sys
2018-01-04 10:08 - 2018-01-01 04:22 - 000017408 ____N (Microsoft Corporation) C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll
2018-01-04 10:08 - 2018-01-01 04:21 - 000268288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2018-01-04 10:08 - 2018-01-01 04:21 - 000233984 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
2018-01-04 10:08 - 2018-01-01 04:21 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2018-01-04 10:08 - 2018-01-01 04:21 - 000133632 ____N (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2018-01-04 10:08 - 2018-01-01 04:21 - 000097280 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2018-01-04 10:08 - 2018-01-01 04:21 - 000097280 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspptp.sys
2018-01-04 10:08 - 2018-01-01 04:21 - 000080896 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2018-01-04 10:08 - 2018-01-01 04:21 - 000062976 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2018-01-04 10:08 - 2018-01-01 04:20 - 000524288 ____N (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000459776 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000397824 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000225792 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2018-01-04 10:08 - 2018-01-01 04:20 - 000215552 ____N (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000212992 ____N (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000204288 ____N (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000186368 ____N (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000175616 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000134656 ____N (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000133632 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000104960 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000082432 ____N (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll
2018-01-04 10:08 - 2018-01-01 04:20 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RfxVmt.sys
2018-01-04 10:08 - 2018-01-01 04:20 - 000035328 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000795136 ____N (Microsoft Corporation) C:\WINDOWS\system32\NaturalAuth.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000675328 ____N (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000461312 ____N (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000450048 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000430080 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000416768 ____N (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2018-01-04 10:08 - 2018-01-01 04:19 - 000369152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000366080 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000365568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000340480 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2018-01-04 10:08 - 2018-01-01 04:19 - 000334848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000316928 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2018-01-04 10:08 - 2018-01-01 04:19 - 000188416 ____N (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000174592 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000149504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000142848 ____N (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000097792 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoert2.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000093696 ____N (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000079872 ____N (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000073216 ____N (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2018-01-04 10:08 - 2018-01-01 04:19 - 000063488 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2018-01-04 10:08 - 2018-01-01 04:19 - 000043008 ____N (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000748032 ____N (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000699904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000588800 ____N (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000465920 ____N (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000436224 ____N (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000432640 ____N (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000431616 ____N (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000427008 ____N (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000425984 ____N (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000391168 ____N (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000380928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000374784 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000369664 ____N (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000343040 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000336896 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000276480 ____N (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000261632 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000259072 ____N (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000210944 ____N (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000144896 ____N (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2018-01-04 10:08 - 2018-01-01 04:18 - 000082944 ____N (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 006564864 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 001485312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000791552 ____N (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000708096 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000616960 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000594432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000568832 ____N (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000559104 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000555520 ____N (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000542208 ____N (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000456704 ____N (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000423936 ____N (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000341504 ____N (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2018-01-04 10:08 - 2018-01-01 04:17 - 000228352 ____N (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2018-01-04 10:08 - 2018-01-01 04:17 - 000112640 ____N (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 005833216 ____N (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 004839424 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 003676672 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000966656 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000956928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000831488 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000815616 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000812544 ____N (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000720896 ____N (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000668160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000664576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000624128 ____N (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000594944 ____N (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000463360 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000401920 ____N (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000235008 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000086528 ____N (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2018-01-04 10:08 - 2018-01-01 04:16 - 000076288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 002349568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 001657856 ____N (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 001245184 ____N (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 000970240 ____N (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 000951808 ____N (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 000756736 ____N (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 000588800 ____N (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 000434176 ____N (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 000366080 ____N (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2018-01-04 10:08 - 2018-01-01 04:15 - 000258560 ____N (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2018-01-04 10:08 - 2018-01-01 04:14 - 002465280 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-01-04 10:08 - 2018-01-01 04:14 - 001495040 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-01-04 10:08 - 2018-01-01 04:14 - 001097728 ____N (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-01-04 10:08 - 2018-01-01 04:14 - 001003008 ____N (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-01-04 10:08 - 2018-01-01 04:14 - 000985600 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2018-01-04 10:08 - 2018-01-01 04:14 - 000917504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-01-04 10:08 - 2018-01-01 04:14 - 000870912 ____N (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-01-04 10:08 - 2018-01-01 04:13 - 003121664 ____N (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2018-01-04 10:08 - 2018-01-01 04:13 - 002869760 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-01-04 10:08 - 2018-01-01 04:13 - 002013184 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-01-04 10:08 - 2018-01-01 04:13 - 001559552 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-01-04 10:08 - 2018-01-01 04:13 - 001474560 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-01-04 10:08 - 2018-01-01 04:13 - 000897024 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2018-01-04 10:08 - 2018-01-01 04:12 - 002633216 ____N (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-01-04 10:08 - 2018-01-01 04:12 - 002208768 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-01-04 10:08 - 2018-01-01 04:12 - 001573376 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2018-01-04 10:08 - 2018-01-01 04:12 - 001547776 ____N (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-01-04 10:08 - 2018-01-01 04:12 - 001424896 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2018-01-04 10:08 - 2018-01-01 04:12 - 000760320 ____N (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2018-01-04 10:08 - 2018-01-01 04:12 - 000464384 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 003334144 ____N (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 002859520 ____N (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 002082304 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-01-04 10:08 - 2018-01-01 04:11 - 001822208 ____N (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 001816576 ____N (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 001597952 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 001343488 ____N (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 001231872 ____N (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 000880640 ____N (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 000812032 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-01-04 10:08 - 2018-01-01 04:11 - 000715776 ____N (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2018-01-04 10:08 - 2018-01-01 04:10 - 003126272 ____N (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2018-01-04 10:08 - 2018-01-01 04:10 - 002528256 ____N (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2018-01-04 10:08 - 2018-01-01 04:10 - 000012800 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscproxystub.dll
2018-01-04 10:08 - 2018-01-01 04:09 - 001487872 ____N (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-01-04 10:08 - 2018-01-01 04:09 - 000925184 ____N (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2018-01-04 10:08 - 2018-01-01 04:09 - 000666624 ____N (Microsoft Corporation) C:\WINDOWS\system32\DbgModel.dll
2018-01-04 10:08 - 2018-01-01 04:09 - 000599552 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-01-04 10:08 - 2018-01-01 04:08 - 000963072 ____N (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-01-04 10:08 - 2018-01-01 04:08 - 000726016 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2018-01-04 10:08 - 2018-01-01 04:08 - 000685056 ____N (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-01-04 10:08 - 2018-01-01 04:08 - 000505344 ____N (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll
2018-01-04 10:08 - 2018-01-01 04:06 - 000018944 ____N (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll
2018-01-04 10:08 - 2018-01-01 04:05 - 002510848 ____N (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-01-04 10:08 - 2018-01-01 04:05 - 001160704 ____N (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-01-04 10:08 - 2018-01-01 04:05 - 000050176 ____N (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2018-01-02 10:29 - 2018-01-02 10:29 - 001721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01009.dll
2018-01-02 10:29 - 2018-01-02 10:29 - 001002728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinUSBCoInstaller2.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-01-28 19:52 - 2015-11-02 23:05 - 001535846 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-01-24 18:06 - 2016-07-19 07:49 - 000000000 ____D C:\Program Files (x86)\Dropbox
2018-01-22 10:38 - 2016-07-19 07:51 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-01-15 13:26 - 2016-11-23 17:37 - 000000000 ____D C:\ProgramData\Intel
2018-01-15 13:25 - 2016-11-23 17:37 - 000000000 ____D C:\Program Files (x86)\Intel
2018-01-15 13:22 - 2016-07-19 07:49 - 000000000 ____D C:\ProgramData\Package Cache
2018-01-11 13:33 - 2016-07-19 07:49 - 000000948 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2018-01-11 13:33 - 2016-07-19 07:49 - 000000944 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2018-01-10 13:32 - 2016-07-19 07:48 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-01-10 11:42 - 2015-11-02 11:02 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-01-10 11:05 - 2016-07-19 07:49 - 000000000 ____D C:\Program Files\HP
2018-01-10 11:05 - 2016-07-19 07:48 - 000000000 ____D C:\ProgramData\HP
2018-01-10 11:05 - 2016-07-19 07:48 - 000000000 ____D C:\Program Files (x86)\HP
2018-01-10 11:05 - 2016-07-19 07:48 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2018-01-09 12:31 - 2016-07-19 07:48 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2018-01-09 12:20 - 2015-10-30 00:24 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-01-09 12:18 - 2016-07-19 07:49 - 000000000 ____D C:\ProgramData\Apple
2018-01-09 12:13 - 2016-11-23 17:46 - 000000000 ____D C:\WINDOWS\HP
2018-01-09 12:13 - 2016-11-23 17:41 - 000000000 ___HD C:\WINDOWS\system32\WLANProfiles
2018-01-09 12:13 - 2016-11-23 17:36 - 000000000 ____D C:\WINDOWS\Cnxt
2018-01-09 12:13 - 2016-07-19 07:49 - 000000000 ___HD C:\Users\Default\Documents\hp.system.package.metadata
2018-01-09 12:13 - 2016-07-19 07:49 - 000000000 ___HD C:\Users\Default User\Documents\hp.system.package.metadata
2018-01-09 12:13 - 2016-07-19 07:27 - 000000000 ____D C:\SWSetup
2018-01-09 12:13 - 2015-10-30 00:24 - 000000000 ___RD C:\WINDOWS\PurchaseDialog
2018-01-09 12:13 - 2015-10-30 00:24 - 000000000 ___RD C:\WINDOWS\DesktopTileResources
2018-01-09 12:12 - 2016-11-23 17:47 - 000000000 ____D C:\ProgramData\SUPPORTDIR
2018-01-09 12:12 - 2016-11-23 17:47 - 000000000 ____D C:\ProgramData\install_clap
2018-01-09 12:12 - 2016-11-23 17:47 - 000000000 ____D C:\ProgramData\CyberLink
2018-01-09 12:12 - 2016-11-23 17:47 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2018-01-09 12:12 - 2016-11-23 17:43 - 000000000 ____D C:\ProgramData\Synaptics
2018-01-09 12:12 - 2016-11-23 17:41 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2018-01-09 12:12 - 2016-11-23 17:41 - 000000000 ____D C:\Program Files (x86)\Realtek
2018-01-09 12:12 - 2016-07-19 07:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2018-01-09 12:12 - 2016-07-19 07:49 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2018-01-09 12:12 - 2016-07-19 07:49 - 000000000 ___RD C:\Program Files (x86)\Online Services
2018-01-09 12:12 - 2016-07-19 07:49 - 000000000 ____D C:\ProgramData\Dropbox
2018-01-09 12:12 - 2015-11-02 11:03 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-01-09 12:11 - 2016-11-23 17:47 - 000000000 ____D C:\Program Files (x86)\CyberLink
2018-01-09 12:11 - 2016-11-23 17:46 - 000000000 ____D C:\Program Files (x86)\HP Inc
2018-01-09 12:10 - 2016-11-23 17:50 - 000000000 ____D C:\Program Files\CyberLink
2018-01-09 12:10 - 2016-11-23 17:46 - 000000000 ____D C:\Program Files\HPCommRecovery
2018-01-09 12:10 - 2016-07-19 07:51 - 000000000 ____D C:\Program Files\Microsoft Office 15
2018-01-09 12:10 - 2016-07-19 07:49 - 000000000 ___RD C:\Program Files\Online Services
2018-01-09 12:10 - 2015-10-30 02:05 - 000000000 ____D C:\Program Files\Windows Journal
2018-01-09 12:09 - 2016-07-19 12:07 - 000000000 ___HD C:\hp
2018-01-09 12:09 - 2015-11-02 23:05 - 000000000 ____D C:\inetpub
2018-01-09 11:49 - 2016-11-23 17:55 - 000000000 ____D C:\ProgramData\mcafee
2018-01-09 11:33 - 2017-09-29 06:40 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys
2018-01-01 00:25 - 2017-10-30 18:07 - 000285696 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2018-01-01 00:24 - 2017-09-29 06:41 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-01-01 00:23 - 2017-09-29 06:41 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2018-01-01 00:21 - 2017-09-29 06:41 - 000132608 ____N (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2018-01-01 00:21 - 2017-09-29 06:41 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-01-19 21:13
==================== End of FRST.txt ============================

