Jump to content

Trojan:097m/dplink.a. severe


Recommended Posts

I had this same problem with this trojan on my laptop.  I am not on a corporate network.  Malwarebytes did not detect this but the laptop was running so slow I decided to run a scan with defender and it was picked up.  So you are saying we are not completely protected by Malwarebytes if the trojan comes via a document?  I'm no expert, obviously, but I just want to understand why it wasn't picked up by Malwarebytes.

Link to post
Share on other sites

1 hour ago, AdvancedSetup said:

Hello @jennytefft and :welcome:

Please post the actual log from Defender or a screen shot of the exact detection. In the previous case (I've moved your topic to your own topic) it was Defender detecting Malwarebytes (obviously a false positive)

Thank you

Ron

 

Like I said, I'm no expert, but I don't understand why you assume the other case was a false positive.  It doesn't seem like it is.  I have the same location for the detection as the Sorr2124223438_Screenshot(46)_LI.jpg.f2442534979b94a0f6d0c9a55e3cfbfc.jpg

Link to post
Share on other sites

  • Root Admin

No, Sorr was not the original and yes, his does not show the same as the original poster George57

If that is all your logs show then it is not a FP and Defender already took care of it. Here is what I posted to Sorr

We can go ahead and scan further to make sure no other issues exist though.

 

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes 3 installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan.
  • When finished, please click Clean.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

Link to post
Share on other sites

Malwarebytes

www.malwarebytes.com

 

-Log Details-

Scan Date: 7/6/18

Scan Time: 10:01 AM

Log File: d3cd6d14-8135-11e8-a8ad-a0b3cc4961f0.json

Administrator: Yes

 

-Software Information-

Version: 3.5.1.2522

Components Version: 1.0.374

Update Package Version: 1.0.5799

License: Premium

 

-System Information-

OS: Windows 10 (Build 17134.112)

CPU: x64

File System: NTFS

User: ****HP\*****

 

-Scan Summary-

Scan Type: Threat Scan

Scan Initiated By: Manual

Result: Completed

Objects Scanned: 394492

Threats Detected: 0

(No malicious items detected)

Threats Quarantined: 0

(No malicious items detected)

Time Elapsed: 15 min, 41 sec

 

-Scan Options-

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Detect

PUM: Detect

 

-Scan Details-

Process: 0

(No malicious items detected)

Module: 0

(No malicious items detected)

Registry Key: 0

(No malicious items detected)

Registry Value: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Data Stream: 0

(No malicious items detected)

Folder: 0

(No malicious items detected)

File: 0

(No malicious items detected)

Physical Sector: 0

(No malicious items detected)

WMI: 0

(No malicious items detected)

(end)

 

 

# -------------------------------

# Malwarebytes AdwCleaner 7.2.1.1

# -------------------------------

# Build:    07-04-2018

# Database: 2018-07-04.1

# Support:  https://www.malwarebytes.com/support

#

# -------------------------------

# Mode: Clean

# -------------------------------

# Start:    07-06-2018

# Duration: 00:00:21

# OS:       Windows 10 Home

# Cleaned:  10

# Failed:   1

***** [ Services ] *****

Deleted       CouponPrinterService

***** [ Folders ] *****

Deleted       C:\Users\Jenny\AppData\Roaming\catalina – print savings

Deleted       C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\catalina – print savings

Not Deleted   C:\Program Files\WinZip\WinZip Smart Monitor

Deleted       C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons

Deleted       C:\Program Files (x86)\Coupons

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKLM\Software\Wow6432Node\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Deleted       HKLM\Software\Wow6432Node\Clara

***** [ Chromium (and derivatives) ] *****

Deleted       Shoptagr - Your Personal Shopping Assistant

***** [ Chromium URLs ] *****

Deleted       Ask

Deleted       AOL

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

*************************

[+] Delete Tracing Keys

[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1907 octets] - [06/07/2018 10:29:56]

 

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018

Ran by Jenny (administrator) on MOMSHP (06-07-2018 11:07:20)

Running from C:\Users\Jenny\Downloads

Loaded Profiles: Jenny (Available Profiles: Jenny & others)

Platform: Windows 10 Home Version 1803 17134.112 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

() C:\Program Files\WinZip\WinZip Smart Monitor\WinZip Compression Smart Monitor Service.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe

(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe

(Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe

() C:\Windows\System32\valWBFPolicyService.exe

(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\MsMpEng.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

(Corel Corporation) C:\Program Files\WinZip\WinZip Smart Monitor\WinZipCompressionSmartMonitor.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE

(WinZip Computing, S.L.) C:\Program Files\WinZip\FAHWindow64.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe

(Prosoftnet) C:\Program Files (x86)\IDriveWindows\id_bglaunch.exe

(Prosoftnet) C:\Program Files (x86)\IDriveWindows\id_tray.exe

(Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSATray.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe

() C:\Program Files (x86)\IDriveWindows\id_sync.exe

() C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe

(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe

(Node.js) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

(HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Prosoftnet) C:\Program Files (x86)\IDriveWindows\id_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrobat_sl.exe

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Corporation)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated)

HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated)

HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [2047744 2017-12-14] (WinZip)

HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [123848 2017-12-14] (WinZip Computing, S.L.)

HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436416 2017-12-14] (WinZip Computing, S.L.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-05-22] (Apple Inc.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3954352 2016-04-28] (Synaptics Incorporated)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)

HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67896 2018-05-15] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)

HKLM-x32\...\Run: [Fitbit Connect] => C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe [4567720 2015-10-28] (Fitbit, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595992 2016-05-20] (Oracle Corporation)

HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-24] (CANON INC.)

HKLM-x32\...\Run: [WDDiscovery] => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe [56894976 2017-05-24] (Western Digital Corporation)

HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [2306984 2017-04-11] (Western Digital Technologies, Inc.)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2409424 2018-04-24] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1871344 2018-05-10] (Adobe Systems Inc.)

HKLM-x32\...\Run: [IDrive Background process] => C:\Program Files (x86)\IDriveWindows\id_bglaunch.exe [76520 2018-01-12] (Prosoftnet)

HKLM-x32\...\Run: [IDrive Tray] => C:\Program Files (x86)\IDriveWindows\id_tray.exe [2014440 2018-01-12] (Prosoftnet)

HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [131360 2018-01-17] (Intel)

HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Corporation)

HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Corporation)

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Run: [Power2GoExpress8] => C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe [1714952 2013-10-16] (CyberLink Corp.)

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Run: [Dropbox Update] => C:\Users\Jenny\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-04] (Dropbox, Inc.)

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2018-05-23] (Apple Inc.)

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Run: [Fitbit Connect] => C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe [4567720 2015-10-28] (Fitbit, Inc.)

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [721504 2015-09-02] (Microsoft Corporation)

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Run: [cdloader] => C:\Users\Jenny\AppData\Roaming\mjusbsp\cdloader2.exe [51592 2014-07-04] (magicJack L.P.)

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2018-05-23] (Apple Inc.)

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-05-23] (Apple Inc.)

Startup: C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2018-02-09]

ShortcutTarget: Dropbox.lnk -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

GroupPolicy: Restriction - Chrome <==== ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{138b5397-1f7f-4edc-9cbb-1650fffc7845}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{c34642f1-c78e-45f9-97c3-8b425298fd80}: [DhcpNameServer] 192.168.1.1

 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPNOT13/1

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPNOT13/1

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPNOT13/1

SearchScopes: HKLM -> {4364D5CB-4B80-4EF7-9196-4247711E5F4F} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF

SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKLM-x32 -> {4364D5CB-4B80-4EF7-9196-4247711E5F4F} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF

SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKU\S-1-5-21-1727349234-1600954563-603500483-1001 -> {4364D5CB-4B80-4EF7-9196-4247711E5F4F} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKU\S-1-5-21-1727349234-1600954563-603500483-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF

SearchScopes: HKU\S-1-5-21-1727349234-1600954563-603500483-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-11-04] (Adobe Systems Incorporated)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)

BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-11-04] (Adobe Systems Incorporated)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-07-03] (Oracle Corporation)

BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-11-04] (Adobe Systems Incorporated)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-07-03] (Oracle Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)

BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-11-04] (Adobe Systems Incorporated)

Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-11-04] (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-11-04] (Adobe Systems Incorporated)

DPF: HKLM-x32 {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/US/Core/Player/2020PlayerAX_IKEA_Win32.cab

DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} hxxps://secure.colostate.edu/dana-cached/sc/JuniperSetupClient.cab

 

FireFox:

========

FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi

FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2018-02-02]

FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-07] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-04-24] (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-07] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll [2013-04-03] (Adobe Systems, Inc.)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-07-03] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-07-03] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)

FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2018-05-10] (Adobe Systems Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-10] (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-04-24] (Adobe Systems)

FF Plugin HKU\S-1-5-21-1727349234-1600954563-603500483-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Jenny\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2018-03-28] (Zoom Video Communications, Inc.)

FF Plugin HKU\S-1-5-21-1727349234-1600954563-603500483-1001: CouponNetwork.com/CMDUniversalCouponPrintActivator -> C:\Users\Jenny\AppData\Roaming\CATALI~1\NPBCSK~1.DLL [No File]

FF Plugin HKU\S-1-5-21-1727349234-1600954563-603500483-1001: hp.com/HPDetect -> C:\Users\Jenny\AppData\Roaming\HewlettPackard\HPDetect\1.0.0.0\npHPDetect.dll [2012-08-30] (HP)

 

Chrome:

=======

CHR DefaultProfile: Default

CHR HomePage: Default -> hxxp://www.google.com/

CHR StartupUrls: Default -> "hxxps://tv.xfinity.com/listings","chrome://newtab/"

CHR Session Restore: Default -> is enabled.

CHR Profile: C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default [2018-07-06]

CHR Extension: (Quick QR Code Generator) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\afpbjjgbdimpioenaedcjgkaigggcdpp [2018-06-10]

CHR Extension: (PrettyMerch for Merch by Amazon) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahclfnpmodphlaiidnpjlkndabpnihea [2018-07-01]

CHR Extension: (Flash Video Downloader) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc [2018-02-26]

CHR Extension: (Google Drive) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-25]

CHR Extension: (YouTube) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]

CHR Extension: (Adblock Plus) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-05-17]

CHR Extension: (Ebates: The Free Cash Back Shopping Assistant) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\chhjbpecpncaggjpdakmflnfcopglcmi [2018-07-05]

CHR Extension: (Google Search) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-15]

CHR Extension: (AMZ Suggestion Expander) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpeaihkccbeemkfefcapijechkbfjlhb [2018-06-11]

CHR Extension: (Dropbox for Gmail) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpdmhfocilnekecfjgimjdeckachfbec [2018-04-24]

CHR Extension: (Google Scholar Context Menu) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\enmmfafpcihjfbkeoncplhjjkglkhdff [2013-02-23]

CHR Extension: (Google Docs Offline) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-26]

CHR Extension: (Merch Buddy) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmogilnipnffelnpbfcmeklpikjonoi [2018-06-12]

CHR Extension: (QRCode Monkey - Free QR Code Generator) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gidoepdbdhacpopcmepkflghaalfapmk [2018-06-10]

CHR Extension: (Pinterest Save Button) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2018-07-05]

CHR Extension: (Kindle Cloud Reader) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2014-06-13]

CHR Extension: (Blue/Green Cubes) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\iipbjjaibkibpabddphfcgbngfhhfkml [2018-02-08]

CHR Extension: (Amazon Merch Tools - Shirt2CSV) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\infdgckencaamkconlldimdanbobokhc [2018-06-12]

CHR Extension: (HP Network Check Launcher) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkfpchpiljkaemlpmpebnglgkomamfeo [2017-01-27]

CHR Extension: (DS Amazon Quick View) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkompbllimaoekaogchhkmkdogpkhojg [2018-04-18]

CHR Extension: (Merch Research - Free) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kapmnckpnjhbdggcdkggkkfkkmjehhmb [2018-02-02]

CHR Extension: (Google Maps) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-09-20]

CHR Extension: (Google Play Books) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmimngoggfoobjdlefbcabngfnmieonb [2016-05-08]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-08]

CHR Extension: (AdBlock) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\onomnaapllbibeeggnncehgfnkfafpfb [2012-12-24]

CHR Extension: (XFINITY® TV Go Stream Live TV Online) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbefpbidnpmpfbkledpohpejdcgfnfif [2016-09-21]

CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp [2013-03-31]

CHR Extension: (Gmail) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-02]

CHR Extension: (Chrome Media Router) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-15]

CHR Profile: C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Guest Profile [2015-03-31]

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [fegekclkdhbnfdcmomlpegkkndgnmfmo] - C:\Program Files (x86)\HP SimplePass\tschrome.crx <not found>

CHR HKLM-x32\...\Chrome\Extension: [jaaieiajnhcnimjgfmjpccjmmfkploci] - C:\Program Files (x86)\HP SimplePass\tschrome.crx <not found>

CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx

 

==================== Services (Whitelisted) ====================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818128 2018-04-24] (Adobe Systems Incorporated)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384 2018-05-11] (Adobe Systems, Incorporated)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems, Incorporated)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-04-27] (Apple Inc.)

S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]

R2 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [22304 2018-01-17] (Intel)

S2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [886032 2018-01-11] ()

R2 Fitbit Connect; C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe [5906088 2015-10-28] (Fitbit, Inc.) [File not signed]

S2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1194512 2018-06-06] (Garmin Ltd. or its subsidiaries)

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [333688 2018-06-13] (HP Inc.)

R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.)

R2 IDriveService; C:\Program Files (x86)\IDriveWindows\id_service.exe [222440 2018-01-12] (Prosoftnet)

R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [320472 2018-01-02] (Intel Corporation)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)

S3 Intel(R) SUR QC SAM; C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)

S3 OpenVPNService; C:\Program Files (x86)\PureVPN\bin\openvpnserv.exe [31872 2015-09-15] (The OpenVPN Project)

S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [253960 2016-04-28] (Synaptics Incorporated)

S2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe [182544 2018-01-11] ()

S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [886032 2018-01-11] ()

R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [28160 2012-09-06] () [File not signed]

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [331144 2017-04-11] (Western Digital Technologies, Inc.)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe [3925648 2018-07-04] (Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MsMpEng.exe [100080 2018-07-04] (Microsoft Corporation)

R2 WinZip Compression Smart Monitor Service; C:\Program Files\WinZip\WinZip Smart Monitor\WinZip Compression Smart Monitor Service.exe [495872 2017-09-01] ()

 

===================== Drivers (Whitelisted) ======================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [152184 2018-06-07] (Malwarebytes)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [190696 2018-06-07] (Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [112872 2018-07-06] (Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [44768 2018-07-06] (Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-07-06] (Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [103656 2018-07-06] (Malwarebytes)

R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2018-04-11] (MediaTek Inc.)

S3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [337920 2017-05-07] (Realtek Semiconductor Corp.)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-11] (Realtek )

S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [41512 2018-01-11] ()

S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-24] (Synaptics Incorporated)

R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [52904 2016-04-28] (Synaptics Incorporated)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46592 2018-07-04] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [340008 2018-07-04] (Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [59944 2018-07-04] (Microsoft Corporation)

R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2018-07-06 11:07 - 2018-07-06 11:08 - 000035387 _____ C:\Users\Jenny\Downloads\FRST.txt

2018-07-06 11:06 - 2018-07-06 11:07 - 000000000 ____D C:\FRST

2018-07-06 11:04 - 2018-07-06 11:04 - 002412544 _____ (Farbar) C:\Users\Jenny\Downloads\FRST64.exe

2018-07-06 10:58 - 2018-07-06 10:59 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000105-000000.txt

2018-07-06 10:46 - 2018-07-06 10:46 - 000001885 _____ C:\Users\Jenny\Documents\AdwCleaner[C00].txt

2018-07-06 10:42 - 2018-07-06 10:43 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000104-000000.txt

2018-07-06 10:41 - 2018-07-06 10:41 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000103-000000.txt

2018-07-06 10:29 - 2018-07-06 10:34 - 000000000 ____D C:\AdwCleaner

2018-07-06 10:28 - 2018-07-06 10:28 - 007402192 _____ (Malwarebytes) C:\Users\Jenny\Downloads\adwcleaner_7.2.1.exe

2018-07-05 11:07 - 2018-07-05 11:07 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000102-000000.txt

2018-07-04 14:20 - 2018-07-04 14:20 - 000000000 ____D C:\Users\Jenny\Downloads\MyFontsWebfontsKit

2018-07-04 14:19 - 2018-07-04 14:19 - 000280053 _____ C:\Users\Jenny\Downloads\MyFontsWebfontsKit.zip

2018-07-03 15:35 - 2018-07-03 15:35 - 000001109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver CC 2018.lnk

2018-07-01 13:27 - 2018-07-01 13:27 - 000522710 _____ C:\Users\Jenny\Downloads\apps.diagcab

2018-07-01 13:18 - 2018-07-01 13:20 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000101-000000.txt

2018-07-01 13:04 - 2018-07-01 13:05 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000100-000000.txt

2018-07-01 13:03 - 2018-07-01 13:03 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000099-000000.txt

2018-06-30 14:12 - 2018-06-30 14:15 - 000016711 _____ C:\Users\Jenny\Downloads\SALES_REPORT-Feb-01-2018-Jun-30-2018.csv

2018-06-30 14:10 - 2018-06-30 14:10 - 000011443 _____ C:\Users\Jenny\Downloads\SALES_REPORT-May-01-2018-Jun-30-2018.csv

2018-06-30 14:09 - 2018-06-30 14:09 - 000005408 _____ C:\Users\Jenny\Downloads\SALES_REPORT-Feb-01-2018-Apr-30-2018.csv

2018-06-30 14:05 - 2018-06-30 14:05 - 000002072 _____ C:\Users\Jenny\Downloads\SALES_REPORT-Jun-23-2018-Jun-30-2018.csv

2018-06-30 13:42 - 2018-06-30 13:42 - 000001843 _____ C:\Users\Jenny\Downloads\EARNINGS_REPORT-Feb-01-2018-Mar-01-2018.csv

2018-06-30 13:40 - 2018-06-30 13:41 - 000003399 _____ C:\Users\Jenny\Downloads\EARNINGS_REPORT-Mar-01-2018-Apr-01-2018.csv

2018-06-30 13:37 - 2018-06-30 13:37 - 000002714 _____ C:\Users\Jenny\Downloads\EARNINGS_REPORT-Apr-01-2018-May-01-2018.csv

2018-06-30 13:24 - 2018-06-30 13:24 - 000004835 _____ C:\Users\Jenny\Downloads\EARNINGS_REPORT-May-01-2018-Jun-01-2018.csv

2018-06-30 09:03 - 2018-06-30 09:03 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000098-000000.txt

2018-06-30 08:32 - 2018-06-30 08:32 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000097-000000.txt

2018-06-30 08:01 - 2018-06-30 08:01 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000096-000000.txt

2018-06-30 07:31 - 2018-06-30 07:31 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000095-000000.txt

2018-06-30 07:00 - 2018-06-30 07:00 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000094-000000.txt

2018-06-30 06:30 - 2018-06-30 06:30 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000093-000000.txt

2018-06-30 05:59 - 2018-06-30 05:59 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000092-000000.txt

2018-06-30 05:29 - 2018-06-30 05:29 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000091-000000.txt

2018-06-30 04:58 - 2018-06-30 04:58 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000090-000000.txt

2018-06-30 04:28 - 2018-06-30 04:28 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000089-000000.txt

2018-06-30 03:57 - 2018-06-30 03:57 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000088-000000.txt

2018-06-30 03:27 - 2018-06-30 03:27 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000087-000000.txt

2018-06-30 02:56 - 2018-06-30 02:56 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000086-000000.txt

2018-06-30 02:26 - 2018-06-30 02:26 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000085-000000.txt

2018-06-30 01:55 - 2018-06-30 01:55 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000084-000000.txt

2018-06-30 01:25 - 2018-06-30 01:25 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000083-000000.txt

2018-06-30 00:54 - 2018-06-30 00:54 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000082-000000.txt

2018-06-30 00:24 - 2018-06-30 00:24 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000081-000000.txt

2018-06-29 23:53 - 2018-06-29 23:53 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000080-000000.txt

2018-06-29 23:22 - 2018-06-29 23:22 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000079-000000.txt

2018-06-29 22:52 - 2018-06-29 22:52 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000078-000000.txt

2018-06-29 22:21 - 2018-06-29 22:21 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000077-000000.txt

2018-06-29 21:51 - 2018-06-29 21:51 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000076-000000.txt

2018-06-29 21:20 - 2018-06-29 21:20 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000075-000000.txt

2018-06-29 20:50 - 2018-06-29 20:50 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000074-000000.txt

2018-06-29 20:19 - 2018-06-29 20:19 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000073-000000.txt

2018-06-29 19:49 - 2018-06-29 19:49 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000072-000000.txt

2018-06-29 19:18 - 2018-06-29 19:18 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000071-000000.txt

2018-06-29 18:48 - 2018-06-29 18:48 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000070-000000.txt

2018-06-29 18:17 - 2018-06-29 18:17 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000069-000000.txt

2018-06-29 17:47 - 2018-06-29 17:47 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000068-000000.txt

2018-06-29 17:16 - 2018-06-29 17:16 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000067-000000.txt

2018-06-29 16:46 - 2018-06-29 16:46 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000066-000000.txt

2018-06-29 16:15 - 2018-06-29 16:15 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000065-000000.txt

2018-06-29 15:44 - 2018-06-29 15:44 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000064-000000.txt

2018-06-29 15:14 - 2018-06-29 15:14 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000063-000000.txt

2018-06-29 14:43 - 2018-06-29 14:43 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000062-000000.txt

2018-06-29 14:13 - 2018-06-29 14:13 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000061-000000.txt

2018-06-29 13:42 - 2018-06-29 13:42 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000060-000000.txt

2018-06-29 13:12 - 2018-06-29 13:12 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000059-000000.txt

2018-06-29 12:41 - 2018-06-29 12:41 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000058-000000.txt

2018-06-29 12:11 - 2018-06-29 12:11 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000057-000000.txt

2018-06-29 11:40 - 2018-06-29 11:40 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000056-000000.txt

2018-06-29 11:10 - 2018-06-29 11:10 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000055-000000.txt

2018-06-29 10:39 - 2018-06-29 10:39 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000054-000000.txt

2018-06-29 10:09 - 2018-06-29 10:09 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000053-000000.txt

2018-06-29 09:38 - 2018-06-29 09:38 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000052-000000.txt

2018-06-29 09:08 - 2018-06-29 09:08 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000051-000000.txt

2018-06-29 08:37 - 2018-06-29 08:37 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000050-000000.txt

2018-06-29 08:07 - 2018-06-29 08:07 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000049-000000.txt

2018-06-29 07:36 - 2018-06-29 07:36 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000048-000000.txt

2018-06-29 07:06 - 2018-06-29 07:06 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000047-000000.txt

2018-06-29 06:35 - 2018-06-29 06:35 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000046-000000.txt

2018-06-29 06:04 - 2018-06-29 06:04 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000045-000000.txt

2018-06-29 05:34 - 2018-06-29 05:34 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000044-000000.txt

2018-06-29 05:03 - 2018-06-29 05:03 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000043-000000.txt

2018-06-29 04:33 - 2018-06-29 04:33 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000042-000000.txt

2018-06-29 04:02 - 2018-06-29 04:02 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000041-000000.txt

2018-06-29 03:32 - 2018-06-29 03:32 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000040-000000.txt

2018-06-29 03:01 - 2018-06-29 03:01 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000039-000000.txt

2018-06-29 02:31 - 2018-06-29 02:31 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000038-000000.txt

2018-06-29 02:00 - 2018-06-29 02:00 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000037-000000.txt

2018-06-29 01:30 - 2018-06-29 01:30 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000036-000000.txt

2018-06-29 00:59 - 2018-06-29 00:59 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000035-000000.txt

2018-06-29 00:29 - 2018-06-29 00:29 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000034-000000.txt

2018-06-28 23:58 - 2018-06-28 23:58 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000033-000000.txt

2018-06-28 23:28 - 2018-06-28 23:28 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000032-000000.txt

2018-06-28 22:57 - 2018-06-28 22:57 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000031-000000.txt

2018-06-28 22:26 - 2018-06-28 22:26 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000030-000000.txt

2018-06-28 21:56 - 2018-06-28 21:56 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000029-000000.txt

2018-06-28 21:25 - 2018-06-28 21:25 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000028-000000.txt

2018-06-28 20:55 - 2018-06-28 20:55 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000027-000000.txt

2018-06-28 20:24 - 2018-06-28 20:24 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000026-000000.txt

2018-06-28 19:54 - 2018-06-28 19:54 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000025-000000.txt

2018-06-28 19:23 - 2018-06-28 19:23 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000024-000000.txt

2018-06-28 18:53 - 2018-06-28 18:53 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000023-000000.txt

2018-06-28 18:22 - 2018-06-28 18:22 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000022-000000.txt

2018-06-28 17:52 - 2018-06-28 17:52 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000021-000000.txt

2018-06-28 17:21 - 2018-06-28 17:21 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000020-000000.txt

2018-06-28 16:51 - 2018-06-28 16:51 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000019-000000.txt

2018-06-28 16:20 - 2018-06-28 16:20 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000018-000000.txt

2018-06-28 15:50 - 2018-06-28 15:50 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000017-000000.txt

2018-06-28 15:19 - 2018-06-28 15:19 - 000004985 _____ C:\WINDOWS\system32\default_error_stack-000016-000000.txt

2018-06-28 14:48 - 2018-06-28 14:48 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000015-000000.txt

2018-06-28 14:18 - 2018-06-28 14:18 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000014-000000.txt

2018-06-28 13:47 - 2018-06-28 13:47 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000013-000000.txt

2018-06-28 13:17 - 2018-06-28 13:17 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000012-000000.txt

2018-06-28 12:46 - 2018-06-28 12:46 - 000004987 _____ C:\WINDOWS\system32\default_error_stack-000011-000000.txt

2018-06-28 12:14 - 2018-06-28 12:17 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000010-000000.txt

2018-06-28 12:13 - 2018-06-28 12:13 - 000004989 _____ C:\WINDOWS\system32\default_error_stack-000009-000000.txt

2018-06-26 20:56 - 2018-06-26 20:56 - 000000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2018-06-25 15:01 - 2018-06-25 15:01 - 000039110 _____ C:\Users\Jenny\Downloads\Mempix-Multicolor-Font.zip

2018-06-24 18:37 - 2018-06-24 18:37 - 000000000 ____D C:\Users\others\AppData\Local\Comms

2018-06-24 18:35 - 2018-06-24 18:37 - 000000000 ____D C:\Users\others\AppData\Roaming\WD Discovery

2018-06-24 18:35 - 2018-06-24 18:37 - 000000000 ____D C:\Users\others\.wdc

2018-06-24 18:35 - 2018-06-24 18:35 - 000000000 ____D C:\Users\others\AppData\Roaming\Apple Computer

2018-06-24 18:35 - 2018-06-24 18:35 - 000000000 ____D C:\Users\others\AppData\Local\CEF

2018-06-24 18:35 - 2018-06-24 18:35 - 000000000 ____D C:\Users\others\AppData\Local\Adobe

2018-06-24 18:34 - 2018-06-24 18:34 - 000001417 _____ C:\Users\others\Desktop\Microsoft Edge.lnk

2018-06-24 18:34 - 2018-06-24 18:34 - 000000000 ___HD C:\Users\others\MicrosoftEdgeBackups

2018-06-24 18:34 - 2018-06-24 18:34 - 000000000 ____D C:\Users\others\AppData\Local\MicrosoftEdge

2018-06-24 18:33 - 2018-06-24 18:33 - 000002332 _____ C:\Users\others\Desktop\Google Chrome.lnk

2018-06-24 18:33 - 2018-06-24 18:33 - 000000000 ___RD C:\Users\others\3D Objects

2018-06-24 18:33 - 2018-06-24 18:33 - 000000000 ____D C:\Users\others\AppData\Local\Publishers

2018-06-24 18:33 - 2018-06-24 18:33 - 000000000 ____D C:\Users\others\AppData\Local\Hewlett-Packard

2018-06-24 18:33 - 2018-06-24 18:33 - 000000000 ____D C:\Users\others\AppData\Local\Google

2018-06-24 18:32 - 2018-06-24 18:37 - 000000000 ____D C:\Users\others\AppData\Local\Packages

2018-06-24 18:32 - 2018-06-24 18:36 - 000000000 ____D C:\Users\others\AppData\Roaming\Adobe

2018-06-24 18:32 - 2018-06-24 18:33 - 000000000 ____D C:\Users\others\AppData\Local\ConnectedDevicesPlatform

2018-06-24 18:32 - 2018-06-24 18:32 - 000000020 ___SH C:\Users\others\ntuser.ini

2018-06-24 18:32 - 2018-06-24 18:32 - 000000000 __SHD C:\Users\others\IntelGraphicsProfiles

2018-06-24 18:32 - 2018-06-24 18:32 - 000000000 ____D C:\Users\others\AppData\Roaming\Synaptics

2018-06-24 18:32 - 2018-06-24 18:32 - 000000000 ____D C:\Users\others\AppData\LocalLow\AuthenTec

2018-06-24 18:32 - 2018-06-24 18:32 - 000000000 ____D C:\Users\others\AppData\Local\VirtualStore

2018-06-24 18:32 - 2018-04-11 17:34 - 000001105 _____ C:\Users\others\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2018-06-24 18:29 - 2016-09-15 08:02 - 000000000 ____D C:\Users\others\Documents\hp.system.package.metadata

2018-06-24 18:29 - 2016-09-15 08:02 - 000000000 ____D C:\Users\others\Documents\hp.applications.package.appdata

2018-06-24 18:29 - 2016-09-15 08:02 - 000000000 ____D C:\Users\others\AppData\Local\Microsoft Help

2018-06-24 18:28 - 2018-06-24 18:35 - 000000000 ____D C:\Users\others

2018-06-21 20:21 - 2018-06-21 20:21 - 000001085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2018.lnk

2018-06-21 15:48 - 2018-06-21 15:49 - 000003929 _____ C:\WINDOWS\system32\default_error_stack-000008-000000.txt

2018-06-21 14:03 - 2018-06-21 14:09 - 000007604 _____ C:\Users\Jenny\AppData\Local\Resmon.ResmonCfg

2018-06-21 13:32 - 2018-06-21 13:32 - 000003929 _____ C:\WINDOWS\system32\default_error_stack-000007-000000.txt

2018-06-21 13:32 - 2018-06-21 13:32 - 000000000 ____D C:\Users\Jenny\AppData\Local\D3DSCache

2018-06-21 10:01 - 2018-06-21 10:01 - 000003930 _____ C:\WINDOWS\system32\default_error_stack-000006-000000.txt

2018-06-20 10:49 - 2018-07-03 09:15 - 000000000 ____D C:\ProgramData\Packages

2018-06-15 15:38 - 2018-06-15 15:39 - 147531823 _____ C:\Users\Jenny\Downloads\BASEBALLSOFTBALLBUNDLE.zip

2018-06-14 20:52 - 2018-06-14 20:53 - 000003929 _____ C:\WINDOWS\system32\default_error_stack-000005-000000.txt

2018-06-13 12:01 - 2018-06-08 13:02 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2018-06-13 12:01 - 2018-06-08 03:29 - 007520000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2018-06-13 12:01 - 2018-06-08 03:13 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2018-06-13 12:01 - 2018-06-08 03:09 - 006569960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2018-06-13 12:01 - 2018-06-08 03:02 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2018-06-13 12:00 - 2018-06-08 13:02 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2018-06-13 12:00 - 2018-06-08 13:01 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL

2018-06-13 12:00 - 2018-06-08 13:01 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll

2018-06-13 12:00 - 2018-06-08 12:45 - 012712448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2018-06-13 12:00 - 2018-06-08 12:45 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2018-06-13 12:00 - 2018-06-08 12:44 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll

2018-06-13 12:00 - 2018-06-08 12:44 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll

2018-06-13 12:00 - 2018-06-08 12:43 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2018-06-13 12:00 - 2018-06-08 12:43 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll

2018-06-13 12:00 - 2018-06-08 12:43 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll

2018-06-13 12:00 - 2018-06-08 12:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll

2018-06-13 12:00 - 2018-06-08 12:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll

2018-06-13 12:00 - 2018-06-08 12:42 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2018-06-13 12:00 - 2018-06-08 12:41 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll

2018-06-13 12:00 - 2018-06-08 11:04 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2018-06-13 12:00 - 2018-06-08 10:58 - 002206544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL

2018-06-13 12:00 - 2018-06-08 10:51 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2018-06-13 12:00 - 2018-06-08 10:47 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll

2018-06-13 12:00 - 2018-06-08 10:47 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2018-06-13 12:00 - 2018-06-08 10:47 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll

2018-06-13 12:00 - 2018-06-08 10:47 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll

2018-06-13 12:00 - 2018-06-08 10:45 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll

2018-06-13 12:00 - 2018-06-08 10:06 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe

2018-06-13 12:00 - 2018-06-08 10:05 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll

2018-06-13 12:00 - 2018-06-08 04:38 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2018-06-13 12:00 - 2018-06-08 04:37 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll

2018-06-13 12:00 - 2018-06-08 04:35 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll

2018-06-13 12:00 - 2018-06-08 04:34 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll

2018-06-13 12:00 - 2018-06-08 04:34 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2018-06-13 12:00 - 2018-06-08 04:31 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2018-06-13 12:00 - 2018-06-08 04:31 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll

2018-06-13 12:00 - 2018-06-08 03:34 - 001140576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2018-06-13 12:00 - 2018-06-08 03:34 - 000983016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2018-06-13 12:00 - 2018-06-08 03:33 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe

2018-06-13 12:00 - 2018-06-08 03:31 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2018-06-13 12:00 - 2018-06-08 03:30 - 009148320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2018-06-13 12:00 - 2018-06-08 03:30 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2018-06-13 12:00 - 2018-06-08 03:30 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2018-06-13 12:00 - 2018-06-08 03:30 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll

2018-06-13 12:00 - 2018-06-08 03:30 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll

2018-06-13 12:00 - 2018-06-08 03:30 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2018-06-13 12:00 - 2018-06-08 03:30 - 000491328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 006817384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 004403280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 002836384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2018-06-13 12:00 - 2018-06-08 03:29 - 002753048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 002570712 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 002564984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 002422688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2018-06-13 12:00 - 2018-06-08 03:29 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001946328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001611592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001457136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2018-06-13 12:00 - 2018-06-08 03:29 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001288816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001258288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2018-06-13 12:00 - 2018-06-08 03:29 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001150416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001148808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001112608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2018-06-13 12:00 - 2018-06-08 03:29 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll

2018-06-13 12:00 - 2018-06-08 03:29 - 000266656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2018-06-13 12:00 - 2018-06-08 03:12 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll

2018-06-13 12:00 - 2018-06-08 03:12 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2018-06-13 12:00 - 2018-06-08 03:11 - 001461744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2018-06-13 12:00 - 2018-06-08 03:11 - 000550616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2018-06-13 12:00 - 2018-06-08 03:10 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2018-06-13 12:00 - 2018-06-08 03:10 - 002331584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2018-06-13 12:00 - 2018-06-08 03:10 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL

2018-06-13 12:00 - 2018-06-08 03:10 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2018-06-13 12:00 - 2018-06-08 03:10 - 001011992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2018-06-13 12:00 - 2018-06-08 03:10 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll

2018-06-13 12:00 - 2018-06-08 03:10 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 006527064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 004788512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 002535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 002242216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 001980872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 001805776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 001709720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 001380200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 001020168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 000988136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 000770160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2018-06-13 12:00 - 2018-06-08 03:09 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll

2018-06-13 12:00 - 2018-06-08 03:04 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2018-06-13 12:00 - 2018-06-08 03:03 - 022005760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2018-06-13 12:00 - 2018-06-08 03:01 - 004563456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2018-06-13 12:00 - 2018-06-08 03:01 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2018-06-13 12:00 - 2018-06-08 03:00 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2018-06-13 12:00 - 2018-06-08 03:00 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll

2018-06-13 12:00 - 2018-06-08 03:00 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2018-06-13 12:00 - 2018-06-08 03:00 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll

2018-06-13 12:00 - 2018-06-08 03:00 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll

2018-06-13 12:00 - 2018-06-08 02:59 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll

2018-06-13 12:00 - 2018-06-08 02:59 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2018-06-13 12:00 - 2018-06-08 02:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2018-06-13 12:00 - 2018-06-08 02:59 - 001767936 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2018-06-13 12:00 - 2018-06-08 02:59 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll

2018-06-13 12:00 - 2018-06-08 02:59 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2018-06-13 12:00 - 2018-06-08 02:58 - 007581696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2018-06-13 12:00 - 2018-06-08 02:58 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2018-06-13 12:00 - 2018-06-08 02:58 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll

2018-06-13 12:00 - 2018-06-08 02:58 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2018-06-13 12:00 - 2018-06-08 02:58 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2018-06-13 12:00 - 2018-06-08 02:58 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2018-06-13 12:00 - 2018-06-08 02:57 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll

2018-06-13 12:00 - 2018-06-08 02:57 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2018-06-13 12:00 - 2018-06-08 02:57 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll

2018-06-13 12:00 - 2018-06-08 02:57 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 005780992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 004336128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 002902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 002900480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL

2018-06-13 12:00 - 2018-06-08 02:56 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 003441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2018-06-13 12:00 - 2018-06-08 02:55 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 001371648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll

2018-06-13 12:00 - 2018-06-08 02:55 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2018-06-13 12:00 - 2018-06-08 02:54 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2018-06-13 12:00 - 2018-06-08 02:54 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll

2018-06-13 12:00 - 2018-06-08 02:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2018-06-13 12:00 - 2018-06-08 02:54 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2018-06-13 12:00 - 2018-06-08 02:54 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll

2018-06-13 12:00 - 2018-06-08 02:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2018-06-13 12:00 - 2018-06-08 02:54 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2018-06-13 12:00 - 2018-06-08 02:54 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll

2018-06-13 12:00 - 2018-06-08 02:53 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2018-06-13 12:00 - 2018-06-08 02:53 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2018-06-13 12:00 - 2018-06-06 12:57 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll

2018-06-13 12:00 - 2018-06-05 22:20 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll

2018-06-13 11:59 - 2018-06-08 13:07 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe

2018-06-13 11:59 - 2018-06-08 13:05 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2018-06-13 11:59 - 2018-06-08 13:02 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe

2018-06-13 11:59 - 2018-06-08 12:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll

2018-06-13 11:59 - 2018-06-08 12:47 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys

2018-06-13 11:59 - 2018-06-08 12:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2018-06-13 11:59 - 2018-06-08 12:45 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe

2018-06-13 11:59 - 2018-06-08 12:45 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE

2018-06-13 11:59 - 2018-06-08 12:44 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll

2018-06-13 11:59 - 2018-06-08 12:44 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll

2018-06-13 11:59 - 2018-06-08 12:43 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe

2018-06-13 11:59 - 2018-06-08 12:43 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll

2018-06-13 11:59 - 2018-06-08 12:43 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2018-06-13 11:59 - 2018-06-08 12:42 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2018-06-13 11:59 - 2018-06-08 12:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2018-06-13 11:59 - 2018-06-08 12:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll

2018-06-13 11:59 - 2018-06-08 12:41 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll

2018-06-13 11:59 - 2018-06-08 12:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2018-06-13 11:59 - 2018-06-08 12:41 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2018-06-13 11:59 - 2018-06-08 12:41 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe

2018-06-13 11:59 - 2018-06-08 12:41 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll

2018-06-13 11:59 - 2018-06-08 12:40 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll

2018-06-13 11:59 - 2018-06-08 10:58 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll

2018-06-13 11:59 - 2018-06-08 10:50 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe

2018-06-13 11:59 - 2018-06-08 10:48 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2018-06-13 11:59 - 2018-06-08 10:48 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2018-06-13 11:59 - 2018-06-08 10:47 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll

2018-06-13 11:59 - 2018-06-08 10:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll

2018-06-13 11:59 - 2018-06-08 10:46 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe

2018-06-13 11:59 - 2018-06-08 10:46 - 002016256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2018-06-13 11:59 - 2018-06-08 10:46 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll

2018-06-13 11:59 - 2018-06-08 10:05 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll

2018-06-13 11:59 - 2018-06-08 08:00 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll

2018-06-13 11:59 - 2018-06-08 08:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll

2018-06-13 11:59 - 2018-06-08 04:35 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2018-06-13 11:59 - 2018-06-08 04:31 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys

2018-06-13 11:59 - 2018-06-08 04:30 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2018-06-13 11:59 - 2018-06-08 03:33 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe

2018-06-13 11:59 - 2018-06-08 03:33 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll

2018-06-13 11:59 - 2018-06-08 03:33 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll

2018-06-13 11:59 - 2018-06-08 03:31 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2018-06-13 11:59 - 2018-06-08 03:31 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys

2018-06-13 11:59 - 2018-06-08 03:30 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2018-06-13 11:59 - 2018-06-08 03:30 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll

2018-06-13 11:59 - 2018-06-08 03:30 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2018-06-13 11:59 - 2018-06-08 03:30 - 000567184 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe

2018-06-13 11:59 - 2018-06-08 03:30 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2018-06-13 11:59 - 2018-06-08 03:30 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe

2018-06-13 11:59 - 2018-06-08 03:30 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll

2018-06-13 11:59 - 2018-06-08 03:30 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2018-06-13 11:59 - 2018-06-08 03:30 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll

2018-06-13 11:59 - 2018-06-08 03:30 - 000134584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2018-06-13 11:59 - 2018-06-08 03:29 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL

2018-06-13 11:59 - 2018-06-08 03:29 - 001921952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys

2018-06-13 11:59 - 2018-06-08 03:29 - 001026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys

2018-06-13 11:59 - 2018-06-08 03:29 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys

2018-06-13 11:59 - 2018-06-08 03:29 - 000885880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2018-06-13 11:59 - 2018-06-08 03:29 - 000792992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2018-06-13 11:59 - 2018-06-08 03:29 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll

2018-06-13 11:59 - 2018-06-08 03:29 - 000413824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2018-06-13 11:59 - 2018-06-08 03:29 - 000413088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2018-06-13 11:59 - 2018-06-08 03:29 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys

2018-06-13 11:59 - 2018-06-08 03:29 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll

2018-06-13 11:59 - 2018-06-08 03:29 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2018-06-13 11:59 - 2018-06-08 03:29 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys

2018-06-13 11:59 - 2018-06-08 03:29 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll

2018-06-13 11:59 - 2018-06-08 03:29 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll

2018-06-13 11:59 - 2018-06-08 03:29 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll

2018-06-13 11:59 - 2018-06-08 03:10 - 001397200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll

2018-06-13 11:59 - 2018-06-08 03:10 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll

2018-06-13 11:59 - 2018-06-08 03:09 - 001129648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2018-06-13 11:59 - 2018-06-08 03:09 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll

2018-06-13 11:59 - 2018-06-08 03:09 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll

2018-06-13 11:59 - 2018-06-08 03:09 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2018-06-13 11:59 - 2018-06-08 03:09 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2018-06-13 11:59 - 2018-06-08 03:09 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll

2018-06-13 11:59 - 2018-06-08 03:09 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll

2018-06-13 11:59 - 2018-06-08 03:03 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll

2018-06-13 11:59 - 2018-06-08 03:03 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll

2018-06-13 11:59 - 2018-06-08 03:03 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll

2018-06-13 11:59 - 2018-06-08 03:03 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys

2018-06-13 11:59 - 2018-06-08 03:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll

2018-06-13 11:59 - 2018-06-08 03:02 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe

2018-06-13 11:59 - 2018-06-08 03:02 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe

2018-06-13 11:59 - 2018-06-08 03:01 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe

2018-06-13 11:59 - 2018-06-08 03:01 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll

2018-06-13 11:59 - 2018-06-08 03:01 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll

2018-06-13 11:59 - 2018-06-08 03:01 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll

2018-06-13 11:59 - 2018-06-08 03:01 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll

2018-06-13 11:59 - 2018-06-08 03:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll

2018-06-13 11:59 - 2018-06-08 03:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys

2018-06-13 11:59 - 2018-06-08 03:00 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe

2018-06-13 11:59 - 2018-06-08 03:00 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll

2018-06-13 11:59 - 2018-06-08 03:00 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll

2018-06-13 11:59 - 2018-06-08 03:00 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys

2018-06-13 11:59 - 2018-06-08 02:59 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll

2018-06-13 11:59 - 2018-06-08 02:59 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll

2018-06-13 11:59 - 2018-06-08 02:59 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe

2018-06-13 11:59 - 2018-06-08 02:59 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll

2018-06-13 11:59 - 2018-06-08 02:59 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2018-06-13 11:59 - 2018-06-08 02:58 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2018-06-13 11:59 - 2018-06-08 02:58 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll

2018-06-13 11:59 - 2018-06-08 02:58 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll

2018-06-13 11:59 - 2018-06-08 02:58 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe

2018-06-13 11:59 - 2018-06-08 02:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll

2018-06-13 11:59 - 2018-06-08 02:57 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys

2018-06-13 11:59 - 2018-06-08 02:57 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll

2018-06-13 11:59 - 2018-06-08 02:57 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll

2018-06-13 11:59 - 2018-06-08 02:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll

2018-06-13 11:59 - 2018-06-08 02:56 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll

2018-06-13 11:59 - 2018-06-08 02:56 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll

2018-06-13 11:59 - 2018-06-08 02:56 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll

2018-06-13 11:59 - 2018-06-08 02:56 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll

2018-06-13 11:59 - 2018-06-08 02:56 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll

2018-06-13 11:59 - 2018-06-08 02:56 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2018-06-13 11:59 - 2018-06-08 02:56 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2018-06-13 11:59 - 2018-06-08 02:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll

2018-06-13 11:59 - 2018-06-08 02:56 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll

2018-06-13 11:59 - 2018-06-08 02:55 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll

2018-06-13 11:59 - 2018-06-08 02:55 - 001033728 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2018-06-13 11:59 - 2018-06-08 02:55 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2018-06-13 11:59 - 2018-06-08 02:55 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll

2018-06-13 11:59 - 2018-06-08 02:55 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL

2018-06-13 11:59 - 2018-06-08 02:55 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll

2018-06-13 11:59 - 2018-06-08 02:55 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2018-06-13 11:59 - 2018-06-08 02:55 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2018-06-13 11:59 - 2018-06-08 02:54 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll

2018-06-13 11:59 - 2018-06-08 02:54 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL

2018-06-13 11:59 - 2018-06-08 02:54 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll

2018-06-13 11:59 - 2018-06-08 02:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll

2018-06-13 11:59 - 2018-06-08 02:54 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll

2018-06-13 11:59 - 2018-06-08 02:54 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2018-06-13 11:59 - 2018-06-08 02:54 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll

2018-06-13 11:59 - 2018-06-08 02:54 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll

2018-06-13 11:59 - 2018-06-08 02:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2018-06-13 11:59 - 2018-06-08 02:54 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL

2018-06-13 11:59 - 2018-06-08 02:53 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2018-06-13 11:59 - 2018-06-08 02:53 - 001108992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll

2018-06-13 11:59 - 2018-06-08 02:53 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll

2018-06-13 11:59 - 2018-06-08 02:53 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2018-06-13 11:59 - 2018-06-08 02:53 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll

2018-06-13 11:59 - 2018-06-08 02:53 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2018-06-13 11:59 - 2018-06-08 01:41 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim

2018-06-13 11:59 - 2018-06-01 17:24 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll

2018-06-13 11:59 - 2018-06-01 16:54 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2018-06-13 11:59 - 2018-05-24 21:24 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll

2018-06-12 10:39 - 2018-06-12 10:39 - 000001963 _____ C:\Users\Public\Desktop\Garmin Express.lnk

2018-06-12 10:39 - 2018-06-12 10:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin

2018-06-07 05:36 - 2018-07-06 10:55 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2018-06-07 05:36 - 2018-07-06 10:55 - 000112872 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2018-06-07 05:36 - 2018-07-06 10:55 - 000103656 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2018-06-07 05:36 - 2018-07-06 10:55 - 000044768 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2018-06-07 05:36 - 2018-06-07 05:36 - 000190696 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2018-06-06 02:55 - 2018-06-06 03:04 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate

2018-06-06 02:54 - 2018-06-06 02:55 - 000000000 ____D C:\WINDOWS\ServiceProfiles

2018-06-06 02:54 - 2018-06-06 02:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff

2018-06-06 02:50 - 2018-06-06 02:50 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 020383712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 008623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 007436632 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001947808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001534976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2018-06-06 02:50 - 2018-06-06 02:50 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl

2018-06-06 02:50 - 2018-06-06 02:50 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl

2018-06-06 02:50 - 2018-06-06 02:50 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000788480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx

2018-06-06 02:50 - 2018-06-06 02:50 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000604568 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2018-06-06 02:50 - 2018-06-06 02:50 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx

2018-06-06 02:50 - 2018-06-06 02:50 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2018-06-06 02:50 - 2018-06-06 02:50 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000473496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2018-06-06 02:50 - 2018-06-06 02:50 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2018-06-06 02:50 - 2018-06-06 02:50 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000308408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys

2018-06-06 02:50 - 2018-06-06 02:50 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe

2018-06-06 02:50 - 2018-06-06 02:50 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe

2018-06-06 02:50 - 2018-06-06 02:50 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys

2018-06-06 02:50 - 2018-06-06 02:50 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe

2018-06-06 02:50 - 2018-06-06 02:50 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2018-06-06 02:50 - 2018-06-06 02:50 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys

2018-06-06 02:50 - 2018-06-06 02:50 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat

2018-06-06 02:50 - 2018-06-06 02:50 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat

2018-06-06 02:50 - 2018-06-06 02:50 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2018-06-06 02:50 - 2018-06-06 02:50 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2018-06-06 02:45 - 2018-06-06 03:04 - 000000000 ____D C:\Program Files (x86)\MSBuild

2018-06-06 02:45 - 2018-06-06 02:45 - 000000000 ____D C:\Program Files\Reference Assemblies

2018-06-06 02:45 - 2018-06-06 02:45 - 000000000 ____D C:\Program Files\MSBuild

2018-06-06 02:45 - 2018-06-06 02:45 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies

2018-06-06 02:45 - 2018-06-06 02:45 - 000000000 ____D C:\inetpub

2018-06-06 02:44 - 2018-06-06 02:44 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2018-06-06 02:44 - 2018-06-06 02:44 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2018-06-06 02:44 - 2018-06-06 02:44 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2018-06-06 02:44 - 2018-06-06 02:44 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2018-06-06 02:44 - 2018-06-06 02:44 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2018-06-06 02:44 - 2018-06-06 02:44 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2018-06-06 02:43 - 2018-06-06 02:43 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe

2018-06-06 02:43 - 2018-06-06 02:43 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe

2018-06-06 02:43 - 2018-06-06 02:43 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll

2018-06-06 02:43 - 2018-06-06 02:43 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll

2018-06-06 02:43 - 2018-06-06 02:43 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll

2018-06-06 02:43 - 2018-06-06 02:43 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll

2018-06-06 02:43 - 2018-06-06 02:43 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml

2018-06-06 02:43 - 2018-06-06 02:43 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml

2018-06-06 02:04 - 2018-06-06 02:04 - 000000000 ____D C:\ProgramData\Microsoft OneDrive

2018-06-06 02:03 - 2018-06-06 02:03 - 000001417 _____ C:\Users\Jenny\Desktop\Microsoft Edge.lnk

2018-06-06 01:58 - 2018-06-06 01:58 - 000000020 ___SH C:\Users\Jenny\ntuser.ini

2018-06-06 01:56 - 2018-07-06 10:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2018-06-06 01:56 - 2018-07-05 16:07 - 000004148 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{52CE65DD-FB02-44CC-849F-033EFA61553F}

2018-06-06 01:56 - 2018-07-01 13:08 - 000003358 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1727349234-1600954563-603500483-1001

2018-06-06 01:56 - 2018-06-06 01:57 - 000002810 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1727349234-1600954563-603500483-1001

2018-06-06 01:56 - 2018-06-06 01:57 - 000002546 _____ C:\WINDOWS\System32\Tasks\WinZip Update Notifier

2018-06-06 01:56 - 2018-06-06 01:56 - 000002690 _____ C:\WINDOWS\System32\Tasks\USER_ESRV_SVC_QUEENCREEK

2018-06-06 01:56 - 2018-06-06 01:56 - 000002348 _____ C:\WINDOWS\System32\Tasks\YCMServiceAgent

2018-06-06 01:56 - 2018-06-06 01:56 - 000002236 _____ C:\WINDOWS\System32\Tasks\{3B5A3CA5-6364-468B-8E7B-25AA171E3C87}

2018-06-06 01:56 - 2018-06-06 01:56 - 000002040 _____ C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements

2018-06-06 01:56 - 2018-06-06 01:56 - 000000000 ____D C:\WINDOWS\System32\Tasks\WPD

2018-06-06 01:56 - 2018-06-06 01:56 - 000000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform

2018-06-06 01:55 - 2018-07-05 03:47 - 000003238 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForJenny

2018-06-06 01:55 - 2018-07-01 12:22 - 000003834 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473

2018-06-06 01:55 - 2018-06-12 10:39 - 000003624 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask

2018-06-06 01:55 - 2018-06-07 20:23 - 000004570 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier

2018-06-06 01:55 - 2018-06-07 20:23 - 000004386 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2018-06-06 01:55 - 2018-06-06 01:57 - 000003346 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2018-06-06 01:55 - 2018-06-06 01:57 - 000002970 _____ C:\WINDOWS\System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132

2018-06-06 01:55 - 2018-06-06 01:57 - 000002808 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-jennytefft@hotmail.com

2018-06-06 01:55 - 2018-06-06 01:57 - 000002762 _____ C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-jennytefft@hotmail.com

2018-06-06 01:55 - 2018-06-06 01:56 - 000003638 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1727349234-1600954563-603500483-1001UA1d236e8d42f3455

2018-06-06 01:55 - 2018-06-06 01:56 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2018-06-06 01:55 - 2018-06-06 01:56 - 000003370 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1727349234-1600954563-603500483-1001Core1d236e8d40b8051

2018-06-06 01:55 - 2018-06-06 01:56 - 000003122 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2018-06-06 01:55 - 2018-06-06 01:56 - 000002642 _____ C:\WINDOWS\System32\Tasks\Apple Diagnostics

2018-06-06 01:55 - 2018-06-06 01:56 - 000002604 _____ C:\WINDOWS\System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon

2018-06-06 01:55 - 2018-06-06 01:56 - 000002352 _____ C:\WINDOWS\System32\Tasks\CLVDLauncher

2018-06-06 01:55 - 2018-06-06 01:56 - 000002352 _____ C:\WINDOWS\System32\Tasks\CLMLSvc_P2G8

2018-06-06 01:55 - 2018-06-06 01:55 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard

2018-06-06 01:55 - 2018-06-06 01:55 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple

2018-06-06 01:51 - 2018-06-06 01:55 - 000007623 _____ C:\WINDOWS\diagwrn.xml

2018-06-06 01:51 - 2018-06-06 01:55 - 000007623 _____ C:\WINDOWS\diagerr.xml

2018-06-06 01:30 - 2018-06-06 01:30 - 000003929 _____ C:\WINDOWS\system32\default_error_stack-000004-000000.txt

2018-06-06 01:21 - 2018-06-06 01:21 - 000001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2018-06-06 01:17 - 2018-06-24 18:46 - 000002399 _____ C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2018-06-06 01:16 - 2018-07-02 20:50 - 000000000 ____D C:\Users\Jenny

2018-06-06 01:16 - 2018-06-06 01:33 - 000000000 ____D C:\Users\Jenny\Documents\hp.system.package.metadata

2018-06-06 01:16 - 2018-06-06 01:24 - 000000000 ____D C:\Users\Jenny\AppData\Local\Microsoft Help

2018-06-06 01:16 - 2016-09-15 08:02 - 000000000 ____D C:\Users\Jenny\Documents\hp.applications.package.appdata

2018-06-06 01:15 - 2018-07-06 11:00 - 000933368 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2018-06-06 01:14 - 2018-01-02 23:01 - 000072664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL

2018-06-06 01:14 - 2018-01-02 23:01 - 000069080 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL

2018-06-06 01:13 - 2018-06-06 01:13 - 000000000 ____D C:\ProgramData\USOShared

2018-06-06 01:13 - 2018-04-11 17:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2018-06-06 01:06 - 2018-07-06 09:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2018-06-06 01:06 - 2018-07-05 11:00 - 000808504 _____ C:\WINDOWS\system32\FNTCACHE.DAT

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2018-07-06 11:00 - 2018-04-11 17:36 - 000000000 ____D C:\WINDOWS\INF

2018-07-06 10:59 - 2012-12-25 07:41 - 000000000 ____D C:\Users\Jenny\Documents\Youcam

2018-07-06 10:58 - 2018-04-11 17:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2018-07-06 10:58 - 2017-11-17 21:20 - 000000000 ___RD C:\Users\Jenny\Creative Cloud Files

2018-07-06 10:58 - 2014-01-18 15:01 - 000000000 ____D C:\Users\Jenny\AppData\Local\Adobe

2018-07-06 10:57 - 2017-05-24 17:30 - 000000000 ____D C:\Users\Jenny\AppData\Roaming\WD Discovery

2018-07-06 10:55 - 2015-12-03 15:42 - 000000000 __SHD C:\Users\Jenny\IntelGraphicsProfiles

2018-07-06 10:53 - 2018-04-11 15:04 - 001048576 _____ C:\WINDOWS\system32\config\BBI

2018-07-06 10:38 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\AppReadiness

2018-07-06 08:34 - 2018-04-11 17:38 - 000000000 ___HD C:\Program Files\WindowsApps

2018-07-05 15:48 - 2018-02-02 17:32 - 000000000 ____D C:\Program Files (x86)\Intel Driver and Support Assistant

2018-07-05 12:10 - 2017-04-11 14:26 - 000000000 ____D C:\ProgramData\IDrive

2018-07-05 11:00 - 2016-09-29 16:45 - 000000346 _____ C:\WINDOWS\Tasks\HPCeeScheduleForJenny.job

2018-07-05 10:48 - 2017-11-28 12:20 - 000000000 ____D C:\Users\Jenny\Documents\tshirt business

2018-07-04 14:40 - 2017-11-08 11:10 - 000000000 ____D C:\Users\Jenny\AppData\Local\9A662DBE-F608-4946-8654-C5C49E62B870.aplzod

2018-07-04 14:24 - 2018-03-05 15:34 - 000000000 ____D C:\Users\Jenny\Documents\unzips for Photoshop

2018-07-04 11:43 - 2018-02-14 18:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2018-07-04 11:33 - 2018-04-11 15:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2018-07-03 19:41 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2018-07-03 15:35 - 2017-11-19 16:13 - 000000000 ____D C:\Program Files\Adobe

2018-07-03 15:35 - 2012-12-19 16:29 - 000000000 ____D C:\Users\Jenny\AppData\Roaming\Adobe

2018-07-02 20:51 - 2016-01-04 20:51 - 000000000 ____D C:\Users\Jenny\AppData\Local\Apple Inc

2018-07-02 20:37 - 2016-01-04 20:51 - 000000000 ___RD C:\Users\Jenny\iCloudDrive

2018-07-01 13:35 - 2012-10-20 16:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

2018-07-01 13:14 - 2012-12-19 16:26 - 000000000 ____D C:\Users\Jenny\AppData\LocalLow\AuthenTec

2018-07-01 13:03 - 2012-12-19 23:14 - 000000000 __RHD C:\Users\Public\AccountPictures

2018-06-26 20:56 - 2013-01-22 16:38 - 000000000 ____D C:\Users\Jenny\AppData\Roaming\Dropbox

2018-06-26 16:07 - 2016-11-05 11:05 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2018-06-24 18:50 - 2018-04-11 17:30 - 000000000 ____D C:\WINDOWS\CbsTemp

2018-06-21 20:21 - 2017-11-19 16:20 - 000000000 ____D C:\Users\Jenny\Documents\Adobe

2018-06-21 20:13 - 2017-11-19 16:14 - 000000000 ____D C:\Program Files\Common Files\Adobe

2018-06-21 20:13 - 2015-06-10 09:51 - 000000000 ____D C:\ProgramData\Adobe

2018-06-21 09:44 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\NDF

2018-06-14 20:47 - 2015-06-13 08:56 - 000000258 __RSH C:\ProgramData\ntuser.pol

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\zu-ZA

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\yo-NG

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\xh-ZA

2018-06-13 15:04 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\wo-SN

2018-06-13 15:04 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\TextInput

2018-06-13 15:04 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2018-06-13 15:04 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\tn-ZA

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ti-ET

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\rw-RW

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\nso-ZA

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ig-NG

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA

2018-06-13 15:03 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ

2018-06-13 15:03 - 2018-04-11 17:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2018-06-13 15:03 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2018-06-13 15:03 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2018-06-13 15:03 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\oobe

2018-06-13 15:03 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\appraiser

2018-06-13 15:03 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\ShellExperiences

2018-06-13 15:03 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\bcastdvr

2018-06-13 15:03 - 2018-04-11 17:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2018-06-13 15:03 - 2018-04-11 17:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2018-06-13 15:03 - 2018-04-11 15:04 - 000000000 ____D C:\WINDOWS\system32\Dism

2018-06-13 12:27 - 2013-08-16 19:56 - 000000000 ____D C:\WINDOWS\system32\MRT

2018-06-13 12:24 - 2017-10-12 09:14 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe

2018-06-13 12:24 - 2012-12-30 22:27 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2018-06-12 10:40 - 2016-07-02 17:26 - 000000000 ____D C:\ProgramData\Package Cache

2018-06-12 10:40 - 2016-07-02 17:26 - 000000000 ____D C:\Program Files (x86)\Garmin

2018-06-07 20:23 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2018-06-07 20:23 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\Macromed

2018-06-07 19:02 - 2018-02-22 22:30 - 000001456 _____ C:\Users\Jenny\AppData\Local\Adobe Save for Web 13.0 Prefs

2018-06-07 05:35 - 2018-04-08 10:03 - 000152184 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2018-06-06 09:59 - 2018-01-09 22:41 - 000000000 ____D C:\Users\Jenny\AppData\Local\PlaceholderTileLogoFolder

2018-06-06 04:16 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\appcompat

2018-06-06 03:05 - 2018-04-11 17:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template

2018-06-06 03:05 - 2018-04-11 17:38 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files

2018-06-06 03:05 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase

2018-06-06 03:05 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\spool

2018-06-06 03:05 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\InputMethod

2018-06-06 03:05 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\InputMethod

2018-06-06 03:05 - 2017-11-17 21:17 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2018-06-06 03:05 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2018-06-06 03:05 - 2016-12-21 15:47 - 000000000 ____D C:\WINDOWS\SysWOW64\20-20 Technologies

2018-06-06 03:05 - 2016-09-15 07:44 - 000000000 ____D C:\WINDOWS\system32\SRSLabs

2018-06-06 03:05 - 2015-12-15 10:58 - 000000000 ____D C:\ProgramData\regid.1995-08.com.techsmith

2018-06-06 03:05 - 2015-10-30 03:07 - 000000000 ____D C:\WINDOWS\ShellNew

2018-06-06 03:05 - 2014-12-29 17:56 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information

2018-06-06 03:05 - 2013-08-22 09:36 - 000000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared

2018-06-06 03:05 - 2013-08-22 09:36 - 000000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared

2018-06-06 03:05 - 2013-01-24 09:09 - 000000000 ____D C:\WINDOWS\system32\STRING

2018-06-06 03:05 - 2012-09-12 12:11 - 000000000 ____D C:\WINDOWS\en

2018-06-06 03:05 - 2012-09-12 12:08 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe

2018-06-06 03:04 - 2018-06-05 19:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2018-06-06 03:04 - 2018-06-03 13:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2018-06-06 03:04 - 2018-06-03 13:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2018-06-06 03:04 - 2018-04-11 17:41 - 000000000 ____D C:\WINDOWS\Setup

2018-06-06 03:04 - 2018-04-11 17:38 - 000000000 __RHD C:\Users\Public\Libraries

2018-06-06 03:04 - 2018-04-11 17:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2018-06-06 03:04 - 2018-03-04 15:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 22.0

2018-06-06 03:04 - 2018-02-02 17:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver and Support Assistant

2018-06-06 03:04 - 2018-01-13 15:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IDrive

2018-06-06 03:04 - 2017-09-11 16:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CanoScan 9000F

2018-06-06 03:04 - 2017-09-11 15:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon CanoScan 9000F Manual

2018-06-06 03:04 - 2017-07-16 00:08 - 000000000 ____D C:\Program Files\Intel

2018-06-06 03:04 - 2017-06-30 09:15 - 000000000 ____D C:\Program Files\UNP

2018-06-06 03:04 - 2017-05-24 13:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WD Discovery

2018-06-06 03:04 - 2017-04-30 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG6100 series

2018-06-06 03:04 - 2017-04-23 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Family Tree Maker 2014.1

2018-06-06 03:04 - 2016-06-22 20:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PdfMerge

2018-06-06 03:04 - 2016-03-23 20:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Reader for Windows 10

2018-06-06 03:04 - 2016-01-08 10:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fitbit Connect

2018-06-06 03:04 - 2015-12-15 10:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith

2018-06-06 03:04 - 2015-09-30 05:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PureVPN

2018-06-06 03:04 - 2015-08-31 08:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2018-06-06 03:04 - 2015-06-20 11:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudibleManager

2018-06-06 03:04 - 2014-02-04 15:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2018-06-06 03:04 - 2013-11-27 17:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape

2018-06-06 03:04 - 2013-08-22 09:36 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy

2018-06-06 03:04 - 2013-03-14 19:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2018-06-06 03:04 - 2013-01-24 09:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG6100 series User Registration

2018-06-06 03:04 - 2013-01-24 09:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG6100 series Manual

2018-06-06 03:04 - 2012-12-26 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media

2018-06-06 03:04 - 2012-12-26 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Family Tree Maker 2012

2018-06-06 03:04 - 2012-12-25 07:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother

2018-06-06 03:04 - 2012-12-19 18:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint

2018-06-06 03:04 - 2012-12-19 18:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

2018-06-06 03:04 - 2012-12-19 16:29 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shopping and Services

2018-06-06 03:04 - 2012-10-20 16:41 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat

2018-06-06 03:04 - 2012-10-20 16:35 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools

2018-06-06 03:04 - 2012-10-20 16:18 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

2018-06-06 03:04 - 2012-09-12 12:18 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2018-06-06 03:04 - 2012-09-12 12:16 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support

2018-06-06 03:04 - 2012-09-12 12:11 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live

2018-06-06 03:04 - 2012-09-12 12:06 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection

2018-06-06 03:04 - 2012-09-12 12:04 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos

2018-06-06 03:04 - 2012-07-26 12:40 - 000000000 ____D C:\Program Files\Hewlett-Packard

2018-06-06 02:57 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\IME

2018-06-06 02:57 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\IME

2018-06-06 02:55 - 2018-01-03 16:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech

2018-06-06 02:55 - 2017-07-16 00:07 - 000000000 ____D C:\Program Files\Synaptics

2018-06-06 02:55 - 2017-05-24 13:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital

2018-06-06 02:55 - 2017-04-30 17:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon IJ Network Utilities

2018-06-06 02:55 - 2016-04-07 21:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

2018-06-06 02:55 - 2013-01-24 09:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\vi-VN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ur-PK

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ug-CN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\tt-RU

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\tk-TM

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\te-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\sw-KE

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\sq-AL

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\quz-PE

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\prs-AF

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\pa-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\or-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\nn-NO

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ne-NP

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\mt-MT

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\mr-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\mn-MN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ml-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\mk-MK

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\mi-NZ

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\lo-LA

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\lb-LU

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ky-KG

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\kok-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\kn-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\km-KH

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\kk-KZ

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ka-GE

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\is-IS

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\id-ID

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\hy-AM

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\gu-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\gd-GB

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\ga-IE

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\fil-PH

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\fa-IR

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\cy-GB

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\bn-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\bn-BD

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\be-BY

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\as-IN

2018-06-06 02:51 - 2018-04-12 03:19 - 000000000 ____D C:\WINDOWS\system32\af-ZA

2018-06-06 02:51 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2018-06-06 02:51 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\ta-in

2018-06-06 02:51 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\si-lk

2018-06-06 02:51 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\setup

2018-06-06 02:51 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\am-et

2018-06-06 02:51 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\Provisioning

2018-06-06 02:45 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\inetsrv

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\et-EE

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\es-MX

2018-06-06 02:43 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\system32\en-GB

2018-06-06 02:20 - 2017-12-06 22:58 - 000000000 ____D C:\Users\Jenny\AppData\Local\Packages

2018-06-06 02:00 - 2015-12-13 14:24 - 000000000 ___RD C:\Users\Jenny\3D Objects

2018-06-06 02:00 - 2015-12-03 15:42 - 000000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat

2018-06-06 01:59 - 2018-06-05 14:08 - 000000000 ___DC C:\WINDOWS\Panther

2018-06-06 01:58 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\Registration

2018-06-06 01:56 - 2016-11-04 16:14 - 000000932 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1727349234-1600954563-603500483-1001UA1d236e8d42f3455.job

2018-06-06 01:56 - 2016-11-04 16:14 - 000000880 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1727349234-1600954563-603500483-1001Core1d236e8d40b8051.job

2018-06-06 01:55 - 2018-04-11 17:38 - 000000000 ___RD C:\Program Files\Windows Defender

2018-06-06 01:41 - 2013-11-19 21:42 - 000022840 _____ C:\WINDOWS\system32\emptyregdb.dat

2018-06-06 01:40 - 2018-04-11 17:38 - 000000000 __RSD C:\WINDOWS\media

2018-06-06 01:31 - 2017-07-16 00:09 - 000950940 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI

2018-06-06 01:25 - 2018-03-28 11:58 - 000000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom

2018-06-06 01:21 - 2018-04-11 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv

2018-06-06 01:13 - 2018-04-11 17:38 - 000000000 ____D C:\ProgramData\USOPrivate

2018-06-06 01:13 - 2017-07-16 00:07 - 000000000 ____D C:\WINDOWS\SysWOW64\sda

 

==================== Files in the root of some directories =======

 

2018-01-22 12:06 - 2018-05-28 13:53 - 000000033 _____ () C:\Users\Jenny\AppData\Roaming\AdobeWLCMCache.dat

2013-03-19 20:08 - 2013-03-19 20:08 - 000915073 _____ () C:\Users\Jenny\AppData\Local\a.zip

2018-02-22 22:30 - 2018-06-07 19:02 - 000001456 _____ () C:\Users\Jenny\AppData\Local\Adobe Save for Web 13.0 Prefs

2013-03-19 20:08 - 2013-03-19 20:08 - 002148152 _____ (Catalina Marketing Corp) C:\Users\Jenny\AppData\Local\BcsKtYcHW.dll

2014-01-16 21:10 - 2014-03-11 18:34 - 000005120 _____ () C:\Users\Jenny\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2018-06-21 14:03 - 2018-06-21 14:09 - 000007604 _____ () C:\Users\Jenny\AppData\Local\Resmon.ResmonCfg

 

Some files in TEMP:

====================

2018-06-24 18:35 - 2018-06-24 18:35 - 000073728 _____ () C:\Users\others\AppData\Local\Temp\28BB.tmp.exe

 

==================== Bamital & volsnap ======================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

 

LastRegBack: 2018-06-06 01:06

 

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018

Ran by Jenny (06-07-2018 11:10:30)

Running from C:\Users\Jenny\Downloads

Windows 10 Home Version 1803 17134.112 (X64) (2018-06-06 07:58:37)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1727349234-1600954563-603500483-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-1727349234-1600954563-603500483-503 - Limited - Disabled)

Guest (S-1-5-21-1727349234-1600954563-603500483-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1727349234-1600954563-603500483-1008 - Limited - Enabled)

Jenny (S-1-5-21-1727349234-1600954563-603500483-1001 - Administrator - Enabled) => C:\Users\Jenny

others (S-1-5-21-1727349234-1600954563-603500483-1004 - Limited - Enabled) => C:\Users\others

WDAGUtilityAccount (S-1-5-21-1727349234-1600954563-603500483-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

. . (HKLM\...\{569F29BA-2D46-439B-8B7C-01D999B9201D}) (Version: 7.1 - Intel) Hidden

. . . (HKLM-x32\...\{9F460796-0348-4B11-BCA0-714C4B85E3D7}) (Version: 3.1.2.2 - Intel) Hidden

Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated)

Adobe Bridge CC 2018 (HKLM-x32\...\KBRG_8_0_1) (Version: 8.0.1 - Adobe Systems Incorporated)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.5.0.331 - Adobe Systems Incorporated)

Adobe Dreamweaver CC 2018 (HKLM-x32\...\DRWV_18_2) (Version: 18.2 - Adobe Systems Incorporated)

Adobe Flash Player 30 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 30.0.0.113 - Adobe Systems Incorporated)

Adobe Illustrator CC 2018 (HKLM-x32\...\ILST_22_1) (Version: 22.1 - Adobe Systems Incorporated)

Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_1_5) (Version: 19.1.5 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)

ANT Drivers Installer x64 (HKLM\...\{20AB389B-8602-403C-B19B-F0A1D6C510A5}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden

Apple Application Support (32-bit) (HKLM-x32\...\{C56BA005-F02C-461B-ACA5-A0CE3E32578F}) (Version: 6.5 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{C8087B7C-8496-45BE-92FB-91D31EB73969}) (Version: 6.5 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{64695C4A-C68F-46B5-A734-50EBF124A68E}) (Version: 11.3.3.4 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)

AudibleManager (HKLM-x32\...\AudibleManager) (Version: 3015344.1637756.4759644.48 - Audible, Inc.)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Camtasia Studio 8 (HKLM-x32\...\{A2A41B60-D51F-4C04-BC94-B4C94F7B6DC0}) (Version: 8.6.0.2054 - TechSmith Corporation)

Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version:  - )

Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)

Canon MG6100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6100_series) (Version:  - Canon Inc.)

Canon MG6100 series User Registration (HKLM-x32\...\Canon MG6100 series User Registration) (Version:  - )

Canon MP Navigator EX 3.1 (HKLM-x32\...\MP Navigator EX 3.1) (Version:  - )

Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version:  - )

Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )

CanoScan 9000F Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ9602) (Version:  - )

Catalina Savings Printer (HKLM-x32\...\{4956ACE3-F537-4418-BB45-FD52395275A7}) (Version: 1.0.0 - Catalina Marketing Corp) <==== ATTENTION

Coupon Printer for Windows (HKLM-x32\...\Coupon Printer for Windows5.0.1.7) (Version: 5.0.1.7 - Coupons.com Incorporated)

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.5.6902 - CyberLink Corp.)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.5.3606 - CyberLink Corp.)

CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.2.3317 - CyberLink Corp.)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.5.3416 - CyberLink Corp.)

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.3.2606 - CyberLink Corp.)

CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.6.4319 - CyberLink Corp.)

CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.2.3603 - CyberLink Corp.)

D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden

Dropbox (HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\Dropbox) (Version: 52.4.60 - Dropbox, Inc.)

Elevated Installer (HKLM-x32\...\{6E257EB0-5EFF-416D-82D4-592924566BB4}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Hidden

Energy Star (HKLM\...\{0FA995CC-C849-4755-B14B-5404CC75DC24}) (Version: 1.0.8 - Hewlett-Packard)

EPSON WF-2540 Series Printer Uninstall (HKLM\...\EPSON WF-2540 Series) (Version:  - SEIKO EPSON Corporation)

Family Tree Maker 2012 (HKLM-x32\...\{1CB0993B-1CD4-4A18-9C85-9732AFD9843F}) (Version: 21.0.452 - Ancestry.com, Inc.) Hidden

Family Tree Maker 2012 (HKLM-x32\...\Family Tree Maker 2012) (Version: 21.0.452 - Ancestry.com, Inc.)

Family Tree Maker 2014.1 (HKLM\...\{6DF6B967-71FE-4921-BC4C-91724F22726C}) (Version: 22.0.1510 - Software MacKiev)

FATE: The Cursed King (HKLM-x32\...\WTA-5599598e-9861-4bd5-b3d3-dc624bb736f9) (Version: 2.2.0.97 - WildTangent) Hidden

Fitbit Connect (HKLM-x32\...\{6EB73D9D-645E-415B-8008-83C3CB865968}) (Version: 2.0.1.6742 - Fitbit Inc.)

Garmin Express (HKLM-x32\...\{3e534d41-dcc4-4f51-9858-70dd42beb3d5}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries)

Garmin Express (HKLM-x32\...\{E1C18A5C-63D7-4DC5-977F-5B4BAB4169D9}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.99 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden

Hewlett-Packard ACLM.NET v1.2.2.3 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden

HL-2270DW (HKLM-x32\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.1.6.0 - Brother Industries, Ltd.)

HP 3D DriveGuard (HKLM\...\{54CE68A8-4F2D-4328-B1F7-D6C720405F7F}) (Version: 4.2.9.1 - Hewlett-Packard Company)

HP Connected Backup (HKLM-x32\...\{6BA5F6E7-6CC1-4117-816D-A549A06CE44E}) (Version: 8.7.0.0 - Autonomy)

HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)

HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company)

HP Documentation (HKLM-x32\...\{92524C67-A99D-44C6-8995-04F5E76486AF}) (Version: 1.1.0.0 - Hewlett-Packard)

HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.3.0 - WildTangent)

HP MyRoom (HKLM-x32\...\{9C35EDE5-4B0F-45E7-A438-314BA889948E}) (Version: 9.0.0.0 - Hewlett-Packard Company)

HP Quick Launch (HKLM-x32\...\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)

HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)

HP Software Framework (HKLM-x32\...\{835B275B-F29B-464B-BD4B-097FD55FAB0A}) (Version: 4.6.8.1 - Hewlett-Packard Company)

HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.6.18.11 - Hewlett-Packard Company)

HP Support Solutions Framework (HKLM-x32\...\{55065080-504F-43BB-BE00-36B80D7D39A5}) (Version: 12.9.24.3 - Hewlett-Packard Company)

HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.)

HP Utility Center (HKLM-x32\...\{0C57987A-A03A-4B95-A309-D23F78F406CA}) (Version: 1.0.7 - Hewlett-Packard)

HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)

HPDetect (HKLM-x32\...\{CCCDD476-98F9-4B06-91DB-23F27CEC3BE1}) (Version: 1.0.0.0 - HP)

iCloud (HKLM\...\{C8127F91-0244-4FF0-8014-0C432E15E09D}) (Version: 7.5.0.34 - Apple Inc.)

IDrive Version - 6.0 (HKLM-x32\...\IDrive_is1) (Version: 6.0 - Pro Softnet Corp)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6425.0 - IDT)

Intel(R) Computing Improvement Program (HKLM\...\{699E6891-25C3-443A-9B8E-80C74F0172C8}) (Version: 2.1.03413 - Intel Corporation)

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4885 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.9.1002 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Intel® Driver & Support Assistant (HKLM-x32\...\{e7adbf16-34ad-490a-a4e8-feb60fb99973}) (Version: 3.1.2.2 - Intel)

iTunes (HKLM\...\{BE065D5C-5EB5-4F39-A112-32897C297935}) (Version: 12.7.5.9 - Apple Inc.)

Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)

Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.15 - Oracle Corporation)

magicJack (HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\magicJack) (Version: 4.1.7574.5297 - magicJack L.P.)

Malwarebytes version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)

Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\OneDriveSetup.exe) (Version: 18.065.0329.0002 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)

Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

MyHarmony (HKLM-x32\...\{2AD8F8A1-ECE5-4890-BCC2-B4396370A0D4}) (Version: 1.0.308 - Logitech)

NirSoft ProduKey (HKLM-x32\...\NirSoft ProduKey) (Version:  - )

PDF Reader for Windows 10 (HKLM\...\PDF Reader for Windows 10_is1) (Version:  - PDFLogic Corporation)

PdfMerge (HKLM-x32\...\{1CD59184-5172-4899-BAE4-4F06D57B2004}) (Version: 1.19.0 - PdfMerge)

PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )

PureVPN (HKLM-x32\...\PureVPN_is1) (Version: 5.11.8.85 - PureVPN)

QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)

Ralink RT5390R 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.37.0 - Mediatek)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)

Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29034 - Realtek Semiconductor Corp.)

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.14.0 - SAMSUNG Electronics Co., Ltd.)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.98 - Synaptics Incorporated)

Validity WBF DDK (HKLM\...\{1F91C200-8F0F-4009-A75E-DB6CE151BD4E}) (Version: 4.4.234.0 - Validity Sensors, Inc.)

WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 1.3.329 - Western Digital Technologies, Inc.)

WD Drive Utilities (HKLM-x32\...\{2db219ff-e483-403b-9374-aea609abaf1d}) (Version: 1.4.3.13 - Western Digital Technologies, Inc.) Hidden

WD Drive Utilities (HKLM-x32\...\{546D15D7-D6AF-422B-B4E5-05AF20BA8573}) (Version: 1.4.3.13 - Western Digital Technologies, Inc.) Hidden

WD My Cloud (HKLM\...\{4B86F896-11DC-4711-BB60-81104832FA44}) (Version: 1.0.7.17 - Western Digital Technologies, Inc.)

WD Security (HKLM-x32\...\{17194DA0-755B-4BAA-A8C9-EC5549F7D596}) (Version: 1.4.3.13 - Western Digital Technologies, Inc.) Hidden

WD Security (HKLM-x32\...\{6422f3d1-f66a-42ab-9726-67fca9d3964b}) (Version: 1.4.3.13 - Western Digital Technologies, Inc.)

WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.3.0 - WildTangent)

Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)

Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )

WinZip 22.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C24119}) (Version: 22.0.12706 - Corel Corporation)

Zoom (HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\ZoomUMX) (Version: 4.1 - Zoom Video Communications, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-E48E4119C29B}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.WinZipExpressForOffice.dll ()

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1727349234-1600954563-603500483-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [          0001IDSIcon1] -> {0FA6DCC0-CF0B-427D-A8AF-97C466AB5769} => C:\Program Files (x86)\IDriveWindows\IDSyncIntIcon64.dll [2018-01-10] (Pro-Softnet Corporation, U.S.A)

ShellIconOverlayIdentifiers: [          0001IDSIcon2] -> {66357BBE-D2E5-453C-95FF-8102EB32419D} => C:\Program Files (x86)\IDriveWindows\IDSyncIntIcon64.dll [2018-01-10] (Pro-Softnet Corporation, U.S.A)

ShellIconOverlayIdentifiers: [          0001IDSIcon3] -> {904E6336-8B13-43FA-B4C3-5B62C1C91971} => C:\Program Files (x86)\IDriveWindows\IDSyncIntIcon64.dll [2018-01-10] (Pro-Softnet Corporation, U.S.A)

ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-27] ()

ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-27] ()

ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-27] ()

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-27] ()

ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)

ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt_20140110_13_10_33.dll [2014-01-10] (Cyberlink)

ContextMenuHandlers1: [IDriveMenu] -> {AFBFEC11-0FD5-48ED-B8AF-315197F09A82} => C:\Program Files (x86)\IDriveWindows\IDContextMenu.dll [2018-01-10] ()

ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2018-05-23] (Apple Inc.)

ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-12-14] (WinZip Computing, S.L.)

ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt_20140110_13_10_33.dll [2014-01-10] (Cyberlink)

ContextMenuHandlers2: [IDriveMenu] -> {AFBFEC11-0FD5-48ED-B8AF-315197F09A82} => C:\Program Files (x86)\IDriveWindows\IDContextMenu.dll [2018-01-10] ()

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)

ContextMenuHandlers4: [IDriveMenu] -> {AFBFEC11-0FD5-48ED-B8AF-315197F09A82} => C:\Program Files (x86)\IDriveWindows\IDContextMenu.dll [2018-01-10] ()

ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-12-14] (WinZip Computing, S.L.)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2018-01-02] (Intel Corporation)

ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-27] ()

ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)

ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-12-14] (WinZip Computing, S.L.)

ContextMenuHandlers1_S-1-5-21-1727349234-1600954563-603500483-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

ContextMenuHandlers4_S-1-5-21-1727349234-1600954563-603500483-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

ContextMenuHandlers5_S-1-5-21-1727349234-1600954563-603500483-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.0.dll [2018-06-25] (Dropbox, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {104285CF-A65C-4368-B7DD-9A1222C4A4B9} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2018-05-23] (Apple Inc.)

Task: {106E3EED-7A48-487E-8525-A870FEDE8B59} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1727349234-1600954563-603500483-1001Core1d236e8d40b8051 => C:\Users\Jenny\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-04] (Dropbox, Inc.)

Task: {1336DEE3-63AE-4FBE-976B-F3DF06ADD85A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION

Task: {15C053E3-2E3E-48C1-B818-15CC6DEA41C9} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1727349234-1600954563-603500483-1001UA1d236e8d42f3455 => C:\Users\Jenny\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-04] (Dropbox, Inc.)

Task: {169AD8A9-3500-402C-8A44-B47C3DE69B8B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-05] (Google Inc.)

Task: {17F967D3-14B1-4379-A252-659C30D7509A} - System32\Tasks\{3B5A3CA5-6364-468B-8E7B-25AA171E3C87} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\HP Games\Uninstall.exe"

Task: {188E4491-3B8F-4066-A7F3-D20CC98B2980} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION

Task: {1A897F4F-10E4-4C63-B8EA-4546559FB81E} - \WPD\SqmUpload_S-1-5-21-1727349234-1600954563-603500483-1001 -> No File <==== ATTENTION

Task: {1D240F4A-30ED-46F2-AD95-D2CE6FD5ACEB} - \PostPoneInstall -> No File <==== ATTENTION

Task: {1F193849-E70A-45BE-B608-56C470F22E2F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION

Task: {25AD498E-7002-4A0C-8D5A-00E9B2FCD79B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)

Task: {29B4F004-66D5-4B8A-A51C-87AFFF679F50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-06-27] (HP Inc.)

Task: {301B8B36-72B5-4B00-8BDC-AEC4B13C9B8A} - System32\Tasks\WinZip Update Notifier => C:\Program Files\WinZip\WZUpdateNotifier.exe [2017-12-14] (WinZip)

Task: {3202E591-0721-491A-8DF5-F5048CC9B8DA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-06-28] (HP Inc.)

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe

Task: {376E9539-DB8A-4CCB-9F71-B2E2D61DC2C6} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2012-11-05] (Hewlett-Packard Development Company, L.P.)

Task: {3A32D1BF-D382-44F7-AB92-33E890A289A7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)

Task: {3E57D89E-C0BA-42BE-B883-B014331894A1} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"

Task: {40F260E0-7945-4907-ACE1-4174B3AEDF29} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13] (Intel Corporation)

Task: {48E7944C-E76D-4036-9D84-4EE29C597B45} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2018-01-08] (Apple Inc.)

Task: {49FA21EA-9C7B-4847-93F6-CD243D6AC2D7} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION

Task: {52B0466F-8F41-4D0B-8FF1-C4E07F7A39A7} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13] (Intel Corporation)

Task: {53D4359B-A391-4275-9B81-1EE83A457F63} - System32\Tasks\HPCeeScheduleForJenny => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)

Task: {577D97D8-0B28-443A-89DC-A707D3DC863A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-07-04] (Microsoft Corporation)

Task: {5936852A-FB4E-4482-9674-CFB9A320502F} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION

Task: {5C15ABC7-84B8-4E13-AB45-AFFCE4F237F2} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1727349234-1600954563-603500483-1001 => C:\Users\Jenny\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe

Task: {5C5D72E4-19F1-40BD-8A62-402900DD705B} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2018-06-06] ()

Task: {5FCA7B35-7CF8-4C42-B15B-2A8E53C596FD} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.)

Task: {62A81351-86C6-4C8B-A8D8-63DE650B7C07} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_113_Plugin.exe [2018-06-07] (Adobe Systems Incorporated)

Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-11] ()

Task: {6823FF71-6394-48FF-A582-840C891B8059} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION

Task: {6985144C-A098-4FA5-90D3-D4F096398265} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION

Task: {6BCF60CA-C9D9-4185-9BA8-1DC58E2D5A8F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)

Task: {6D589DA3-C690-44A9-9C9B-DFC52E966671} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-07-04] (Microsoft Corporation)

Task: {6F4095AA-D9B6-4B7F-B537-676E14059920} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION

Task: {76BE9767-0065-459B-929D-84623FF7206F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)

Task: {784F32CC-8333-4608-9FFD-FCB1AEB39C79} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)

Task: {83BEFF38-F659-4186-AD9A-CC6CD73B7322} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)

Task: {9A952B03-D2C9-4B6E-A47A-ABE7CB500299} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-06-07] (Adobe Systems Incorporated)

Task: {A059DE5C-2264-436E-A622-4486111DD9F7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION

Task: {A6BE7723-623E-41C5-818B-B6028C3CA3A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-05] (Google Inc.)

Task: {AC085DF6-9FAF-4027-BF87-3A7E4F88022F} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe

Task: {AF69BA2D-F8B6-4D17-9139-52F4E64214F1} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05] (CyberLink)

Task: {B164DD92-6B1C-4798-B16F-05FCF7F7559A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-07-04] (Microsoft Corporation)

Task: {B378F66E-92B9-4A94-893C-9DF8D0B98548} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-07-04] (Microsoft Corporation)

Task: {B99EC400-C6E8-4D2B-917B-1267D7AA2AEE} - System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-jennytefft@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-05-11] (Adobe Systems, Incorporated)

Task: {BBF8F108-0723-47E7-9B66-823975372372} - System32\Tasks\Synaptics TouchPad Enhancements => Program Files\Synaptics\SynTP\SynTPEnh.exe

Task: {BC38488E-2C3F-408F-BBEE-BDFE17CFBE5B} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION

Task: {C64BDEC9-8DC0-420A-BA76-5FF5DC7CBAF7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION

Task: {DE656C98-3FC4-4540-A481-D8F278AF55E7} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2013-12-03] (CyberLink Corp.)

Task: {DF7C4DD7-D887-4057-AC31-2D835AA32D55} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION

Task: {E5228A79-7350-4811-BACF-1A740F5DB9D3} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe

Task: {ECD696E3-801B-4ADD-B5F3-3D06BA920E09} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-jennytefft@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2018-04-11] (Adobe Systems Incorporated)

Task: {EE20E997-AB88-4184-8917-10E161555AC7} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-16] ()

Task: {F0F5877C-946A-48EC-BFA6-B95D0C099E35} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1727349234-1600954563-603500483-1001Core1d236e8d40b8051.job => C:\Users\Jenny\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1727349234-1600954563-603500483-1001UA1d236e8d42f3455.job => C:\Users\Jenny\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\HPCeeScheduleForJenny.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2018-04-11 17:34 - 2018-04-11 17:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll

2017-09-01 05:15 - 2017-09-01 05:15 - 000495872 _____ () C:\Program Files\WinZip\WinZip Smart Monitor\WinZip Compression Smart Monitor Service.exe

2018-04-08 10:03 - 2018-06-07 05:35 - 002493648 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll

2018-04-08 10:03 - 2018-06-07 05:35 - 002297040 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll

2017-11-30 19:54 - 2017-11-30 19:54 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2018-05-15 18:58 - 2018-05-15 18:58 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2012-09-06 02:47 - 2012-09-06 02:47 - 000028160 _____ () C:\Windows\system32\valWBFPolicyService.exe

2018-02-27 20:08 - 2018-02-27 20:08 - 000614856 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll

2013-09-05 01:17 - 2013-09-05 01:17 - 004300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\office.odf

2010-10-20 17:23 - 2010-10-20 17:23 - 008801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll

2018-04-11 17:34 - 2018-04-11 17:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll

2018-04-11 17:34 - 2018-04-11 17:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll

2018-06-13 12:00 - 2018-06-08 02:56 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2018-01-13 15:05 - 2018-01-12 17:25 - 001003240 _____ () C:\Program Files (x86)\IDriveWindows\id_sync.exe

2018-06-08 16:34 - 2018-06-08 16:34 - 035475912 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe

2017-04-11 14:26 - 2018-01-10 13:50 - 000834048 _____ () C:\Program Files (x86)\IDriveWindows\sqlite3.dll

2018-06-26 16:07 - 2018-06-22 13:15 - 004608856 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libglesv2.dll

2018-06-26 16:07 - 2018-06-22 13:15 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libegl.dll

2014-01-10 14:10 - 2013-08-05 01:49 - 000627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll

2013-08-05 16:48 - 2013-08-05 16:48 - 000016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

2018-04-24 07:51 - 2018-04-24 07:51 - 067115992 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll

2013-09-05 01:14 - 2013-09-05 01:14 - 004300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2010-10-20 17:45 - 2010-10-20 17:45 - 008801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll

2018-01-13 15:05 - 2018-01-10 13:50 - 000166008 _____ () C:\Program Files (x86)\IDriveWindows\SSLEAY32.dll

2018-01-13 15:05 - 2018-01-10 13:50 - 000878712 _____ () C:\Program Files (x86)\IDriveWindows\LIBEAY32.dll

2018-06-11 15:57 - 2018-06-11 15:57 - 000142376 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\fs-ext\build\Release\fs-ext.node

2018-06-11 15:57 - 2018-06-11 15:57 - 000271400 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node

2018-06-11 15:57 - 2018-06-11 15:57 - 000141864 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\ref\build\Release\binding.node

2018-06-11 15:57 - 2018-06-11 15:57 - 000150568 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\ffi\build\Release\ffi_bindings.node

2018-06-11 15:57 - 2018-06-11 15:57 - 000097832 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll

2018-06-11 15:57 - 2018-06-11 15:57 - 000110120 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\idle-gc\build\Release\idle-gc.node

2018-06-28 10:46 - 2018-06-28 10:46 - 000125976 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\fs-ext\build\Release\fs-ext.node

2018-06-28 10:46 - 2018-06-28 10:46 - 000124952 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\ref\build\Release\binding.node

2018-06-28 10:46 - 2018-06-28 10:46 - 000133144 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\ffi\build\Release\ffi_bindings.node

2018-06-28 10:46 - 2018-06-28 10:46 - 000222232 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node

2018-06-28 10:46 - 2018-06-28 10:46 - 000099864 _____ () C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll

2018-06-28 10:46 - 2018-06-28 10:46 - 000106520 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\bufferutil\build\Release\bufferutil.node

2018-06-28 10:46 - 2018-06-28 10:46 - 000094232 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\idle-gc\build\Release\idle-gc.node

2012-10-20 16:16 - 2012-06-25 12:41 - 001198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Jenny\Desktop\home photos:com.dropbox.attributes [168]

AlternateDataStreams: C:\Users\Jenny\Documents\how to fix print problem.png:com.dropbox.attributes [420]

AlternateDataStreams: C:\Users\Jenny\Documents\Screenshot 2015-04-10 10.23.05.png:com.dropbox.attributes [424]

AlternateDataStreams: C:\Users\Jenny\Documents\Screenshot 2015-04-10 10.26.19.png:com.dropbox.attributes [420]

AlternateDataStreams: C:\Users\Jenny\Documents\Screenshot 2015-06-22 07.27.14.png:com.dropbox.attributes [420]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\garmin.com -> hxxps://my.garmin.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2013-08-22 07:25 - 2013-08-22 07:25 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Hewlett-Packard Backgrounds\backgroundDefault.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "SysTrayApp"

HKLM\...\StartupApproved\Run: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "RemoteControl10"

HKLM\...\StartupApproved\Run32: => "HP Quick Launch"

HKLM\...\StartupApproved\Run32: => "BCSSync"

HKLM\...\StartupApproved\Run32: => "BrStsMon00"

HKLM\...\StartupApproved\Run32: => "IJNetworkScanUtility"

HKLM\...\StartupApproved\Run32: => "CanonSolutionMenuEx"

HKLM\...\StartupApproved\Run32: => "Fitbit Connect"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "Fitbit Connect"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "Power2GoExpress8"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "Dropbox Update"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_DE03D23480AE1C39962DBD87878ED01F"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "iCloudDrive"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "iCloudServices"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "GarminExpressTrayApp"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "iCloudPhotos"

HKU\S-1-5-21-1727349234-1600954563-603500483-1001\...\StartupApproved\Run: => "ApplePhotoStreams"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{26B06D1C-4AC9-4257-809D-9A77FDFF3175}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{A5BA4962-5458-46EB-9F9E-A1FCD082906C}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe

FirewallRules: [{A337F407-6231-45B4-8CE6-2888F868A4E0}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe

FirewallRules: [{4F808C38-80F5-4679-B9A4-E5F92A664B01}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe

FirewallRules: [{B9D3DA5A-78D1-4A52-A680-879AEEC8E37C}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe

FirewallRules: [UDP Query User{1D078B12-F4C7-48D8-8A0F-5DDB85D9E504}C:\users\jenny\appdata\roaming\mjusbsp\magicjack.exe] => (Allow) C:\users\jenny\appdata\roaming\mjusbsp\magicjack.exe

FirewallRules: [TCP Query User{DBF9FB07-CA3A-42EA-8A64-1CE59477F86A}C:\users\jenny\appdata\roaming\mjusbsp\magicjack.exe] => (Allow) C:\users\jenny\appdata\roaming\mjusbsp\magicjack.exe

FirewallRules: [{99EB1BDB-1226-41EF-8B31-61846A86A564}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

FirewallRules: [{F2239039-489D-473D-9EB2-3A59A352BC2F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{9E776976-B674-4A55-8AB5-A9FEFA39DC4A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{29F2AA1A-AB24-4AB4-B9ED-3BDE348382B6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{62FDCD2F-6D5F-41C6-8600-915384A7F314}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [UDP Query User{FA14B52E-9969-4504-BB9F-EC6B78135541}C:\users\jenny\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jenny\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{C95FC12A-76F8-4B14-A89C-1F198D0745CC}C:\users\jenny\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jenny\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{7E0E02B6-A90A-430A-AEC9-54E253076412}C:\users\jenny\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jenny\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{539F4C41-A992-413A-ADCE-8DAFE51C8F66}C:\users\jenny\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jenny\appdata\roaming\spotify\spotify.exe

FirewallRules: [{DB401B9F-F111-4FD4-932F-7842BC187594}] => (Allow) C:\Users\Jenny\Downloads\install_win8\Data\Disk1\setup.exe

FirewallRules: [{2AF3CB3A-039D-46A8-9A42-E492844138EA}] => (Allow) C:\Users\Jenny\Downloads\install_win8\Data\Disk1\setup.exe

FirewallRules: [{F936C016-CF66-43C1-B106-20794339F4D7}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{7DE2482A-230D-4FBB-8A16-F36A0B1E6E60}] => (Allow) LPort=2869

FirewallRules: [{395CB7BD-99CC-4A78-AA17-55903CF7570F}] => (Allow) LPort=1900

FirewallRules: [{2CB7761F-331D-4382-B469-D1598B671B5E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{BBB22FC8-5FC7-4C4B-B19E-92D052BA804E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{D2184093-F342-44BB-980A-F6C0C15E57AE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{2DC75272-7AA8-4C80-AE05-6A4C904CDE18}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{D0C22FE4-E5DE-4A82-9A8E-B2B6DDB91401}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{BA0780F8-B3C1-40EE-A0B1-ADFDEB935CEC}] => (Allow) C:\Users\Jenny\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{C0BC8948-0239-46B7-8C59-100BE9ECB9BC}] => (Allow) C:\Users\Jenny\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{80E15F7D-A238-4102-AA9C-D5C2342D41B7}C:\users\jenny\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jenny\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{B95DAFDE-F92D-44A2-A8EF-7F154AEC350D}C:\users\jenny\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jenny\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{E9DD1B50-4659-46B3-9780-F6EE8B94CDD9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE

FirewallRules: [{ECFD7DB3-883E-4CEB-8E98-28A633CA71E3}] => (Allow) E:\install\Data\Disk1\setup.exe

FirewallRules: [{532E52EA-96C3-45D3-9C5F-AA7535CC30BD}] => (Allow) E:\install\Data\Disk1\setup.exe

FirewallRules: [{9CC6D8CB-DFD6-4218-9EB0-CAF1BEC293BA}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe

FirewallRules: [{5DBE90DF-6B5D-4E0C-B422-D22BC19C4329}] => (Allow) LPort=8317

FirewallRules: [{A58452CC-3103-4BD0-85C3-6BDFAED5E6DB}] => (Allow) C:\Program Files (x86)\AirMyPC\AirMyPC.exe

FirewallRules: [{94E498FE-FC8B-4795-A393-20152143A1B5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{A7E99A1E-CBAA-4FB6-ACB0-D5C3B04DFCCB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{E0CC619C-2075-4B58-952E-09E2B1AB66D0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{EE8946CC-0FB1-4400-9B34-7FD963D62BBA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{FAF59FD8-24F5-4799-B312-99FBB955A4CF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{A68B98DF-4C34-490C-A4F5-1589E8A970F7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{5C6EF755-DA9C-4D01-961C-5FA22E86A693}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{43C12F58-8F5A-4381-BE46-04DED5031A6B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{FC60C9C0-C9BE-46D0-9A66-58FE74B0546D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{024AB159-93CA-4F10-B83D-B00D42468CF4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe

FirewallRules: [{BDC43465-CC60-4A8A-A081-260F1E797CEE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe

==================== Restore Points =========================

28-06-2018 12:25:31 Windows Update

01-07-2018 13:30:07 Removed HP SimplePass.

05-07-2018 09:53:43 Windows Defender Checkpoint

==================== Faulty Device Manager Devices =============

Name: Validity Sensors (WBF) (PID=0018)

Description: Validity Sensors (WBF) (PID=0018)

Class Guid: {53d29ef7-377c-4d14-864b-eb3a85769359}

Manufacturer: Validity Sensors, Inc.

Service: WUDFRd

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: =========================

Application errors:

==================

Error: (07/06/2018 10:59:28 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: IAStorDataMgrSvc.exe, version: 11.5.9.1002, time stamp: 0x5065e128

Faulting module name: IAStorUtil.ni.dll, version: 11.5.9.1002, time stamp: 0x5065e124

Exception code: 0xc0000005

Fault offset: 0x0002e431

Faulting process id: 0xe18

Faulting application start time: 0x01d4154aaf4edc34

Faulting application path: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

Faulting module path: C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IAStorUtil\982658e20c11cc3128b6340ece71f455\IAStorUtil.ni.dll

Report Id: cf6b686a-4501-4194-986a-4e5f4fb74112

Faulting package full name:

Faulting package-relative application ID:

 

Error: (07/06/2018 10:59:26 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: IAStorDataMgrSvc.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.NullReferenceException

   at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()

   at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()

   at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

 

Error: (07/06/2018 10:43:57 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: IAStorDataMgrSvc.exe, version: 11.5.9.1002, time stamp: 0x5065e128

Faulting module name: IAStorUtil.ni.dll, version: 11.5.9.1002, time stamp: 0x5065e124

Exception code: 0xc0000005

Fault offset: 0x0002e431

Faulting process id: 0x1db4

Faulting application start time: 0x01d4154884a77d6e

Faulting application path: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

Faulting module path: C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IAStorUtil\982658e20c11cc3128b6340ece71f455\IAStorUtil.ni.dll

Report Id: 3c760ffb-17d1-4281-b512-890fa024ef1c

Faulting package full name:

Faulting package-relative application ID:

 

Error: (07/06/2018 10:43:56 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: IAStorDataMgrSvc.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.NullReferenceException

   at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()

   at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()

   at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

 

Error: (07/06/2018 10:09:38 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program HxOutlook.exe version 16.0.9330.2136 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

 

Process ID: 1ef8

Start Time: 01d415437f199c2c

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9330.21365.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Report Id: 8d111f9f-4f2a-4aaf-9761-04cdca8db6a1

Faulting package full name: microsoft.windowscommunicationsapps_17.9330.21365.0_x64__8wekyb3d8bbwe

Faulting package-relative application ID: microsoft.windowslive.mail

 

Error: (07/05/2018 11:08:02 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: IAStorDataMgrSvc.exe, version: 11.5.9.1002, time stamp: 0x5065e128

Faulting module name: IAStorUtil.ni.dll, version: 11.5.9.1002, time stamp: 0x5065e124

Exception code: 0xc0000005

Fault offset: 0x0002e431

Faulting process id: 0x2430

Faulting application start time: 0x01d41482b6de71f0

Faulting application path: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

Faulting module path: C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IAStorUtil\982658e20c11cc3128b6340ece71f455\IAStorUtil.ni.dll

Report Id: f3b956c6-dfd6-44ca-b2de-5842d8fbf4a4

Faulting package full name:

Faulting package-relative application ID:

 

Error: (07/05/2018 11:08:00 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: IAStorDataMgrSvc.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.NullReferenceException

   at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()

   at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()

   at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

 

Error: (07/05/2018 04:51:44 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program Microsoft.Photos.exe version 2018.18041.15910.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 4864

Start Time: 01d413016fbbbb1a

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15913.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

Report Id: fac600b7-1838-4a57-8b40-0a08ca31c7d6

Faulting package full name: Microsoft.Windows.Photos_2018.18041.15913.0_x64__8wekyb3d8bbwe

Faulting package-relative application ID: App

System errors:

=============

Error: (07/06/2018 11:05:12 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/06/2018 11:02:08 AM) (Source: DCOM) (EventID: 10016) (User: MOMSHP)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user MomsHP\Jenny SID (S-1-5-21-1727349234-1600954563-603500483-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/06/2018 10:59:43 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

Windows.SecurityCenter.WscBrokerManager

 and APPID

Unavailable

 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/06/2018 10:59:36 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (07/06/2018 10:59:14 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Energy Server Service queencreek service terminated with the following error:

The timer resolution was not previously set by the current process.

 

Error: (07/06/2018 10:57:48 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)

Description: The server {784E29F4-5EBE-4279-9948-1E8FE941646D} did not register with DCOM within the required timeout.

 

Error: (07/06/2018 10:56:11 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

Windows.SecurityCenter.WscDataProtection

 and APPID

Unavailable

 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/06/2018 10:54:52 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Garmin Device Interaction Service service failed to start due to the following error:

The service did not respond to the start or control request in a timely fashion.

 

Windows Defender:

===================================

Date: 2018-07-04 19:23:30.452

Description:

Windows Defender Antivirus has detected malware or other potentially unwanted software.

For more information please see the following:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:O97M/DPlink.A&threatid=2147727924&enterprise=0

Name: Trojan:O97M/DPlink.A

ID: 2147727924

Severity: Severe

Category: Trojan

Path: file:_C:\Users\Jenny\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalState\Indexed\Settings\en-US\ControlPanel.settingcontent-ms

Detection Origin: Local machine

Detection Type: Concrete

Detection Source: User

Process Name: Unknown

Signature Version: AV: 1.271.488.0, AS: 1.271.488.0, NIS: 1.271.488.0

Engine Version: AM: 1.1.15000.2, NIS: 1.1.15000.2

 

Date: 2018-07-04 11:43:16.694

Description:

Windows Defender Antivirus scan has been stopped before completion.

Scan ID: {A8FF1045-6815-49BB-B051-F09FCA0BF450}

Scan Type: Antimalware

Scan Parameters: Full Scan

 

CodeIntegrity:

===================================

 

Date: 2018-07-04 13:08:31.871

Description:

Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

 

Date: 2018-07-04 13:06:13.535

Description:

Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

 

Date: 2018-07-04 13:01:56.926

Description:

Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

 

Date: 2018-07-04 13:00:23.128

Description:

Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

 

Date: 2018-07-04 12:59:29.225

Description:

Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

 

Date: 2018-07-04 12:44:44.779

Description:

Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

 

Date: 2018-07-04 12:43:57.075

Description:

Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

 

Date: 2018-07-04 12:43:39.641

Description:

Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz

Percentage of memory in use: 24%

Total physical RAM: 16273.27 MB

Available physical RAM: 12222.29 MB

Total Virtual: 28561.27 MB

Available Virtual: 24469.27 MB

==================== Drives ================================

Drive ? () (Fixed) (Total:669.83 GB) (Free:335.99 GB) NTFS ==>[system with boot components (obtained from drive)]

Drive d: (RECOVERY) (Fixed) (Total:27.1 GB) (Free:3.15 GB) NTFS ==>[system with boot components (obtained from drive)]

\\?\Volume{62900d59-33f2-49a4-85d4-ce000fca03e7}\ (WINRE) (Fixed) (Total:0.39 GB) (Free:0.16 GB) NTFS

\\?\Volume{31f0c1ae-fdae-4b41-b2a0-46762ac409eb}\ () (Fixed) (Total:0.92 GB) (Free:0.35 GB) NTFS

\\?\Volume{e99f3676-c361-417b-8d24-baa0ad47f20d}\ (WILLIAMS) (Fixed) (Total:0.25 GB) (Free:0.14 GB) FAT32

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 698.6 GB) (Disk ID: A50E1C7D)

Partition: GPT.

==================== End of Addition.txt ============================

Link to post
Share on other sites

  • Root Admin

Can you run the following from within PowerShell and post back the results.

 Get-MpThreatDetection

PowerShell should be on your start menu near the bottom.

 

Basically start PowerShell and type in that command above and press the Enter key. It should list any infections it's found. Copy and paste the results on your next reply please.

 

Thanks

Ron

 

Link to post
Share on other sites


ActionSuccess                  : True
AdditionalActionsBitMask       : 0
AMProductVersion               : 4.18.1806.18062
CleaningActionID               : 3
CurrentThreatExecutionStatusID : 0
DetectionID                    : {18E79CE9-F036-4272-BF31-93303CE203B9}
DetectionSourceTypeID          : 1
DomainUser                     : MomsHP\Jenny
InitialDetectionTime           : 7/4/2018 7:23:27 PM
LastThreatStatusChangeTime     : 7/5/2018 9:54:21 AM
ProcessName                    : Unknown
RemediationTime                : 7/5/2018 9:54:21 AM
Resources                      : {file:_C:\Users\Jenny\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txye
                                 wy\LocalState\Indexed\Settings\en-US\ControlPanel.settingcontent-ms}
ThreatID                       : 2147727924
ThreatStatusErrorCode          : 0
ThreatStatusID                 : 4
PSComputerName                 :

Link to post
Share on other sites

  • Root Admin

Thanks Jenny

It does look like it was probably a FP (false positive) based on the post here.

I believe the file will automatically get recreated when needed so there should not be any harm.

If you need further assistance please let me know but I would agree it looks to have been a FP from Microsoft Windows Defender.

Thank you

Ron

 

Link to post
Share on other sites

  • 2 weeks later...
Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.