Hendel

@Porthos It worked, thank you

Addition.txt FRST.txt

Here's the text from malwarebytes: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 3/27/20 Scan Time: 6:15 PM Log File: 35d47b1e-7046-11ea-b976-000000000000.json -Software Information- Version: 4.1.0.56 Components Version: 1.0.835 Update Package Version: 1.0.21430 License: Free -System Information- OS: Windows 10 (Build 18362.720) CPU: x64 File System: NTFS User: HEMMO\ommo -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 275722 Threats Detected: 13 Threats Quarantined: 0 Time Elapsed: 10 min, 22 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 2 Adware.Elex.ShrtCln, C:\USERS\OMMO\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\USERS\OMMO\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 298, 454748, , , , File: 11 Adware.Elex.ShrtCln, C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.ldb, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000009.log, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000010.ldb, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, No Action By User, 298, 454748, , , , Adware.Elex.ShrtCln, C:\USERS\OMMO\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, No Action By User, 298, 454748, 1.0.21430, , ame, Adware.Elex.ShrtCln, C:\USERS\OMMO\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, No Action By User, 298, 454748, 1.0.21430, , ame, Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) Here from farbar recover scan tool: frst.txt Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-03-2020 Ran by ommo (administrator) on HEMMO (Acer Aspire 5738) (27-03-2020 18:39:06) Running from C:\Users\ommo\Desktop\frst Loaded Profiles: ommo (Available Profiles: ommo) Platform: Windows 10 Pro Version 1909 18363.720 (X64) Language: English (United States) Default browser: Chrome Boot Mode: Safe Mode (with Networking) Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (LogMeIn, Inc. -> LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe (LogMeIn, Inc. -> LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [277664 2020-03-03] (Avast Software s.r.o. -> AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646160 2019-12-11] (Oracle America, Inc. -> Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5890504 2019-04-02] (LogMeIn, Inc. -> LogMeIn Inc.) HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22256824 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\Run: [Chromium] => "c:\users\ommo\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\MountPoints2: {e5e6ff94-6098-11ea-836b-00262d5fed13} - "E:\HiSuiteDownLoader.exe" HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.149\Installer\chrmstp.exe [2020-03-18] (Google LLC -> Google LLC) HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> Startup: C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WO Mic Client.lnk [2020-03-08] ShortcutTarget: WO Mic Client.lnk -> C:\Program Files (x86)\WOMic\WOMicClient.exe () [File not signed] FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1FD1DD61-9D5F-4CA2-828D-D105E6DEEBC8} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E} Task: {26E21A99-65C9-4312-8070-5C8B12B150E3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-03-03] (Google LLC -> Google LLC) Task: {2B38EADB-8C1B-4CC4-89A6-53FAA84411E8} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {36601504-6344-4F55-BAED-3F42DA90CD03} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {3BE380AF-5572-46E8-8104-E402F641601F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {3E6DB85A-71C6-45B5-B3B5-CA6ECA26256E} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB} Task: {4A0EB92A-C062-474F-B71A-63679DE46271} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {4EAFDB5D-BFD9-4127-8C4A-6F4F09C005F3} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {4F2FF5F9-441E-482C-8E20-E86A965D5B69} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\MpCmdRun.exe Task: {55346DB3-0F2F-40E1-838A-542BC6DAC4B2} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A} Task: {603C0930-0641-4A80-A4B6-644BE9E34DBE} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {67FD7BEB-E6A7-4226-8FF7-D2587C9737EC} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1} Task: {6A9CAB8E-CA49-46AC-B267-1D65CB89CD39} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {7299FDB4-0166-47F9-88C2-845C2C793A19} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-03-03] (Avast Software s.r.o. -> Avast Software) Task: {78FAD907-5570-400A-BEEA-0A2422EBC0A5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-03-03] (Google LLC -> Google LLC) Task: {7A8EA2C8-D52B-4E00-91C2-93E8D5CE70E0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {7EB2C10F-98BC-4CC8-A737-C834E95F2512} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {8BA7883E-2729-4A6B-ACE3-D4E676729C34} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe Task: {8D997A60-6ED5-481F-84D4-98489AF64F29} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316} Task: {91EC2992-DAA3-487B-82F8-E9093A8A1AD4} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {952D7C38-1CED-46BA-8194-D23A65D658EF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18233016 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd) Task: {9B9E871D-4CB4-4744-BFD2-6C2B982DDB3E} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A9B11BD7-22CD-40D0-BE72-699233F62C24} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {AFC3543E-8FB4-42D5-A419-E4AD24A3519A} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969} Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371} Task: {B6419424-6D97-4ED5-A49C-5A0F10B947AD} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61} Task: {C18B384A-52AE-4A9F-A5B2-D7BC6BEFA6A9} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {C788652C-1048-452B-922A-DE43772F4F32} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {CEFDF5F2-C38F-4C91-B72A-95DA6C6FC621} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {D7E66480-CB00-4D9D-A848-6C75CA9FCA2B} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {D90DE02B-B9A1-4F0D-8561-3BD16CF4E032} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3894664 2020-03-03] (Avast Software s.r.o. -> AVAST Software) Task: {DB2B68CE-2817-4495-B2CD-5BB32A65545B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd) Task: {DCE4D56F-26C0-4311-A903-BC8E556B52F0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {E8916422-8A99-4B7F-8EEB-ACC0C15D548D} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION Task: {F1C72F0B-16B3-4B47-B7F4-22CAEEE41C9C} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {F9DFBC36-3936-4D42-99F1-03ADDD7767B0} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{26BC33AE-FF57-428A-90B1-EFFE8B5C6833}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{467FA565-0D5C-4B3D-812A-B81B6B443EF9}: [DhcpNameServer] 62.241.198.246 62.241.198.245 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/fi-fi/?ocid=iehp SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1663783040-3019963794-2028018619-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\ssv.dll [2020-03-04] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-03-04] (Oracle America, Inc. -> Oracle Corporation) FireFox: ======== FF Plugin-x32: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-03-04] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-03-04] (Oracle America, Inc. -> Oracle Corporation) Chrome: ======= CHR Profile: C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default [2020-03-27] CHR HomePage: Default -> hxxp://www.riemurasia.net/ CHR DefaultSearchURL: Default -> hxxps://open.scdn.co/cdn/images/icons/Spotify_16.aa3775a0.png CHR Session Restore: Default -> is enabled. CHR Extension: (Slides) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-03-03] CHR Extension: (Docs) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-03-03] CHR Extension: (Google Drive) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-03-03] CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-03-03] CHR Extension: (Sheets) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-03-03] CHR Extension: (I don't care about cookies) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fihnjjcciajhdojfnbdddfaoknhalnja [2020-03-05] CHR Extension: (Quick Javascript Switcher) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\geddoclleiomckbhadiaipdggiiccfje [2020-03-15] CHR Extension: (Google Docsin offline-tila) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-12] CHR Extension: (AdBlock — best ad blocker) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-03-17] CHR Extension: (Stealthy) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje [2020-03-03] CHR Extension: (Google Hangouts) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2020-03-03] CHR Extension: (Chrome Web Storen maksut) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-03] CHR Extension: (Spotify) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjibgclleladliembfgfagdaldikeohf [2020-03-27] CHR Extension: (Chrome Media Router) - C:\Users\ommo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-20] CHR Extension: (Bypass Paywalls) - C:\Users\ommo\Documents\by\bypass-paywalls-chrome-master [2020-03-15] [UpdateUrl:hxxps://raw.githubusercontent.com/iamadamdev/bypass-paywalls-chrome/master/updates.xml] <==== ATTENTION CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [238080 2015-01-13] (Microsoft Windows Hardware Compatibility Publisher -> AMD) S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [413472 2020-03-03] (Avast Software s.r.o. -> AVAST Software) S2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57536 2020-03-03] (Avast Software s.r.o. -> AVAST Software) R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3361736 2019-04-02] (LogMeIn, Inc. -> LogMeIn Inc.) S2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc. -> LogMeIn, Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-03-12] (Malwarebytes Inc -> Malwarebytes) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5929920 2020-03-14] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\NisSrv.exe [3285864 2020-03-05] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MsMpEng.exe [103168 2020-03-05] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 AgereSoftModem; C:\WINDOWS\system32\DRIVERS\agrsm64.sys [1146880 2019-03-19] (Microsoft Windows -> LSI Corp) S3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [11922944 2015-01-13] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) S3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [359936 2015-01-13] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [47160 2008-04-28] (Advanced Micro Devices, Inc. -> AMD, Inc.) R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37864 2020-03-03] (Avast Software s.r.o. -> AVAST Software) S1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205576 2020-03-03] (Avast Software s.r.o. -> AVAST Software) S0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2020-03-11] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software) R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42976 2020-03-03] (Avast Software s.r.o. -> AVAST Software) S2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175400 2020-03-03] (Avast Software s.r.o. -> AVAST Software) S0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84056 2020-03-03] (Avast Software s.r.o. -> AVAST Software) S1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [848672 2020-03-03] (Avast Software s.r.o. -> AVAST Software) S1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [458584 2020-03-11] (Avast Software s.r.o. -> AVAST Software) S0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [316256 2020-03-03] (Avast Software s.r.o. -> AVAST Software) R3 athr; C:\WINDOWS\System32\drivers\athwnx.sys [4233728 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.) S3 BCM43XX; C:\WINDOWS\System32\drivers\bcmwl63al.sys [5170176 2019-03-19] (Microsoft Windows -> Broadcom Corporation) S3 FairplayKD; C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [104512 2020-03-24] (Hans Roes -> Multi Theft Auto) S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2019-04-02] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.) S2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-03-22] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-03-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-03-27] (Malwarebytes Inc -> Malwarebytes) S3 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [28624 2020-03-27] () [File not signed] S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45960 2020-03-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [376544 2020-03-05] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2020-03-05] (Microsoft Windows -> Microsoft Corporation) S3 wovad_micarray; C:\WINDOWS\system32\drivers\womic.sys [34496 2020-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) S3 atillk64; \??\C:\Program Files (x86)\AMD GPU Clock Tool\atillk64.sys [X] S3 GPU-Z-v2; \??\C:\Users\ommo\AppData\Local\Temp\GPU-Z-v2.sys [X] <==== ATTENTION U3 idsvc; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) =================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-03-27 18:38 - 2020-03-27 18:39 - 000000000 ____D C:\Users\ommo\Desktop\frst 2020-03-27 18:36 - 2020-03-27 18:39 - 000000000 ____D C:\FRST 2020-03-27 18:26 - 2020-03-27 18:26 - 000003070 _____ C:\Users\ommo\Desktop\hm.txt 2020-03-27 18:13 - 2020-03-27 18:13 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2020-03-27 16:59 - 2020-03-27 16:59 - 002941237 _____ C:\Users\ommo\Downloads\f104fa58.mp4 2020-03-27 14:59 - 2020-03-27 14:59 - 000000060 _____ C:\WINDOWS\wininit.ini 2020-03-27 14:57 - 2020-03-27 15:00 - 000028624 _____ C:\WINDOWS\SysWOW64\Drivers\SECDRV.SYS 2020-03-27 14:57 - 2020-03-27 14:57 - 000000474 _____ C:\WINDOWS\eReg.dat 2020-03-27 14:56 - 2020-03-27 14:57 - 000000000 ____D C:\Program Files (x86)\EACOM 2020-03-27 14:52 - 2020-03-27 15:03 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2020-03-27 12:43 - 2020-03-27 18:41 - 000235298 _____ C:\WINDOWS\ntbtlog.txt 2020-03-27 06:52 - 2020-03-27 06:52 - 000352672 _____ C:\Users\ommo\Downloads\606051aa.mp4 2020-03-27 03:34 - 2020-03-27 03:34 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-sovellukset 2020-03-23 16:21 - 2020-03-23 16:23 - 000001406 _____ C:\Users\ommo\Desktop\zandronum - Shortcut.lnk 2020-03-22 23:08 - 2020-03-22 23:08 - 000002432 _____ C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\WickrMe.lnk 2020-03-22 23:08 - 2020-03-22 23:08 - 000002430 _____ C:\Users\ommo\Desktop\WickrMe.lnk 2020-03-22 23:07 - 2020-03-22 23:08 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WickrMe 2020-03-22 23:07 - 2020-03-22 23:07 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Wickr, LLC 2020-03-22 22:53 - 2020-03-22 23:04 - 267181056 _____ C:\Users\ommo\Downloads\WickrMe-5.50.6.msi 2020-03-22 22:52 - 2020-03-22 23:11 - 000000000 ____D C:\Users\ommo\AppData\Local\Wickr, LLC 2020-03-22 22:38 - 2020-03-22 22:48 - 267163648 _____ C:\Users\ommo\Downloads\WickrPro-5.50.6.msi 2020-03-22 21:46 - 2017-09-25 21:40 - 049331324 _____ C:\War3Patch.mpq 2020-03-22 16:30 - 2020-03-27 18:06 - 000000000 ____D C:\Users\ommo\AppData\Local\LogMeIn Hamachi 2020-03-22 16:30 - 2020-03-22 16:30 - 000000000 ____D C:\Users\ommo\AppData\Local\LogMeIn 2020-03-22 16:30 - 2020-03-22 16:30 - 000000000 ____D C:\ProgramData\LogMeIn 2020-03-22 16:26 - 2020-03-22 16:26 - 000000995 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2020-03-22 16:26 - 2020-03-22 16:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2020-03-22 16:26 - 2020-03-22 16:26 - 000000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2020-03-22 16:24 - 2020-03-22 16:25 - 009142272 _____ C:\Users\ommo\Downloads\hamachi.msi 2020-03-22 16:02 - 2020-03-23 16:44 - 000000000 ____D C:\Users\ommo\AppData\Local\doomseeker 2020-03-22 15:59 - 2020-03-22 16:00 - 014434356 _____ C:\Users\ommo\Downloads\doomseeker-1.3.1_windows.zip 2020-03-22 15:36 - 2020-03-22 15:36 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2020-03-21 16:00 - 2020-03-21 16:03 - 000001659 _____ C:\Users\ommo\Desktop\gzdoom - Shortcut.lnk 2020-03-21 15:38 - 2020-03-21 15:40 - 150347599 _____ C:\Users\ommo\Downloads\DoomMetalVol5.zip 2020-03-19 22:46 - 2020-03-22 16:01 - 000000000 ____D C:\Users\ommo\Documents\doom 2020-03-19 18:07 - 2020-03-19 18:09 - 000000000 ____D C:\Users\ommo\Documents\GTA San Andreas User Files 2020-03-19 18:07 - 2020-03-19 18:07 - 000001761 _____ C:\Users\Public\Desktop\MTA San Andreas 1.5.lnk 2020-03-19 18:07 - 2020-03-19 18:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.5 2020-03-19 18:06 - 2020-03-19 18:06 - 000000000 ___HD C:\WINDOWS\msdownld.tmp 2020-03-19 18:06 - 2020-03-19 18:06 - 000000000 ____D C:\WINDOWS\SysWOW64\directx 2020-03-19 18:04 - 2020-03-19 18:08 - 000000000 ____D C:\ProgramData\MTA San Andreas All 2020-03-19 16:51 - 2020-03-19 18:03 - 071084192 _____ (Multi Theft Auto) C:\Users\ommo\Downloads\mtasa-1.5.7.exe 2020-03-19 16:49 - 2020-03-19 18:06 - 000000000 ____D C:\Users\ommo\Documents\gta 2020-03-18 17:57 - 2020-03-22 21:47 - 000000000 ____D C:\Users\ommo\Documents\OpenTTD 2020-03-18 17:55 - 2020-03-18 17:56 - 000000000 ____D C:\Program Files\OpenTTD 2020-03-18 17:55 - 2020-03-18 17:55 - 000000837 _____ C:\Users\Public\Desktop\OpenTTD.lnk 2020-03-18 17:55 - 2020-03-18 17:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD 2020-03-18 17:54 - 2020-03-18 17:54 - 005405173 _____ (OpenTTD Developers) C:\Users\ommo\Downloads\openttd-1.9.3-windows-win64.exe 2020-03-18 17:48 - 2020-03-18 17:58 - 991045679 _____ C:\Users\ommo\Downloads\xonotic-0.8.2.zip 2020-03-17 23:58 - 2020-03-24 18:49 - 000000057 _____ C:\Users\ommo\Documents\New Text Document.txt 2020-03-16 11:59 - 2020-03-16 11:59 - 000217143 _____ C:\Users\ommo\Downloads\2020-03-04-vare-lasku-2226697.pdf 2020-03-15 16:38 - 2020-03-15 16:39 - 000000000 ____D C:\Users\ommo\Documents\by 2020-03-14 12:14 - 2020-03-23 00:33 - 000000000 ____D C:\Users\ommo\AppData\LocalLow\Mozilla 2020-03-14 12:14 - 2020-03-14 12:14 - 000000942 _____ C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk 2020-03-14 12:14 - 2020-03-14 12:14 - 000000894 _____ C:\Users\ommo\Desktop\Start Tor Browser.lnk 2020-03-14 12:13 - 2020-03-17 15:16 - 000000000 ____D C:\Users\ommo\Desktop\Tor Browser 2020-03-14 12:11 - 2020-03-14 12:12 - 066778032 _____ C:\Users\ommo\Downloads\torbrowser-install-win64-9.0.6_en-US.exe 2020-03-14 03:52 - 2020-03-14 03:52 - 011607552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 009711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 002315680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 001867816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 001555904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 001417976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 000757632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2020-03-14 03:52 - 2020-03-14 03:52 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacEncoder.dll 2020-03-14 03:51 - 2020-03-14 03:52 - 001108040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 025900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 019812352 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 018027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 007755776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 006285312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 005911040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 004855808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 004580352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 004348408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 004129648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 003819520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 003488768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 003243296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 002956688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2020-03-14 03:51 - 2020-03-14 03:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2020-03-14 03:51 - 2020-03-14 03:51 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 002224952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 002180408 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 002072664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 002031104 _____ C:\WINDOWS\system32\rdpnano.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001770552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001490640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001283600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2020-03-14 03:51 - 2020-03-14 03:51 - 001282944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001218632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001088000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 000739328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbc32.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbc32.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys 2020-03-14 03:51 - 2020-03-14 03:51 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacEncoder.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddpchunk.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 000145208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CscMig.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000042296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2020-03-14 03:51 - 2020-03-14 03:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll 2020-03-14 03:51 - 2020-03-14 03:51 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin 2020-03-14 03:51 - 2020-03-14 03:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2020-03-14 03:50 - 2020-03-14 03:50 - 006520776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 006084344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 005112832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 003971808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 002875904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 002800640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-03-14 03:50 - 2020-03-14 03:50 - 002740736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directml.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 002307584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 002259872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 002021888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001985104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001729024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001688064 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001684992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001665416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001484600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001413632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001264128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001190912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001054376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001031680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 001007672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000935040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000892696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000776488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000769552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000748032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000668296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000627216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000551824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000526848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000478792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2020-03-14 03:50 - 2020-03-14 03:50 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2020-03-14 03:50 - 2020-03-14 03:50 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000213984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys 2020-03-14 03:50 - 2020-03-14 03:50 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000136328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000133944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000120560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2020-03-14 03:50 - 2020-03-14 03:50 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GraphicsCapture.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000102760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profapi.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000089568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000068408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmRes.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000042336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afunix.sys 2020-03-14 03:50 - 2020-03-14 03:50 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Drivers\afunix.sys 2020-03-14 03:50 - 2020-03-14 03:50 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msauserext.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchTM.exe 2020-03-14 03:50 - 2020-03-14 03:50 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll 2020-03-14 03:50 - 2020-03-14 03:50 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 009930552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-03-14 03:49 - 2020-03-14 03:49 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 005040640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 002773568 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 002768440 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 002087376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 001647072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 001097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000929144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2020-03-14 03:49 - 2020-03-14 03:49 - 000921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2020-03-14 03:49 - 2020-03-14 03:49 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 000734720 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe 2020-03-14 03:49 - 2020-03-14 03:49 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 000613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000605896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2020-03-14 03:49 - 2020-03-14 03:49 - 000457016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2020-03-14 03:49 - 2020-03-14 03:49 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000320312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 000260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000165504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000164776 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 000133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\profapi.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000098104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys 2020-03-14 03:49 - 2020-03-14 03:49 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe 2020-03-14 03:49 - 2020-03-14 03:49 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe 2020-03-14 03:49 - 2020-03-14 03:49 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe 2020-03-14 03:49 - 2020-03-14 03:49 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msauserext.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll 2020-03-14 03:49 - 2020-03-14 03:49 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll 2020-03-14 03:48 - 2020-03-14 03:49 - 002698040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2020-03-14 03:48 - 2020-03-14 03:48 - 007905784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 006436352 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 006168064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 004563416 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 004471296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 004048896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 003799552 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-03-14 03:48 - 2020-03-14 03:48 - 003552768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 003371720 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 003260928 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 002453504 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001999952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001972536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2020-03-14 03:48 - 2020-03-14 03:48 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001823232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001764336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001757304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-03-14 03:48 - 2020-03-14 03:48 - 001743888 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001657120 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001609216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001513040 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 001396152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2020-03-14 03:48 - 2020-03-14 03:48 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001260480 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001182448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 001071184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000983896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000945384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000908504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000877232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000796904 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000741392 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000642216 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000636848 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2020-03-14 03:48 - 2020-03-14 03:48 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000522384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000459688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2020-03-14 03:48 - 2020-03-14 03:48 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000248064 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000234984 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000221200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000201744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2020-03-14 03:48 - 2020-03-14 03:48 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000146712 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\GraphicsCapture.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000120048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Taskbar.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000089616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wci.dll 2020-03-14 03:48 - 2020-03-14 03:48 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe 2020-03-14 03:48 - 2020-03-14 03:48 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 004622280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 003977216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 003708928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 003587896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 003143168 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 002808832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 002715648 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 002522112 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 002474496 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 002289152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 002157056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 001762304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 001581056 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 001428992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 001180160 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 001092096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000833616 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000802304 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000637240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2020-03-14 03:47 - 2020-03-14 03:47 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2020-03-14 03:47 - 2020-03-14 03:47 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000429880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Acx01000.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000306696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000254776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000250896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000224056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000222520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000208696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000183608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000180232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000141840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000131896 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssecuser.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2020-03-14 03:47 - 2020-03-14 03:47 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000067112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000066336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlrmdr.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmRes.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000056632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciidex.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAProfileNotificationHandler.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000048256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthMini.SYS 2020-03-14 03:47 - 2020-03-14 03:47 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000030008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\atapi.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000029712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tbs.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilotdiag.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000019984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelide.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpnotify.exe 2020-03-14 03:47 - 2020-03-14 03:47 - 000016912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciide.sys 2020-03-14 03:47 - 2020-03-14 03:47 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll 2020-03-14 03:47 - 2020-03-14 03:47 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUserRes.dll 2020-03-14 03:46 - 2020-03-14 03:46 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2020-03-14 03:46 - 2020-03-14 03:46 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys 2020-03-14 03:18 - 2020-02-11 06:48 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2020-03-14 03:18 - 2020-02-11 06:37 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2020-03-13 14:20 - 2020-03-13 14:20 - 000875468 _____ C:\Users\ommo\Downloads\People+come+up+with+the+craziest++lol+_ca5879a98e8a590bda0f8fbdbe14bd8d.mp4 2020-03-12 13:24 - 2020-03-23 20:46 - 000000000 ____D C:\Users\ommo\AppData\Local\cache 2020-03-12 13:24 - 2020-03-12 13:24 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2020-03-12 13:24 - 2020-03-12 13:24 - 000000000 ____D C:\Users\ommo\AppData\Local\mbamtray 2020-03-12 13:24 - 2020-03-12 13:24 - 000000000 ____D C:\Users\ommo\AppData\Local\mbam 2020-03-12 13:24 - 2020-03-12 13:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2020-03-12 13:24 - 2020-03-12 13:23 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2020-03-12 13:23 - 2020-03-12 13:23 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2020-03-12 13:23 - 2020-03-12 13:23 - 000000000 ____D C:\ProgramData\Malwarebytes 2020-03-12 13:22 - 2020-03-12 13:22 - 000000000 ____D C:\Program Files\Malwarebytes 2020-03-12 13:19 - 2020-03-27 15:01 - 000000000 ____D C:\Users\ommo\AppData\Local\ElevatedDiagnostics 2020-03-12 13:16 - 2020-03-27 18:13 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2020-03-12 13:03 - 2020-03-12 13:04 - 001928352 _____ (Malwarebytes) C:\Users\ommo\Downloads\MBSetup.exe 2020-03-11 22:04 - 2020-03-11 22:04 - 000000000 _____ C:\WINDOWS\system32\last.dump 2020-03-11 20:00 - 2020-03-11 20:00 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk 2020-03-11 19:57 - 2020-03-11 19:57 - 000016304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswElam.sys 2020-03-11 19:57 - 2020-03-03 21:28 - 000368056 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2020-03-11 14:20 - 2020-03-11 14:20 - 000000220 _____ C:\Users\ommo\Desktop\Killing Floor.url 2020-03-11 14:19 - 2020-03-11 18:11 - 000000219 _____ C:\Users\ommo\Desktop\Dota 2.url 2020-03-11 13:48 - 2020-03-11 13:48 - 000399728 _____ C:\Users\ommo\Downloads\Screenshot_20200228-013537.jpeg 2020-03-10 21:21 - 2020-03-10 21:21 - 002373939 _____ C:\Users\ommo\Downloads\+_46f18d624f83f4978c9d5efbaffe6e33.mp4 2020-03-10 15:28 - 2020-03-10 15:48 - 000000000 ____D C:\Users\ommo\AppData\Local\chromium 2020-03-10 15:27 - 2020-03-10 15:43 - 000000000 ____D C:\ProgramData\BlueStacksSetup 2020-03-10 15:26 - 2020-03-10 15:48 - 000000000 ____D C:\Program Files (x86)\Chromium 2020-03-10 15:26 - 2020-03-10 15:26 - 000000000 ____D C:\ProgramData\{524E6E72-7A66-160A-223E-3E22CAD6E6FA} 2020-03-10 15:25 - 2020-03-10 15:25 - 014634624 _____ (BlueStack Systems Inc.) C:\Users\ommo\Downloads\KIK.exe 2020-03-10 15:25 - 2020-03-10 15:25 - 000000000 ____D C:\Program Files (x86)\Digital Communications 2020-03-08 23:12 - 2020-03-08 23:12 - 000000000 ____D C:\Users\ommo\.android 2020-03-08 23:10 - 2020-03-09 00:03 - 000001070 _____ C:\Users\ommo\Desktop\WO Mic Client.lnk 2020-03-08 23:10 - 2020-03-08 23:10 - 001820686 _____ C:\Users\ommo\Downloads\wo_mic_client_setup.exe 2020-03-08 23:10 - 2020-03-08 23:10 - 000242645 _____ C:\Users\ommo\Downloads\wo_mic_driver_setup.exe 2020-03-08 23:10 - 2020-03-08 23:10 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WO Mic Client 2020-03-08 23:10 - 2020-03-08 23:10 - 000000000 ____D C:\Program Files (x86)\WOMic 2020-03-08 23:07 - 2020-03-08 23:07 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2020-03-08 21:53 - 2020-03-08 21:54 - 000000024 _____ C:\Users\ommo\random.dat 2020-03-08 21:53 - 2020-03-08 21:53 - 000000043 _____ C:\Users\ommo\jagex_cl_oldschool_LIVE.dat 2020-03-08 21:52 - 2020-03-08 22:40 - 000000024 _____ C:\Users\ommo\jagexappletviewer.preferences 2020-03-08 21:52 - 2020-03-08 21:52 - 000000000 ____D C:\.jagex_cache_32 2020-03-08 21:51 - 2020-03-08 21:53 - 000000000 ____D C:\Users\ommo\jagexcache 2020-03-08 21:51 - 2020-03-08 21:51 - 000002104 _____ C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldSchool RuneScape.lnk 2020-03-08 21:51 - 2020-03-08 21:51 - 000002074 _____ C:\Users\ommo\Desktop\OldSchool RuneScape.lnk 2020-03-08 21:51 - 2020-03-08 21:51 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldSchool RuneScape 2020-03-08 21:48 - 2020-03-08 21:50 - 024018944 _____ C:\Users\ommo\Downloads\OldSchool.msi 2020-03-08 21:28 - 2020-03-08 21:28 - 005649576 _____ (Blizzard Entertainment) C:\Users\ommo\Downloads\Warcraft-III-Setup.exe 2020-03-08 21:01 - 2020-03-08 21:01 - 000000044 _____ C:\WINDOWS\wawx_dumpreg64.dll 2020-03-08 21:01 - 2020-03-08 21:01 - 000000044 _____ C:\Users\ommo\AppData\Roaming\twow_sysprepdt.dat 2020-03-08 21:01 - 2020-03-08 21:01 - 000000000 ____D C:\Users\Public\Documents\Warcraft III 2020-03-08 21:01 - 2020-03-08 21:01 - 000000000 ____D C:\Users\ommo\Documents\Warcraft III 2020-03-08 21:01 - 2020-03-08 21:01 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Battle.net 2020-03-08 21:01 - 2020-03-08 21:01 - 000000000 ____D C:\Users\ommo\AppData\Local\Blizzard 2020-03-08 21:00 - 2020-03-08 21:00 - 000010752 _____ (w3l) C:\wl27.dll 2020-03-08 20:59 - 2018-12-25 21:51 - 048347136 _____ (Eurobattle.net) C:\Users\ommo\Documents\installer.exe 2020-03-08 20:53 - 2020-03-08 20:57 - 000000000 ____D C:\Users\ommo\Documents\war321 2020-03-08 20:32 - 2020-03-27 18:06 - 000003194 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2020-03-08 20:32 - 2020-03-27 18:06 - 000002238 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC 2020-03-08 20:32 - 2020-03-08 20:32 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk 2020-03-08 20:32 - 2020-03-08 20:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2020-03-08 20:32 - 2020-03-08 20:32 - 000000000 ____D C:\Program Files\CCleaner 2020-03-08 20:27 - 2020-03-08 20:30 - 022195736 _____ (Piriform Software Ltd) C:\Users\ommo\Downloads\ccsetup564.exe 2020-03-08 20:21 - 2020-03-08 20:24 - 000000000 ____D C:\ProgramData\Package Cache 2020-03-08 20:19 - 2020-03-08 20:21 - 028048287 _____ C:\Users\ommo\Documents\installer_v10.zip 2020-03-08 20:19 - 2020-03-08 20:20 - 013767776 _____ (Microsoft Corporation) C:\Users\ommo\Downloads\vc_redist.x86.exe 2020-03-08 20:19 - 2020-03-08 20:19 - 006503984 _____ (Microsoft Corporation) C:\Users\ommo\Downloads\vcredist_x86.exe 2020-03-08 20:11 - 2020-03-08 20:11 - 000114352 _____ (GameRanger Technologies) C:\Users\ommo\Downloads\GameRangerSetup.exe 2020-03-06 23:34 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll 2020-03-06 23:34 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll 2020-03-06 23:34 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll 2020-03-06 23:34 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll 2020-03-06 23:33 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll 2020-03-06 23:33 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll 2020-03-06 23:33 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll 2020-03-06 23:33 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll 2020-03-06 23:33 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll 2020-03-06 23:33 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll 2020-03-06 23:33 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll 2020-03-06 23:33 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll 2020-03-06 23:33 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll 2020-03-06 23:33 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll 2020-03-06 23:33 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll 2020-03-06 23:33 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll 2020-03-06 23:33 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll 2020-03-06 23:33 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll 2020-03-06 23:33 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll 2020-03-06 23:33 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll 2020-03-06 23:33 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll 2020-03-06 23:33 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2020-03-06 23:33 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll 2020-03-06 23:33 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll 2020-03-06 23:33 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll 2020-03-06 23:33 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll 2020-03-06 23:33 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll 2020-03-06 23:33 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll 2020-03-06 23:33 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll 2020-03-06 23:33 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll 2020-03-06 23:33 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll 2020-03-06 23:33 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll 2020-03-06 23:33 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll 2020-03-06 23:33 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll 2020-03-06 23:33 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2020-03-06 23:33 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2020-03-06 23:33 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2020-03-06 23:33 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2020-03-06 23:33 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2020-03-06 23:33 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2020-03-06 23:33 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2020-03-06 23:33 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2020-03-06 23:33 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll 2020-03-06 23:33 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll 2020-03-06 23:33 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll 2020-03-06 23:33 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll 2020-03-06 23:33 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll 2020-03-06 23:33 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll 2020-03-06 23:33 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2020-03-06 23:33 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2020-03-06 23:33 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2020-03-06 23:33 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2020-03-06 23:33 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2020-03-06 23:33 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2020-03-06 23:33 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2020-03-06 23:33 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2020-03-06 23:33 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2020-03-06 23:33 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2020-03-06 23:33 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2020-03-06 23:33 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2020-03-06 23:33 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll 2020-03-06 23:33 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll 2020-03-06 23:33 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll 2020-03-06 23:33 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll 2020-03-06 23:33 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll 2020-03-06 23:33 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll 2020-03-06 23:33 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll 2020-03-06 23:33 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll 2020-03-06 23:33 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll 2020-03-06 23:33 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll 2020-03-06 23:33 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll 2020-03-06 23:33 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll 2020-03-06 23:32 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll 2020-03-06 23:32 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll 2020-03-06 23:32 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll 2020-03-06 23:32 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll 2020-03-06 23:32 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll 2020-03-06 23:32 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll 2020-03-06 23:32 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll 2020-03-06 23:32 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll 2020-03-06 23:32 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll 2020-03-06 23:32 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll 2020-03-06 23:32 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll 2020-03-06 23:32 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll 2020-03-06 23:32 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll 2020-03-06 23:32 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll 2020-03-06 23:32 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll 2020-03-06 23:32 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll 2020-03-06 23:32 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll 2020-03-06 23:32 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll 2020-03-06 23:32 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll 2020-03-06 23:32 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll 2020-03-06 23:32 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll 2020-03-06 23:32 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll 2020-03-06 23:32 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll 2020-03-06 23:32 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll 2020-03-06 23:32 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll 2020-03-06 23:32 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll 2020-03-06 23:32 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll 2020-03-06 23:32 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll 2020-03-06 23:32 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll 2020-03-06 23:32 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll 2020-03-06 23:32 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll 2020-03-06 23:32 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll 2020-03-06 23:32 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll 2020-03-06 23:32 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll 2020-03-06 23:32 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll 2020-03-06 23:32 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll 2020-03-06 23:32 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll 2020-03-06 23:32 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll 2020-03-06 23:32 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll 2020-03-06 23:32 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll 2020-03-06 23:32 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll 2020-03-06 23:32 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll 2020-03-06 23:32 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2020-03-06 23:32 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2020-03-06 23:32 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll 2020-03-06 23:32 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll 2020-03-06 23:32 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll 2020-03-06 23:32 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2020-03-06 23:32 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll 2020-03-06 23:32 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll 2020-03-06 23:32 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll 2020-03-06 23:32 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll 2020-03-06 23:32 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll 2020-03-06 23:32 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll 2020-03-06 23:32 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll 2020-03-06 23:32 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll 2020-03-06 23:32 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll 2020-03-06 23:32 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll 2020-03-06 23:32 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll 2020-03-06 23:32 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll 2020-03-06 23:32 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll 2020-03-06 23:32 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll 2020-03-06 23:32 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll 2020-03-06 23:32 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll 2020-03-06 23:32 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll 2020-03-06 23:32 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll 2020-03-06 23:32 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll 2020-03-06 23:32 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll 2020-03-06 23:32 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll 2020-03-06 23:32 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll 2020-03-06 23:32 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll 2020-03-06 23:32 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll 2020-03-06 23:32 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll 2020-03-06 23:32 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll 2020-03-06 23:32 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll 2020-03-06 23:32 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll 2020-03-06 23:32 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll 2020-03-06 23:32 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll 2020-03-06 23:32 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll 2020-03-06 23:32 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll 2020-03-06 23:32 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll 2020-03-06 23:32 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll 2020-03-06 23:32 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll 2020-03-06 23:32 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll 2020-03-06 23:32 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll 2020-03-06 23:32 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll 2020-03-06 23:32 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll 2020-03-06 23:32 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll 2020-03-06 23:32 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll 2020-03-06 23:32 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll 2020-03-06 23:32 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll 2020-03-06 23:32 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll 2020-03-06 20:00 - 2020-03-06 20:00 - 003834352 _____ (Blizzard Entertainment) C:\Users\ommo\Downloads\Warcraft-III-Public-Test-Setup.exe 2020-03-06 16:16 - 2020-03-06 16:16 - 000001574 _____ C:\Users\ommo\Desktop\Warcraft III - Shortcut.lnk 2020-03-06 15:19 - 2020-03-08 21:01 - 000000000 ____D C:\Users\ommo\AppData\Local\Blizzard Entertainment 2020-03-06 15:19 - 2020-03-08 21:01 - 000000000 ____D C:\Users\ommo\AppData\Local\Battle.net 2020-03-06 15:19 - 2020-03-06 15:19 - 000000000 ____D C:\ProgramData\Battle.net 2020-03-06 15:05 - 2020-03-06 15:05 - 000000000 ____D C:\Users\ommo\AppData\Roaming\WinRAR 2020-03-06 15:04 - 2020-03-06 15:04 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2020-03-06 15:04 - 2020-03-06 15:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2020-03-06 15:04 - 2020-03-06 15:04 - 000000000 ____D C:\Program Files\WinRAR 2020-03-06 15:03 - 2020-03-06 15:03 - 003205888 _____ (Alexander Roshal) C:\Users\ommo\Downloads\winrar-x64-580.exe 2020-03-06 14:49 - 2020-03-08 20:18 - 000000000 ____D C:\Users\ommo\Documents\war 2020-03-05 03:00 - 2020-03-05 03:00 - 000000000 ____D C:\Users\ommo\AppData\Local\PeerDistRepub 2020-03-05 02:49 - 2020-02-03 22:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2020-03-05 02:49 - 2020-02-03 22:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2020-03-05 02:43 - 2020-03-05 02:43 - 000000000 ____D C:\ProgramData\ssh 2020-03-05 01:59 - 2020-03-05 01:59 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe 2020-03-05 01:59 - 2020-03-05 01:59 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 000828216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe 2020-03-05 01:59 - 2020-03-05 01:59 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2020-03-05 01:59 - 2020-03-05 01:59 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll 2020-03-05 01:59 - 2020-03-05 01:59 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys 2020-03-05 01:59 - 2020-03-05 01:59 - 000153912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVfs.sys 2020-03-05 01:59 - 2020-03-05 01:59 - 000138040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppVStrm.sys 2020-03-05 01:59 - 2020-03-05 01:59 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2020-03-05 01:58 - 2020-03-05 01:58 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2020-03-05 01:58 - 2020-03-05 01:58 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2020-03-05 01:58 - 2020-03-05 01:58 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2020-03-05 01:58 - 2020-03-05 01:58 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2020-03-05 01:58 - 2020-03-05 01:58 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000059221 _____ C:\WINDOWS\system32\srms.dat 2020-03-05 01:58 - 2020-03-05 01:58 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2020-03-05 01:58 - 2020-03-05 01:58 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2020-03-05 01:58 - 2020-03-05 01:58 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2020-03-05 01:57 - 2020-03-05 01:57 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2020-03-05 01:57 - 2020-03-05 01:57 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2020-03-05 01:57 - 2020-03-05 01:57 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2020-03-05 01:57 - 2020-03-05 01:57 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2020-03-05 01:57 - 2020-03-05 01:57 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2020-03-05 01:57 - 2020-03-05 01:57 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2020-03-05 01:57 - 2020-03-05 01:57 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2020-03-05 01:57 - 2020-03-05 01:57 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe 2020-03-05 01:57 - 2020-03-05 01:57 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2020-03-05 01:56 - 2020-03-05 01:56 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2020-03-05 01:56 - 2020-03-05 01:56 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2020-03-05 01:56 - 2020-03-05 01:56 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2020-03-05 01:56 - 2020-03-05 01:56 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2020-03-05 01:56 - 2020-03-05 01:56 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssrvlic.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2020-03-05 01:56 - 2020-03-05 01:56 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2020-03-05 01:56 - 2020-03-05 01:56 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LSCSHostPolicy.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2020-03-05 01:56 - 2020-03-05 01:56 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\lstelemetry.dll 2020-03-05 01:56 - 2020-03-05 01:56 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe 2020-03-04 23:25 - 2020-03-04 23:26 - 005192280 _____ (Husdawg, LLC) C:\Users\ommo\Downloads\Detection.exe 2020-03-04 20:09 - 2019-03-18 15:20 - 008071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm000b.dll 2020-03-04 16:05 - 2020-03-04 16:05 - 000001203 _____ C:\Users\ommo\Desktop\AMD GPU Clock Tool.lnk 2020-03-04 16:03 - 2020-03-04 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD GPU Clock Tool 2020-03-04 16:03 - 2020-03-04 16:03 - 000000000 ____D C:\Program Files (x86)\AMD GPU Clock Tool 2020-03-04 16:03 - 2008-04-28 12:03 - 000047160 _____ (AMD, Inc.) C:\WINDOWS\system32\Drivers\AmdTools64.sys 2020-03-04 16:01 - 2020-03-04 16:02 - 001856694 _____ (Advanced Micro Devices Inc.) C:\Users\ommo\Downloads\AMDGPUClockTool_v0.9.26.0.exe 2020-03-04 15:51 - 2020-03-04 15:51 - 000001036 _____ C:\Users\ommo\Desktop\TechPowerUp GPU-Z.lnk 2020-03-04 15:50 - 2020-03-04 15:51 - 000000000 ____D C:\Program Files (x86)\GPU-Z 2020-03-04 15:49 - 2020-03-04 15:50 - 007093392 _____ (techPowerUp (www.techpowerup.com)) C:\Users\ommo\Downloads\GPU-Z.2.29.0.exe 2020-03-04 13:01 - 2020-03-04 13:01 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Sun 2020-03-04 13:01 - 2020-03-04 13:01 - 000000000 ____D C:\Users\ommo\AppData\LocalLow\Sun 2020-03-04 13:01 - 2020-03-04 13:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2020-03-04 13:01 - 2020-03-04 13:00 - 000114232 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2020-03-04 13:00 - 2020-03-04 13:00 - 000000000 ____D C:\ProgramData\Oracle 2020-03-04 13:00 - 2020-03-04 13:00 - 000000000 ____D C:\Program Files (x86)\Java 2020-03-04 12:58 - 2020-03-04 16:44 - 000000000 ____D C:\Users\ommo\AppData\Roaming\.minecraft 2020-03-04 12:58 - 2020-03-04 12:58 - 002066976 _____ (Oracle Corporation) C:\Users\ommo\Downloads\JavaSetup8u241.exe 2020-03-04 12:51 - 2020-03-04 12:51 - 000000852 _____ C:\Users\ommo\Desktop\Minecraft.lnk 2020-03-04 12:51 - 2020-03-04 12:51 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft 2020-03-04 12:45 - 2020-03-04 12:53 - 000000000 ____D C:\Users\ommo\Documents\minecraft 2020-03-04 12:44 - 2020-03-19 22:46 - 000000000 ____D C:\Users\ommo\AppData\Local\BitTorrentHelper 2020-03-04 12:44 - 2020-03-06 14:47 - 000000000 ____D C:\ProgramData\boost_interprocess 2020-03-04 12:43 - 2020-03-19 22:51 - 000000000 ____D C:\Users\ommo\AppData\Roaming\uTorrent 2020-03-04 12:43 - 2020-03-19 22:51 - 000000000 ____D C:\Users\ommo\AppData\LocalLow\uTorrent 2020-03-04 12:43 - 2020-03-04 12:43 - 000000932 _____ C:\Users\ommo\Desktop\µTorrent.lnk 2020-03-04 11:11 - 2020-03-04 11:11 - 000000000 ____D C:\WINDOWS\ServiceProfiles 2020-03-04 11:11 - 2020-03-04 11:11 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines 2020-03-04 11:09 - 2020-03-04 11:09 - 000008192 _____ C:\WINDOWS\system32\config\userdiff 2020-03-04 11:05 - 2020-03-04 11:05 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices 2020-03-04 11:05 - 2020-03-04 11:05 - 000000000 ____D C:\WINDOWS\system32\msmq 2020-03-04 11:05 - 2020-03-04 11:05 - 000000000 ____D C:\WINDOWS\system32\BestPractices 2020-03-04 11:05 - 2020-03-04 11:05 - 000000000 ____D C:\Program Files\Reference Assemblies 2020-03-04 11:05 - 2020-03-04 11:05 - 000000000 ____D C:\Program Files\MSBuild 2020-03-04 11:05 - 2020-03-04 11:05 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies 2020-03-04 11:05 - 2020-03-04 11:05 - 000000000 ____D C:\Program Files (x86)\MSBuild 2020-03-04 11:05 - 2020-03-04 11:05 - 000000000 ____D C:\inetpub 2020-03-04 11:04 - 2019-03-02 03:31 - 001166488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2020-03-04 11:04 - 2019-03-02 03:31 - 000124568 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2020-03-04 11:04 - 2019-03-02 03:31 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2020-03-04 11:04 - 2019-02-06 04:41 - 000778912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2020-03-04 11:04 - 2019-02-06 04:41 - 000103072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2020-03-04 11:04 - 2019-02-06 04:41 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2020-03-04 10:31 - 2020-03-04 10:34 - 000000000 ____D C:\Users\ommo\Documents\Image-Line 2020-03-04 10:30 - 2020-03-04 10:30 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 2020-03-04 10:30 - 2020-03-04 10:30 - 000000000 ____D C:\Program Files (x86)\ASIO4ALL v2 2020-03-04 10:29 - 2020-03-22 21:45 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line 2020-03-04 10:29 - 2020-03-22 21:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line 2020-03-04 10:29 - 2020-03-04 10:29 - 000000000 ____D C:\Program Files\Common Files\VST2 2020-03-04 10:29 - 2020-03-04 10:29 - 000000000 ____D C:\Program Files\Common Files\Propellerhead Software 2020-03-04 10:16 - 2020-03-04 10:30 - 000000000 ____D C:\Program Files\Image-Line 2020-03-04 08:51 - 2020-03-04 08:51 - 000000219 _____ C:\Users\ommo\Desktop\Counter-Strike Global Offensive.url 2020-03-04 08:14 - 2020-03-27 18:06 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1663783040-3019963794-2028018619-1000 2020-03-04 08:14 - 2020-03-19 18:28 - 000000000 ___RD C:\Users\ommo\OneDrive 2020-03-04 08:07 - 2020-03-04 08:07 - 000000000 ____D C:\ProgramData\NVIDIA 2020-03-04 07:59 - 2020-03-12 13:13 - 000000000 ____D C:\Users\ommo\AppData\Local\D3DSCache 2020-03-04 07:54 - 2020-03-05 15:20 - 000000000 ____D C:\Users\ommo\AppData\Local\PlaceholderTileLogoFolder 2020-03-04 07:53 - 2020-03-04 07:54 - 000000000 ____D C:\Users\ommo\AppData\Local\Comms 2020-03-04 07:52 - 2020-03-04 07:52 - 000000000 ___HD C:\Users\ommo\MicrosoftEdgeBackups 2020-03-04 07:49 - 2020-03-22 21:49 - 000000000 ____D C:\Users\ommo\AppData\Local\CrashDumps 2020-03-04 07:49 - 2020-03-04 07:49 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2020-03-04 07:34 - 2020-03-05 03:43 - 000000000 ____D C:\ProgramData\Packages 2020-03-04 07:30 - 2020-03-04 07:30 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2020-03-04 07:29 - 2020-03-04 07:29 - 000000000 ____D C:\Users\ommo\AppData\Local\MicrosoftEdge 2020-03-04 01:38 - 2020-03-04 01:38 - 000000000 ____D C:\Users\ommo\AppData\Local\Publishers 2020-03-04 01:37 - 2020-03-14 12:32 - 000000000 __RHD C:\Users\Public\AccountPictures 2020-03-04 01:37 - 2020-03-14 12:32 - 000000000 ___RD C:\Users\ommo\3D Objects 2020-03-04 01:37 - 2020-03-10 15:50 - 000000000 ____D C:\Users\ommo\AppData\Local\Packages 2020-03-04 01:37 - 2020-03-04 01:37 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Adobe 2020-03-04 01:36 - 2020-03-04 01:38 - 000000000 ____D C:\Users\ommo\AppData\Local\ConnectedDevicesPlatform 2020-03-04 01:36 - 2020-03-04 01:36 - 000000020 ___SH C:\Users\ommo\ntuser.ini 2020-03-04 01:34 - 2020-03-27 18:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-03-04 01:34 - 2020-03-27 18:06 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2020-03-04 01:34 - 2020-03-27 18:06 - 000003124 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2020-03-04 01:34 - 2020-03-27 18:05 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software 2020-03-04 01:34 - 2020-03-26 00:00 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update 2020-03-04 01:34 - 2020-03-05 02:16 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2020-03-04 01:34 - 2020-03-04 01:34 - 000007623 _____ C:\WINDOWS\diagwrn.xml 2020-03-04 01:34 - 2020-03-04 01:34 - 000007623 _____ C:\WINDOWS\diagerr.xml 2020-03-04 01:34 - 2020-03-04 01:34 - 000000000 ____D C:\WINDOWS\system32\Tasks\WPD 2020-03-04 01:26 - 2020-03-27 12:41 - 000000000 ____D C:\Users\ommo 2020-03-04 01:26 - 2020-03-19 18:27 - 000002399 _____ C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2020-03-04 01:26 - 2020-03-15 13:51 - 000936048 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-03-04 01:22 - 2020-01-09 23:24 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2020-03-04 01:16 - 2020-03-27 17:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-03-04 01:16 - 2020-03-14 12:28 - 000258616 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-03-04 00:19 - 2020-03-27 12:40 - 000000000 ___DC C:\WINDOWS\Panther 2020-03-03 22:08 - 2020-03-04 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2020-03-03 22:08 - 2020-03-03 22:08 - 000000869 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk 2020-03-03 22:08 - 2020-03-03 22:08 - 000000000 ____D C:\Program Files\CPUID 2020-03-03 22:05 - 2020-03-11 20:00 - 000002076 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2020-03-03 22:05 - 2020-03-04 11:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2020-03-03 22:05 - 2020-03-03 22:05 - 000000000 ____D C:\Users\ommo\AppData\Roaming\AVAST Software 2020-03-03 21:58 - 2020-03-04 00:19 - 000000000 ____D C:\ESD 2020-03-03 21:47 - 2020-03-03 21:47 - 000000000 ___HD C:\$Windows.~WS 2020-03-03 21:30 - 2020-03-11 13:33 - 000458584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2020-03-03 21:30 - 2020-03-03 21:30 - 000000000 ____D C:\Program Files\Common Files\AVAST Software 2020-03-03 21:30 - 2020-03-03 21:29 - 000316256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2020-03-03 21:30 - 2020-03-03 21:29 - 000175400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2020-03-03 21:30 - 2020-03-03 21:29 - 000084056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2020-03-03 21:30 - 2020-03-03 21:29 - 000042976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2020-03-03 21:30 - 2020-03-03 21:28 - 000205576 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys 2020-03-03 21:30 - 2020-03-03 21:28 - 000037864 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys 2020-03-03 21:30 - 2020-03-03 21:27 - 000848672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2020-03-03 21:24 - 2020-03-03 21:24 - 000000000 ____D C:\Program Files\AVAST Software 2020-03-03 21:22 - 2020-03-26 01:18 - 000000000 ____D C:\ProgramData\AVAST Software 2020-03-03 20:35 - 2020-03-08 12:38 - 000001510 _____ C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA GeForce NOW.lnk 2020-03-03 20:35 - 2020-03-08 12:38 - 000001502 _____ C:\Users\ommo\Desktop\NVIDIA GeForce NOW.lnk 2020-03-03 19:49 - 2020-03-09 00:04 - 000000000 ____D C:\Users\ommo\AppData\Roaming\discord 2020-03-03 19:49 - 2020-03-04 01:27 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2020-03-03 19:49 - 2020-03-03 19:49 - 000002158 _____ C:\Users\ommo\Desktop\Discord.lnk 2020-03-03 19:48 - 2020-03-03 19:49 - 000000000 ____D C:\Users\ommo\AppData\Local\SquirrelTemp 2020-03-03 19:48 - 2020-03-03 19:49 - 000000000 ____D C:\Users\ommo\AppData\Local\Discord 2020-03-03 19:41 - 2020-03-08 12:38 - 000000000 ____D C:\Users\ommo\AppData\Local\NVIDIA Corporation 2020-03-03 19:21 - 2020-03-04 01:25 - 000892382 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2020-03-03 17:40 - 2020-03-03 17:40 - 000000000 ____D C:\Users\ommo\AppData\Local\Steam 2020-03-03 17:40 - 2020-03-03 17:40 - 000000000 ____D C:\Users\ommo\AppData\Local\CEF 2020-03-03 17:36 - 2020-03-11 12:29 - 000000000 ____D C:\Users\ommo\AppData\Local\Spotify 2020-03-03 17:36 - 2020-03-03 17:36 - 000001799 _____ C:\Users\ommo\Desktop\Spotify.lnk 2020-03-03 17:36 - 2020-03-03 17:36 - 000001785 _____ C:\Users\ommo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2020-03-03 17:28 - 2020-03-11 16:03 - 000000000 ____D C:\Users\ommo\AppData\Roaming\Spotify 2020-03-03 17:26 - 2020-03-27 13:11 - 000000000 ____D C:\Program Files (x86)\Steam 2020-03-03 17:26 - 2020-03-04 11:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2020-03-03 17:26 - 2020-03-03 17:26 - 000000967 _____ C:\Users\Public\Desktop\Steam.lnk 2020-03-03 17:20 - 2020-03-18 00:25 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2020-03-03 17:20 - 2020-03-18 00:25 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2020-03-03 17:19 - 2020-03-03 17:35 - 000000000 ____D C:\Users\ommo\AppData\Local\Google 2020-03-03 17:19 - 2020-03-03 17:20 - 000000000 ____D C:\Program Files (x86)\Google ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-03-27 18:12 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2020-03-27 14:28 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-03-27 10:57 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF 2020-03-27 10:34 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-03-27 00:18 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-03-26 21:57 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps 2020-03-24 21:19 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\NDF 2020-03-14 12:24 - 2019-03-19 08:23 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\setup 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Dism 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-03-14 12:24 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Windows Defender 2020-03-14 12:24 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\servicing 2020-03-14 04:07 - 2019-03-15 10:17 - 000000000 ____D C:\WINDOWS\system32\MRT 2020-03-14 04:04 - 2009-10-14 14:51 - 121542864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2020-03-12 13:24 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2020-03-11 21:20 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2020-03-11 20:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2020-03-10 15:44 - 2019-03-19 06:52 - 000000000 __RHD C:\Users\Public\Libraries 2020-03-05 02:44 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2020-03-05 02:43 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\PrintDialog 2020-03-05 02:43 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2020-03-05 02:43 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2020-03-04 20:09 - 2019-03-19 08:22 - 000000000 ____D C:\WINDOWS\OCR 2020-03-04 11:15 - 2019-03-19 06:56 - 000000000 ____D C:\WINDOWS\Setup 2020-03-04 11:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\IME 2020-03-04 11:15 - 2019-03-19 06:49 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template 2020-03-04 11:15 - 2019-03-15 12:29 - 000000000 ____D C:\WINDOWS\system32\SPReview 2020-03-04 11:15 - 2019-03-15 12:29 - 000000000 ____D C:\WINDOWS\system32\EventProviders 2020-03-04 11:15 - 2009-07-14 05:20 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2020-03-04 11:15 - 2009-07-14 05:20 - 000000000 ____D C:\WINDOWS\system32\MsDtc 2020-03-04 11:12 - 2019-03-19 08:20 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm 2020-03-04 11:12 - 2019-03-19 08:20 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN 2020-03-04 11:12 - 2019-03-19 08:20 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr 2020-03-04 11:12 - 2019-03-19 08:20 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2020-03-04 11:12 - 2019-03-19 08:20 - 000000000 ____D C:\WINDOWS\system32\winrm 2020-03-04 11:12 - 2019-03-19 08:20 - 000000000 ____D C:\WINDOWS\system32\WCN 2020-03-04 11:12 - 2019-03-19 08:20 - 000000000 ____D C:\WINDOWS\system32\slmgr 2020-03-04 11:12 - 2019-03-19 08:20 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2020-03-04 11:12 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI 2020-03-04 11:12 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\IME 2020-03-04 11:12 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\MUI 2020-03-04 11:12 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\IME 2020-03-04 11:12 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\schemas 2020-03-04 11:12 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2020-03-04 11:12 - 2019-03-15 09:57 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2020-03-04 11:11 - 2019-03-19 08:23 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2020-03-04 11:11 - 2019-03-19 08:23 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2020-03-04 11:11 - 2019-03-19 06:52 - 000000000 __SHD C:\Program Files\Windows Sidebar 2020-03-04 11:11 - 2019-03-19 06:52 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar 2020-03-04 11:11 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\System 2020-03-04 11:11 - 2019-03-15 10:11 - 000000000 ____D C:\Program Files\Fujitsu 2020-03-04 11:11 - 2019-03-15 10:11 - 000000000 ____D C:\Program Files (x86)\Fujitsu 2020-03-04 11:11 - 2019-03-15 09:27 - 000000000 ____D C:\Program Files\Intel 2020-03-04 11:11 - 2009-07-14 07:32 - 000000000 ____D C:\Program Files\Microsoft Games 2020-03-04 11:11 - 2009-07-14 07:32 - 000000000 ____D C:\Program Files\DVD Maker 2020-03-04 11:05 - 2020-01-09 23:26 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll 2020-03-04 11:05 - 2020-01-09 23:26 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll 2020-03-04 11:05 - 2020-01-09 23:26 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll 2020-03-04 11:05 - 2020-01-09 23:25 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll 2020-03-04 11:05 - 2020-01-09 23:25 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll 2020-03-04 11:05 - 2020-01-09 23:25 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll 2020-03-04 11:05 - 2020-01-09 23:25 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe 2020-03-04 11:05 - 2020-01-09 23:25 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll 2020-03-04 11:05 - 2020-01-09 23:25 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll 2020-03-04 11:05 - 2020-01-09 23:25 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll 2020-03-04 11:05 - 2019-03-19 07:00 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll 2020-03-04 11:05 - 2019-03-19 07:00 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll 2020-03-04 11:05 - 2019-03-19 07:00 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll 2020-03-04 11:05 - 2019-03-19 07:00 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll 2020-03-04 11:05 - 2019-03-19 07:00 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb 2020-03-04 11:05 - 2019-03-19 07:00 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb 2020-03-04 11:05 - 2019-03-19 07:00 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb 2020-03-04 11:05 - 2019-03-19 07:00 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll 2020-03-04 11:05 - 2019-03-19 07:00 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb 2020-03-04 11:05 - 2019-03-19 07:00 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe 2020-03-04 11:05 - 2019-03-19 07:00 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll 2020-03-04 11:05 - 2019-03-19 07:00 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll 2020-03-04 11:05 - 2019-03-19 07:00 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll 2020-03-04 11:05 - 2019-03-19 07:00 - 000009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof 2020-03-04 11:05 - 2019-03-19 06:58 - 001401344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll 2020-03-04 11:05 - 2019-03-19 06:58 - 000783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll 2020-03-04 11:05 - 2019-03-19 06:58 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll 2020-03-04 11:05 - 2019-03-19 06:58 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll 2020-03-04 11:05 - 2019-03-19 06:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll 2020-03-04 11:05 - 2019-03-19 06:58 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys 2020-03-04 11:05 - 2019-03-19 06:58 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb 2020-03-04 11:05 - 2019-03-19 06:58 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb 2020-03-04 11:05 - 2019-03-19 06:58 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb 2020-03-04 11:05 - 2019-03-19 06:58 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe 2020-03-04 11:05 - 2019-03-19 06:58 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb 2020-03-04 11:05 - 2019-03-19 06:58 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe 2020-03-04 11:05 - 2019-03-19 06:58 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll 2020-03-04 11:05 - 2019-03-19 06:58 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof 2020-03-04 11:05 - 2019-03-19 06:57 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll 2020-03-04 11:05 - 2019-03-19 06:57 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll 2020-03-04 11:05 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2020-03-04 11:05 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\inetsrv 2020-03-04 09:58 - 2009-10-14 14:52 - 000748816 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2020-03-04 09:45 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\appcompat 2020-03-04 07:56 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\USOPrivate 2020-03-04 07:50 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ServiceState 2020-03-04 07:40 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2020-03-04 01:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\spool 2020-03-04 01:35 - 2019-03-19 06:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2020-03-04 00:45 - 2009-07-14 06:45 - 000020480 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2020-03-04 00:45 - 2009-07-14 06:45 - 000020480 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2020-03-03 22:33 - 2019-03-15 10:16 - 000715988 _____ C:\WINDOWS\system32\perfh019.dat 2020-03-03 22:33 - 2019-03-15 10:16 - 000150294 _____ C:\WINDOWS\system32\perfc019.dat 2020-03-03 22:33 - 2019-03-15 09:58 - 000481060 _____ C:\WINDOWS\system32\perfh00B.dat 2020-03-03 22:33 - 2019-03-15 09:58 - 000101106 _____ C:\WINDOWS\system32\perfc00B.dat ==================== Files in the root of some directories ======== 2020-03-08 21:01 - 2020-03-08 21:01 - 000000044 _____ () C:\Users\ommo\AppData\Roaming\twow_sysprepdt.dat ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ======================== And here is addition.txt Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-03-2020 Ran by ommo (27-03-2020 18:42:10) Running from C:\Users\ommo\Desktop\frst Windows 10 Pro Version 1909 18363.720 (X64) (2020-03-03 23:36:30) Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1663783040-3019963794-2028018619-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1663783040-3019963794-2028018619-503 - Limited - Disabled) Guest (S-1-5-21-1663783040-3019963794-2028018619-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1663783040-3019963794-2028018619-1002 - Limited - Enabled) ommo (S-1-5-21-1663783040-3019963794-2028018619-1000 - Administrator - Enabled) => C:\Users\ommo WDAGUtilityAccount (S-1-5-21-1663783040-3019963794-2028018619-504 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Disabled - Out of date) {5078598A-1FA2-C888-AA5F-A9C66537DB12} AS: Microsoft Security Essentials (Enabled - Out of date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\uTorrent) (Version: 3.5.5.45574 - BitTorrent Inc.) AMD GPU Clock Tool (HKLM-x32\...\AMD GPU Clock Tool) (Version: 0.9.26.0 - Advanced Micro Devices Inc.) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach) Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software) CCleaner (HKLM\...\CCleaner) (Version: 5.64 - Piriform) CPUID CPU-Z 1.91 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.91 - CPUID, Inc.) Discord (HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\Discord) (Version: 0.0.306 - Discord Inc.) EA.com Update (HKLM-x32\...\{9AB97F52-512B-43EF-AAEC-4825C17B32ED}) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden Intel PROSet Wireless (HKLM-x32\...\ProInst) (Version: - ) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation) Java 8 Update 241 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180241F0}) (Version: 8.0.2410.7 - Oracle Corporation) LogMeIn Hamachi (HKLM-x32\...\{ECC0FA07-863E-44BC-8B1D-DA22F96E5FB7}) (Version: 2.2.0.633 - LogMeIn, Inc.) Hidden LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.633 - LogMeIn, Inc.) Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes) Microsoft OneDrive (HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) MTA:SA v1.5.7 (HKLM-x32\...\MTA:SA 1.5) (Version: v1.5.7 - Multi Theft Auto) NVIDIA GeForce NOW 2.0.17.126 (HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GeforceNOW) (Version: 2.0.17.126 - NVIDIA Corporation) NVIDIA Install Application (HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer) (Version: 2.1002.344.0 - NVIDIA Corporation) Hidden OldSchool RuneScape Launcher 1.2.7 (HKLM-x32\...\{FEDDCE73-34B8-4980-90B8-8619A78C902C}) (Version: 1.2.7 - Jagex Ltd) OpenTTD 1.9.3 (HKLM-x32\...\OpenTTD) (Version: 1.9.3 - OpenTTD) Spotify (HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\Spotify) (Version: 1.1.27.472.gf6574b97 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp) WickrMe (HKLM\...\{D1C2F7BA-C2B6-4E7D-AFBE-BE4843ED87AB}) (Version: 5.50.6 - Wickr Inc.) WinRAR 5.80 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.80.0 - win.rar GmbH) WO Mic Client (HKLM-x32\...\WOMic) (Version: - ) Packages: ========= Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-03-05] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-03-05] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.1224.0_x64__8wekyb3d8bbwe [2020-03-05] (Microsoft Studios) [MS Ad] MSN Sää -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad] Pro Pilkki 2 -> C:\Program Files\WindowsApps\23095ProcyonProducts.ProPilkki2_1.5.0.0_x86__vkzt7s36c4drt [2020-03-04] (Procyon Products) ==================== Custom CLSID (Whitelisted): ============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-03-12] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-03-12] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (Whitelisted) ==================== ==================== Shortcuts & WMI ======================== ==================== Loaded Modules (Whitelisted) ============= 2019-03-19 06:44 - 2019-03-19 06:44 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXINIT.dll ==================== Alternate Data Streams (Whitelisted) ======== (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData:NT [40] AlternateDataStreams: C:\ProgramData:NT2 [716] AlternateDataStreams: C:\Users\All Users:NT [40] AlternateDataStreams: C:\Users\All Users:NT2 [716] AlternateDataStreams: C:\ProgramData\Application Data:NT [40] AlternateDataStreams: C:\ProgramData\Application Data:NT2 [716] AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40] AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [716] AlternateDataStreams: C:\Users\ommo\Application Data:NT [40] AlternateDataStreams: C:\Users\ommo\Application Data:NT2 [716] AlternateDataStreams: C:\Users\ommo\AppData\Roaming:NT [40] AlternateDataStreams: C:\Users\ommo\AppData\Roaming:NT2 [716] ==================== Safe Mode (Whitelisted) ================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2" ==================== Association (Whitelisted) ================= ==================== Internet Explorer trusted/restricted ========== ==================== Hosts content: ========================= (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Other Areas =========================== (Currently there is no automatic fix for this section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\ommo\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\kevin-mckenna-vigor-1.jpg DNS Servers: 192.168.43.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (If an entry is included in the fixlist, it will be removed.) HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui" HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\StartupApproved\StartupFolder: => "WO Mic Client.lnk" HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\StartupApproved\Run: => "CCleaner Smart Cleaning" HKU\S-1-5-21-1663783040-3019963794-2028018619-1000\...\StartupApproved\Run: => "Chromium" ==================== FirewallRules (Whitelisted) ================ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{AC37E592-B764-41CD-95FD-26BE45C484D1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{07FC4E13-E530-4E01-9A5A-D5D548AFA732}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [TCP Query User{4D3D2CBC-8958-449D-8595-EBC5E4D5DCD9}C:\users\ommo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ommo\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [UDP Query User{960A81EC-2A42-4077-853B-A7EABCB23E33}C:\users\ommo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ommo\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{3EB4E305-EF34-4F2A-A94C-34712B805F24}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{2718CBB4-98C7-4C60-9786-E3142AF1A616}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [TCP Query User{13D278C0-8A05-44CD-A78C-3CBB84E8F835}C:\users\ommo\appdata\local\nvidia corporation\geforcenow\cef\geforcenowstreamer.exe] => (Allow) C:\users\ommo\appdata\local\nvidia corporation\geforcenow\cef\geforcenowstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [UDP Query User{CB050457-C661-42B6-B021-3652646C9A33}C:\users\ommo\appdata\local\nvidia corporation\geforcenow\cef\geforcenowstreamer.exe] => (Allow) C:\users\ommo\appdata\local\nvidia corporation\geforcenow\cef\geforcenowstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{115C8C7E-4C43-4A93-92E2-7511D478214A}] => (Allow) C:\Users\ommo\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{F70E11AF-607F-4406-BD84-8AB691141634}] => (Allow) C:\Users\ommo\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [TCP Query User{BDF3AB11-1EAD-4685-B69C-B21B3143E4F9}C:\program files (x86)\java\jre1.8.0_241\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_241\bin\java.exe FirewallRules: [UDP Query User{EE85A882-9FCA-45DC-BC51-DDAD43C66990}C:\program files (x86)\java\jre1.8.0_241\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_241\bin\java.exe FirewallRules: [{6679464C-6F65-4842-859A-31E4E59DCFCC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> ) FirewallRules: [{E8A1C584-B04D-433F-9FB8-C76DC79F1DCB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> ) FirewallRules: [TCP Query User{6116FB59-423C-4F23-85AA-5A36A5640EA4}C:\users\ommo\documents\war\warcraft iii 1.26 -iceblitz\war3.exe] => (Allow) C:\users\ommo\documents\war\warcraft iii 1.26 -iceblitz\war3.exe (Blizzard Entertainment) [File not signed] FirewallRules: [UDP Query User{2531A7D6-3686-4F80-B6EE-23515394E07A}C:\users\ommo\documents\war\warcraft iii 1.26 -iceblitz\war3.exe] => (Allow) C:\users\ommo\documents\war\warcraft iii 1.26 -iceblitz\war3.exe (Blizzard Entertainment) [File not signed] FirewallRules: [TCP Query User{B083D99D-E414-4F9D-A4A5-76479FA8CCFD}C:\users\ommo\documents\war321\warcraft iii 1.28.5\warcraft iii.exe] => (Allow) C:\users\ommo\documents\war321\warcraft iii 1.28.5\warcraft iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [UDP Query User{CD15A948-A582-4538-B79A-A6BBFBA069C4}C:\users\ommo\documents\war321\warcraft iii 1.28.5\warcraft iii.exe] => (Allow) C:\users\ommo\documents\war321\warcraft iii 1.28.5\warcraft iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [{CDA7BB87-9F03-4236-839D-C661506B29A8}] => (Allow) C:\Program Files (x86)\WOMic\womicclient.exe () [File not signed] FirewallRules: [{0A00891D-9B03-4985-ACB6-22DC6B238BB2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> ) FirewallRules: [{FF13BC11-6DF3-4A1B-811E-5BCFFDDCDA41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> ) FirewallRules: [{4A6F99EA-1CB5-41AA-A0A9-B0FA14CBE858}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [TCP Query User{9D86AD00-A830-48E7-93CB-5F0EA30D1577}C:\program files\openttd\openttd.exe] => (Allow) C:\program files\openttd\openttd.exe (OpenTTD Development Team) [File not signed] FirewallRules: [UDP Query User{2110A273-F44D-47E1-A846-D47D94610DEA}C:\program files\openttd\openttd.exe] => (Allow) C:\program files\openttd\openttd.exe (OpenTTD Development Team) [File not signed] FirewallRules: [TCP Query User{85797C12-8633-43EC-9AA7-A893CA1C121E}C:\users\ommo\documents\doom\zando\zandronum.exe] => (Allow) C:\users\ommo\documents\doom\zando\zandronum.exe ( ) [File not signed] FirewallRules: [UDP Query User{3E594EF4-FC76-4A0B-BCE9-6473809B5826}C:\users\ommo\documents\doom\zando\zandronum.exe] => (Allow) C:\users\ommo\documents\doom\zando\zandronum.exe ( ) [File not signed] FirewallRules: [TCP Query User{06DD7BD7-708B-420E-ACBD-A1EE8A01A919}C:\users\ommo\documents\doom\doomseeker\doomseeker.exe] => (Allow) C:\users\ommo\documents\doom\doomseeker\doomseeker.exe (The Doomseeker Team) [File not signed] FirewallRules: [UDP Query User{F146754F-E4C6-4FE7-864A-1EE05D73B992}C:\users\ommo\documents\doom\doomseeker\doomseeker.exe] => (Allow) C:\users\ommo\documents\doom\doomseeker\doomseeker.exe (The Doomseeker Team) [File not signed] FirewallRules: [TCP Query User{99DFDD23-759B-476C-A164-8CDAD759F8FE}C:\users\ommo\documents\doom\online\zandronum.exe] => (Allow) C:\users\ommo\documents\doom\online\zandronum.exe ( ) [File not signed] FirewallRules: [UDP Query User{BA3601B1-1E3E-42D0-AE84-0EB6518DB4F5}C:\users\ommo\documents\doom\online\zandronum.exe] => (Allow) C:\users\ommo\documents\doom\online\zandronum.exe ( ) [File not signed] ==================== Restore Points ========================= 22-03-2020 03:23:20 Windows Update 26-03-2020 05:58:45 Windows Modules Installer ==================== Faulty Device Manager Devices ============ Name: LogMeIn Hamachi Virtual Ethernet Adapter Description: LogMeIn Hamachi Virtual Ethernet Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: LogMeIn Inc. Service: Hamachi Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Microsoft Hyper-V Virtualization Infrastructure Driver Description: Microsoft Hyper-V Virtualization Infrastructure Driver Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: Vid Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Broadcom NetLink (TM) Gigabit Ethernet Description: Broadcom NetLink (TM) Gigabit Ethernet Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Broadcom Corporation Service: k57nd60a Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Broadcom 802.11g Network Adapter Description: Broadcom 802.11g Network Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Broadcom Service: BCM43XX Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WO Mic Device Description: WO Mic Device Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Wolicheng Tech Ltd. Service: wovad_micarray Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver ==================== Event log errors: ======================== Application errors: ================== Error: (03/27/2020 06:36:35 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: NT AUTHORITY) Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code. Error: (03/27/2020 06:30:36 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: NT AUTHORITY) Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code. Error: (03/27/2020 06:30:36 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: NT AUTHORITY) Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code. Error: (03/27/2020 06:28:33 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: NT AUTHORITY) Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code. Error: (03/27/2020 05:05:09 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (1652,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/27/2020 04:46:40 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (9252,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/27/2020 04:37:32 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (1108,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/27/2020 04:04:28 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (10188,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. System errors: ============= Error: (03/27/2020 06:44:22 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY) Description: DCOM got error "1084" attempting to start the service EventSystem with arguments "Unavailable" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error: (03/27/2020 06:44:21 PM) (Source: DCOM) (EventID: 10005) (User: HEMMO) Description: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server: Windows.Internal.CapabilityAccess.CapabilityAccess Error: (03/27/2020 06:44:21 PM) (Source: DCOM) (EventID: 10005) (User: HEMMO) Description: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server: Windows.Internal.CapabilityAccess.CapabilityAccess Error: (03/27/2020 06:44:01 PM) (Source: DCOM) (EventID: 10005) (User: HEMMO) Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC} Error: (03/27/2020 06:43:18 PM) (Source: DCOM) (EventID: 10005) (User: HEMMO) Description: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server: Windows.Internal.CapabilityAccess.CapabilityAccess Error: (03/27/2020 06:43:17 PM) (Source: DCOM) (EventID: 10005) (User: HEMMO) Description: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server: Windows.Internal.CapabilityAccess.CapabilityAccess Error: (03/27/2020 06:43:17 PM) (Source: DCOM) (EventID: 10005) (User: HEMMO) Description: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server: Windows.Internal.CapabilityAccess.CapabilityAccess Error: (03/27/2020 06:43:17 PM) (Source: DCOM) (EventID: 10005) (User: HEMMO) Description: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server: Windows.Internal.CapabilityAccess.CapabilityAccess Windows Defender: =================================== Date: 2020-03-06 19:20:31.455 Description: Windows Defender Antivirus scan has been stopped before completion. Scan ID: {4B96E389-8F0E-4D7F-8EC9-5F1BE8CCCDC0} Scan Type: Antimalware Scan Parameters: Quick Scan Date: 2020-03-04 10:00:44.951 Description: Windows Defender Antivirus has encountered an error trying to update security intelligence. New security intelligence Version: Previous security intelligence Version: 1.285.74.0 Update Source: Microsoft Update Server Security intelligence Type: AntiVirus Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15600.4 Error code: 0x80240022 Error description: The program can't check for definition updates. Date: 2020-03-04 10:00:44.945 Description: Windows Defender Antivirus has encountered an error trying to update security intelligence. New security intelligence Version: Previous security intelligence Version: 1.285.74.0 Update Source: Microsoft Update Server Security intelligence Type: AntiVirus Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15600.4 Error code: 0x80240022 Error description: The program can't check for definition updates. Date: 2020-03-04 09:13:42.909 Description: Windows Defender Antivirus has encountered an error trying to update security intelligence. New security intelligence Version: Previous security intelligence Version: 1.285.74.0 Update Source: Microsoft Malware Protection Center Security intelligence Type: AntiVirus Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15600.4 Error code: 0x80072ee7 Error description: The server name or address could not be resolved Date: 2020-03-04 09:13:42.908 Description: Windows Defender Antivirus has encountered an error trying to update security intelligence. New security intelligence Version: Previous security intelligence Version: 1.285.74.0 Update Source: Microsoft Malware Protection Center Security intelligence Type: AntiSpyware Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15600.4 Error code: 0x80072ee7 Error description: The server name or address could not be resolved Date: 2020-03-04 09:13:42.908 Description: Windows Defender Antivirus has encountered an error trying to update security intelligence. New security intelligence Version: Previous security intelligence Version: 1.285.74.0 Update Source: Microsoft Malware Protection Center Security intelligence Type: AntiVirus Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15600.4 Error code: 0x80072ee7 Error description: The server name or address could not be resolved CodeIntegrity: =================================== Date: 2020-03-27 18:10:42.921 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-27 18:10:39.620 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-27 18:10:39.605 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-27 18:07:26.364 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-27 18:07:13.804 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-27 18:07:07.686 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-27 18:07:05.458 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-27 18:07:03.505 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. ==================== Memory info =========================== BIOS: Phoenix Technologies LTD V1.21 10/23/2009 Motherboard: Acer JV50 Processor: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz Percentage of memory in use: 52% Total physical RAM: 4090.92 MB Available physical RAM: 1936.24 MB Total Virtual: 8186.92 MB Available Virtual: 6311.44 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:148.42 GB) (Free:33.76 GB) NTFS \\?\Volume{484329c3-46ef-11e9-9605-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS \\?\Volume{80d2f3ee-0000-0000-0000-202125000000}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS ==================== MBR & Partition Table ==================== ========================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 149.1 GB) (Disk ID: 80D2F3EE) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=148.4 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=543 MB) - (Type=27) ==================== End of Addition.txt =======================