kimtaeyeon
-
Posts
18 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by kimtaeyeon
-
-
Hello,
I've updated my bios to 4KCN45WW. Currently, I haven't yet seen the problem come back. But i need to observe longer, as the problem sometimes shows up only after a few days (sometimes for only minutes since boot). I'll tell you if everything is fine, days later.
Thanks
-
-
Ye. I'm still accepting suggestions. Thanks for helping!
-
I've tried doing that too. But the problem is not going away. I'm also almost giving up in solving this.
Thanks
-
4 minutes ago, David H. Lipman said:
What is the Make and Model of the platform in question ?
Hello.
This is a Lenovo-Legion-Y520-15IKBN laptop.
Thanks
-
Hello i am having a problem with my cpu usage. System interrupts uses up 1 core of my cpu. I dont know what causes this.
Malwarebytes staff already helped me in case this is caused by a malware, but it was confirmed that there is no infection.
I alro ran xperf and I saw HDAudBus.sys having high DPC/ISR duration on the 0 core.
After seeing this i tried updating the drivers for 'High Definition Audio Controller' in the device manage but the problem still persists.
Would anyone help me with my problem?
Thanks!
-
I used that tool to remove malwarebytes. Then re-installed malwarebytes again.
I performed another scan and it's clear of threats. But i sill see my problem.
Here's the log.
Thanks
-
-
i also uninstalled utorrent and java already.
btw the system interrupts problem doesnt show up immediately after boot. it shows up after a few minutes or hours or days of using it. i dont know what triggers it
thanks
-
I've done the chrome reset with clean malwarebytes results. Then synced again chrome before doing the FRST fix.
here's the file
Thanks
-
-
Hello i am having a problem with my cpu usage. System interrupts uses up 1 core of my cpu. I dont know what causes this.
I ran malwarebytes and it didnt find any threats.
I alro ran xperf and I saw HDAudBus.sys having high DPC/ISR duration on the 0 core.
After seeing this i tried updating the drivers for 'High Definition Audio Controller' in the device manage but the problem still persists.
Would anyone help me with my problem?
Thanks!
-
Thanks! I've ran delfix, and it already removed cleaning stuff.
I assume KMS-R@1n.exe is used for pirated Windows or Microsoft Office. But i have a legit copy of windows and office, idk how ive got that.
-
Thanks! I think it fixed the sppsvc.exe cpu spikes. But i'll observe longer.
What was the reason of the cpu spikes btw? -
Here is the Fixlog.txt
-
MALWAREBYTES LOG
Malwarebytes
www.malwarebytes.com-Log Details-
Scan Date: 10/28/18
Scan Time: 6:59 PM
Log File: 7e3d82a2-daa0-11e8-a1b5-c85b76df48e9.json-Software Information-
Version: 3.6.1.2711
Components Version: 1.0.482
Update Package Version: 1.0.7577
License: Trial-System Information-
OS: Windows 10 (Build 17134.376)
CPU: x64
File System: NTFS
User: JHAKE\Lenovo-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 300496
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 9 min, 47 sec-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect-Scan Details-
Process: 0
(No malicious items detected)Module: 0
(No malicious items detected)Registry Key: 0
(No malicious items detected)Registry Value: 0
(No malicious items detected)Registry Data: 0
(No malicious items detected)Data Stream: 0
(No malicious items detected)Folder: 0
(No malicious items detected)File: 0
(No malicious items detected)Physical Sector: 0
(No malicious items detected)WMI: 0
(No malicious items detected)
(end)ADWCLEANER LOG
# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-10-23.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 10-28-2018
# Duration: 00:00:07
# OS: Windows 10 Pro
# Cleaned: 1
# Failed: 1
***** [ Services ] *****No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
No malicious registry entries cleaned.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
Not Deleted ????
Deleted Softonic EN***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
*************************[+] Delete Tracing Keys
[+] Reset Winsock*************************
AdwCleaner[S00].txt - [1297 octets] - [28/10/2018 19:11:39]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
FRST.txt
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24.10.2018
Ran by Lenovo (administrator) on JHAKE (28-10-2018 19:24:31)
Running from C:\Users\Lenovo\Downloads
Loaded Profiles: Lenovo (Available Profiles: Lenovo)
Platform: Windows 10 Pro Version 1803 17134.376 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\IntelCpHDCPSvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
() C:\Windows\KMS-R@1n.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\IntelCpHeciSvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\Nerve Center\bin\x64\PluginLoaderSvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\NisSrv.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Malwarebytes) C:\Users\Lenovo\Downloads\adwcleaner_7.2.4.0.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\Nerve Center\bin\x64\LenovoNerveCenterUpdateAgent.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\igfxEM.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16779768 2016-12-23] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1478144 2016-12-23] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1478144 2016-12-23] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1478144 2016-12-23] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-07-07] (Oracle Corporation)
HKU\S-1-5-21-3032505028-3150946390-822767072-1001\...\Run: [Speccy] => C:\Program Files\Speccy\Speccy64.exe [7117464 2018-05-02] (Piriform Ltd)
HKU\S-1-5-21-3032505028-3150946390-822767072-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3208992 2018-10-13] (Valve Corporation)
HKU\S-1-5-21-3032505028-3150946390-822767072-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATII2E.EXE [283232 2015-01-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3032505028-3150946390-822767072-1001\...\MountPoints2: {3f418978-c384-11e8-9b1b-c83dd481fae8} - "D:\Setup.exe"
Lsa: [Authentication Packages] msv1_0 SshdPinAuthLsa==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{2116fd18-a401-43a5-b732-123c4d02307c}: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{bff8365f-1408-42c6-bc88-f0db486d305d}: [DhcpNameServer] 192.168.254.254Internet Explorer:
==================
HKU\S-1-5-21-3032505028-3150946390-822767072-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-3032505028-3150946390-822767072-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2018-10-21] (Microsoft Corporation)
BHO-x32: GigagetIEHelper Class -> {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} -> C:\Windows\SysWow64\gigagetbho_v10.dll [2006-01-09] (Giganology Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2018-09-15] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\ssv.dll [2018-09-08] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\jp2ssv.dll [2018-09-08] (Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-14] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-10-21] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-14] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-10-21] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-14] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-10-21] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-14] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-10-21] (Microsoft Corporation)FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-09-15] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-05-30] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.181.2 -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll [2018-09-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.181.2 -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\plugin2\npjp2.dll [2018-09-08] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-09-15] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2018-09-15] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-06-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-06-24] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-08-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-08-05] (Google Inc.)Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1 [2018-10-28]
CHR Extension: (Slides) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-08-06]
CHR Extension: (BetterTTV) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2018-08-06]
CHR Extension: (Docs) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2018-08-06]
CHR Extension: (Google Drive) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-08-06]
CHR Extension: (Native HLS Playback) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bfgdekjhniododjcobllghembkdpdkea [2018-08-06]
CHR Extension: (YouTube) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-08-06]
CHR Extension: (Sheets) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-08-06]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2018-10-16]
CHR Extension: (Google Docs Offline) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-10]
CHR Extension: (Youtube Playback Speed Control) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hdannnflhlmdablckfkjpleikpphncik [2018-08-06]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2018-09-26]
CHR Extension: (Discord Screen Sharing) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lcbhdgefieegnkbopmgklhlpjjdgmbog [2018-08-06]
CHR Extension: (Counter for Messenger) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ldlagicdigidgnhniajpmoddkoakdoca [2018-10-20]
CHR Extension: (Take Webpage Screenshots Entirely - FireShot) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2018-09-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-08-06]
CHR Extension: (Gmail) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-08-06]
CHR Extension: (Chrome Media Router) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-27]
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\System Profile [2018-08-09]==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated)
S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384 2018-05-11] (Adobe Systems, Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems, Incorporated)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7212480 2018-08-08] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9683736 2018-10-14] (Microsoft Corporation)
R2 DAX2API; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [163336 2016-09-19] ()
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [780928 2018-07-13] (EasyAntiCheat Ltd)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [134872 2017-11-09] (ELAN Microelectronics Corp.)
S3 GameRecorderSVC; C:\Program Files\Lenovo\Nerve Center\bin\x86\GameRecorderSVC.exe [458592 2017-09-29] (Lenovo(beijing) Limited)
R2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2018-07-06] () [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6347056 2018-09-19] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-06-25] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-06-25] (NVIDIA Corporation)
R2 PluginLoaderSvc; C:\Program Files\Lenovo\Nerve Center\bin\x64\PluginLoaderSvc.exe [1016672 2017-09-29] (Lenovo(beijing) Limited)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 RtkBtManServ; C:\Windows\RtkBtManServ.exe [293352 2017-08-09] (Realtek Semiconductor Corp.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Corporation)
S4 ssh-agent; C:\Windows\System32\OpenSSH\ssh-agent.exe [495616 2018-03-11] ()
S3 sshd; C:\Windows\System32\OpenSSH\sshd.exe [970240 2018-05-20] ()
S3 SshdBroker; C:\Windows\System32\SshdBroker.dll [286720 2018-09-08] (Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\NisSrv.exe [3917016 2018-10-26] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MsMpEng.exe [114208 2018-10-26] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [18736 2018-05-17] (Intel(R) Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [152688 2018-10-18] (Malwarebytes)
S3 ETDMiniPTP; C:\Windows\System32\drivers\ETDMiniPTP.sys [27688 2017-12-25] (ELAN Microelectronic Corp.)
R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [33320 2017-12-25] (ELAN Microelectronic Corp.)
S3 FBNetFilter; C:\Windows\system32\Drivers\FBNetFlt.sys [55256 2017-09-29] (Lenovo(beijing) Limited)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [37104 2018-05-09] (Intel Corporation)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [198000 2018-10-28] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [119136 2018-10-28] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [63768 2018-10-28] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [260480 2018-10-28] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [111152 2018-10-28] (Malwarebytes)
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_ef68fde814b24256\nvlddmkm.sys [17200392 2018-06-26] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30656 2018-06-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [67432 2018-06-25] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [68112 2018-06-25] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [604160 2018-04-12] (Realtek )
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [14024 2017-08-27] ()
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [724456 2017-08-09] (Realtek Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3238368 2017-11-01] (Realtek Semiconductor Corp.)
R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [6813664 2017-05-19] (Realtek Semiconductor Corporation )
S3 smbdirect; C:\Windows\System32\DRIVERS\smbdirect.sys [152064 2018-04-12] (Microsoft Corporation)
R0 VMSNPXY; C:\Windows\System32\drivers\VmsProxyHNic.sys [36768 2018-07-22] (Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46184 2018-10-26] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [328696 2018-10-26] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [60408 2018-10-26] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\Lenovo\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)
2018-10-28 19:24 - 2018-10-28 19:26 - 000024485 _____ C:\Users\Lenovo\Downloads\FRST.txt
2018-10-28 19:23 - 2018-10-28 19:24 - 000000000 ____D C:\FRST
2018-10-28 19:17 - 2018-10-28 19:17 - 000119136 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2018-10-28 19:17 - 2018-10-28 19:17 - 000063768 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2018-10-28 19:16 - 2018-10-28 19:16 - 000260480 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-10-28 19:16 - 2018-10-28 19:16 - 000111152 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2018-10-28 18:58 - 2018-10-28 19:12 - 000000000 ____D C:\AdwCleaner
2018-10-28 18:56 - 2018-10-28 18:57 - 007592144 _____ (Malwarebytes) C:\Users\Lenovo\Downloads\adwcleaner_7.2.4.0.exe
2018-10-28 18:56 - 2018-10-28 18:56 - 002414592 _____ (Farbar) C:\Users\Lenovo\Downloads\FRST64.exe
2018-10-28 18:51 - 2018-10-28 18:51 - 000000000 ___HD C:\OneDriveTemp
2018-10-28 09:53 - 2018-10-28 09:53 - 000000000 ____D C:\Users\Lenovo\AppData\Local\mbam
2018-10-28 09:52 - 2018-10-28 09:52 - 000198000 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2018-10-28 09:52 - 2018-10-28 09:52 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-10-28 09:52 - 2018-10-28 09:52 - 000000000 ____D C:\Users\Lenovo\AppData\Local\mbamtray
2018-10-28 09:52 - 2018-10-28 09:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-10-28 09:52 - 2018-10-28 09:52 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-10-28 09:52 - 2018-10-28 09:52 - 000000000 ____D C:\Program Files\Malwarebytes
2018-10-28 09:52 - 2018-10-18 09:44 - 000152688 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-10-28 09:35 - 2018-10-28 09:37 - 078473304 _____ (Malwarebytes ) C:\Users\Lenovo\Downloads\mb3-setup-consumer-3.6.1.2711-1.0.482-1.0.7565.exe
2018-10-28 02:23 - 2018-10-28 02:23 - 000000000 ____D C:\Program Files (x86)\Synthesia
2018-10-28 02:20 - 2018-10-28 02:23 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\Synthesia
2018-10-28 02:19 - 2018-10-28 02:23 - 000001982 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synthesia.lnk
2018-10-28 02:19 - 2018-10-28 02:23 - 000001970 _____ C:\Users\Public\Desktop\Synthesia.lnk
2018-10-28 02:15 - 2018-10-28 02:16 - 001112800 _____ C:\Users\Lenovo\Documents\woowoo.pdf
2018-10-28 02:12 - 2018-10-28 02:12 - 003295368 _____ (Synthesia LLC) C:\Users\Lenovo\Downloads\Synthesia-10.3-installer.exe
2018-10-28 01:59 - 2018-10-28 01:59 - 000089165 _____ C:\Users\Lenovo\Documents\untitled.pdf
2018-10-28 01:57 - 2018-10-28 01:59 - 000000000 ____D C:\Users\Lenovo\.lilypond-fonts.cache-2
2018-10-27 12:31 - 2018-10-21 21:00 - 021386368 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-10-27 12:31 - 2018-10-21 19:41 - 001540408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2018-10-27 12:31 - 2018-10-21 15:48 - 005602456 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2018-10-27 12:31 - 2018-10-21 15:46 - 009089544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-10-27 12:31 - 2018-10-21 15:46 - 007519896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2018-10-27 12:31 - 2018-10-21 15:46 - 007432136 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2018-10-27 12:31 - 2018-10-21 15:30 - 025855488 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2018-10-27 12:31 - 2018-10-21 15:22 - 022714880 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-10-27 12:31 - 2018-10-21 15:22 - 004710912 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2018-10-27 12:31 - 2018-10-21 15:19 - 006569536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-10-27 12:31 - 2018-10-21 15:11 - 022017024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2018-10-27 12:31 - 2018-10-21 15:04 - 019403776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-10-27 12:30 - 2018-10-21 21:04 - 002267448 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2018-10-27 12:30 - 2018-10-21 21:00 - 001639560 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2018-10-27 12:30 - 2018-10-21 21:00 - 001516120 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2018-10-27 12:30 - 2018-10-21 21:00 - 000790416 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2018-10-27 12:30 - 2018-10-21 21:00 - 000396304 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-10-27 12:30 - 2018-10-21 20:59 - 000766480 _____ (Microsoft Corporation) C:\Windows\system32\LicensingWinRT.dll
2018-10-27 12:30 - 2018-10-21 20:59 - 000236728 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2018-10-27 12:30 - 2018-10-21 20:46 - 013572096 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2018-10-27 12:30 - 2018-10-21 20:46 - 004393472 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2018-10-27 12:30 - 2018-10-21 20:46 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2018-10-27 12:30 - 2018-10-21 20:45 - 012709888 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-10-27 12:30 - 2018-10-21 20:45 - 000123392 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-10-27 12:30 - 2018-10-21 20:44 - 000623104 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2018-10-27 12:30 - 2018-10-21 20:44 - 000085504 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2018-10-27 12:30 - 2018-10-21 20:43 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\AcGenral.dll
2018-10-27 12:30 - 2018-10-21 20:43 - 000276992 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
2018-10-27 12:30 - 2018-10-21 20:43 - 000182784 _____ (Microsoft Corporation) C:\Windows\system32\LanguageComponentsInstaller.dll
2018-10-27 12:30 - 2018-10-21 20:42 - 001127936 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2018-10-27 12:30 - 2018-10-21 20:42 - 001121792 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2018-10-27 12:30 - 2018-10-21 20:42 - 000765440 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2018-10-27 12:30 - 2018-10-21 20:42 - 000592896 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
2018-10-27 12:30 - 2018-10-21 20:42 - 000181248 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2018-10-27 12:30 - 2018-10-21 20:41 - 003649024 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2018-10-27 12:30 - 2018-10-21 20:41 - 001364992 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2018-10-27 12:30 - 2018-10-21 20:41 - 001180672 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2018-10-27 12:30 - 2018-10-21 20:41 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-10-27 12:30 - 2018-10-21 20:41 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2018-10-27 12:30 - 2018-10-21 20:40 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2018-10-27 12:30 - 2018-10-21 19:41 - 000023056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hvsicontainerservice.dll
2018-10-27 12:30 - 2018-10-21 19:38 - 001322376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2018-10-27 12:30 - 2018-10-21 19:38 - 000662312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2018-10-27 12:30 - 2018-10-21 19:38 - 000660480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicensingWinRT.dll
2018-10-27 12:30 - 2018-10-21 19:38 - 000221216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditionUpgradeManagerObj.dll
2018-10-27 12:30 - 2018-10-21 19:37 - 020381808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-10-27 12:30 - 2018-10-21 19:37 - 001626656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2018-10-27 12:30 - 2018-10-21 19:28 - 012501504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2018-10-27 12:30 - 2018-10-21 19:28 - 000084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2018-10-27 12:30 - 2018-10-21 19:26 - 011902464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-10-27 12:30 - 2018-10-21 19:24 - 000344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-10-27 12:30 - 2018-10-21 19:23 - 002892288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2018-10-27 12:30 - 2018-10-21 19:23 - 000622080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2018-10-27 12:30 - 2018-10-21 19:23 - 000523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2018-10-27 12:30 - 2018-10-21 19:22 - 002405888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcGenral.dll
2018-10-27 12:30 - 2018-10-21 19:22 - 000224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2018-10-27 12:30 - 2018-10-21 17:29 - 001008640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MixedRealityCapture.dll
2018-10-27 12:30 - 2018-10-21 16:44 - 000868864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-10-27 12:30 - 2018-10-21 15:54 - 001035240 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2018-10-27 12:30 - 2018-10-21 15:53 - 000272200 _____ (Microsoft Corporation) C:\Windows\system32\SgrmEnclave.dll
2018-10-27 12:30 - 2018-10-21 15:53 - 000269128 _____ (Microsoft Corporation) C:\Windows\system32\SgrmEnclave_secure.dll
2018-10-27 12:30 - 2018-10-21 15:47 - 001221128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2018-10-27 12:30 - 2018-10-21 15:47 - 001062712 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2018-10-27 12:30 - 2018-10-21 15:47 - 001029432 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2018-10-27 12:30 - 2018-10-21 15:47 - 000566776 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2018-10-27 12:30 - 2018-10-21 15:47 - 000368440 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2018-10-27 12:30 - 2018-10-21 15:47 - 000135208 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2018-10-27 12:30 - 2018-10-21 15:47 - 000076304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2018-10-27 12:30 - 2018-10-21 15:46 - 002824712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2018-10-27 12:30 - 2018-10-21 15:46 - 000717112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2018-10-27 12:30 - 2018-10-21 15:46 - 000709936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2018-10-27 12:30 - 2018-10-21 15:46 - 000611640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2018-10-27 12:30 - 2018-10-21 15:46 - 000560136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2018-10-27 12:30 - 2018-10-21 15:46 - 000497864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2018-10-27 12:30 - 2018-10-21 15:46 - 000413200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2018-10-27 12:30 - 2018-10-21 15:46 - 000171024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-10-27 12:30 - 2018-10-21 15:45 - 003283512 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll
2018-10-27 12:30 - 2018-10-21 15:45 - 002719032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-10-27 12:30 - 2018-10-21 15:45 - 001946208 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-10-27 12:30 - 2018-10-21 15:45 - 001456728 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-10-27 12:30 - 2018-10-21 15:45 - 001257880 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-10-27 12:30 - 2018-10-21 15:45 - 001140472 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-10-27 12:30 - 2018-10-21 15:45 - 001098064 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2018-10-27 12:30 - 2018-10-21 15:45 - 000982400 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2018-10-27 12:30 - 2018-10-21 15:45 - 000885968 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2018-10-27 12:30 - 2018-10-21 15:45 - 000793096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2018-10-27 12:30 - 2018-10-21 15:45 - 000607136 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2018-10-27 12:30 - 2018-10-21 15:45 - 000185120 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-10-27 12:30 - 2018-10-21 15:45 - 000175624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys
2018-10-27 12:30 - 2018-10-21 15:45 - 000139792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-10-27 12:30 - 2018-10-21 15:45 - 000058088 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-10-27 12:30 - 2018-10-21 15:28 - 016592384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2018-10-27 12:30 - 2018-10-21 15:22 - 008189440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2018-10-27 12:30 - 2018-10-21 15:22 - 004384768 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2018-10-27 12:30 - 2018-10-21 15:21 - 003392512 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2018-10-27 12:30 - 2018-10-21 15:21 - 001589248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2018-10-27 12:30 - 2018-10-21 15:21 - 000123424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-10-27 12:30 - 2018-10-21 15:20 - 003397120 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2018-10-27 12:30 - 2018-10-21 15:20 - 000760320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wnv.sys
2018-10-27 12:30 - 2018-10-21 15:20 - 000424000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2018-10-27 12:30 - 2018-10-21 15:20 - 000295224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2018-10-27 12:30 - 2018-10-21 15:20 - 000161792 _____ (Microsoft Corporation) C:\Windows\system32\spacebridge.dll
2018-10-27 12:30 - 2018-10-21 15:20 - 000141312 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2018-10-27 12:30 - 2018-10-21 15:20 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsProxyStub.dll
2018-10-27 12:30 - 2018-10-21 15:20 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\wcimage.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 006039560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 002487088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 001620776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 001130768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000808448 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000567048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000514560 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2018-10-27 12:30 - 2018-10-21 15:19 - 000505616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000463360 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000409088 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000228864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winnat.sys
2018-10-27 12:30 - 2018-10-21 15:19 - 000228352 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000209408 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000137728 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000112128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2018-10-27 12:30 - 2018-10-21 15:19 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\ofdeploy.exe
2018-10-27 12:30 - 2018-10-21 15:19 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\BthAvrcpAppSvc.dll
2018-10-27 12:30 - 2018-10-21 15:19 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhf.sys
2018-10-27 12:30 - 2018-10-21 15:19 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 005746688 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsDesktopEngine.exe
2018-10-27 12:30 - 2018-10-21 15:18 - 002738688 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000894464 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000761344 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000461824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Activities.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000395776 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000395264 _____ (Microsoft Corporation) C:\Windows\system32\BthAvctpSvc.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000275456 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000274432 _____ (Microsoft Corporation) C:\Windows\system32\DAFWSD.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000273408 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\officecsp.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2018-10-27 12:30 - 2018-10-21 15:18 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2018-10-27 12:30 - 2018-10-21 15:17 - 007577088 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2018-10-27 12:30 - 2018-10-21 15:17 - 002172928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2018-10-27 12:30 - 2018-10-21 15:17 - 001826816 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2018-10-27 12:30 - 2018-10-21 15:17 - 001668096 _____ (Microsoft Corporation) C:\Windows\system32\cdprt.dll
2018-10-27 12:30 - 2018-10-21 15:17 - 001265152 _____ (Microsoft Corporation) C:\Windows\system32\WebManagement.exe
2018-10-27 12:30 - 2018-10-21 15:17 - 000787456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2018-10-27 12:30 - 2018-10-21 15:17 - 000625152 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2018-10-27 12:30 - 2018-10-21 15:17 - 000473600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-10-27 12:30 - 2018-10-21 15:17 - 000311296 _____ (Microsoft Corporation) C:\Windows\system32\BthAvrcp.dll
2018-10-27 12:30 - 2018-10-21 15:17 - 000271872 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2018-10-27 12:30 - 2018-10-21 15:16 - 002584576 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2018-10-27 12:30 - 2018-10-21 15:16 - 002368512 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2018-10-27 12:30 - 2018-10-21 15:16 - 001535488 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-10-27 12:30 - 2018-10-21 15:16 - 000847360 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2018-10-27 12:30 - 2018-10-21 15:16 - 000514048 _____ (Microsoft Corporation) C:\Windows\system32\BTAGService.dll
2018-10-27 12:30 - 2018-10-21 15:16 - 000323584 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2018-10-27 12:30 - 2018-10-21 15:15 - 003212800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2018-10-27 12:30 - 2018-10-21 15:15 - 002904064 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-10-27 12:30 - 2018-10-21 15:15 - 001551360 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2018-10-27 12:30 - 2018-10-21 15:15 - 001058304 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2018-10-27 12:30 - 2018-10-21 15:15 - 000743936 _____ (Microsoft Corporation) C:\Windows\system32\PrintRenderAPIHost.DLL
2018-10-27 12:30 - 2018-10-21 15:15 - 000401920 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 002224640 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2018-10-27 12:30 - 2018-10-21 15:14 - 001919488 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 001854976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 001804288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 001373696 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 001097216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2018-10-27 12:30 - 2018-10-21 15:14 - 001034752 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 000932352 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 000889344 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 000796672 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 000632320 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 000453632 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 000406528 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2018-10-27 12:30 - 2018-10-21 15:14 - 000311296 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2018-10-27 12:30 - 2018-10-21 15:14 - 000176640 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2018-10-27 12:30 - 2018-10-21 15:09 - 013873664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2018-10-27 12:30 - 2018-10-21 15:07 - 006661632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2018-10-27 12:30 - 2018-10-21 15:02 - 002966528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2018-10-27 12:30 - 2018-10-21 15:02 - 002700288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2018-10-27 12:30 - 2018-10-21 15:02 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spacebridge.dll
2018-10-27 12:30 - 2018-10-21 15:01 - 004529664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsDesktopEngine.exe
2018-10-27 12:30 - 2018-10-21 15:01 - 001189376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2018-10-27 12:30 - 2018-10-21 15:01 - 000168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2018-10-27 12:30 - 2018-10-21 15:00 - 005307392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2018-10-27 12:30 - 2018-10-21 15:00 - 000288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2018-10-27 12:30 - 2018-10-21 15:00 - 000214528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scecli.dll
2018-10-27 12:30 - 2018-10-21 14:59 - 005777920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2018-10-27 12:30 - 2018-10-21 14:59 - 002258944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2018-10-27 12:30 - 2018-10-21 14:59 - 000602112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2018-10-27 12:30 - 2018-10-21 14:59 - 000578560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2018-10-27 12:30 - 2018-10-21 14:58 - 001627648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-10-27 12:30 - 2018-10-21 14:58 - 001124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdprt.dll
2018-10-27 12:30 - 2018-10-21 14:58 - 000608768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2018-10-27 12:30 - 2018-10-21 14:58 - 000415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-10-27 12:30 - 2018-10-21 14:58 - 000230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2018-10-27 12:30 - 2018-10-21 14:57 - 002611200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2018-10-27 12:30 - 2018-10-21 14:57 - 000856576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2018-10-27 12:30 - 2018-10-21 14:56 - 000735744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2018-10-27 12:30 - 2018-10-21 14:56 - 000345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2018-10-27 12:30 - 2018-10-21 13:59 - 000806320 _____ C:\Windows\SysWOW64\locale.nls
2018-10-27 12:30 - 2018-10-21 13:59 - 000806320 _____ C:\Windows\system32\locale.nls
2018-10-27 12:30 - 2018-10-21 13:59 - 000001314 _____ C:\Windows\system32\tcbres.wim
2018-10-27 12:30 - 2018-04-28 12:02 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2018-10-27 11:45 - 2018-10-27 11:48 - 000000000 ____D C:\Users\Lenovo\Downloads\produkey
2018-10-27 11:44 - 2018-10-27 11:44 - 000064875 _____ C:\Users\Lenovo\Downloads\produkey.zip
2018-10-21 03:15 - 2018-10-21 03:15 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2018-10-19 19:44 - 2018-10-19 19:44 - 000361185 _____ C:\Users\Lenovo\Downloads\EEE105MP1.pdf
2018-10-19 19:38 - 2018-10-19 19:42 - 000000000 ____D C:\EEE105
2018-10-14 14:53 - 2018-09-20 17:40 - 001022264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\lxcore.sys
2018-10-14 14:52 - 2018-09-20 17:40 - 000348160 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2018-10-14 14:52 - 2018-09-20 17:37 - 001634944 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2018-10-14 14:52 - 2018-09-20 17:23 - 006602240 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2018-10-14 14:52 - 2018-09-20 17:17 - 002874368 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2018-10-14 14:52 - 2018-09-20 17:17 - 001856000 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2018-10-14 14:52 - 2018-09-20 17:16 - 000127488 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2018-10-14 14:52 - 2018-09-20 16:46 - 001454440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2018-10-14 14:52 - 2018-09-20 16:35 - 005669888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2018-10-14 14:52 - 2018-09-20 16:29 - 002824704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2018-10-14 14:52 - 2018-09-20 16:29 - 001586176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2018-10-14 14:52 - 2018-09-20 16:28 - 000102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
2018-10-14 14:52 - 2018-09-20 12:29 - 001989232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-10-14 14:52 - 2018-09-20 12:29 - 001513032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2018-10-14 14:52 - 2018-09-20 12:29 - 000357056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2018-10-14 14:52 - 2018-09-20 12:28 - 000581792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2018-10-14 14:52 - 2018-09-20 12:13 - 003711488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-10-14 14:52 - 2018-09-20 12:11 - 000561152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-10-14 14:52 - 2018-09-20 12:11 - 000074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2018-10-14 14:52 - 2018-09-20 12:10 - 000500536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-10-14 14:52 - 2018-09-20 12:10 - 000355840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2018-10-14 14:52 - 2018-09-20 12:09 - 002462888 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-10-14 14:52 - 2018-09-20 12:09 - 002421248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-10-14 14:52 - 2018-09-20 12:09 - 001767096 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2018-10-14 14:52 - 2018-09-20 12:09 - 001540096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll
2018-10-14 14:52 - 2018-09-20 12:09 - 000713472 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2018-10-14 14:52 - 2018-09-20 12:08 - 004191232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-10-14 14:52 - 2018-09-20 11:42 - 004866560 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-10-14 14:52 - 2018-09-20 11:42 - 000433664 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2018-10-14 14:52 - 2018-09-20 11:42 - 000099328 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2018-10-14 14:52 - 2018-09-20 11:41 - 000898560 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2018-10-14 14:52 - 2018-09-20 11:41 - 000319488 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2018-10-14 14:52 - 2018-09-20 11:40 - 003090432 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2018-10-14 14:52 - 2018-09-20 11:40 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-10-14 14:52 - 2018-09-20 11:38 - 001724416 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll
2018-10-14 14:52 - 2018-09-20 11:38 - 000433664 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2018-10-14 14:52 - 2018-09-20 11:37 - 004615680 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-10-14 14:52 - 2018-09-20 09:28 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2018-10-09 17:19 - 2018-10-09 17:19 - 000103814 _____ C:\Users\Lenovo\Downloads\EEE_13_ME_4_v3.pdf
2018-10-07 20:57 - 2018-10-07 20:57 - 000014894 _____ C:\Users\Lenovo\Downloads\MP2.zip
2018-10-06 22:25 - 2018-10-06 22:25 - 000000000 ____D C:\Users\Lenovo\.android
2018-10-06 22:12 - 2018-10-06 22:12 - 000000000 ____D C:\adb
2018-10-06 18:31 - 2018-10-06 18:31 - 000000000 ____D C:\Users\Lenovo\Downloads\platform-tools_r28.0.1-windows
2018-10-06 17:57 - 2018-10-06 17:57 - 006183783 _____ C:\Users\Lenovo\Downloads\platform-tools_r28.0.1-windows.zip
2018-10-06 00:55 - 2018-09-21 17:23 - 000257848 _____ (Microsoft Corporation) C:\Windows\system32\AppVFileSystemMetadata.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 001786168 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 001626936 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 001422648 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 001038136 _____ (Microsoft Corporation) C:\Windows\system32\AppVPolicy.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000954368 _____ (Microsoft Corporation) C:\Windows\system32\AppVManifest.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000830264 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000825144 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000749880 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000670008 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000652288 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000495416 _____ (Microsoft Corporation) C:\Windows\system32\TransportDSA.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000399672 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000231424 _____ (Microsoft Corporation) C:\Windows\system32\AppVShNotify.exe
2018-10-06 00:55 - 2018-09-21 17:21 - 000228152 _____ (Microsoft Corporation) C:\Windows\system32\AppVStreamMap.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000201528 _____ (Microsoft Corporation) C:\Windows\system32\AppVStreamingUX.dll
2018-10-06 00:55 - 2018-09-21 17:21 - 000180736 _____ (Microsoft Corporation) C:\Windows\system32\AppVDllSurrogate.exe
2018-10-06 00:55 - 2018-09-21 17:21 - 000173056 _____ (Microsoft Corporation) C:\Windows\system32\AppVNice.exe
2018-10-06 00:55 - 2018-09-21 17:21 - 000034304 _____ C:\Windows\system32\SyncAppvPublishingServer.exe
2018-10-06 00:55 - 2018-09-21 17:01 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-10-06 00:55 - 2018-09-21 16:12 - 000150016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-10-06 00:55 - 2018-09-21 12:14 - 000661056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2018-10-06 00:55 - 2018-09-21 12:13 - 000480568 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2018-10-06 00:55 - 2018-09-21 12:11 - 000753056 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2018-10-06 00:55 - 2018-09-21 12:09 - 004790160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2018-10-06 00:55 - 2018-09-21 12:09 - 002253696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-10-06 00:55 - 2018-09-21 12:09 - 001427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2018-10-06 00:55 - 2018-09-21 12:09 - 000129088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2018-10-06 00:55 - 2018-09-21 12:08 - 004404720 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2018-10-06 00:55 - 2018-09-21 12:08 - 002765344 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-10-06 00:55 - 2018-09-21 12:08 - 001566720 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2018-10-06 00:55 - 2018-09-21 12:08 - 000261008 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2018-10-06 00:55 - 2018-09-21 12:07 - 000604664 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2018-10-06 00:55 - 2018-09-21 11:57 - 002900992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2018-10-06 00:55 - 2018-09-21 11:57 - 001361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSPhotography.dll
2018-10-06 00:55 - 2018-09-21 11:56 - 000331264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2018-10-06 00:55 - 2018-09-21 11:54 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2018-10-06 00:55 - 2018-09-21 11:53 - 001006080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2018-10-06 00:55 - 2018-09-21 11:43 - 001627136 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2018-10-06 00:55 - 2018-09-21 11:43 - 000052736 _____ C:\Windows\system32\runexehelper.exe
2018-10-06 00:55 - 2018-09-21 11:39 - 003320320 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2018-10-06 00:55 - 2018-09-21 11:39 - 001708544 _____ (Microsoft Corporation) C:\Windows\system32\MSPhotography.dll
2018-10-06 00:55 - 2018-09-21 11:37 - 001211904 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2018-10-06 00:55 - 2018-09-21 11:37 - 000604160 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2018-10-06 00:55 - 2018-09-21 11:36 - 001159680 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-10-06 00:55 - 2018-09-21 11:36 - 000505344 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2018-10-06 00:55 - 2018-09-08 16:12 - 000452112 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-10-06 00:55 - 2018-09-08 16:07 - 002868536 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-10-06 00:55 - 2018-09-08 16:07 - 001610552 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-10-06 00:55 - 2018-09-08 16:07 - 000792376 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-10-06 00:55 - 2018-09-08 16:07 - 000689464 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-10-06 00:55 - 2018-09-08 16:07 - 000612360 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-10-06 00:55 - 2018-09-08 16:07 - 000309560 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-10-06 00:55 - 2018-09-08 16:07 - 000144696 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-10-06 00:55 - 2018-09-08 16:07 - 000069944 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2018-10-06 00:55 - 2018-09-08 16:02 - 000645112 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-10-06 00:55 - 2018-09-08 16:02 - 000540984 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2018-10-06 00:55 - 2018-09-08 15:57 - 000204800 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2018-10-06 00:55 - 2018-09-08 15:44 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\fdBth.dll
2018-10-06 00:55 - 2018-09-08 15:43 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\SCardBi.dll
2018-10-06 00:55 - 2018-09-08 15:42 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2018-10-06 00:55 - 2018-09-08 15:42 - 000188928 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2018-10-06 00:55 - 2018-09-08 15:42 - 000169984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.XamlHost.dll
2018-10-06 00:55 - 2018-09-08 15:42 - 000114176 _____ (Microsoft Corporation) C:\Windows\system32\bthci.dll
2018-10-06 00:55 - 2018-09-08 15:41 - 000258560 _____ (Microsoft Corporation) C:\Windows\system32\SCardSvr.dll
2018-10-06 00:55 - 2018-09-08 15:40 - 001724928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2018-10-06 00:55 - 2018-09-08 15:40 - 000677888 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2018-10-06 00:55 - 2018-09-08 15:40 - 000593408 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2018-10-06 00:55 - 2018-09-08 15:40 - 000522240 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2018-10-06 00:55 - 2018-09-08 15:40 - 000402944 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2018-10-06 00:55 - 2018-09-08 15:40 - 000249344 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2018-10-06 00:55 - 2018-09-08 15:39 - 005505024 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2018-10-06 00:55 - 2018-09-08 15:39 - 002052096 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2018-10-06 00:55 - 2018-09-08 15:39 - 001787904 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2018-10-06 00:55 - 2018-09-08 15:39 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2018-10-06 00:55 - 2018-09-08 15:38 - 001288192 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2018-10-06 00:55 - 2018-09-08 15:38 - 001004544 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2018-10-06 00:55 - 2018-09-08 15:38 - 000986112 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-10-06 00:55 - 2018-09-08 15:38 - 000882688 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2018-10-06 00:55 - 2018-09-08 15:38 - 000836608 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2018-10-06 00:55 - 2018-09-08 15:37 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2018-10-06 00:55 - 2018-09-08 15:16 - 000482080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-10-06 00:55 - 2018-09-08 15:13 - 000181288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
2018-10-06 00:55 - 2018-09-08 15:03 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdBth.dll
2018-10-06 00:55 - 2018-09-08 15:02 - 000236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll
2018-10-06 00:55 - 2018-09-08 15:00 - 000548864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2018-10-06 00:55 - 2018-09-08 14:59 - 001530368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2018-10-06 00:55 - 2018-09-08 14:59 - 001452544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2018-10-06 00:55 - 2018-09-08 14:59 - 000485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2018-10-06 00:55 - 2018-09-08 14:59 - 000133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.XamlHost.dll
2018-10-06 00:55 - 2018-09-08 14:58 - 001308672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2018-10-06 00:55 - 2018-09-08 14:58 - 000897536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-10-06 00:55 - 2018-09-08 14:58 - 000775680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2018-10-06 00:55 - 2018-09-08 14:57 - 005391360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2018-10-06 00:55 - 2018-09-08 14:57 - 000625664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2018-10-06 00:55 - 2018-09-08 14:57 - 000423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2018-10-06 00:55 - 2018-09-08 14:57 - 000223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2018-10-06 00:55 - 2018-09-08 14:56 - 000080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2018-10-06 00:55 - 2018-09-08 12:08 - 000462880 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-10-06 00:55 - 2018-09-08 11:59 - 000433664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2018-10-06 00:55 - 2018-09-08 11:59 - 000361544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2018-10-06 00:55 - 2018-09-08 11:58 - 000744976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2018-10-06 00:55 - 2018-09-08 11:58 - 000376120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2018-10-06 00:55 - 2018-09-08 11:57 - 002571128 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-10-06 00:55 - 2018-09-08 11:57 - 001016984 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2018-10-06 00:55 - 2018-09-08 11:57 - 000930616 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2018-10-06 00:55 - 2018-09-08 11:57 - 000482384 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase_enclave.dll
2018-10-06 00:55 - 2018-09-08 11:57 - 000368448 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2018-10-06 00:55 - 2018-09-08 11:57 - 000267576 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2018-10-06 00:55 - 2018-09-08 11:51 - 000380728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2018-10-06 00:55 - 2018-09-08 11:45 - 000286824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2018-10-06 00:55 - 2018-09-08 11:44 - 001980984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-10-06 00:55 - 2018-09-08 11:44 - 000829752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2018-10-06 00:55 - 2018-09-08 11:43 - 001174448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2018-10-06 00:55 - 2018-09-08 11:43 - 000269104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2018-10-06 00:55 - 2018-09-08 11:32 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\SshdPinAuthLsa.dll
2018-10-06 00:55 - 2018-09-08 11:32 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dumpstorport.sys
2018-10-06 00:55 - 2018-09-08 11:31 - 000342528 _____ (Microsoft Corporation) C:\Windows\system32\browserexport.exe
2018-10-06 00:55 - 2018-09-08 11:31 - 000286720 _____ (Microsoft Corporation) C:\Windows\system32\SshdBroker.dll
2018-10-06 00:55 - 2018-09-08 11:31 - 000272384 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Proxy.dll
2018-10-06 00:55 - 2018-09-08 11:30 - 003601920 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Service.dll
2018-10-06 00:55 - 2018-09-08 11:30 - 000486912 _____ (Microsoft Corporation) C:\Windows\system32\SshSession.exe
2018-10-06 00:55 - 2018-09-08 11:30 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\SshSftp.exe
2018-10-06 00:55 - 2018-09-08 11:30 - 000189440 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2018-10-06 00:55 - 2018-09-08 11:30 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2018-10-06 00:55 - 2018-09-08 11:30 - 000101888 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2018-10-06 00:55 - 2018-09-08 11:29 - 004771840 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2018-10-06 00:55 - 2018-09-08 11:29 - 000358912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2018-10-06 00:55 - 2018-09-08 11:29 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\SshProxy.dll
2018-10-06 00:55 - 2018-09-08 11:29 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2018-10-06 00:55 - 2018-09-08 11:29 - 000183808 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll
2018-10-06 00:55 - 2018-09-08 11:29 - 000174080 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2018-10-06 00:55 - 2018-09-08 11:28 - 000481280 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2018-10-06 00:55 - 2018-09-08 11:28 - 000383488 _____ (Microsoft Corporation) C:\Windows\system32\SshBroker.dll
2018-10-06 00:55 - 2018-09-08 11:28 - 000265728 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2018-10-06 00:55 - 2018-09-08 11:28 - 000153088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft.Bluetooth.Proxy.dll
2018-10-06 00:55 - 2018-09-08 11:27 - 003348992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2018-10-06 00:55 - 2018-09-08 11:27 - 000983040 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2018-10-06 00:55 - 2018-09-08 11:27 - 000596992 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
2018-10-06 00:55 - 2018-09-08 11:27 - 000499200 _____ (Microsoft Corporation) C:\Windows\system32\winipcfile.dll
2018-10-06 00:55 - 2018-09-08 11:27 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2018-10-06 00:55 - 2018-09-08 11:26 - 002328064 _____ (Microsoft Corporation) C:\Windows\system32\winmsipc.dll
2018-10-06 00:55 - 2018-09-08 11:26 - 000814592 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2018-10-06 00:55 - 2018-09-08 11:26 - 000784896 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2018-10-06 00:55 - 2018-09-08 11:26 - 000471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TileDataRepository.dll
2018-10-06 00:55 - 2018-09-08 11:26 - 000387584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
2018-10-06 00:55 - 2018-09-08 11:26 - 000365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2018-10-06 00:55 - 2018-09-08 11:26 - 000359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipcfile.dll
2018-10-06 00:55 - 2018-09-08 11:26 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2018-10-06 00:55 - 2018-09-08 11:25 - 003553792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2018-10-06 00:55 - 2018-09-08 11:25 - 002789376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2018-10-06 00:55 - 2018-09-08 11:25 - 000882688 _____ (Microsoft Corporation) C:\Windows\system32\winipcsecproc.dll
2018-10-06 00:55 - 2018-09-08 11:25 - 000466432 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2018-10-06 00:55 - 2018-09-08 11:25 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Proximity.dll
2018-10-06 00:55 - 2018-09-08 11:24 - 001777152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmswitch.sys
2018-10-06 00:55 - 2018-09-08 11:24 - 001457664 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2018-10-06 00:55 - 2018-09-08 11:24 - 000899072 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-10-06 00:55 - 2018-09-08 11:24 - 000845824 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2018-10-06 00:55 - 2018-09-08 11:24 - 000463360 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2018-10-06 00:55 - 2018-09-08 11:23 - 001655296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmsipc.dll
2018-10-06 00:55 - 2018-09-08 11:23 - 000807936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipcsecproc.dll
2018-10-06 00:55 - 2018-09-08 11:23 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapi.dll
2018-10-06 00:55 - 2018-09-08 11:23 - 000314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Proximity.dll
2018-10-06 00:55 - 2018-09-08 11:22 - 000778240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-10-06 00:46 - 2018-09-05 06:36 - 001476904 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2018-10-03 21:49 - 2018-10-03 21:49 - 010748621 _____ C:\Users\Lenovo\Downloads\mb_manual_ga-h81m-ds2_e.pdf
2018-09-29 15:10 - 2018-09-29 15:10 - 000000000 ____D C:\Users\Lenovo\Documents\Custom Office Templates
2018-09-29 11:42 - 2018-09-29 11:42 - 000001151 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2018.lnk
2018-09-29 11:42 - 2018-09-29 11:42 - 000000000 ____D C:\Users\Public\Documents\Adobe
2018-09-29 11:19 - 2018-09-29 11:19 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-10-28 19:26 - 2018-07-05 14:54 - 000000000 ____D C:\ProgramData\NVIDIA
2018-10-28 19:26 - 2018-04-12 07:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-10-28 19:18 - 2018-07-06 05:30 - 000000000 ___RD C:\Users\Lenovo\OneDrive
2018-10-28 19:17 - 2018-07-05 15:17 - 000000000 __SHD C:\Users\Lenovo\IntelGraphicsProfiles
2018-10-28 19:16 - 2018-07-06 05:18 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-10-28 19:14 - 2018-04-12 05:04 - 000524288 _____ C:\Windows\system32\config\BBI
2018-10-28 18:56 - 2018-07-14 18:15 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\Spotify
2018-10-28 18:48 - 2018-04-12 07:38 - 000000000 ____D C:\Windows\AppReadiness
2018-10-28 18:45 - 2018-07-12 17:04 - 000000000 ____D C:\Program Files (x86)\Steam
2018-10-28 18:30 - 2018-07-06 05:17 - 000000000 ____D C:\Windows\system32\SleepStudy
2018-10-28 13:17 - 2018-07-12 18:13 - 000004168 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C10FE5D6-4543-41FF-89A4-BFBDA2E459CF}
2018-10-28 02:10 - 2018-07-28 19:59 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\vlc
2018-10-28 02:02 - 2018-07-23 01:27 - 000000000 ____D C:\Users\Lenovo\AppData\Local\Adobe
2018-10-28 01:59 - 2018-04-12 07:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-10-28 01:57 - 2018-07-06 05:27 - 000000000 ____D C:\Users\Lenovo
2018-10-28 01:23 - 2018-07-06 05:28 - 000838560 _____ C:\Windows\system32\PerfStringBackup.INI
2018-10-28 01:23 - 2018-04-12 07:36 - 000000000 ____D C:\Windows\INF
2018-10-28 00:55 - 2018-04-12 07:30 - 000000000 ____D C:\Windows\CbsTemp
2018-10-27 12:59 - 2018-07-06 05:28 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-10-27 12:59 - 2018-07-06 05:28 - 000000000 ___RD C:\Users\Lenovo\3D Objects
2018-10-27 12:54 - 2018-07-06 05:17 - 000407368 _____ C:\Windows\system32\FNTCACHE.DAT
2018-10-27 12:46 - 2018-04-12 07:38 - 000000000 ___SD C:\Windows\SysWOW64\F12
2018-10-27 12:46 - 2018-04-12 07:38 - 000000000 ___SD C:\Windows\system32\F12
2018-10-27 12:46 - 2018-04-12 07:38 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2018-10-27 12:46 - 2018-04-12 07:38 - 000000000 ____D C:\Windows\TextInput
2018-10-27 12:46 - 2018-04-12 07:38 - 000000000 ____D C:\Windows\ShellExperiences
2018-10-27 12:46 - 2018-04-12 07:38 - 000000000 ____D C:\Windows\bcastdvr
2018-10-27 12:06 - 2018-07-11 13:29 - 000000000 ____D C:\Users\Lenovo\AppData\Local\PlaceholderTileLogoFolder
2018-10-27 00:00 - 2018-07-14 18:16 - 000000000 ____D C:\Users\Lenovo\AppData\Local\Spotify
2018-10-26 20:07 - 2018-07-05 14:44 - 000000000 ____D C:\ProgramData\Packages
2018-10-26 20:06 - 2018-07-06 05:18 - 000000000 ____D C:\Windows\system32\Drivers\wd
2018-10-26 20:05 - 2018-08-05 23:48 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-10-26 20:05 - 2018-08-05 23:48 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-10-21 03:15 - 2018-04-12 07:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-10-21 03:13 - 2018-07-13 13:06 - 000000000 ____D C:\Program Files\Microsoft Office
2018-10-20 22:42 - 2018-04-12 07:38 - 000000000 ____D C:\Windows\system32\NDF
2018-10-20 18:50 - 2018-07-16 18:39 - 000000000 ____D C:\Users\Lenovo\AppData\Local\Battle.net
2018-10-20 11:30 - 2018-07-17 18:52 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2018-10-20 10:40 - 2018-07-16 18:40 - 000000000 ____D C:\Program Files (x86)\Overwatch
2018-10-20 09:58 - 2018-07-16 18:33 - 000000000 ____D C:\Program Files (x86)\Battle.net
2018-10-19 19:36 - 2018-07-12 15:16 - 000559880 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2018-10-14 20:02 - 2018-07-06 05:28 - 000000000 ____D C:\Users\Lenovo\AppData\Local\Packages
2018-10-14 15:02 - 2018-07-12 16:55 - 000000000 ____D C:\Windows\system32\MRT
2018-10-14 14:59 - 2018-07-12 16:54 - 136745976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-10-14 14:13 - 2018-07-06 05:27 - 000002366 _____ C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-10-14 14:13 - 2018-07-05 15:01 - 000003358 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3032505028-3150946390-822767072-1001
2018-10-10 00:18 - 2018-08-13 15:38 - 000000000 ____D C:\EEE13
2018-10-06 02:08 - 2018-04-12 07:38 - 000000000 ___RD C:\Program Files\Windows Defender
2018-10-06 02:08 - 2018-04-12 07:38 - 000000000 ____D C:\Windows\system32\ShellExperiences
2018-10-06 02:08 - 2018-04-12 07:38 - 000000000 ____D C:\Windows\PolicyDefinitions
2018-10-06 02:08 - 2018-04-12 07:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-10-03 04:13 - 2018-09-14 22:18 - 000835152 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-10-03 04:13 - 2018-09-14 22:18 - 000179792 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-09-29 11:48 - 2018-07-06 05:28 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\Adobe
2018-09-29 11:42 - 2018-07-23 01:45 - 000000000 ____D C:\Program Files\Adobe==================== Files in the root of some directories =======
2018-07-15 00:11 - 2018-07-15 00:11 - 000007600 _____ () C:\Users\Lenovo\AppData\Local\Resmon.ResmonCfg
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2018-07-06 05:17
==================== End of FRST.txt ============================
Addition.txt is attached
Thanks!
-
Hello, can someone help me with my issue similar to this,
https://forums.malwarebytes.com/topic/236604-sppsvcexe-high-cpu-spiking/Microsoft Software Protection Platform is popping up every minute or so taking a large amount of my CPU. I have run malwarebytes 3 already btw
system interrupts using up my whole first core
in General Windows PC Help
Posted
well. it still shows up.