kingkervin Posted July 15, 2019 ID:1322865 Share Posted July 15, 2019 I downloaded and scanned with Farbar Recovery Scan Tool, below are FRST.txt and Additon.txt If I need to do more, let me know. FRST.TXT Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13-07-2019 Ran by chief (administrator) on DESKTOP-MTI7T1E (Micro-Star International Co., Ltd. GE72VR 6RF) (15-07-2019 12:33:27) Running from C:\Users\chief\Downloads Loaded Profiles: chief (Available Profiles: chief & Administrator) Platform: Windows 10 Home Version 1809 17763.615 (X64) Language: English (United States) Default browser: Chrome Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19051.16210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19061.410.0_x64__8wekyb3d8bbwe\YourPhone.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_c4f600ffe34acc7b\igfxCUIService.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_c4f600ffe34acc7b\igfxEM.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_c4f600ffe34acc7b\IntelCpHDCPSvc.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_c4f600ffe34acc7b\IntelCpHeciSvc.exe (Intel(R) Driver & Support Assistant -> Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe (Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe (Intel(R) Software Development Products -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_10d045798a3d667e\aesm_service.exe (Intel(R) Trusted Connect Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> ) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\resources\app\node_modules.asar.unpacked\node-pty\build\Release\winpty-agent.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\Code.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\Code.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\Code.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\Code.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\Code.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\Code.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\Code.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\Code.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\chief\AppData\Local\Programs\Microsoft VS Code\resources\app\out\vs\workbench\services\files\node\watcher\win32\CodeHelper.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11905.1001.4.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1906.3-0\MsMpEng.exe (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Dragon Center\MSI_ActiveX_Service.exe (Micro-Star International Co., Ltd.) [File not signed] C:\Program Files (x86)\SCM\MSIService.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Open Source Developer, Hugh Bailey -> ) C:\Program Files (x86)\obs-studio\bin\64bit\obs64.exe (Rivet Networks LLC -> CloudBees, Inc.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe (Rivet Networks LLC -> CloudBees, Inc.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendSoftAP.exe (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtility.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPHelper.exe (TunnelBear -> TunnelBear) C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe (Visualware Inc -> ) C:\Program Files (x86)\Visualware BCS\NetQCheckHTML5Agent.exe (Visualware Inc. -> ) C:\Program Files (x86)\Visualware BCS\bcs.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9240512 2017-12-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [Nahimic2UILauncher] => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [709816 2017-05-19] (A-Volute -> Nahimic) HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [301848 2017-06-08] (Micro-Star International CO., LTD. -> ) [File not signed] HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18630280 2018-05-07] (Logitech Inc -> Logitech Inc.) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [126712 2018-10-18] (Intel(R) Driver & Support Assistant -> Intel) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-21-1945363360-1039989498-3971189972-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [911752 2019-06-19] (Nota Inc. -> Nota Inc.) HKU\S-1-5-21-1945363360-1039989498-3971189972-1001\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23793744 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1945363360-1039989498-3971189972-1001\...\Run: [utweb] => "C:\Users\chief\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED HKU\S-1-5-21-1945363360-1039989498-3971189972-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize HKU\S-1-5-21-1945363360-1039989498-3971189972-1001\...\Run: [EpicGamesLauncher] => "C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent HKU\S-1-5-21-1945363360-1039989498-3971189972-1001\...\Run: [Discord] => C:\Users\chief\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.) HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com) HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\75.0.3770.100\Installer\chrmstp.exe [2019-06-19] (Google LLC -> Google LLC) Startup: C:\Users\chief\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2019-07-11] ShortcutTarget: Send to OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {021B610B-69F2-454C-9659-B392F8842155} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [648504 2019-06-18] (NVIDIA Corporation -> NVIDIA Corporation) Task: {04115263-FBE0-4F03-B520-F577C1FFC442} - System32\Tasks\Nahimic2UILauncherRun => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [709816 2017-05-19] (A-Volute -> Nahimic) Task: {057D1023-FC3B-4A9C-AB81-CE544828642D} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [6785448 2019-06-19] (Nota Inc. -> Nota Inc.) Task: {074806C7-B98B-4FF5-B3C0-182C60B6AFAD} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs" Task: {07C7AB55-E039-4D6C-89BA-4F642E9706E4} - System32\Tasks\Adobe Uninstaller => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe Task: {0941C152-EA26-4CBB-B9F4-C5F635CFB5E3} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation) Task: {200E67F7-BAFD-4EED-B66B-3D0F4EB57862} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Task: {2705A7F8-F261-4A7D-A96B-32C2CCF93C71} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130480 2019-06-18] (NVIDIA Corporation -> NVIDIA Corporation) Task: {28BB9473-3DB9-4CE8-8F71-64D4F1C141C9} - System32\Tasks\MSI_Help_Desk_Agent => C:\Program Files (x86)\MSI\Help Desk\MSI Update Agent.exe [431384 2017-06-19] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) [File not signed] Task: {317CAB1C-0CB6-4E65-91EC-56D5DAACD6CD} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1526352 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {3C58C830-59CF-4B2B-947C-6980152FBBF7} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130480 2019-06-18] (NVIDIA Corporation -> NVIDIA Corporation) Task: {3EC165BF-5BC0-4B78-80CF-453BBB215919} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130480 2019-06-18] (NVIDIA Corporation -> NVIDIA Corporation) Task: {405FDEE1-CC8E-4981-9ED6-77902156F182} - System32\Tasks\jackma => C:\Users\chief\Downloads\jackma.mp4 [21842325 2019-07-01] () [File not signed] Task: {4E9D2B35-F80F-40C1-8B31-AD2F42180E22} - System32\Tasks\Nahimic2Svc32Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe [2059960 2017-05-19] (A-Volute -> ) Task: {537A0AA9-E2BA-41D9-AD30-A4ECFA6C8501} - System32\Tasks\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe Task: {5433A5A0-BE37-4914-95E9-E91DF221B656} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-07-09] (Adobe Inc. -> Adobe) Task: {574CB772-C0D3-491B-8461-AEC8CBC46E95} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe [87120 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {58422179-C6B1-40BD-9E86-5B2728DA648E} - System32\Tasks\jeff => C:\Users\chief\Downloads\jeffbezos.mp4 [51898517 2019-07-01] () [File not signed] Task: {5A2D6600-2D81-4D99-A6BF-E99EDF5DDAAC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2409040 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {653AF6B0-BF66-4651-B40B-5887C7761022} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_223_Plugin.exe [1457208 2019-07-09] (Adobe Inc. -> Adobe) Task: {66B15F0F-0B37-404A-8513-3F384C4ADE3E} - System32\Tasks\Nahimic2Svc64Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe [513720 2017-05-19] (A-Volute -> ) Task: {7D8FE0F6-700A-440F-AA0C-09CF62935875} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe Task: {7FD1EAC9-56F3-4F54-8539-8E5669D8D58C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-24] (Google Inc -> Google Inc.) Task: {8607CCFF-04B2-4D20-9003-2C0E6F597499} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation) Task: {90EF6049-D7AC-40F9-81CC-2CEA820AE601} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23949600 2019-05-30] (Microsoft Corporation -> Microsoft Corporation) Task: {94A45C1A-6614-4121-8069-4B5F4705E835} - System32\Tasks\AdobeGCInvoker-1.0-DESKTOP-MTI7T1E-chief => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {98B825A5-AF8E-4B10-8E0B-185D76AE33C3} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [897008 2019-06-18] (NVIDIA Corporation -> NVIDIA Corporation) Task: {9DD136FB-82C3-4964-B6B2-2F47AA6E5439} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130480 2019-06-18] (NVIDIA Corporation -> NVIDIA Corporation) Task: {A2E7DBE9-790D-44C1-96A1-7851279C0000} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [909112 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation) Task: {A41B6C0C-57FC-474B-A1D4-9176DECCDEBC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-24] (Google Inc -> Google Inc.) Task: {A67300DF-EBD6-44D5-A2A9-B82F13AA323C} - System32\Tasks\MSI_Dragon Center => C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe [6455064 2017-11-21] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) [File not signed] Task: {AC7D3FA6-5F73-4326-9963-98267707A3EB} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23949600 2019-05-30] (Microsoft Corporation -> Microsoft Corporation) Task: {AE6DF7AE-13B6-491F-883E-EBAFB1B299C2} - System32\Tasks\jonjones => C:\Users\chief\Downloads\jonjones.mp4 [3507194 2019-07-01] () [File not signed] Task: {B5207456-BA58-4427-8B02-E3E6E9E61952} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136 2019-03-06] (NVIDIA Corporation -> NVIDIA Corporation) Task: {C3CD8240-AAB2-4498-91EB-3E9B38262B02} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [6785448 2019-06-19] (Nota Inc. -> Nota Inc.) Task: {C9804829-EDFC-4AED-A151-6018B24A9EAE} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136 2019-03-06] (NVIDIA Corporation -> NVIDIA Corporation) Task: {DB092EFC-2A00-4978-966D-086019C4FDEB} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [753448 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {E5E88CD9-434E-4698-8F57-191076184370} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1526352 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {F07E3576-F8A5-4677-930F-B7C51837A800} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3788144 2019-06-18] (NVIDIA Corporation -> NVIDIA Corporation) Task: {F587691F-1EB3-4B3A-817A-16096F32A8BB} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [897008 2019-06-18] (NVIDIA Corporation -> NVIDIA Corporation) Task: {F5FB848D-5B7B-4DDF-9DC3-AF2CFE42E1A7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2409040 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {FDE13B1A-9361-4CDC-85F4-67C7ADC5F747} - System32\Tasks\Dragon_Center_updater => C:\ProgramData\MSI\Dragon [Argument = Center\DragonCenter_Updater.exe DragonCenter] (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76 Tcpip\..\Interfaces\{4b054f18-1c33-4616-8adb-1b400d80b77d}: [DhcpNameServer] 75.75.75.75 75.75.76.76 Tcpip\..\Interfaces\{9275e28a-5ae2-4c44-b146-1dfe652f362f}: [DhcpNameServer] 172.18.12.1 Tcpip\..\Interfaces\{d30fc5dc-0410-4d7c-b3ed-c8b6d59173a8}: [DhcpNameServer] 75.75.75.75 75.75.76.76 Internet Explorer: ================== HKU\S-1-5-21-1945363360-1039989498-3971189972-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10454__190415 BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-06-19] (Microsoft Corporation -> Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-02-09] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-02-09] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2019-01-18] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-02-09] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-02-09] (Oracle America, Inc. -> Oracle Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF DefaultProfile: v14uaNNn.default FF ProfilePath: C:\Users\chief\AppData\Roaming\Mozilla\Firefox\Profiles\v14uaNNn.default [2019-05-29] FF Extension: (Adblock Plus - free ad blocker) - C:\Users\chief\AppData\Roaming\Mozilla\Firefox\Profiles\v14uaNNn.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-05-14] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_223.dll [2019-07-09] (Adobe Inc. -> ) FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-02-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-02-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN -> VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_223.dll [2019-07-09] (Adobe Inc. -> ) FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-02-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-02-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-01-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-14] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-14] (Google Inc -> Google LLC) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-05-02] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Profile 1 CHR Profile: C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1 [2019-07-15] CHR Extension: (Slides) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-04-30] CHR Extension: (BetterTTV) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2019-07-08] CHR Extension: (Docs) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2019-04-30] CHR Extension: (Google