Jump to content

Its very very bad...

ItsBad

By ItsBad
in Resolved Malware Removal Logs

 Share

Recommended Posts

ItsBad

ItsBad

Posted
Posted

I will be grateful for all help..

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-02-2020 02
Ran by Xymox (administrator) on DESKTOP-L0MJUDN (LENOVO 90L1005UMW) (05-02-2020 05:37:50)
Running from C:\Users\Xymox\Desktop
Loaded Profiles: Xymox (Available Profiles: Xymox)
Platform: Windows 10 Home Version 1909 18363.628 (X64) Language: Svenska (Sverige)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_31a8dbbf39dcdc3b\jhi_service.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscalculator_10.1910.0.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12001.1001.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LsaIso.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mspaint.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvle.inf_amd64_2e9a548ba136a529\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvle.inf_amd64_2e9a548ba136a529\Display.NvContainer\NVDisplay.Container.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [816160 2018-09-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [183088 2019-11-29] (ESET, spol. s r.o. -> ESET)
HKU\S-1-5-21-4205045116-2680619991-1224258599-1001\...\Run: [Spotify] => C:\Users\Xymox\AppData\Roaming\Spotify\Spotify.exe [22240160 2020-02-01] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-4205045116-2680619991-1224258599-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3311568 2020-01-18] (Valve -> Valve Corporation)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0A039EFC-E2AE-41CC-ADFC-B05D2D7C989A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2020-02-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3FAB2FC3-3684-4A46-BA3B-66B1BC070A3C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2020-02-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5C6F1A1D-F158-4770-8D25-D4843728C572} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2020-02-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9036C690-A495-4364-B373-BE65FE59CEFC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2020-02-01] (Microsoft Windows Publisher -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 81.26.226.3 81.26.228.3
Tcpip\..\Interfaces\{4a0250fc-180b-406f-92aa-6defcaf7b145}: [DhcpNameServer] 81.26.226.3 81.26.228.3

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

FireFox:
========
FF DefaultProfile: y2h88p3o.default
FF ProfilePath: C:\Users\Xymox\AppData\Roaming\Mozilla\Firefox\Profiles\y2h88p3o.default [2020-02-03]
FF ProfilePath: C:\Users\Xymox\AppData\Roaming\Mozilla\Firefox\Profiles\72obc3jf.default-release [2020-02-05]
FF Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Xymox\AppData\Roaming\Mozilla\Firefox\Profiles\72obc3jf.default-release\Extensions\firefox@ghostery.com.xpi [2020-02-02]
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2020-02-05]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2245488 2019-11-29] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2245488 2019-11-29] (ESET, spol. s r.o. -> ESET)
R2 jhi_service; C:\WINDOWS\System32\DriverStore\FileRepository\dal.inf_amd64_31a8dbbf39dcdc3b\jhi_service.exe [647568 2019-04-30] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2020-02-01] (Malwarebytes Inc -> Malwarebytes)
R2 RtkAudioUniversalService; C:\WINDOWS\System32\RtkAudUService64.exe [816160 2018-09-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
R2 RtkBtManServ; C:\WINDOWS\RtkBtManServ.exe [709376 2019-05-20] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2020-02-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2020-02-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvle.inf_amd64_2e9a548ba136a529\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvle.inf_amd64_2e9a548ba136a529\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [149944 2019-11-29] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [103264 2019-11-29] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15800 2019-10-16] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [189512 2019-11-29] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [116696 2019-11-29] (ESET, spol. s r.o. -> ESET)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-02-01] (Malwarebytes Corporation -> Malwarebytes)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-02-03] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [226448 2020-02-04] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73584 2020-02-04] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-02-04] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [119960 2020-02-04] (Malwarebytes Inc -> Malwarebytes)
R3 MEIx64; C:\WINDOWS\System32\DriverStore\FileRepository\heci.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sys [266128 2019-04-17] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvle.inf_amd64_2e9a548ba136a529\nvlddmkm.sys [23251360 2020-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
S3 RtkBtFilter; C:\WINDOWS\System32\drivers\RtkBtfilter.sys [837448 2019-05-20] (WDKTestCert VSAuto,131800073559665678 -> Realtek Semiconductor Corporation)
S3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [8432128 2019-03-19] (Microsoft Windows -> Realtek Semiconductor Corporation )
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45664 2020-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [355760 2020-02-01] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2020-02-01] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-13 06:31 - 2019-12-10 06:15 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-03-13 06:31 - 2019-12-10 05:59 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-03-13 06:31 - 2018-09-13 01:50 - 005484656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPOU64.dll
2020-03-13 06:31 - 2018-09-13 01:50 - 001127112 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCOM64.dll
2020-03-13 06:31 - 2018-09-13 01:50 - 000816160 _____ (Realtek Semiconductor) C:\WINDOWS\system32\RtkAudUService64.exe
2020-03-13 06:31 - 2018-09-13 01:50 - 000809392 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64U.dll
2020-03-13 06:31 - 2018-09-13 01:50 - 000482056 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2020-03-13 06:31 - 2018-09-13 01:50 - 000215200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2020-03-13 06:30 - 2020-02-02 03:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-03-13 06:30 - 2020-01-20 09:43 - 000237848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2020-03-13 06:30 - 2020-01-20 09:41 - 004963480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2020-03-13 06:30 - 2019-11-11 04:39 - 005477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2020-03-13 06:29 - 2018-09-13 01:50 - 006380584 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2020-03-13 06:29 - 2018-09-13 01:41 - 021700743 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2020-03-13 06:26 - 2020-03-13 06:26 - 000000000 ___HD C:\Users\Xymox\MicrosoftEdgeBackups
2020-03-06 08:46 - 2020-02-01 16:07 - 000000000 ___RD C:\Users\Xymox\OneDrive
2020-03-06 08:39 - 2020-02-01 16:06 - 000001450 _____ C:\Users\Xymox\Desktop\Microsoft Edge.lnk
2020-03-06 08:38 - 2020-02-02 22:54 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-03-06 08:38 - 2020-02-02 22:54 - 000000000 ___RD C:\Users\Xymox\3D Objects
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Public\Documents\Mina videoklipp
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Public\Documents\Mina bilder
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Public\Documents\Min musik
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Start-meny
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Skrivare
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Programdata
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Nätverket
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Mina dokument
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Mallar
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Lokala inställningar
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Documents\Mina videoklipp
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Documents\Mina bilder
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\Documents\Min musik
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Program
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Start-meny
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Skrivare
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Programdata
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Nätverket
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Mina dokument
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Mallar
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Lokala inställningar
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Documents\Mina videoklipp
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Documents\Mina bilder
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\Documents\Min musik
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Program
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Program
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Program
2020-03-06 08:33 - 2020-03-06 08:33 - 000000000 _SHDL C:\Documents and Settings
2020-02-05 05:37 - 2020-02-05 05:38 - 000012140 _____ C:\Users\Xymox\Desktop\FRST.txt
2020-02-05 05:37 - 2020-02-05 05:38 - 000000000 ____D C:\FRST
2020-02-05 05:32 - 2020-02-05 05:32 - 002279424 _____ (Farbar) C:\Users\Xymox\Desktop\FRST64.exe
2020-02-05 05:31 - 2020-02-05 05:37 - 000007631 _____ C:\Users\Xymox\AppData\Local\resmon.resmoncfg
2020-02-04 12:41 - 2020-02-04 12:41 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-02-04 12:41 - 2020-02-04 12:41 - 000226448 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2020-02-04 12:41 - 2020-02-04 12:41 - 000119960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2020-02-04 12:41 - 2020-02-04 12:41 - 000073584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2020-02-04 12:04 - 2020-02-04 12:04 - 000000000 ____D C:\Users\Xymox\AppData\Local\ElevatedDiagnostics
2020-02-03 20:31 - 2020-02-03 20:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2020-02-03 20:31 - 2020-02-03 20:31 - 000000000 ____D C:\ProgramData\ESET
2020-02-03 20:31 - 2020-02-03 20:31 - 000000000 ____D C:\Program Files\ESET
2020-02-03 20:29 - 2020-02-03 20:29 - 056590432 _____ (ESET) C:\Users\Xymox\Desktop\eav_nt64.exe
2020-02-03 20:21 - 2020-02-03 20:21 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-02-03 07:12 - 2020-02-03 07:12 - 000000916 _____ C:\Users\Public\Desktop\VLC media player.lnk
2020-02-03 07:12 - 2020-02-03 07:12 - 000000023 _____ C:\Program Files\plugins.dat
2020-02-03 07:12 - 2020-02-03 07:12 - 000000000 ____D C:\Users\Xymox\AppData\Roaming\vlc
2020-02-03 07:11 - 2020-02-03 07:11 - 000000000 ____D C:\Program Files\VideoLAN
2020-02-03 07:10 - 2020-02-03 07:10 - 042030736 _____ C:\Users\Xymox\Downloads\vlc-3.0.8-win64.exe
2020-02-03 03:48 - 2020-02-04 12:41 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2020-02-03 03:08 - 2020-02-03 03:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\S-1-5-21-4205045116-2680619991-1224258599-1001
2020-02-03 03:04 - 2020-02-03 03:48 - 000001205 _____ C:\ProgramData\NvcDispCorePlugin.log_backup1
2020-02-02 21:39 - 2020-02-02 22:54 - 000000000 ____D C:\Users\Xymox\AppData\Local\D3DSCache
2020-02-02 21:36 - 2020-02-02 21:36 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 009926968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 007754240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 007600656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 006516648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 006285312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 005914112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 003819008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-02-02 21:36 - 2020-02-02 21:36 - 002801152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-02-02 21:36 - 2020-02-02 21:36 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002493928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-02-02 21:36 - 2020-02-02 21:36 - 001743672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001610752 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001399304 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-02-02 21:36 - 2020-02-02 21:36 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-02-02 21:36 - 2020-02-02 21:36 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-02-02 21:36 - 2020-02-02 21:36 - 001283584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001073168 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000875144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000679160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-02-02 21:36 - 2020-02-02 21:36 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000518184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-02-02 21:36 - 2020-02-02 21:36 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-02-02 21:36 - 2020-02-02 21:36 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000467648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-02-02 21:36 - 2020-02-02 21:36 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2020-02-02 21:36 - 2020-02-02 21:36 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000404912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-02-02 21:36 - 2020-02-02 21:36 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000248064 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-02-02 21:36 - 2020-02-02 21:36 - 000221200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-02-02 21:36 - 2020-02-02 21:36 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000093704 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-02-02 21:36 - 2020-02-02 21:36 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000059221 _____ C:\WINDOWS\system32\srms.dat
2020-02-02 21:36 - 2020-02-02 21:36 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000021304 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-02-02 21:36 - 2020-02-02 21:36 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-02-02 21:36 - 2020-02-02 21:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-02-02 21:35 - 2020-02-02 21:35 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 003729408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 003591184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000874512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-02-02 21:35 - 2020-02-02 21:35 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-02-02 21:35 - 2020-02-02 21:35 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-02-02 21:35 - 2020-02-02 21:35 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2020-02-02 03:48 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2020-02-02 03:48 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2020-02-02 03:48 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2020-02-02 03:48 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2020-02-02 03:48 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2020-02-02 03:48 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2020-02-02 03:48 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2020-02-02 03:48 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2020-02-02 03:48 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2020-02-02 03:48 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2020-02-02 03:48 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2020-02-02 03:48 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2020-02-02 03:48 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2020-02-02 03:48 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2020-02-02 03:48 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2020-02-02 03:48 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2020-02-02 03:48 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2020-02-02 03:48 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2020-02-02 03:48 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2020-02-02 03:48 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2020-02-02 03:48 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2020-02-02 03:48 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2020-02-02 03:48 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2020-02-02 03:48 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2020-02-02 03:48 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2020-02-02 03:48 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2020-02-02 03:48 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2020-02-02 03:48 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2020-02-02 03:48 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2020-02-02 03:48 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2020-02-02 03:48 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2020-02-02 03:48 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2020-02-02 03:48 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2020-02-02 03:48 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2020-02-02 03:48 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2020-02-02 03:48 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2020-02-02 03:48 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2020-02-02 03:48 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2020-02-02 03:48 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2020-02-02 03:48 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2020-02-02 03:48 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2020-02-02 03:48 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2020-02-02 03:48 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2020-02-02 03:48 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2020-02-02 03:48 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2020-02-02 03:48 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2020-02-02 03:48 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2020-02-02 03:48 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2020-02-02 03:48 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2020-02-02 03:48 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2020-02-02 03:48 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2020-02-02 03:48 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2020-02-02 03:48 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2020-02-02 03:48 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2020-02-02 03:48 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2020-02-02 03:48 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2020-02-02 03:48 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2020-02-02 03:48 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2020-02-02 03:48 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2020-02-02 03:48 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2020-02-02 03:48 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2020-02-02 03:48 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2020-02-02 03:48 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2020-02-02 03:48 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2020-02-02 03:47 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2020-02-02 03:47 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2020-02-02 03:47 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2020-02-02 03:47 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2020-02-02 03:47 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2020-02-02 03:47 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2020-02-02 03:47 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2020-02-02 03:47 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2020-02-02 03:47 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2020-02-02 03:47 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2020-02-02 03:47 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2020-02-02 03:47 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2020-02-02 03:47 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2020-02-02 03:47 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2020-02-02 03:47 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2020-02-02 03:47 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2020-02-02 03:47 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2020-02-02 03:47 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2020-02-02 03:47 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2020-02-02 03:47 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2020-02-02 03:47 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2020-02-02 03:47 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2020-02-02 03:47 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2020-02-02 03:47 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2020-02-02 03:47 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2020-02-02 03:47 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2020-02-02 03:47 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2020-02-02 03:47 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2020-02-02 03:47 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2020-02-02 03:47 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2020-02-02 03:47 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2020-02-02 03:47 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2020-02-02 03:47 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2020-02-02 03:47 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2020-02-02 03:47 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2020-02-02 03:47 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2020-02-02 03:47 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2020-02-02 03:47 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2020-02-02 03:47 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2020-02-02 03:47 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2020-02-02 03:47 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2020-02-02 03:47 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2020-02-02 03:47 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2020-02-02 03:47 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2020-02-02 03:47 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2020-02-02 03:47 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2020-02-02 03:47 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2020-02-02 03:47 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2020-02-02 03:47 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2020-02-02 03:47 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2020-02-02 03:47 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2020-02-02 03:47 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2020-02-02 03:47 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2020-02-02 03:47 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2020-02-02 03:47 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2020-02-02 03:47 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2020-02-02 03:47 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2020-02-02 03:47 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2020-02-02 03:47 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2020-02-02 03:47 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2020-02-02 03:47 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2020-02-02 03:47 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2020-02-02 03:47 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2020-02-02 03:47 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2020-02-02 03:47 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2020-02-02 03:47 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2020-02-02 03:47 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2020-02-02 03:47 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2020-02-02 03:47 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2020-02-02 03:47 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2020-02-02 03:47 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2020-02-02 03:47 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2020-02-02 03:47 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2020-02-02 03:47 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2020-02-02 03:47 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2020-02-02 03:47 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2020-02-02 03:47 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2020-02-02 03:47 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2020-02-02 03:47 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2020-02-02 03:47 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2020-02-02 03:47 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2020-02-02 03:47 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2020-02-02 03:47 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2020-02-02 03:47 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2020-02-02 03:47 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2020-02-02 03:47 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2020-02-02 03:47 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2020-02-02 03:47 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2020-02-02 03:47 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2020-02-02 03:47 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2020-02-02 03:47 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2020-02-02 03:47 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2020-02-02 03:47 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2020-02-02 03:47 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2020-02-02 03:47 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2020-02-02 03:47 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2020-02-02 03:47 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2020-02-02 03:47 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2020-02-02 03:47 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2020-02-02 03:47 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2020-02-02 03:35 - 2020-02-02 03:35 - 000000219 _____ C:\Users\Xymox\Desktop\Dota 2.url
2020-02-02 03:31 - 2020-02-05 04:17 - 000000000 ____D C:\Program Files (x86)\Steam
2020-02-02 03:31 - 2020-02-02 03:31 - 000001036 _____ C:\Users\Public\Desktop\Steam.lnk
2020-02-02 03:31 - 2020-02-02 03:31 - 000000000 ____D C:\Users\Xymox\AppData\Local\Steam
2020-02-02 03:31 - 2020-02-02 03:31 - 000000000 ____D C:\Users\Xymox\AppData\Local\CEF
2020-02-02 03:30 - 2020-02-02 03:30 - 001573568 _____ C:\Users\Xymox\Downloads\SteamSetup.exe
2020-02-01 23:47 - 2020-02-05 05:37 - 000000000 ____D C:\Users\Xymox\AppData\Local\Spotify
2020-02-01 23:47 - 2020-02-05 03:30 - 000000000 ____D C:\Users\Xymox\AppData\Roaming\Spotify
2020-02-01 23:47 - 2020-02-01 23:47 - 000896512 _____ (Spotify Ltd) C:\Users\Xymox\Downloads\SpotifySetup.exe
2020-02-01 23:47 - 2020-02-01 23:47 - 000001850 _____ C:\Users\Xymox\Desktop\Spotify.lnk
2020-02-01 23:47 - 2020-02-01 23:47 - 000001836 _____ C:\Users\Xymox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2020-02-01 17:35 - 2020-02-01 17:35 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-02-01 17:35 - 2020-02-01 17:35 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-02-01 17:35 - 2020-02-01 17:35 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-02-01 17:35 - 2020-02-01 17:35 - 000000000 ____D C:\Users\Xymox\AppData\Local\mbamtray
2020-02-01 17:35 - 2020-02-01 17:35 - 000000000 ____D C:\Users\Xymox\AppData\Local\mbam
2020-02-01 17:35 - 2020-02-01 17:35 - 000000000 ____D C:\Users\Xymox\AppData\Local\cache
2020-02-01 17:35 - 2020-02-01 17:35 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-02-01 17:35 - 2020-02-01 17:35 - 000000000 ____D C:\Program Files\Malwarebytes
2020-02-01 17:34 - 2020-02-01 17:34 - 001924728 _____ (Malwarebytes) C:\Users\Xymox\Downloads\MBSetup.exe
2020-02-01 17:33 - 2020-02-01 17:33 - 000000000 ____D C:\Users\Xymox\AppData\Local\Comms
2020-02-01 16:13 - 2020-02-04 21:10 - 000013092 _____ C:\ProgramData\DisplaySessionContainer2.log_backup1
2020-02-01 16:11 - 2020-02-03 20:31 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-02-01 16:11 - 2020-02-01 16:11 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-02-01 16:11 - 2020-02-01 16:11 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2020-02-01 16:11 - 2020-02-01 16:11 - 000000000 ____D C:\Users\Xymox\AppData\Roaming\Mozilla
2020-02-01 16:11 - 2020-02-01 16:11 - 000000000 ____D C:\Users\Xymox\AppData\Local\Mozilla
2020-02-01 16:11 - 2020-02-01 16:11 - 000000000 ____D C:\ProgramData\Mozilla
2020-02-01 16:11 - 2020-02-01 16:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-02-01 16:10 - 2020-02-01 16:11 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-02-01 16:10 - 2020-02-01 16:10 - 120202352 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-02-01 16:09 - 2020-02-01 16:09 - 000748816 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2020-02-01 16:08 - 2020-02-04 10:49 - 000000000 ____D C:\Users\Xymox\AppData\Local\PlaceholderTileLogoFolder
2020-02-01 16:08 - 2020-02-01 16:08 - 000000000 ____D C:\Users\Xymox\AppData\Local\PokerClient
2020-02-01 16:08 - 2020-02-01 16:08 - 000000000 ____D C:\Users\Xymox\AppData\Local\NVIDIA
2020-02-01 16:06 - 2020-02-01 16:06 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2020-02-01 16:05 - 2020-02-02 22:56 - 000000000 ____D C:\Users\Xymox\AppData\Local\Packages
2020-02-01 16:05 - 2020-02-01 17:33 - 000000000 ____D C:\ProgramData\Packages
2020-02-01 16:05 - 2020-02-01 16:05 - 000000020 ___SH C:\Users\Xymox\ntuser.ini
2020-02-01 16:05 - 2020-02-01 16:05 - 000000000 ____D C:\Users\Xymox\AppData\Roaming\Adobe
2020-02-01 16:05 - 2020-02-01 16:05 - 000000000 ____D C:\Users\Xymox\AppData\Local\VirtualStore
2020-02-01 16:05 - 2020-02-01 16:05 - 000000000 ____D C:\Users\Xymox\AppData\Local\Publishers
2020-02-01 16:05 - 2020-02-01 16:05 - 000000000 ____D C:\Users\Xymox\AppData\Local\MicrosoftEdge
2020-02-01 16:05 - 2020-02-01 16:05 - 000000000 ____D C:\Users\Xymox\AppData\Local\ConnectedDevicesPlatform
2020-02-01 14:38 - 2020-02-04 19:31 - 001603366 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-02-01 14:36 - 2020-02-03 08:06 - 000006537 _____ C:\ProgramData\DisplaySessionContainer1.log_backup1
2020-02-01 14:36 - 2020-02-01 14:36 - 000000000 ____D C:\WINDOWS\minidump
2020-02-01 14:36 - 2020-02-01 14:36 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2020-02-01 14:36 - 2019-10-07 03:57 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\Users\Default\AppData\Local\Tidigare
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\Users\Default\AppData\Local\Programdata
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Tidigare
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Programdata
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\Users\Default User
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\Users\All Users
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\ProgramData\Start-meny
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\ProgramData\Skrivbord
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\ProgramData\Programdata
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\ProgramData\Mallar
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\ProgramData\Dokument
2020-02-01 14:35 - 2020-02-01 14:35 - 000000000 _SHDL C:\Program Files\Delade filer
2020-02-01 14:34 - 2020-02-04 12:41 - 000049723 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_backup1
2020-02-01 14:34 - 2020-02-04 12:41 - 000018574 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_backup1
2020-02-01 14:34 - 2020-02-04 12:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-02-01 14:34 - 2020-02-01 16:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-02-01 14:33 - 2020-02-02 01:29 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2020-02-01 14:33 - 2020-02-01 16:05 - 000000000 ____D C:\Users\Xymox
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Start-meny
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Skrivare
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Programdata
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Nätverket
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Mina dokument
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Mallar
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Lokala inställningar
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Documents\Mina videoklipp
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Documents\Mina bilder
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\Documents\Min musik
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\AppData\Roaming\Microsoft\Windows\Start Menu\Program
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\AppData\Local\Tidigare
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 _SHDL C:\Users\Xymox\AppData\Local\Programdata
2020-02-01 14:33 - 2020-02-01 14:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2020-02-01 14:32 - 2020-02-03 08:05 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-02-01 14:32 - 2020-02-02 22:53 - 000258568 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-02-01 14:32 - 2020-02-01 14:32 - 000486181 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2020-02-01 14:32 - 2020-02-01 14:32 - 000000000 ____D C:\ProgramData\Realtek
2020-02-01 14:31 - 2020-02-01 14:36 - 000000000 ____D C:\Windows.old
2020-02-01 14:31 - 2020-02-01 14:31 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-02-01 14:31 - 2020-02-01 14:31 - 000000000 ____D C:\WINDOWS\Setup
2020-02-01 14:31 - 2020-02-01 14:31 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2020-02-01 14:30 - 2020-02-04 19:31 - 000679028 _____ C:\WINDOWS\system32\perfh01D.dat
2020-02-01 14:30 - 2020-02-04 19:31 - 000137638 _____ C:\WINDOWS\system32\perfc01D.dat
2020-02-01 14:30 - 2020-02-01 14:30 - 000301162 _____ C:\WINDOWS\system32\perfi01D.dat
2020-02-01 14:30 - 2020-02-01 14:30 - 000039264 _____ C:\WINDOWS\system32\perfd01D.dat
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\sv
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\winrm
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\WCN
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\sv
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\slmgr
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\0409
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\OCR
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\DigitalLocker
2020-02-01 14:30 - 2020-02-01 14:30 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-02-01 14:30 - 2019-10-07 04:02 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-02-01 14:30 - 2019-10-07 04:02 - 000179816 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-01 14:29 - 2020-02-05 03:30 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-01 14:29 - 2020-02-04 06:21 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-02-01 14:29 - 2020-02-03 20:31 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-02-01 14:29 - 2020-02-03 03:47 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-02-01 14:29 - 2020-02-02 22:47 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-02-01 14:29 - 2020-02-02 22:47 - 000000000 ____D C:\WINDOWS\SystemResources
2020-02-01 14:29 - 2020-02-02 22:47 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-02-01 14:29 - 2020-02-02 22:47 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-02-01 14:29 - 2020-02-02 22:47 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-02-01 14:29 - 2020-02-02 22:47 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-02-01 14:29 - 2020-02-02 04:01 - 000000000 ____D C:\WINDOWS\appcompat
2020-02-01 14:29 - 2020-02-02 03:47 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-02-01 14:29 - 2020-02-02 03:31 - 000000000 ___RD C:\Program Files (x86)
2020-02-01 14:29 - 2020-02-02 01:29 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-01 14:29 - 2020-02-01 17:33 - 000000000 ____D C:\WINDOWS\ServiceState
2020-02-01 14:29 - 2020-02-01 16:12 - 000000000 ____D C:\WINDOWS\system32\spool
2020-02-01 14:29 - 2020-02-01 16:12 - 000000000 ____D C:\WINDOWS\system32\setup
2020-02-01 14:29 - 2020-02-01 16:12 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-02-01 14:29 - 2020-02-01 16:09 - 000000000 ____D C:\Program Files\Windows Defender
2020-02-01 14:29 - 2020-02-01 14:39 - 000000000 ____D C:\ProgramData\USOPrivate
2020-02-01 14:29 - 2020-02-01 14:35 - 000000000 ____D C:\Program Files\Windows NT
2020-02-01 14:29 - 2020-02-01 14:34 - 000000000 __RHD C:\Users\Public\Libraries
2020-02-01 14:29 - 2020-02-01 14:33 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-02-01 14:29 - 2020-02-01 14:32 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-02-01 14:29 - 2020-02-01 14:32 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ___SD C:\WINDOWS\system32\F12
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ___SD C:\WINDOWS\system32\dsc
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\MUI
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\system32\Com
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\IME
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\WINDOWS\Help
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\Program Files\Common Files\System
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-02-01 14:29 - 2020-02-01 14:30 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 __SHD C:\Program Files\Windows Sidebar
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 __RSD C:\WINDOWS\Media
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ___SD C:\WINDOWS\system32\UNP
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ___SD C:\WINDOWS\system32\Nui
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ___HD C:\WINDOWS\LanguageOverlayCache
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Vss
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Web
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\WaaS
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\tracing
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\TextInput
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\TAPI
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\Msdtc
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SystemApps
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\winevt
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\ti-et
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\ta-lk
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\ta-in
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\si-lk
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\ras
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\osa-Osge-001
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\my-mm
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\Keywords
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\IME
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\icsxml
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\ias
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\ff-Adlm-SN
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\DriverState
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\downlevel
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\DDFs
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\appraiser
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\am-et
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\System
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SKB
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\ShellComponents
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\security
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\schemas
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\SchCache
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Resources
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\rescache
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Registration
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Provisioning
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\PLA
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Performance
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\ModemLogs
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\L2Schemas
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\InputMethod
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\IdentityCRL
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Globalization
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\DiagTrack
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Cursors
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Containers
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\Branding
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\addins
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\ProgramData\USOShared
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\Program Files\Windows Security
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\Program Files\Windows Portable Devices
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\Program Files\ModifiableWindowsApps
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\Program Files\Common Files\Services
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\Program Files (x86)\Windows NT
2020-02-01 14:29 - 2020-02-01 14:29 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2020-02-01 14:29 - 2020-02-01 14:28 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2020-02-01 14:29 - 2020-02-01 14:28 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2020-02-01 14:29 - 2020-02-01 14:28 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2020-02-01 14:29 - 2020-02-01 14:28 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2020-02-01 14:29 - 2020-02-01 14:28 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2020-02-01 14:29 - 2020-02-01 14:28 - 000018903 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2020-02-01 14:29 - 2020-02-01 14:28 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2020-02-01 14:29 - 2020-02-01 14:28 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2020-02-01 14:29 - 2020-02-01 14:28 - 000003103 _____ C:\WINDOWS\SysWOW64\mmc.exe.config
2020-02-01 14:29 - 2020-02-01 14:28 - 000003103 _____ C:\WINDOWS\system32\mmc.exe.config
2020-02-01 14:29 - 2020-02-01 14:28 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2020-02-01 14:29 - 2020-02-01 14:28 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2020-02-01 14:29 - 2020-02-01 14:28 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2020-02-01 14:29 - 2020-02-01 14:28 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2020-02-01 14:29 - 2020-02-01 14:28 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2020-02-01 14:29 - 2020-02-01 14:28 - 000000219 _____ C:\WINDOWS\system.ini
2020-02-01 14:29 - 2020-02-01 14:28 - 000000092 _____ C:\WINDOWS\win.ini
2020-02-01 14:28 - 2020-02-04 19:31 - 000000000 ____D C:\WINDOWS\INF
2020-02-01 14:26 - 2020-02-04 12:41 - 070254592 _____ C:\WINDOWS\system32\config\SOFTWARE
2020-02-01 14:26 - 2020-02-04 12:41 - 011796480 _____ C:\WINDOWS\system32\config\SYSTEM
2020-02-01 14:26 - 2020-02-04 12:41 - 000524288 _____ C:\WINDOWS\system32\config\DEFAULT
2020-02-01 14:26 - 2020-02-04 12:41 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-02-01 14:26 - 2020-02-04 12:41 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2020-02-01 14:26 - 2020-02-04 12:41 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY
2020-02-01 14:26 - 2020-02-03 20:58 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-02-01 14:26 - 2020-02-03 03:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-01 14:26 - 2020-02-01 16:12 - 000000000 ____D C:\WINDOWS\servicing
2020-02-01 14:26 - 2020-02-01 14:36 - 000000000 ____D C:\WINDOWS\Panther
2020-02-01 14:26 - 2020-02-01 14:29 - 000000000 ____D C:\WINDOWS\system32\SMI
2020-02-01 14:23 - 2020-02-01 14:32 - 000000000 ___HD C:\$SysReset
2020-01-29 00:12 - 2020-01-29 00:12 - 000000910 _____ C:\Users\Xymox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2020-01-29 00:11 - 2020-01-29 00:11 - 066687488 _____ C:\Users\Xymox\Downloads\torbrowser-install-win64-9.0.4_en-US.exe
2020-01-27 20:15 - 2020-01-27 20:15 - 000000826 _____ C:\Users\Xymox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bet365.se Poker.lnk
2020-01-27 20:15 - 2020-01-27 20:15 - 000000796 _____ C:\Users\Xymox\Desktop\Bet365.se Poker.lnk
2020-01-27 20:14 - 2020-01-27 20:14 - 000000000 ____D C:\Poker
2020-01-27 12:36 - 2020-01-27 12:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProtonVPN
2020-01-26 22:14 - 2020-02-03 07:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-01-26 21:20 - 2020-02-01 17:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-01-23 17:47 - 2020-01-23 17:47 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 019849216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 014816256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 008012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 007849424 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 007278592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 007016448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 005943296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 005890048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 005501952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 004578816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 004307968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 004150272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 004047360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 003791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 003752960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 003487232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002956472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002871848 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 002870784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 002698768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 002576384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002473976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002399232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002147328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002120704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 002114048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001985928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001974824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 001920512 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001866272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001697280 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001647072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001539584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001428992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 001413840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001330952 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001261464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001259416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001106944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001069064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001059840 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 001054864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001020032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 001006904 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000986936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000982840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000911824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000842552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000826368 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000822416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000822072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000811536 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000797112 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000774456 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000768528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000700416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000689664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000678712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000674280 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000673456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000657424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000642560 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000638264 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000593128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000586768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000571392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000551736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000542496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.UserService.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000524264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000514576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000513336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000511000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000461320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000432256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000422712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000415544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000380944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000372752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000363840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000354816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000322504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000292664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000291256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000251512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\accessibilitycpl.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000204816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accessibilitycpl.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000164776 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000162696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000136536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000127520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinHvPlatform.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Utilman.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000113160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000105488 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2020-01-23 17:47 - 2020-01-23 17:47 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Utilman.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcXtrnal.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AtBroker.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000084488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2020-01-23 17:47 - 2020-01-23 17:47 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\reg.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2020-01-23 17:47 - 2020-01-23 17:47 - 000067112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AtBroker.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000061240 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvhostsvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\reg.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000047616 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthMini.SYS
2020-01-23 17:47 - 2020-01-23 17:47 - 000036368 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevQueryBroker.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\posetup.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000028344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnsi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscisvif.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilotdiag.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidtel.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000024792 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000020352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nsi.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\applockerfltr.sys
2020-01-23 17:47 - 2020-01-23 17:47 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcXtrnal.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL
2020-01-23 17:47 - 2020-01-23 17:47 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscadminui.exe
2020-01-23 17:47 - 2020-01-23 17:47 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2020-01-23 17:47 - 2020-01-23 17:47 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll
2020-01-23 17:44 - 2020-02-05 05:24 - 000000000 ____D C:\Users\Xymox\AppData\LocalLow\Mozilla
2020-01-20 09:45 - 2020-01-20 09:45 - 001729232 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-01-20 09:45 - 2020-01-20 09:45 - 001729232 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-01-20 09:45 - 2020-01-20 09:45 - 001329360 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-01-20 09:45 - 2020-01-20 09:45 - 001329360 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-01-20 09:45 - 2020-01-20 09:45 - 001078992 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-01-20 09:45 - 2020-01-20 09:45 - 001078992 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-01-20 09:45 - 2020-01-20 09:45 - 000937680 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-01-20 09:45 - 2020-01-20 09:45 - 000937680 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-01-20 09:45 - 2020-01-20 09:45 - 000449784 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-01-20 09:45 - 2020-01-20 09:45 - 000353712 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-01-20 09:44 - 2020-01-20 09:44 - 011843488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2020-01-20 09:44 - 2020-01-20 09:44 - 010167736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 002077696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 001569296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 001484208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 001370496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 001146744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 001064976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 001001216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 000825248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 000684800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 000678256 _____ C:\WINDOWS\system32\nvofapi64.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 000573968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2020-01-20 09:43 - 2020-01-20 09:43 - 000556752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 000545112 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2020-01-20 09:43 - 2020-01-20 09:43 - 000055632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2020-01-20 09:42 - 2020-01-20 09:42 - 040512000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2020-01-20 09:42 - 2020-01-20 09:42 - 035380056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2020-01-20 09:42 - 2020-01-20 09:42 - 017461960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2020-01-20 09:42 - 2020-01-20 09:42 - 015029696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2020-01-20 09:42 - 2020-01-20 09:42 - 005382392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2020-01-20 09:42 - 2020-01-20 09:42 - 004717304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2020-01-20 09:42 - 2020-01-20 09:42 - 000859040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2020-01-20 09:42 - 2020-01-20 09:42 - 000814592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2020-01-20 09:42 - 2020-01-20 09:42 - 000659288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2020-01-20 09:42 - 2020-01-20 09:42 - 000451928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2020-01-20 09:41 - 2020-01-20 09:41 - 004230040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2020-01-20 09:26 - 2020-01-20 09:26 - 000081581 _____ C:\WINDOWS\system32\nvidia-smi.1.pdf
2020-01-20 09:26 - 2020-01-20 09:26 - 000076477 _____ C:\WINDOWS\system32\nvinfo.pb

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)


==================== Files in the root of some directories ========

2020-02-03 07:12 - 2020-02-03 07:12 - 000000023 _____ () C:\Program Files\plugins.dat
2020-02-05 05:31 - 2020-02-05 05:37 - 000007631 _____ () C:\Users\Xymox\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-02-2020 02
Ran by Xymox (05-02-2020 05:38:32)
Running from C:\Users\Xymox\Desktop
Windows 10 Home Version 1909 18363.628 (X64) (2020-02-01 13:36:32)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administratör (S-1-5-21-4205045116-2680619991-1224258599-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4205045116-2680619991-1224258599-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-4205045116-2680619991-1224258599-1000 - Limited - Disabled)
Gäst (S-1-5-21-4205045116-2680619991-1224258599-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-4205045116-2680619991-1224258599-504 - Limited - Disabled)
Xymox (S-1-5-21-4205045116-2680619991-1224258599-1001 - Administrator - Enabled) => C:\Users\Xymox

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ESET Security (HKLM\...\{D8E84711-EDFC-4D4E-B579-95AEB40DAA4D}) (Version: 13.0.24.0 - ESET, spol. s r.o.)
Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 72.0.2 (x64 sv-SE) (HKLM\...\Mozilla Firefox 72.0.2 (x64 sv-SE)) (Version: 72.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 72.0.2 - Mozilla)
NVIDIA Grafikdrivrutin 441.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 441.83 - NVIDIA Corporation)
Spotify (HKU\S-1-5-21-4205045116-2680619991-1224258599-1001\...\Spotify) (Version: 1.1.25.559.g85cf5e4c - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)

Packages:
=========
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.956.0_x64__56jybvy8sckqj [2020-02-01] (NVIDIA Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4205045116-2680619991-1224258599-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Xymox\AppData\Local\Microsoft\OneDrive\19.222.1110.0006\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-4205045116-2680619991-1224258599-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Xymox\AppData\Local\Microsoft\OneDrive\19.222.1110.0006\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-4205045116-2680619991-1224258599-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Xymox\AppData\Local\Microsoft\OneDrive\19.222.1110.0006\amd64\FileSyncShell64.dll => No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2019-11-29] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2019-11-29] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvle.inf_amd64_2e9a548ba136a529\nvshext.dll [2020-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2019-11-29] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-01] (Malwarebytes Corporation -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2020-02-01 14:29 - 2020-02-01 14:28 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4205045116-2680619991-1224258599-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 81.26.226.3 - 81.26.228.3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-4205045116-2680619991-1224258599-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-4205045116-2680619991-1224258599-1001\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{C89801FD-8249-4FD2-B23A-764A80DA8538}C:\users\xymox\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\xymox\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{E6920616-922E-4934-8946-5F0CE0BCEB96}C:\users\xymox\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\xymox\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{C90EA9DC-8CA2-4C40-8BE2-D57A96EB9F3A}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe (Valve -> Valve Corporation)
FirewallRules: [UDP Query User{07E8EBFA-5543-45BC-B01E-BA377E304904}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe (Valve -> Valve Corporation)
FirewallRules: [{6E6B27DD-5D9A-4E7B-A315-FCE40E7CCC3B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{6471CA08-3653-4419-9F33-E8AAD15DDDD2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{13603461-B5D6-4AE5-91B2-1A0B90AB6C3D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> )
FirewallRules: [{393AAD1F-693E-478C-A269-DA46D4E6C62A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> )