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27.01.2018
Ran by Jason (29-01-2018 11:23:52)
Running from C:\Users\Jason\Desktop
Windows 10 Home Version 1709 16299.192 (X64) (2018-01-09 19:22:55)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================
Administrator (S-1-5-21-2044686696-813384955-1182592829-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2044686696-813384955-1182592829-503 - Limited - Disabled)
Guest (S-1-5-21-2044686696-813384955-1182592829-501 - Limited - Disabled)
Jason (S-1-5-21-2044686696-813384955-1182592829-1001 - Administrator - Enabled) => C:\Users\Jason
WDAGUtilityAccount (S-1-5-21-2044686696-813384955-1182592829-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Ableton Live 9 Lite (HKLM\...\{E608300C-9B32-4A29-90DE-DF989EDAB0F9}) (Version: 9.0.0.0 - Ableton)
Adobe Reader XI (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)
AIR Rex Library (HKLM-x32\...\{F4195DC5-458E-494D-AF85-8C277B2DCAC7}) (Version: 2.0.2.18398 - AIR Music Tech GmbH) Hidden
Alesis VX49 1.0.1 (HKLM\...\{B331A5DD-D607-41C8-A2E3-F8A7CCB70AA3}) (Version: 1.0.1 - Alesis)
Apple Application Support (32-bit) (HKLM-x32\...\{D4C80B0C-CF67-43A7-90C3-466853543B54}) (Version: 6.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{B2A2E8AF-BC48-4191-B2C4-3846A19835CA}) (Version: 6.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{AA7D90D2-2387-4FA5-A3AF-96811BE49BFD}) (Version: 11.0.5.14 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{19589375-5C58-4AFA-842F-8B34744CCEAD}) (Version: 2.5.0.1 - Apple Inc.)
ASCOM Celestron Telescope Telescope Driver version 6.0.5604.284 (HKLM-x32\...\{8cad8458-17ab-49ea-9c3a-b20007f3ad10}_is1) (Version: 6.0.5604.28495 - Chris Rowland <chris.rowland@cherryfield.me.uk>)
ASCOM Gemini Telescope Driver (1.0.62.0) (HKLM\...\ASCOM.GeminiTelescope_is1) (Version: 1.0.62.0 - ASCOM Gemini Developers)
ASCOM Intelliscope Telescope Driver 1.0.0.0 (HKLM-x32\...\ASCOM Intelliscope Telescope Driver_is1) (Version: 1.0.0.0 - Various <eschman@unm.edu>)
ASCOM Meade Telescope Driver 5.0.4 (HKLM-x32\...\ASCOM Meade Telescope Driver_is1) (Version: 5.0.4 - Multiple authors (R Denny, J Brewster, J Putsman))
ASCOM Platform 6.2 (HKLM\...\{8961E141-B307-4882-ABAD-77A3E76A40C1}) (Version: 6.2.0.2774 - ASCOM Initiative) Hidden
ASCOM Platform 6.2 (HKLM-x32\...\ASCOM Platform 6.2) (Version: 6.2.0.2774 - ASCOM Initiative)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Conexant ISST Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 9.0.140.1 - Conexant)
Creative FX Collection Plus (HKLM-x32\...\{f6eb2a9d-61d3-4554-8f38-ed7069f77545}) (Version: 1.2.9 - AIR Music Tech GmbH)
CreativeFXCollectionPlus AAX64 (HKLM\...\{24E08D6E-7E17-4CA8-A76C-EB12B133DDFA}) (Version: 1.2.9 - AIR Music Tech GmbH) Hidden
CreativeFXCollectionPlus Content (HKLM-x32\...\{1C719BC4-92DC-4E0C-A78A-F3A18C8A9065}) (Version: 1.2.9 - AIR Music Tech GmbH) Hidden
CreativeFXCollectionPlus VST32 (HKLM-x32\...\{E40DA440-154E-4088-A122-027C7BEBEB3F}) (Version: 1.2.9 - AIR Music Tech GmbH) Hidden
CreativeFXCollectionPlus VST64 (HKLM\...\{A0B9459D-90D4-454E-B6EC-4D88EF905604}) (Version: 1.2.9 - AIR Music Tech GmbH) Hidden
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.4.6527 - CyberLink Corp.)
CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.1.2930 - CyberLink Corp.)
DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 42.4.114 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
EQMOD EQASCOM Telescope Driver V1.28k (HKLM-x32\...\EQMOD EQASCOM Telescope Driver_is1) (Version: 128k - EQMOD Project <EQMOD-owner@yahoogroups.com>)
GoPro Quik (HKLM\...\{0072E646-77C1-4FFA-8E8D-0885649F4FCD}) (Version: 0.1.462 - GoPro, Inc.) Hidden
GoPro Quik (HKLM-x32\...\{61e0a1fe-56a8-4a70-8dd1-06e9c22fa02b}) (Version: 2.5.1.462 - GoPro, Inc.)
HP 3D DriveGuard (HKLM-x32\...\{E78E56CE-04C8-4031-8261-23BB58E1825D}) (Version: 6.0.34.1 - HP)
HP Audio Switch (HKLM\...\HPAudioSwitch) (Version: 1.0.96.0 - HP Inc.)
HP CoolSense (HKLM-x32\...\{0C723C74-62DF-4B35-9490-A207546D866D}) (Version: 2.21.4 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{b0ebf7ff-6b1a-4a92-9c85-6915be1962b9}) (Version: 5.1.19895 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{6B4A5299-4837-485A-B71D-7F1CE6F8F018}) (Version: 1.0.0.143 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{0F5EBB0D-DF6D-4DBE-9789-57BF05B3B0FD}) (Version: 1.0.145.0 - HP Inc.)
HP Officejet Pro 6830 Basic Device Software (HKLM\...\{98040AB6-D667-409C-81E7-DB65836B3EE0}) (Version: 33.1.73.49987 - Hewlett-Packard Co.)
HP Officejet Pro 6830 Help (HKLM-x32\...\{28693307-6F99-4B5D-9FA3-4D9132DDA716}) (Version: 34.0.0 - Hewlett Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8351.5556 - HP Inc.)
HP Support Assistant (HKLM-x32\...\{0A07AA35-BE9C-453F-A2F7-486E68B9DC69}) (Version: 8.5.37.19 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{52A6690A-A8F3-4EDC-8BA9-125FDD65337A}) (Version: 12.8.47.1 - HP Inc.)
HP Sure Connect (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 1.0.0.25 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{29E20347-C62F-4657-938E-876A182B67F1}) (Version: 1.4.13 - HP Inc.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Wireless Button Driver (HKLM-x32\...\{AF4C5F64-4E6A-438B-9832-8BDEE0E7B43D}) (Version: 1.1.17.1 - HP)
Hybrid (HKLM-x32\...\{a131ab43-5f9e-4241-87bf-e705d4045ac7}) (Version: 3.0.7.19000 - AIR Music Tech GmbH)
Hybrid AAX32 (HKLM-x32\...\{63FA7BA2-C720-4506-9379-43BFA5BC3A98}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
Hybrid AAX64 (HKLM\...\{C2CB3E60-B541-418D-A535-D3D73A644EC5}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
Hybrid Content (HKLM-x32\...\{77129154-5C4A-45D0-AFEF-5D9C2D307246}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
Hybrid Mark Knight Expansion (HKLM-x32\...\{053564fb-c9fe-4803-8886-c6ddd37315b5}) (Version: 1.1.0 - AIR Music Tech GmbH)
Hybrid Mark Knight Expansion Presets (HKLM-x32\...\{69982714-2717-4A6D-8C36-BFE8DC65C7C6}) (Version: 1.1.0 - AIR Music Tech GmbH) Hidden
Hybrid Rene Amesz Expansion (HKLM-x32\...\{ea800fd5-272b-407b-aa1b-43bb72bae12a}) (Version: 1.1.0 - AIR Music Tech GmbH)
Hybrid Rene Amesz Expansion Presets (HKLM-x32\...\{9ED2C69F-A2E7-4F9B-8D90-D1FC91CFC6F6}) (Version: 1.1.0 - AIR Music Tech GmbH) Hidden