Drive) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-04-30] CHR Extension: (YouTube) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-04-30] CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-04-30] CHR Extension: (Sheets) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-04-30] CHR Extension: (Google Docs Offline) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-05-01] CHR Extension: (Chrome Web Store Payments) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-04-30] CHR Extension: (Gmail) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-30] CHR Extension: (Chrome Media Router) - C:\Users\chief\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-06-20] CHR Profile: C:\Users\chief\AppData\Local\Google\Chrome\User Data\System Profile [2019-06-20] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AESMService; C:\WINDOWS\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_10d045798a3d667e\aesm_service.exe [3367272 2018-11-28] (Intel(R) Software Development Products -> Intel Corporation) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3117648 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2888272 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9662544 2019-05-30] (Microsoft Corporation -> Microsoft Corporation) R2 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [23800 2018-10-18] (Intel(R) Driver & Support Assistant -> Intel) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [777856 2019-05-22] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) S3 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [937192 2018-09-19] (Intel(R) Software Development Products -> ) R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [541896 2018-07-06] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) R3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation) S3 Intel(R) SUR QC SAM; C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-08-30] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) S3 Killer Network Service; C:\WINDOWS\system32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2483376 2018-06-15] (Rivet Networks LLC -> Rivet Networks) R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206472 2018-05-07] (Logitech Inc -> Logitech Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6744288 2019-06-26] (Malwarebytes Corporation -> Malwarebytes) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2017-06-08] (Micro-Star International Co., Ltd.) [File not signed] R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\Dragon Center\MSI_ActiveX_Service.exe [61880 2017-08-28] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136 2019-03-06] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136 2019-03-06] (NVIDIA Corporation -> NVIDIA Corporation) R2 SynTPEnhService; C:\WINDOWS\System32\SynTPEnhService.exe [399440 2018-08-30] (Synaptics Incorporated -> Synaptics Incorporated) R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe [194792 2018-09-19] (Intel(R) Software Development Products -> ) R2 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe [139896 2019-02-20] (TunnelBear -> TunnelBear) S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [937192 2018-09-19] (Intel(R) Software Development Products -> ) R2 Visualware application manager - NetQCheckHTML5Agent.exe; C:\Program Files (x86)\Visualware BCS\bcs.exe [128856 2019-05-23] (Visualware Inc. -> ) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1906.3-0\NisSrv.exe [2455544 2019-07-04] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1906.3-0\MsMpEng.exe [110104 2019-07-04] (Microsoft Windows Publisher -> Microsoft Corporation) R2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe [72880 2018-06-15] (Rivet Networks LLC -> CloudBees, Inc.) R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe [72888 2018-06-15] (Rivet Networks LLC -> CloudBees, Inc.) S2 Killer Service V2; "C:\Program Files\Killer Networking\Network Manager\KillerService.exe" [X] R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S1 BfLwf; C:\WINDOWS\system32\DRIVERS\bwcW10x64.sys [144456 2016-02-12] (Rivet Networks LLC -> Rivet Networks, LLC.) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [141848 2018-07-06] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) S3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [150184 2018-06-15] (Rivet Networks LLC -> Rivet Networks, LLC.) R3 KillerEth; C:\WINDOWS\System32\drivers\e2xw10x64.sys [145920 2018-09-15] (Microsoft Windows -> Qualcomm Atheros, Inc.) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech) R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2018-05-07] (Logitech Inc -> Logitech Inc.) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [199768 2019-07-05] (Malwarebytes Corporation -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [224408 2019-07-10] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73584 2019-07-13] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2019-07-13] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [116112 2019-07-10] (Malwarebytes Corporation -> Malwarebytes) R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7708160 2018-09-15] (Microsoft Windows -> Intel Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_e755baa4a5b9695d\nvlddmkm.sys [21854352 2019-07-04] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-06-13] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69840 2019-03-19] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [75600 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation) S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [416472 2017-11-24] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation) S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [43008 2018-09-19] (Intel Corporation -> ) S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [69184 2017-05-17] (Synaptics Incorporated -> Synaptics Incorporated) R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [56912 2018-08-30] (Synaptics Incorporated -> Synaptics Incorporated) S3 ssbthid; C:\WINDOWS\System32\drivers\ssbthid.sys [43888 2017-05-12] (SteelSeries ApS -> SteelSeries ApS) S3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [41104 2016-08-25] (SteelSeries ApS -> SteelSeries ApS) S3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45928 2017-10-10] (SteelSeries ApS -> SteelSeries ApS) R3 ssps2; C:\WINDOWS\System32\drivers\ssps2.sys [38688 2017-06-01] (SteelSeries ApS -> SteelSeries ApS) S3 STTub30; C:\WINDOWS\System32\Drivers\STTub30.sys [54104 2017-08-30] (STMicroelectronics -> STMicroelectronics) R3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2018-07-31] (TunnelBear, Inc. -> The OpenVPN Project) S3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [236048 2018-12-18] (Oracle Corporation -> Oracle Corporation) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [47704 2019-07-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [367032 2019-07-04] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54200 2019-07-04] (Microsoft Windows -> Microsoft Corporation) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Center\winio64.sys [15160 2015-06-11] (Micro-Star Int'l Co. Ltd. -> ) S3 xhunter1; C:\WINDOWS\xhunter1.sys [74552 2019-04-28] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.) S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-07-15 12:33 - 2019-07-15 12:35 - 000041194 _____ C:\Users\chief\Downloads\FRST.txt 2019-07-15 12:33 - 2019-07-15 12:33 - 000000000 ____D C:\FRST 2019-07-15 12:31 - 2019-07-15 12:31 - 002095104 _____ (Farbar) C:\Users\chief\Downloads\FRST64 (2).exe 2019-07-15 12:30 - 2019-07-15 12:30 - 002095104 _____ (Farbar) C:\Users\chief\Downloads\FRST64 (1).exe 2019-07-15 12:28 - 2019-07-15 12:28 - 002095104 _____ (Farbar) C:\Users\chief\Downloads\FRST64.exe 2019-07-15 08:13 - 2019-07-15 08:14 - 000000000 ____D C:\Users\chief\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.7 2019-07-15 08:13 - 2019-07-15 08:13 - 000000000 ____D C:\Users\chief\AppData\Local\Package Cache 2019-07-15 08:12 - 2019-07-15 08:12 - 026680368 _____ (Python Software Foundation) C:\Users\chief\Downloads\python-3.7.4-amd64.exe 2019-07-13 17:34 - 2019-07-13 17:34 - 000262144 _____ C:\Users\chief\Downloads\Carlos_Perez_Resume.pdf 2019-07-13 15:28 - 2019-07-13 15:28 - 000001404 _____ C:\Users\chief\Desktop\Visual Studio Code.lnk 2019-07-13 15:28 - 2019-07-13 15:28 - 000000000 ____D C:\Users\chief\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code 2019-07-13 15:24 - 2019-07-13 15:24 - 052914928 _____ (Microsoft Corporation ) C:\Users\chief\Downloads\VSCodeUserSetup-x64-1.36.1.exe 2019-07-12 12:50 - 2019-07-12 12:50 - 000081144 _____ C:\Users\chief\Downloads\Graduation-Welcome-Speech.zip 2019-07-11 19:14 - 2019-07-11 19:14 - 001581616 _____ C:\Users\chief\Downloads\bcs_setup.exe 2019-07-11 19:14 - 2019-07-11 19:14 - 000000000 ____D C:\Users\chief\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visualware BCS 2019-07-11 19:14 - 2019-07-11 19:14 - 000000000 ____D C:\Program Files (x86)\Visualware BCS 2019-07-11 04:41 - 2019-07-13 11:46 - 000000303 _____ C:\Users\chief\Desktop\Languages to Follow for Web Development etc.txt 2019-07-10 06:50 - 2019-07-10 06:50 - 000000000 ____D C:\WINDOWS\LastGood.Tmp 2019-07-10 06:48 - 2019-07-04 11:13 - 001006792 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2019-07-10 06:48 - 2019-07-04 11:13 - 001006792 _____ C:\WINDOWS\system32\vulkan-1.dll 2019-07-10 06:48 - 2019-07-04 11:13 - 000870088 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2019-07-10 06:48 - 2019-07-04 11:13 - 000870088 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2019-07-10 06:48 - 2019-07-04 11:13 - 000552136 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2019-07-10 06:48 - 2019-07-04 11:13 - 000456448 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2019-07-10 06:48 - 2019-07-04 11:13 - 000286408 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2019-07-10 06:48 - 2019-07-04 11:13 - 000286408 _____ C:\WINDOWS\system32\vulkaninfo.exe 2019-07-10 06:48 - 2019-07-04 11:13 - 000260296 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2019-07-10 06:48 - 2019-07-04 11:13 - 000260296 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2019-07-10 06:48 - 2019-07-04 11:12 - 011059128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2019-07-10 06:48 - 2019-07-04 11:12 - 009492224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 020190592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 005422464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 004759240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 002040192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 001722056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6443136.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 001542016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 001470904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 001467832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6443136.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 001162168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 001134464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 000912072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 000821176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 000808832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 000675224 _____ C:\WINDOWS\system32\nvofapi64.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 000654720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 000631712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 000542296 _____ C:\WINDOWS\SysWOW64\nvofapi.dll 2019-07-10 06:48 - 2019-07-04 11:11 - 000521872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2019-07-10 06:48 - 2019-07-04 11:10 - 040412360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2019-07-10 06:48 - 2019-07-04 11:10 - 035270016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2019-07-10 06:48 - 2019-07-04 11:10 - 017467592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2019-07-10 06:43 - 2019-07-10 06:44 - 000000001 _____ C:\Users\Public\Documents\dgc_DC.txt 2019-07-10 06:40 - 2019-07-13 04:47 - 000073584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2019-07-10 06:39 - 2019-07-10 06:39 - 000224408 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2019-07-10 06:39 - 2019-07-10 06:39 - 000116112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2019-07-10 06:37 - 2019-07-13 04:47 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2019-07-09 20:22 - 2019-07-09 20:22 - 020816384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 019012096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 012243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 008900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 007921664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 007727336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 006068224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 005436696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 005115384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 003738624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 003550384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 002469432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 002393088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 002323688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 002017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2019-07-09 20:22 - 2019-07-09 20:22 - 002013696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 001266192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2019-07-09 20:22 - 2019-07-09 20:22 - 001254400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2019-07-09 20:22 - 2019-07-09 20:22 - 001132032 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000798736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2019-07-09 20:22 - 2019-07-09 20:22 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000747568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL 2019-07-09 20:22 - 2019-07-09 20:22 - 000743216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2019-07-09 20:22 - 2019-07-09 20:22 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000687896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL 2019-07-09 20:22 - 2019-07-09 20:22 - 000673520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2019-07-09 20:22 - 2019-07-09 20:22 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2019-07-09 20:22 - 2019-07-09 20:22 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2019-07-09 20:22 - 2019-07-09 20:22 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys 2019-07-09 20:22 - 2019-07-09 20:22 - 000263360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2019-07-09 20:22 - 2019-07-09 20:22 - 000148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsutil.exe 2019-07-09 20:22 - 2019-07-09 20:22 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe 2019-07-09 20:22 - 2019-07-09 20:22 - 000092592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys 2019-07-09 20:22 - 2019-07-09 20:22 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2019-07-09 20:22 - 2019-07-09 20:22 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2019-07-09 20:21 - 2019-07-09 20:22 - 004880896 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 026808320 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 023454208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 022115472 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 017484800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 015221248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 012938752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 009683472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 007884288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 007876096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 007645600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 006925312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 006545304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 006441472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 006308232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 005764608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 005587976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 005566464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 005561312 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 005528064 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 005297664 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 004588752 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 004351448 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 004303872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 004056576 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 003818416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 003636224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 003630592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 003427328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 003385856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 003363640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 003081728 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002982400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002871816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 002778760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002701000 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002693120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002626872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 002421760 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 002278784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002189312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002096128 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2019-07-09 20:21 - 2019-07-09 20:21 - 002085376 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002073472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 002050048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001966904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 001929728 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001863168 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001837136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001794048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001763328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001721352 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001702088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2019-07-09 20:21 - 2019-07-09 20:21 - 001701888 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001668752 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001622016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001477648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001472808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001465464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001427592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001345168 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2019-07-09 20:21 - 2019-07-09 20:21 - 001321784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001316352 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001308672 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001259520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001223168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001199616 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001182448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 001162320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001159168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001125416 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001075712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001054928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 001052672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001038336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 001010688 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000998928 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000964608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000863544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 000833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000828728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 000810504 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000807480 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000804744 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000771584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000730936 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000660032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000652528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000553992 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2019-07-09 20:21 - 2019-07-09 20:21 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000519168 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000514136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000487936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000464912 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 000439096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 000436024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 000431416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 000425984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000423480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2019-07-09 20:21 - 2019-07-09 20:21 - 000414208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000397688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000351432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000333128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.internal.shellcommon.shareexperience.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000324624 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000279920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiCloudStore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopSwitcherDataModel.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000219448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys 2019-07-09 20:21 - 2019-07-09 20:21 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutil.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000157024 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000149232 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000137864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000121896 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000115120 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompMgmtLauncher.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000071696 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2019-07-09 20:21 - 2019-07-09 20:21 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe 2019-07-09 20:21 - 2019-07-09 20:21 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 007687784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 003335216 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 002766136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 002706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 002645504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 002593336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 001893376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 001676288 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 001674752 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 001662480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 001052984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 001048592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 001043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2019-07-09 20:20 - 2019-07-09 20:20 - 000987736 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000895552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000871784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000865272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000850992 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000799776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000770096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000768224 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000758896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 000756224 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000731104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 000680176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000652296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 000651792 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000511504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000506408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000482104 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 000470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2019-07-09 20:20 - 2019-07-09 20:20 - 000415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000310288 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000298296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 000294000 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000292152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000241944 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL 2019-07-09 20:20 - 2019-07-09 20:20 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 000216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000212792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 000203272 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000198456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 000197832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL 2019-07-09 20:20 - 2019-07-09 20:20 - 000192824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000141216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000117720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2019-07-09 20:20 - 2019-07-09 20:20 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys 2019-07-09 20:20 - 2019-07-09 20:20 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2019-07-09 20:20 - 2019-07-09 20:20 - 000036360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2019-07-09 20:20 - 2019-07-09 20:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2019-07-09 20:20 - 2019-07-09 20:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2019-07-09 20:20 - 2019-07-09 20:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2019-07-09 20:20 - 2019-07-09 20:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2019-07-09 20:20 - 2019-07-09 20:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2019-07-09 20:20 - 2019-07-09 20:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2019-07-09 20:20 - 2019-07-09 20:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2019-07-09 20:20 - 2019-07-09 20:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2019-07-08 19:32 - 2019-07-08 19:32 - 000060944 _____ (Python Software Foundation) C:\WINDOWS\pyshellext.amd64.dll 2019-07-08 19:30 - 2019-07-08 19:30 - 000908304 _____ (Python Software Foundation) C:\WINDOWS\pyw.exe 2019-07-08 19:30 - 2019-07-08 19:30 - 000907792 _____ (Python Software Foundation) C:\WINDOWS\py.exe 2019-07-05 08:01 - 2019-07-05 08:01 - 000199768 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2019-07-05 08:01 - 2019-07-05 08:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2019-07-05 08:01 - 2019-06-26 13:00 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2019-07-05 08:01 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2019-07-04 23:40 - 2019-07-04 23:40 - 000000000 ____D C:\WINDOWS\Panther 2019-07-03 02:53 - 2019-07-03 02:53 - 000002237 _____ C:\Users\chief\Desktop\Discord.lnk 2019-07-03 02:53 - 2019-07-03 02:53 - 000000000 ____D C:\Users\chief\AppData\Local\SquirrelTemp 2019-07-03 02:53 - 2019-07-03 02:53 - 000000000 ____D C:\Users\chief\AppData\Local\Discord 2019-07-01 22:43 - 2019-07-01 22:43 - 000003274 _____ C:\WINDOWS\System32\Tasks\Adobe Uninstaller 2019-07-01 02:12 - 2019-07-13 10:13 - 000002480 _____ C:\WINDOWS\System32\Tasks\jackma 2019-07-01 02:09 - 2019-07-01 02:09 - 021842325 _____ C:\Users\chief\Downloads\jackma.mp4 2019-07-01 02:05 - 2019-07-13 10:13 - 000002380 _____ C:\WINDOWS\System32\Tasks\jeff 2019-07-01 02:04 - 2019-07-01 02:04 - 051898517 _____ C:\Users\chief\Downloads\jeffbezos.mp4 2019-07-01 01:36 - 2019-07-01 02:05 - 000002386 _____ C:\WINDOWS\System32\Tasks\jonjones 2019-07-01 01:33 - 2019-07-01 01:33 - 003507194 _____ C:\Users\chief\Downloads\jonjones.mp4 2019-06-27 02:06 - 2019-06-27 02:06 - 000003680 _____ C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0-DESKTOP-MTI7T1E-chief 2019-06-27 02:03 - 2019-06-27 02:03 - 000000000 ____D C:\Users\chief\Documents\Adobe 2019-06-27 01:55 - 2019-07-01 22:44 - 000000000 ___RD C:\Users\chief\Creative Cloud Files 2019-06-22 15:11 - 2019-06-22 15:11 - 000000000 ____D C:\Users\Public\Documents\Arc 2019-06-20 02:21 - 2019-06-20 02:21 - 000000000 ____D C:\Users\chief\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexon 2019-06-19 11:24 - 2019-06-19 11:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2019-06-19 03:28 - 2019-06-19 03:28 - 000000000 ____D C:\Program Files\UNP ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-07-15 12:32 - 2018-09-15 02:09 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2019-07-15 12:31 - 2018-09-15 03:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-07-15 12:25 - 2017-11-24 21:24 - 000000000 ____D C:\ProgramData\NVIDIA 2019-07-15 12:22 - 2017-11-24 19:41 - 000000000 ____D C:\Users\chief\AppData\Roaming\discord 2019-07-15 12:18 - 2018-03-11 19:00 - 000000000 ____D C:\Users\chief\AppData\Roaming\obs-studio 2019-07-15 09:56 - 2018-06-30 16:57 - 000000000 ____D C:\Users\chief\AppData\Roaming\TS3Client 2019-07-15 09:25 - 2019-03-24 12:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-07-15 08:14 - 2019-03-03 00:10 - 000000000 ____D C:\Users\chief\AppData\Roaming\Code 2019-07-15 08:13 - 2017-11-24 18:53 - 000000000 ____D C:\ProgramData\Package Cache 2019-07-15 06:47 - 2019-03-24 13:05 - 000004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{18576A78-F75F-481A-8DEC-BD9D5B96D826} 2019-07-15 06:44 - 2019-04-24 13:09 - 000000000 ____D C:\Users\Public\Logi 2019-07-15 06:43 - 2017-11-24 18:45 - 000000000 __SHD C:\Users\chief\IntelGraphicsProfiles 2019-07-14 13:38 - 2019-03-03 17:22 - 000000000 ____D C:\Users\chief\Desktop\Python Projects 2019-07-14 09:54 - 2017-11-24 18:45 - 000000000 ____D C:\Users\chief\AppData\Local\Packages 2019-07-14 08:11 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-07-13 20:34 - 2019-03-24 12:53 - 000000000 ____D C:\Users\chief 2019-07-13 12:42 - 2019-04-21 08:58 - 000000000 ____D C:\WINDOWS\Minidump 2019-07-13 10:31 - 2018-03-18 13:16 - 000000044 _____ C:\Users\chief\jagex_cl_oldschool_LIVE.dat 2019-07-13 04:56 - 2018-09-15 03:33 - 000000000 ___HD C:\Program Files\WindowsApps 2019-07-13 04:53 - 2018-09-15 03:31 - 000000000 ____D C:\WINDOWS\INF 2019-07-13 04:47 - 2019-02-27 19:06 - 000000000 ____D C:\Program Files (x86)\TunnelBear 2019-07-13 04:46 - 2019-03-24 13:05 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-07-12 08:36 - 2018-10-26 23:06 - 000000000 ____D C:\Program Files (x86)\Intel Driver and Support Assistant 2019-07-11 18:35 - 2017-11-24 19:39 - 000000000 ____D C:\Users\chief\AppData\Local\NVIDIA 2019-07-11 05:40 - 2019-03-24 12:58 - 000840848 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-07-11 02:36 - 2019-03-24 13:05 - 000003380 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1945363360-1039989498-3971189972-1001 2019-07-11 02:36 - 2019-03-24 12:53 - 000002367 _____ C:\Users\chief\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-07-11 02:36 - 2017-11-24 18:47 - 000000000 ___RD C:\Users\chief\OneDrive 2019-07-10 07:08 - 2018-08-08 11:14 - 000000000 ____D C:\Users\chief\AppData\Local\CrashDumps 2019-07-09 20:38 - 2018-09-15 02:09 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2019-07-09 20:37 - 2017-11-24 18:45 - 000000000 __RHD C:\Users\Public\AccountPictures 2019-07-09 20:37 - 2017-11-24 18:45 - 000000000 ___RD C:\Users\chief\3D Objects 2019-07-09 20:35 - 2019-03-24 12:47 - 000444336 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-07-09 20:31 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2019-07-09 20:31 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2019-07-09 20:31 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\system32\oobe 2019-07-09 20:31 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\system32\appraiser 2019-07-09 20:31 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\ShellExperiences 2019-07-09 20:31 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\ShellComponents 2019-07-09 20:31 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\Provisioning 2019-07-09 20:31 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\bcastdvr 2019-07-09 20:31 - 2018-09-15 02:09 - 000000000 ____D C:\WINDOWS\system32\Dism 2019-07-09 20:30 - 2018-09-15 03:23 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-07-09 20:28 - 2017-12-03 17:40 - 000000000 ____D C:\WINDOWS\system32\MRT 2019-07-09 20:24 - 2017-12-03 17:40 - 136618864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2019-07-09 20:01 - 2017-11-24 18:52 - 000741432 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2019-07-09 07:39 - 2019-05-14 05:23 - 006074936 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe 2019-07-09 07:39 - 2019-05-13 04:54 - 000004546 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier 2019-07-09 07:39 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2019-07-09 07:39 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\system32\Macromed 2019-07-08 10:11 - 2018-12-09 21:19 - 000003397 _____ C:\Users\chief\Desktop\information.txt 2019-07-05 09:57 - 2018-06-09 19:41 - 000000000 ____D C:\Users\chief\AppData\Local\D3DSCache 2019-07-05 08:01 - 2018-11-19 09:37 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2019-07-05 08:01 - 2018-09-15 03:33 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2019-07-05 07:21 - 2019-06-14 16:46 - 000000000 ____D C:\Users\chief\AppData\Roaming\TIDAL 2019-07-04 23:45 - 2018-03-01 19:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2019-07-04 23:40 - 2017-11-24 21:24 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2019-07-04 14:07 - 2019-05-27 15:20 - 004340664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2019-07-04 14:07 - 2019-04-23 14:43 - 005085096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2019-07-03 09:56 - 2019-04-23 14:43 - 000052446 _____ C:\WINDOWS\system32\nvinfo.pb 2019-07-03 05:10 - 2019-04-23 14:48 - 005435376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2019-07-03 05:10 - 2019-04-23 14:48 - 002637168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2019-07-03 05:10 - 2019-04-23 14:48 - 001767464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2019-07-03 05:10 - 2019-04-23 14:48 - 000651248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2019-07-03 05:10 - 2019-04-23 14:48 - 000450416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2019-07-03 05:10 - 2019-04-23 14:48 - 000124784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2019-07-03 05:10 - 2019-04-23 14:48 - 000082984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2019-07-03 05:09 - 2019-04-23 14:48 - 008628422 _____ C:\WINDOWS\system32\nvcoproc.bin 2019-07-03 02:53 - 2017-11-24 19:41 - 000000000 ____D C:\Users\chief\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2019-07-03 02:39 - 2019-04-24 10:52 - 000000061 _____ C:\Users\chief\Desktop\rag.txt 2019-07-01 22:48 - 2018-05-07 11:48 - 000000000 ____D C:\ProgramData\Adobe 2019-07-01 22:47 - 2018-05-07 11:48 - 000000000 ____D C:\Program Files (x86)\Adobe 2019-07-01 22:46 - 2017-11-24 18:45 - 000000000 ____D C:\Users\chief\AppData\Roaming\Adobe 2019-07-01 22:44 - 2018-05-07 11:47 - 000000000 ____D C:\Users\chief\AppData\Local\Adobe 2019-07-01 01:01 - 2018-11-14 19:00 - 000001447 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2019-07-01 01:01 - 2017-11-24 21:24 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2019-07-01 01:00 - 2019-03-24 13:05 - 000003976 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 01:00 - 2019-03-24 13:05 - 000003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 00:59 - 2019-05-27 15:12 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 00:59 - 2019-05-27 15:12 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 00:59 - 2019-05-27 15:12 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 00:59 - 2019-05-27 15:12 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 00:59 - 2019-03-24 13:05 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 00:59 - 2019-03-24 13:05 - 000004106 _____ C:\WINDOWS\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 00:59 - 2019-03-24 13:05 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 00:59 - 2019-03-24 13:05 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-07-01 00:59 - 2017-11-24 21:24 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2019-06-28 09:06 - 2019-05-03 00:38 - 000000000 ____D C:\Program Files\Epic Games 2019-06-22 15:27 - 2019-06-11 13:05 - 000000000 ____D C:\ProgramData\boost_interprocess 2019-06-22 15:23 - 2019-05-09 22:08 - 000000000 _____ C:\end 2019-06-22 15:21 - 2017-11-24 19:50 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2019-06-22 15:12 - 2019-03-23 03:19 - 000000000 ___HD C:\ArcTemp 2019-06-21 11:36 - 2018-07-10 16:02 - 000000000 ____D C:\ProgramData\Packages 2019-06-20 11:13 - 2019-03-24 13:05 - 000003544 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachineDaily 2019-06-20 11:13 - 2019-03-24 13:05 - 000003408 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachine 2019-06-20 11:13 - 2017-11-25 18:28 - 000000000 ____D C:\Program Files (x86)\Gyazo 2019-06-20 09:43 - 2017-11-25 18:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo 2019-06-20 02:33 - 2019-05-09 20:04 - 000000000 ____D C:\WINDOWS\SysWOW64\directx 2019-06-20 02:33 - 2017-12-04 23:34 - 000000000 ___HD C:\WINDOWS\msdownld.tmp 2019-06-19 23:49 - 2019-05-18 21:13 - 000000000 ____D C:\Users\chief\AppData\Local\BattlEye 2019-06-19 23:49 - 2017-12-04 23:37 - 000000000 ____D C:\Users\chief\AppData\Local\Jagex 2019-06-19 23:49 - 2017-12-04 23:37 - 000000000 ____D C:\ProgramData\Jagex 2019-06-19 22:57 - 2017-11-24 18:50 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-06-19 22:57 - 2017-11-24 18:50 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-06-19 22:56 - 2019-03-09 22:18 - 000000329 _____ C:\Users\chief\Desktop\New Text Document (2).txt 2019-06-19 22:02 - 2018-03-03 05:29 - 000000000 ____D C:\Users\chief\AppData\Local\PlaceholderTileLogoFolder 2019-06-19 11:24 - 2019-05-20 12:49 - 000002498 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk 2019-06-19 11:24 - 2019-05-20 12:49 - 000002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2019-06-19 11:24 - 2019-05-20 12:49 - 000002492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2019-06-19 11:24 - 2019-05-20 12:49 - 000002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2019-06-19 11:24 - 2019-05-20 12:49 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2019-06-19 11:24 - 2019-05-20 12:49 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2019-06-19 11:24 - 2019-05-20 12:49 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2019-06-19 11:24 - 2019-05-20 12:49 - 000002435 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2019-06-19 11:23 - 2018-08-28 09:46 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2019-06-18 19:11 - 2019-02-27 17:44 - 000000000 ____D C:\Users\chief\AppData\Local\TeamSpeak 3 Client 2019-06-18 04:59 - 2018-11-14 18:59 - 002785776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2019-06-18 04:59 - 2018-11-14 18:59 - 002164080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2019-06-18 04:59 - 2018-11-14 18:59 - 001316664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll 2019-06-18 04:56 - 2018-11-14 18:58 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat ==================== Files in the root of some directories ================ 2017-11-24 19:59 - 2018-10-26 22:44 - 000000000 _____ () C:\Users\chief\AppData\Local\Driver_LOM_8171Present.flag 2019-06-27 01:49 - 2019-06-27 01:49 - 000000410 _____ () C:\Users\chief\AppData\Local\oobelibMkey.log 2019-02-24 17:27 - 2019-02-24 17:27 - 000002784 _____ () C:\Users\chief\AppData\Local\recently-used.xbel 2018-02-03 21:42 - 2019-03-26 15:46 - 000007593 _____ () C:\Users\chief\AppData\Local\resmon.resmoncfg ==================== SigCheck =============================== (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ============================ Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 15, 2019 Root Admin ID:1322887 Share Posted July 15, 2019 Hello @kingkervin Please follow the directions from the following topic and clean up Google Chrome. Once that's done please let me know if you're still having issues or not. Thanks Ron Link to post Share on other sites More sharing options...
Maurice Naggar Posted July 25, 2019 ID:1325235 Share Posted July 25, 2019 Hello @kingkervin Just checking in with you. How are things ? Link to post Share on other sites More sharing options...
Maurice Naggar Posted July 27, 2019 ID:1325667 Share Posted July 27, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts