nairnmonster Posted December 9, 2018 ID:1285917 Share Posted December 9, 2018 Hi, I purchased MWB yesterday. Ran first scan, quarantined whatever was found. I then rebooted my machine and each time it runs the scan it finds 44 threats. When I click view identified threats it just says "Malware - Unspecified" At the end of the scan, I click quarantine and it says complete but nothing is quarantined. I have attached a screenshot to show. If there is anything else I need to attach please let me know. Thanks for any help. This is the export summary: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 12/9/18 Scan Time: 6:01 PM Log File: 63a6b62c-fbdc-11e8-b664-bcaec5277d7d.json -Software Information- Version: 3.6.1.2711 Components Version: 1.0.508 Update Package Version: 1.0.8235 License: Premium -System Information- OS: Windows 10 (Build 17134.407) CPU: x64 File System: NTFS User: System -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Scheduler Result: Completed Objects Scanned: 357772 Threats Detected: 0 Threats Quarantined: 0 Time Elapsed: 20 min, 10 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 0 (No malicious items detected) Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) Link to post Share on other sites More sharing options...
nasdaq Posted December 10, 2018 ID:1286089 Share Posted December 10, 2018 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === I need more information before suggesting a fix. Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File.Click the file you wish to Attach.Click Attach this file.Click the Add reply button. === Please post the logs for my review. Wait for further instructions Link to post Share on other sites More sharing options...
nairnmonster Posted December 12, 2018 Author ID:1286581 Share Posted December 12, 2018 Hi, Thanks for the help. See attached. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09.12.2018 Ran by Stephen (administrator) on BALROG (12-12-2018 11:49:20) Running from C:\Users\Stephen\Downloads Loaded Profiles: Stephen (Available Profiles: Stephen) Platform: Windows 10 Pro Version 1803 17134.471 (X64) Language: English (United Kingdom) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\LsaIso.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1812.3-0\MsMpEng.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (DTS) C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\ramaint.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Microsoft Corporation) C:\Windows\System32\vmms.exe (Microsoft Corporation) C:\Windows\System32\vmcompute.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1812.3-0\NisSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe () C:\Users\Stephen\Downloads\CoreTemp64\Core Temp.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe () C:\Program Files (x86)\Porta\doers.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe () C:\Program Files (x86)\Porta\doers.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.76.0_x64__kzf8qxf38zg5c\SkypeApp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.76.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\Video.UI.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.76.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe (Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe () C:\Program Files\Google\Drive\googledrivesync.exe (Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe () C:\Program Files (x86)\RocketDock\RocketDock.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Gaijin Entertainment) C:\Users\Stephen\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe (Innovative Digital Technologies) C:\Users\Stephen\AppData\Roaming\ACEStream\engine\ace_engine.exe () C:\Program Files\Google\Drive\googledrivesync.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe () C:\Program Files (x86)\Winamp\winampa.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Realtime Soft AG) C:\Program Files\UltraMon\UltraMon.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe () \\SERVER\ServerFolders\Software\ShellFolderFix64\ShellFolderFixUI.exe (Realtime Soft Ltd) C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe () C:\Program Files (x86)\Origin\QtWebEngineProcess.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe () C:\Program Files (x86)\Origin\QtWebEngineProcess.exe (InnoVISION Multimedia Ltd.) C:\Program Files (x86)\Inno3D\Inno3D.exe (Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtAvAC.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (The Qt Company Ltd) C:\Program Files (x86)\Dropbox\Client\QtWebEngineProcess.exe (Innovative Digital Technologies) C:\Users\Stephen\AppData\Roaming\ACEStream\engine\ace_engine.exe (Ubisoft) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe (Ubisoft) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe () C:\Users\Stephen\AppData\Roaming\ACEStream\updater\ace_update.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1811.3241.0_x64__8wekyb3d8bbwe\Calculator.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11810.1001.12.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Corporation) C:\Program Files\rempl\sedlauncher.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\Stephen\Downloads\FRST64 (3).exe (Realtime Soft AG) C:\Program Files\UltraMon\UltraMonUiAcc.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Corporation) HKLM\...\Run: [LogMeIn GUI] => C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe [445416 2018-10-03] (LogMeIn, Inc.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8822528 2016-05-25] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1429248 2016-05-25] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [301880 2018-11-15] (Apple Inc.) HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [35328 2007-05-14] () HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2015-09-24] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2015-09-24] (Adobe Systems Inc.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3806016 2018-11-28] (Dropbox, Inc.) HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2138272 2016-10-08] (iSkySoft) HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe HKLM-x32\...\Run: [Inno3D] => C:\Program Files (x86)\Inno3D\Inno3D.exe [18286592 2016-12-22] (InnoVISION Multimedia Ltd.) HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-12] (Logitech Inc.) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5885352 2018-05-30] (LogMeIn Inc.) HKLM-x32\...\Run: [ITSecMng] => C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-07-07] (Oracle Corporation) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [6788032 2018-04-20] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Corporation) HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4836032 2017-08-14] (Disc Soft Ltd) HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46459080 2018-10-04] () HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3131680 2018-11-26] (Valve Corporation) HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3113768 2018-12-06] (Electronic Arts) HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-12-03] (Apple Inc.) HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [Gaijin.Net Agent] => C:\Users\Stephen\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2125384 2018-10-27] (Gaijin Entertainment) HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [AceStream] => C:\Users\Stephen\AppData\Roaming\ACEStream\engine\ace_engine.exe [27960 2018-08-30] (Innovative Digital Technologies) HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [Ubisoft Game Launcher] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe [470872 2018-12-12] (Ubisoft) HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2018-12-03] (Apple Inc.) HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\MountPoints2: {3923dda6-cbfe-11e8-a5c3-bcaec5277d7d} - "G:\TotalLock.exe" HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\MountPoints2: {3923ddde-cbfe-11e8-a5c3-bcaec5277d7d} - "G:\TotalLock.exe" HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\MountPoints2: {4cb9451b-89f3-11e7-a471-806e6f6e6963} - "E:\setup.exe" HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Ribbons.scr [148480 2018-04-11] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk [2018-09-06] ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UltraMon.lnk [2017-11-16] ShortcutTarget: UltraMon.lnk -> C:\Windows\Installer\{8684F97B-F9AB-46CA-B45C-384CB8677935}\IcoUltraMon.ico () Startup: C:\Users\Stephen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShellFolderFix.lnk [2018-11-10] ShortcutTarget: ShellFolderFix.lnk -> \\SERVER\ServerFolders\Software\ShellFolderFix64\ShellFolderFixUI.exe (No File) Startup: C:\Users\Stephen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uplay.lnk [2017-08-26] ShortcutTarget: Uplay.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe (Ubisoft) BootExecute: autocheck autochk * sdnclean64.exe GroupPolicy: Restriction ? <==== ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{001f5bd3-ec1e-4ce2-a912-719c8dfcc005}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{360f7b02-6444-45d9-a186-05fe783792b6}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{5602b676-bb74-4779-9d30-e8af53cc18c2}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{567e9019-3a8a-449f-8e91-58d85dc73002}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{63b64f46-e387-4b96-8f04-165618e1cc26}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{63b64f46-e387-4b96-8f04-165618e1cc26}: [DhcpNameServer] 8.8.8.8 Tcpip\..\Interfaces\{a0eddc50-d437-4704-9088-f45a383d1736}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{b7b43270-dc58-11e7-81f6-806e6f6e6963}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{bda16ff0-e5c2-43c0-8f08-d561cd66add3}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{eb98d9e2-1c7b-40ee-a9d2-736f04ee5ca9}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{f41ae45a-6f7c-4ce5-bb25-d7dda8f98c8b}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{f41ae45a-6f7c-4ce5-bb25-d7dda8f98c8b}: [DhcpNameServer] 8.8.8.8 Internet Explorer: ================== SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1976242850-1873277439-2250288598-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04 SearchScopes: HKU\S-1-5-21-1976242850-1873277439-2250288598-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04 BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2018-12-03] (Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2018-12-03] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\ssv.dll [2018-10-08] (Oracle Corporation) BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\jp2ssv.dll [2018-10-08] (Oracle Corporation) BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-12-03] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-12-03] (Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-12-03] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-12-03] (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-12-03] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-12-03] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-12-03] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-12-03] (Microsoft Corporation) Handler: WSISVCUchrome - No CLSID Value FireFox: ======== FF DefaultProfile: zrg6nawm.default FF ProfilePath: C:\Users\Stephen\AppData\Roaming\Mozilla\Firefox\Profiles\zrg6nawm.default [2018-12-09] FF Homepage: Mozilla\Firefox\Profiles\zrg6nawm.default -> hxxps://www.malwarebytes.org/restorebrowser/ FF Extension: (Bing-Google) - C:\Users\Stephen\AppData\Roaming\Mozilla\Firefox\Profiles\zrg6nawm.default\Extensions\@Bing-Google.xpi [2017-09-24] [Legacy] FF Extension: (Ace Script) - C:\Users\Stephen\AppData\Roaming\Mozilla\Firefox\Profiles\zrg6nawm.default\Extensions\acewebextension_unlisted@acestream.org.xpi [2017-10-16] [Legacy] FF Extension: (Privacy Badger) - C:\Users\Stephen\AppData\Roaming\Mozilla\Firefox\Profiles\zrg6nawm.default\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2017-11-23] FF Extension: (AdBlocker for YouTube™) - C:\Users\Stephen\AppData\Roaming\Mozilla\Firefox\Profiles\zrg6nawm.default\Extensions\jid1-q4sG8pYhq8KGHs@jetpack.xpi [2017-09-15] FF Extension: (No Name) - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi\ [not found] FF SearchPlugin: C:\Users\Stephen\AppData\Roaming\Mozilla\Firefox\Profiles\zrg6nawm.default\searchplugins\bing-lavasoft-ff59.xml [2018-12-02] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2017-09-03] [Legacy] [not signed] FF HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Stephen\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi FF Extension: (Ace Script) - C:\Users\Stephen\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2018-11-26] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-12-03] (Microsoft Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.181.2 -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll [2018-10-08] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.181.2 -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\plugin2\npjp2.dll [2018-10-08] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-12-03] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2018-12-03] (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM -> C:\Program Files (x86)\Common Files\Nero\BrowserPlugin\npBrowserPlugin.dll [2013-08-20] (Nero AG) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-10-02] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-10-02] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2015-09-24] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1976242850-1873277439-2250288598-1001: @acestream.net/acestreamplugin,version=3.1.20.1 -> C:\Users\Stephen\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-13] (Innovative Digital Technologies) Chrome: ======= CHR HomePage: Default -> hxxp://www.google.co.uk/ CHR StartupUrls: Default -> "hxxp://www.google.co.uk/" CHR DefaultSearchKeyword: Default -> googleuk_ CHR Session Restore: Default -> is enabled. CHR Profile: C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default [2018-12-12] CHR Extension: (Slides) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-08] CHR Extension: (Docs) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-08] CHR Extension: (Google Drive) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-12-08] CHR Extension: (YouTube) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-08] CHR Extension: (Adblock for Youtube™) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2018-09-15] CHR Extension: (Sheets) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-08] CHR Extension: (Google Docs Offline) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-15] CHR Extension: (Chrometana - Redirect Bing Somewhere Better) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaicbfmipfpfpjmlbpejaoaflfdnabnc [2017-12-08] CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2017-12-09] CHR Extension: (Ace Script) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2018-11-23] CHR Extension: (Chrome Web Store Payments) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-02] CHR Extension: (Gmail) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-12-08] CHR Extension: (Chrome Media Router) - C:\Users\Stephen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-22] CHR HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1976242850-1873277439-2250288598-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2015-05-08] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [File not signed] S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6998536 2017-12-08] () R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9646240 2018-11-20] (Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-08-26] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-08-26] (Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2018-11-28] (Dropbox, Inc.) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2291904 2017-08-14] (Disc Soft Ltd) R2 DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [218768 2016-05-25] (DTS) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [610464 2018-01-20] (EasyAntiCheat Ltd) R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3346856 2018-05-30] (LogMeIn Inc.) S3 HgClientService; C:\WINDOWS\system32\hgclientservice.dll [141824 2018-10-06] (Microsoft Corporation) R3 hns; C:\WINDOWS\System32\HostNetSvc.dll [1709568 2018-11-09] (Microsoft Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [419304 2018-10-03] (LogMeIn, Inc.) R2 LMIMaint; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [587752 2018-10-03] (LogMeIn, Inc.) R2 LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [407424 2015-06-15] (LogMeIn, Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6347056 2018-09-19] (Malwarebytes) R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed] R3 nvagent; C:\WINDOWS\System32\NvAgent.dll [31232 2018-04-12] (Microsoft Corporation) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2269504 2018-12-06] (Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3130696 2018-12-06] (Electronic Arts) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed] R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2017-08-27] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3892256 2018-04-20] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [3943664 2018-04-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233712 2018-02-06] (Safer-Networking Ltd.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Corporation) S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] () S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11786992 2018-11-14] (TeamViewer GmbH) R3 vmcompute; C:\WINDOWS\system32\vmcompute.exe [3014144 2018-12-08] (Microsoft Corporation) R2 vmms; C:\WINDOWS\system32\vmms.exe [15202816 2018-10-06] (Microsoft Corporation) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\NisSrv.exe [3880120 2018-12-10] (Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MsMpEng.exe [114208 2018-12-10] (Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r S2 WsDrvInst; C:\Program Files (x86)\Wondershare\drfone\Library\DriverInstaller\DriverInstall.exe [X] ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 ALSysIO; C:\Users\Stephen\AppData\Local\Temp\ALSysIO64.sys [17416 2018-12-12] (Arthur Liberman) <==== ATTENTION R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-05-08] () R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-08-25] (Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-08-25] (Disc Soft Ltd) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [152688 2018-12-06] (Malwarebytes) S3 Hamachi; C:\WINDOWS\System32\drivers\Hamdrv.sys [45680 2017-06-29] (LogMeIn Inc.) R3 hvsocketcontrol; C:\WINDOWS\system32\drivers\hvsocketcontrol.sys [26624 2018-10-06] (Microsoft Corporation) R2 LMIInfo; C:\WINDOWS\system32\drivers\LMIInfo.sys [30432 2017-01-11] (LogMeIn, Inc.) S4 LMIRfsClientNP; no ImagePath S3 lunparser; C:\WINDOWS\System32\drivers\lunparser.sys [23040 2018-10-06] (Microsoft Corporation) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [198512 2018-12-06] (Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [126624 2018-12-12] (Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [72536 2018-12-12] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [261032 2018-12-12] (Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [113016 2018-12-12] (Malwarebytes) R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] () R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_54bd1f10ac116cd5\nvlddmkm.sys [20605496 2018-10-03] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31168 2018-03-14] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [59240 2017-12-15] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [65792 2018-10-02] (NVIDIA Corporation) S3 passthruparser; C:\WINDOWS\System32\drivers\passthruparser.sys [24064 2018-10-06] (Microsoft Corporation) S3 pcip; C:\WINDOWS\System32\drivers\pcip.sys [47616 2018-10-06] (Microsoft Corporation) S3 pvhdparser; C:\WINDOWS\System32\drivers\pvhdparser.sys [51712 2018-10-06] (Microsoft Corporation) S3 ramparser; C:\WINDOWS\System32\drivers\ramparser.sys [31744 2018-10-06] (Microsoft Corporation) R3 Synth3dVsp; C:\WINDOWS\System32\drivers\synth3dvsp.sys [103936 2018-10-06] (Microsoft Corporation) R1 VfpExt; C:\WINDOWS\System32\drivers\vfpext.sys [1248256 2018-11-07] (Microsoft Corporation) S3 vhdparser; C:\WINDOWS\System32\drivers\vhdparser.sys [34304 2018-10-06] (Microsoft Corporation) R3 vmsmp; C:\WINDOWS\System32\drivers\vmswitch.sys [1777152 2018-09-08] (Microsoft Corporation) R0 VMSNPXY; C:\WINDOWS\System32\drivers\VmsProxyHNic.sys [36768 2018-09-13] (Microsoft Corporation) R3 VMSNPXYMP; C:\WINDOWS\System32\drivers\VmsProxyHNic.sys [36768 2018-09-13] (Microsoft Corporation) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46680 2018-12-10] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [330936 2018-12-10] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [62136 2018-12-10] (Microsoft Corporation) S3 WsAudio_Device; C:\WINDOWS\system32\drivers\VirtualAudio.sys [31080 2015-02-27] (Wondershare) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) NETSVC: nvagent -> C:\Windows\System32\NvAgent.dll (Microsoft Corporation) NETSVC: HgClientService -> C:\Windows\system32\hgclientservice.dll (Microsoft Corporation) NETSVC: hns -> C:\Windows\System32\HostNetSvc.dll (Microsoft Corporation) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-12-12 11:40 - 2018-12-12 11:47 - 000143966 _____ C:\Users\Stephen\Downloads\Addition.txt 2018-12-12 11:39 - 2018-12-12 11:49 - 000039174 _____ C:\Users\Stephen\Downloads\FRST.txt 2018-12-12 11:38 - 2018-12-12 11:38 - 002417152 _____ (Farbar) C:\Users\Stephen\Downloads\FRST64 (3).exe 2018-12-12 09:28 - 2018-12-12 09:28 - 000000000 ___HD C:\OneDriveTemp 2018-12-12 09:26 - 2018-12-12 10:38 - 000113016 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2018-12-12 09:26 - 2018-12-12 09:26 - 000261032 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2018-12-12 09:26 - 2018-12-12 09:26 - 000126624 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2018-12-12 09:26 - 2018-12-12 09:26 - 000072536 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2018-12-11 19:28 - 2018-12-12 11:47 - 000000001 _____ C:\v8vwtgox53m8o0v 2018-12-11 19:26 - 2018-12-08 12:48 - 000034104 _____ C:\WINDOWS\system32\SyncAppvPublishingServer.exe 2018-12-11 19:26 - 2018-12-08 12:47 - 000645320 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2018-12-11 19:26 - 2018-12-08 12:41 - 000481880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2018-12-11 19:26 - 2018-12-08 12:40 - 001454648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2018-12-11 19:26 - 2018-12-08 12:23 - 002892288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2018-12-11 19:26 - 2018-12-08 12:22 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2018-12-11 19:26 - 2018-12-08 08:12 - 000272408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll 2018-12-11 19:26 - 2018-12-08 08:12 - 000269336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2018-12-11 19:26 - 2018-12-08 08:06 - 001017168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll 2018-12-11 19:26 - 2018-12-08 08:06 - 000709936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2018-12-11 19:26 - 2018-12-08 08:06 - 000433168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2018-12-11 19:26 - 2018-12-08 08:05 - 007520096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2018-12-11 19:26 - 2018-12-08 08:05 - 000793592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2018-12-11 19:26 - 2018-12-08 08:05 - 000171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2018-12-11 19:26 - 2018-12-08 08:04 - 002371296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2018-12-11 19:26 - 2018-12-08 08:04 - 001150312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2018-12-11 19:26 - 2018-12-08 08:04 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2018-12-11 19:26 - 2018-12-08 08:04 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2018-12-11 19:26 - 2018-12-08 08:04 - 000416024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2018-12-11 19:26 - 2018-12-08 08:04 - 000413176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2018-12-11 19:26 - 2018-12-08 08:04 - 000335672 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2018-12-11 19:26 - 2018-12-08 08:04 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2018-12-11 19:26 - 2018-12-08 07:47 - 000861744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll 2018-12-11 19:26 - 2018-12-08 07:46 - 002331480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2018-12-11 19:26 - 2018-12-08 07:46 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2018-12-11 19:26 - 2018-12-08 07:46 - 001397104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2018-12-11 19:26 - 2018-12-08 07:46 - 000457056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll 2018-12-11 19:26 - 2018-12-08 07:45 - 002307240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL 2018-12-11 19:26 - 2018-12-08 07:45 - 001379816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2018-12-11 19:26 - 2018-12-08 07:45 - 000129296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2018-12-11 19:26 - 2018-12-08 07:42 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2018-12-11 19:26 - 2018-12-08 07:38 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2018-12-11 19:26 - 2018-12-08 07:38 - 002739200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2018-12-11 19:26 - 2018-12-08 07:37 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2018-12-11 19:26 - 2018-12-08 07:37 - 001308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2018-12-11 19:26 - 2018-12-08 07:37 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2018-12-11 19:26 - 2018-12-08 07:37 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll 2018-12-11 19:26 - 2018-12-08 07:37 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbusr.sys 2018-12-11 19:26 - 2018-12-08 07:36 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2018-12-11 19:26 - 2018-12-08 07:36 - 003014144 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.exe 2018-12-11 19:26 - 2018-12-08 07:36 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2018-12-11 19:26 - 2018-12-08 07:36 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2018-12-11 19:26 - 2018-12-08 07:35 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2018-12-11 19:26 - 2018-12-08 07:35 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2018-12-11 19:26 - 2018-12-08 07:34 - 000374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys 2018-12-11 19:26 - 2018-12-08 07:33 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2018-12-11 19:26 - 2018-12-08 07:32 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2018-12-11 19:26 - 2018-12-08 07:30 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2018-12-11 19:26 - 2018-12-08 07:29 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2018-12-11 19:26 - 2018-12-08 07:28 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2018-12-11 19:26 - 2018-12-08 07:28 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2018-12-11 19:26 - 2018-12-08 07:27 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2018-12-11 19:26 - 2018-12-08 07:27 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2018-12-11 19:26 - 2018-12-08 07:25 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2018-12-11 19:26 - 2018-12-08 07:25 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2018-12-11 19:26 - 2018-12-08 07:25 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2018-12-11 19:26 - 2018-12-08 07:24 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2018-12-11 19:26 - 2018-11-09 06:00 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2018-12-11 19:26 - 2018-11-09 05:59 - 008623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2018-12-11 19:26 - 2018-11-09 05:56 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll 2018-12-11 19:26 - 2018-11-09 05:20 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2018-12-11 19:26 - 2018-11-09 05:18 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2018-12-11 19:26 - 2018-11-09 02:56 - 002300728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwp.exe 2018-12-11 19:26 - 2018-11-09 02:49 - 000565048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2018-12-11 19:26 - 2018-11-09 02:48 - 000745472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2018-12-11 19:26 - 2018-11-09 02:48 - 000375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2018-12-11 19:26 - 2018-11-09 02:21 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2018-12-11 19:26 - 2018-11-09 02:21 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys 2018-12-11 19:26 - 2018-11-09 02:20 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2018-12-11 19:26 - 2018-11-09 02:20 - 000399872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvctpSvc.dll 2018-12-11 19:26 - 2018-11-09 02:19 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2018-12-11 19:26 - 2018-11-09 02:18 - 001709568 _____ (Microsoft Corporation) C:\WINDOWS\system32\HostNetSvc.dll 2018-12-11 19:26 - 2018-11-09 02:18 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll 2018-12-11 19:26 - 2018-11-09 02:16 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll 2018-12-11 19:26 - 2018-11-09 02:16 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2018-12-11 19:26 - 2018-11-09 02:16 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2018-12-11 19:26 - 2018-11-09 02:07 - 002417976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2018-12-11 19:26 - 2018-11-09 02:07 - 001299704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2018-12-11 19:26 - 2018-11-09 01:46 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2018-12-11 19:26 - 2018-11-09 01:46 - 000721024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2018-12-11 19:26 - 2018-11-09 01:29 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2018-12-11 19:26 - 2018-11-09 01:29 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2018-12-11 19:26 - 2018-11-09 01:29 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2018-12-11 19:26 - 2018-11-09 01:25 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2018-12-11 19:26 - 2018-11-09 01:25 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 001786896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 001627656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 001422864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 001048712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 001038352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000954384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000830480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000825352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000750096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000670224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000652296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000495632 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000399880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000258064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVFileSystemMetadata.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000231440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe 2018-12-11 19:25 - 2018-12-08 12:47 - 000228368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamMap.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000201744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll 2018-12-11 19:25 - 2018-12-08 12:47 - 000180752 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe 2018-12-11 19:25 - 2018-12-08 12:47 - 000173072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe 2018-12-11 19:25 - 2018-12-08 12:46 - 000549760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2018-12-11 19:25 - 2018-12-08 12:43 - 000304144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys 2018-12-11 19:25 - 2018-12-08 12:42 - 004527800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2018-12-11 19:25 - 2018-12-08 12:42 - 001634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2018-12-11 19:25 - 2018-12-08 12:42 - 001616824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2018-12-11 19:25 - 2018-12-08 12:41 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL 2018-12-11 19:25 - 2018-12-08 12:39 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2018-12-11 19:25 - 2018-12-08 12:29 - 013572608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2018-12-11 19:25 - 2018-12-08 12:29 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2018-12-11 19:25 - 2018-12-08 12:28 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2018-12-11 19:25 - 2018-12-08 12:28 - 006586880 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2018-12-11 19:25 - 2018-12-08 12:28 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2018-12-11 19:25 - 2018-12-08 12:27 - 005657600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2018-12-11 19:25 - 2018-12-08 12:27 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.SecureAssessment.dll 2018-12-11 19:25 - 2018-12-08 12:27 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys 2018-12-11 19:25 - 2018-12-08 12:27 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll 2018-12-11 19:25 - 2018-12-08 12:27 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll 2018-12-11 19:25 - 2018-12-08 12:25 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2018-12-11 19:25 - 2018-12-08 12:25 - 011902976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2018-12-11 19:25 - 2018-12-08 12:23 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2018-12-11 19:25 - 2018-12-08 12:23 - 001856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2018-12-11 19:25 - 2018-12-08 12:23 - 001661440 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2018-12-11 19:25 - 2018-12-08 12:23 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2018-12-11 19:25 - 2018-12-08 12:23 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2018-12-11 19:25 - 2018-12-08 12:23 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll 2018-12-11 19:25 - 2018-12-08 12:22 - 001469952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2018-12-11 19:25 - 2018-12-08 12:22 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2018-12-11 19:25 - 2018-12-08 08:13 - 001040936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2018-12-11 19:25 - 2018-12-08 08:12 - 000092688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2018-12-11 19:25 - 2018-12-08 08:07 - 005625352 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2018-12-11 19:25 - 2018-12-08 08:07 - 001328632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2018-12-11 19:25 - 2018-12-08 08:07 - 001221632 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2018-12-11 19:25 - 2018-12-08 08:07 - 001063416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2018-12-11 19:25 - 2018-12-08 08:07 - 001030184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2018-12-11 19:25 - 2018-12-08 08:07 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2018-12-11 19:25 - 2018-12-08 08:07 - 000076280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2018-12-11 19:25 - 2018-12-08 08:06 - 000777512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2018-12-11 19:25 - 2018-12-08 08:06 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2018-12-11 19:25 - 2018-12-08 08:06 - 000491416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2018-12-11 19:25 - 2018-12-08 08:06 - 000249088 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2018-12-11 19:25 - 2018-12-08 08:05 - 007436216 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2018-12-11 19:25 - 2018-12-08 08:05 - 002822656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2018-12-11 19:25 - 2018-12-08 08:05 - 002463384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2018-12-11 19:25 - 2018-12-08 08:05 - 001935008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2018-12-11 19:25 - 2018-12-08 08:05 - 001209888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2018-12-11 19:25 - 2018-12-08 08:05 - 001018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys 2018-12-11 19:25 - 2018-12-08 08:05 - 000706040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2018-12-11 19:25 - 2018-12-08 08:05 - 000594224 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2018-12-11 19:25 - 2018-12-08 08:05 - 000421176 _____ (Microsoft Corporation) C:\WINDOWS\system32\xbgmengine.dll 2018-12-11 19:25 - 2018-12-08 08:05 - 000413920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2018-12-11 19:25 - 2018-12-08 08:05 - 000130312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll 2018-12-11 19:25 - 2018-12-08 08:05 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys 2018-12-11 19:25 - 2018-12-08 08:04 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2018-12-11 19:25 - 2018-12-08 08:04 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2018-12-11 19:25 - 2018-12-08 08:04 - 002590296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL 2018-12-11 19:25 - 2018-12-08 08:04 - 001943328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2018-12-11 19:25 - 2018-12-08 08:04 - 001457032 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2018-12-11 19:25 - 2018-12-08 08:04 - 001257672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2018-12-11 19:25 - 2018-12-08 08:04 - 001188512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2018-12-11 19:25 - 2018-12-08 08:04 - 001140480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2018-12-11 19:25 - 2018-12-08 08:04 - 000982912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2018-12-11 19:25 - 2018-12-08 08:04 - 000885760 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2018-12-11 19:25 - 2018-12-08 08:04 - 000375608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys 2018-12-11 19:25 - 2018-12-08 08:04 - 000268280 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2018-12-11 19:25 - 2018-12-08 08:04 - 000158624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll 2018-12-11 19:25 - 2018-12-08 08:04 - 000128824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2018-12-11 19:25 - 2018-12-08 08:04 - 000058168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys 2018-12-11 19:25 - 2018-12-08 08:04 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe 2018-12-11 19:25 - 2018-12-08 07:49 - 025855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2018-12-11 19:25 - 2018-12-08 07:47 - 000785760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2018-12-11 19:25 - 2018-12-08 07:46 - 000665224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2018-12-11 19:25 - 2018-12-08 07:46 - 000101192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll 2018-12-11 19:25 - 2018-12-08 07:45 - 006569040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2018-12-11 19:25 - 2018-12-08 07:45 - 006043496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2018-12-11 19:25 - 2018-12-08 07:45 - 004789952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2018-12-11 19:25 - 2018-12-08 07:45 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2018-12-11 19:25 - 2018-12-08 07:45 - 001620472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2018-12-11 19:25 - 2018-12-08 07:45 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2018-12-11 19:25 - 2018-12-08 07:45 - 000567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2018-12-11 19:25 - 2018-12-08 07:45 - 000356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2018-12-11 19:25 - 2018-12-08 07:42 - 022715392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2018-12-11 19:25 - 2018-12-08 07:41 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2018-12-11 19:25 - 2018-12-08 07:40 - 004710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2018-12-11 19:25 - 2018-12-08 07:40 - 004384768 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2018-12-11 19:25 - 2018-12-08 07:39 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll 2018-12-11 19:25 - 2018-12-08 07:38 - 022016000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2018-12-11 19:25 - 2018-12-08 07:38 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll 2018-12-11 19:25 - 2018-12-08 07:38 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2018-12-11 19:25 - 2018-12-08 07:38 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe 2018-12-11 19:25 - 2018-12-08 07:38 - 000129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsp.sys 2018-12-11 19:25 - 2018-12-08 07:38 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll 2018-12-11 19:25 - 2018-12-08 07:38 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys 2018-12-11 19:25 - 2018-12-08 07:38 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2018-12-11 19:25 - 2018-12-08 07:37 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2018-12-11 19:25 - 2018-12-08 07:37 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll 2018-12-11 19:25 - 2018-12-08 07:37 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll 2018-12-11 19:25 - 2018-12-08 07:37 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll 2018-12-11 19:25 - 2018-12-08 07:37 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll 2018-12-11 19:25 - 2018-12-08 07:37 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2018-12-11 19:25 - 2018-12-08 07:37 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2018-12-11 19:25 - 2018-12-08 07:36 - 007573504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2018-12-11 19:25 - 2018-12-08 07:36 - 003396608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2018-12-11 19:25 - 2018-12-08 07:36 - 003090432 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2018-12-11 19:25 - 2018-12-08 07:36 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll 2018-12-11 19:25 - 2018-12-08 07:36 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2018-12-11 19:25 - 2018-12-08 07:36 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2018-12-11 19:25 - 2018-12-08 07:36 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2018-12-11 19:25 - 2018-12-08 07:36 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2018-12-11 19:25 - 2018-12-08 07:36 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2018-12-11 19:25 - 2018-12-08 07:36 - 000153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2018-12-11 19:25 - 2018-12-08 07:36 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys 2018-12-11 19:25 - 2018-12-08 07:35 - 002126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2018-12-11 19:25 - 2018-12-08 07:35 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2018-12-11 19:25 - 2018-12-08 07:35 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll 2018-12-11 19:25 - 2018-12-08 07:35 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2018-12-11 19:25 - 2018-12-08 07:35 - 000578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.dll 2018-12-11 19:25 - 2018-12-08 07:34 - 002173440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2018-12-11 19:25 - 2018-12-08 07:34 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2018-12-11 19:25 - 2018-12-08 07:34 - 001023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2018-12-11 19:25 - 2018-12-08 07:34 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2018-12-11 19:25 - 2018-12-08 07:34 - 000693248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2018-12-11 19:25 - 2018-12-08 07:34 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2018-12-11 19:25 - 2018-12-08 07:34 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2018-12-11 19:25 - 2018-12-08 07:33 - 019405312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2018-12-11 19:25 - 2018-12-08 07:33 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2018-12-11 19:25 - 2018-12-08 07:33 - 001457152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2018-12-11 19:25 - 2018-12-08 07:33 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2018-12-11 19:25 - 2018-12-08 07:33 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2018-12-11 19:25 - 2018-12-08 07:33 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2018-12-11 19:25 - 2018-12-08 07:33 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2018-12-11 19:25 - 2018-12-08 07:32 - 001097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2018-12-11 19:25 - 2018-12-08 07:32 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2018-12-11 19:25 - 2018-12-08 07:32 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2018-12-11 19:25 - 2018-12-08 07:32 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2018-12-11 19:25 - 2018-12-08 07:32 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2018-12-11 19:25 - 2018-12-08 07:32 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2018-12-11 19:25 - 2018-12-08 07:30 - 002966528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2018-12-11 19:25 - 2018-12-08 07:30 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe 2018-12-11 19:25 - 2018-12-08 07:29 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2018-12-11 19:25 - 2018-12-08 07:29 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll 2018-12-11 19:25 - 2018-12-08 07:29 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll 2018-12-11 19:25 - 2018-12-08 07:28 - 005775872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2018-12-11 19:25 - 2018-12-08 07:28 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll 2018-12-11 19:25 - 2018-12-08 07:28 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2018-12-11 19:25 - 2018-12-08 07:28 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2018-12-11 19:25 - 2018-12-08 07:27 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2018-12-11 19:25 - 2018-12-08 07:27 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2018-12-11 19:25 - 2018-12-08 07:27 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2018-12-11 19:25 - 2018-12-08 07:27 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2018-12-11 19:25 - 2018-12-08 07:26 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll 2018-12-11 19:25 - 2018-12-08 07:26 - 000848384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2018-12-11 19:25 - 2018-12-08 07:25 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2018-12-11 19:25 - 2018-12-08 07:25 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2018-12-11 19:25 - 2018-12-08 07:25 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2018-12-11 19:25 - 2018-12-08 07:24 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2018-12-11 19:25 - 2018-12-08 07:24 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2018-12-11 19:25 - 2018-12-08 07:24 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2018-12-11 19:25 - 2018-12-08 06:16 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim 2018-12-11 19:25 - 2018-11-09 06:15 - 021388752 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2018-12-11 19:25 - 2018-11-09 05:58 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2018-12-11 19:25 - 2018-11-09 05:57 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2018-12-11 19:25 - 2018-11-09 05:57 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll 2018-12-11 19:25 - 2018-11-09 05:56 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2018-12-11 19:25 - 2018-11-09 05:56 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll 2018-12-11 19:25 - 2018-11-09 05:55 - 001254400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2018-12-11 19:25 - 2018-11-09 05:55 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2018-12-11 19:25 - 2018-11-09 05:54 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe 2018-12-11 19:25 - 2018-11-09 05:32 - 020383832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2018-12-11 19:25 - 2018-11-09 05:22 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2018-12-11 19:25 - 2018-11-09 05:20 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2018-12-11 19:25 - 2018-11-09 05:19 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2018-12-11 19:25 - 2018-11-09 05:18 - 000320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll 2018-12-11 19:25 - 2018-11-09 05:17 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2018-12-11 19:25 - 2018-11-09 02:56 - 001213472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2018-12-11 19:25 - 2018-11-09 02:49 - 000723416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2018-12-11 19:25 - 2018-11-09 02:49 - 000368656 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll 2018-12-11 19:25 - 2018-11-09 02:48 - 003179760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2018-12-11 19:25 - 2018-11-09 02:48 - 002719736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2018-12-11 19:25 - 2018-11-09 02:48 - 001613288 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2018-12-11 19:25 - 2018-11-09 02:48 - 000899920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2018-12-11 19:25 - 2018-11-09 02:48 - 000766704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2018-12-11 19:25 - 2018-11-09 02:47 - 002765344 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2018-12-11 19:25 - 2018-11-09 02:47 - 002571128 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2018-12-11 19:25 - 2018-11-09 02:47 - 002062392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2018-12-11 19:25 - 2018-11-09 02:47 - 001285432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2018-12-11 19:25 - 2018-11-09 02:47 - 000930616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2018-12-11 19:25 - 2018-11-09 02:47 - 000537912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2018-12-11 19:25 - 2018-11-09 02:22 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll 2018-12-11 19:25 - 2018-11-09 02:22 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpcivsp.sys 2018-12-11 19:25 - 2018-11-09 02:22 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll 2018-12-11 19:25 - 2018-11-09 02:21 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2018-12-11 19:25 - 2018-11-09 02:21 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wnv.sys 2018-12-11 19:25 - 2018-11-09 02:21 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2018-12-11 19:25 - 2018-11-09 02:21 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2018-12-11 19:25 - 2018-11-09 02:20 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2018-12-11 19:25 - 2018-11-09 02:20 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys 2018-12-11 19:25 - 2018-11-09 02:20 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2018-12-11 19:25 - 2018-11-09 02:19 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2018-12-11 19:25 - 2018-11-09 02:19 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2018-12-11 19:25 - 2018-11-09 02:18 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2018-12-11 19:25 - 2018-11-09 02:18 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2018-12-11 19:25 - 2018-11-09 02:18 - 000573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2018-12-11 19:25 - 2018-11-09 02:18 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2018-12-11 19:25 - 2018-11-09 02:17 - 002584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2018-12-11 19:25 - 2018-11-09 02:17 - 001069568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2018-12-11 19:25 - 2018-11-09 02:16 - 004939776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2018-12-11 19:25 - 2018-11-09 02:16 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2018-12-11 19:25 - 2018-11-09 02:15 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2018-12-11 19:25 - 2018-11-09 02:15 - 000933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2018-12-11 19:25 - 2018-11-09 02:15 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2018-12-11 19:25 - 2018-11-09 02:15 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2018-12-11 19:25 - 2018-11-09 01:48 - 000550728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2018-12-11 19:25 - 2018-11-09 01:47 - 000295224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll 2018-12-11 19:25 - 2018-11-09 01:46 - 002253184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2018-12-11 19:25 - 2018-11-09 01:46 - 002161008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2018-12-11 19:25 - 2018-11-09 01:46 - 000829960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2018-12-11 19:25 - 2018-11-09 01:46 - 000573504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2018-12-11 19:25 - 2018-11-09 01:31 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2018-12-11 19:25 - 2018-11-09 01:31 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2018-12-11 19:25 - 2018-11-09 01:30 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll 2018-12-11 19:25 - 2018-11-09 01:30 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll 2018-12-11 19:25 - 2018-11-09 01:29 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2018-12-11 19:25 - 2018-11-09 01:28 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2018-12-11 19:25 - 2018-11-09 01:28 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2018-12-11 19:25 - 2018-11-09 01:27 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2018-12-11 19:25 - 2018-11-09 01:26 - 004514816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2018-12-11 19:25 - 2018-11-09 01:26 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2018-12-11 19:25 - 2018-11-09 01:26 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2018-12-11 19:25 - 2018-11-09 01:26 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2018-12-11 19:25 - 2018-11-07 02:27 - 001248256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vfpext.sys 2018-12-11 19:25 - 2018-11-07 02:27 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\vfpctrl.exe 2018-12-11 19:25 - 2018-11-07 02:27 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\vfpapi.dll 2018-12-11 19:25 - 2018-05-20 18:20 - 000022936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hvsicontainerservice.dll 2018-12-10 21:42 - 2018-12-10 21:42 - 000282624 _____ (Complexicon) C:\Users\Stephen\Downloads\BunkerMoney.exe 2018-12-10 19:25 - 2018-12-10 19:25 - 007900208 _____ C:\Users\Stephen\Downloads\HONEYVIEW-SETUP.EXE 2018-12-09 19:20 - 2018-12-09 19:20 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\ImageGlass 2018-12-09 19:19 - 2018-12-09 19:19 - 013733295 _____ (Duong Dieu Phap ) C:\Users\Stephen\Downloads\ImageGlass_5.5.7.26.exe 2018-12-09 18:35 - 2018-12-10 20:26 - 000000000 ____D C:\Users\Stephen\Desktop\calendar 2018-12-08 20:37 - 2018-12-08 20:37 - 002417152 _____ (Farbar) C:\Users\Stephen\Downloads\FRST64 (2).exe 2018-12-08 20:35 - 2018-12-08 20:35 - 002417152 _____ (Farbar) C:\Users\Stephen\Downloads\FRST64.exe 2018-12-08 20:34 - 2018-12-12 11:49 - 000000000 ____D C:\FRST 2018-12-08 20:34 - 2018-12-08 20:34 - 002417152 _____ (Farbar) C:\Users\Stephen\Downloads\FRST64 (1).exe 2018-12-08 20:34 - 2018-12-08 20:34 - 002417152 _____ (Farbar) C:\Users\Stephen\Desktop\FRST64.exe 2018-12-08 20:34 - 2018-12-08 20:34 - 000002380 _____ C:\Users\Stephen\Downloads\Fixlog.txt 2018-12-07 20:06 - 2018-12-07 20:21 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\iMazing 2018-12-07 20:06 - 2018-12-07 20:06 - 000001861 _____ C:\Users\Public\Desktop\iMazing.lnk 2018-12-07 20:06 - 2018-12-07 20:06 - 000000000 ____D C:\Users\Stephen\AppData\Local\DigiDNA 2018-12-07 20:06 - 2018-12-07 20:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMazing 2018-12-07 20:06 - 2018-12-07 20:06 - 000000000 ____D C:\ProgramData\DigiDNA 2018-12-07 20:05 - 2018-12-07 20:05 - 000000000 ____D C:\Program Files\DigiDNA 2018-12-07 20:03 - 2018-12-07 20:05 - 098343640 _____ (DigiDNA ) C:\Users\Stephen\Downloads\iMazing2forWindows.exe 2018-12-07 19:56 - 2018-12-07 20:02 - 000000000 ____D C:\Users\Stephen\AppData\Local\DiskDrill 2018-12-07 19:56 - 2018-12-07 19:56 - 007799296 _____ C:\Users\Stephen\Downloads\disk-drill-win.msi 2018-12-07 19:56 - 2018-12-07 19:56 - 000000000 ____D C:\Program Files (x86)\CleverFiles 2018-12-07 18:33 - 2018-12-07 20:03 - 000000000 ____D C:\Program Files (x86)\ThinkSky 2018-12-07 18:33 - 2018-12-07 18:33 - 000000000 ____D C:\ProgramData\ThinkSky 2018-12-07 18:32 - 2018-12-07 18:33 - 068687664 _____ C:\Users\Stephen\Downloads\itools4_setup_4426.exe 2018-12-07 18:23 - 2018-12-07 18:28 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\WindSolutions 2018-12-07 18:23 - 2018-12-07 18:28 - 000000000 ____D C:\ProgramData\WindSolutions 2018-12-07 18:22 - 2018-12-07 18:22 - 008046792 _____ (WindSolutions) C:\Users\Stephen\Downloads\Install_CopyTransControlCenter.exe 2018-12-07 18:19 - 2014-04-24 20:43 - 021976509 _____ C:\Users\Stephen\Desktop\my MC 1.3.3.ipa 2018-12-07 17:58 - 2018-12-07 17:58 - 000077510 _____ C:\Users\Stephen\Downloads\Label_UK116386301_MU712204393GB.pdf 2018-12-07 11:47 - 2018-12-07 11:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2018-12-07 11:44 - 2018-12-07 11:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2018-12-07 11:44 - 2018-12-07 11:44 - 000000000 ____D C:\Program Files\iPod 2018-12-07 11:39 - 2018-12-07 11:39 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple 2018-12-07 11:39 - 2018-12-07 11:39 - 000000000 ____D C:\Program Files (x86)\Apple Software Update 2018-12-06 19:23 - 2018-12-06 19:23 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\Stephen\Downloads\rkill.exe 2018-12-06 19:23 - 2018-12-06 19:23 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\Stephen\Downloads\rkill (1).exe 2018-12-06 19:16 - 2018-12-06 19:17 - 000198512 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2018-12-03 17:39 - 2018-12-03 17:39 - 000002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk 2018-12-03 17:39 - 2018-12-03 17:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2018-12-03 17:37 - 2018-12-03 17:37 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2018-12-03 17:28 - 2018-12-03 17:28 - 000000000 ____D C:\Program Files\Microsoft Office 15 2018-12-03 17:27 - 2018-12-03 17:28 - 007692208 _____ (Microsoft Corporation) C:\Users\Stephen\Downloads\setupskypeforbusinessentryretail.x64.en-us_.exe 2018-12-03 16:33 - 2018-12-03 16:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2018-12-03 16:32 - 2018-12-03 16:32 - 000000000 ____D C:\Program Files\Microsoft Silverlight 2018-12-03 16:32 - 2018-12-03 16:32 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2018-12-02 16:17 - 2018-12-12 09:26 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2018-12-02 16:17 - 2018-12-02 17:23 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy 2018-12-02 16:17 - 2018-12-02 16:17 - 000001464 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2018-12-02 16:17 - 2018-12-02 16:17 - 000000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2018-12-02 16:17 - 2018-12-02 16:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2018-12-02 16:17 - 2018-02-06 19:04 - 000032168 _____ (Safer-Networking Ltd.) C:\WINDOWS\system32\sdnclean64.exe 2018-12-02 14:19 - 2018-12-02 14:21 - 000000000 ____D C:\Program Files (x86)\WDA 2018-12-02 14:19 - 2018-12-02 14:19 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\UpProVerified 2018-12-02 14:19 - 2018-12-02 14:19 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\Python 2018-12-02 14:18 - 2018-12-02 16:10 - 000000000 ____D C:\Program Files\Dazey 2018-12-02 14:18 - 2018-12-02 14:30 - 000000000 ____D C:\Users\Stephen\AppData\Local\William 2018-12-02 14:18 - 2018-12-02 14:28 - 000000000 ____D C:\Program Files\WebDiscoverBrowser 2018-12-02 14:17 - 2018-12-02 16:12 - 000000000 ___HD C:\Program Files (x86)\tumors 2018-12-02 14:17 - 2018-12-02 16:12 - 000000000 ____D C:\Program Files (x86)\Teardrops 2018-12-02 14:17 - 2018-12-02 16:10 - 000000000 ___HD C:\Program Files (x86)\Governer 2018-12-02 14:17 - 2018-12-02 16:10 - 000000000 ____D C:\Program Files (x86)\PC Speed Up 2018-12-02 14:17 - 2018-12-02 16:10 - 000000000 ____D C:\Program Files (x86)\kidd 2018-12-02 14:17 - 2018-12-02 14:20 - 000000000 ____D C:\ProgramData\HUDE 2018-12-02 14:17 - 2018-12-02 14:17 - 000004106 _____ C:\WINDOWS\System32\Tasks\inopportune 2018-12-02 14:17 - 2018-12-02 14:17 - 000003966 _____ C:\WINDOWS\System32\Tasks\inopportuneinopportune 2018-12-02 14:17 - 2018-12-02 14:17 - 000003386 _____ C:\WINDOWS\System32\Tasks\AGProxyCheck 2018-12-02 14:17 - 2018-12-02 14:17 - 000000012 _____ C:\WINDOWS\b38708626 2018-12-02 14:17 - 2018-12-02 14:17 - 000000000 ____D C:\Program Files (x86)\Porta 2018-12-02 14:16 - 2018-12-10 21:53 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\AGData 2018-12-02 14:16 - 2018-12-02 14:29 - 000000000 ____D C:\Program Files (x86)\AnonymizerGadget 2018-12-02 14:14 - 2018-12-02 14:14 - 000000000 ____D C:\Users\Stephen\AppData\Local\ISHelper 2018-12-02 14:11 - 2018-12-02 14:11 - 000000000 ____D C:\Users\Stephen\AppData\Local\AdvinstAnalytics 2018-12-02 14:11 - 2018-12-02 14:11 - 000000000 ____D C:\Program Files (x86)\Microleaves 2018-12-02 13:54 - 2018-12-02 13:54 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\iSkysoft 2018-12-02 13:54 - 2018-12-02 13:54 - 000000000 ____D C:\Users\Stephen\.cache 2018-12-02 13:54 - 2018-12-02 13:54 - 000000000 ____D C:\ProgramData\GraphicsType 2018-12-02 12:17 - 2018-12-02 12:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2018-11-28 13:09 - 2018-11-28 13:09 - 000051024 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2018-11-28 13:09 - 2018-11-28 13:09 - 000047792 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2018-11-28 13:09 - 2018-11-28 13:09 - 000047792 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2018-11-28 13:09 - 2018-11-28 13:09 - 000045752 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2018-11-22 19:44 - 2018-11-22 19:44 - 000000000 ____D C:\Users\Stephen\AppData\Local\OneDrive 2018-11-19 21:52 - 2018-11-01 11:45 - 001376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2018-11-19 21:52 - 2018-11-01 09:15 - 023861760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2018-11-19 21:52 - 2018-11-01 09:13 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2018-11-19 21:52 - 2018-11-01 06:53 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2018-11-19 21:52 - 2018-10-21 07:28 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2018-11-19 21:52 - 2018-10-21 07:20 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2018-11-19 21:51 - 2018-11-01 11:49 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2018-11-19 21:51 - 2018-11-01 11:30 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2018-11-19 21:51 - 2018-11-01 11:30 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll 2018-11-19 21:51 - 2018-11-01 11:29 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2018-11-19 21:51 - 2018-11-01 11:28 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll 2018-11-19 21:51 - 2018-11-01 11:27 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2018-11-19 21:51 - 2018-11-01 11:26 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe 2018-11-19 21:51 - 2018-11-01 11:26 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe 2018-11-19 21:51 - 2018-11-01 10:09 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2018-11-19 21:51 - 2018-11-01 09:56 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll 2018-11-19 21:51 - 2018-11-01 09:56 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll 2018-11-19 21:51 - 2018-11-01 09:53 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2018-11-19 21:51 - 2018-11-01 07:26 - 003291640 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2018-11-19 21:51 - 2018-11-01 07:26 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2018-11-19 21:51 - 2018-11-01 07:25 - 001784680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2018-11-19 21:51 - 2018-11-01 07:25 - 001288920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2018-11-19 21:51 - 2018-11-01 07:25 - 000713472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2018-11-19 21:51 - 2018-11-01 07:25 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll 2018-11-19 21:51 - 2018-11-01 07:03 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe 2018-11-19 21:51 - 2018-11-01 07:02 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll 2018-11-19 21:51 - 2018-11-01 07:02 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll 2018-11-19 21:51 - 2018-11-01 07:00 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2018-11-19 21:51 - 2018-11-01 07:00 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2018-11-19 21:51 - 2018-11-01 06:59 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2018-11-19 21:51 - 2018-11-01 06:59 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2018-11-19 21:51 - 2018-11-01 06:59 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2018-11-19 21:51 - 2018-11-01 06:59 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll 2018-11-19 21:51 - 2018-11-01 06:59 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll 2018-11-19 21:51 - 2018-11-01 06:58 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2018-11-19 21:51 - 2018-11-01 06:58 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2018-11-19 21:51 - 2018-11-01 06:57 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2018-11-19 21:51 - 2018-11-01 06:57 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2018-11-19 21:51 - 2018-11-01 06:57 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2018-11-19 21:51 - 2018-11-01 06:57 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2018-11-19 21:51 - 2018-11-01 06:57 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2018-11-19 21:51 - 2018-11-01 06:56 - 002929664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2018-11-19 21:51 - 2018-11-01 06:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2018-11-19 21:51 - 2018-11-01 06:56 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2018-11-19 21:51 - 2018-11-01 06:54 - 001679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2018-11-19 21:51 - 2018-11-01 06:54 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2018-11-19 21:51 - 2018-11-01 06:54 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2018-11-19 21:51 - 2018-11-01 06:53 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2018-11-19 21:51 - 2018-11-01 06:53 - 001373696 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2018-11-19 21:51 - 2018-11-01 06:53 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2018-11-19 21:51 - 2018-11-01 04:48 - 002478872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2018-11-19 21:51 - 2018-11-01 04:48 - 000880248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2018-11-19 21:51 - 2018-11-01 04:48 - 000384520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll 2018-11-19 21:51 - 2018-11-01 04:47 - 001020064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2018-11-19 21:51 - 2018-11-01 04:47 - 000581600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2018-11-19 21:51 - 2018-11-01 04:33 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2018-11-19 21:51 - 2018-11-01 04:30 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2018-11-19 21:51 - 2018-11-01 04:29 - 001862656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll 2018-11-19 21:51 - 2018-11-01 04:29 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2018-11-19 21:51 - 2018-11-01 04:28 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2018-11-19 21:51 - 2018-11-01 04:27 - 001627648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2018-11-19 21:51 - 2018-11-01 04:27 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2018-11-19 21:51 - 2018-10-21 13:04 - 002267448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2018-11-19 21:51 - 2018-10-21 13:00 - 001639560 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2018-11-19 21:51 - 2018-10-21 13:00 - 001516120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2018-11-19 21:51 - 2018-10-21 13:00 - 000790416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2018-11-19 21:51 - 2018-10-21 13:00 - 000396304 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2018-11-19 21:51 - 2018-10-21 12:59 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll 2018-11-19 21:51 - 2018-10-21 12:59 - 000236728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2018-11-19 21:51 - 2018-10-21 12:46 - 004393472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2018-11-19 21:51 - 2018-10-21 12:45 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2018-11-19 21:51 - 2018-10-21 12:44 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe 2018-11-19 21:51 - 2018-10-21 12:44 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll 2018-11-19 21:51 - 2018-10-21 12:43 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll 2018-11-19 21:51 - 2018-10-21 12:43 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll 2018-11-19 21:51 - 2018-10-21 12:43 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll 2018-11-19 21:51 - 2018-10-21 12:42 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2018-11-19 21:51 - 2018-10-21 12:42 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2018-11-19 21:51 - 2018-10-21 12:42 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll 2018-11-19 21:51 - 2018-10-21 12:42 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2018-11-19 21:51 - 2018-10-21 12:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2018-11-19 21:51 - 2018-10-21 11:41 - 001540408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2018-11-19 21:51 - 2018-10-21 11:38 - 001322376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2018-11-19 21:51 - 2018-10-21 11:38 - 000662312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2018-11-19 21:51 - 2018-10-21 11:38 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll 2018-11-19 21:51 - 2018-10-21 11:38 - 000221216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll 2018-11-19 21:51 - 2018-10-21 11:37 - 001626656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2018-11-19 21:51 - 2018-10-21 11:28 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll 2018-11-19 21:51 - 2018-10-21 11:23 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2018-11-19 21:51 - 2018-10-21 11:23 - 000523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll 2018-11-19 21:51 - 2018-10-21 11:22 - 002405888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll 2018-11-19 21:51 - 2018-10-21 11:22 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll 2018-11-19 21:51 - 2018-10-21 09:29 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll 2018-11-19 21:51 - 2018-10-21 08:44 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll 2018-11-19 21:51 - 2018-10-21 07:46 - 000717112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2018-11-19 21:51 - 2018-10-21 07:46 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2018-11-19 21:51 - 2018-10-21 07:46 - 000560136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2018-11-19 21:51 - 2018-10-21 07:46 - 000497864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll 2018-11-19 21:51 - 2018-10-21 07:45 - 003283512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2018-11-19 21:51 - 2018-10-21 07:45 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2018-11-19 21:51 - 2018-10-21 07:45 - 000607136 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2018-11-19 21:51 - 2018-10-21 07:45 - 000185120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2018-11-19 21:51 - 2018-10-21 07:45 - 000175624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2018-11-19 21:51 - 2018-10-21 07:45 - 000139792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2018-11-19 21:51 - 2018-10-21 07:45 - 000058088 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2018-11-19 21:51 - 2018-10-21 07:21 - 001589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2018-11-19 21:51 - 2018-10-21 07:21 - 000123424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2018-11-19 21:51 - 2018-10-21 07:20 - 000424000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll 2018-11-19 21:51 - 2018-10-21 07:20 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmusrv.dll 2018-11-19 21:51 - 2018-10-21 07:20 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll 2018-11-19 21:51 - 2018-10-21 07:20 - 000141312 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe 2018-11-19 21:51 - 2018-10-21 07:19 - 002487088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2018-11-19 21:51 - 2018-10-21 07:19 - 001130768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2018-11-19 21:51 - 2018-10-21 07:19 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2018-11-19 21:51 - 2018-10-21 07:19 - 000505616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2018-11-19 21:51 - 2018-10-21 07:19 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2018-11-19 21:51 - 2018-10-21 07:19 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2018-11-19 21:51 - 2018-10-21 07:19 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsmb.dll 2018-11-19 21:51 - 2018-10-21 07:19 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2018-11-19 21:51 - 2018-10-21 07:19 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll 2018-11-19 21:51 - 2018-10-21 07:19 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2018-11-19 21:51 - 2018-10-21 07:19 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe 2018-11-19 21:51 - 2018-10-21 07:19 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcpAppSvc.dll 2018-11-19 21:51 - 2018-10-21 07:19 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhf.sys 2018-11-19 21:51 - 2018-10-21 07:19 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2018-11-19 21:51 - 2018-10-21 07:18 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2018-11-19 21:51 - 2018-10-21 07:18 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll 2018-11-19 21:51 - 2018-10-21 07:18 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll 2018-11-19 21:51 - 2018-10-21 07:18 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll 2018-11-19 21:51 - 2018-10-21 07:18 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll 2018-11-19 21:51 - 2018-10-21 07:18 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll 2018-11-19 21:51 - 2018-10-21 07:17 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll 2018-11-19 21:51 - 2018-10-21 07:17 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2018-11-19 21:51 - 2018-10-21 07:17 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2018-11-19 21:51 - 2018-10-21 07:17 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcp.dll 2018-11-19 21:51 - 2018-10-21 07:17 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2018-11-19 21:51 - 2018-10-21 07:16 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2018-11-19 21:51 - 2018-10-21 07:16 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2018-11-19 21:51 - 2018-10-21 07:15 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2018-11-19 21:51 - 2018-10-21 07:15 - 000743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintRenderAPIHost.DLL 2018-11-19 21:51 - 2018-10-21 07:15 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2018-11-19 21:51 - 2018-10-21 07:14 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2018-11-19 21:51 - 2018-10-21 07:14 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2018-11-19 21:51 - 2018-10-21 07:14 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2018-11-19 21:51 - 2018-10-21 07:14 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2018-11-19 21:51 - 2018-10-21 07:09 - 013873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2018-11-19 21:51 - 2018-10-21 07:02 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll 2018-11-19 21:51 - 2018-10-21 07:01 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2018-11-19 21:51 - 2018-10-21 07:01 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll 2018-11-19 21:51 - 2018-10-21 07:00 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll 2018-11-19 21:51 - 2018-10-21 06:59 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2018-11-19 21:51 - 2018-10-21 06:58 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll 2018-11-19 21:51 - 2018-10-21 06:58 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2018-11-19 21:51 - 2018-10-21 06:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2018-11-19 21:51 - 2018-10-21 06:57 - 002611200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2018-11-19 21:51 - 2018-10-21 05:59 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls 2018-11-19 21:51 - 2018-10-21 05:59 - 000806320 _____ C:\WINDOWS\system32\locale.nls 2018-11-19 21:51 - 2018-04-28 04:02 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2018-11-17 11:24 - 2018-11-17 11:24 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 14.lnk 2018-11-16 20:57 - 2018-12-07 20:46 - 000000000 ____D C:\Program Files\rempl 2018-11-12 21:44 - 2018-11-12 21:45 - 029606289 _____ C:\Users\Stephen\Downloads\Premier_League_1237258322.rar ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-12-12 11:41 - 2018-04-11 23:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-12-12 11:40 - 2018-04-11 23:36 - 000000000 ____D C:\WINDOWS\INF 2018-12-12 11:36 - 2017-09-28 21:55 - 000000000 ____D C:\Users\Stephen\AppData\Local\680018B8-5156-4145-9F6D-A1566E9970DF.aplzod 2018-12-12 11:23 - 2018-05-18 20:20 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-12-12 09:34 - 2018-04-11 23:38 - 000000000 ___HD C:\Program Files\WindowsApps 2018-12-12 09:34 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-12-12 09:33 - 2017-08-25 23:59 - 000000000 ____D C:\Users\Stephen\AppData\Local\Adobe 2018-12-12 09:32 - 2018-05-18 20:32 - 000838564 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-12-12 09:32 - 2017-08-25 23:44 - 000000000 ____D C:\WINDOWS\system32\MRT 2018-12-12 09:30 - 2017-09-15 19:32 - 000000000 ____D C:\Users\Stephen\AppData\Local\WarThunder 2018-12-12 09:30 - 2017-08-25 23:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2018-12-12 09:30 - 2017-08-25 23:44 - 137260640 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2018-12-12 09:29 - 2018-08-31 13:36 - 000000000 ____D C:\Users\Stephen\AppData\Local\LogMeIn Hamachi 2018-12-12 09:29 - 2017-11-04 13:49 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\.ACEStream 2018-12-12 09:29 - 2017-08-26 00:57 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\Origin 2018-12-12 09:29 - 2017-08-26 00:56 - 000000000 ____D C:\Users\Stephen\AppData\Local\Ubisoft Game Launcher 2018-12-12 09:29 - 2017-08-26 00:04 - 000000000 ___RD C:\Users\Stephen\Dropbox 2018-12-12 09:29 - 2017-03-18 21:03 - 000000202 _____ C:\WINDOWS\win.ini 2018-12-12 09:28 - 2018-03-30 17:28 - 000000000 ___RD C:\Users\Stephen\Google Drive 2018-12-12 09:28 - 2017-08-26 01:06 - 000000000 ____D C:\Program Files (x86)\Origin Games 2018-12-12 09:28 - 2017-08-26 00:56 - 000000000 ____D C:\ProgramData\Origin 2018-12-12 09:28 - 2017-08-26 00:56 - 000000000 ____D C:\Program Files (x86)\Steam 2018-12-12 09:28 - 2017-08-25 23:19 - 000000000 ___RD C:\Users\Stephen\OneDrive 2018-12-12 09:27 - 2017-12-08 20:54 - 000000000 ___RD C:\Users\Stephen\3D Objects 2018-12-12 09:27 - 2017-08-25 23:21 - 000000000 ____D C:\ProgramData\NVIDIA 2018-12-12 09:27 - 2017-08-25 23:17 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-12-12 09:26 - 2018-10-07 13:06 - 000000438 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2018-12-12 09:26 - 2018-05-18 20:20 - 005108648 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-12-12 09:26 - 2017-08-26 01:08 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2018-12-12 09:26 - 2017-08-25 23:27 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk 2018-12-12 09:26 - 2017-08-25 23:26 - 000000000 ____D C:\ProgramData\LogMeIn 2018-12-12 09:25 - 2018-10-07 13:07 - 000001134 _____ C:\WINDOWS\system32\config\VSMIDK 2018-12-12 09:25 - 2018-05-18 20:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-12-11 19:32 - 2018-04-11 21:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2018-12-11 19:31 - 2018-10-06 18:03 - 000000000 ____D C:\Program Files\Hyper-V 2018-12-11 19:31 - 2018-04-11 23:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2018-12-11 19:31 - 2018-04-11 23:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2018-12-11 19:31 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\TextInput 2018-12-11 19:31 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\ShellComponents 2018-12-11 19:31 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\bcastdvr 2018-12-11 19:28 - 2018-04-11 23:30 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-12-11 18:57 - 2017-08-25 23:46 - 000592616 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2018-12-10 22:19 - 2017-08-26 00:00 - 000002244 ____H C:\Users\Stephen\Documents\Default.rdp 2018-12-10 22:16 - 2017-08-26 00:44 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\TS3Client 2018-12-10 21:44 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\system32\FxsTmp 2018-12-10 20:49 - 2017-10-04 22:00 - 000000000 ____D C:\Users\Stephen\AppData\Local\PlexMediaPlayer 2018-12-10 20:11 - 2017-09-16 19:34 - 000000000 ____D C:\Users\Stephen\AppData\Local\CrashDumps 2018-12-10 19:29 - 2017-12-08 20:47 - 000000000 ____D C:\Users\Stephen\AppData\Local\Packages 2018-12-10 19:12 - 2018-03-01 21:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2018-12-09 19:32 - 2018-02-18 13:26 - 000000000 ____D C:\Users\Stephen\AppData\Local\PlaceholderTileLogoFolder 2018-12-09 19:29 - 2018-06-14 15:39 - 000000000 ____D C:\ProgramData\Packages 2018-12-09 19:18 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\system32\NDF 2018-12-08 21:12 - 2017-08-25 23:17 - 000000000 ____D C:\Users\Stephen\AppData\Local\VirtualStore 2018-12-08 20:39 - 2018-02-21 20:26 - 000000000 ____D C:\Users\Stephen\AppData\LocalLow\Temp 2018-12-08 20:30 - 2018-05-18 20:31 - 000000000 ____D C:\Users\Stephen\AppData\Local\D3DSCache 2018-12-08 20:23 - 2017-08-26 00:01 - 000000000 ____D C:\Users\Stephen\Documents\BeamNG.drive 2018-12-07 16:46 - 2017-08-31 20:28 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\vlc 2018-12-07 16:26 - 2018-05-18 20:23 - 000000000 ____D C:\Users\Stephen 2018-12-07 16:26 - 2017-08-27 20:39 - 000000000 ____D C:\Users\Stephen\AppData\Local\Apple Inc 2018-12-07 11:44 - 2017-08-26 01:16 - 000000000 ____D C:\Program Files\iTunes 2018-12-07 11:39 - 2017-08-26 01:16 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2018-12-06 19:16 - 2018-10-22 18:34 - 000152688 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2018-12-06 19:04 - 2017-08-26 01:38 - 000000000 ____D C:\Program Files (x86)\iSkysoft 2018-12-06 19:02 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\system32\Macromed 2018-12-06 19:02 - 2017-08-26 01:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iSkysoft 2018-12-06 19:01 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2018-12-06 18:59 - 2017-10-29 12:49 - 000000000 ____D C:\Users\Stephen\AppData\Local\NVIDIA 2018-12-06 18:54 - 2017-08-26 00:57 - 000000000 ____D C:\Program Files (x86)\Origin 2018-12-03 17:39 - 2017-08-25 23:46 - 000000000 ____D C:\Program Files\Microsoft Office 2018-12-03 17:38 - 2018-04-11 23:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2018-12-02 16:40 - 2017-08-26 01:38 - 000000000 ____D C:\Users\Public\Documents\iSkysoft 2018-12-02 16:22 - 2017-12-08 22:43 - 000002377 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-12-02 16:20 - 2017-08-25 23:26 - 000000000 ____D C:\WINDOWS\system32\appmgmt 2018-12-02 13:55 - 2017-08-26 01:38 - 000000000 ____D C:\ProgramData\iSkysoft 2018-12-02 13:54 - 2017-08-26 01:39 - 000000000 ____D C:\Users\Stephen\AppData\Local\iSkysoft 2018-12-02 13:30 - 2017-08-26 01:38 - 000000000 ____D C:\ProgramData\iSkysoft Video Converter 2018-12-02 12:18 - 2017-08-26 00:06 - 000000000 ____D C:\Program Files (x86)\Dropbox 2018-12-02 12:11 - 2018-05-18 20:28 - 000003364 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1976242850-1873277439-2250288598-1001 2018-12-02 12:11 - 2018-05-18 20:23 - 000002409 _____ C:\Users\Stephen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-12-01 04:01 - 2018-04-11 23:41 - 000835688 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2018-12-01 04:01 - 2018-04-11 23:41 - 000179808 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2018-11-27 20:15 - 2018-04-24 22:00 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\Emby-Theater 2018-11-27 20:14 - 2018-04-24 22:00 - 000000000 ____D C:\Users\Stephen\AppData\Roaming\Emby-InstallLogs 2018-11-23 17:04 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2018-11-19 23:12 - 2018-04-11 23:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2018-11-19 23:12 - 2018-04-11 23:38 - 000000000 ___SD C:\WINDOWS\system32\F12 2018-11-19 23:12 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2018-11-19 23:12 - 2018-04-11 23:38 - 000000000 ____D C:\WINDOWS\ShellExperiences Some zero byte size files/folders: ========================== C:\Windows\SysWOW64\lastpass_1337.exe ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2018-05-18 20:20 ==================== End of FRST.txt ============================ Addition.txt Link to post Share on other sites More sharing options...
nasdaq Posted December 12, 2018 ID:1286617 Share Posted December 12, 2018 Hi, Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === If the problem persists it could be a Syncing issue. You are probably Syncing Chrome with other devices? To remove it reset the Sync in Chrome. Read this article and proceed. Chrome Secure Preferences detection always comes backhttps://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ <<<>>> Let me know of any remaining issues. fixlist.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 30, 2018 Root Admin ID:1289822 Share Posted December 30, 2018 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts