Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Am I infected or hijacked?


  • This topic is locked This topic is locked
6 replies to this topic

#1 xxW3nd1g0xx

xxW3nd1g0xx

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:45 PM

Posted 30 June 2018 - 02:24 PM

I feel that my computer has not been normal even few days after fresh install. Security services are turned off and on while am away from the computer. I am no expert so I wanted to ask you guys if you see anything abnormal. This installation is only 2 days old and I already see things in event viewer that makes me confused about system stability.
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
Ran by M0 (administrator) on DESKTOP (30-06-2018 21:04:06)
Running from C:\Users\M0\Desktop
Loaded Profiles: M0 (Available Profiles: defaultuser0 & M0)
Platform: Windows 10 Home Version 1803 17134.137 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
() C:\Program Files (x86)\NordVPN\nordvpn-service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(NordVPN) C:\Program Files (x86)\NordVPN\NordVPN.exe
(Spotify Ltd) C:\Users\M0\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\M0\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\M0\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\M0\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\M0\AppData\Roaming\Spotify\Spotify.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-4219355738-2590880371-1464929324-1001\...\Run: [Spotify Web Helper] => C:\Users\M0\AppData\Roaming\Spotify\SpotifyWebHelper.exe [781712 2018-06-30] (Spotify Ltd)
HKU\S-1-5-21-4219355738-2590880371-1464929324-1001\...\Run: [Spotify] => C:\Users\M0\AppData\Roaming\Spotify\Spotify.exe [24221072 2018-06-30] (Spotify Ltd)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 103.86.96.100 103.86.99.100
Tcpip\..\Interfaces\{515ca89a-5f1b-4af5-b500-70916a697243}: [NameServer] 103.86.96.100,103.86.99.100
Tcpip\..\Interfaces\{f910f3e9-5171-4ea4-b7da-c58b394b2db1}: [NameServer] 103.86.96.100,103.86.99.100
Tcpip\..\Interfaces\{f910f3e9-5171-4ea4-b7da-c58b394b2db1}: [DhcpNameServer] 103.86.96.100 103.86.99.100
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-4219355738-2590880371-1464929324-1001 -> hxxps://www.duckduckgo.com/
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [431568 2018-06-22] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-06-24] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-06-24] (NVIDIA Corporation)
S4 ssh-agent; C:\Windows\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe [3925648 2018-06-29] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MsMpEng.exe [100080 2018-06-29] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [152184 2018-05-24] (Malwarebytes)
R0 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [190696 2018-06-29] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [112872 2018-06-29] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [44768 2018-06-29] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-06-29] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [103656 2018-06-30] (Malwarebytes)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_485c1c3102021986\nvlddmkm.sys [17200392 2018-06-25] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30656 2018-06-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [67432 2018-06-24] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [68112 2018-06-24] (NVIDIA Corporation)
R3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [44896 2018-06-13] (The OpenVPN Project)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46592 2018-06-29] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [340008 2018-06-29] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [59944 2018-06-29] (Microsoft Corporation)
S4 NVHDA; \SystemRoot\system32\drivers\nvhda64v.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-06-30 21:04 - 2018-06-30 21:04 - 000009050 _____ C:\Users\M0\Desktop\FRST.txt
2018-06-30 21:03 - 2018-06-30 21:04 - 000000000 ____D C:\FRST
2018-06-30 21:03 - 2018-06-30 21:03 - 002412544 _____ (Farbar) C:\Users\M0\Downloads\FRST64.exe
2018-06-30 21:03 - 2018-06-30 21:03 - 002412544 _____ (Farbar) C:\Users\M0\Desktop\FRST64.exe
2018-06-30 07:12 - 2018-06-30 20:37 - 000000000 ____D C:\Users\M0\AppData\Local\Spotify
2018-06-30 07:12 - 2018-06-30 07:12 - 000001835 _____ C:\Users\M0\Desktop\Spotify.lnk
2018-06-30 07:12 - 2018-06-30 07:12 - 000001821 _____ C:\Users\M0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2018-06-30 07:11 - 2018-06-30 20:36 - 000000000 ____D C:\Users\M0\AppData\Roaming\Spotify
2018-06-30 03:19 - 2018-06-29 17:21 - 000000000 ____D C:\Windows\Panther
2018-06-29 18:52 - 2018-06-29 18:52 - 000000000 ____D C:\Users\M0\AppData\Local\NVIDIA
2018-06-29 18:52 - 2018-06-29 18:52 - 000000000 ____D C:\Users\M0\ansel
2018-06-29 18:49 - 2018-06-29 18:54 - 000000000 ____D C:\Users\M0\AppData\Local\NVIDIA Corporation
2018-06-29 18:49 - 2018-06-29 18:49 - 000004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000004106 _____ C:\Windows\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000003976 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000003940 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000003926 _____ C:\Windows\System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000003926 _____ C:\Windows\System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000003926 _____ C:\Windows\System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 18:49 - 2018-06-29 18:49 - 000001447 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2018-06-29 18:49 - 2018-06-29 18:49 - 000000000 ____D C:\Users\M0\AppData\Local\CEF
2018-06-29 18:49 - 2018-06-29 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-06-29 18:49 - 2018-06-29 18:49 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-06-29 18:49 - 2018-06-25 19:26 - 000551840 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2018-06-29 18:49 - 2018-06-25 19:26 - 000457144 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2018-06-29 18:49 - 2018-06-24 19:27 - 002495936 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2018-06-29 18:49 - 2018-06-24 19:27 - 002163648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2018-06-29 18:49 - 2018-06-24 19:27 - 001311680 _____ (NVIDIA Corporation) C:\Windows\system32\NvRtmpStreamer64.dll
2018-06-29 18:49 - 2018-06-24 19:27 - 000217960 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2018-06-29 18:49 - 2018-06-24 19:27 - 000178024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2018-06-29 18:49 - 2018-06-24 19:27 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2018-06-29 18:49 - 2018-06-24 19:27 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
2018-06-29 18:49 - 2018-06-24 17:31 - 005947520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2018-06-29 18:49 - 2018-06-24 17:31 - 002612624 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2018-06-29 18:49 - 2018-06-24 17:31 - 001767360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2018-06-29 18:49 - 2018-06-24 17:31 - 000633792 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2018-06-29 18:49 - 2018-06-24 17:31 - 000451144 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2018-06-29 18:49 - 2018-06-24 17:31 - 000124200 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2018-06-29 18:49 - 2018-06-24 17:31 - 000083424 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2018-06-29 18:49 - 2018-06-20 12:52 - 008207422 _____ C:\Windows\system32\nvcoproc.bin
2018-06-29 18:49 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2018-06-29 18:49 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2018-06-29 18:49 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2018-06-29 18:49 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2018-06-29 18:49 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2018-06-29 18:49 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2018-06-29 18:48 - 2018-06-29 18:48 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2018-06-29 18:48 - 2018-06-29 18:48 - 000000000 ____D C:\ProgramData\Package Cache
2018-06-29 18:47 - 2018-06-25 19:25 - 040346984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 035250256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 031244248 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 013728120 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 011273632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 004350040 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 003760672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 002013784 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439836.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 001563392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 001468448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439836.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 001419200 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 001216872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 001092360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 000749472 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 000626616 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 000608512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2018-06-29 18:47 - 2018-06-25 19:25 - 000518208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 025961336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 017750344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 015165008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 004856232 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 004126128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 001356816 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 001347664 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 001157392 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 001069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 001063216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 000904720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 000814616 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 000652344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2018-06-29 18:47 - 2018-06-25 19:24 - 000634760 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2018-06-29 18:47 - 2018-06-24 19:27 - 000068112 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2018-06-29 18:47 - 2018-06-24 19:27 - 000067432 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2018-06-29 18:47 - 2018-06-24 19:27 - 000044271 _____ C:\Windows\system32\nvinfo.pb
2018-06-29 18:44 - 2018-06-29 18:44 - 000000000 ____D C:\NVIDIA
2018-06-29 18:39 - 2018-06-29 18:40 - 517043648 _____ (NVIDIA Corporation) C:\Users\M0\Downloads\398.36-desktop-win10-64bit-international-whql.exe
2018-06-29 18:13 - 2018-06-30 20:11 - 000103656 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2018-06-29 18:13 - 2018-06-29 18:51 - 000044768 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2018-06-29 18:13 - 2018-06-29 18:50 - 000112872 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2018-06-29 18:13 - 2018-06-29 18:13 - 000190696 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2018-06-29 18:12 - 2018-06-29 18:50 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-06-29 18:12 - 2018-06-29 18:12 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-06-29 18:12 - 2018-06-29 18:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-06-29 18:12 - 2018-06-29 18:12 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-06-29 18:12 - 2018-06-29 18:12 - 000000000 ____D C:\Program Files\Malwarebytes
2018-06-29 18:12 - 2018-05-24 06:55 - 000152184 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-06-29 18:11 - 2018-06-15 19:54 - 000541600 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2018-06-29 18:11 - 2018-06-15 19:50 - 001376576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-06-29 18:11 - 2018-06-15 19:49 - 021388856 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-06-29 18:11 - 2018-06-15 19:48 - 002395056 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2018-06-29 18:11 - 2018-06-15 19:48 - 000338352 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2018-06-29 18:11 - 2018-06-15 19:34 - 008623616 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2018-06-29 18:11 - 2018-06-15 19:33 - 012710400 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-06-29 18:11 - 2018-06-15 19:32 - 004708864 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2018-06-29 18:11 - 2018-06-15 19:31 - 001787392 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2018-06-29 18:11 - 2018-06-15 19:30 - 001364992 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2018-06-29 18:11 - 2018-06-15 19:30 - 001308672 _____ C:\Windows\system32\FaceProcessor.dll
2018-06-29 18:11 - 2018-06-15 19:30 - 001254400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2018-06-29 18:11 - 2018-06-15 19:30 - 001054720 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2018-06-29 18:11 - 2018-06-15 19:30 - 000878592 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2018-06-29 18:11 - 2018-06-15 19:29 - 002051072 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2018-06-29 18:11 - 2018-06-15 19:29 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-06-29 18:11 - 2018-06-15 19:29 - 000740864 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2018-06-29 18:11 - 2018-06-15 19:28 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2018-06-29 18:11 - 2018-06-15 17:25 - 020383720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-06-29 18:11 - 2018-06-15 17:22 - 001026896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-06-29 18:11 - 2018-06-15 17:16 - 002206528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVCORE.DLL
2018-06-29 18:11 - 2018-06-15 17:07 - 011901952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-06-29 18:11 - 2018-06-15 17:06 - 007987712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2018-06-29 18:11 - 2018-06-15 17:03 - 001308160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2018-06-29 18:11 - 2018-06-15 17:02 - 001452544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2018-06-29 18:11 - 2018-06-15 17:02 - 000704000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2018-06-29 18:11 - 2018-06-15 15:23 - 000788992 _____ (Microsoft Corporation) C:\Windows\system32\DHolographicDisplay.dll
