Task Manager Opens Then Immediately Closes

zchatk · August 9, 2017

Recently I had some malware and trojans installed on my computer, I believed I had gotten rid of them after running Malwarebytes, but now my task manager opens for about half a second then closes. I cant figure out how to fix it so I am looking for some help here.

Aura · August 9, 2017

Hi zchatk

My name is Aura and I'll be assisting you with your malware issue. Since we'll be working together, you can call me Aura or Yoan, which is my real name, it's up to you! Now that we've broke the ice, I'll just ask you a few things during the time we'll be working together to clean your system and get it back to an operational state.

As you'll notice, the logs we are asking for here are quite lenghty, so it's normal for me to not reply exactly after you post them. This is because I need some time to analyse them and then act accordingly. However, I'll always reply within 24 hours, 48 hours at most if something unexpected happens;
As long as I'm assisting you on Malwarebytes Forums, in this thread, I'll ask you to not seek assistance anywhere else for any issue related to the system we are working on. If you have an issue, question, etc. about your computer, please ask it in this thread and I'll assist you;
The same principle applies to any modifications you make to your system, I would like you to ask me before you do any manipulations that aren't in the instructions I posted. This is to ensure that we are operating in sync and I know exactly what's happening on your system;
If you aren't sure about an instruction I'm giving you, ask me about it. This is to ensure that the clean-up process goes without any issue. I'll answer you and even give you more precise instructions/explanations if you need. There's no shame in asking questions here, better be safe than sorry!;
If you don't reply to your thread within 3 days, I'll bump this thread to let you know that I'm waiting for you. If you don't reply after 5 days, it'll be closed. If you return after that period, you can send me a PM to get it unlocked and we'll continue where we left off;
Since malware can work quickly, we want to get rid of them as fast as we can, before they make unknown changes to the system. This being said, I would appreciate if you could reply to this thread within 24 hours of me posting. This way, we'll have a good clean-up rhythm and the chances of complications will be reduced;
I'm against any form of pirated, illegal and counterfeit software and material. So if you have any installed on your system, I'll ask you to uninstall them right now. You don't have to tell me if you indeed had some or not, I'll give you the benefit of the doubt. Plus, this would be against Malwarebytes Forums's rules;
In the end, you are the one asking for assistance here. So if you wish to go a different way during the clean-up, like format and reinstall Windows, you are free to do so. I would appreciate you to let me know about it first, and if you need, I can also assist you in the process;
I would appreciate if you were to stay with me until the end, which means, until I declare your system clean. Just because your system isn't behaving weirdly anymore, or is running better than before, it doesn't mean that the infection is completely gone;
This being said, I have a full time job so sometimes it'll take longer for me to reply to you. Don't worry, you'll be my first priority as soon as I get home and have time to look at your thread;

This being said, it's time to clean-up some malware, so let's get started, shall we?

Can you provide me all the logs you have from Malwarebytes showing that the infection was detected and removed?

zchatk · August 9, 2017

Thank you for giving me help Aura! I attached the report.

Malwarebytes Report.txt

Aura · August 9, 2017

Prior to running Malwarebytes on your system, did you run MBAR (Malwarebytes Anti-Rootkit)? If so, go inside the MBAR folder, and look for a file called "mbar-log-DATE-TIME.txt" and attach it here.

zchatk · August 9, 2017

I had run it twice and these were the results.

mbar-log-2017-08-09 (09-51-17).txt

mbar-log-2017-08-09 (02-33-27).txt

Aura · August 9, 2017

Thank you We're almost done cleaning up that infection, so it's good. Let's do a sweep with AdwCleaner and JRT.

AdwCleaner - Fix Mode

Download AdwCleaner and move it to your Desktop;
Right-click on AdwCleaner.exe and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
Accept the EULA (I accept), then click on Scan;
Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Clean button. This will kill all active processes;
Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it;
After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply;

Junkware Removal Tool (JRT)

Download Junkware Removal Tool (JRT) and move it to your Desktop;
Right-click on JRT.exe and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
Press on any key to launch the scan and let it complete;

Credits : BleepingComputer.com
Once the scan is complete, a log will open. Please copy/paste the content of the output log in your next reply;

Your next reply(ies) should therefore contain:

Copy/pasted AdwCleaner clean log;
Copy/pasted JRT log;

zchatk · August 9, 2017

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by Zach (Administrator) on Wed 08/09/2017 at 11:31:41.58
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 1

Successfully deleted: C:\ProgramData\mntemp (File)

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 08/09/2017 at 11:33:16.76
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner 7.0.1.0 - Logfile created on Wed Aug 09 18:30:29 2017
# Updated on 2017/05/08 by Malwarebytes
# Database: 08-09-2017.2
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

PUP.Adware.Heuristic, AdAppMgrSvc

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.Legacy, Microsoft\Windows\Windows Error Reporting\ErrorReporting

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-2624608272-4066467830-461076493-1001\Software\VideoBox
PUP.Optional.Legacy, [Key] - HKCU\Software\VideoBox
Adware.Amonetize, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application
Adware.Amonetize, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########

Aura · August 9, 2017

Good Let's see if there are any remnants to remove now.

Farbar Recovery Scan Tool (FRST) - Scan mode
Follow the instructions below to download and execute a scan on your system with FRST, and provide the logs in your next reply.

Download the right version of FRST for your system:
- FRST 64-bit
Move the executable (FRST.exe or FRST64.exe) on your Desktop;
Right-click on the executable and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
Accept the disclaimer by clicking on Yes, and FRST will then do a back-up of your Registry which should take a few seconds;
Make sure the Addition.txt box is checked;
Click on the Scan button;
On completion, two message box will open, saying that the results were saved to FRST.txt and Addition.txt, then open two Notepad files;
Copy and paste the content of both FRST.txt and Addition.txt in your next reply;

zchatk · August 9, 2017

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09-08-2017
Ran by Zach (administrator) on ZACHSPC (09-08-2017 11:48:35)
Running from C:\Users\Zach\Desktop
Loaded Profiles: Zach (Available Profiles: Zach)
Platform: Windows 10 Home Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\ASUS\USB-N53 Utility\RaRegistry64.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\ASUS\USB-N53 Utility\RaRegistry.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Electronic Arts) D:\Origin\OriginWebHelperService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.5725\Agent.exe
(Blizzard Entertainment) D:\Battle.net\Battle.net.9093\Battle.net.exe
() D:\Battle.net\Battle.net.9093\Battle.net Helper.exe
() D:\Battle.net\Battle.net.9093\Battle.net Helper.exe
(Malwarebytes) C:\Users\Zach\Desktop\AdwCleaner.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8838400 2016-06-07] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-27] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => D:\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [704424 2017-03-10] (Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CUE.exe [17401552 2017-03-01] (Corsair Components, Inc.)
HKLM-x32\...\Run: [Arc] => C:\Program Files (x86)\Arc\ArcLauncher.exe [414744 2017-07-26] (Perfect World Entertainment)
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Run: [Steam] => D:\Steam\steam.exe [3062560 2017-07-17] (Valve Corporation)
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-01-17] (Apple Inc.)
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-01-17] (Apple Inc.)
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27784672 2017-06-27] (Skype Technologies S.A.)
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Run: [WallpaperEngine] => D:\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe [1268224 2017-07-19] ()
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Run: [Discord] => C:\Users\Zach\AppData\Local\Discord\app-0.0.298\Discord.exe [57477112 2017-08-08] (Discord Inc.)
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9807064 2017-06-09] (Piriform Ltd)
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Run: [Spotify Web Helper] => C:\Users\Zach\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-08-06] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2016-01-02]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d9c01fe0-4a5f-41f5-98f2-98143e4b86e6}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-03-14] (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll [2017-07-26] (Perfect World Entertainment Inc)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-14] (Oracle Corporation)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => not found
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-09-19] (Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2015-09-03] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-14] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll [2017-07-26] (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-09-19] (Adobe Systems)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/?pc=UP97&ocid=UP97DHP&dt=071313
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR NewTab: Default -> Active:"chrome-extension://laookkfknpbbblfpciffpaejjkokdgca/dashboard.html"
CHR Profile: C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default [2017-08-09]
CHR Extension: (Google Drive) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-20]
CHR Extension: (Turn Off the Lights) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2017-08-07]
CHR Extension: (YouTube) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Adblock Plus) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-12]
CHR Extension: (Google Search) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Rescroller) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddehdnnhjimbggeeenghijehnpakijod [2017-07-29]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2016-02-23]
CHR Extension: (Voice Recognition) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjmfindklfaonkodbnidahohdfbdhkn [2015-09-02]
CHR Extension: (Grammarly for Chrome) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2017-07-28]
CHR Extension: (Momentum) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\laookkfknpbbblfpciffpaejjkokdgca [2017-07-29]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-02-09]
CHR Extension: (Office Online) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndjpnladcallmjemlbaebfadecfhkepb [2017-08-09]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Gmail) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-02]
CHR Extension: (Chrome Media Router) - C:\Users\Zach\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]
CHR HKU\S-1-5-21-2624608272-4066467830-461076493-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1309176 2017-03-10] (Autodesk Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [87064 2017-07-26] (Perfect World Entertainment Inc)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1530888 2017-07-29] ()
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321896 2017-07-06] (HP Inc.)
S3 jswpsapi; C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe [954368 2014-02-25] (Wireless) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 mi-raysat_3dsmax2017_64; C:\Program Files\Autodesk\3ds Max 2017\raysat_3dsmax2017_64server.exe [86016 2011-09-14] () [File not signed]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [492480 2017-03-27] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [492480 2017-03-27] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-03-27] (NVIDIA Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2168672 2017-07-26] (Electronic Arts)
R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3148128 2017-07-26] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-06-20] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-06-20] ()
R2 RalinkRegistryWriter; C:\Program Files (x86)\ASUS\USB-N53 Utility\RaRegistry.exe [375872 2011-03-30] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\ASUS\USB-N53 Utility\RaRegistry64.exe [454208 2011-03-30] (Ralink Technology, Corp.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-27] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-08-01] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [675272 2017-05-31] (Wacom Technology, Corp.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [43000 2017-01-31] (Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [27640 2017-01-31] (Corsair)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77376 2017-06-27] ()
S3 EvolveVirtualAdapter; C:\WINDOWS\System32\drivers\evolve.sys [21656 2016-07-18] (Echobit, LLC)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2015-11-12] (LogMeIn Inc.)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [188352 2017-08-09] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [101784 2017-08-09] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-08-09] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [253856 2017-08-09] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93600 2017-08-09] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 netr28ux; C:\WINDOWS\System32\drivers\netr28ux.sys [2224128 2016-07-16] (MediaTek Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_02838dee03d82b94\nvlddmkm.sys [14427064 2017-01-21] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-03-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [47552 2017-03-20] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-03-27] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek )
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 WacHidRouterPro; C:\WINDOWS\System32\drivers\wachidrouter.sys [122512 2017-04-28] (Wacom Technology)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-08-09] (Zemana Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-09 11:48 - 2017-08-09 11:48 - 002381824 _____ (Farbar) C:\Users\Zach\Desktop\FRST64.exe
2017-08-09 11:48 - 2017-08-09 11:48 - 000019755 _____ C:\Users\Zach\Desktop\FRST.txt
2017-08-09 11:48 - 2017-08-09 11:48 - 000000000 ____D C:\FRST
2017-08-09 11:47 - 2017-08-09 11:48 - 002381824 _____ (Farbar) C:\Users\Zach\Downloads\FRST64.exe
2017-08-09 11:36 - 2017-08-09 11:36 - 008185288 _____ (Malwarebytes) C:\Users\Zach\Downloads\Unconfirmed 177537.crdownload
2017-08-09 11:36 - 2017-08-09 11:36 - 001790024 _____ (Malwarebytes) C:\Users\Zach\Downloads\Unconfirmed 147401.crdownload
2017-08-09 11:33 - 2017-08-09 11:33 - 000000607 _____ C:\Users\Zach\Desktop\JRT.txt
2017-08-09 11:31 - 2017-08-09 11:31 - 001790024 _____ (Malwarebytes) C:\Users\Zach\Downloads\JRT.exe
2017-08-09 11:31 - 2017-08-09 11:31 - 001790024 _____ (Malwarebytes) C:\Users\Zach\Desktop\JRT.exe
2017-08-09 11:29 - 2017-08-09 11:30 - 000000000 ____D C:\AdwCleaner
2017-08-09 11:29 - 2017-08-09 11:29 - 008185288 _____ (Malwarebytes) C:\Users\Zach\Downloads\AdwCleaner.exe
2017-08-09 11:29 - 2017-08-09 11:29 - 008185288 _____ (Malwarebytes) C:\Users\Zach\Desktop\AdwCleaner.exe
2017-08-09 11:05 - 2017-08-09 11:05 - 000002473 _____ C:\Users\Zach\Desktop\Malwarebytes Report.txt
2017-08-09 10:37 - 2017-08-09 10:37 - 000000000 ___HD C:\OneDriveTemp
2017-08-09 10:14 - 2017-08-09 10:36 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-09 10:14 - 2017-08-09 10:36 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-09 10:14 - 2017-08-09 10:36 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-09 10:14 - 2017-08-09 10:36 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-09 10:14 - 2017-08-09 10:14 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-09 10:14 - 2017-08-09 10:14 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-09 10:14 - 2017-08-09 10:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-09 10:13 - 2017-08-09 10:13 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-09 10:13 - 2017-06-27 12:06 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-09 10:07 - 2017-08-09 10:07 - 000000000 ___HD C:\$SysReset
2017-08-09 09:36 - 2017-08-09 10:18 - 000000252 _____ C:\WINDOWS\SysWOW64\PARTIZAN.TXT
2017-08-09 09:25 - 2017-08-09 09:37 - 000000000 ____D C:\ProgramData\RegRun
2017-08-09 09:24 - 2017-08-09 10:24 - 000000000 ____D C:\Program Files (x86)\UnHackMe
2017-08-09 09:24 - 2017-08-09 09:51 - 000000000 ____D C:\Users\Zach\Documents\RegRun2
2017-08-09 09:24 - 2017-08-09 09:24 - 000000002 RSHOT C:\WINDOWS\winstart.bat
2017-08-09 09:24 - 2017-08-09 09:24 - 000000002 RSHOT C:\WINDOWS\SysWOW64\CONFIG.NT
2017-08-09 09:24 - 2017-08-09 09:24 - 000000002 RSHOT C:\WINDOWS\SysWOW64\AUTOEXEC.NT
2017-08-09 09:14 - 2017-08-09 09:50 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-08-09 09:06 - 2017-08-09 09:06 - 000000000 ____D C:\ProgramData\dbg
2017-08-09 09:02 - 2017-08-09 11:48 - 000623970 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2017-08-09 09:02 - 2017-08-09 10:36 - 000000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2017-08-09 09:02 - 2017-08-09 10:25 - 000126007 _____ C:\WINDOWS\ZAM.krnl.trace
2017-08-09 09:02 - 2017-08-09 09:02 - 000203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2017-08-09 09:02 - 2017-08-09 09:02 - 000000000 ____D C:\Users\Zach\AppData\Local\Zemana
2017-08-09 08:58 - 2017-08-09 08:58 - 000000258 __RSH C:\Users\Zach\ntuser.pol
2017-08-09 08:58 - 2017-08-09 08:58 - 000000000 ____D C:\WINDOWS\Panther
2017-08-09 02:33 - 2017-08-09 10:01 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-08-09 02:32 - 2017-08-09 10:01 - 000000000 ____D C:\Users\Zach\Desktop\mbar
2017-08-09 02:32 - 2017-08-09 02:32 - 016564750 _____ (Malwarebytes Corp.) C:\Users\Zach\Desktop\mbar-1.09.4.1001.exe
2017-08-09 01:32 - 2017-08-09 03:01 - 000000000 ____D C:\Users\Zach\AppData\LocalLow\coynBolc
2017-08-09 01:30 - 2017-08-09 01:30 - 065033984 _____ (Malwarebytes ) C:\Users\Zach\Desktop\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe
2017-08-09 01:29 - 2017-08-09 01:30 - 065033984 _____ (Malwarebytes ) C:\Users\Zach\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe
2017-08-09 01:25 - 2017-08-09 01:25 - 000003246 _____ C:\WINDOWS\System32\Tasks\{B027F517-2DD8-49D5-B5AD-C890B37E3A36}
2017-08-09 01:09 - 2017-08-09 09:50 - 000000000 ____D C:\ProgramData\WindowsReporting
2017-08-09 01:09 - 2017-08-09 01:09 - 000000258 __RSH C:\ProgramData\ntuser.pol
2017-08-09 01:09 - 2017-08-09 01:09 - 000000000 ____D C:\Users\Zach\AppData\Roaming\et
2017-08-09 01:09 - 2017-08-09 01:09 - 000000000 ____D C:\Users\Zach\AppData\Local\regfzycp
2017-08-09 01:04 - 2017-08-09 01:04 - 000001314 _____ C:\Users\Zach\Downloads\Sylenth1_Crack_3032.xht
2017-08-08 16:57 - 2017-08-08 16:57 - 000000000 ____D C:\Users\Zach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2017-08-08 13:53 - 2017-08-08 13:53 - 001691546 _____ C:\Users\Zach\Downloads\Sunglasses.zip
2017-08-08 13:53 - 2017-08-08 13:53 - 001691546 _____ C:\Users\Zach\Desktop\Sunglasses.zip
2017-08-08 10:54 - 2017-08-01 12:27 - 000118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-08 10:54 - 2017-08-01 12:22 - 001860288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-08-08 10:54 - 2017-08-01 12:21 - 000857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-08 10:54 - 2017-08-01 12:20 - 000557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-08-08 10:54 - 2017-08-01 12:18 - 008169536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-08 10:54 - 2017-08-01 12:18 - 004260064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-08-08 10:54 - 2017-08-01 12:18 - 001983408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-08 10:54 - 2017-08-01 12:18 - 001702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-08-08 10:54 - 2017-08-01 12:18 - 000092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-08-08 10:54 - 2017-08-01 12:17 - 001072248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-08-08 10:54 - 2017-08-01 12:13 - 002532192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-08 10:54 - 2017-08-01 11:57 - 000372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-08-08 10:54 - 2017-08-01 11:53 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-08-08 10:54 - 2017-08-01 11:52 - 000237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-08-08 10:54 - 2017-08-01 11:51 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-08-08 10:54 - 2017-08-01 11:48 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-08 10:54 - 2017-08-01 11:47 - 000748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-08-08 10:54 - 2017-08-01 11:46 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-08-08 10:54 - 2017-08-01 11:46 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2017-08-08 10:54 - 2017-08-01 11:46 - 000260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-08 10:54 - 2017-08-01 11:45 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-08-08 10:54 - 2017-08-01 11:45 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-08-08 10:54 - 2017-08-01 11:43 - 000963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2017-08-08 10:54 - 2017-08-01 11:42 - 006288384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-08 10:54 - 2017-08-01 11:38 - 013441536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-08-08 10:54 - 2017-08-01 11:32 - 004596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2017-08-08 10:54 - 2017-08-01 11:32 - 003401216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-08 10:54 - 2017-08-01 11:27 - 008076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-08-08 10:54 - 2017-08-01 11:27 - 004149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-08-08 10:54 - 2017-08-01 11:27 - 002538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-08-08 10:54 - 2017-08-01 11:27 - 000903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-08-08 10:54 - 2017-08-01 11:27 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-08-08 10:54 - 2017-08-01 11:24 - 003299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2017-08-08 10:54 - 2017-08-01 11:24 - 000998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-08-08 10:54 - 2017-08-01 10:20 - 002264344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-08-08 10:54 - 2017-08-01 10:20 - 001431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-08-08 10:54 - 2017-08-01 10:20 - 000781144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-08-08 10:54 - 2017-08-01 10:20 - 000116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-08-08 10:54 - 2017-08-01 10:19 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-08-08 10:54 - 2017-08-01 10:19 - 000577976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-08 10:54 - 2017-08-01 10:19 - 000339896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-08-08 10:54 - 2017-08-01 10:19 - 000266080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-08-08 10:54 - 2017-08-01 10:19 - 000120416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-08-08 10:54 - 2017-08-01 10:18 - 000139104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-08 10:54 - 2017-08-01 10:16 - 006665952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-08 10:54 - 2017-08-01 10:16 - 004023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-08-08 10:54 - 2017-08-01 10:16 - 001845512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-08-08 10:54 - 2017-08-01 10:15 - 020967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-08-08 10:54 - 2017-08-01 10:15 - 001360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-08-08 10:54 - 2017-08-01 10:15 - 001277856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-08-08 10:54 - 2017-08-01 10:15 - 000981888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-08-08 10:54 - 2017-08-01 10:10 - 000306800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2017-08-08 10:54 - 2017-08-01 10:07 - 005686784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-08 10:54 - 2017-08-01 09:59 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-08-08 10:54 - 2017-08-01 09:58 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll
2017-08-08 10:54 - 2017-08-01 09:56 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2017-08-08 10:54 - 2017-08-01 09:56 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2017-08-08 10:54 - 2017-08-01 09:55 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-08-08 10:54 - 2017-08-01 09:54 - 000505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-08-08 10:54 - 2017-08-01 09:54 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2017-08-08 10:54 - 2017-08-01 09:54 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-08-08 10:54 - 2017-08-01 09:53 - 000557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-08-08 10:54 - 2017-08-01 09:52 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2017-08-08 10:54 - 2017-08-01 09:52 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2017-08-08 10:54 - 2017-08-01 09:51 - 000483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2017-08-08 10:54 - 2017-08-01 09:51 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-08-08 10:54 - 2017-08-01 09:51 - 000388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2017-08-08 10:54 - 2017-08-01 09:51 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-08-08 10:54 - 2017-08-01 09:51 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-08-08 10:54 - 2017-08-01 09:50 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-08-08 10:54 - 2017-08-01 09:50 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-08-08 10:54 - 2017-08-01 09:50 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2017-08-08 10:54 - 2017-08-01 09:50 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-08-08 10:54 - 2017-08-01 09:49 - 004615168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-08-08 10:54 - 2017-08-01 09:48 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2017-08-08 10:54 - 2017-08-01 09:48 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-08-08 10:54 - 2017-08-01 09:47 - 000846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2017-08-08 10:54 - 2017-08-01 09:47 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbe.dll
2017-08-08 10:54 - 2017-08-01 09:47 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2017-08-08 10:54 - 2017-08-01 09:47 - 000396288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-08-08 10:54 - 2017-08-01 09:47 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2017-08-08 10:54 - 2017-08-01 09:45 - 002333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-08-08 10:54 - 2017-08-01 09:45 - 001985536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certmgr.dll
2017-08-08 10:54 - 2017-08-01 09:41 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2017-08-08 10:54 - 2017-08-01 09:39 - 007626240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-08-08 10:54 - 2017-08-01 09:39 - 001255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-08-08 10:54 - 2017-08-01 09:38 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2017-08-08 10:54 - 2017-08-01 09:37 - 012349440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-08-08 10:54 - 2017-08-01 09:37 - 003520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2017-08-08 10:54 - 2017-08-01 09:37 - 002641920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-08 10:54 - 2017-08-01 09:37 - 000647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comuid.dll
2017-08-08 10:54 - 2017-08-01 09:37 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-08-08 10:54 - 2017-08-01 09:36 - 007468544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-08-08 10:54 - 2017-08-01 09:35 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-08-08 10:54 - 2017-08-01 09:34 - 001170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-08-08 10:54 - 2017-08-01 09:34 - 000886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-08-08 10:54 - 2017-08-01 09:34 - 000709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2017-08-08 10:54 - 2017-08-01 09:33 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2017-08-08 10:54 - 2017-08-01 09:32 - 002682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-08-08 10:54 - 2017-08-01 09:32 - 002648576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-08-08 10:54 - 2017-08-01 09:31 - 001988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-08-08 10:54 - 2017-08-01 09:31 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-08-08 10:54 - 2017-08-01 09:31 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-08-08 10:54 - 2017-08-01 09:31 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2017-08-08 10:54 - 2017-08-01 09:31 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-08-08 10:54 - 2017-08-01 09:31 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2017-08-08 10:54 - 2017-08-01 09:30 - 002997248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-08-08 10:54 - 2017-08-01 09:30 - 002482688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-08-08 10:54 - 2017-08-01 09:30 - 001886720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-08-08 10:54 - 2017-08-01 09:30 - 001556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-08-08 10:54 - 2017-08-01 09:30 - 001013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2017-08-08 10:54 - 2017-08-01 09:30 - 000751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-08-08 10:54 - 2017-08-01 09:30 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-08-08 10:54 - 2017-08-01 09:29 - 003106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2017-08-08 10:54 - 2017-08-01 09:28 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-08 10:54 - 2017-08-01 07:15 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-08 10:54 - 2017-07-11 23:17 - 000081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2017-08-08 10:54 - 2017-07-11 23:15 - 002213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-08 10:54 - 2017-07-11 23:15 - 000496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-08-08 10:54 - 2017-07-11 23:12 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-08-08 10:54 - 2017-07-11 23:12 - 001573280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-08-08 10:54 - 2017-07-11 23:09 - 001181024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-08-08 10:54 - 2017-07-11 23:01 - 000715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-08-08 10:54 - 2017-07-11 23:00 - 000095584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2017-08-08 10:54 - 2017-07-11 22:59 - 000857952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-08-08 10:54 - 2017-07-11 22:59 - 000148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-08-08 10:54 - 2017-07-11 22:56 - 000277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-08 10:54 - 2017-07-11 22:55 - 000607072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2017-08-08 10:54 - 2017-07-11 22:55 - 000111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2017-08-08 10:54 - 2017-07-11 22:52 - 004312760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-08-08 10:54 - 2017-07-11 22:35 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dabapi.dll
2017-08-08 10:54 - 2017-07-11 22:32 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2017-08-08 10:54 - 2017-07-11 22:32 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\frprov.dll
2017-08-08 10:54 - 2017-07-11 22:31 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-08-08 10:54 - 2017-07-11 22:31 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2017-08-08 10:54 - 2017-07-11 22:30 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2017-08-08 10:54 - 2017-07-11 22:29 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-08-08 10:54 - 2017-07-11 22:29 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\httpapi.dll
2017-08-08 10:54 - 2017-07-11 22:25 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-08-08 10:54 - 2017-07-11 22:24 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmdisk0101.sys
2017-08-08 10:54 - 2017-07-11 22:23 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-08-08 10:54 - 2017-07-11 22:23 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-08-08 10:54 - 2017-07-11 22:23 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-08-08 10:54 - 2017-07-11 22:23 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-08-08 10:54 - 2017-07-11 22:21 - 000711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-08-08 10:54 - 2017-07-11 22:19 - 006474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-08-08 10:54 - 2017-07-11 22:18 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-08-08 10:54 - 2017-07-11 22:17 - 000552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-08-08 10:54 - 2017-07-11 22:15 - 000893440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-08-08 10:54 - 2017-07-11 22:15 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsium.dll
2017-08-08 10:54 - 2017-07-11 22:14 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-08-08 10:54 - 2017-07-11 22:13 - 000855040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-08-08 10:54 - 2017-07-11 22:12 - 002750464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-08-08 10:54 - 2017-07-11 22:11 - 002154496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-08-08 10:54 - 2017-07-11 22:10 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-08-08 10:54 - 2017-07-11 22:10 - 000546304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2017-08-08 10:54 - 2017-07-11 22:09 - 000641024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-08-08 10:54 - 2017-07-11 22:07 - 001572352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-08-08 10:54 - 2017-07-11 22:06 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-08-08 10:54 - 2017-07-11 22:05 - 000565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-08-08 10:54 - 2017-07-11 22:01 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-08-08 10:54 - 2017-07-11 21:58 - 001130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-08-08 10:54 - 2017-07-11 21:58 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-08 10:54 - 2017-07-11 19:49 - 000448629 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-08-08 10:54 - 2017-03-03 23:05 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2017-08-08 10:54 - 2016-09-06 22:24 - 000057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2017-08-08 10:53 - 2017-08-01 12:32 - 000133984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2017-08-08 10:53 - 2017-08-01 12:31 - 007780192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-08 10:53 - 2017-08-01 12:29 - 000376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-08 10:53 - 2017-08-01 12:25 - 000168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2017-08-08 10:53 - 2017-08-01 12:22 - 000360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-08-08 10:53 - 2017-08-01 12:21 - 002759712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-08 10:53 - 2017-08-01 12:21 - 000624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-08-08 10:53 - 2017-08-01 12:21 - 000295264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-08 10:53 - 2017-08-01 12:21 - 000146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-08-08 10:53 - 2017-08-01 12:21 - 000124072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-08 10:53 - 2017-08-01 12:21 - 000026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-08-08 10:53 - 2017-08-01 12:20 - 002446704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-08-08 10:53 - 2017-08-01 12:20 - 000684344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-08 10:53 - 2017-08-01 12:20 - 000383776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-08 10:53 - 2017-08-01 12:20 - 000144736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-08 10:53 - 2017-08-01 12:20 - 000079712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-08 10:53 - 2017-08-01 12:17 - 022220856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-08 10:53 - 2017-08-01 12:17 - 001600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-08-08 10:53 - 2017-08-01 12:17 - 000244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2017-08-08 10:53 - 2017-08-01 12:17 - 000241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-08-08 10:53 - 2017-08-01 12:13 - 001102176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2017-08-08 10:53 - 2017-08-01 12:13 - 000387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-08-08 10:53 - 2017-08-01 12:01 - 007218176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-08 10:53 - 2017-08-01 11:54 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-08 10:53 - 2017-08-01 11:52 - 022569472 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-08 10:53 - 2017-08-01 11:52 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-08-08 10:53 - 2017-08-01 11:50 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-08 10:53 - 2017-08-01 11:48 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-08-08 10:53 - 2017-08-01 11:48 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-08-08 10:53 - 2017-08-01 11:47 - 000691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-08 10:53 - 2017-08-01 11:47 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-08-08 10:53 - 2017-08-01 11:47 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2017-08-08 10:53 - 2017-08-01 11:47 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2017-08-08 10:53 - 2017-08-01 11:47 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll
2017-08-08 10:53 - 2017-08-01 11:46 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-08-08 10:53 - 2017-08-01 11:46 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2017-08-08 10:53 - 2017-08-01 11:46 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-08-08 10:53 - 2017-08-01 11:46 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-08-08 10:53 - 2017-08-01 11:46 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-08 10:53 - 2017-08-01 11:46 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-08 10:53 - 2017-08-01 11:45 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-08-08 10:53 - 2017-08-01 11:45 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2017-08-08 10:53 - 2017-08-01 11:45 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-08 10:53 - 2017-08-01 11:45 - 000425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-08 10:53 - 2017-08-01 11:45 - 000171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-08 10:53 - 2017-08-01 11:44 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-08 10:53 - 2017-08-01 11:44 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2017-08-08 10:53 - 2017-08-01 11:43 - 000966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2017-08-08 10:53 - 2017-08-01 11:43 - 000945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2017-08-08 10:53 - 2017-08-01 11:43 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-08 10:53 - 2017-08-01 11:42 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-08 10:53 - 2017-08-01 11:41 - 002222080 _____ (Microsoft Corporation) C:\WINDOWS\system32\certmgr.dll
2017-08-08 10:53 - 2017-08-01 11:40 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-08-08 10:53 - 2017-08-01 11:40 - 000945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-08 10:53 - 2017-08-01 11:40 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-08 10:53 - 2017-08-01 11:39 - 009129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-08 10:53 - 2017-08-01 11:39 - 001281536 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-08 10:53 - 2017-08-01 11:39 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2017-08-08 10:53 - 2017-08-01 11:39 - 000323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-08 10:53 - 2017-08-01 11:38 - 001589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-08-08 10:53 - 2017-08-01 11:37 - 013091328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-08 10:53 - 2017-08-01 11:36 - 023677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-08 10:53 - 2017-08-01 11:36 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2017-08-08 10:53 - 2017-08-01 11:35 - 001908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-08 10:53 - 2017-08-01 11:34 - 001837056 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-08 10:53 - 2017-08-01 11:33 - 004749824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-08 10:53 - 2017-08-01 11:33 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll
2017-08-08 10:53 - 2017-08-01 11:33 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2017-08-08 10:53 - 2017-08-01 11:32 - 008114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-08 10:53 - 2017-08-01 11:32 - 000821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll
2017-08-08 10:53 - 2017-08-01 11:30 - 002916864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-08-08 10:53 - 2017-08-01 11:30 - 001643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-08-08 10:53 - 2017-08-01 11:30 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-08-08 10:53 - 2017-08-01 11:30 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-08 10:53 - 2017-08-01 11:29 - 004743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-08 10:53 - 2017-08-01 11:29 - 002852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-08-08 10:53 - 2017-08-01 11:29 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-08 10:53 - 2017-08-01 11:28 - 002895360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-08-08 10:53 - 2017-08-01 11:28 - 001490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-08-08 10:53 - 2017-08-01 11:27 - 002695680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-08-08 10:53 - 2017-08-01 11:27 - 001984000 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-08 10:53 - 2017-08-01 11:27 - 000774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2017-08-08 10:53 - 2017-08-01 11:27 - 000716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-08-08 10:53 - 2017-08-01 11:26 - 001513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-08 10:53 - 2017-08-01 11:26 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2017-08-08 10:53 - 2017-08-01 11:25 - 001726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-08 10:53 - 2017-08-01 11:24 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-08 10:53 - 2017-08-01 11:24 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-08-08 10:53 - 2017-08-01 11:23 - 003615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-08 10:53 - 2017-08-01 11:23 - 000886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2017-08-08 10:53 - 2017-08-01 09:51 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-08-08 10:53 - 2017-08-01 09:47 - 000661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-08-08 10:53 - 2017-08-01 09:42 - 018364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-08-08 10:53 - 2017-08-01 09:40 - 019415040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-08 10:53 - 2017-08-01 09:40 - 012187136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-08 10:53 - 2017-08-01 09:33 - 006031872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-08-08 10:53 - 2017-08-01 09:31 - 003664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-08 10:53 - 2017-07-11 23:16 - 000646688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-08-08 10:53 - 2017-07-11 23:15 - 000101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\apisetschema.dll
2017-08-08 10:53 - 2017-07-11 23:14 - 001886896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-08-08 10:53 - 2017-07-11 23:13 - 002253664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-08 10:53 - 2017-07-11 23:02 - 002186592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-08 10:53 - 2017-07-11 23:02 - 000402776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-08-08 10:53 - 2017-07-11 23:01 - 000156000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2017-08-08 10:53 - 2017-07-11 23:00 - 000223072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-08-08 10:53 - 2017-07-11 23:00 - 000160608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pacer.sys
2017-08-08 10:53 - 2017-07-11 22:59 - 001100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-08-08 10:53 - 2017-07-11 22:59 - 000989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-08-08 10:53 - 2017-07-11 22:59 - 000947040 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-08-08 10:53 - 2017-07-11 22:55 - 004674872 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-08-08 10:53 - 2017-07-11 22:25 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys
2017-08-08 10:53 - 2017-07-11 22:24 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2017-08-08 10:53 - 2017-07-11 22:24 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\dabapi.dll
2017-08-08 10:53 - 2017-07-11 22:23 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2017-08-08 10:53 - 2017-07-11 22:23 - 000216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2017-08-08 10:53 - 2017-07-11 22:23 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\frprov.dll
2017-08-08 10:53 - 2017-07-11 22:22 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2017-08-08 10:53 - 2017-07-11 22:21 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-08-08 10:53 - 2017-07-11 22:21 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2017-08-08 10:53 - 2017-07-11 22:21 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2017-08-08 10:53 - 2017-07-11 22:20 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpapi.dll
2017-08-08 10:53 - 2017-07-11 22:19 - 000488960 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-08-08 10:53 - 2017-07-11 22:19 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-08-08 10:53 - 2017-07-11 22:19 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-08 10:53 - 2017-07-11 22:17 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2017-08-08 10:53 - 2017-07-11 22:16 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-08-08 10:53 - 2017-07-11 22:16 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-08 10:53 - 2017-07-11 22:15 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2017-08-08 10:53 - 2017-07-11 22:13 - 001478656 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-08 10:53 - 2017-07-11 22:12 - 000970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-08 10:53 - 2017-07-11 22:12 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-08-08 10:53 - 2017-07-11 22:12 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsium.dll
2017-08-08 10:53 - 2017-07-11 22:11 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-08 10:53 - 2017-07-11 22:10 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-08 10:53 - 2017-07-11 22:09 - 003291136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-08-08 10:53 - 2017-07-11 22:08 - 002861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-08-08 10:53 - 2017-07-11 22:07 - 000954880 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-08 10:53 - 2017-07-11 22:07 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2017-08-08 10:53 - 2017-07-11 22:06 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-08 10:53 - 2017-07-11 22:06 - 000937984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-08-08 10:53 - 2017-07-11 22:03 - 001692160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-08 10:53 - 2017-07-11 22:03 - 000826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-08 10:53 - 2017-07-11 22:02 - 000869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-08 10:53 - 2017-07-11 22:01 - 002279424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-08 10:53 - 2017-07-11 22:00 - 002370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2017-08-08 10:53 - 2017-07-11 21:59 - 006664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-08-08 10:53 - 2017-07-11 21:59 - 002318336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-08 10:53 - 2017-07-11 21:59 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-08 10:53 - 2017-07-11 21:58 - 001231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-08 10:53 - 2017-07-11 21:57 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-08 10:53 - 2017-07-11 21:56 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-08-08 10:53 - 2017-03-03 23:57 - 000372432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-08-08 10:53 - 2017-03-03 23:16 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2017-08-08 10:53 - 2017-03-03 23:14 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2017-08-08 10:53 - 2017-03-03 23:07 - 000909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-08-08 10:53 - 2017-03-03 23:05 - 001328640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2017-08-08 10:53 - 2016-08-02 01:13 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-08 10:32 - 2017-08-08 10:33 - 052753548 _____ C:\Users\Zach\Downloads\[DOWNLOAD MP3] Syn Cole - Feel Good [NCS Release] - NCS HOUSE.mp4
2017-08-08 10:21 - 2017-08-08 10:21 - 007619480 _____ C:\Users\Zach\Downloads\DaTop Sylenth1Bank.rar
2017-08-06 07:11 - 2017-08-06 07:11 - 000144842 _____ C:\Users\Zach\Downloads\XYZ_20mm_Calibration_Cube.zip
2017-08-03 17:28 - 2017-08-03 17:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cura
2017-08-03 14:54 - 2017-08-03 14:54 - 000000000 ____D C:\Users\Zach\AppData\Roaming\cura
2017-08-03 14:54 - 2017-08-03 14:54 - 000000000 ____D C:\Users\Zach\AppData\Local\cura
2017-08-03 14:52 - 2017-08-03 14:52 - 099808969 _____ C:\Users\Zach\Desktop\Cura-2.6.2-win64.exe
2017-08-03 14:46 - 2017-08-03 14:51 - 099808969 _____ C:\Users\Zach\Downloads\Cura-2.6.2-win64.exe
2017-08-02 17:54 - 2017-08-02 17:54 - 000001776 _____ C:\Users\Zach\AppData\Local\recently-used.xbel
2017-08-02 17:31 - 2017-08-02 17:31 - 000008626 _____ C:\Users\Zach\Downloads\Deadmau5ChrisJames_-_TheVeldt__SigveStein_20130422043056.mid
2017-08-01 00:38 - 2017-08-09 09:12 - 000000220 _____ C:\Users\Zach\Desktop\Console.txt
2017-07-31 22:37 - 2017-07-31 22:37 - 000001507 _____ C:\Users\Zach\Downloads\David-Guetta-Showtek-Bad-jvds-20140407182910-nonstop2k.com.mid
2017-07-29 22:49 - 2017-07-29 22:49 - 026625809 _____ C:\Users\Zach\Downloads\Legend of Zelda, The - Ocarina of Time (U) (V1.2) [!].zip
2017-07-29 22:43 - 2017-07-29 22:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project64 2.3
2017-07-29 22:41 - 2017-07-29 22:41 - 002391732 _____ ( ) C:\Users\Zach\Downloads\Setup Project64 v2.3.2-202-g57a221e.exe
2017-07-29 14:00 - 2017-07-29 14:00 - 000000000 ____D C:\Users\Zach\Documents\BlackSquad
2017-07-29 13:00 - 2017-08-06 21:00 - 000000000 ____D C:\Users\Zach\AppData\Roaming\Arc
2017-07-29 13:00 - 2017-07-29 13:00 - 000000000 ____D C:\Users\Public\Documents\Arc
2017-07-29 12:59 - 2017-08-07 17:52 - 000000000 ____D C:\Program Files (x86)\Arc
2017-07-29 12:59 - 2017-07-29 12:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2017-07-29 12:13 - 2017-07-29 12:13 - 000007199 _____ C:\Users\Zach\Downloads\flag_of_california_bear_solid_preview (1)
2017-07-29 12:13 - 2017-07-29 12:13 - 000007199 _____ C:\Users\Zach\Downloads\flag_of_california_bear_solid_preview
2017-07-27 12:41 - 2017-07-27 12:41 - 000003358 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2624608272-4066467830-461076493-1001
2017-07-26 16:40 - 2017-07-26 16:40 - 000002704 _____ C:\Users\Zach\Desktop\Autodesk Fusion 360.lnk
2017-07-23 19:34 - 2017-07-23 19:34 - 002185393 _____ C:\Users\Zach\Downloads\64 Presets Melbourne Bounce For Sylenth1.rar
2017-07-23 19:31 - 2017-07-23 19:31 - 000079388 _____ C:\Users\Zach\Downloads\TrapGod Sylenth Bank.rar
2017-07-23 19:31 - 2017-07-23 19:31 - 000010981 _____ C:\Users\Zach\Downloads\EDM-Factory-Soundbank-Sylenth-Free.zip
2017-07-21 16:06 - 2017-07-21 16:06 - 000000000 ____D C:\Users\Zach\Documents\Respawn
2017-07-21 16:05 - 2017-07-21 16:05 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2017-07-21 16:05 - 2017-07-21 16:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Titanfall™ 2
2017-07-20 13:18 - 2017-07-20 13:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sylenth1
2017-07-20 13:18 - 2017-07-20 13:18 - 000000000 ____D C:\Program Files\LennarDigital
2017-07-20 13:15 - 2017-07-20 13:16 - 035683261 _____ C:\Users\Zach\Downloads\Sylenth1DemoWin (1).zip
2017-07-20 13:14 - 2017-07-20 13:14 - 000000000 ____D C:\Users\Public\Documents\Helm
2017-07-20 13:14 - 2017-07-20 13:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Helm
2017-07-20 13:14 - 2017-07-20 13:14 - 000000000 ____D C:\Program Files\Common Files\VST3
2017-07-20 13:09 - 2017-07-20 13:09 - 000000000 ____D C:\Program Files\Image-Line
2017-07-20 13:02 - 2017-07-20 13:10 - 000000000 ____D C:\Program Files (x86)\Image-Line
2017-07-20 12:36 - 2017-07-20 13:02 - 697470424 _____ (Image-Line) C:\Users\Zach\Downloads\flstudio_12.4.2 (2).exe
2017-07-19 16:32 - 2017-07-19 16:32 - 000516276 _____ C:\Users\Zach\Downloads\Vandalism_Free Soundset.fxb
2017-07-19 16:30 - 2017-07-19 16:30 - 000000000 ____D C:\Users\Zach\Documents\LennarDigital
2017-07-19 16:27 - 2017-07-19 16:28 - 035683261 _____ C:\Users\Zach\Downloads\Sylenth1DemoWin.zip
2017-07-19 16:20 - 2017-07-19 16:22 - 129779885 _____ C:\Users\Zach\Downloads\Sylenth1 v2.2.1 + Crack + Soundbanks + Skins [Windows] x64x86 - softasm.com.zip
2017-07-19 12:35 - 2017-07-20 11:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reveal Sound Spire-1.1 AAX Plug-In (x64)
2017-07-19 12:35 - 2017-07-19 12:35 - 000000000 ____D C:\Program Files\Common Files\Avid
2017-07-19 12:34 - 2017-07-19 12:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reveal Sound Spire-1.1 Plug-In (x64)
2017-07-19 12:12 - 2017-07-19 12:18 - 599774488 _____ C:\Users\Zach\Downloads\Spire-1.1.12-Win (1).zip
2017-07-19 12:09 - 2017-07-19 12:09 - 019109095 _____ C:\Users\Zach\Downloads\Reveal Sound Spire 1.0.9.rar
2017-07-18 22:58 - 2017-07-18 22:58 - 007088120 _____ C:\Users\Zach\Downloads\bounce tutorial.zip
2017-07-18 11:40 - 2017-07-18 11:45 - 599774488 _____ C:\Users\Zach\Downloads\Spire-1.1.12-Win.zip
2017-07-16 18:34 - 2017-07-18 20:44 - 000000120 _____ C:\Users\Zach\Desktop\New Text Document.txt
2017-07-15 10:00 - 2017-07-19 12:04 - 000000000 ____D C:\Program Files (x86)\VstPlugins
2017-07-15 09:55 - 2017-07-15 09:55 - 000004116 _____ C:\Users\Zach\Desktop\FLKey.reg
2017-07-15 09:34 - 2017-07-15 09:53 - 697470424 _____ (Image-Line) C:\Users\Zach\Downloads\flstudio_12.4.2 (1).exe
2017-07-13 12:10 - 2017-07-13 12:30 - 697470424 _____ (Image-Line) C:\Users\Zach\Downloads\flstudio_12.4.2.exe
2017-07-12 23:32 - 2017-07-28 15:35 - 000000000 ____D C:\Users\Zach\AppData\Roaming\helm
2017-07-12 23:32 - 2017-07-12 23:32 - 000000000 ____D C:\Users\Zach\Documents\Helm
2017-07-12 23:27 - 2017-07-12 23:28 - 019533824 _____ C:\Users\Zach\Downloads\Helm_64bit_v0_9_0_r.msi
2017-07-12 10:46 - 2017-07-07 00:49 - 000340824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-07-12 10:46 - 2017-07-07 00:44 - 000108896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2017-07-12 10:46 - 2017-07-07 00:37 - 000468320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2017-07-12 10:46 - 2017-07-07 00:20 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2017-07-12 10:46 - 2017-07-07 00:19 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-07-12 10:46 - 2017-07-07 00:19 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll
2017-07-12 10:46 - 2017-07-07 00:18 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-07-12 10:46 - 2017-07-07 00:18 - 000210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\onex.dll
2017-07-12 10:46 - 2017-07-07 00:17 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
2017-07-12 10:46 - 2017-07-07 00:13 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2017-07-12 10:46 - 2017-07-07 00:11 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-07-12 10:46 - 2017-07-07 00:10 - 000755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-07-12 10:46 - 2017-07-07 00:09 - 000637952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2017-07-12 10:46 - 2017-07-07 00:09 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-07-12 10:46 - 2017-07-07 00:03 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
2017-07-12 10:46 - 2017-07-07 00:02 - 001313280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2017-07-12 10:46 - 2017-07-07 00:00 - 000476160 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll
2017-07-12 10:46 - 2017-07-06 23:57 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-07-12 10:46 - 2017-07-06 23:55 - 004423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-07-12 10:46 - 2017-07-06 23:54 - 002027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-07-12 10:46 - 2017-07-06 23:52 - 004561408 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-07-12 10:46 - 2017-07-06 23:52 - 001599488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-07-12 10:46 - 2017-07-06 23:52 - 001413632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2017-07-12 10:46 - 2017-07-06 23:48 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2017-07-12 10:46 - 2017-07-06 23:48 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll
2017-07-12 10:46 - 2017-07-06 23:44 - 000502784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-07-12 10:46 - 2017-07-06 23:44 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\onex.dll
2017-07-12 10:46 - 2017-07-06 23:44 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll
2017-07-12 10:46 - 2017-07-06 23:43 - 000387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-07-12 10:46 - 2017-07-06 23:39 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-07-12 10:46 - 2017-07-06 23:35 - 001397760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2017-07-12 10:46 - 2017-07-06 23:33 - 000576000 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll
2017-07-12 10:46 - 2017-07-06 23:28 - 000759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-07-12 10:46 - 2017-07-06 23:24 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-07-12 10:46 - 2017-07-05 21:29 - 000690008 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2017-07-12 10:46 - 2017-06-21 23:17 - 000987840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2017-07-12 10:46 - 2017-06-21 23:17 - 000485576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2017-07-12 10:46 - 2017-06-21 00:53 - 000794928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-07-12 10:46 - 2017-06-21 00:52 - 000774224 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-07-12 10:46 - 2017-06-21 00:52 - 000088416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys
2017-07-12 10:46 - 2017-06-21 00:42 - 000601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-07-12 10:46 - 2017-06-21 00:39 - 002048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-07-12 10:46 - 2017-06-21 00:38 - 007220192 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-07-12 10:46 - 2017-06-21 00:38 - 000790752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2017-07-12 10:46 - 2017-06-21 00:36 - 000129888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2017-07-12 10:46 - 2017-06-21 00:33 - 000408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2017-07-12 10:46 - 2017-06-21 00:31 - 000160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-07-12 10:46 - 2017-06-21 00:30 - 000869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-07-12 10:46 - 2017-06-21 00:30 - 000196960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll
2017-07-12 10:46 - 2017-06-21 00:29 - 005722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-07-12 10:46 - 2017-06-21 00:28 - 002277288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-07-12 10:46 - 2017-06-21 00:28 - 001504056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-07-12 10:46 - 2017-06-21 00:28 - 000524776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-07-12 10:46 - 2017-06-21 00:28 - 000170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-07-12 10:46 - 2017-06-21 00:27 - 001122344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2017-07-12 10:46 - 2017-06-21 00:27 - 000975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-07-12 10:46 - 2017-06-21 00:27 - 000861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-07-12 10:46 - 2017-06-21 00:27 - 000549088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2017-07-12 10:46 - 2017-06-21 00:25 - 002168288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-07-12 10:46 - 2017-06-21 00:24 - 000846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-07-12 10:46 - 2017-06-21 00:24 - 000154432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntmarta.dll
2017-07-12 10:46 - 2017-06-21 00:22 - 000361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2017-07-12 10:46 - 2017-06-21 00:21 - 001557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-07-12 10:46 - 2017-06-21 00:21 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-07-12 10:46 - 2017-06-21 00:21 - 000374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-07-12 10:46 - 2017-06-21 00:20 - 000962768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-07-12 10:46 - 2017-06-21 00:20 - 000312472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2017-07-12 10:46 - 2017-06-21 00:04 - 001631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-07-12 10:46 - 2017-06-21 00:04 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-07-12 10:46 - 2017-06-21 00:03 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rootmdm.sys
2017-07-12 10:46 - 2017-06-21 00:01 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-07-12 10:46 - 2017-06-21 00:01 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2017-07-12 10:46 - 2017-06-21 00:01 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2017-07-12 10:46 - 2017-06-21 00:00 - 000519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-07-12 10:46 - 2017-06-21 00:00 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-07-12 10:46 - 2017-06-21 00:00 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvisioningHandlers.dll
2017-07-12 10:46 - 2017-06-21 00:00 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinRtTracing.dll
2017-07-12 10:46 - 2017-06-21 00:00 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2017-07-12 10:46 - 2017-06-21 00:00 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uudf.dll
2017-07-12 10:46 - 2017-06-21 00:00 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-07-12 10:46 - 2017-06-21 00:00 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-07-12 10:46 - 2017-06-20 23:59 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-07-12 10:46 - 2017-06-20 23:59 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-07-12 10:46 - 2017-06-20 23:59 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2017-07-12 10:46 - 2017-06-20 23:59 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2017-07-12 10:46 - 2017-06-20 23:59 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2017-07-12 10:46 - 2017-06-20 23:59 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.SystemManagement.dll
2017-07-12 10:46 - 2017-06-20 23:58 - 000418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-07-12 10:46 - 2017-06-20 23:58 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2017-07-12 10:46 - 2017-06-20 23:58 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-07-12 10:46 - 2017-06-20 23:58 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-07-12 10:46 - 2017-06-20 23:58 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-07-12 10:46 - 2017-06-20 23:57 - 000360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-07-12 10:46 - 2017-06-20 23:57 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2017-07-12 10:46 - 2017-06-20 23:57 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2017-07-12 10:46 - 2017-06-20 23:57 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-07-12 10:46 - 2017-06-20 23:57 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 001507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000719872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-07-12 10:46 - 2017-06-20 23:56 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2017-07-12 10:46 - 2017-06-20 23:56 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2017-07-12 10:46 - 2017-06-20 23:55 - 000404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2017-07-12 10:46 - 2017-06-20 23:55 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-07-12 10:46 - 2017-06-20 23:55 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-07-12 10:46 - 2017-06-20 23:55 - 000265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-07-12 10:46 - 2017-06-20 23:55 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-07-12 10:46 - 2017-06-20 23:55 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2017-07-12 10:46 - 2017-06-20 23:55 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe
2017-07-12 10:46 - 2017-06-20 23:54 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2017-07-12 10:46 - 2017-06-20 23:54 - 000671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2017-07-12 10:46 - 2017-06-20 23:54 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2017-07-12 10:46 - 2017-06-20 23:54 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2017-07-12 10:46 - 2017-06-20 23:54 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-07-12 10:46 - 2017-06-20 23:54 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-07-12 10:46 - 2017-06-20 23:54 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-07-12 10:46 - 2017-06-20 23:53 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2017-07-12 10:46 - 2017-06-20 23:52 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2017-07-12 10:46 - 2017-06-20 23:52 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-07-12 10:46 - 2017-06-20 23:52 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2017-07-12 10:46 - 2017-06-20 23:52 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2017-07-12 10:46 - 2017-06-20 23:52 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2017-07-12 10:46 - 2017-06-20 23:51 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2017-07-12 10:46 - 2017-06-20 23:51 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2017-07-12 10:46 - 2017-06-20 23:51 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2017-07-12 10:46 - 2017-06-20 23:51 - 000258048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2017-07-12 10:46 - 2017-06-20 23:50 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2017-07-12 10:46 - 2017-06-20 23:50 - 000857600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2017-07-12 10:46 - 2017-06-20 23:50 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2017-07-12 10:46 - 2017-06-20 23:50 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2017-07-12 10:46 - 2017-06-20 23:49 - 003778048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-07-12 10:46 - 2017-06-20 23:49 - 001403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-07-12 10:46 - 2017-06-20 23:49 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2017-07-12 10:46 - 2017-06-20 23:49 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2017-07-12 10:46 - 2017-06-20 23:49 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2017-07-12 10:46 - 2017-06-20 23:49 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2017-07-12 10:46 - 2017-06-20 23:49 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-07-12 10:46 - 2017-06-20 23:49 - 000169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2017-07-12 10:46 - 2017-06-20 23:48 - 000395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-07-12 10:46 - 2017-06-20 23:48 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroleui.dll
2017-07-12 10:46 - 2017-06-20 23:47 - 013873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-07-12 10:46 - 2017-06-20 23:47 - 007655424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-07-12 10:46 - 2017-06-20 23:47 - 000442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2017-07-12 10:46 - 2017-06-20 23:46 - 001323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2017-07-12 10:46 - 2017-06-20 23:46 - 001137152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2017-07-12 10:46 - 2017-06-20 23:46 - 001077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2017-07-12 10:46 - 2017-06-20 23:46 - 000627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2017-07-12 10:46 - 2017-06-20 23:46 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2017-07-12 10:46 - 2017-06-20 23:45 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-07-12 10:46 - 2017-06-20 23:45 - 000313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-07-12 10:46 - 2017-06-20 23:45 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uexfat.dll
2017-07-12 10:46 - 2017-06-20 23:44 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2017-07-12 10:46 - 2017-06-20 23:44 - 000343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2017-07-12 10:46 - 2017-06-20 23:44 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ufat.dll
2017-07-12 10:46 - 2017-06-20 23:44 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll
2017-07-12 10:46 - 2017-06-20 23:43 - 001534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-07-12 10:46 - 2017-06-20 23:43 - 001217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-07-12 10:46 - 2017-06-20 23:43 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-07-12 10:46 - 2017-06-20 23:43 - 000653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2017-07-12 10:46 - 2017-06-20 23:43 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cnvfat.dll
2017-07-12 10:46 - 2017-06-20 23:42 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-07-12 10:46 - 2017-06-20 23:42 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-07-12 10:46 - 2017-06-20 23:42 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFSv1.dll
2017-07-12 10:46 - 2017-06-20 23:41 - 001080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2017-07-12 10:46 - 2017-06-20 23:41 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2017-07-12 10:46 - 2017-06-20 23:41 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2017-07-12 10:46 - 2017-06-20 23:40 - 001891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-07-12 10:46 - 2017-06-20 23:40 - 000901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2017-07-12 10:46 - 2017-06-20 23:40 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2017-07-12 10:46 - 2017-06-20 23:40 - 000611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-07-12 10:46 - 2017-06-20 23:40 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2017-07-12 10:46 - 2017-06-20 23:40 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-07-12 10:46 - 2017-06-20 23:39 - 000816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-07-12 10:46 - 2017-06-20 23:38 - 003733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-07-12 10:46 - 2017-06-20 23:38 - 002424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-07-12 10:46 - 2017-06-20 23:38 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2017-07-12 10:46 - 2017-06-20 23:38 - 000846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2017-07-12 10:46 - 2017-06-20 23:38 - 000753152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2017-07-12 10:46 - 2017-06-20 23:37 - 006109696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-07-12 10:46 - 2017-06-20 23:37 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-07-12 10:46 - 2017-06-20 23:37 - 000357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2017-07-12 10:46 - 2017-06-20 23:37 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2017-07-12 10:46 - 2017-06-20 23:36 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-07-12 10:46 - 2017-06-20 23:36 - 001247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2017-07-12 10:46 - 2017-06-20 23:35 - 002740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2017-07-12 10:46 - 2017-06-20 23:35 - 001656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2017-07-12 10:46 - 2017-06-20 23:35 - 001369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-07-12 10:46 - 2017-06-20 23:35 - 001232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-07-12 10:46 - 2017-06-20 23:35 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2017-07-12 10:46 - 2017-06-20 23:35 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2017-07-12 10:46 - 2017-06-20 23:35 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2017-07-12 10:46 - 2017-06-20 23:34 - 000654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2017-07-12 10:46 - 2017-06-20 23:34 - 000621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-07-12 10:46 - 2017-06-20 23:33 - 001170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-07-12 10:46 - 2017-06-20 23:33 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2017-07-12 10:46 - 2017-06-20 23:33 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2017-07-12 10:46 - 2017-06-20 23:32 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-07-12 10:46 - 2017-06-20 23:30 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2017-07-12 10:46 - 2017-06-20 23:10 - 000483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-07-12 10:46 - 2017-06-19 19:42 - 000993632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2017-07-12 10:46 - 2017-03-03 23:56 - 000263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-07-12 10:46 - 2017-03-03 23:26 - 000307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll
2017-07-12 10:46 - 2017-03-03 23:23 - 001145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2017-07-12 10:46 - 2017-03-03 23:23 - 000583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2017-07-12 10:46 - 2017-03-03 23:21 - 001243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-07-12 10:46 - 2017-03-03 23:21 - 000670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2017-07-12 10:46 - 2017-03-03 23:20 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2017-07-12 10:46 - 2017-03-03 23:20 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vaultcli.dll
2017-07-12 10:46 - 2017-03-03 23:19 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2017-07-12 10:46 - 2017-03-03 23:17 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-07-12 10:46 - 2017-03-03 23:16 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-07-12 10:46 - 2017-03-03 23:15 - 001078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-07-12 10:46 - 2017-03-03 23:02 - 002138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-07-12 10:46 - 2016-10-05 02:15 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2017-07-12 10:46 - 2016-09-15 09:58 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-07-12 10:46 - 2016-09-15 09:47 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2017-07-12 10:45 - 2017-07-07 00:32 - 000404824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-07-12 10:45 - 2017-07-07 00:14 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-07-12 10:45 - 2017-07-07 00:14 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-07-12 10:45 - 2017-07-06 23:49 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-07-12 10:45 - 2017-07-06 23:47 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-07-12 10:45 - 2017-07-06 23:46 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2017-07-12 10:45 - 2017-07-06 23:46 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2017-07-12 10:45 - 2017-07-06 23:45 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-07-12 10:45 - 2017-07-06 23:44 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-07-12 10:45 - 2017-07-06 23:44 - 000139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-07-12 10:45 - 2017-07-06 23:43 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-07-12 10:45 - 2017-07-06 23:42 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2017-07-12 10:45 - 2017-07-06 23:36 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
2017-07-12 10:45 - 2017-07-06 23:29 - 000932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-07-12 10:45 - 2017-07-06 23:28 - 002096640 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-07-12 10:45 - 2017-07-06 23:28 - 000927744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2017-07-12 10:45 - 2017-07-06 23:28 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-07-12 10:45 - 2017-07-06 23:25 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-07-12 10:45 - 2017-07-06 23:24 - 005388800 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll
2017-07-12 10:45 - 2017-07-06 23:24 - 002217472 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2017-07-12 10:45 - 2017-06-21 00:54 - 000603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-07-12 10:45 - 2017-06-21 00:51 - 000434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-07-12 10:45 - 2017-06-21 00:50 - 000126304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
2017-07-12 10:45 - 2017-06-21 00:48 - 002681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-07-12 10:45 - 2017-06-21 00:47 - 000764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-07-12 10:45 - 2017-06-21 00:40 - 001069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-07-12 10:45 - 2017-06-21 00:40 - 000328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-07-12 10:45 - 2017-06-21 00:40 - 000224096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
2017-07-12 10:45 - 2017-06-21 00:38 - 001738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-07-12 10:45 - 2017-06-21 00:37 - 001369240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2017-07-12 10:45 - 2017-06-21 00:37 - 001157008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-07-12 10:45 - 2017-06-21 00:35 - 002915704 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-07-12 10:45 - 2017-06-21 00:35 - 001267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-07-12 10:45 - 2017-06-21 00:31 - 001277824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-07-12 10:45 - 2017-06-21 00:04 - 001631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-07-12 10:45 - 2017-06-21 00:03 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\uudf.dll
2017-07-12 10:45 - 2017-06-21 00:02 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2017-07-12 10:45 - 2017-06-21 00:02 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-07-12 10:45 - 2017-06-21 00:01 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2017-07-12 10:45 - 2017-06-21 00:01 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2017-07-12 10:45 - 2017-06-21 00:01 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmptrap.exe
2017-07-12 10:45 - 2017-06-21 00:00 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2017-07-12 10:45 - 2017-06-21 00:00 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2017-07-12 10:45 - 2017-06-21 00:00 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-07-12 10:45 - 2017-06-21 00:00 - 000148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2017-07-12 10:45 - 2017-06-21 00:00 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2017-07-12 10:45 - 2017-06-21 00:00 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-07-12 10:45 - 2017-06-20 23:59 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-07-12 10:45 - 2017-06-20 23:59 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2017-07-12 10:45 - 2017-06-20 23:59 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-07-12 10:45 - 2017-06-20 23:59 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-07-12 10:45 - 2017-06-20 23:59 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2017-07-12 10:45 - 2017-06-20 23:59 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll
2017-07-12 10:45 - 2017-06-20 23:58 - 000547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-07-12 10:45 - 2017-06-20 23:58 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2017-07-12 10:45 - 2017-06-20 23:58 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2017-07-12 10:45 - 2017-06-20 23:58 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-07-12 10:45 - 2017-06-20 23:58 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2017-07-12 10:45 - 2017-06-20 23:57 - 000505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-07-12 10:45 - 2017-06-20 23:57 - 000418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-07-12 10:45 - 2017-06-20 23:57 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2017-07-12 10:45 - 2017-06-20 23:57 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
2017-07-12 10:45 - 2017-06-20 23:57 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2017-07-12 10:45 - 2017-06-20 23:57 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2017-07-12 10:45 - 2017-06-20 23:56 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2017-07-12 10:45 - 2017-06-20 23:56 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-07-12 10:45 - 2017-06-20 23:56 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2017-07-12 10:45 - 2017-06-20 23:55 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-07-12 10:45 - 2017-06-20 23:54 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-07-12 10:45 - 2017-06-20 23:54 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-07-12 10:45 - 2017-06-20 23:54 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-07-12 10:45 - 2017-06-20 23:54 - 000247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2017-07-12 10:45 - 2017-06-20 23:54 - 000168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2017-07-12 10:45 - 2017-06-20 23:53 - 000437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-07-12 10:45 - 2017-06-20 23:53 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2017-07-12 10:45 - 2017-06-20 23:53 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2017-07-12 10:45 - 2017-06-20 23:52 - 017198592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-07-12 10:45 - 2017-06-20 23:52 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-07-12 10:45 - 2017-06-20 23:52 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-07-12 10:45 - 2017-06-20 23:51 - 000634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2017-07-12 10:45 - 2017-06-20 23:51 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-07-12 10:45 - 2017-06-20 23:50 - 001054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2017-07-12 10:45 - 2017-06-20 23:49 - 002104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-07-12 10:45 - 2017-06-20 23:49 - 001913856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2017-07-12 10:45 - 2017-06-20 23:49 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2017-07-12 10:45 - 2017-06-20 23:48 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\uexfat.dll
2017-07-12 10:45 - 2017-06-20 23:47 - 001105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2017-07-12 10:45 - 2017-06-20 23:47 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ufat.dll
2017-07-12 10:45 - 2017-06-20 23:47 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-07-12 10:45 - 2017-06-20 23:46 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFSv1.dll
2017-07-12 10:45 - 2017-06-20 23:46 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\cnvfat.dll
2017-07-12 10:45 - 2017-06-20 23:43 - 000961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2017-07-12 10:45 - 2017-06-20 23:43 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2017-07-12 10:45 - 2017-06-20 23:42 - 000981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-07-12 10:45 - 2017-06-20 23:42 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-07-12 10:45 - 2017-06-20 23:42 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2017-07-12 10:45 - 2017-06-20 23:42 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2017-07-12 10:45 - 2017-06-20 23:42 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2017-07-12 10:45 - 2017-06-20 23:41 - 001359872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-07-12 10:45 - 2017-06-20 23:41 - 001021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2017-07-12 10:45 - 2017-06-20 23:41 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-07-12 10:45 - 2017-06-20 23:40 - 004474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-07-12 10:45 - 2017-06-20 23:40 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2017-07-12 10:45 - 2017-06-20 23:40 - 001421824 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-07-12 10:45 - 2017-06-20 23:40 - 000376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-07-12 10:45 - 2017-06-20 23:39 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-07-12 10:45 - 2017-06-20 23:39 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2017-07-12 10:45 - 2017-06-20 23:39 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-07-12 10:45 - 2017-06-20 23:38 - 005611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-07-12 10:45 - 2017-06-20 23:38 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-07-12 10:45 - 2017-06-20 23:36 - 000881152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2017-07-12 10:45 - 2017-06-20 23:36 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2017-07-12 10:45 - 2017-06-20 23:34 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2017-07-12 10:45 - 2017-03-03 23:28 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-07-12 10:45 - 2017-03-03 23:27 - 000391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2017-07-12 10:45 - 2017-03-03 23:14 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2017-07-12 10:45 - 2016-10-14 20:45 - 001790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-07-12 10:45 - 2016-10-05 02:32 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2017-07-10 23:54 - 2017-07-29 16:35 - 000000000 ___HD C:\$WINDOWS.~BT
2017-07-10 11:15 - 2017-08-03 14:33 - 000000000 ____D C:\Users\Zach\AppData\Local\Warframe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-09 11:45 - 2016-02-29 16:42 - 000000000 ____D C:\Users\Zach\AppData\Local\Battle.net
2017-08-09 11:40 - 2015-09-02 20:01 - 000000000 ____D C:\Users\Zach\AppData\Roaming\Skype
2017-08-09 11:31 - 2016-09-21 19:57 - 000000000 ____D C:\ProgramData\NVIDIA
2017-08-09 11:31 - 2016-07-26 20:49 - 000000000 ___RD C:\Users\Zach\OneDrive
2017-08-09 11:29 - 2016-09-21 19:58 - 000000000 ____D C:\Users\Zach
2017-08-09 10:44 - 2016-04-02 17:53 - 000000000 ____D C:\Users\Zach\AppData\Local\CrashDumps
2017-08-09 10:42 - 2016-07-26 20:44 - 004797180 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-09 10:36 - 2016-09-21 20:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-09 10:36 - 2016-07-15 23:04 - 001572864 _____ C:\WINDOWS\system32\config\BBI
2017-08-09 10:35 - 2016-07-16 04:36 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-09 10:13 - 2015-09-17 17:00 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-09 09:17 - 2015-09-02 20:20 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-08-09 08:58 - 2016-07-15 23:04 - 019398656 _____ C:\WINDOWS\system32\config\HARDWARE
2017-08-09 08:52 - 2016-09-21 19:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-09 02:00 - 2017-06-11 11:53 - 000000000 ____D C:\Users\Zach\AppData\Local\Adobe
2017-08-09 01:09 - 2013-08-22 08:36 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2017-08-08 23:44 - 2016-07-16 04:47 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-08 23:39 - 2016-07-16 04:45 - 000000000 ____D C:\WINDOWS\INF
2017-08-08 23:36 - 2017-05-06 20:09 - 000000000 ____D C:\Users\Zach\AppData\Roaming\discord
2017-08-08 23:36 - 2016-04-26 23:39 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-08 23:35 - 2016-09-21 19:57 - 004924048 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-08-08 23:35 - 2016-07-16 04:47 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-08 23:35 - 2016-07-16 04:47 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-08 23:34 - 2016-07-16 04:47 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-08 23:34 - 2016-07-16 04:47 - 000000000 ___RD C:\Program Files\Windows Defender
2017-08-08 23:34 - 2016-07-16 04:47 - 000000000 ____D C:\WINDOWS\Provisioning
2017-08-08 23:34 - 2016-07-16 04:47 - 000000000 ____D C:\WINDOWS\bcastdvr
2017-08-08 23:34 - 2016-07-16 04:47 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-08 23:34 - 2016-07-16 04:47 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-08 23:34 - 2016-07-16 04:47 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-08-08 23:34 - 2016-07-16 04:47 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-08-08 18:28 - 2015-10-10 10:29 - 000000000 ____D C:\ProgramData\Origin
2017-08-08 17:30 - 2015-10-10 10:32 - 000000000 ____D C:\Users\Zach\AppData\Roaming\Origin
2017-08-08 17:16 - 2017-06-15 10:52 - 000948884 _____ C:\Users\Zach\Desktop\Patillas.stl
2017-08-08 16:57 - 2017-05-06 20:09 - 000000000 ____D C:\Users\Zach\AppData\Local\Discord
2017-08-08 16:00 - 2016-07-16 04:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-08 11:28 - 2015-09-02 19:59 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-08 11:25 - 2016-05-05 16:29 - 000000000 ____D C:\Program Files (x86)\Overwatch
2017-08-08 10:56 - 2015-09-04 17:55 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-08 10:55 - 2015-09-04 17:55 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-07 10:53 - 2016-02-29 16:43 - 000000000 ____D C:\Program Files (x86)\StarCraft II
2017-08-06 20:27 - 2016-08-08 21:50 - 000788520 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2017-08-06 20:21 - 2015-09-10 17:25 - 000000000 ____D C:\Users\Zach\AppData\Local\Spotify
2017-08-06 20:20 - 2015-09-10 17:24 - 000000000 ____D C:\Users\Zach\AppData\Roaming\Spotify
2017-08-03 10:18 - 2015-09-30 20:03 - 000000000 ____D C:\Users\Zach\AppData\LocalLow\Adobe
2017-08-01 19:17 - 2016-08-17 11:26 - 000000000 ____D C:\Program Files (x86)\Overwatch Test
2017-07-31 08:14 - 2016-07-16 04:49 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-07-31 08:14 - 2016-07-16 04:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-07-29 23:14 - 2017-02-28 19:14 - 000000000 ___RD C:\Users\Zach\Desktop\GAMING
2017-07-29 13:02 - 2015-09-03 17:07 - 000000000 ____D C:\Users\Zach\Documents\My Games
2017-07-29 13:00 - 2015-09-22 16:33 - 000000000 ____D C:\ProgramData\Package Cache
2017-07-29 12:59 - 2015-09-02 20:20 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-07-29 12:14 - 2017-06-13 21:02 - 000000000 ____D C:\Users\Zach\AppData\Roaming\inkscape
2017-07-27 12:41 - 2016-07-26 20:49 - 000002397 _____ C:\Users\Zach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-24 12:41 - 2015-09-02 20:01 - 000000000 ____D C:\ProgramData\Skype
2017-07-21 18:08 - 2017-06-29 12:13 - 000383016 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe
2017-07-21 16:06 - 2015-10-10 10:29 - 000000000 ____D C:\ProgramData\Electronic Arts
2017-07-19 23:15 - 2016-12-08 16:55 - 000000000 ____D C:\Users\Zach\AppData\Local\Ubisoft Game Launcher
2017-07-19 11:21 - 2015-11-12 17:50 - 000000000 ___RD C:\Users\Zach\Desktop\Work
2017-07-18 20:44 - 2017-04-25 20:30 - 000000267 _____ C:\Users\Zach\Desktop\Wants.txt
2017-07-15 10:00 - 2017-02-12 01:02 - 000000000 ____D C:\Users\Zach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2017-07-14 20:07 - 2016-07-16 04:47 - 000000000 ____D C:\WINDOWS\rescache
2017-07-13 11:10 - 2015-11-09 17:13 - 000000003 _____ C:\WINDOWS\SysWOW64\HRUPPROG.TXT
2017-07-12 23:12 - 2017-06-11 11:53 - 000000000 ____D C:\Users\Zach\AppData\Roaming\Adobe
2017-07-12 23:11 - 2016-07-16 04:47 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-07-12 23:09 - 2016-07-16 04:47 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-07-12 10:11 - 2016-07-16 04:43 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2017-07-10 18:45 - 2017-07-07 10:57 - 015870520 _____ C:\Users\Zach\Desktop\Batman.psd

==================== Files in the root of some directories =======

2015-09-30 20:03 - 2015-10-14 19:20 - 000000034 _____ () C:\Users\Zach\AppData\Roaming\AdobeWLCMCache.dat
2016-05-06 15:21 - 2016-05-06 15:21 - 000000048 _____ () C:\Users\Zach\AppData\Roaming\guid.ini
2015-09-30 20:08 - 2015-09-30 20:10 - 225111747 _____ () C:\Users\Zach\AppData\Local\ACCCx3_3_0_151.zip.aamdownload
2015-09-30 20:08 - 2015-09-30 20:10 - 000002615 _____ () C:\Users\Zach\AppData\Local\ACCCx3_3_0_151.zip.aamdownload.aamd
2016-12-21 15:41 - 2016-12-21 15:41 - 001307648 _____ () C:\Users\Zach\AppData\Local\file__0.localstorage
2016-07-26 19:50 - 2016-07-26 19:50 - 000000327 _____ () C:\Users\Zach\AppData\Local\LMIR0001.tmp_r.bat
2017-08-02 17:54 - 2017-08-02 17:54 - 000001776 _____ () C:\Users\Zach\AppData\Local\recently-used.xbel
2016-09-21 19:57 - 2016-09-21 19:57 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2016-01-13 17:40 - 2016-01-13 17:40 - 000000462 _____ () C:\ProgramData\HirezPipeError.txt
2016-12-19 16:23 - 2017-01-24 17:11 - 000015939 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-19 16:23 - 2017-01-12 20:02 - 000003355 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

Some files in TEMP:
====================
2017-08-09 01:09 - 2017-08-09 01:09 - 001199825 _____ () C:\Users\Zach\AppData\Local\Temp\unins000.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-08-05 12:54

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-08-2017
Ran by Zach (09-08-2017 11:49:02)
Running from C:\Users\Zach\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-22 03:03:12)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2624608272-4066467830-461076493-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2624608272-4066467830-461076493-503 - Limited - Disabled)
Guest (S-1-5-21-2624608272-4066467830-461076493-501 - Limited - Disabled)
Zach (S-1-5-21-2624608272-4066467830-461076493-1001 - Administrator - Enabled) => C:\Users\Zach

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 15.12 (x64) (HKLM\...\7-Zip) (Version: 15.12 - Igor Pavlov)
Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.90 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.0 - Adobe Systems Incorporated)
Adobe Photoshop CS6 version 13.0.1 (HKLM-x32\...\{A724DC44-6241-42D3-BA57-778B178ABC17}_is1) (Version: 13.0.1 - Adobe Systems, Inc.)
Alien Swarm (HKLM-x32\...\Steam App 630) (Version: - Valve)
Alien Swarm: Reactive Drop (HKLM\...\Steam App 563560) (Version: - Reactive Drop Team)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 378.49 - NVIDIA Corporation) Hidden
Apotheon Arena (HKLM\...\Steam App 417890) (Version: - Alientrap)
Apple Application Support (32-bit) (HKLM-x32\...\{9BA1A894-B42F-4805-BC8C-349C905A3930}) (Version: 5.3.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{7EAC8A42-9FAC-4F6B-AABF-C08C9F2E0F13}) (Version: 5.3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Assassin's Creed III (HKLM-x32\...\Uplay Install 54) (Version: - Ubisoft)
ASUS USB-N53 Utility (HKLM-x32\...\{E3D76EEB-4512-4FCF-B71B-5802DDC6B3C0}) (Version: 1.0.16.0000 - ASUS)
Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
Autodesk 3ds Max 2017 (HKLM\...\{52B37EC7-D836-0410-0664-3C24BCED2010}) (Version: 19.0.1072.0 - Autodesk) Hidden
Autodesk 3ds Max 2017 (HKLM\...\Autodesk 3ds Max 2017) (Version: 19.0.1072.0 - Autodesk)
Autodesk 3ds Max 2017 Populate Data (HKLM\...\{2B07E17E-A072-43BD-9DCC-369B56C16698}) (Version: 19.0.0.0 - Autodesk)
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk Backburner 2017.0 (HKLM-x32\...\{0038F5AA-8482-4BB2-8A28-3FEA1D58D780}) (Version: 17.0.0.0 - Autodesk)
Autodesk Civil View for 3ds Max 2017 64-bit (HKLM\...\{1C4FFAF0-7DBB-4F7A-A386-46747D060826}) (Version: 19.0.0.0 - Autodesk)
Autodesk Desktop App (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.5.154 - Autodesk)
Autodesk Fusion 360 (HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\73e72ada57b7480280f7a6f4a289729f) (Version: 2.0.3174 - Autodesk, Inc.)
Autodesk Inventor Server Engine for 3ds Max 2017 (HKLM\...\{9167CA34-4E68-49E3-8892-3C439739D2D3}) (Version: 19.0 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk License Service (x64) - 4.1 (HKLM\...\{B827D6B7-7731-43BA-92EC-916C89C88964}) (Version: 4.1.1.0 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2017 (HKLM-x32\...\{CB6E007E-701D-42CD-AF0E-4BE9C36C7F7C}) (Version: 15.11.3.0 - Autodesk)
Autodesk Maya 2017 (HKLM\...\{847DE41D-1C5A-4A52-ADD4-AE708757EDBD}) (Version: 17.0.1720.0 - Autodesk) Hidden
Autodesk Maya 2017 (HKLM\...\Autodesk Maya 2017) (Version: 17.0.1720.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2017 (HKLM\...\{0BB716E0-1700-0610-0000-097DC2F354DF}) (Version: 17.0.411.0 - Autodesk) Hidden
Autodesk Revit Interoperability for 3ds Max 2017 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2017) (Version: 17.0.411.0 - Autodesk)
Batman: Arkham City GOTY (HKLM\...\Steam App 200260) (Version: - Rocksteady Studios)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BattleBlock Theater (HKLM\...\Steam App 238460) (Version: - The Behemoth)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Blacklight: Retribution (HKLM-x32\...\Steam App 209870) (Version: - Hardsuit Labs)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Borderlands 2 (HKLM\...\Steam App 49520) (Version: - Gearbox Software)
Brawlhalla (HKLM\...\Steam App 291550) (Version: - Blue Mammoth Games)
Broforce (HKLM\...\Steam App 274190) (Version: - Free Lives)
Call of Duty: World at War (HKLM\...\Steam App 10090) (Version: - Treyarch)
Call of Duty: World at War (HKLM-x32\...\Steam App 10090) (Version: - Treyarch)
Castle Crashers (HKLM\...\Steam App 204360) (Version: - The Behemoth)
CCleaner (HKLM\...\CCleaner) (Version: 5.31 - Piriform)
Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version: - Torn Banner Studios)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Corsair Utility Engine (HKLM-x32\...\{861458E3-08D8-4608-8D5A-DDC9B4699925}) (Version: 2.11.115 - Corsair)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
CPUID HWMonitor 1.30 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
Cura 2.6 (HKLM-x32\...\Cura 2.6) (Version: 2.6.2 - Ultimaker)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Discord (HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
Dishonored (HKLM\...\Steam App 205100) (Version: - Arkane Studios)
Dishonored 2 (HKLM\...\Steam App 403640) (Version: - Arkane Studios)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
DXTBmp (HKLM-x32\...\{2C1544E4-5DA6-4A72-B1BA-E4692991C1DC}) (Version: 1.00.000 - )
Epic Games Launcher (HKLM-x32\...\{C8E7C575-FCFA-46B2-8FC0-E8AC65501350}) (Version: 1.1.78.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Evolve Stage 2 (HKLM\...\Steam App 273350) (Version: - Turtle Rock Studios)
Fallout: New Vegas (HKLM\...\Steam App 22380) (Version: - Obsidian Entertainment)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Gigantic (HKLM\...\Steam App 327690) (Version: - Motiga Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hacknet (HKLM\...\Steam App 365450) (Version: - Team Fractal Alligator)
Half-Life 2 (HKLM\...\Steam App 220) (Version: - Valve)
Helm (HKLM\...\{971514BD-7CC3-414F-9258-B79E6D53EC46}) (Version: 0.9.0.0 - Matt Tytel)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.3.9 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Hollow Knight (HKLM\...\Steam App 367520) (Version: - Team Cherry)
HP Support Solutions Framework (HKLM-x32\...\{E2CB09C1-3C76-4395-BB47-50C066535CF8}) (Version: 12.7.27.15 - HP)
iCloud (HKLM\...\{0493048C-CB1A-44B7-8BB3-8467AF7BA9E4}) (Version: 6.1.2.13 - Apple Inc.)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Inkscape 0.92.1 (HKLM-x32\...\Inkscape) (Version: 0.92.1 - Inkscape Project)
InputMapper (HKLM-x32\...\{1A44056A-C7D8-4561-BC43-A0AA7D7AAA64}) (Version: 1.5.31.0 - DSDCS)
iTunes (HKLM\...\{9D0D2A8B-7E7B-4D88-8D50-24286ED6A5EB}) (Version: 12.5.5.5 - Apple Inc.)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Left 4 Dead 2 (HKLM\...\Steam App 550) (Version: - Valve)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Mediatek RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.39.173 - MediatekWiFi)
Meshmixer (HKLM\...\Meshmixer_x64) (Version: 11.0.544 - Autodesk, Inc.)
METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version: - Konami Digital Entertainment)
Metro: Last Light Redux (HKLM-x32\...\Steam App 287390) (Version: - 4A Games)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 RC Redistributable (x64) - 14.0.22816 (HKLM-x32\...\{e2495eb6-cca8-47aa-91ea-3410ca44d7b7}) (Version: 14.0.22816.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Mixxx 2.0.0 (64-bit) (HKLM-x32\...\Mixxx (2.0.0)) (Version: 2.0.0 - The Mixxx Development Team)
Moonbase Alpha (HKLM\...\Steam App 39000) (Version: - Virtual Heroes)
Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version: - TaleWorlds Entertainment)
Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSI Afterburner 4.3.0 (HKLM-x32\...\Afterburner) (Version: 4.3.0 - MSI Co., LTD)
MtoA for Maya 2017 (HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\MtoA2017) (Version: 1.3.0.0 - Solid Angle)
NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 378.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 378.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.5.0.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.5.0.70 - NVIDIA Corporation)
NVIDIA Graphics Driver 378.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.49 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.21 - NVIDIA Corporation)
NVIDIA mental ray and IRay feature plugins for 3ds Max 2017 (HKLM\...\{6ABEC32F-B90F-4499-B3A3-FF8A00948178}) (Version: 19.0.0.0 - Autodesk)
NVIDIA mental ray and IRay rendering plugins for 3ds Max 2017 (HKLM\...\{4B889650-52DC-49E0-AB9C-F501B91002E3}) (Version: 19.0.0.0 - Autodesk)
NVIDIA Miracast Virtual Audio 368.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 368.81 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NVIDIA PhysX v8.10.29 (HKLM-x32\...\{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}) (Version: 8.10.29 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.5.0.70 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.4.5.0 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Orcs Must Die! Unchained (HKLM\...\Steam App 427270) (Version: - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 10.4.17.36908 - Electronic Arts, Inc.)
ORION (HKLM\...\Steam App 407840) (Version: - Trek Industries, Inc)
ORION: Prelude (HKLM\...\Steam App 104900) (Version: - Spiral Game Studios)
ORION: Prelude SDK (HKLM\...\Steam App 318620) (Version: - )
osu! (HKLM-x32\...\{5eb4739b-6bcf-4cf4-ad7f-a7644730af56}) (Version: latest - ppy Pty Ltd)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Overwatch Test (HKLM-x32\...\Overwatch Test) (Version: - Blizzard Entertainment)
paint.net (HKLM\...\{DF3A46D9-67B3-44B2-9D01-25C8BA772C8A}) (Version: 4.0.6 - dotPDN LLC)
PAYDAY 2 (HKLM\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
Pirates, Vikings, & Knights II (HKLM-x32\...\Steam App 17570) (Version: - Octoshark Studios)
Pokemon Showdown (HKLM-x32\...\Pokemon Showdown) (Version: - "Pokemon Showdown")
Project64 version 2.3.2.202 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.2.202 - )
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
RawExtractor v1.6 (HKLM-x32\...\RawExtractor) (Version: v1.6 - SafeFolder)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7841 - Realtek Semiconductor Corp.)
Red Trigger (HKLM\...\Steam App 491130) (Version: - Maxime Vézina)
Relic Hunters Zero (HKLM\...\Steam App 382490) (Version: - Rogue Snail)
RivaTuner Statistics Server 6.5.0 (HKLM-x32\...\RTSS) (Version: 6.5.0 - Unwinder)
Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam)
Rocksmith® 2014 Edition - Remastered (HKLM\...\Steam App 221680) (Version: - Ubisoft - San Francisco)
RPG MO (HKLM-x32\...\Steam App 372800) (Version: - Marxnet)
Sculptris Alpha 6 (HKLM-x32\...\Sculptris Alpha 6 Alpha 6) (Version: Alpha 6 - Pixologic)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0360 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.5.0.70 - NVIDIA Corporation) Hidden
SketchUp 2016 (HKLM\...\{E2B66CF6-ABA0-4E5F-B426-7478B18301AE}) (Version: 16.1.1449 - Trimble Navigation Limited)
Skype™ 7.38 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.38.101 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 4.12.4166.2 - Hi-Rez Studios)
SNOW (HKLM\...\Steam App 244930) (Version: - Poppermost Productions)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - Keen Software House)
Sparkour Alpha Demo (HKLM\...\Steam App 517690) (Version: - Reeline Studios)
Spire-1.1 AAX Plug-In (x64) (HKLM\...\{EC618705-0129-470B-8707-EFBB4D49A4EB}) (Version: 1.1.12.0 - Reveal Sound Ltd.)
Spire-1.1 Plug-In (x64) (HKLM\...\{3F98118B-D5D1-455B-A899-E03C1D7B4E89}) (Version: 1.1.12.0 - Reveal Sound Ltd.)
Spotify (HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\Spotify) (Version: 1.0.58.573.g57c9cd87 - Spotify AB)
Star Wars - Battlefront II (HKLM-x32\...\Steam App 6060) (Version: - Pandemic Studios)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Steep (HKLM-x32\...\Uplay Install 3279) (Version: - Ubisoft)
Sword With Sauce: Alpha (HKLM\...\Steam App 581630) (Version: - Diatomic Games)
Sylenth1 Demo v3.032 (HKLM\...\Sylenth1v3_is1) (Version: - )
Synergy (HKLM\...\Steam App 17520) (Version: - Synergy Team)
Terraria (HKLM\...\Steam App 105600) (Version: - Re-Logic)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version: - Ubisoft)
Titanfall™ 2 (HKLM-x32\...\{4BD80373-FEE7-45B6-8249-6E8E98717405}) (Version: 1.0.0.9 - Electronic Arts, Inc.)
Tom Clancy's Rainbow Six Siege (HKLM\...\Steam App 359550) (Version: - Ubisoft Montreal)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
univcredist (HKLM-x32\...\{2d9d4a60-1d22-46c1-84bb-1de04b4715d7}) (Version: 1.0.0.0 - Motiga)
Unreal Development Kit: 2015-01 (HKLM\...\UDK-e266c3fa-e91d-46c8-b432-ad1165f6191b) (Version: - Epic Games, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 26.1 - Ubisoft)
Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.)
Wacom Tablet (HKLM\...\Wacom Tablet Driver) (Version: 6.3.22-6 - Wacom Technology Corp.)
Wallpaper Engine (HKLM\...\Steam App 431960) (Version: - Kristjan Skutta)
Warframe (HKLM\...\Steam App 230410) (Version: - Digital Extremes)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2624608272-4066467830-461076493-1001_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\3ds Max 2017\Inventor Server\Bin\TestServer.dll => No File
CustomCLSID: HKU\S-1-5-21-2624608272-4066467830-461076493-1001_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\3ds Max 2017\Inventor Server\Bin\TestServer.dll => No File
CustomCLSID: HKU\S-1-5-21-2624608272-4066467830-461076493-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\Zach\AppData\Local\Autodesk\webdeploy\production\df2c2875432b4bd0d6eb31cb9221197ebfddc515\NPreview10.dll ()
CustomCLSID: HKU\S-1-5-21-2624608272-4066467830-461076493-1001_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\3ds Max 2017\Inventor Server\Bin\TestServer.dll => No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-11-19] (Igor Pavlov)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2017-01-17] (Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-11-18] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-11-18] (Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-11-19] (Igor Pavlov)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-01-20] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-11-19] (Igor Pavlov)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-11-18] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-11-18] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1262B664-881F-4951-AEEF-0F02BA91EDF9} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-27] (NVIDIA Corporation)
Task: {1E11476B-0536-45ED-B60F-1A57EA5400D7} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {2B72C31C-8DA4-4B6D-8CF9-F439A9BEBA3E} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-27] (NVIDIA Corporation)
Task: {2D93CD7A-F6E6-4661-ABC0-3828CA2C281A} - System32\Tasks\WlanMgr => C:\Program Files (x86)\ASUS\USB-N53 Utility\WlanMgr.exe [2012-12-18] (ASUSTek COMPUTER INC.)
Task: {2ECA8A83-0FF1-49EC-8A22-11AE6B90C427} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {2F1017BE-DE36-4D0C-AA14-FE7568AF3AF5} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-08-08] (Microsoft Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {3736F270-8082-43ED-8224-6C63547A6548} - \Microsoft\Windows\Setup\EOONotify -> No File <==== ATTENTION
Task: {3E370056-6765-48CD-919D-E214EE4D6842} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {41DF2593-925F-44D6-AF4F-0FA23A005174} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {44016ABE-A9E7-4F0D-B9E9-60C19A369D64} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {48CDE2BE-2B14-41DD-990E-2BC2C7F3A362} - System32\Tasks\{BE3825C1-61B7-472F-B8CD-9E4CB1A92207} => C:\Windows\system32\pcalua.exe -a "C:\ProgramData\Battle.net\Agent\Blizzard Uninstaller.exe" -c --lang=enUS --uid=wow_enus --displayname="World of Warcraft"
Task: {49F2FA19-1F94-429B-958F-29FEB1FD3180} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {59D5AA0F-884B-4FAC-83BD-DDF1F5CC62ED} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {65E4AA21-6706-463D-AA84-8600DDE962A1} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {69075331-8311-4BF8-92E5-67F5F473AD9C} - System32\Tasks\AdobeAAMUpdater-1.0-ZachsPc-Zach => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19] (Adobe Systems Incorporated)
Task: {6B8B2F5E-9237-4A51-AA80-65C5D5116D01} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {75176B51-2C09-4646-AC23-AAEB1AC34F8E} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\ErrorReporting => C:\\ProgramData\\WindowsReporting\\wermgr.exe
Task: {87728C91-4241-44AF-B851-32603D482A8C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {8D2B1242-165B-4E4D-A3B8-DC769B47B00E} - System32\Tasks\{B027F517-2DD8-49D5-B5AD-C890B37E3A36} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\conkanBlocUn\CNYrRZbHYM.exe"
Task: {8DD2BE4A-BAE4-431C-A5AB-F21E62FF9CAA} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {922FFA16-9947-4110-BCB4-11F112BD364C} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-27] (NVIDIA Corporation)
Task: {93B02BB2-9A6A-47F3-8344-4B1CCEBFC32F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-03-27] (NVIDIA Corporation)
Task: {9535D9A0-FD82-4A85-B6A8-07A272074BA5} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-03-27] (NVIDIA Corporation)
Task: {980E6CD4-6221-497A-B99F-25BB4E6D6089} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {98222321-EF58-4C33-A43F-93A5FA2D2E3D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {A2CCBC53-8A59-4519-A69D-1FEAD45ECB20} - System32\Tasks\{77AACE1C-CED7-4A9D-86C6-5416C2951CF0} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\Zach\AppData\Local\osu!\osu!.exe -c -uninstall
Task: {B1463961-6328-4CE2-B4F2-C1902ADDBE4E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {B4718FBD-800B-46A4-B2FD-DC2482BC15A2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {B9B5A260-5F45-408B-BDE6-84722B028849} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {BFDD47B0-32DD-495F-9E2A-78856A21528C} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-03-27] (NVIDIA Corporation)
Task: {CB6C0A77-FF2C-4F0E-8540-BC2922E238C9} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {D4AB05B9-B046-4A20-B7F5-3B18397127E1} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {DA55BD27-0F5A-4145-B94B-CD89AE7989F7} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-27] (NVIDIA Corporation)
Task: {E65B84B1-C0A5-4B69-9D0A-0CE138699D20} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> No File <==== ATTENTION
Task: {FA563471-66F7-4192-81BB-F46F868CF167} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {FC6DD314-F945-47D7-88DE-A756D0BC5DFF} - \WPD\SqmUpload_S-1-5-21-2624608272-4066467830-461076493-1001 -> No File <==== ATTENTION
Task: {FEABF9B9-4541-4350-AAFD-664D8B3CA7C1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-09] (Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 04:42 - 2016-07-16 04:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-07-12 10:45 - 2017-06-21 00:48 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-21 19:57 - 2013-07-04 03:32 - 000936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2016-06-20 15:14 - 2016-06-20 15:14 - 000076152 _____ () C:\Windows\system32\PnkBstrA.exe
2017-01-13 14:56 - 2017-01-13 14:56 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-01-13 14:56 - 2017-01-13 14:56 - 001353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-08-09 10:13 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-03-14 15:31 - 2017-03-03 23:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-14 15:31 - 2017-03-03 23:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-14 15:31 - 2017-03-03 23:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-08-08 10:53 - 2017-03-03 23:05 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-08-08 10:53 - 2017-08-01 11:26 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-08-08 10:53 - 2017-08-01 11:31 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-07-18 10:03 - 2017-07-18 10:03 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-07-18 10:03 - 2017-07-18 10:03 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-07-20 10:39 - 2017-07-20 10:39 - 001528296 _____ () D:\Battle.net\Battle.net.9093\Battle.net Helper.exe
2016-10-18 17:04 - 2017-03-27 20:32 - 001147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-09-21 20:55 - 2016-09-21 20:55 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-14 15:30 - 2017-03-03 23:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-08-08 11:28 - 2017-08-02 00:39 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libglesv2.dll
2017-08-08 11:28 - 2017-08-02 00:39 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libegl.dll
2016-09-21 19:57 - 2017-08-09 10:36 - 000033936 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2016-09-21 19:57 - 2013-07-04 03:32 - 000104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2016-10-20 20:31 - 2017-03-10 03:48 - 000061944 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_Service-head.dll
2016-10-20 20:31 - 2017-03-10 03:48 - 000110584 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson0.dll
2017-08-08 17:25 - 2017-07-26 12:03 - 002493440 _____ () D:\Origin\libGLESv2.dll
2017-01-13 14:56 - 2017-01-13 14:56 - 001041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2017-01-13 14:56 - 2017-01-13 14:56 - 000189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2017-01-13 14:56 - 2017-01-13 14:56 - 000080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2017-06-20 11:28 - 2017-06-20 11:28 - 001997792 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2017-07-20 10:41 - 2017-07-20 10:41 - 055782888 _____ () D:\Battle.net\Battle.net.9093\libcef.dll
2017-07-20 10:41 - 2017-07-20 10:41 - 000540336 _____ () D:\Battle.net\Battle.net.9093\ortp.dll
2017-04-25 15:06 - 2017-03-27 20:32 - 000018880 _____ () c:\program files (x86)\nvidia corporation\nvstreamsrv\detoured.dll
2017-07-20 10:41 - 2017-07-20 10:41 - 000133632 _____ () D:\Battle.net\Battle.net.9093\libEGL.dll
2017-07-20 10:41 - 2017-07-20 10:41 - 003384832 _____ () D:\Battle.net\Battle.net.9093\libGLESv2.dll
2016-10-18 17:04 - 2017-03-27 20:32 - 000900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-2624608272-4066467830-461076493-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 06:25 - 2013-08-22 06:25 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2624608272-4066467830-461076493-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Zach\Desktop\back.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "Arc"
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\...\StartupApproved\Run: => "EvolveClient"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{EB3AB467-14B6-4F8F-A440-52D65427E30F}] => (Allow) D:\Steam\steamapps\common\Moon Base Alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{A8A9088A-6359-4D2E-BDB9-8EC97377A010}] => (Allow) D:\Steam\steamapps\common\Moon Base Alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [UDP Query User{ECB28715-5016-4FC1-8166-3F446A168DCA}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{3266955E-8919-4DCB-B5A7-CA6230AE1E85}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{6910488D-D30F-4088-8315-5D9FE6C8EFDF}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{0C45986B-53B5-49F3-BE81-C2546842AC8A}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [{DE5D0198-9FEE-4201-8AC7-4997E394B97D}] => (Allow) D:\Steam\steamapps\common\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{BCB190E2-9F74-4805-902F-E53ECE3CF381}] => (Allow) D:\Steam\steamapps\common\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [UDP Query User{7FA7FC23-4A00-4F53-8233-EDCCF5FE79DF}C:\program files (x86)\starcraft ii\versions\base44983\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base44983\sc2_x64.exe
FirewallRules: [TCP Query User{A2A4F509-6413-4904-8372-B2B9FD469E6B}C:\program files (x86)\starcraft ii\versions\base44983\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base44983\sc2_x64.exe
FirewallRules: [{4F42F395-3C17-45A8-BE63-53F21DD0D5BD}] => (Allow) D:\Steam\steamapps\common\Apotheon Arena\ApotheonArena.exe
FirewallRules: [{44E60915-DEF0-411D-B368-7772DBCBBB97}] => (Allow) D:\Steam\steamapps\common\Apotheon Arena\ApotheonArena.exe
FirewallRules: [UDP Query User{934A70D8-E88A-4885-B08E-ABB3B29833CF}C:\program files (x86)\overwatch test\overwatch.exe] => (Allow) C:\program files (x86)\overwatch test\overwatch.exe
FirewallRules: [TCP Query User{20478E6B-712C-4590-8279-2EEB5B57182D}C:\program files (x86)\overwatch test\overwatch.exe] => (Allow) C:\program files (x86)\overwatch test\overwatch.exe
FirewallRules: [{914664E1-36CA-4677-9F80-70C00AA146F8}] => (Allow) D:\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{ABF9E3B2-936C-4EBA-BF30-20B2140B9177}] => (Allow) D:\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [TCP Query User{3C8A40FD-26AE-46A6-B956-06680C07354D}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{562EDACC-7436-4FF9-B294-45E5B4F82BE5}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{9B7F6532-620F-4B9D-8369-835BCE1B000C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DBF9E204-F9AE-4FDE-ABCA-886EE1EDFBAF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{11A70129-E3C1-41D8-BB29-522BC42DA773}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{4FBFAB34-67A4-4C3E-AB44-ABA6A4284C3D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D5D906DC-0487-4418-A2FF-7B2EB4067B55}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{382E1B8F-A3A4-406C-89F5-D6DBABB3019F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{B3111037-87CE-462D-9B56-EFB4A0FBE33C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2F1B9E71-0447-45E7-97D4-4E8C48C4A0C4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FD4314E0-5DEB-43AC-8BA4-FC085021C498}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{7690A502-9461-4B35-B328-0F4464DC037F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [TCP Query User{189F5801-80A6-47E7-8299-AC5E98431CAA}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{853403A0-4A4F-4393-B3C2-FD4A5D22B9A2}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{30E2BFCF-2255-405D-B15C-4A305B1A00F0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TERA\TERA-Launcher.exe
FirewallRules: [{87600BA0-5EFA-49E9-9EF1-74CDDEDABCFC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TERA\TERA-Launcher.exe
FirewallRules: [TCP Query User{C4449A32-7D19-40AF-8E79-6B82F18C22DA}C:\program files (x86)\asus\usb-n53 utility\wlanmgr.exe] => (Allow) C:\program files (x86)\asus\usb-n53 utility\wlanmgr.exe
FirewallRules: [UDP Query User{9337F925-C552-40BA-ADCE-5C5C0DEA5777}C:\program files (x86)\asus\usb-n53 utility\wlanmgr.exe] => (Allow) C:\program files (x86)\asus\usb-n53 utility\wlanmgr.exe
FirewallRules: [{97623FCF-0031-4AD7-9E11-201EBA865B16}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{94C8A015-CAB7-4B89-855C-7BDFBCEFCEE5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A61EAD88-4142-4EEB-A451-C4C28E68E1AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RPG MO\nw.exe
FirewallRules: [{81C7C76B-68FC-4262-B078-A285DA1C4BE0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RPG MO\nw.exe
FirewallRules: [{B6ED5560-2496-497D-B364-92C87FD875C8}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{0BE46990-99D2-4B9D-8952-B12EF40E38FE}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{21AEF1BE-4FE3-473F-B5AB-243B3EFD03E7}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{0393A157-A8E6-4D1C-8343-5FB7A6DAFD5F}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{4C4442BA-0D70-4B24-8ED6-1004C2E6DFF7}C:\users\zach\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\zach\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{D0409C0F-5286-4C06-BC09-9B9006938F4A}C:\users\zach\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\zach\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A57DE24C-20EB-4DA3-8BD7-766A7637C678}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{292EA9DF-601C-4A6B-8DB6-AA5E68401CF0}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{6F0103D9-A0D5-4E3C-8663-A4B18D436AA5}] => (Allow) D:\Steam\steamapps\common\Call of Duty World at War\CoDWaW.exe
FirewallRules: [{AA718982-9EA4-4DE4-B304-8DEE64326616}] => (Allow) D:\Steam\steamapps\common\Call of Duty World at War\CoDWaW.exe
FirewallRules: [{746D7747-87E1-4903-ADBB-D15E949C2A04}] => (Allow) D:\Steam\steamapps\common\Call of Duty World at War\CoDWaWmp.exe
FirewallRules: [{30218D4B-2051-4D8D-A69F-6F995050F235}] => (Allow) D:\Steam\steamapps\common\Call of Duty World at War\CoDWaWmp.exe
FirewallRules: [{3E41C09A-3547-4616-9B6B-BD66D4C2907E}] => (Allow) D:\Steam\steamapps\common\Metro Last Light Redux\metro.exe
FirewallRules: [{E03343DA-3C65-4C04-A97B-FC3E8A575B66}] => (Allow) D:\Steam\steamapps\common\Metro Last Light Redux\metro.exe
FirewallRules: [{47A9A7E0-EEDA-4B5C-991B-F88F24BCEBB1}] => (Allow) D:\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{EF76961F-E97F-44E3-949E-95684CA70C0E}] => (Allow) D:\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{F6B31389-C7F5-464B-9A2B-BFB9D54B6730}] => (Allow) D:\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{3E838C0B-B252-420F-BB39-14A1EC61669B}] => (Allow) D:\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{FBC80FAB-21B2-49BC-9EA3-5C7A788185F5}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{01F7E307-AE10-414D-9624-0F9B620C8AB3}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{41EAF40E-53D9-4BC5-9E8C-56B269D72E22}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{7F784071-65EB-4620-A84D-7B196042392A}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{6A3CBE74-214D-4CFC-8F4C-975B0B0EE513}] => (Allow) D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{32CF2CC1-47EE-4D91-9A68-041961E2970E}] => (Allow) D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{849C2F4E-1CB6-4119-BB65-AC561E773417}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{08B697B6-C9AC-499C-816F-BAD3434F223C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E63FE9BA-687E-400E-AC1A-3C3DC3159ABF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{937A4D66-5F82-480B-92CD-E4DB8985531C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{BDA59FE3-E84E-4AD9-AD2F-93F569C8EFE5}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{C42CF953-5A84-46F8-A65D-EE9B0F3361BD}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{AD508D9C-0427-4C67-94BA-5F0F612FCF4C}] => (Allow) D:\Steam\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{CF5ACC3C-9746-4B15-AC77-3CAF282F19FE}] => (Allow) D:\Steam\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{202B099D-D3A4-4043-85C0-3276F6342914}] => (Allow) D:\Steam\steamapps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{F12B8431-49F0-459B-9C4F-39251103F2FA}] => (Allow) D:\Steam\steamapps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{DFFA4E3C-459C-4465-8638-03B213D00C8D}] => (Allow) D:\Steam\steamapps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{AD57ED83-E9B8-41B9-A03C-85416698CE31}] => (Allow) D:\Steam\steamapps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{250CCDCD-12AD-4A0F-855A-1D0DBC3D2784}] => (Allow) D:\Steam\steamapps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{E840E697-1656-47F0-BE6C-961ABF729E9D}] => (Allow) D:\Steam\steamapps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{9BE181A4-20F0-4211-88C7-E1761263132A}] => (Allow) D:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{8B072AF0-0EAB-4C5A-8564-81F32E5A03FA}] => (Allow) D:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{F1EA2D11-6C55-4C0F-9E48-0BEED87F8977}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{9E262F78-590C-4558-81E7-A05A06225BBF}] => (Allow) LPort=2869
FirewallRules: [{A913E8A8-B45D-43C0-9284-B83935D8FF81}] => (Allow) LPort=1900
FirewallRules: [{CD027649-5CF3-4A11-BC27-ACF8D0F3537C}] => (Allow) D:\Steam\steamapps\common\Star Wars Battlefront II\GameData\BattlefrontII.exe
FirewallRules: [{4BF3B389-48C8-4723-8183-EEEBDD9FA4AB}] => (Allow) D:\Steam\steamapps\common\Star Wars Battlefront II\GameData\BattlefrontII.exe
FirewallRules: [TCP Query User{F0629CEA-BC7D-400E-8071-8DBC4004A04F}C:\users\zach\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\zach\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [UDP Query User{EEC2E2FD-D678-451A-829F-570802E83793}C:\users\zach\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\zach\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [TCP Query User{D9F6F07B-042A-45E3-992C-67C1017E00CB}C:\users\zach\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\zach\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{2EFAFCB1-440B-4EED-B7DF-46339A7326EB}C:\users\zach\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\zach\appdata\roaming\spotify\spotify.exe
FirewallRules: [{2BB15ABB-E9E3-40A7-A981-CBE546BE22B9}] => (Allow) D:\Steam\steamapps\common\Alien Swarm\swarm.exe
FirewallRules: [{B6D371E0-50D7-4D9C-89FA-437DEF21FD08}] => (Allow) D:\Steam\steamapps\common\Alien Swarm\swarm.exe
FirewallRules: [{CFAFC688-CB27-46DB-B63F-734F6BF31F2C}] => (Allow) D:\Steam\steamapps\common\pirates, vikings and knights ii\sdkbase_pvkii\hl2.exe
FirewallRules: [{BD36119D-5FC0-42EC-A873-702B9EE98AD6}] => (Allow) D:\Steam\steamapps\common\pirates, vikings and knights ii\sdkbase_pvkii\hl2.exe
FirewallRules: [{D0F3BE32-DA9E-4DC6-9560-5FD72D1033BA}] => (Allow) D:\Steam\steamapps\common\blacklightretribution\Blacklight Retribution.exe
FirewallRules: [{F9A0E1CF-D509-4555-A29F-99CB22CFB69C}] => (Allow) D:\Steam\steamapps\common\blacklightretribution\Blacklight Retribution.exe
FirewallRules: [{060C8FAD-2B84-4375-AE10-B7B1EC41CF48}] => (Allow) D:\Steam\steamapps\common\blacklightretribution\Binaries\Win32\FoxGame-win32-Shipping.exe
FirewallRules: [{20970E28-960E-42B1-831F-ECAE003E9289}] => (Allow) D:\Steam\steamapps\common\blacklightretribution\Binaries\Win32\FoxGame-win32-Shipping.exe
FirewallRules: [{CB69C0AE-0914-48F3-A547-65051B89F3D0}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8E9B611E-377F-4838-82F3-F49EA77E1C5B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C4ADE8F2-F38A-4FD4-8683-95D8E2E969DC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5E0B7622-C8D4-4790-A84E-782C1DA6A9AC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{3460DC3E-5CF9-4393-B386-D5081D3A0250}] => (Allow) D:\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{EC9F93EE-1BE2-4278-BB29-A38B38148963}] => (Allow) D:\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [TCP Query User{0EFD9B24-82A4-4964-BEC5-B21288EE52B7}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe
FirewallRules: [UDP Query User{D1894089-19EC-4C21-B8B1-82773DAA8B4A}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe
FirewallRules: [TCP Query User{AE0A3339-0D75-4D84-A681-DA9B2033F0F8}C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [UDP Query User{74CF7C72-B6B6-4BD5-BE08-29F9CA7A2A96}C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [TCP Query User{504BD210-D54F-40D4-9102-5CA1B465903E}C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [UDP Query User{B2189F34-43ED-4741-96FE-FCD014D2654F}C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base39576\sc2_x64.exe
FirewallRules: [{0F4ADD64-2163-4783-A2F5-33F9B82403B2}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{1D0EDBD1-2EF7-4BFE-8499-594050831DA2}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{8A308470-0DDE-43A5-A95F-516078315B21}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{58D346F5-C777-4720-8B06-674F5CA0B5CC}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [TCP Query User{F1333B18-1EC9-4FC2-B364-33924799751D}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe
FirewallRules: [UDP Query User{9B49BEDC-1938-4A6B-B3DA-E50B8BE99965}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe
FirewallRules: [TCP Query User{7F02F51B-98FA-4474-A21C-2C1E1915DB31}C:\program files (x86)\starcraft ii\versions\base41743\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base41743\sc2_x64.exe
FirewallRules: [UDP Query User{7766FEDA-E09A-4D49-8858-000E92922BA1}C:\program files (x86)\starcraft ii\versions\base41743\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base41743\sc2_x64.exe
FirewallRules: [{5B882773-95C4-4A5A-B468-D07DF77EAF9D}] => (Allow) D:\Steam\steamapps\common\OrcsMustDieUnchained\Dashboard\Bin\SpitfireDashboard.exe
FirewallRules: [{FCBCFE4A-F845-4B89-941A-0308684ABBFF}] => (Allow) D:\Steam\steamapps\common\OrcsMustDieUnchained\Dashboard\Bin\SpitfireDashboard.exe
FirewallRules: [TCP Query User{85773D8D-3D25-4147-AB74-6B8B9287B371}D:\steam\steamapps\common\orcsmustdieunchained\binaries\win64\spitfiregame.exe] => (Allow) D:\steam\steamapps\common\orcsmustdieunchained\binaries\win64\spitfiregame.exe
FirewallRules: [UDP Query User{193BF0A1-EC8C-449A-8C3C-21A57E2C0BDA}D:\steam\steamapps\common\orcsmustdieunchained\binaries\win64\spitfiregame.exe] => (Allow) D:\steam\steamapps\common\orcsmustdieunchained\binaries\win64\spitfiregame.exe
FirewallRules: [TCP Query User{4C6E69C3-57F9-414A-86EB-A87D48CCDF6F}C:\users\zach\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\zach\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{44DDEF0E-A76B-49AB-A1E7-AC519F53AC24}C:\users\zach\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\zach\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{B7B9631E-30EF-40A2-A019-186A51C3048F}C:\program files (x86)\starcraft ii\versions\base42253\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base42253\sc2_x64.exe
FirewallRules: [UDP Query User{C1D0BC3D-6848-419C-A011-1D117E18547B}C:\program files (x86)\starcraft ii\versions\base42253\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base42253\sc2_x64.exe
FirewallRules: [TCP Query User{EDB4E793-44C9-439E-BCB3-26EB6EA95067}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{B056807A-8369-477C-AFD8-269C12C1B6EC}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{936F3671-3BD2-4A3F-A34B-73863D03E1DC}] => (Allow) D:\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{C3F5B15B-8CAE-4714-855E-5C7617BC95E7}] => (Allow) D:\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{2881AB55-D485-43A3-9384-F874B366EF47}] => (Allow) D:\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{53209168-431C-4ED2-8268-E455BC3FAFE5}] => (Allow) D:\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [TCP Query User{7787F6A5-404F-46DB-BD68-CF08EDAFE849}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{61B089FB-3E34-449B-8BD8-45F823A4B201}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{27F0CA08-3DFC-48B9-9C1A-CEF9DE318CA4}C:\program files (x86)\java\jre1.8.0_91\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\java.exe
FirewallRules: [UDP Query User{7A8E9416-E52B-4B2A-98E4-E2994AB34DFC}C:\program files (x86)\java\jre1.8.0_91\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\java.exe
FirewallRules: [{411215F9-D1A5-4278-AE20-F8F15A412677}] => (Allow) D:\Steam\steamapps\common\Relic Hunters Zero\RelicHuntersZero.exe
FirewallRules: [{37779C1A-7F2E-48FD-BD98-F44E57565F97}] => (Allow) D:\Steam\steamapps\common\Relic Hunters Zero\RelicHuntersZero.exe
FirewallRules: [TCP Query User{6057365F-F808-422F-84B7-AD3375C41F14}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{6A190377-5E51-4FBA-8F5B-7D7AEA38C52F}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{9404402B-CDE9-4470-A5C1-AEF4B1A5DEAB}] => (Allow) D:\Steam\steamapps\common\Orion Dino Beatdown\Binaries\Win32\DinoHordeGame.exe
FirewallRules: [{5D360F9E-12F9-45FB-97FB-BBDCEAF36B84}] => (Allow) D:\Steam\steamapps\common\Orion Dino Beatdown\Binaries\Win32\DinoHordeGame.exe
FirewallRules: [{F4995A6F-1390-4B85-9A96-F89765F6E78A}] => (Allow) D:\Steam\steamapps\common\PreludeSDK\Binaries\ModTool\OrionWorkshopTool.exe
FirewallRules: [{DCF658F7-2F0B-4380-B4C0-7A690BA9A1FD}] => (Allow) D:\Steam\steamapps\common\PreludeSDK\Binaries\ModTool\OrionWorkshopTool.exe
FirewallRules: [{72C3B321-D5CD-4381-A0F0-60BDD833B1FF}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{33765871-99B1-4373-BE75-2F9D161713BF}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{3B6E0F53-7DEC-4870-A87B-EA4925BDF397}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{ABE8013F-10C3-42E1-B7C5-CD496B026A9A}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [TCP Query User{409B976A-3CFF-4F94-9571-2C7ED2297757}D:\program files (x86)\origin games\battlefield 4\bf4.exe] => (Allow) D:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{3DDE3499-4AD3-4A7A-A420-3CAEE280DD66}D:\program files (x86)\origin games\battlefield 4\bf4.exe] => (Allow) D:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [{405FDA6B-AAAC-44D8-878A-E625CBDA9FCB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{207340C7-9B54-451B-BD16-D921C5A417A3}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{624AF75B-23CE-4856-BABA-C8F8C2FA015B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6E4CC07A-6E79-48C1-841E-4812CDA35BA4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0558E901-AB8F-4852-8E0C-175F45AC03C5}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{990ADC0F-8E17-425F-BEF6-DACC7E25F991}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{C9794AE9-45B1-40CF-8CC6-4F869F265F39}] => (Allow) D:\Steam\steamapps\common\ORION\Orion.exe
FirewallRules: [{3F208668-2959-4BE3-98A5-F1BFF153A528}] => (Allow) D:\Steam\steamapps\common\ORION\Orion.exe
FirewallRules: [TCP Query User{4F7CF580-5578-4A30-8D59-5B864D603C6A}D:\steam\steamapps\common\orion\orion\binaries\win64\orion-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\orion\orion\binaries\win64\orion-win64-shipping.exe
FirewallRules: [UDP Query User{3EBF5E30-BABC-4825-A10F-2186BAD61F7E}D:\steam\steamapps\common\orion\orion\binaries\win64\orion-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\orion\orion\binaries\win64\orion-win64-shipping.exe
FirewallRules: [{B4ED7102-C4D2-4197-B3BE-CF6CDF92C244}] => (Allow) D:\Steam\steamapps\common\CastleCrashers\castle.exe
FirewallRules: [{56605FB4-1F57-4182-A650-B5EAF43AEBC0}] => (Allow) D:\Steam\steamapps\common\CastleCrashers\castle.exe
FirewallRules: [{A67FAF3C-BB4C-4C07-8F44-A67FC74A8C03}] => (Allow) D:\Steam\steamapps\common\Hacknet\Hacknet.exe
FirewallRules: [{0D457D7B-4078-46D8-ACE4-3E9857981426}] => (Allow) D:\Steam\steamapps\common\Hacknet\Hacknet.exe
FirewallRules: [{3615BF83-3090-42EC-901F-46953240B635}] => (Allow) D:\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe
FirewallRules: [{0DAB520F-C8A0-4D33-A2CC-6EC85F7C11F4}] => (Allow) D:\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe
FirewallRules: [{AB449AB0-2AFE-43AA-83FF-579F5B9FAF17}] => (Allow) D:\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{AE5930D2-4EC4-4FD9-9D8E-44B5C50EFDFD}] => (Allow) D:\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{EA442770-1E57-44C1-A37C-904AAACDD206}] => (Allow) D:\Evolve2.0\EvoSvc.exe
FirewallRules: [{E0FDF910-DD2A-4E7F-9CE4-C80540DA01C4}] => (Allow) D:\Evolve2.0\EvolveClient.exe
FirewallRules: [TCP Query User{4E2AFD27-41BA-4D64-B825-5C80703BDC18}D:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{9B513B09-94D7-4D9D-ADD9-F504B5275D34}D:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{A931710C-F5DA-4763-9583-F372B57A1076}] => (Allow) D:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{46764314-9876-4E93-892D-BDBD07C6FF66}] => (Allow) D:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{77500D1F-A41F-4F3B-AFC4-6ED718D57218}] => (Allow) D:\minecraft\MinecraftLauncher.exe
FirewallRules: [TCP Query User{7C5F590E-83C3-491B-A760-F140E3441FA1}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{5DB3AFAF-9066-4BA8-B426-6F2187D3FE70}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [TCP Query User{A9D3858F-CD8D-4C2B-8340-CD20777187DE}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{06249BEE-F062-4A39-A214-95D1C22893A0}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [TCP Query User{DD5B1395-8FBA-4240-BDED-D24D70952790}D:\steam\steamapps\common\riders of icarus\bin64\launcher.exe] => (Allow) D:\steam\steamapps\common\riders of icarus\bin64\launcher.exe
FirewallRules: [UDP Query User{53E21937-5189-4DF7-A870-75D85BF71607}D:\steam\steamapps\common\riders of icarus\bin64\launcher.exe] => (Allow) D:\steam\steamapps\common\riders of icarus\bin64\launcher.exe
FirewallRules: [TCP Query User{E479E8A8-7A19-45E2-9122-273594925DCD}D:\steam\steamapps\common\snow\bin32\playsnow.exe] => (Allow) D:\steam\steamapps\common\snow\bin32\playsnow.exe
FirewallRules: [UDP Query User{A776D0E0-48B6-424F-912E-C296CAEFA7CA}D:\steam\steamapps\common\snow\bin32\playsnow.exe] => (Allow) D:\steam\steamapps\common\snow\bin32\playsnow.exe
FirewallRules: [TCP Query User{5C173600-F485-400D-BEF3-26543B793D4D}D:\steam\steamapps\common\snow\bin64\playsnow.exe] => (Allow) D:\steam\steamapps\common\snow\bin64\playsnow.exe
FirewallRules: [UDP Query User{2720C316-23BC-4BA9-B81E-0B96F086C0CC}D:\steam\steamapps\common\snow\bin64\playsnow.exe] => (Allow) D:\steam\steamapps\common\snow\bin64\playsnow.exe
FirewallRules: [{DECA6815-6018-4526-AC82-A4F2D3F0A1E4}] => (Allow) D:\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{FC6A777E-8A68-4AF9-A109-BCA8818A29D1}] => (Allow) D:\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [TCP Query User{D905FDE1-8228-4501-8242-DBB492541931}C:\users\zach\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\zach\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{BA40BC84-982B-487D-BCE2-623412ADAB22}C:\users\zach\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\zach\appdata\local\akamai\netsession_win.exe
FirewallRules: [{1B714B2B-0401-4DB4-A329-B33B8566A825}] => (Allow) LPort=63172
FirewallRules: [{A3D0B10C-99B2-4A15-AFFB-89EBD82DE331}] => (Allow) LPort=5000
FirewallRules: [TCP Query User{4EE19BB6-F7D3-403B-9188-9C09315136CA}C:\program files\autodesk\maya2017\bin\maya.exe] => (Allow) C:\program files\autodesk\maya2017\bin\maya.exe
FirewallRules: [UDP Query User{6EAFE13A-5A03-4E9B-B95B-38EF3EE1E0D8}C:\program files\autodesk\maya2017\bin\maya.exe] => (Allow) C:\program files\autodesk\maya2017\bin\maya.exe
FirewallRules: [{2B8C8FDC-B7FE-4AB5-9D42-D757C6B68BAB}] => (Allow) D:\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{F28984E5-F0E8-4373-8C4E-0040320BB993}] => (Allow) D:\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{0ECC508F-6D5C-415B-A65F-BA97BC2AB35C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [TCP Query User{BEE6EBBE-B1BE-4446-9689-22E5E2CA2F76}C:\program files (x86)\starcraft ii\versions\base47185\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base47185\sc2_x64.exe
FirewallRules: [UDP Query User{1823EA39-A8DB-4774-99AB-4E366C5C9F18}C:\program files (x86)\starcraft ii\versions\base47185\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base47185\sc2_x64.exe
FirewallRules: [TCP Query User{E39DE5B4-AC47-4A13-830D-A97317901129}C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{2AD06E92-FC95-474A-ADFD-0F78F919B08C}C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{24078D11-768A-4703-8E58-3079FFD32451}C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{DC310EAB-14EC-49E1-BC25-FF483C77006A}C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm_x64.exe
FirewallRules: [{47DA3C9B-4232-4C90-8B12-E63B39B9FB3C}] => (Allow) D:\Steam\steamapps\common\Broforce\Broforce_beta.exe
FirewallRules: [{9CF88D4E-8F9C-47DF-8925-5DC7D60162C8}] => (Allow) D:\Steam\steamapps\common\Broforce\Broforce_beta.exe
FirewallRules: [{4D3FD0F0-1F73-4583-A33E-ABE06275C93B}] => (Allow) D:\Steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{DBCE24BE-34A3-4375-ABE1-9EDE34294988}] => (Allow) D:\Steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{20B829F8-7720-4704-BD2B-06DE070E8876}] => (Allow) C:\Users\Zach\AppData\Local\Temp\7zS623B\HPDiagnosticCoreUI.exe
FirewallRules: [{1C2F7921-8EEC-4389-A50F-D479E68749B1}] => (Allow) C:\Users\Zach\AppData\Local\Temp\7zS623B\HPDiagnosticCoreUI.exe
FirewallRules: [{489E21A0-93D6-4EF3-AE92-B2A27627E791}] => (Allow) C:\Users\Zach\AppData\Local\Temp\7zS628C\HPDiagnosticCoreUI.exe
FirewallRules: [{7D3C3AE1-B4D2-4586-8EE3-7D276F7A8618}] => (Allow) C:\Users\Zach\AppData\Local\Temp\7zS628C\HPDiagnosticCoreUI.exe
FirewallRules: [{E09D3FE3-04AC-4F1E-8C1D-139356E6C6F1}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3SP.exe
FirewallRules: [{3364EE50-BDA5-495D-A8A4-49E49977C8A7}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3SP.exe
FirewallRules: [{8718BB64-E15F-4FC3-9EA6-84FFB164A481}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3MP.exe
FirewallRules: [{9F53A192-421C-49C1-A0CA-B83AD31441F8}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3MP.exe
FirewallRules: [{8742FDC3-F79F-4512-8A8B-04C73B0FAD0D}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{0C7735D4-D3F6-4397-BF47-0D7BD30B2BB4}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{EDDC98AB-889E-4AE2-8E16-66212608FCAB}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{0867FE34-613F-4A0B-BB80-C07A62BC4D50}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{D37A4135-4E1D-4E7F-8E85-71B819B327F0}] => (Allow) D:\Steam\steamapps\common\Warface\live\gflauncher.exe
FirewallRules: [{E24A6BB2-77B1-4CFA-A091-C77339E1928C}] => (Allow) D:\Steam\steamapps\common\Warface\live\gflauncher.exe
FirewallRules: [{BB679F25-B7C4-40FA-A08B-9EB8A6DEC82C}] => (Allow) D:\Steam\steamapps\common\Tom Clancy's Rainbow Six Siege\rainbowsix.exe
FirewallRules: [{5493C018-15C4-4E7E-8844-BD90C703C8E9}] => (Allow) D:\Steam\steamapps\common\Tom Clancy's Rainbow Six Siege\rainbowsix.exe
FirewallRules: [{04A3823E-00CA-4BF0-AFBE-B828579C446F}] => (Allow) D:\Steam\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSixGame.exe
FirewallRules: [{003DA1BA-28CA-4CE8-8779-AC42FCD0A5E2}] => (Allow) D:\Steam\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSixGame.exe
FirewallRules: [{284F59BD-64DC-4029-A8F6-201E57135D3A}] => (Allow) D:\Steam\steamapps\common\Rocksmith2014\Rocksmith2014.exe
FirewallRules: [{8D53765A-FD7F-494A-A74D-7095EC88B4FB}] => (Allow) D:\Steam\steamapps\common\Rocksmith2014\Rocksmith2014.exe
FirewallRules: [{CE0C0AD0-393D-45DF-9741-89FFEEB6E96D}] => (Allow) D:\iTunes.exe
FirewallRules: [{9137772A-3D1B-427F-B765-3B86C0378250}] => (Allow) D:\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{AD9E184E-0B70-40BA-9AED-6A21779F8D3F}] => (Allow) D:\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{1D6E06BD-98A3-47AF-8D74-F4A30515DA0F}] => (Allow) D:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{5CCE186A-5D5E-461D-B6A3-00AE59EA29F9}] => (Allow) D:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [TCP Query User{3FA53E35-B417-4080-8B2C-D0BE17E0D147}C:\program files (x86)\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{2D8407A9-BBDA-4E8B-9A00-EBA7A0B62F5D}C:\program files (x86)\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base52860\heroesofthestorm_x64.exe
FirewallRules: [{FBA8BF4C-8A24-40FC-AFDD-E0131CC77502}] => (Allow) D:\Steam\steamapps\common\wallpaper_engine\launcher.exe
FirewallRules: [{E6CBE270-C087-4A3B-B88C-63C73F0E6B79}] => (Allow) D:\Steam\steamapps\common\wallpaper_engine\launcher.exe
FirewallRules: [TCP Query User{1AF415F4-E332-405E-9691-37AAF0EF4F0D}C:\program files (x86)\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{AFC26ACD-D321-4635-B3F2-11A26E1DF8C7}C:\program files (x86)\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base52986\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{0291E2B3-92EB-4F05-A368-307E8E2D70FC}D:\steam\steamapps\common\orion\orion\binaries\win64\orion.exe] => (Allow) D:\steam\steamapps\common\orion\orion\binaries\win64\orion.exe
FirewallRules: [UDP Query User{36CAC8D3-14D7-4E19-95BC-10B1253E4931}D:\steam\steamapps\common\orion\orion\binaries\win64\orion.exe] => (Allow) D:\steam\steamapps\common\orion\orion\binaries\win64\orion.exe
FirewallRules: [TCP Query User{1A67025A-54C8-4702-A0F4-F0B5211E1FF8}C:\program files (x86)\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{65401356-4354-47B8-922A-4AFE528CEDD6}C:\program files (x86)\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base53548\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{148F0A06-B9BD-42DF-BA8E-09FCDD159388}C:\program files (x86)\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{F1B3B0C7-E085-4FB7-A1E6-20FCA26AA158}C:\program files (x86)\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe
FirewallRules: [{2574FA11-4774-4F9A-B4BC-133F3EAF4783}] => (Allow) D:\Steam\steamapps\common\SparkourAlphaDemo\Sparkour.exe
FirewallRules: [{A85257DF-2DB7-40AC-AD5F-A96047518885}] => (Allow) D:\Steam\steamapps\common\SparkourAlphaDemo\Sparkour.exe
FirewallRules: [{3644D392-37A2-453C-8B30-9A30B58DEFA9}] => (Allow) D:\Steam\steamapps\common\Alien Swarm Reactive Drop\reactivedrop.exe
FirewallRules: [{AC60E917-AF3D-4A99-AE4A-5D0BB4E2F177}] => (Allow) D:\Steam\steamapps\common\Alien Swarm Reactive Drop\reactivedrop.exe
FirewallRules: [TCP Query User{D4373AF2-3430-41FF-A24A-B1D61379D7F1}C:\program files (x86)\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{BC0452C9-B782-4466-A713-FD3826A7BD36}C:\program files (x86)\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe
FirewallRules: [{995AD5F8-9466-4A1A-8417-130480DB0819}] => (Allow) D:\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [{7F1A5BDC-3CCB-4139-8CB1-F10273A4FF28}] => (Allow) D:\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [{F69CC6BC-EBA0-4694-9C2E-91E7EAF3C1BA}] => (Allow) D:\Steam\steamapps\common\Synergy\synergy.exe
FirewallRules: [{C8512078-2CC8-4C37-A9AB-B470C9B94335}] => (Allow) D:\Steam\steamapps\common\Synergy\synergy.exe
FirewallRules: [{B35CE84C-E589-4BDB-8CB7-91536305EC8E}] => (Allow) D:\Steam\steamapps\common\TOXIKK\Binaries\ToxikkLauncher.exe
FirewallRules: [{609C38F9-B6E4-4B19-837D-06E21C8A417A}] => (Allow) D:\Steam\steamapps\common\TOXIKK\Binaries\ToxikkLauncher.exe
FirewallRules: [{0D776664-CFB4-4A0D-BAA1-8D87C19D81C7}] => (Allow) D:\Steam\steamapps\common\Hollow Knight\hollow_knight.exe
FirewallRules: [{A175C91B-95A4-4C8C-93CA-49507BB506DF}] => (Allow) D:\Steam\steamapps\common\Hollow Knight\hollow_knight.exe
FirewallRules: [TCP Query User{F6FDF63B-4EF9-4E0D-9B99-1CE863B83593}C:\program files (x86)\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{016F6EBD-6F87-491D-A281-97714B7D7770}C:\program files (x86)\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe
FirewallRules: [{C4DAA52B-6ED7-40E0-BE28-AEFE724173B4}] => (Allow) D:\Steam\steamapps\common\Sword With Sauce Alpha\SwordWithSauce.exe
FirewallRules: [{89E3BC21-31CB-4388-B321-1F6EABD89F95}] => (Allow) D:\Steam\steamapps\common\Sword With Sauce Alpha\SwordWithSauce.exe
FirewallRules: [TCP Query User{85CD848E-D238-41B3-9EB0-38AE83147B06}D:\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe
FirewallRules: [UDP Query User{1D0907FC-4D60-427A-BABC-C7B06BD9BCAF}D:\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe
FirewallRules: [{DDE9EF1B-B621-4B8C-8A20-DAA67A3B3776}] => (Allow) D:\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
FirewallRules: [{5A6EF144-D300-4B8E-9466-6F2924E120DD}] => (Allow) D:\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
FirewallRules: [{8F3A8F0B-6FDD-43F1-B0E6-2394D05AF2CF}] => (Allow) D:\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{E9810A14-7FEB-45A1-A352-896D3058B244}] => (Allow) D:\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [TCP Query User{6357EA66-8D87-41A0-A421-796361C6D646}D:\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe
FirewallRules: [UDP Query User{726F6949-6ECC-41A6-98D3-F9C3D2998F90}D:\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe
FirewallRules: [TCP Query User{6DC37931-1D55-4692-B9C2-A6927496C2D5}C:\program files (x86)\heroes of the storm\versions\base55288\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base55288\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{C65262BD-EAF9-4DC7-88F5-06F62A34AF74}C:\program files (x86)\heroes of the storm\versions\base55288\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base55288\heroesofthestorm_x64.exe
FirewallRules: [{772042BB-FAF8-4CDD-A91D-A0AC33A91933}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2.exe
FirewallRules: [{9D3582A5-B906-4D70-8550-DDE479A25D7E}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2.exe
FirewallRules: [{1DC9E26E-E85F-444A-B9BC-C133DBD8DB33}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2_trial.exe
FirewallRules: [{C14B6073-C226-47AE-B4F2-548EDAE2EBC2}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2_trial.exe
FirewallRules: [TCP Query User{ACCC3FFF-DC70-41CE-B131-1ED8829189FC}C:\program files (x86)\heroes of the storm\versions\base55288\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base55288\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{509A5DAA-ADBE-4A64-86E6-EA1E3A8016DE}C:\program files (x86)\heroes of the storm\versions\base55288\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base55288\heroesofthestorm_x64.exe
FirewallRules: [{2B297112-04DB-416F-9736-DD230521C5E2}] => (Allow) D:\Steam\steamapps\common\Gigantic\ArcSteamHelper.exe
FirewallRules: [{10DD3D06-D8CA-4748-9BFA-9B2A1837DDEF}] => (Allow) D:\Steam\steamapps\common\Gigantic\ArcSteamHelper.exe
FirewallRules: [{4C16F928-2704-4BE5-9E16-23C461F2BF34}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{A56FB1C6-C452-4C21-B7A3-0C3CE0A138E6}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{9EBABFFD-4B89-4388-856C-EDA75EEE051F}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{E8D444C1-E323-4AC9-9E21-C519664CC0F2}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{8FA0C181-95B6-4517-BFED-8D1B56FA47FC}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{EC2D3411-53D7-457F-BDF4-B579E45E0FB1}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{ED3E9613-4B77-4AA3-BDCD-FB9260BB4C96}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{7E66A129-9B41-4461-9D87-276A33433DCA}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{D65F3298-ED80-4BA5-8A34-07F3DEF91D3B}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{FF39A78E-5151-401D-BF20-E3857F523310}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{8B54CE49-9F59-427F-8319-BE6ADE057D5E}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{A4A18B4C-D487-4F99-8874-28D7AF1AC4C7}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{4E6C670A-52E6-4251-BE19-E449540A35A2}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2.exe
FirewallRules: [{EA0A7567-E179-4769-BAD8-61E17598A208}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2.exe
FirewallRules: [{8DCB4736-C664-4F52-B0B1-3256826AAE35}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2_trial.exe
FirewallRules: [{84BD012C-DC33-4D7C-8D9A-C61A6E4C3781}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2_trial.exe
FirewallRules: [{D83423F7-D58B-46B3-A869-6B54B17C7A0F}] => (Allow) D:\Steam\steamapps\common\Red Trigger\RedTrigger.exe
FirewallRules: [{9DE702A8-6441-4902-BDB6-5DCD01DF2761}] => (Allow) D:\Steam\steamapps\common\Red Trigger\RedTrigger.exe
FirewallRules: [TCP Query User{F2F0B1B5-29BB-4C9D-80EF-400EA4A019FB}C:\program files (x86)\arc\arcchat.exe] => (Allow) C:\program files (x86)\arc\arcchat.exe
FirewallRules: [UDP Query User{E7329273-9BC2-4533-A872-7E66EB31F6DB}C:\program files (x86)\arc\arcchat.exe] => (Allow) C:\program files (x86)\arc\arcchat.exe
FirewallRules: [TCP Query User{17957282-BDB1-496C-A499-4E612D004503}D:\steam\steamapps\common\gigantic\binaries\win64\rxgame-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\gigantic\binaries\win64\rxgame-win64-shipping.exe
FirewallRules: [UDP Query User{C79B4559-3434-466F-84D9-F6E54E831D02}D:\steam\steamapps\common\gigantic\binaries\win64\rxgame-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\gigantic\binaries\win64\rxgame-win64-shipping.exe
FirewallRules: [{D9191D77-64DF-4A19-BA40-75B497C897E5}] => (Allow) D:\Steam\steamapps\common\Black Squad\binaries\win32\BlackSquadGame.exe
FirewallRules: [{602D6A42-EF6B-4648-823D-BA075D322572}] => (Allow) D:\Steam\steamapps\common\Black Squad\binaries\win32\BlackSquadGame.exe
FirewallRules: [TCP Query User{A02DF8E0-7C17-4A47-8883-1E82387CAA3C}C:\program files (x86)\heroes of the storm\versions\base55844\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base55844\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{D30131BD-D3F0-4A94-9611-AC18C894DC53}C:\program files (x86)\heroes of the storm\versions\base55844\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base55844\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{B9C43C40-C467-4A64-8EF2-7A2533D0092B}D:\program files (x86)\cura 2.6\cura.exe] => (Allow) D:\program files (x86)\cura 2.6\cura.exe
FirewallRules: [UDP Query User{83C15683-A0B8-49F4-AF14-3BD83CAF4D99}D:\program files (x86)\cura 2.6\cura.exe] => (Allow) D:\program files (x86)\cura 2.6\cura.exe
FirewallRules: [{F0C5A629-48FF-4E03-9268-123B7B0073BE}] => (Allow) D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
FirewallRules: [{4FFDDF72-7BC3-438B-B71D-E08CC6BC8E05}] => (Allow) D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
FirewallRules: [{30A6E253-8817-426E-834A-3DA317580889}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

09-08-2017 09:32:30 UnHackMe Malware Removal
09-08-2017 11:31:42 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (08/09/2017 11:31:43 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (08/09/2017 10:44:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Faulting module name: taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Exception code: 0xc0000005
Fault offset: 0x0000000000025076
Faulting process id: 0x1ec0
Faulting application start time: 0x01d311371d8aaedd
Faulting application path: C:\WINDOWS\system32\taskmgr.exe
Faulting module path: C:\WINDOWS\system32\taskmgr.exe
Report Id: 86b18031-32a2-4e98-9ec7-33e73dd39c7f
Faulting package full name:
Faulting package-relative application ID:

Error: (08/09/2017 10:39:34 AM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: ZACHSPC)
Description: 7.488: EFS service failed to provision a user for EDP. Error code: 0x80070005.

Error: (08/09/2017 10:38:54 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Faulting module name: taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Exception code: 0xc0000005
Fault offset: 0x0000000000025076
Faulting process id: 0x1dfc
Faulting application start time: 0x01d311365e9d216e
Faulting application path: C:\WINDOWS\system32\taskmgr.exe
Faulting module path: C:\WINDOWS\system32\taskmgr.exe
Report Id: 560e1547-599a-414a-aa98-06bfb1bb7c5d
Faulting package full name:
Faulting package-relative application ID:

Error: (08/09/2017 10:38:22 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program chrome.exe version 60.0.3112.90 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 1c38

Start Time: 01d3113618ff418b

Termination Time: 14

Application Path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Report Id: 8817813e-7d29-11e7-84d6-0862662d2d66

Faulting package full name:

Faulting package-relative application ID:

Error: (08/09/2017 10:36:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Faulting module name: Taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Exception code: 0xc0000005
Fault offset: 0x0000000000025076
Faulting process id: 0x1b00
Faulting application start time: 0x01d311361509a3bd
Faulting application path: C:\WINDOWS\System32\Taskmgr.exe
Faulting module path: C:\WINDOWS\System32\Taskmgr.exe
Report Id: a75d59b8-b754-495d-a0f2-dceb61635b90
Faulting package full name:
Faulting package-relative application ID:

Error: (08/09/2017 10:36:33 AM) (Source: WTabletServicePro) (EventID: 1) (User: )
Description: Event-ID 1

Error: (08/09/2017 10:29:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Faulting module name: taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Exception code: 0xc0000005
Fault offset: 0x0000000000025076
Faulting process id: 0x1450
Faulting application start time: 0x01d311350a3f4b26
Faulting application path: C:\WINDOWS\system32\taskmgr.exe
Faulting module path: C:\WINDOWS\system32\taskmgr.exe
Report Id: e056c6b6-b6c1-4c7c-b03b-f9c7ea75f972
Faulting package full name:
Faulting package-relative application ID:

Error: (08/09/2017 10:29:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Faulting module name: Taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Exception code: 0xc0000005
Fault offset: 0x0000000000025076
Faulting process id: 0x166c
Faulting application start time: 0x01d3113501fa4779
Faulting application path: C:\WINDOWS\System32\Taskmgr.exe
Faulting module path: C:\WINDOWS\System32\Taskmgr.exe
Report Id: 758ce40c-945f-4f72-ae78-11ff02e6acf0
Faulting package full name:
Faulting package-relative application ID:

Error: (08/09/2017 10:28:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Faulting module name: taskmgr.exe, version: 1.0.0.1, time stamp: 0x578999cf
Exception code: 0xc0000005
Fault offset: 0x0000000000025076
Faulting process id: 0x1a30
Faulting application start time: 0x01d31134eeabfb44
Faulting application path: C:\WINDOWS\system32\taskmgr.exe
Faulting module path: C:\WINDOWS\system32\taskmgr.exe
Report Id: 08a4e6b6-bef0-4985-9ac1-a6174d5a48e5
Faulting package full name:
Faulting package-relative application ID:

System errors:
=============
Error: (08/09/2017 11:31:48 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The NVIDIA NetworkService Container service terminated unexpectedly. It has done this 1 time(s).

Error: (08/09/2017 11:31:48 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The NVIDIA LocalSystem Container service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (08/09/2017 10:36:43 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (08/09/2017 10:36:32 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 408) (User: NT AUTHORITY)
Description: Task Scheduler service failed to initialize idle state detection module. Idle tasks may not be started as required. Additional Data: Error Value: 2147942402.

Error: (08/09/2017 10:36:32 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 408) (User: NT AUTHORITY)
Description: Task Scheduler service failed to initialize idle state detection module. Idle tasks may not be started as required. Additional Data: Error Value: 2.

Error: (08/09/2017 10:36:07 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (08/09/2017 10:25:52 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The ZAM Controller Service service terminated unexpectedly. It has done this 1 time(s).

Error: (08/09/2017 10:18:59 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (08/09/2017 10:18:49 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 408) (User: NT AUTHORITY)
Description: Task Scheduler service failed to initialize idle state detection module. Idle tasks may not be started as required. Additional Data: Error Value: 2147942402.

Error: (08/09/2017 10:18:49 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 408) (User: NT AUTHORITY)
Description: Task Scheduler service failed to initialize idle state detection module. Idle tasks may not be started as required. Additional Data: Error Value: 2.

CodeIntegrity:
===================================
Date: 2017-08-09 11:48:01.852
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-08-09 11:48:01.851
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-08-09 11:31:25.712
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-08-09 11:31:25.709
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-08-09 09:24:34.951
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-08-09 09:24:34.950
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-08-09 09:02:10.963
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-08-09 09:02:10.962
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-08-09 02:53:44.244
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-08-09 02:53:44.243
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz
Percentage of memory in use: 45%
Total physical RAM: 8098.05 MB
Available physical RAM: 4407.9 MB
Total Virtual: 13474.05 MB
Available Virtual: 8783.55 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.44 GB) (Free:10.66 GB) NTFS
Drive d: (New Volume) (Fixed) (Total:931.17 GB) (Free:242.59 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 5F55674D)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 5F556745)
Partition 1: (Not Active) - (Size=232.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)

==================== End of Addition.txt ============================

Aura · August 9, 2017

Alright, follow the instructions below.

Farbar Recovery Scan Tool (FRST) - Fix mode
Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply.

Download the attached fixlist.txt file, and save it on your Desktop (or wherever your FRST.exe/FRST64.exe executable is located);
Right-click on the FRST executable and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
Click on the Fix button;
On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad;
Copy and paste its content in your next reply;

fixlist.txt

zchatk · August 9, 2017

Fix result of Farbar Recovery Scan Tool (x64) Version: 09-08-2017
Ran by Zach (09-08-2017 12:08:06) Run:1
Running from C:\Users\Zach\Desktop
Loaded Profiles: Zach (Available Profiles: Zach)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:

Task: {1E11476B-0536-45ED-B60F-1A57EA5400D7} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {2ECA8A83-0FF1-49EC-8A22-11AE6B90C427} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {3736F270-8082-43ED-8224-6C63547A6548} - \Microsoft\Windows\Setup\EOONotify -> No File <==== ATTENTION
Task: {41DF2593-925F-44D6-AF4F-0FA23A005174} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {44016ABE-A9E7-4F0D-B9E9-60C19A369D64} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {48CDE2BE-2B14-41DD-990E-2BC2C7F3A362} - System32\Tasks\{BE3825C1-61B7-472F-B8CD-9E4CB1A92207} => C:\Windows\system32\pcalua.exe -a "C:\ProgramData\Battle.net\Agent\Blizzard Uninstaller.exe" -c --lang=enUS --uid=wow_enus --displayname="World of Warcraft"
Task: {49F2FA19-1F94-429B-958F-29FEB1FD3180} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {59D5AA0F-884B-4FAC-83BD-DDF1F5CC62ED} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {65E4AA21-6706-463D-AA84-8600DDE962A1} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {75176B51-2C09-4646-AC23-AAEB1AC34F8E} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\ErrorReporting => C:\\ProgramData\\WindowsReporting\\wermgr.exe
Task: {87728C91-4241-44AF-B851-32603D482A8C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {8D2B1242-165B-4E4D-A3B8-DC769B47B00E} - System32\Tasks\{B027F517-2DD8-49D5-B5AD-C890B37E3A36} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\conkanBlocUn\CNYrRZbHYM.exe"
Task: {8DD2BE4A-BAE4-431C-A5AB-F21E62FF9CAA} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A2CCBC53-8A59-4519-A69D-1FEAD45ECB20} - System32\Tasks\{77AACE1C-CED7-4A9D-86C6-5416C2951CF0} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\Zach\AppData\Local\osu!\osu!.exe -c -uninstall
Task: {B1463961-6328-4CE2-B4F2-C1902ADDBE4E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {B4718FBD-800B-46A4-B2FD-DC2482BC15A2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {B9B5A260-5F45-408B-BDE6-84722B028849} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {CB6C0A77-FF2C-4F0E-8540-BC2922E238C9} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {D4AB05B9-B046-4A20-B7F5-3B18397127E1} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {E65B84B1-C0A5-4B69-9D0A-0CE138699D20} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> No File <==== ATTENTION
Task: {FC6DD314-F945-47D7-88DE-A756D0BC5DFF} - \WPD\SqmUpload_S-1-5-21-2624608272-4066467830-461076493-1001 -> No File <==== ATTENTION

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]

HKU\S-1-5-21-2624608272-4066467830-461076493-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION

C:\ProgramData\WindowsReporting
C:\ProgramData\ntuser.pol
C:\Users\Zach\ntuser.pol
C:\Users\Zach\AppData\LocalLow\coynBolc
C:\Users\Zach\AppData\Local\regfzycp
C:\Users\Zach\AppData\Roaming\et
C:\Windows\System32\taskmgr.exe

EmptyTemp:
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1E11476B-0536-45ED-B60F-1A57EA5400D7} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1E11476B-0536-45ED-B60F-1A57EA5400D7} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2ECA8A83-0FF1-49EC-8A22-11AE6B90C427} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2ECA8A83-0FF1-49EC-8A22-11AE6B90C427} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3736F270-8082-43ED-8224-6C63547A6548} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3736F270-8082-43ED-8224-6C63547A6548} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOONotify => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{41DF2593-925F-44D6-AF4F-0FA23A005174} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41DF2593-925F-44D6-AF4F-0FA23A005174} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44016ABE-A9E7-4F0D-B9E9-60C19A369D64} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44016ABE-A9E7-4F0D-B9E9-60C19A369D64} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{48CDE2BE-2B14-41DD-990E-2BC2C7F3A362} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{48CDE2BE-2B14-41DD-990E-2BC2C7F3A362} => key removed successfully
C:\WINDOWS\System32\Tasks\{BE3825C1-61B7-472F-B8CD-9E4CB1A92207} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BE3825C1-61B7-472F-B8CD-9E4CB1A92207} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{49F2FA19-1F94-429B-958F-29FEB1FD3180} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49F2FA19-1F94-429B-958F-29FEB1FD3180} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{59D5AA0F-884B-4FAC-83BD-DDF1F5CC62ED} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{59D5AA0F-884B-4FAC-83BD-DDF1F5CC62ED} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{65E4AA21-6706-463D-AA84-8600DDE962A1} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{65E4AA21-6706-463D-AA84-8600DDE962A1} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{75176B51-2C09-4646-AC23-AAEB1AC34F8E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{75176B51-2C09-4646-AC23-AAEB1AC34F8E} => key removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Windows Error Reporting\ErrorReporting => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Error Reporting\ErrorReporting => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{87728C91-4241-44AF-B851-32603D482A8C} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{87728C91-4241-44AF-B851-32603D482A8C} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8D2B1242-165B-4E4D-A3B8-DC769B47B00E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D2B1242-165B-4E4D-A3B8-DC769B47B00E} => key removed successfully
C:\WINDOWS\System32\Tasks\{B027F517-2DD8-49D5-B5AD-C890B37E3A36} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B027F517-2DD8-49D5-B5AD-C890B37E3A36} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8DD2BE4A-BAE4-431C-A5AB-F21E62FF9CAA} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8DD2BE4A-BAE4-431C-A5AB-F21E62FF9CAA} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A2CCBC53-8A59-4519-A69D-1FEAD45ECB20} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A2CCBC53-8A59-4519-A69D-1FEAD45ECB20} => key removed successfully
C:\WINDOWS\System32\Tasks\{77AACE1C-CED7-4A9D-86C6-5416C2951CF0} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{77AACE1C-CED7-4A9D-86C6-5416C2951CF0} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B1463961-6328-4CE2-B4F2-C1902ADDBE4E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B1463961-6328-4CE2-B4F2-C1902ADDBE4E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B4718FBD-800B-46A4-B2FD-DC2482BC15A2} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4718FBD-800B-46A4-B2FD-DC2482BC15A2} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B9B5A260-5F45-408B-BDE6-84722B028849} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9B5A260-5F45-408B-BDE6-84722B028849} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CB6C0A77-FF2C-4F0E-8540-BC2922E238C9} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CB6C0A77-FF2C-4F0E-8540-BC2922E238C9} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D4AB05B9-B046-4A20-B7F5-3B18397127E1} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D4AB05B9-B046-4A20-B7F5-3B18397127E1} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E65B84B1-C0A5-4B69-9D0A-0CE138699D20} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E65B84B1-C0A5-4B69-9D0A-0CE138699D20} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-Weekend => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FC6DD314-F945-47D7-88DE-A756D0BC5DFF} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FC6DD314-F945-47D7-88DE-A756D0BC5DFF} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-2624608272-4066467830-461076493-1001 => key removed successfully
C:\ProgramData\Reprise => ":wupeogjxldtlfudivq`qsp`27hfm" ADS removed successfully.
HKU\S-1-5-21-2624608272-4066467830-461076493-1001\Software\Classes\regfile => key removed successfully
C:\ProgramData\WindowsReporting => moved successfully
C:\ProgramData\ntuser.pol => moved successfully
C:\Users\Zach\ntuser.pol => moved successfully
C:\Users\Zach\AppData\LocalLow\coynBolc => moved successfully
C:\Users\Zach\AppData\Local\regfzycp => moved successfully
C:\Users\Zach\AppData\Roaming\et => moved successfully
C:\Windows\System32\taskmgr.exe => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 31437495 B
Java, Flash, Steam htmlcache => 575390958 B
Windows/system/drivers => 49183795 B
Edge => 1843957 B
Chrome => 674176095 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 76400322 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 1199416 B
Zach => 320663693 B

RecycleBin => 18846595 B
EmptyTemp: => 1.6 GB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 12:08:40 ====

Aura · August 9, 2017

Good. Now follow the instructions below.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1 and Windows 10, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
```
sfc /scannow
```
Note: There's a space between "sfc" and "/scannow";
Once the scan is complete, enter the command below and press on Enter
```
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't have the information from the scan anymore. So archive it and upload it as soon as you can.

zchatk · August 9, 2017

https://drive.google.com/file/d/0B3kURpcHNuy4MzdhcFIxU09aWEU/view?usp=sharing

Aura · August 9, 2017

Good Now if you open your Task Manager, does it stay open?

zchatk · August 9, 2017

It still just stays blank for about a second and then closes. At this point should I also restart my computer to see if it helps?

Aura · August 9, 2017

You can, but I doubt it'll help. Your Task Manager looks like this?

zchatk · August 9, 2017

It looks exactly like that for about half a second before it closes itself.

Aura · August 9, 2017

If you create a new user on Windows (make it Admin), log in that user and open the Task Manager, does it stay open or not?

zchatk · August 9, 2017

It also closes itself on other accounts

Aura · August 9, 2017

Let's try something. Run the FRST fix below.

fixlist.txt

zchatk · August 10, 2017

I ran it and i still have the problem. here are the results.

Fix result of Farbar Recovery Scan Tool (x64) Version: 09-08-2017
Ran by Zach (09-08-2017 23:22:33) Run:2
Running from C:\Users\Zach\Desktop
Loaded Profiles: Zach (Available Profiles: Zach & JSmith)
Boot Mode: Normal
==============================================

fixlist content:
*****************
StartRegedit:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\LocalDumps]
"DumpType"=dword:00000002
EndRegedit:
*****************

====> Registry

==== End of Fixlog 23:22:33 ====

Aura · August 10, 2017

All good. This fix wasn't supposed to fix the Task Manager, but to enable minidumps for AppCrash. Now, restart your computer, and open the Task Manager 2-3 times. Once done, run the fix below and upload the "DATE-TIME.zip" (DATE and TIME being the date and time on which the fix was ran) to SendSpace and provide me the download URL for it.

https://www.sendspace.com/

On a side note, do you have a USB Flash Drive? If so, how big is it?

fixlist.txt

zchatk · August 10, 2017

https://www.sendspace.com/file/ibwk0f

I don't currently have any flash drives as they have all broke, however, i can easily stop by the store and get one if needed.

Aura · August 10, 2017

I would feel bad to make you spend money for a USB, when we just need it to get one log, so no need.

My colleagues and I are currently investigating this Task Manager issue. It seems that users that were infected with SmartService (the infection you had) recently are now stuck with this issue. We were able to reproduce it and we're working on seeing why it is occurring and how to fix it.

zchatk · August 10, 2017

Ok, also I really appreciate all the help you have given me, so thanks a bunch!

Task Manager Opens Then Immediately Closes

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information