Jump to content
Risumies1234

PUP segurazo "antivirus", is my computer clean now?

Recommended Posts

Hello,

I downloaded cheat engine to my computer. I had it before on my old pc, with no bigger problems. This time I got serious infection from cheatengine dot org.

I immediately noticed this "segurazo" which was installed with cheat engine without permission. My computer was 100% clean before that.

I used malwarebytes 3 to scan my computer. It found +200 malwares but didn't remove that segurazo. Then I updated it and after that malwarebytes removed +30 segurazo pup files. Also all(visible) segurazo files and processes were gone. After that I found few more malwares with new scans.

But today malwarebytes found 7 more segurazo pup files. Also windows defender found 1 keylogger.

Now after many scans, malwarebytes doesn't find anything anymore. But how can I be sure that my computer is clean now. I dont want to use this computer before that.

 

Share this post


Link to post
Share on other sites
Hello Risumies1234 and welcome to Malwarebytes,

Continue with the following:

Open Malwarebytes, select > "settings" > "protection tab"

Scroll down to "Scan Options" ensure Scan for Rootkits and Scan within Archives are both on....

Go back to "DashBoard" select the Blue "Scan Now" tab......

When the scan completes quarantine any found entries...

To get the log from Malwarebytes do the following:
 
  • Click on the Report tab > from main interface.
  • Double click on the Scan log which shows the Date and time of the scan just performed.
  • Click Export > From export you have two options:
    Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your reply
    Text file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply

     
  • Please use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply…


Next,

Download AdwCleaner by Malwarebytes onto your Desktop.

Or from this Mirror
 
  • Right-click on AdwCleaner.exe and select user posted imageRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  • Accept the EULA (I accept), then click on Scan
  • Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Clean button. This will kill all the active processes
  • Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it
  • After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply


Next,

Download Farbar Recovery Scan Tool and save it to your desktop.

Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way...

Be aware FRST must be run from an account with Administrator status...
 
  • Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)
  • Make sure Addition.txt is checkmarked under "Optional scans"
    user posted image
     
  • Press Scan button to run the tool....
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also make a log named (Addition.txt) Please attach that log to your reply.


Let me see those logs in your reply...

Thank you,

Kevin....

Share this post


Link to post
Share on other sites

Hello, this is latest scan:

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 7/18/19
Scan Time: 9:10 PM
Log File: 5ca35188-a987-11e9-9ff3-3c0771a38523.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.613
Update Package Version: 1.0.11612
License: Free

-System Information-
OS: Windows 10 (Build 17763.615)
CPU: x64
File System: NTFS
User: DESKTOP-Q2U23F4\Makki

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 263562
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 8 min, 58 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Latest AdwCleaner scan:

 

# -------------------------------
# Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build:    04-04-2019
# Database: 2019-04-03.1 (Local)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    07-18-2019
# Duration: 00:00:04
# OS:       Windows 10 Home
# Cleaned:  0
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete IFEO
[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset BITS
[+] Reset Windows Firewall
[+] Reset Hosts File
[+] Reset IPSec
[+] Reset Chromium Policies
[+] Reset IE Policies
[+] Reset Proxy Settings
[+] Reset TCP/IP
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1324 octets] - [17/07/2019 22:14:52]
AdwCleaner[C00].txt - [1687 octets] - [17/07/2019 22:15:36]
AdwCleaner[S01].txt - [1372 octets] - [17/07/2019 22:17:35]
AdwCleaner[S02].txt - [1433 octets] - [17/07/2019 22:46:51]
AdwCleaner[S03].txt - [1494 octets] - [18/07/2019 15:10:48]
AdwCleaner[C03].txt - [1897 octets] - [18/07/2019 15:11:04]
AdwCleaner_Debug.log - [5171 octets] - [18/07/2019 21:27:03]
AdwCleaner[S04].txt - [1678 octets] - [18/07/2019 21:27:32]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C04].txt ##########
 

first.txt fourth.txt second.txt third.txt

Share this post


Link to post
Share on other sites

And here is farbar scan. Thanks for help.

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-07-2019 01
Ran by Makki (administrator) on DESKTOP-Q2U23F4 (Sony Corporation SVE1113M1EW) (18-07-2019 21:50:06)
Running from C:\Users\Makki\Downloads
Loaded Profiles: Makki (Available Profiles: Makki)
Platform: Windows 10 Home Version 1809 17763.615 (X64) Language: suomi (Suomi)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1906.3-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1906.3-0\NisSrv.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3954368 2015-09-21] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [588288 2016-01-08] (Nikon Corporation) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\75.0.3770.142\Installer\chrmstp.exe [2019-07-17] (Google LLC -> Google LLC)
Startup: C:\Users\Makki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2019-03-18]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [File not signed]

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2263FF9D-947F-4550-A962-BC9C99EF971B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1906.3-0\MpCmdRun.exe [470176 2019-07-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3AAE8045-203A-4D79-9570-A8163E812637} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-03-26] (Google Inc -> Google Inc.)
Task: {40C30E10-F3A1-46CF-AEB0-E2C36D410449} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1906.3-0\MpCmdRun.exe [470176 2019-07-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6B12F5B8-2CCF-4707-8F31-93F0563C305E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1906.3-0\MpCmdRun.exe [470176 2019-07-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {723FDCE9-792F-460D-9727-2C0CE0C763F1} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\Windows\system32\MRT.exe [136618864 2019-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {AC0085EF-166D-4C29-9733-DAFC4AD88DFA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-03-26] (Google Inc -> Google Inc.)
Task: {B08A6678-ADFE-465F-950F-80BC78167E1A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1906.3-0\MpCmdRun.exe [470176 2019-07-11] (Microsoft Windows Publisher -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{de32f0d8-afb2-468e-8962-bac95a2e1d2d}: [DhcpNameServer] 192.168.43.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)

Chrome: 
=======
CHR Profile: C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default [2019-07-18]
CHR Extension: (Slides) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-03-26]
CHR Extension: (Docs) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-03-26]
CHR Extension: (Google Drive) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-03-26]
CHR Extension: (YouTube) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-03-26]
CHR Extension: (Sheets) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-03-26]
CHR Extension: (Google Docsin offline-tila) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-04-07]
CHR Extension: (AdBlock) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-07-11]
CHR Extension: (Chrome Web Storen maksut) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-03-26]
CHR Extension: (Gmail) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-02]
CHR Extension: (Chrome Media Router) - C:\Users\Makki\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-07-11]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2019-03-18] (Adobe Systems) [File not signed]
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [255472 2015-10-21] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6744288 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255168 2015-09-21] (Synaptics Incorporated -> Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1906.3-0\NisSrv.exe [2455544 2019-07-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1906.3-0\MsMpEng.exe [110104 2019-07-11] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [21648880 2015-10-21] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [674288 2015-10-21] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\System32\drivers\athw8x.sys [4233728 2018-09-15] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)
R3 BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [610336 2016-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [275232 2019-07-18] (Malwarebytes Corporation -> Malwarebytes)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [605696 2018-09-15] (Microsoft Windows -> Realtek )
R3 SmbDrv; C:\Windows\system32\DRIVERS\Smb_driver_AMDASF.sys [50880 2015-09-21] (Synaptics Incorporated -> Synaptics Incorporated)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [47704 2019-07-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [367032 2019-07-11] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [54200 2019-07-11] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-07-18 21:50 - 2019-07-18 21:52 - 000011355 _____ C:\Users\Makki\Downloads\FRST.txt
2019-07-18 21:48 - 2019-07-18 21:50 - 000000000 ____D C:\FRST
2019-07-18 21:40 - 2019-07-18 21:40 - 000006783 _____ C:\Users\Makki\Downloads\first.txt
2019-07-18 21:33 - 2019-07-18 21:33 - 002095104 _____ (Farbar) C:\Users\Makki\Downloads\FRST64.exe
2019-07-18 21:28 - 2019-07-18 21:28 - 000275232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-07-18 21:24 - 2019-07-18 21:25 - 000002453 _____ C:\Users\Makki\Desktop\fourth.txt
2019-07-18 21:24 - 2019-07-18 21:24 - 000001350 _____ C:\Users\Makki\Desktop\third.txt
2019-07-18 21:22 - 2019-07-18 21:22 - 000032371 _____ C:\Users\Makki\Desktop\second.txt
2019-07-18 21:20 - 2019-07-18 21:20 - 000006783 _____ C:\Users\Makki\Desktop\first.txt
2019-07-18 15:09 - 2019-07-18 15:10 - 000022628 _____ C:\Users\Makki\Downloads\MTB.txt
2019-07-17 23:59 - 2019-07-17 23:59 - 007727336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 005436696 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 005115384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 003550384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 002469432 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 002323688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 000898048 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 000798736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2019-07-17 23:59 - 2019-07-17 23:59 - 000747568 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2019-07-17 23:59 - 2019-07-17 23:59 - 000743216 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2019-07-17 23:59 - 2019-07-17 23:59 - 000687896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2019-07-17 23:59 - 2019-07-17 23:59 - 000673520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2019-07-17 23:59 - 2019-07-17 23:59 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapi.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfh264enc.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 000560128 _____ (Microsoft Corporation) C:\Windows\system32\mfh264enc.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 000311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapibase.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 000263360 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2019-07-17 23:59 - 2019-07-17 23:59 - 000092592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys
2019-07-17 23:58 - 2019-07-17 23:59 - 001266192 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2019-07-17 23:58 - 2019-07-17 23:58 - 026808320 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 020816384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 019012096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 012938752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 012243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 008900608 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 007921664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 007876096 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 006068224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 004880896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 003738624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 002942464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 002393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcGenral.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 002096128 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2019-07-17 23:58 - 2019-07-17 23:58 - 002017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2019-07-17 23:58 - 2019-07-17 23:58 - 002013696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 001751040 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 001254400 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2019-07-17 23:58 - 2019-07-17 23:58 - 001132032 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000833536 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000773120 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000742912 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000703488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000642048 _____ (Microsoft Corporation) C:\Windows\system32\SharedRealitySvc.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000525824 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2019-07-17 23:58 - 2019-07-17 23:58 - 000430080 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2019-07-17 23:58 - 2019-07-17 23:58 - 000362496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000349696 _____ (Microsoft Corporation) C:\Windows\system32\AcGenral.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\CXHProvisioningServer.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000290304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\MbbCx.sys
2019-07-17 23:58 - 2019-07-17 23:58 - 000157696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2019-07-17 23:58 - 2019-07-17 23:58 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000148480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2019-07-17 23:58 - 2019-07-17 23:58 - 000137728 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2019-07-17 23:58 - 2019-07-17 23:58 - 000078848 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2019-07-17 23:58 - 2019-07-17 23:58 - 000058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2019-07-17 23:57 - 2019-07-17 23:58 - 023454208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 015221248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 006545304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 006441472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 006308232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 005764608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 005587976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 003818416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2019-07-17 23:57 - 2019-07-17 23:57 - 003656192 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 003427328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 002778760 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 002714624 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 002693120 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 002278784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001863168 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001701888 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001668752 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001477648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001465464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001427592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001257472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001223168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdprt.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001162320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001159168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001125416 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 001075712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000988160 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000964608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000956416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000828728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2019-07-17 23:57 - 2019-07-17 23:57 - 000804744 _____ (Microsoft Corporation) C:\Windows\system32\BioIso.exe
2019-07-17 23:57 - 2019-07-17 23:57 - 000791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000682496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000660032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2019-07-17 23:57 - 2019-07-17 23:57 - 000652528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000626176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000617784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicensingWinRT.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000553472 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000532992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000463872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000461824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000449024 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000425984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000414720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2019-07-17 23:57 - 2019-07-17 23:57 - 000414208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000359936 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2019-07-17 23:57 - 2019-07-17 23:57 - 000333128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000309760 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000279920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
2019-07-17 23:57 - 2019-07-17 23:57 - 000219448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditionUpgradeManagerObj.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000188416 _____ (Microsoft Corporation) C:\Windows\system32\DMPushRouterCore.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000183808 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2019-07-17 23:57 - 2019-07-17 23:57 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000177152 _____ (Microsoft Corporation) C:\Windows\system32\spacebridge.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\NcaSvc.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000137864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\CompMgmtLauncher.exe
2019-07-17 23:57 - 2019-07-17 23:57 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerUI.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-07-17 23:57 - 2019-07-17 23:57 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 022115472 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 017484800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 009683472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 007884288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 007645600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 006925312 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 005566464 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 005561312 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 005528064 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 005297664 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 004588752 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 004351448 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 004303872 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 004056576 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 003636224 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 003630592 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Service.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 003385856 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 003363640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 003081728 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 002982400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 002871816 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 002701000 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 002633216 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 002626872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 002421760 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 002189312 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 002085376 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 002073472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 002050048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001994760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001966904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 001929728 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001903616 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001837136 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001794048 _____ (Microsoft Corporation) C:\Windows\system32\cdprt.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001721352 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001702088 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-07-17 23:56 - 2019-07-17 23:56 - 001622016 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001605632 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001516544 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 001472808 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 001466368 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001345168 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-07-17 23:56 - 2019-07-17 23:56 - 001321784 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001316352 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001308672 _____ (Microsoft Corporation) C:\Windows\system32\TaskFlowDataEngine.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001259520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001199616 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001182448 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 001160704 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001145856 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001054928 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 001052672 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001038336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 001010688 _____ (Microsoft Corporation) C:\Windows\system32\refsutil.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 001007616 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000998928 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000863544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 000833024 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 000810504 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000807480 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000774144 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000771584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000740664 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000730936 _____ (Microsoft Corporation) C:\Windows\system32\LicensingWinRT.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000645120 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000637968 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000616960 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000579072 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000553992 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000547840 _____ (Microsoft Corporation) C:\Windows\system32\QuietHours.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000541184 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2019-07-17 23:56 - 2019-07-17 23:56 - 000519168 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000514136 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000514048 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000513536 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000487936 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000465920 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000464912 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000447488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 000439096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 000436024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 000431416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 000425472 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000423480 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000408064 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000397688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000365056 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000351432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000347136 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\windows.internal.shellcommon.shareexperience.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000324624 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000323072 _____ (Microsoft Corporation) C:\Windows\system32\sppcommdlg.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000294912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 000293888 _____ (Microsoft Corporation) C:\Windows\system32\TDLMigration.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000291840 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManager.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000278528 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000263680 _____ (Microsoft Corporation) C:\Windows\system32\WiFiCloudStore.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\DesktopSwitcherDataModel.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000239616 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000220672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000201528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2019-07-17 23:56 - 2019-07-17 23:56 - 000176128 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000164368 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000157024 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000155648 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000149232 _____ (Microsoft Corporation) C:\Windows\system32\LicensingUI.