2018-06-29 18:11 - 2018-06-15 07:24 - 000482472 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase_enclave.dll
2018-06-29 18:11 - 2018-06-15 07:21 - 001213368 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2018-06-29 18:11 - 2018-06-15 07:21 - 000761440 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2018-06-29 18:11 - 2018-06-15 07:19 - 001034632 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2018-06-29 18:11 - 2018-06-15 07:16 - 000562080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2018-06-29 18:11 - 2018-06-15 07:16 - 000433560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2018-06-29 18:11 - 2018-06-15 07:15 - 002563960 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2018-06-29 18:11 - 2018-06-15 07:15 - 000753152 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2018-06-29 18:11 - 2018-06-15 07:13 - 000510904 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2018-06-29 18:11 - 2018-06-15 07:13 - 000324000 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-06-29 18:11 - 2018-06-15 07:12 - 007519992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2018-06-29 18:11 - 2018-06-15 07:12 - 001012640 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2018-06-29 18:11 - 2018-06-15 07:12 - 000661152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2018-06-29 18:11 - 2018-06-15 07:12 - 000491304 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2018-06-29 18:11 - 2018-06-15 07:12 - 000260896 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2018-06-29 18:11 - 2018-06-15 07:11 - 006817872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2018-06-29 18:11 - 2018-06-15 07:11 - 001174424 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2018-06-29 18:11 - 2018-06-15 07:11 - 001018616 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2018-06-29 18:11 - 2018-06-15 07:10 - 001934400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2018-06-29 18:11 - 2018-06-15 07:10 - 001097640 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2018-06-29 18:11 - 2018-06-15 07:10 - 000717208 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2018-06-29 18:11 - 2018-06-15 07:10 - 000567176 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2018-06-29 18:11 - 2018-06-15 07:10 - 000326024 _____ (Microsoft Corporation) C:\Windows\system32\ExecModelClient.dll
2018-06-29 18:11 - 2018-06-15 07:09 - 009147800 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-06-29 18:11 - 2018-06-15 07:09 - 007436120 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2018-06-29 18:11 - 2018-06-15 07:09 - 002830240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2018-06-29 18:11 - 2018-06-15 07:09 - 002546592 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2018-06-29 18:11 - 2018-06-15 07:09 - 002422688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-06-29 18:11 - 2018-06-15 07:09 - 001945784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-06-29 18:11 - 2018-06-15 07:09 - 001798552 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2018-06-29 18:11 - 2018-06-15 07:09 - 001742272 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2018-06-29 18:11 - 2018-06-15 07:09 - 001659296 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2018-06-29 18:11 - 2018-06-15 07:09 - 001209800 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2018-06-29 18:11 - 2018-06-15 07:09 - 001112600 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2018-06-29 18:11 - 2018-06-15 07:09 - 000709848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2018-06-29 18:11 - 2018-06-15 07:09 - 000594128 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2018-06-29 18:11 - 2018-06-15 07:08 - 004403304 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 002753040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 002570712 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 002371392 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 002062488 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 001946752 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 001921944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2018-06-29 18:11 - 2018-06-15 07:08 - 001784584 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 001457128 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-06-29 18:11 - 2018-06-15 07:08 - 001288840 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 001258280 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-06-29 18:11 - 2018-06-15 07:08 - 001148800 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 001140568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-06-29 18:11 - 2018-06-15 07:08 - 000983008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2018-06-29 18:11 - 2018-06-15 07:08 - 000898760 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2018-06-29 18:11 - 2018-06-15 07:08 - 000604576 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2018-06-29 18:11 - 2018-06-15 07:08 - 000500552 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2018-06-29 18:11 - 2018-06-15 07:07 - 001611584 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2018-06-29 18:11 - 2018-06-15 07:07 - 001145696 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2018-06-29 18:11 - 2018-06-15 07:05 - 000550608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2018-06-29 18:11 - 2018-06-15 07:05 - 000444240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2018-06-29 18:11 - 2018-06-15 07:04 - 002331576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2018-06-29 18:11 - 2018-06-15 07:04 - 001462824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2018-06-29 18:11 - 2018-06-15 07:04 - 001397192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVP9DEC.dll
2018-06-29 18:11 - 2018-06-15 07:04 - 001251736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContentDeliveryManager.Utilities.dll
2018-06-29 18:11 - 2018-06-15 07:04 - 000719552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2018-06-29 18:11 - 2018-06-15 07:04 - 000105376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 006572000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 006528600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 006043600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 004788504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 002535032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 002242208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 002163184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001981384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001805752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001710240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001620872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001559368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001380192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001175056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001144120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001129640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001020160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 001011968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 000988128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 000770152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 000472136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2018-06-29 18:11 - 2018-06-15 07:03 - 000129192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2018-06-29 18:11 - 2018-06-15 06:56 - 022003712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2018-06-29 18:11 - 2018-06-15 06:53 - 025847808 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2018-06-29 18:11 - 2018-06-15 06:50 - 019403264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-06-29 18:11 - 2018-06-15 06:49 - 002962944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2018-06-29 18:11 - 2018-06-15 06:48 - 002900992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2018-06-29 18:11 - 2018-06-15 06:47 - 022714368 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-06-29 18:11 - 2018-06-15 06:46 - 005780992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2018-06-29 18:11 - 2018-06-15 06:46 - 004706816 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2018-06-29 18:11 - 2018-06-15 06:46 - 004371456 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2018-06-29 18:11 - 2018-06-15 06:46 - 004333568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2018-06-29 18:11 - 2018-06-15 06:46 - 001356800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2018-06-29 18:11 - 2018-06-15 06:46 - 000593408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2018-06-29 18:11 - 2018-06-15 06:46 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2018-06-29 18:11 - 2018-06-15 06:45 - 002548736 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2018-06-29 18:11 - 2018-06-15 06:45 - 000992768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Vpn.dll
2018-06-29 18:11 - 2018-06-15 06:45 - 000835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-06-29 18:11 - 2018-06-15 06:44 - 001632256 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2018-06-29 18:11 - 2018-06-15 06:44 - 001342976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2018-06-29 18:11 - 2018-06-15 06:44 - 000295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2018-06-29 18:11 - 2018-06-15 06:44 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\wcimage.dll
2018-06-29 18:11 - 2018-06-15 06:43 - 001626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-06-29 18:11 - 2018-06-15 06:43 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2018-06-29 18:11 - 2018-06-15 06:43 - 001110528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallService.dll
2018-06-29 18:11 - 2018-06-15 06:43 - 000675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2018-06-29 18:11 - 2018-06-15 06:43 - 000426496 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2018-06-29 18:11 - 2018-06-15 06:43 - 000312832 _____ (Microsoft Corporation) C:\Windows\system32\DiagnosticLogCSP.dll
2018-06-29 18:11 - 2018-06-15 06:42 - 003392512 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2018-06-29 18:11 - 2018-06-15 06:42 - 002367488 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2018-06-29 18:11 - 2018-06-15 06:42 - 001307648 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2018-06-29 18:11 - 2018-06-15 06:42 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2018-06-29 18:11 - 2018-06-15 06:42 - 000386048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Diagnostics.dll
2018-06-29 18:11 - 2018-06-15 06:42 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-06-29 18:11 - 2018-06-15 06:42 - 000102400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 004561920 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 003320320 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 001768448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 001724928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 000898560 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 000894464 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 000814592 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 000811520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 000625152 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2018-06-29 18:11 - 2018-06-15 06:41 - 000235520 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupManager.dll
2018-06-29 18:11 - 2018-06-15 06:40 - 007581696 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2018-06-29 18:11 - 2018-06-15 06:40 - 001550848 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2018-06-29 18:11 - 2018-06-15 06:40 - 001487360 _____ (Microsoft Corporation) C:\Windows\system32\InstallService.dll
2018-06-29 18:11 - 2018-06-15 06:40 - 000827392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2018-06-29 18:11 - 2018-06-15 06:40 - 000735744 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2018-06-29 18:11 - 2018-06-15 06:39 - 002903040 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-06-29 18:11 - 2018-06-15 06:39 - 002583552 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2018-06-29 18:11 - 2018-06-15 06:39 - 002172416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2018-06-29 18:11 - 2018-06-15 06:39 - 001535488 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-06-29 18:11 - 2018-06-15 06:39 - 001303040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2018-06-29 18:11 - 2018-06-15 06:39 - 000916992 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-06-29 18:11 - 2018-06-15 06:39 - 000847360 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2018-06-29 18:11 - 2018-06-15 06:39 - 000684544 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 002236928 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2018-06-29 18:11 - 2018-06-15 06:38 - 001854976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 001804288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 001581568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 001305088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 001070080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 001036288 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 000949248 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 000910848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 000596480 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2018-06-29 18:11 - 2018-06-15 06:38 - 000505344 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2018-06-29 18:11 - 2018-06-15 06:37 - 001374208 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2018-06-29 18:11 - 2018-06-15 06:37 - 000883712 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2018-06-29 18:11 - 2018-06-08 21:07 - 000506184 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2018-06-29 18:11 - 2018-06-08 21:02 - 004527680 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2018-06-29 18:11 - 2018-06-08 21:02 - 001634808 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2018-06-29 18:11 - 2018-06-08 21:01 - 001046944 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2018-06-29 18:11 - 2018-06-08 20:45 - 004392448 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2018-06-29 18:11 - 2018-06-08 20:44 - 001121792 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2018-06-29 18:11 - 2018-06-08 20:44 - 000340992 _____ (Microsoft Corporation) C:\Windows\system32\AcGenral.dll
2018-06-29 18:11 - 2018-06-08 20:43 - 002922496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2018-06-29 18:11 - 2018-06-08 20:43 - 001719808 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2018-06-29 18:11 - 2018-06-08 20:43 - 001659904 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2018-06-29 18:11 - 2018-06-08 20:43 - 001543680 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2018-06-29 18:11 - 2018-06-08 20:42 - 003999232 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2018-06-29 18:11 - 2018-06-08 20:42 - 003653120 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2018-06-29 18:11 - 2018-06-08 20:41 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2018-06-29 18:11 - 2018-06-08 20:40 - 000465920 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
2018-06-29 18:11 - 2018-06-08 19:04 - 001454024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2018-06-29 18:11 - 2018-06-08 18:58 - 000917408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2018-06-29 18:11 - 2018-06-08 18:47 - 003492864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
2018-06-29 18:11 - 2018-06-08 18:47 - 002895872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2018-06-29 18:11 - 2018-06-08 18:47 - 001462784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll
2018-06-29 18:11 - 2018-06-08 18:45 - 002401280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcGenral.dll
2018-06-29 18:11 - 2018-06-08 18:06 - 000976384 _____ (Microsoft Corporation) C:\Windows\system32\Spectrum.exe
2018-06-29 18:11 - 2018-06-08 18:05 - 000944640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Mirage.Internal.dll
2018-06-29 18:11 - 2018-06-08 12:38 - 005821544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2018-06-29 18:11 - 2018-06-08 12:37 - 002417840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2018-06-29 18:11 - 2018-06-08 12:35 - 001613200 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2018-06-29 18:11 - 2018-06-08 12:35 - 000613144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2018-06-29 18:11 - 2018-06-08 12:34 - 001299056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2018-06-29 18:11 - 2018-06-08 12:34 - 000748512 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2018-06-29 18:11 - 2018-06-08 12:31 - 007900984 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2018-06-29 18:11 - 2018-06-08 12:31 - 003180176 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2018-06-29 18:11 - 2018-06-08 11:30 - 003296896 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2018-06-29 18:11 - 2018-06-08 11:30 - 001363632 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2018-06-29 18:11 - 2018-06-08 11:30 - 001017080 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2018-06-29 18:11 - 2018-06-08 11:30 - 000722808 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 004970360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 003283408 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 002462272 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 001792808 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 001364184 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 001190152 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 000678840 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 000416144 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 000266656 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2018-06-29 18:11 - 2018-06-08 11:29 - 000084288 _____ (Microsoft Corporation) C:\Windows\system32\LanguageOverlayUtil.dll
2018-06-29 18:11 - 2018-06-08 11:12 - 000861616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2018-06-29 18:11 - 2018-06-08 11:12 - 000786176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-06-29 18:11 - 2018-06-08 11:10 - 002479272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2018-06-29 18:11 - 2018-06-08 11:10 - 002307336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2018-06-29 18:11 - 2018-06-08 11:10 - 001988072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-06-29 18:11 - 2018-06-08 11:10 - 000880152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2018-06-29 18:11 - 2018-06-08 11:10 - 000457152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll
2018-06-29 18:11 - 2018-06-08 11:09 - 004469832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2018-06-29 18:11 - 2018-06-08 11:09 - 002486992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll
2018-06-29 18:11 - 2018-06-08 11:09 - 001584128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2018-06-29 18:11 - 2018-06-08 11:09 - 001077504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2018-06-29 18:11 - 2018-06-08 11:09 - 000553248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2018-06-29 18:11 - 2018-06-08 11:00 - 001285120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2018-06-29 18:11 - 2018-06-08 11:00 - 000329216 _____ (Microsoft Corporation) C:\Windows\system32\credprovs.dll
2018-06-29 18:11 - 2018-06-08 10:59 - 006032384 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2018-06-29 18:11 - 2018-06-08 10:59 - 004867072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-06-29 18:11 - 2018-06-08 10:59 - 001318400 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2018-06-29 18:11 - 2018-06-08 10:59 - 000564736 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2018-06-29 18:11 - 2018-06-08 10:58 - 003712512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-06-29 18:11 - 2018-06-08 10:58 - 001676800 _____ (Microsoft Corporation) C:\Windows\system32\CoreShell.dll
2018-06-29 18:11 - 2018-06-08 10:57 - 003348992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2018-06-29 18:11 - 2018-06-08 10:57 - 000483328 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2018-06-29 18:11 - 2018-06-08 10:56 - 005307392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2018-06-29 18:11 - 2018-06-08 10:56 - 003293696 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2018-06-29 18:11 - 2018-06-08 10:56 - 002364928 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2018-06-29 18:11 - 2018-06-08 10:56 - 001395200 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2018-06-29 18:11 - 2018-06-08 10:56 - 000916480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-29 18:11 - 2018-06-08 10:56 - 000908800 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2018-06-29 18:11 - 2018-06-08 10:56 - 000869376 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-29 18:11 - 2018-06-08 10:56 - 000858112 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2018-06-29 18:11 - 2018-06-08 10:56 - 000389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2018-06-29 18:11 - 2018-06-08 10:55 - 003441152 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-06-29 18:11 - 2018-06-08 10:55 - 002248192 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2018-06-29 18:11 - 2018-06-08 10:55 - 002061824 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2018-06-29 18:11 - 2018-06-08 10:55 - 001192448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2018-06-29 18:11 - 2018-06-08 10:55 - 001171968 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2018-06-29 18:11 - 2018-06-08 10:55 - 001160192 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-06-29 18:11 - 2018-06-08 10:55 - 000776192 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-06-29 18:11 - 2018-06-08 10:55 - 000667648 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2018-06-29 18:11 - 2018-06-08 10:55 - 000652800 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2018-06-29 18:11 - 2018-06-08 10:54 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-06-29 18:11 - 2018-06-08 10:54 - 002789376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2018-06-29 18:11 - 2018-06-08 10:54 - 001586176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-06-29 18:11 - 2018-06-08 10:54 - 001128448 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2018-06-29 18:11 - 2018-06-08 10:54 - 000999936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2018-06-29 18:11 - 2018-06-08 10:54 - 000950272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2018-06-29 18:11 - 2018-06-08 10:54 - 000646656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-29 18:11 - 2018-06-08 10:53 - 001675264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2018-06-29 18:11 - 2018-06-08 10:53 - 000669696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-06-29 18:11 - 2018-06-06 20:57 - 003733320 _____ C:\Windows\system32\Windows.Mirage.dll
2018-06-29 18:11 - 2018-06-06 06:20 - 002841312 _____ C:\Windows\SysWOW64\Windows.Mirage.dll
2018-06-29 18:11 - 2018-06-02 00:54 - 001825792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2018-06-29 18:11 - 2018-05-20 21:45 - 000308408 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-06-29 18:11 - 2018-05-20 21:42 - 001649760 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2018-06-29 18:11 - 2018-05-20 21:23 - 000947712 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2018-06-29 18:11 - 2018-05-20 21:23 - 000899072 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2018-06-29 18:11 - 2018-05-20 21:22 - 001665024 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2018-06-29 18:11 - 2018-05-20 21:22 - 000804352 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2018-06-29 18:11 - 2018-05-20 20:14 - 001490144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2018-06-29 18:11 - 2018-05-20 20:00 - 000864768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl
2018-06-29 18:11 - 2018-05-20 19:59 - 000747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2018-06-29 18:11 - 2018-05-20 18:59 - 023862784 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2018-06-29 18:11 - 2018-05-20 18:45 - 001271296 _____ (Microsoft Corporation) C:\Windows\system32\HoloSI.PCShell.dll
2018-06-29 18:11 - 2018-05-20 18:35 - 000677376 _____ (Microsoft Corporation) C:\Windows\system32\HeadTrackerStorage.dll
2018-06-29 18:11 - 2018-05-20 13:53 - 002178136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2018-06-29 18:11 - 2018-05-20 13:53 - 001017088 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2018-06-29 18:11 - 2018-05-20 13:53 - 001012408 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2018-06-29 18:11 - 2018-05-20 13:53 - 000088472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2018-06-29 18:11 - 2018-05-20 13:52 - 000735560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2018-06-29 18:11 - 2018-05-20 13:52 - 000347704 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-06-29 18:11 - 2018-05-20 13:34 - 016592384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2018-06-29 18:11 - 2018-05-20 13:34 - 000861096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2018-06-29 18:11 - 2018-05-20 13:33 - 001665920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2018-06-29 18:11 - 2018-05-20 13:32 - 001034096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2018-06-29 18:11 - 2018-05-20 13:32 - 000560488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2018-06-29 18:11 - 2018-05-20 13:32 - 000286200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-06-29 18:11 - 2018-05-20 13:31 - 001456640 _____ (Microsoft Corporation) C:\Windows\system32\WpcDesktopMonSvc.dll
2018-06-29 18:11 - 2018-05-20 13:30 - 008188928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2018-06-29 18:11 - 2018-05-20 13:26 - 003392512 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2018-06-29 18:11 - 2018-05-20 13:23 - 013873152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2018-06-29 18:11 - 2018-05-20 13:23 - 000933376 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2018-06-29 18:11 - 2018-05-20 13:21 - 001210880 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2018-06-29 18:11 - 2018-05-20 13:21 - 000960512 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2018-06-29 18:11 - 2018-05-20 13:21 - 000783360 _____ (Microsoft Corporation) C:\Windows\system32\DolbyHrtfEnc.dll
2018-06-29 18:11 - 2018-05-20 13:17 - 002699776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2018-06-29 18:11 - 2018-05-20 13:16 - 006661120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2018-06-29 18:11 - 2018-05-20 13:12 - 000860160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2018-06-29 18:11 - 2018-05-20 13:11 - 001005568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2018-06-29 18:11 - 2018-04-28 16:03 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-06-29 18:11 - 2018-04-28 16:03 - 000150528 _____ (Microsoft Corporation) C:\Windows\system32\SharedPCCSP.dll
2018-06-29 18:11 - 2018-04-28 16:00 - 000695296 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2018-06-29 18:11 - 2018-04-28 15:58 - 001855488 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2018-06-29 18:11 - 2018-04-28 15:18 - 000150016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-06-29 18:11 - 2018-04-28 15:14 - 000581120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2018-06-29 18:11 - 2018-04-28 15:12 - 001380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2018-06-29 18:11 - 2018-04-28 13:17 - 019525120 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2018-06-29 18:11 - 2018-04-28 12:58 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Analog.dll
2018-06-29 18:11 - 2018-04-28 06:31 - 000473496 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2018-06-29 18:11 - 2018-04-28 06:29 - 001565592 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2018-06-29 18:11 - 2018-04-28 06:29 - 000788216 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2018-06-29 18:11 - 2018-04-28 06:29 - 000776880 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2018-06-29 18:11 - 2018-04-28 06:29 - 000494488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2018-06-29 18:11 - 2018-04-28 06:29 - 000382872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2018-06-29 18:11 - 2018-04-28 06:14 - 000434584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2018-06-29 18:11 - 2018-04-28 06:12 - 000606448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2018-06-29 18:11 - 2018-04-28 05:59 - 000553984 _____ (Microsoft Corporation) C:\Windows\system32\PerceptionSimulationExtensions.dll
2018-06-29 18:11 - 2018-04-28 05:58 - 003086336 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2018-06-29 18:11 - 2018-04-28 05:55 - 000543744 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-06-29 18:11 - 2018-04-28 05:51 - 000524800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-06-29 18:11 - 2018-04-28 04:43 - 001953280 _____ C:\Windows\system32\rdpnano.dll
2018-06-29 18:10 - 2018-06-15 19:55 - 000542888 _____ C:\Windows\system32\FaceProcessorCore.dll
2018-06-29 18:10 - 2018-06-15 19:53 - 000348256 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2018-06-29 18:10 - 2018-06-15 19:53 - 000094104 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2018-06-29 18:10 - 2018-06-15 19:35 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2018-06-29 18:10 - 2018-06-15 19:34 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\DsmUserTask.exe
2018-06-29 18:10 - 2018-06-15 19:34 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\perfnet.dll
2018-06-29 18:10 - 2018-06-15 19:33 - 000182784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2018-06-29 18:10 - 2018-06-15 19:33 - 000156160 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupManagerAPI.dll
2018-06-29 18:10 - 2018-06-15 19:33 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2018-06-29 18:10 - 2018-06-15 19:32 - 000301568 _____ (Microsoft Corporation) C:\Windows\system32\AcLayers.dll
2018-06-29 18:10 - 2018-06-15 19:32 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2018-06-29 18:10 - 2018-06-15 19:31 - 001605632 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2018-06-29 18:10 - 2018-06-15 19:31 - 000907776 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2018-06-29 18:10 - 2018-06-15 19:31 - 000220672 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-06-29 18:10 - 2018-06-15 19:30 - 001004032 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2018-06-29 18:10 - 2018-06-15 19:30 - 000615424 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2018-06-29 18:10 - 2018-06-15 19:30 - 000391680 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-06-29 18:10 - 2018-06-15 19:29 - 002084352 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-06-29 18:10 - 2018-06-15 19:29 - 000932352 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2018-06-29 18:10 - 2018-06-15 19:29 - 000248832 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2018-06-29 18:10 - 2018-06-15 19:29 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSoftwareInstallationClient.dll
2018-06-29 18:10 - 2018-06-15 19:28 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2018-06-29 18:10 - 2018-06-15 19:28 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2018-06-29 18:10 - 2018-06-15 17:06 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfnet.dll
2018-06-29 18:10 - 2018-06-15 17:04 - 000851968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2018-06-29 18:10 - 2018-06-15 17:04 - 000373248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcLayers.dll
2018-06-29 18:10 - 2018-06-15 17:04 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-06-29 18:10 - 2018-06-15 17:03 - 000831488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2018-06-29 18:10 - 2018-06-15 17:03 - 000667648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-06-29 18:10 - 2018-06-15 17:03 - 000485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2018-06-29 18:10 - 2018-06-15 17:02 - 000775168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2018-06-29 18:10 - 2018-06-15 17:01 - 002015744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-06-29 18:10 - 2018-06-15 17:01 - 000228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2018-06-29 18:10 - 2018-06-15 17:01 - 000080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2018-06-29 18:10 - 2018-06-15 15:23 - 001008640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MixedRealityCapture.dll
2018-06-29 18:10 - 2018-06-15 14:09 - 000868864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-29 18:10 - 2018-06-15 09:11 - 000611232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2018-06-29 18:10 - 2018-06-15 09:10 - 000048544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storufs.sys
2018-06-29 18:10 - 2018-06-15 09:03 - 000083360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2018-06-29 18:10 - 2018-06-15 07:19 - 000116632 _____ (Microsoft Corporation) C:\Windows\system32\DTUHandler.exe
2018-06-29 18:10 - 2018-06-15 07:19 - 000093600 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthProxyStub.dll
2018-06-29 18:10 - 2018-06-15 07:18 - 000272296 _____ (Microsoft Corporation) C:\Windows\system32\SgrmEnclave.dll
2018-06-29 18:10 - 2018-06-15 07:18 - 000269248 _____ (Microsoft Corporation) C:\Windows\system32\SgrmEnclave_secure.dll
2018-06-29 18:10 - 2018-06-15 07:18 - 000228768 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthAgent.dll
2018-06-29 18:10 - 2018-06-15 07:15 - 002718624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-06-29 18:10 - 2018-06-15 07:12 - 000118872 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2018-06-29 18:10 - 2018-06-15 07:11 - 000134560 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2018-06-29 18:10 - 2018-06-15 07:10 - 000170904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-06-29 18:10 - 2018-06-15 07:09 - 000885848 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2018-06-29 18:10 - 2018-06-15 07:09 - 000247984 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2018-06-29 18:10 - 2018-06-15 07:08 - 001150408 _____ (Microsoft Corporation) C:\Windows\system32\MSVP9DEC.dll
2018-06-29 18:10 - 2018-06-15 07:08 - 000945568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2018-06-29 18:10 - 2018-06-15 07:08 - 000642088 _____ (Microsoft Corporation) C:\Windows\system32\msvcp_win.dll
2018-06-29 18:10 - 2018-06-15 07:08 - 000413816 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2018-06-29 18:10 - 2018-06-15 07:08 - 000072768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WindowsTrustedRT.sys
2018-06-29 18:10 - 2018-06-15 07:04 - 000281080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExecModelClient.dll
2018-06-29 18:10 - 2018-06-15 07:03 - 000567144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2018-06-29 18:10 - 2018-06-15 07:03 - 000356960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2018-06-29 18:10 - 2018-06-15 07:03 - 000232488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2018-06-29 18:10 - 2018-06-15 06:48 - 000311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Diagnostics.dll
2018-06-29 18:10 - 2018-06-15 06:47 - 001360384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSPhotography.dll
2018-06-29 18:10 - 2018-06-15 06:47 - 000622080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsreg.dll
2018-06-29 18:10 - 2018-06-15 06:47 - 000515072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2018-06-29 18:10 - 2018-06-15 06:47 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll
2018-06-29 18:10 - 2018-06-15 06:46 - 001295872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll
2018-06-29 18:10 - 2018-06-15 06:46 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2018-06-29 18:10 - 2018-06-15 06:46 - 000331264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2018-06-29 18:10 - 2018-06-15 06:46 - 000224768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2018-06-29 18:10 - 2018-06-15 06:45 - 000871424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2018-06-29 18:10 - 2018-06-15 06:45 - 000740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2018-06-29 18:10 - 2018-06-15 06:45 - 000619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2018-06-29 18:10 - 2018-06-15 06:45 - 000615424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2018-06-29 18:10 - 2018-06-15 06:45 - 000578560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2018-06-29 18:10 - 2018-06-15 06:45 - 000380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2018-06-29 18:10 - 2018-06-15 06:45 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\autopilot.dll
2018-06-29 18:10 - 2018-06-15 06:45 - 000019968 _____ (Microsoft Corporation) C:\Windows\system32\DTUHandlerPS.dll
2018-06-29 18:10 - 2018-06-15 06:44 - 000873472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2018-06-29 18:10 - 2018-06-15 06:44 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2018-06-29 18:10 - 2018-06-15 06:44 - 000185344 _____ (Microsoft Corporation) C:\Windows\system32\InstallServiceTasks.dll
2018-06-29 18:10 - 2018-06-15 06:44 - 000135680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll
2018-06-29 18:10 - 2018-06-15 06:44 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\updatecsp.dll
2018-06-29 18:10 - 2018-06-15 06:44 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cellulardatacapabilityhandler.dll
2018-06-29 18:10 - 2018-06-15 06:43 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\RdpRelayTransport.dll
2018-06-29 18:10 - 2018-06-15 06:43 - 000209408 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2018-06-29 18:10 - 2018-06-15 06:43 - 000208384 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2018-06-29 18:10 - 2018-06-15 06:43 - 000191488 _____ (Microsoft Corporation) C:\Windows\system32\VideoHandlers.dll
2018-06-29 18:10 - 2018-06-15 06:43 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2018-06-29 18:10 - 2018-06-15 06:43 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2018-06-29 18:10 - 2018-06-15 06:42 - 000978432 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2018-06-29 18:10 - 2018-06-15 06:42 - 000558592 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2018-06-29 18:10 - 2018-06-15 06:42 - 000431104 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2018-06-29 18:10 - 2018-06-15 06:42 - 000319488 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2018-06-29 18:10 - 2018-06-15 06:42 - 000273920 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2018-06-29 18:10 - 2018-06-15 06:42 - 000216064 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2018-06-29 18:10 - 2018-06-15 06:42 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2018-06-29 18:10 - 2018-06-15 06:41 - 000953856 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2018-06-29 18:10 - 2018-06-15 06:41 - 000898560 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2018-06-29 18:10 - 2018-06-15 06:41 - 000270336 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2018-06-29 18:10 - 2018-06-15 06:41 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManager.dll
2018-06-29 18:10 - 2018-06-15 06:41 - 000265728 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2018-06-29 18:10 - 2018-06-15 06:40 - 001708544 _____ (Microsoft Corporation) C:\Windows\system32\MSPhotography.dll
2018-06-29 18:10 - 2018-06-15 06:40 - 000197632 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll
2018-06-29 18:10 - 2018-06-15 06:36 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
2018-06-29 18:10 - 2018-06-15 05:23 - 000001310 _____ C:\Windows\system32\tcbres.wim
2018-06-29 18:10 - 2018-06-08 21:02 - 000661160 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2018-06-29 18:10 - 2018-06-08 20:47 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2018-06-29 18:10 - 2018-06-08 20:46 - 000584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2018-06-29 18:10 - 2018-06-08 20:45 - 001560576 _____ (Microsoft Corporation) C:\Windows\system32\msdt.exe
2018-06-29 18:10 - 2018-06-08 20:45 - 000808960 _____ C:\Windows\system32\MBR2GPT.EXE
2018-06-29 18:10 - 2018-06-08 20:44 - 000625152 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2018-06-29 18:10 - 2018-06-08 20:44 - 000285184 _____ (Microsoft Corporation) C:\Windows\system32\wlidcredprov.dll
2018-06-29 18:10 - 2018-06-08 20:43 - 003640832 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2018-06-29 18:10 - 2018-06-08 20:42 - 000503296 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2018-06-29 18:10 - 2018-06-08 20:41 - 002019840 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2018-06-29 18:10 - 2018-06-08 20:41 - 001180672 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2018-06-29 18:10 - 2018-06-08 20:41 - 000182272 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2018-06-29 18:10 - 2018-06-08 18:50 - 001508352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdt.exe
2018-06-29 18:10 - 2018-06-08 18:47 - 001032704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2018-06-29 18:10 - 2018-06-08 18:47 - 000231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcredprov.dll
2018-06-29 18:10 - 2018-06-08 18:46 - 003444224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2018-06-29 18:10 - 2018-06-08 18:46 - 000908288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2018-06-29 18:10 - 2018-06-08 16:00 - 000658432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2018-06-29 18:10 - 2018-06-08 12:31 - 000029600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\uefi.sys
2018-06-29 18:10 - 2018-06-08 12:30 - 000705440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2018-06-29 18:10 - 2018-06-08 11:31 - 000226720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Ucx01000.sys
2018-06-29 18:10 - 2018-06-08 11:30 - 001063328 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2018-06-29 18:10 - 2018-06-08 11:30 - 000723360 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2018-06-29 18:10 - 2018-06-08 11:30 - 000565152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2018-06-29 18:10 - 2018-06-08 11:30 - 000527264 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2018-06-29 18:10 - 2018-06-08 11:30 - 000194456 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2018-06-29 18:10 - 2018-06-08 11:30 - 000137568 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-06-29 18:10 - 2018-06-08 11:29 - 002590400 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2018-06-29 18:10 - 2018-06-08 11:29 - 001026976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2018-06-29 18:10 - 2018-06-08 11:29 - 000659096 _____ (Microsoft Corporation) C:\Windows\system32\StateRepository.Core.dll
2018-06-29 18:10 - 2018-06-08 11:29 - 000375712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2018-06-29 18:10 - 2018-06-08 11:29 - 000313592 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2018-06-29 18:10 - 2018-06-08 11:29 - 000164768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2018-06-29 18:10 - 2018-06-08 11:29 - 000158720 _____ (Microsoft Corporation) C:\Windows\system32\vertdll.dll
2018-06-29 18:10 - 2018-06-08 11:29 - 000057960 _____ (Microsoft Corporation) C:\Windows\system32\kernel.appcore.dll
2018-06-29 18:10 - 2018-06-08 11:10 - 000097176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-06-29 18:10 - 2018-06-08 11:09 - 000607648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2018-06-29 18:10 - 2018-06-08 11:09 - 000568720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryPS.dll
2018-06-29 18:10 - 2018-06-08 11:09 - 000064648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LanguageOverlayUtil.dll
2018-06-29 18:10 - 2018-06-08 11:09 - 000050208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel.appcore.dll
2018-06-29 18:10 - 2018-06-08 11:03 - 000906752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-29 18:10 - 2018-06-08 11:03 - 000038400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryCore.dll
2018-06-29 18:10 - 2018-06-08 11:03 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mskssrv.sys
2018-06-29 18:10 - 2018-06-08 11:02 - 000096768 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
2018-06-29 18:10 - 2018-06-08 11:02 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\edpnotify.exe
2018-06-29 18:10 - 2018-06-08 11:02 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
2018-06-29 18:10 - 2018-06-08 11:01 - 000342528 _____ (Microsoft Corporation) C:\Windows\system32\browserexport.exe
2018-06-29 18:10 - 2018-06-08 11:01 - 000295424 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2018-06-29 18:10 - 2018-06-08 11:01 - 000294912 _____ (Microsoft Corporation) C:\Windows\system32\TDLMigration.dll
2018-06-29 18:10 - 2018-06-08 11:01 - 000182272 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerCsp.dll
2018-06-29 18:10 - 2018-06-08 11:01 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
2018-06-29 18:10 - 2018-06-08 11:01 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2018-06-29 18:10 - 2018-06-08 11:00 - 000275456 _____ (Microsoft Corporation) C:\Windows\system32\SIHClient.exe
2018-06-29 18:10 - 2018-06-08 11:00 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2018-06-29 18:10 - 2018-06-08 11:00 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManagerClient.dll
2018-06-29 18:10 - 2018-06-08 11:00 - 000075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2018-06-29 18:10 - 2018-06-08 10:59 - 000983040 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2018-06-29 18:10 - 2018-06-08 10:59 - 000673792 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2018-06-29 18:10 - 2018-06-08 10:59 - 000456704 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2018-06-29 18:10 - 2018-06-08 10:59 - 000177152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryUpgrade.dll
2018-06-29 18:10 - 2018-06-08 10:59 - 000174080 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2018-06-29 18:10 - 2018-06-08 10:58 - 000781824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2018-06-29 18:10 - 2018-06-08 10:58 - 000239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
2018-06-29 18:10 - 2018-06-08 10:58 - 000029184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerCookies.exe
2018-06-29 18:10 - 2018-06-08 10:57 - 000401920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2018-06-29 18:10 - 2018-06-08 10:57 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2018-06-29 18:10 - 2018-06-08 10:57 - 000150016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-29 18:10 - 2018-06-08 10:57 - 000038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbauth.dll
2018-06-29 18:10 - 2018-06-08 10:56 - 000871424 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-29 18:10 - 2018-06-08 10:56 - 000715776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2018-06-29 18:10 - 2018-06-08 10:56 - 000466432 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2018-06-29 18:10 - 2018-06-08 10:56 - 000264704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovs.dll
2018-06-29 18:10 - 2018-06-08 10:55 - 001242112 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2018-06-29 18:10 - 2018-06-08 10:55 - 000932352 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2018-06-29 18:10 - 2018-06-08 10:55 - 000849408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-29 18:10 - 2018-06-08 10:55 - 000778752 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2018-06-29 18:10 - 2018-06-08 10:55 - 000630784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-29 18:10 - 2018-06-08 10:55 - 000401920 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2018-06-29 18:10 - 2018-06-08 10:54 - 001348096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
2018-06-29 18:10 - 2018-06-08 10:54 - 000857088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2018-06-29 18:10 - 2018-06-08 10:54 - 000842240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2018-06-29 18:10 - 2018-06-08 10:54 - 000729088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FlightSettings.dll
2018-06-29 18:10 - 2018-06-08 10:54 - 000593408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2018-06-29 18:10 - 2018-06-08 10:54 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2018-06-29 18:10 - 2018-06-08 10:54 - 000208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAC3ENC.DLL
2018-06-29 18:10 - 2018-06-08 10:53 - 001466368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-06-29 18:10 - 2018-06-08 10:53 - 000677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-29 18:10 - 2018-06-08 10:53 - 000648192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-29 18:10 - 2018-06-08 10:53 - 000528384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2018-06-29 18:10 - 2018-06-02 01:24 - 000713376 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2018-06-29 18:10 - 2018-06-01 07:18 - 000058524 _____ C:\Windows\system32\srms.dat
2018-06-29 18:10 - 2018-05-25 05:24 - 000340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2018-06-29 18:10 - 2018-05-20 21:42 - 000759192 _____ (Microsoft Corporation) C:\Windows\system32\LicensingWinRT.dll
2018-06-29 18:10 - 2018-05-20 21:26 - 000486912 _____ (Microsoft Corporation) C:\Windows\system32\rasplap.dll
2018-06-29 18:10 - 2018-05-20 21:23 - 004070400 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2018-06-29 18:10 - 2018-05-20 21:22 - 001292288 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2018-06-29 18:10 - 2018-05-20 21:22 - 000941056 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll
2018-06-29 18:10 - 2018-05-20 20:15 - 000653208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicensingWinRT.dll
2018-06-29 18:10 - 2018-05-20 20:02 - 000461312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasplap.dll
2018-06-29 18:10 - 2018-05-20 19:59 - 000863232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdlg.dll
2018-06-29 18:10 - 2018-05-20 18:34 - 000238592 _____ (Microsoft Corporation) C:\Windows\system32\HoloShellRuntime.dll
2018-06-29 18:10 - 2018-05-20 16:54 - 000184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\HoloShellRuntime.dll
2018-06-29 18:10 - 2018-05-20 14:33 - 000105368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2018-06-29 18:10 - 2018-05-20 13:53 - 000792984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2018-06-29 18:10 - 2018-05-20 13:53 - 000131232 _____ (Microsoft Corporation) C:\Windows\system32\rmclient.dll
2018-06-29 18:10 - 2018-05-20 13:52 - 000413080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2018-06-29 18:10 - 2018-05-20 13:52 - 000130456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvsocket.sys
2018-06-29 18:10 - 2018-05-20 13:52 - 000089984 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSup.dll
2018-06-29 18:10 - 2018-05-20 13:33 - 000101288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rmclient.dll
2018-06-29 18:10 - 2018-05-20 13:32 - 000077040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CompPkgSup.dll
2018-06-29 18:10 - 2018-05-20 13:28 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2018-06-29 18:10 - 2018-05-20 13:28 - 000111616 _____ (Microsoft Corporation) C:\Windows\system32\AppHostRegistrationVerifier.exe
2018-06-29 18:10 - 2018-05-20 13:28 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2018-06-29 18:10 - 2018-05-20 13:27 - 000344576 _____ (Microsoft Corporation) C:\Windows\system32\RasMediaManager.dll
2018-06-29 18:10 - 2018-05-20 13:27 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-29 18:10 - 2018-05-20 13:26 - 000356352 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2018-06-29 18:10 - 2018-05-20 13:26 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\wevtutil.exe
2018-06-29 18:10 - 2018-05-20 13:26 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2018-06-29 18:10 - 2018-05-20 13:26 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\TelephonyInteractiveUser.dll
2018-06-29 18:10 - 2018-05-20 13:26 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\MSHEIF.dll
2018-06-29 18:10 - 2018-05-20 13:25 - 000835584 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2018-06-29 18:10 - 2018-05-20 13:25 - 000384000 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
2018-06-29 18:10 - 2018-05-20 13:24 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-06-29 18:10 - 2018-05-20 13:24 - 000234496 _____ (Microsoft Corporation) C:\Windows\system32\DolbyMATEnc.dll
2018-06-29 18:10 - 2018-05-20 13:23 - 005951488 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2018-06-29 18:10 - 2018-05-20 13:21 - 001371136 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2018-06-29 18:10 - 2018-05-20 13:16 - 000094720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2018-06-29 18:10 - 2018-05-20 13:16 - 000081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-29 18:10 - 2018-05-20 13:16 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-06-29 18:10 - 2018-05-20 13:15 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallServiceTasks.dll
2018-06-29 18:10 - 2018-05-20 13:15 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSHEIF.dll
2018-06-29 18:10 - 2018-05-20 13:14 - 000167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtutil.exe
2018-06-29 18:10 - 2018-05-20 13:13 - 004929024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2018-06-29 18:10 - 2018-05-20 13:13 - 000317440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Phoneutil.dll
2018-06-29 18:10 - 2018-05-20 13:11 - 001036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2018-06-29 18:10 - 2018-05-20 10:26 - 000018716 _____ C:\Windows\system32\srms-apr.dat
2018-06-29 18:10 - 2018-05-18 19:08 - 000018716 _____ C:\Windows\SysWOW64\srms-apr.dat
2018-06-29 18:10 - 2018-04-28 16:01 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\MixedReality.Broker.dll
2018-06-29 18:10 - 2018-04-28 15:13 - 001585664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2018-06-29 18:10 - 2018-04-28 06:13 - 001426328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2018-06-29 18:10 - 2018-04-28 06:13 - 000665320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2018-06-29 18:10 - 2018-04-28 06:03 - 000585728 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-06-29 18:10 - 2018-04-28 06:03 - 000444416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-06-29 18:10 - 2018-04-28 06:03 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.th.dll
2018-06-29 18:10 - 2018-04-28 06:03 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.win81.dll
2018-06-29 18:10 - 2018-04-28 06:02 - 000613376 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-06-29 18:10 - 2018-04-28 06:02 - 000474624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-06-29 18:10 - 2018-04-28 06:02 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2018-06-29 18:10 - 2018-04-28 06:02 - 000142336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-06-29 18:10 - 2018-04-28 06:01 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-06-29 18:10 - 2018-04-28 06:00 - 000143360 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-06-29 18:10 - 2018-04-28 05:57 - 000019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-06-29 18:10 - 2018-04-28 05:55 - 001421312 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll
2018-06-29 18:10 - 2018-04-28 05:54 - 000561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-06-29 18:10 - 2018-04-28 05:53 - 001235968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll
2018-06-29 18:10 - 2018-04-28 05:53 - 000117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-06-29 18:07 - 2018-06-29 18:07 - 133315992 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-06-29 18:07 - 2018-06-29 18:07 - 133315992 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-06-29 18:07 - 2018-06-29 18:07 - 000000000 ____D C:\Windows\system32\MRT
2018-06-29 18:07 - 2018-06-29 18:06 - 000548000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2018-06-29 18:02 - 2018-06-29 18:02 - 000001982 _____ C:\Users\Public\Desktop\NordVPN.lnk
2018-06-29 18:02 - 2018-06-29 18:02 - 000000000 ____D C:\ProgramData\NordVpn
2018-06-29 18:02 - 2018-06-29 18:02 - 000000000 ____D C:\ProgramData\Caphyon
2018-06-29 18:01 - 2018-06-30 20:09 - 000000000 ____D C:\ProgramData\NVIDIA
2018-06-29 18:01 - 2018-06-29 18:52 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-06-29 18:01 - 2018-06-29 18:49 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-06-29 18:01 - 2018-06-29 18:49 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-06-29 18:01 - 2018-06-29 18:02 - 000000000 ____D C:\Users\M0\AppData\Local\NordVPN
2018-06-29 18:01 - 2018-06-29 18:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordVPN
2018-06-29 18:01 - 2018-06-29 18:01 - 000000000 ____D C:\Program Files (x86)\NordVPN
2018-06-29 17:58 - 2018-06-30 20:06 - 000000000 ___HD C:\Users\M0\MicrosoftEdgeBackups
2018-06-29 17:58 - 2018-06-29 17:58 - 000000000 ____D C:\Program Files (x86)\NordVPN network TAP
2018-06-29 17:52 - 2018-06-29 17:52 - 000001210 _____ C:\Users\M0\Desktop\Command Prompt.lnk
2018-06-29 17:51 - 2018-06-29 17:51 - 000000000 ____D C:\Users\M0\AppData\Local\DBG
2018-06-29 17:49 - 2018-06-29 17:49 - 000000000 ____D C:\Windows\System32\Tasks\S-1-5-21-4219355738-2590880371-1464929324-1001
2018-06-29 17:43 - 2018-06-29 17:43 - 000000000 ____D C:\Users\M0\AppData\Local\Comms
2018-06-29 17:35 - 2018-06-29 17:35 - 000001168 _____ C:\Users\M0\Desktop\Event Viewer.lnk
2018-06-29 17:35 - 2018-06-29 17:35 - 000001164 _____ C:\Users\M0\Desktop\Computer Management.lnk
2018-06-29 17:35 - 2018-06-29 17:35 - 000001158 _____ C:\Users\M0\Desktop\services.lnk
2018-06-29 17:35 - 2018-06-29 17:35 - 000001156 _____ C:\Users\M0\Desktop\Windows Firewall.lnk
2018-06-29 17:35 - 2018-06-29 17:35 - 000001116 _____ C:\Users\M0\Desktop\Disk Cleanup.lnk
2018-06-29 17:35 - 2018-06-29 17:35 - 000000354 _____ C:\Users\M0\Desktop\Control Panel.lnk
2018-06-29 17:29 - 2018-06-29 18:56 - 000793700 _____ C:\Windows\system32\PerfStringBackup.INI
2018-06-29 17:28 - 2018-06-29 17:57 - 000000000 ____D C:\Users\M0\AppData\Local\MicrosoftEdge
2018-06-29 17:28 - 2018-06-29 17:38 - 000000000 ___RD C:\Users\M0\OneDrive
2018-06-29 17:28 - 2018-06-29 17:28 - 000001417 _____ C:\Users\M0\Desktop\Microsoft Edge.lnk
2018-06-29 17:28 - 2018-06-29 17:28 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-06-29 17:27 - 2018-06-29 18:36 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-06-29 17:27 - 2018-06-29 18:36 - 000000000 ___RD C:\Users\M0\3D Objects
2018-06-29 17:27 - 2018-06-29 18:15 - 000000000 ____D C:\Users\M0\AppData\Local\Packages
2018-06-29 17:27 - 2018-06-29 17:45 - 000000000 ____D C:\Users\M0\AppData\Local\ConnectedDevicesPlatform
2018-06-29 17:27 - 2018-06-29 17:27 - 000000000 ____D C:\Users\M0\AppData\Roaming\Adobe
2018-06-29 17:27 - 2018-06-29 17:27 - 000000000 ____D C:\Users\M0\AppData\Local\VirtualStore
2018-06-29 17:27 - 2018-06-29 17:27 - 000000000 ____D C:\Users\M0\AppData\Local\Publishers
2018-06-29 17:27 - 2018-06-29 17:27 - 000000000 ____D C:\ProgramData\USOShared
2018-06-29 17:26 - 2018-06-29 18:52 - 000000000 ____D C:\Users\M0
2018-06-29 17:26 - 2018-06-29 17:26 - 000000020 ___SH C:\Users\M0\ntuser.ini
2018-06-29 17:25 - 2018-04-12 01:33 - 002752000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2018-06-29 17:23 - 2018-06-29 17:24 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2018-06-29 17:23 - 2018-06-29 17:23 - 000000020 ___SH C:\Users\defaultuser0\ntuser.ini
2018-06-29 17:23 - 2018-06-29 17:23 - 000000000 _SHDL C:\Documents and Settings
2018-06-29 17:23 - 2018-06-29 17:23 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2018-06-29 17:23 - 2018-06-29 17:23 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2018-06-29 17:23 - 2018-06-29 17:23 - 000000000 ____D C:\Users\defaultuser0
2018-06-29 17:23 - 2018-04-12 01:34 - 000001105 _____ C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-06-29 17:21 - 2018-06-29 17:21 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2018-06-29 17:20 - 2018-06-30 07:41 - 000000000 ____D C:\Windows\system32\SleepStudy
2018-06-29 17:20 - 2018-06-29 18:50 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-06-29 17:20 - 2018-06-29 18:36 - 000233856 _____ C:\Windows\system32\FNTCACHE.DAT
2018-06-29 17:20 - 2018-06-29 18:13 - 000000000 ____D C:\Windows\system32\Drivers\wd
2018-06-29 17:20 - 2018-06-29 17:20 - 000000000 ____D C:\Windows\ServiceProfiles
2018-06-13 16:55 - 2018-06-13 16:55 - 000044896 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\tapnordvpn.sys
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-06-30 20:52 - 2018-04-12 01:30 - 000000000 ____D C:\Windows\CbsTemp
2018-06-30 20:09 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\AppReadiness
2018-06-30 20:06 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-06-30 03:50 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\appcompat
2018-06-30 03:50 - 2018-04-12 01:36 - 000000000 ____D C:\Windows\INF
2018-06-30 03:18 - 2018-04-12 01:38 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2018-06-29 18:49 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\Help
2018-06-29 18:49 - 2018-04-11 23:04 - 000524288 _____ C:\Windows\system32\config\BBI
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\zu-ZA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\yo-NG
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\xh-ZA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\wo-SN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\vi-VN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\uz-Latn-UZ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ur-PK
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ug-CN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\tt-RU
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\tn-ZA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\tk-TM
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ti-ET
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\tg-Cyrl-TJ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\te-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ta-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\sw-KE
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\sr-Cyrl-RS
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\sr-Cyrl-BA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\sq-AL
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\si-LK
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\sd-Arab-PK
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\rw-RW
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\quz-PE
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\quc-Latn-GT
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\prs-AF
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\pa-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\pa-Arab-PK
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\or-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\nso-ZA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\nn-NO
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ne-NP
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\mt-MT
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\mr-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\mn-MN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ml-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\mk-MK
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\mi-NZ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\lo-LA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\lb-LU
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ky-KG
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ku-Arab-IQ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\kok-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\kn-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\km-KH
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\kk-KZ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ka-GE
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\is-IS
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ig-NG
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\id-ID
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\hy-AM
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ha-Latn-NG
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\gu-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\gd-GB
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ga-IE
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\fil-PH
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\fa-IR
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\cy-GB
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\chr-CHER-US
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\ca-ES-valencia
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\bs-Latn-BA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\bn-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\bn-BD
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\be-BY
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\az-Latn-AZ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\as-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\am-ET
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\SysWOW64\af-ZA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\zu-ZA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\yo-NG
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\xh-ZA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\wo-SN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\vi-VN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\uz-Latn-UZ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ur-PK
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ug-CN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\tt-RU
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\tn-ZA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\tk-TM
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ti-ET
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\tg-Cyrl-TJ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\te-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\sw-KE
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\sr-Cyrl-RS
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\sr-Cyrl-BA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\sq-AL
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\sd-Arab-PK
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\rw-RW
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\quz-PE
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\quc-Latn-GT
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\prs-AF
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\pa-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\pa-Arab-PK
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\or-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\nso-ZA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\nn-NO
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ne-NP
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\mt-MT
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\mr-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\mn-MN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ml-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\mk-MK
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\mi-NZ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\lo-LA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\lb-LU
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ky-KG
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ku-Arab-IQ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\kok-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\kn-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\km-KH
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\kk-KZ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ka-GE
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\is-IS
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ig-NG
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\id-ID
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\hy-AM
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ha-Latn-NG
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\gu-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\gd-GB
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ga-IE
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\fil-PH
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\fa-IR
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\cy-GB
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\chr-CHER-US
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\ca-ES-valencia
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\bs-Latn-BA
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\bn-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\bn-BD
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\be-BY
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\az-Latn-AZ
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\as-IN
2018-06-29 18:35 - 2018-04-12 11:19 - 000000000 ____D C:\Windows\system32\af-ZA
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\TextInput
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\SysWOW64\setup
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\SysWOW64\oobe
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\SysWOW64\Dism
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\ta-in
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\si-lk
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\setup
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\oobe
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\appraiser
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\am-et
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\ShellExperiences
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\Provisioning
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\bcastdvr
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-06-29 18:35 - 2018-04-11 23:04 - 000000000 ____D C:\Windows\system32\Dism
2018-06-29 18:17 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-29 18:13 - 2018-04-12 01:38 - 000000000 ___RD C:\Program Files\Windows Defender
2018-06-29 17:56 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\spool
2018-06-29 17:56 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\PolicyDefinitions
2018-06-29 17:27 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\FxsTmp
2018-06-29 17:27 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\USOPrivate
2018-06-29 17:26 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2018-06-29 17:21 - 2018-04-12 01:38 - 000000000 ___RD C:\Windows\PrintDialog
2018-06-29 17:21 - 2018-04-11 23:04 - 000032768 _____ C:\Windows\system32\config\ELAM
2018-06-06 01:29 - 2018-04-12 01:41 - 000835056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-06-06 01:29 - 2018-04-12 01:41 - 000179704 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
Some files in TEMP:
====================
2018-06-29 18:01 - 2017-10-27 18:06 - 000874368 _____ (NVIDIA Corporation) C:\Users\M0\AppData\Local\Temp\nvSCPAPI64.dll
2018-06-29 18:47 - 2017-10-27 18:06 - 000370296 _____ (NVIDIA Corporation) C:\Users\M0\AppData\Local\Temp\nvStInst.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-06-29 17:20
==================== End of FRST.txt ============================

 



BC AdBot (Login to Remove)

 


#2 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,751 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:45 AM

Posted 04 July 2018 - 01:42 PM

Greetings xxW3nd1g0xx and :welcome: to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.

My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.

If you would allow me to call you by your first name I would prefer to do that.

===================================================

Ground Rules:
  • First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met.
  • Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.
  • Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.
  • Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems simply stop and tell me.
  • If you do not reply to your topic after 5 days we assume it has been abandoned and I will close it.
  • When your computer is clean I will alert you of such. I will also provide for you detailed information about how you can combat future infections.
  • I would like to remind you to make no further changes to your computer unless I direct you to do so.
===================================================

Now that I am assisting you, you can expect that I will be very responsive to your situation. If you are able, I would request you check this thread at least once per day so that we can try to resolve your issues effectively and efficiently. If you are going to be delayed please be considerate and post that information so that I know you are still with me. Unfortunately, there are many people waiting to be assisted and not enough of us at BleepingComputer to go around. I appreciate your understanding and diligence.

Thank you for your patience thus far.

Please copy and paste the contents of the Addition.txt document that should be located on your Desktop in your reply.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#3 xxW3nd1g0xx

xxW3nd1g0xx
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:45 PM

Posted 04 July 2018 - 03:01 PM

Hi Gary. Thank you for your reply. You can call me Morten if you wish. Here is the addition.txt

 

​

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018
Ran by M0 (30-06-2018 21:04:28)
Running from C:\Users\M0\Desktop
Windows 10 Home Version 1803 17134.137 (X64) (2018-06-29 15:23:10)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================
Administrator (S-1-5-21-4219355738-2590880371-1464929324-500 - Administrator - Enabled)
DefaultAccount (S-1-5-21-4219355738-2590880371-1464929324-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-4219355738-2590880371-1464929324-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-4219355738-2590880371-1464929324-501 - Limited - Disabled)
M0 (S-1-5-21-4219355738-2590880371-1464929324-1001 - Administrator - Enabled) => C:\Users\M0
WDAGUtilityAccount (S-1-5-21-4219355738-2590880371-1464929324-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 398.36 - NVIDIA Corporation) Hidden
Malwarebytes version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
NordVPN (HKLM-x32\...\{7B3BB796-50F9-4330-B2B9-91AF9C2C343B}) (Version: 6.14.31 - NordVPN) Hidden
NordVPN (HKLM-x32\...\NordVPN 6.14.31) (Version: 6.14.31 - NordVPN)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NVIDIA GeForce Experience 3.14.0.139 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.0.139 - NVIDIA Corporation)
NVIDIA Graphics Driver 398.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 398.36 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Spotify (HKU\S-1-5-21-4219355738-2590880371-1464929324-1001\...\Spotify) (Version: 1.0.83.318.g6c07039d - Spotify AB)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4219355738-2590880371-1464929324-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\M0\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-4219355738-2590880371-1464929324-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\M0\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-4219355738-2590880371-1464929324-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\M0\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-06-24] (NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0933E0E9-4AEC-4E13-B862-C58E98306CBE} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-06-24] (NVIDIA Corporation)
Task: {200996AB-121F-481F-B7BB-D3B003A97365} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-06-24] (NVIDIA Corporation)
Task: {4C450681-3F2F-40EB-A03A-201E56361B63} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-06-24] (NVIDIA Corporation)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\Windows\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {772C8549-C9FA-4CBF-AAB6-CEB3BA091D00} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-06-24] (NVIDIA Corporation)
Task: {7925C5A1-7899-4305-AEDE-67DB127B2552} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-29] (Microsoft Corporation)
Task: {7E67D18F-31BB-4442-9948-E9B1FBA30BCB} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-06-24] (NVIDIA Corporation)
Task: {81E32649-F1E2-404D-8DAA-31D9CB65C74E} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-06-24] (NVIDIA Corporation)
Task: {89556B52-5DF1-409D-A140-8074184946B7} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-06-24] (NVIDIA Corporation)
Task: {96372CA7-E6DF-4213-A3D8-320C8BA39D11} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-06-24] (NVIDIA Corporation)
Task: {A508AE75-C3CF-43FA-AD45-1E62FAFB063E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-29] (Microsoft Corporation)
Task: {AE278297-3F17-44B6-8B2B-825ABD683397} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-06-24] (NVIDIA Corporation)
Task: {BF49FF2C-40F7-4271-8F4D-00777F8D5293} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-06-24] (NVIDIA Corporation)
Task: {D5DAD7C6-E313-4FB6-9160-85F1A811F1DD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-29] (Microsoft Corporation)
Task: {DE733E86-886B-45E7-A9BE-1807D8644F50} - System32\Tasks\S-1-5-21-4219355738-2590880371-1464929324-1001\DataSenseLiveTileTask => C:\Windows\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation)
Task: {F678834D-22D9-45CA-A59E-5E80AC652CFD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-29] (Microsoft Corporation)
Task: {F7455C21-2597-4363-89BB-617721BD3EE7} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-06-24] (NVIDIA Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============
2018-06-22 12:13 - 2018-06-22 12:13 - 000431568 _____ () C:\Program Files (x86)\NordVPN\nordvpn-service.exe
2018-06-29 18:12 - 2018-04-25 13:16 - 002297040 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-06-29 18:12 - 2018-05-30 09:22 - 002493648 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2018-06-29 18:49 - 2018-06-24 19:27 - 001314752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-04-12 01:34 - 2018-04-12 01:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2018-04-12 01:34 - 2018-04-12 01:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 01:34 - 2018-04-12 01:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-06-29 18:11 - 2018-06-08 10:56 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-05-24 14:45 - 2018-05-24 14:45 - 000250368 _____ () C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll
2018-06-29 18:49 - 2018-06-24 19:27 - 001032640 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-06-30 07:12 - 2018-06-30 07:12 - 084305808 _____ () C:\Users\M0\AppData\Roaming\Spotify\libcef.dll
2018-06-30 07:12 - 2018-06-30 07:12 - 003738000 _____ () C:\Users\M0\AppData\Roaming\Spotify\libglesv2.dll
2018-06-30 07:12 - 2018-06-30 07:12 - 000088464 _____ () C:\Users\M0\AppData\Roaming\Spotify\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-04-12 01:38 - 2018-04-12 01:36 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts

==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4219355738-2590880371-1464929324-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 103.86.96.100 - 103.86.99.100
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F033CCC2-DB7A-4880-BD8B-933E344FD841}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{8E05777B-F48D-48DA-867D-7BC7CA28CCFD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{5A996080-863E-4BD0-BFA9-4BA89FBBBCBD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{79C2B5D4-6A99-421D-943B-037727522E61}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{7650EFB5-9D8D-46A4-999D-2CDBD190AE35}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{99016ED8-BB88-46B0-B5C4-87D894070CFB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{AD6A9FFB-A5A4-4233-B07A-68B6E13BFA07}C:\users\m0\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\m0\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0261DE39-68FD-4B76-86AD-6BE0CD010F1F}C:\users\m0\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\m0\appdata\roaming\spotify\spotify.exe
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Faulty Device Manager Devices =============
Name: Remote Desktop Device Redirector Bus
Description: Remote Desktop Device Redirector Bus
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: rdpbus
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: =========================
Application errors:
==================
Error: (06/29/2018 05:57:15 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x8024402C
Command-line arguments:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2b1f36bb-c1cd-4306-bf5c-a0367c2d97d8;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (06/29/2018 05:51:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: SystemSettings.exe, version: 10.0.17134.1, time stamp: 0x2a3c4e62
Faulting module name: combase.dll, version: 10.0.17134.1, time stamp: 0xe818752e
Exception code: 0xc000041d
Fault offset: 0x00000000000363a3
Faulting process id: 0x1d44
Faulting application start time: 0x01d40fc00ba12a6d
Faulting application path: C:\Windows\ImmersiveControlPanel\SystemSettings.exe
Faulting module path: C:\Windows\System32\combase.dll
Report Id: 1641ea99-647e-43ee-96c6-890236316a6c
Faulting package full name: windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: microsoft.windows.immersivecontrolpanel
Error: (06/29/2018 05:28:29 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x8024402C
Command-line arguments:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2b1f36bb-c1cd-4306-bf5c-a0367c2d97d8;NotificationInterval=1440;Trigger=UserLogon;SessionId=2
Error: (06/29/2018 05:27:37 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON.
Error: (06/29/2018 05:27:37 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON.
Error: (06/29/2018 05:27:37 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x8024402C
Command-line arguments:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2b1f36bb-c1cd-4306-bf5c-a0367c2d97d8;NotificationInterval=1440;Trigger=TimerEvent

System errors:
=============
Error: (06/30/2018 08:22:03 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP)
Description: The server Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe!ContentProcess#{0001141C-0001-0000-27C8-6B0500000000} did not register with DCOM within the required timeout.
Error: (06/30/2018 08:21:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP)
Description: The server Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe!ContentProcess#{0001141A-0001-0000-27C8-6B0500000000} did not register with DCOM within the required timeout.
Error: (06/30/2018 08:14:55 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP)
Description: The server Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe!ContentProcess#{00011414-0001-0000-27C8-6B0500000000} did not register with DCOM within the required timeout.
Error: (06/30/2018 08:14:22 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP)
Description: The server Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe!ContentProcess#{00011412-0001-0000-27C8-6B0500000000} did not register with DCOM within the required timeout.
Error: (06/30/2018 08:12:55 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP)
Description: The server Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe!ContentProcess#{00011410-0001-0000-27C8-6B0500000000} did not register with DCOM within the required timeout.
Error: (06/30/2018 08:11:59 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP)
Description: The server Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe!ContentProcess#{0001140E-0001-0000-27C8-6B0500000000} did not register with DCOM within the required timeout.
Error: (06/30/2018 08:11:22 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP)
Description: The server Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe!ContentProcess#{0001140C-0001-0000-27C8-6B0500000000} did not register with DCOM within the required timeout.
Error: (06/30/2018 08:10:28 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP)
Description: The server Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe!ContentProcess#{0001140A-0001-0000-27C8-6B0500000000} did not register with DCOM within the required timeout.

CodeIntegrity:
===================================
Date: 2018-06-30 21:03:20.754
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-06-30 21:03:20.254
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-06-30 21:02:45.965
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-06-30 21:00:56.626
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-06-30 21:00:14.551
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-06-30 21:00:14.047
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-06-30 20:59:41.321
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-06-30 20:59:23.315
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
==================== Memory info ===========================
Processor: Intel® Core™ i7-3770K CPU @ 3.50GHz
Percentage of memory in use: 21%
Total physical RAM: 16328.47 MB
Available physical RAM: 12845.41 MB
Total Virtual: 19272.47 MB
Available Virtual: 15045.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:111.19 GB) (Free:85.9 GB) NTFS
Drive d: (ESD-ISO) (Removable) (Total:14.7 GB) (Free:11.24 GB) FAT32
\\?\Volume{e09e4dc2-2d6f-43de-a748-16e55b81376f}\ (Recovery) (Fixed) (Total:0.49 GB) (Free:0.13 GB) NTFS
\\?\Volume{f99cc5e5-33d4-4245-ba79-23e851cbfb17}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 111.8 GB) (Disk ID: 1A9A1A9A)
Partition: GPT.
========================================================
Disk: 1 (Protective MBR) (Size: 111.8 GB) (Disk ID: 00000000)
Partition: GPT.
========================================================
Disk: 2 (Protective MBR) (Size: 14.7 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt ============================


#4 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,751 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:45 AM

Posted 04 July 2018 - 05:39 PM

Greetings Morten.

My pleasure to work with you on your computer.

Your computer looks fantastic, no evidence of malware.

It appears your Windows is not properly activated, most likely because of NordVPN. See here for steps to take to resolve the issue.

Let me know how you do.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#5 xxW3nd1g0xx

xxW3nd1g0xx
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:45 PM

Posted 05 July 2018 - 03:18 AM

Thank you for your time Gary. I logged into my microsoft account on windows 10 and activation is complete. I am glad you gave my computer thumbs up :) Excellent service and many thanks 



#6 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,751 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:45 AM

Posted 05 July 2018 - 07:54 AM

You are welcome Morten. I am glad you are all set.

Here are some final things.

Now that your computer is running well it is my great pleasure to proclaim to you the Good News!

===================================================

All Clean!

--------------

Your computer is now clean.

Right click on the FRST icon and rename it to Uninstall. Right click on it again, select Run as administrator and FRST will delete itself. You may also delete any other tools or reports created during our efforts.

Please take the time to read below on how to secure the machine and take the necessary steps to keep it clean.

Lawrence Abrams, the founder of BleepingComputer.com, has developed an excellent tutorial which will provide you with the information you need to know to keep your computer secure and clean. Please take the time to read:In addition, here are some more links you might find of interest:Thank you for placing your trust in BleepingComputer. It was a pleasure serving you. ohmy_done.gif
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#7 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,751 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:45 AM

Posted 06 July 2018 - 04:54 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users