Hybrid VST32 (HKLM-x32\...\{592BA348-DA75-42DE-91C1-54FD5D62ABE8}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
Hybrid VST64 (HKLM\...\{EB4543A3-A9D8-4354-94BE-22400A619F7A}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
iCloud (HKLM\...\{694E3E02-E14A-4BB2-A970-CF7F017FD5CC}) (Version: 7.3.0.20 - Apple Inc.)
Intel® Chipset Device Software (HKLM-x32\...\{aaa7f0fb-02dc-4576-beef-7d24842c5fbe}) (Version: 10.1.1.32 - Intel® Corporation) Hidden
Intel® Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.10900.330 - Intel Corporation)
Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.5.0.1015 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4471 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.0.0.1039 - Intel Corporation)
Intel® Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1620.3 - Intel Corporation)
Intel® Virtual Buttons (HKLM-x32\...\1992736F-C90A-481C-B21B-EE34CAD07387) (Version: 1.1.0.21 - Intel Corporation)
Intel® Wireless Bluetooth® (HKLM-x32\...\{5068B0F8-CE24-4B61-9C2F-301B411FFB9C}) (Version: 18.1.1611.3223 - Intel Corporation)
Intel® Integrated Sensor Solution (HKLM-x32\...\{b3c2a365-876b-4588-97ce-5ab104b07d57}) (Version: 3.0.30.1076 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{8060a69f-ee27-444b-b126-775f861232ea}) (Version: 20.0.2 - Intel Corporation)
ISS_Drivers_x64 (HKLM\...\{7F65AED2-5B3C-40DD-996B-6F8820856F34}) (Version: 3.0.30.1076 - Intel Corporation) Hidden
iTunes (HKLM\...\{1D7D1271-5258-4F5A-B8C1-7176BF398782}) (Version: 12.7.3.46 - Apple Inc.)
Loom (HKLM-x32\...\{9f40904a-53d5-41a9-97d9-0ac916153e25}) (Version: 1.0.7.19000 - AIR Music Tech GmbH)
Loom AAX64 (HKLM\...\{25A3D63C-F40B-416E-BBE3-E6A748090587}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
Loom Content (HKLM-x32\...\{E3F72D6A-DC49-48CC-91B7-CFECC7BA556C}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
Loom RTAS (HKLM-x32\...\{D96FC398-12ED-4E88-A14E-A4F28EB9FDE3}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
Loom VST32 (HKLM-x32\...\{51155539-C526-4F04-8825-A12B4648C7B9}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
Loom VST64 (HKLM\...\{28D3CA08-B567-439D-A484-A7FB63A09F77}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
MeadeLX200GPS 5.0.0 (HKLM-x32\...\ASCOM Meade LX200GPS/R Telescope Driver_is1) (Version: 5.0.0 - Jon Brewster jon@brewsters.net)
Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.8827.2148 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2044686696-813384955-1182592829-1001\...\OneDriveSetup.exe) (Version: 17.3.7294.0108 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Movavi Screen Capture Studio 8 (HKLM-x32\...\Movavi Screen Capture Studio 8) (Version: 8.6.0 - Movavi)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8827.2148 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8827.2148 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8827.2148 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.8827.2148 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
PACE License Support Win64 (HKLM\...\{3EB94E61-B615-44e1-9593-3628C249CFC6}) (Version: 3.0.0.1323 - PACE Anti-Piracy, Inc.) Hidden
PACE License Support Win64 (HKLM-x32\...\InstallShield_{3EB94E61-B615-44e1-9593-3628C249CFC6}) (Version: 3.0.0.1323 - PACE Anti-Piracy, Inc.)
Product Improvement Study for HP Officejet Pro 6830 (HKLM\...\{96ABEAD3-67AE-4BF7-8A16-F745352049B3}) (Version: 33.1.73.49987 - Hewlett-Packard Co.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.21296 - Realtek Semiconductor Corp.)
SMC Karaoke Manager (HKLM-x32\...\{4F844B00-B138-4E42-89D1-037AD19D8830}_is1) (Version:  - Doblon)
SONiVOX EightyEight 2 (HKLM-x32\...\SONiVOX EightyEight 2_is1) (Version:  - )
Starry Night Orion SE 7 (HKLM-x32\...\{8A1F5C33-2CA3-4529-BADB-838EE6B69BB5}) (Version: 7.6.3.1375 - Simulation Curriculum Corp.)
Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Transfuser (HKLM-x32\...\{d987a7f4-e110-4bfa-ae41-f0c7ef68246f}) (Version: 2.0.7.19000 - AIR Music Tech GmbH)
Transfuser AAX32 (HKLM-x32\...\{EC312569-5DA5-472B-8BED-66C1578AEF02}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
Transfuser AAX64 (HKLM\...\{C8BB5211-BC46-49BF-AFAC-D55012C57BD3}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
Transfuser Content (HKLM-x32\...\{AB8300E5-FD8E-425C-A4A3-7A04601993C6}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
Transfuser Factory Content (HKLM-x32\...\{BAE8D82E-5DA6-4995-A8B5-4268708DA65C}) (Version: 2.0.6.18983 - AIR Music Tech GmbH) Hidden
Transfuser VST32 (HKLM-x32\...\{2AED3B33-0A05-4A39-8464-135D76381CA6}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
Transfuser VST64 (HKLM\...\{61605FF1-3621-42E5-B73F-509F92C2016F}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
VacuumPro (HKLM-x32\...\{80449a96-d6af-4d3e-abc2-a703c88c0d26}) (Version: 1.0.7.19000 - AIR Music Tech GmbH)
VacuumPro AAX64 (HKLM\...\{9673D032-41BF-40DB-9BC0-1F930D8B5610}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
VacuumPro Content (HKLM-x32\...\{7E3E8705-EFA9-4BC1-8889-40A6231F62F6}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
VacuumPro RTAS (HKLM-x32\...\{035EBEA2-35EB-41B3-9E7C-D6891A970321}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
VacuumPro VST32 (HKLM-x32\...\{6C80FC24-1811-4B61-9515-CEA2F22B3011}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
VacuumPro VST64 (HKLM\...\{E6EEEE76-27C1-49DF-B0B8-4B6F04136C33}) (Version: 1.0.7.19000 - AIR Music Tech GmbH) Hidden
Velvet (HKLM-x32\...\{4dab2319-5957-4eb9-afee-e79ceae8c03c}) (Version: 2.0.7.19000 - AIR Music Tech GmbH)
Velvet AAX32 (HKLM-x32\...\{D641E4D2-B10C-465D-86CC-298D08C9A468}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
Velvet AAX64 (HKLM\...\{8E0C1DD7-A16C-4605-86D6-77C19FB7F259}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
Velvet Content (HKLM-x32\...\{F1CF0540-EB81-4837-B6AF-871F4AE4F789}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
Velvet Factory Content (HKLM-x32\...\{BDE38DED-D2AC-4FDA-A6FA-93DDAC9956A7}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
Velvet VST32 (HKLM-x32\...\{717A7F3C-01AA-40DC-8FA5-AC29D1428B39}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
Velvet VST64 (HKLM\...\{96CF0BB6-DBD5-4A9D-90D0-B752621FC813}) (Version: 2.0.7.19000 - AIR Music Tech GmbH) Hidden
VIP 3.0.0 Software Package (HKLM-x32\...\{f0044986-4a96-4a89-a091-9a23c7df969b}) (Version: 3.0.0.0 - inMusic Brands)
VIP 3.0.0 Software Package Authorizer (HKLM-x32\...\{BF517669-3F33-474F-9159-85A6FC6463D2}) (Version: 3.0.0.0 - inMusic Brands)
VIP 3.0.0 Software Package Multis (HKLM-x32\...\{DEE4D032-EE2E-4174-90C3-9F1F0E8E505C}) (Version: 3.0.0.0 - inMusic Brands)
VIP 3.0.0.262 (HKLM-x32\...\{B3FC246F-87F6-4476-9E79-F14FB5A1F773}_is1) (Version:  - inMusic Brands)
Vulkan Run Time Libraries 1.0.42.0 (HKLM\...\VulkanRT1.0.42.0) (Version: 1.0.42.0 - LunarG, Inc.)
Xpand!2 (HKLM-x32\...\{dadbcc76-2a7e-4f53-a77a-3868c51bdd80}) (Version: 2.2.7.19000 - AIR Music Tech GmbH)
Xpand!2 Content (HKLM-x32\...\{AEB475C2-FC86-4082-87D7-352DFB075B2C}) (Version: 2.2.7.19000 - AIR Music Tech GmbH) Hidden
Xpand!2 Factory Content (HKLM-x32\...\{C1149DC5-F5B9-455E-B6B3-B81D9B5C80A0}) (Version: 2.2.7.19000 - AIR Music Tech GmbH) Hidden
Xpand!2 VST32 (HKLM-x32\...\{87716891-1EC0-46CC-8821-5A4DC75EEFD7}) (Version: 2.2.7.19000 - AIR Music Tech GmbH) Hidden
Xpand!2 VST64 (HKLM\...\{B9802F00-659C-4C21-9BA5-0958BAC6EFEF}) (Version: 2.2.7.19000 - AIR Music Tech GmbH) Hidden
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\ShellExt.dll [2017-09-29] (Microsoft Corporation)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2018-01-10] (Apple Inc.)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\ShellExt.dll [2017-09-29] (Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\ShellExt.dll [2017-09-29] (Microsoft Corporation)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-01-22] (Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki125121.inf_amd64_26ca8ba649abc040\igfxDTCM.dll [2017-11-03] (Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {024A2DBA-3A72-4722-B7CE-73A0ECE0386B} - System32\Tasks\HP\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\HP\HP CoolSense\CoolSense.exe [2016-01-21] (HP Development Company, L.P.)
Task: {075B31F8-DB4B-4FC8-8FF3-536033949C80} - System32\Tasks\Microsoft\Office\Microsoft Office Touchless Attach Notification => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-01-15] (Microsoft Corporation)
Task: {08B3F12C-B9CE-43A3-B687-CFE7086E904C} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-01-22] (Microsoft Corporation)
Task: {1FB95E35-96B2-498D-84B7-023147652AFF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MpCmdRun.exe [2018-01-19] (Microsoft Corporation)
Task: {32ADB08A-BDD1-45E1-950A-604902737CD2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-10-12] (Apple Inc.)
Task: {3B314371-2E2C-48B5-A29F-2D7D9CCE6614} - System32\Tasks\HPCustParticipation HP Officejet Pro 6830 => C:\Program Files\HP\HP Officejet Pro 6830\Bin\HPCustPartic.exe [2014-07-18] (Hewlett-Packard Development Company, LP)
Task: {54278EDB-5481-4059-B57F-30277316F477} - System32\Tasks\Microsoft\Windows\Conexant\FLOW => C:\Program Files\CONEXANT\FLOW\SACpl.exe [2016-12-01] (Conexant Systems, Inc.)
Task: {60ED4255-111F-4368-91C4-4954C2E162F5} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2018-01-10] (Apple Inc.)
Task: {6EE53962-7C4C-40C2-8B37-79BF6BD87BDE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-01-10] (HP Inc.)
Task: {70370586-3A4B-47CA-8AB4-F0CC474D5A6B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {7BDC2D4F-19F6-45F0-869A-7D71A1F4FD8A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-01-22] (Microsoft Corporation)
Task: {7CD651FC-6988-40FF-BBAB-81A10DBBBA32} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {7F4B1353-672E-4358-AB75-D258F8A3F47E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-11-08] (HP Inc.)
Task: {84A5ED07-A888-45E5-8C09-9573D3788787} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {8A5A8004-3FAA-43CA-82BA-9EE3C989C95C} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel® Corporation)
Task: {9B20A4ED-FD9D-4056-80CB-37A9CEC08A93} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2018-01-09] (Dropbox, Inc.)
Task: {A12BCC08-D5F3-452E-8C9D-7B496646B48E} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {A65FC92A-9DDD-4006-8ECA-B45433D86848} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MpCmdRun.exe [2018-01-19] (Microsoft Corporation)
Task: {A9D390B6-23DE-4E65-9B23-9DC4C3CF9B89} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-01-22] (Microsoft Corporation)
Task: {ABD71DDF-406C-4452-8217-58F162E73E43} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-01-15] (Microsoft Corporation)
Task: {AF64AA9E-C97D-4195-813B-7F3686E9CE9E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-01-15] (Microsoft Corporation)
Task: {B4E9BEEF-5539-4ECE-8458-5ED7862B91ED} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_TH5346907N => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-11-08] (HP Inc.)
Task: {B777B21D-4E9C-4C96-B091-853240F77A3C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MpCmdRun.exe [2018-01-19] (Microsoft Corporation)
Task: {BA5ED4F0-D279-4DF1-BE88-B8EB0C3D29CB} - System32\Tasks\Microsoft\Windows\Conexant\MicTray => C:\Windows\System32\MicTray64.exe [2017-05-14] (Conexant)
Task: {BCCE1D12-3E67-4317-B259-C31CEB3714F2} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2018-01-09] (Dropbox, Inc.)
Task: {C1C92BF6-AFC1-4EF5-80B0-E5637A281DE7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MpCmdRun.exe [2018-01-19] (Microsoft Corporation)
Task: {C35C7D43-DEA8-4B57-9A17-181865B19A49} - System32\Tasks\Microsoft\Windows\Conexant\SA3 => C:\Program Files\CONEXANT\SA3\HP-NB-AIO\SACpl.exe [2016-10-06] (Conexant Systems, Inc.)
Task: {CB486D85-16ED-401F-B7D1-3247CBA36B59} - System32\Tasks\HPJumpStartProvider => C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe [2016-06-02] ()
Task: {D61BDC59-2BC8-41E9-A5D6-ADB23CE8EDA3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-11-08] (HP Inc.)
Task: {E6661C67-5F1D-459A-8EA5-D1BDE22BBB44} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {EB59B717-5BD1-46DC-B348-88F724305A38} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {FFA3D017-EA05-40AA-9854-BEC3C374E214} - System32\Tasks\HPCeeScheduleForJason => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-05-12] (HP Development Company, L.P.)
Task: {FFE2B4E6-EE54-41E1-A0E9-0929B7F0EC63} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForJason.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Priceline.com.lnk -> C:\Program Files (x86)\HP\Shared\WizLink.exe () -> hxxp://www.priceline.com/?refid=PLHBC6240OPQ&refclickid=square
==================== Loaded Modules (Whitelisted) ==============
2017-09-29 06:41 - 2017-09-29 06:41 - 000184432 ____N () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-01-05 00:13 - 2018-01-05 00:13 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-12-08 02:48 - 2017-12-08 02:48 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2018-01-09 11:58 - 2017-11-29 10:11 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-01-09 11:58 - 2017-11-29 10:11 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-12-12 11:35 - 2017-12-12 11:35 - 000038328 _____ () C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
2016-06-02 19:23 - 2016-06-02 19:23 - 000843800 _____ () C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe
2017-12-06 20:25 - 2017-11-26 05:23 - 011044864 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-12-06 20:25 - 2017-11-26 05:01 - 001804288 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-01-19 04:20 - 2018-01-19 04:20 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2018-01-19 04:20 - 2018-01-19 04:20 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2018-01-19 04:20 - 2018-01-19 04:20 - 024677376 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2018-01-09 12:25 - 2018-01-09 12:35 - 002550272 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\skypert.dll
2018-01-19 04:20 - 2018-01-19 04:20 - 000667648 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2018-01-22 03:15 - 2018-01-22 03:15 - 000088888 _____ () C:\Program Files\iTunes\zlib1.dll
2018-01-22 03:15 - 2018-01-22 03:15 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll
2018-01-10 14:19 - 2013-04-08 06:11 - 000430592 _____ () C:\ProgramData\SONiVOX\EightyEight 2\Effects\x64\Compressor3.dll
2018-01-10 14:19 - 2015-01-14 12:02 - 000454144 _____ () C:\ProgramData\SONiVOX\EightyEight 2\Effects\x64\Equalizer.dll
2018-01-10 14:19 - 2013-04-02 10:17 - 000218624 _____ () C:\ProgramData\SONiVOX\EightyEight 2\Effects\x64\Chorus.dll
2018-01-10 14:19 - 2013-02-07 13:44 - 000242176 _____ () C:\ProgramData\SONiVOX\EightyEight 2\Effects\x64\Delay.dll
2017-10-03 05:27 - 2017-10-03 05:27 - 013628552 _____ () C:\ProgramData\Ableton\Live 9 Lite\Resources\Extensions\Index\Ableton Index.exe
2018-01-09 12:36 - 2018-01-09 12:36 - 004698840 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11712.1001.13.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-09-29 06:41 - 2017-09-29 06:41 - 000030208 ____N () C:\WINDOWS\system32\Windows.WARP.JITService.exe
2018-01-09 12:36 - 2018-01-09 12:36 - 026507776 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.13411.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-01-09 12:36 - 2018-01-09 12:36 - 008370176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.13411.0_x64__8wekyb3d8bbwe\EntCommon.dll
2018-01-09 12:17 - 2018-01-09 12:17 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.13411.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-01-05 00:14 - 2018-01-05 00:14 - 001042232 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2017-12-08 02:49 - 2017-12-08 02:49 - 000076088 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2018-01-05 00:14 - 2018-01-05 00:14 - 000189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2018-01-24 18:05 - 2018-01-22 04:19 - 000733000 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2018-01-24 18:05 - 2018-01-22 04:19 - 002079048 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
2018-01-11 13:00 - 2018-01-22 04:19 - 000100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000020808 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000021856 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000130512 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 001856864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000022880 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2018-01-24 18:05 - 2018-01-22 04:19 - 000145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2018-01-24 18:05 - 2018-01-22 04:19 - 000116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2018-01-11 13:00 - 2018-01-22 04:19 - 000105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000063312 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000077120 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2018-01-24 18:05 - 2018-01-22 04:19 - 000020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2018-01-24 18:05 - 2018-01-22 04:19 - 000392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2018-01-11 13:00 - 2018-01-22 04:22 - 000392520 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000026464 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000026056 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000021840 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000023376 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000066400 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 001796928 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000084424 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 001956160 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2018-01-24 18:05 - 2018-01-22 04:22 - 003859272 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000155472 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000521032 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000050512 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000042312 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000131400 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2018-01-24 18:05 - 2018-01-22 04:22 - 000218960 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000204104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000025440 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000054616 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000022880 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000100704 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2018-01-24 18:05 - 2018-01-22 04:22 - 000024416 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.shell32.compiled._winffi_shell32.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000022368 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000021856 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000022368 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000027496 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2018-01-11 13:00 - 2018-01-22 04:19 - 000349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2018-01-24 18:05 - 2018-01-22 04:22 - 000101192 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
2018-01-11 13:00 - 2018-01-22 04:22 - 000023904 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000025432 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2018-01-24 18:05 - 2018-01-22 04:19 - 000036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2018-01-24 18:05 - 2018-01-22 04:21 - 000032608 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2018-01-24 18:05 - 2018-01-22 04:19 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2018-01-11 13:52 - 2018-01-22 04:22 - 000021856 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.advapi32.compiled._winffi_advapi32.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000181064 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2018-01-11 13:00 - 2018-01-22 04:22 - 000030544 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000024384 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL
2018-01-24 18:05 - 2018-01-22 04:21 - 001638208 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2018-01-11 13:00 - 2018-01-22 04:22 - 000026464 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000545096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000359232 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2018-01-24 18:05 - 2018-01-22 04:21 - 000038216 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.pyd
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-10-30 00:24 - 2015-10-30 00:21 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2044686696-813384955-1182592829-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jason\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\forests1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{8BA0B44D-2F29-43AE-BB29-4F4EFA8208FA}] => (Allow) C:\Program Files\CyberLink\PowerDirector14\PDR10.EXE
FirewallRules: [{7E240C5D-30F1-45FE-9B82-3789EF7099AA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{54472EA3-9FC5-4A27-A88C-8D7EB92AC424}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe
FirewallRules: [{387DA37E-902C-47BA-A975-D5DA3DDC6468}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe
FirewallRules: [{6CE997F0-3080-4446-96BE-C5398D3BFDF5}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe
FirewallRules: [{FF84BDDD-CBDE-445D-B808-5D46A94AC909}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe
FirewallRules: [{741149D1-6A2C-4265-B77F-CA544C627090}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
FirewallRules: [{D1F6FFC0-CB76-41F4-B176-DBE12E0F11DB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{23A60D12-7B92-42B1-A4F8-F0BA410E1211}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AD69E116-7B31-4436-B6AB-12CAC481FC6F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3DB6E2A3-6C8E-4CED-8B47-46486DA70607}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DA29C2D9-AE60-49C4-A904-6AC205E8CA1B}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{A6359CB6-9E15-47EA-8578-ED4735A20E6F}] => (Allow) C:\Program Files\HP\HP Officejet Pro 6830\bin\FaxApplications.exe
FirewallRules: [{33D7CC18-4ED5-4CC0-9288-06405CBF25AB}] => (Allow) C:\Program Files\HP\HP Officejet Pro 6830\bin\DigitalWizards.exe
FirewallRules: [{60D2896F-9DD8-440F-BA11-781F96FD0BE3}] => (Allow) C:\Program Files\HP\HP Officejet Pro 6830\bin\SendAFax.exe
FirewallRules: [{3FA3479C-B950-4019-B214-67A72A64989A}] => (Allow) C:\Program Files\HP\HP Officejet Pro 6830\Bin\DeviceSetup.exe
FirewallRules: [{DCFF2D59-5681-413C-9D5C-9A3DF61DF527}] => (Allow) LPort=5357
FirewallRules: [{6E6B8077-B657-42D8-85C5-7F47F4F4A4DE}] => (Allow) C:\Program Files\HP\HP Officejet Pro 6830\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{5FAD4DFE-5AFA-426C-B656-5778AEF4F0FD}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoPro Quik.exe
FirewallRules: [{70003038-EC79-4954-9ACE-38426CD0A8E5}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoProMsgBus.exe
FirewallRules: [{F690358C-BD8A-4F9D-8348-9D853361629D}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoProIDService.exe
FirewallRules: [{4232D854-889A-4D55-91D0-EE7A54978661}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoProLauncher.exe
FirewallRules: [{003E7145-A1F5-4EE8-BF5F-AACA752FE6A7}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{5A4A6C00-8B4D-41E4-93BB-58FDC2F2495A}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{D4EA3E1F-F0AA-4A0D-81F1-5A3B911EDFB3}] => (Allow) C:\Program Files\iTunes\iTunes.exe
==================== Restore Points =========================
22-01-2018 15:25:56 Scheduled Checkpoint
25-01-2018 21:38:15 HPSF Applying updates
==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================
Application errors:
==================
Error: (01/29/2018 08:43:47 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AppleIEDAV.exe, version: 2.1.10.34, time stamp: 0x5a3200ff
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00000000
Faulting process id: 0x23ac
Faulting application start time: 0x01d398ac9b8f9511
Faulting application path: C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
Faulting module path: unknown
Report Id: c1aaad92-bbc5-4c80-adb6-6bf34123c584
Faulting package full name:
Faulting package-relative application ID:
Error: (01/29/2018 08:43:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40606937
Error: (01/29/2018 08:43:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40606937
Error: (01/29/2018 08:43:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/29/2018 08:43:36 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40605890
Error: (01/29/2018 08:43:36 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40605890
Error: (01/29/2018 08:43:36 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/28/2018 09:26:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1046
Error: (01/28/2018 09:26:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1046
Error: (01/28/2018 09:26:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

System errors:
=============
Error: (01/29/2018 09:28:26 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/29/2018 08:46:37 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/28/2018 08:09:56 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/28/2018 08:06:09 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/28/2018 07:58:50 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/28/2018 07:54:57 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/28/2018 07:54:57 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/28/2018 07:51:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel® Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).
Error: (01/28/2018 07:45:15 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/28/2018 07:34:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

CodeIntegrity:
===================================
  Date: 2018-01-29 11:23:39.867
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  Date: 2018-01-29 11:21:15.033
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
  Date: 2018-01-29 11:21:14.844
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
  Date: 2018-01-29 11:20:45.351
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  Date: 2018-01-29 11:18:46.680
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  Date: 2018-01-29 11:14:06.013
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
  Date: 2018-01-29 11:14:05.695
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
  Date: 2018-01-29 11:06:13.627
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
  Date: 2018-01-29 11:06:13.626
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
  Date: 2018-01-29 11:04:35.349
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

==================== Memory info ===========================
Processor: Intel® Core™ i7-7500U CPU @ 2.70GHz
Percentage of memory in use: 35%
Total physical RAM: 16256.66 MB
Available physical RAM: 10548.43 MB
Total Virtual: 18688.66 MB
Available Virtual: 12271.99 MB
==================== Drives ================================
Drive c: (WINDOWS) (Fixed) (Total:930.28 GB) (Free:798.9 GB) NTFS
Drive e: (Seagate Backup Plus Drive) (Fixed) (Total:4657.4 GB) (Free:115.01 GB) NTFS
Drive f: (easystore) (Fixed) (Total:3726.02 GB) (Free:368.68 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: F9FE28EA)
Partition: GPT.
========================================================
Disk: 1 (Size: 3726 GB) (Disk ID: 16F2A91F)
Partition: GPT.
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 4657.5 GB) (Disk ID: 9AB8690C)
Partition: GPT.
==================== End of Addition.txt ============================