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000138240 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000132608 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000127488 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000121896 _____ (Microsoft Corporation) C:\Windows\system32\kdnet.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000115120 _____ (Microsoft Corporation) C:\Windows\system32\phoneactivate.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000111616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000093184 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2019-07-17 23:56 - 2019-07-17 23:56 - 000071696 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerUI.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2019-07-17 23:56 - 2019-07-17 23:56 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\UpgradeResultsUI.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 007687784 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 003335216 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 002766136 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 002706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 002645504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 002593336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 001893376 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 001676288 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 001674752 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 001662480 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 001253688 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 001225216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 001208320 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 001052984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 001048592 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 001043968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2019-07-17 23:55 - 2019-07-17 23:55 - 000987736 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000895552 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000871784 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000865272 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000850992 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000799776 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000773120 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000770096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000768224 _____ (Microsoft Corporation) C:\Windows\system32\pkeyhelper.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000758896 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 000756224 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000731104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 000680176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000652296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 000651792 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 000607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000580024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000527872 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 000521728 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000511504 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000506408 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000482104 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 000470528 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000467984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2019-07-17 23:55 - 2019-07-17 23:55 - 000415752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000388096 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000346624 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000310288 _____ (Microsoft Corporation) C:\Windows\system32\computestorage.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000305664 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000298296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 000294000 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000292152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000281600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000274432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000241944 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2019-07-17 23:55 - 2019-07-17 23:55 - 000240128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winnat.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000212792 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 000203272 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000198456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 000197832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL
2019-07-17 23:55 - 2019-07-17 23:55 - 000192824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 000165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spacebridge.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000163840 _____ (Microsoft Corporation) C:\Windows\system32\profext.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000141216 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\profext.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000117720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wldp.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000095544 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2019-07-17 23:55 - 2019-07-17 23:55 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
2019-07-17 23:55 - 2019-07-17 23:55 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\wcimage.dll
2019-07-17 23:55 - 2019-07-17 23:55 - 000036360 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2019-07-17 23:55 - 2019-07-17 23:55 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-07-17 23:55 - 2019-07-17 23:55 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-07-17 23:55 - 2019-07-17 23:55 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-07-17 23:55 - 2019-07-17 23:55 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-07-17 23:55 - 2019-07-17 23:55 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-07-17 23:55 - 2019-07-17 23:55 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-07-17 23:55 - 2019-07-17 23:55 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-07-17 23:55 - 2019-07-17 23:55 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-07-17 22:19 - 2019-07-17 22:19 - 000892416 _____ (Farbar) C:\Users\Makki\Downloads\MiniToolBox.exe
2019-07-17 22:14 - 2019-07-17 22:15 - 000000000 ____D C:\AdwCleaner
2019-07-17 22:07 - 2019-07-17 22:07 - 007025360 _____ (Malwarebytes) C:\Users\Makki\Downloads\AdwCleaner.exe
2019-07-17 21:47 - 2019-07-18 17:01 - 000682510 _____ C:\Windows\ntbtlog.txt
2019-07-17 21:47 - 2019-07-18 15:13 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2019-07-17 21:16 - 2019-07-18 14:20 - 000000000 ____D C:\Windows\System32\Tasks\SyncTask
2019-07-17 21:15 - 2019-07-17 21:16 - 000000000 ____D C:\ProgramData\{E537D90B-CD1F-A173-9547-895B7DAF5183}
2019-07-17 21:13 - 2019-07-17 21:16 - 000000000 ____D C:\ProgramData\bgxaq
2019-07-17 21:13 - 2019-07-17 21:13 - 000000000 ____D C:\Users\Makki\Documents\My Cheat Tables
2019-07-17 21:10 - 2019-07-17 21:10 - 000000000 ____D C:\Users\Makki\AppData\Local\mbam
2019-07-17 21:09 - 2019-07-17 21:09 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-07-17 21:09 - 2019-07-17 21:09 - 000000000 ____D C:\Users\Makki\AppData\Local\mbamtray
2019-07-17 21:09 - 2019-07-17 21:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-07-17 21:09 - 2019-06-26 13:00 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2019-07-17 21:08 - 2019-07-17 21:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-07-17 21:08 - 2019-07-17 21:08 - 000000000 ____D C:\Program Files\Malwarebytes
2019-07-17 21:08 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-07-17 21:07 - 2019-07-17 21:07 - 064333800 _____ (Malwarebytes ) C:\Users\Makki\Downloads\mb3-setup-43841.43841-3.8.3.2965-1.0.613-1.0.11270.exe
2019-07-11 16:16 - 2019-07-11 16:17 - 144281612 _____ C:\Users\Makki\Desktop\DSC_9231.tif
2019-07-11 16:13 - 2019-07-11 16:13 - 000009990 _____ C:\Users\Makki\Documents\tähtikuvaaloitus.nxd
2019-07-11 14:30 - 2019-07-11 14:30 - 000000000 ____D C:\Users\Makki\Desktop\NKSC_PARAM
2019-07-11 14:14 - 2018-10-10 22:29 - 029615063 _____ C:\Users\Makki\Desktop\DSC_9231.NEF
2019-06-27 20:28 - 2019-06-27 20:28 - 000000000 ____D C:\Users\Makki\Downloads\ePSXe205
2019-06-27 20:27 - 2019-06-27 20:27 - 000000000 ____D C:\Program Files\UNP
2019-06-23 19:48 - 2019-06-23 19:48 - 000581696 _____ ( ) C:\Users\Makki\Downloads\Super Dual Box Pro vista,windows 7.exe
2019-06-23 19:48 - 2019-06-23 19:48 - 000000000 ____D C:\Program Files (x86)\Superjoy Box Pro
2019-06-23 19:48 - 2007-08-13 01:30 - 000025120 _____ (TigerGame.,Ltd) C:\Windows\system32\Drivers\Maypro.sys
2019-06-23 19:48 - 2007-08-13 00:13 - 000315392 _____ (TigerGame) C:\Windows\SysWOW64\Projoycpl.dll
2019-06-23 19:48 - 2007-08-13 00:12 - 000322560 _____ (TigerGame) C:\Windows\system32\Projoycpl.dll
2019-06-23 19:48 - 2007-07-16 07:32 - 000016928 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\SuperJoyBox DriverLoader.exe
2019-06-23 19:48 - 2007-05-20 23:19 - 000038400 _____ (TigerGame Ltd.,) C:\Windows\system32\ffdrv1.dll
2019-06-23 19:48 - 2007-05-11 13:28 - 000049152 _____ (TigerGame Ltd.,) C:\Windows\SysWOW64\ffdrv1.dll
2019-06-23 19:47 - 2019-06-23 19:47 - 000535200 _____ ( ) C:\Users\Makki\Downloads\Setup345 Vista,windows 7.exe

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-07-18 21:49 - 2018-09-15 10:31 - 000000000 ____D C:\Windows\INF
2019-07-18 21:35 - 2019-03-18 21:27 - 001258772 _____ C:\Windows\system32\PerfStringBackup.INI
2019-07-18 21:35 - 2018-09-15 19:20 - 000403520 _____ C:\Windows\system32\perfh00B.dat
2019-07-18 21:35 - 2018-09-15 19:20 - 000073638 _____ C:\Windows\system32\perfc00B.dat
2019-07-18 21:30 - 2018-09-15 10:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-07-18 21:28 - 2019-03-18 21:18 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-07-18 21:28 - 2018-09-15 09:09 - 000524288 _____ C:\Windows\system32\config\BBI
2019-07-18 21:09 - 2019-03-18 21:40 - 000000000 ___HD C:\Users\Makki\AppData\Local\D3DSCache
2019-07-18 16:49 - 2019-03-18 21:18 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-07-18 01:20 - 2019-03-18 21:37 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-07-18 01:20 - 2019-03-18 21:37 - 000000000 __RHD C:\Users\Makki\3D Objects
2019-07-18 01:20 - 2018-09-15 10:33 - 000000000 ____D C:\Windows\AppReadiness
2019-07-18 01:19 - 2019-03-18 21:18 - 000294672 _____ C:\Windows\system32\FNTCACHE.DAT
2019-07-18 01:17 - 2018-09-15 10:33 - 000000000 ____D C:\Windows\SysWOW64\oobe
2019-07-18 01:17 - 2018-09-15 10:33 - 000000000 ____D C:\Windows\SysWOW64\Dism
2019-07-18 01:17 - 2018-09-15 10:33 - 000000000 ____D C:\Windows\system32\oobe
2019-07-18 01:17 - 2018-09-15 10:33 - 000000000 ____D C:\Windows\system32\appraiser
2019-07-18 01:17 - 2018-09-15 10:33 - 000000000 ____D C:\Windows\ShellExperiences
2019-07-18 01:17 - 2018-09-15 10:33 - 000000000 ____D C:\Windows\ShellComponents
2019-07-18 01:17 - 2018-09-15 10:33 - 000000000 ____D C:\Windows\Provisioning
2019-07-18 01:17 - 2018-09-15 10:33 - 000000000 ____D C:\Windows\bcastdvr
2019-07-18 01:17 - 2018-09-15 09:09 - 000000000 ____D C:\Windows\system32\Dism
2019-07-18 00:13 - 2018-09-15 10:23 - 000000000 ____D C:\Windows\CbsTemp
2019-07-18 00:10 - 2019-03-18 22:35 - 000000000 ____D C:\Windows\system32\MRT
2019-07-18 00:05 - 2019-03-18 22:35 - 136618864 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-07-17 22:15 - 2019-03-18 21:34 - 000000000 ___HD C:\Users\Makki
2019-07-17 21:12 - 2018-09-15 10:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-07-17 21:09 - 2018-09-15 10:33 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-07-17 21:04 - 2019-03-26 12:07 - 000002295 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-07-17 21:04 - 2019-03-26 12:07 - 000002254 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-07-11 16:18 - 2019-03-19 13:08 - 000001106 _____ C:\Users\Makki\Desktop\OpenOffice 4.1.6.lnk
2019-07-11 16:18 - 2019-03-18 23:25 - 000002106 _____ C:\Users\Makki\Desktop\Adobe Photoshop CS2.lnk
2019-07-11 14:46 - 2019-03-18 22:31 - 000741432 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-07-11 14:46 - 2019-03-18 21:18 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-06-23 19:58 - 2019-03-18 23:01 - 000000000 ___HD C:\Users\Makki\AppData\Local\AMD

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================

Addition.txt

Share this post


Link to post
Share on other sites

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.


Let me know if there are any remaining issues or concerns....

fixlist.txt

Share this post


Link to post
Share on other sites

Yes your PC should be ok, FRST logs were clear of any malware or infection...

Right click on FRST here: C:\Users\Makki\Downloads\FRST64.exe and rename uninstall.exe when complete right click on uninstall.exe and select "Run as Administrator"

If you do not see the .exe appended that is because file extensions are hidden, in that case just rename FRST64 to uninstall

That action will remove FRST and all created files and folders...

Next,

Remove all System Restore Points: https://www.tenforums.com/tutorials/33593-delete-system-restore-points-windows-10-a.html#option2

Create clean fresh Restore Point: http://www.thewindowsclub.com/create-system-restore-point

Run Windows Disk Clean Up Utility - https://neosmart.net/wiki/disk-cleanup/

From there you should be good to go...

Next,

Read the following links to fully understand PC Security and Best Practices, you may find them useful....

Answers to Common Security Questions and best Practices

Do I need a Registry Cleaner?

Take care and surf safe

Kevin... user posted image

Share this post


Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.