BC AdBot (Login to Remove)

 


#2 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:22 PM

Posted 03 February 2018 - 01:30 PM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

step1.gif In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> https://www.bleepingcomputer.com/logreply/669454 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

step2.gifIf you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new FRST log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download FRST by Farbar from the following link if you no longer have it available and save it to your destop.

    FRST Download Link

  • When you go to the above page, there will be 32-bit and 64-bit downloads available. Please click on the appropriate one for your version of Windows. If you are unsure as to whether your Windows is 32-bit or 64-bit, please see this tutorial.
  • Double click on the FRST icon and allow it to run.
  • Agree to the usage agreement and FRST will open. Do not make any changes and click on the Scan button.
  • Notepad will open with the results.
  • Post the new logs as explained in the prep guide.
  • Close the program window, and delete the program from your desktop.


As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#3 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,695 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:08:22 PM

Posted 03 February 2018 - 08:50 PM

Greetings sea_summit and :welcome: to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.

My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.

If you would allow me to call you by your first name I would prefer to do that.

===================================================

Ground Rules:
  • First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met.
  • Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.
  • Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.
  • Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems simply stop and tell me.
  • If you do not reply to your topic after 5 days we assume it has been abandoned and I will close it.
  • When your computer is clean I will alert you of such. I will also provide for you detailed information about how you can combat future infections.
  • I would like to remind you to make no further changes to your computer unless I direct you to do so.
===================================================

Now that I am assisting you, you can expect that I will be very responsive to your situation. If you are able, I would request you check this thread at least once per day so that we can try to resolve your issues effectively and efficiently. If you are going to be delayed please be considerate and post that information so that I know you are still with me. Unfortunately, there are many people waiting to be assisted and not enough of us at BleepingComputer to go around. I appreciate your understanding and diligence.

Thank you for your patience thus far.

Your computer is clean. What hardware diagnostics have you performed?
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#4 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,695 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:08:22 PM

Posted 07 February 2018 - 01:03 PM

Greetings,

===================================================

Do You Still Need Help?

It has been 3 days since my last post.
  • Do you still need help with this?
  • If you have not replied within 48 hours I will assume you have abandoned the Topic and it will be closed.

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#5 sea_summit

sea_summit
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:22 PM

Posted 07 February 2018 - 07:42 PM

Hello,Gary. Please feel free to refer to me by name: Jason. I used the Windows memory Diagnostic Tool about 1 month ago. It discovered a problem with the memory. After some further diagnosing, I discovered that one memory module was defective. I replaced only the one module, not a pair. Do you think that might be the issue? Thank you!



#6 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,695 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:08:22 PM

Posted 07 February 2018 - 08:11 PM

Hi Jason,

That sounds consistent with what I reviewed from your logs. Since you reinstalled your Operating System I was going to have you perform a hard drive and memory test.

I am assuming you are not experiencing the same trouble. If that is the case I think you figured it out.

Let me know if there is anything else I can assist you with.

Edited by Oh My!, 08 February 2018 - 02:24 PM.

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#7 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,695 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:08:22 PM

Posted 10 February 2018 - 05:33 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users