==================== Restore Points =========================

04-02-2020 12:02:02 AS<d

==================== Faulty Device Manager Devices ============

Name: Realtek 8821CE Wireless LAN 802.11ac PCI-E NIC
Description: Realtek 8821CE Wireless LAN 802.11ac PCI-E NIC
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek Semiconductor Corp.
Service: RTWlanE
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Realtek Bluetooth Adapter
Description: Realtek Bluetooth Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Realtek Semiconductor Corp.
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: ========================

Application errors:
==================
Error: (02/05/2020 05:37:28 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1244,R,98) TILEREPOSITORYS-1-5-18: Felet -1023 (0xfffffc01) inträffade när loggfilen C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log öppnades.

Error: (02/05/2020 05:20:22 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (6792,R,98) TILEREPOSITORYS-1-5-18: Felet -1023 (0xfffffc01) inträffade när loggfilen C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log öppnades.

Error: (02/05/2020 04:37:50 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (6460,R,98) TILEREPOSITORYS-1-5-18: Felet -1023 (0xfffffc01) inträffade när loggfilen C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log öppnades.

Error: (02/05/2020 04:24:06 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (9932,R,98) TILEREPOSITORYS-1-5-18: Felet -1023 (0xfffffc01) inträffade när loggfilen C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log öppnades.

Error: (02/05/2020 03:54:19 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3140,R,98) TILEREPOSITORYS-1-5-18: Felet -1023 (0xfffffc01) inträffade när loggfilen C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log öppnades.

Error: (02/05/2020 03:42:00 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (2748,R,98) TILEREPOSITORYS-1-5-18: Felet -1023 (0xfffffc01) inträffade när loggfilen C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log öppnades.

Error: (02/05/2020 03:35:54 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (8364,R,98) TILEREPOSITORYS-1-5-18: Felet -1023 (0xfffffc01) inträffade när loggfilen C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log öppnades.

Error: (02/05/2020 03:21:11 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (2272,R,98) TILEREPOSITORYS-1-5-18: Felet -1023 (0xfffffc01) inträffade när loggfilen C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log öppnades.


System errors:
=============
Error: (02/02/2020 09:39:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Tjänsten Server avslutades oväntat. Den har gjort detta 1 gång(er). Följande åtgärd kommer att utföras om 60000 millisekunder: Starta om tjänsten.

Error: (02/02/2020 03:31:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Tjänsten Steam Client Service kunde inte startas på grund av följande fel: 
Tjänsten svarade inte på start- eller kontrollbegäran i tid.

Error: (02/02/2020 03:31:29 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: En timeout (30000 ms) inträffade vid väntan på att tjänsten Steam Client Service skulle ansluta.

Error: (02/01/2020 02:36:37 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Tjänsten Printer Extensions and Notifications är markerad som en interaktiv tjänst. Systemet är dock konfigurerat för att inte tillåta interaktiva tjänster. Tjänsten kommer kanske inte att fungera korrekt.

Error: (02/01/2020 02:34:41 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Tjänsten Computer Browser är beroende av tjänsten Workstation. Den sistnämnda kunde inte starta på grund av följande fel: 
Tjänsten kan inte startas. Anledningen är antingen att tjänsten är spärrad eller att inga aktiva enheter är associerade med den.

Error: (02/01/2020 02:34:41 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Tjänsten Computer Browser är beroende av tjänsten Workstation. Den sistnämnda kunde inte starta på grund av följande fel: 
Tjänsten kan inte startas. Anledningen är antingen att tjänsten är spärrad eller att inga aktiva enheter är associerade med den.

Error: (02/01/2020 02:34:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Tjänsten Computer Browser är beroende av tjänsten Workstation. Den sistnämnda kunde inte starta på grund av följande fel: 
Tjänsten kan inte startas. Anledningen är antingen att tjänsten är spärrad eller att inga aktiva enheter är associerade med den.

Error: (02/01/2020 02:34:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Tjänsten Computer Browser är beroende av tjänsten Workstation. Den sistnämnda kunde inte starta på grund av följande fel: 
Tjänsten kan inte startas. Anledningen är antingen att tjänsten är spärrad eller att inga aktiva enheter är associerade med den.


Windows Defender:
===================================
Date: 2020-02-01 17:36:08.709
Description: 
Windows Defender Antivirus-sökningen stoppades innan den slutfördes.
Söknings-ID: {310CFF32-CA21-41E1-A556-D2E570CFBD3B}
Sökningstyp: Antimalware
Sökningsparametrar: Fullständig sökning
Användare: DESKTOP-L0MJUDN\Xymox

Date: 2020-02-03 20:20:48.120
Description: 
Funktionen för realtidsskydd i Windows Defender Antivirus har stött på ett fel och avslutats.
Funktion: Beteendeövervakning
Felkod: 0x80508023
Felbeskrivning: Det gick inte att hitta någon skadlig kod eller annan oönskad programvara på enheten. 
Orsak: Säkerhetsinsikter för program mot skadlig kod har slutat fungera av okänd anledning. I vissa fall kan det hjälpa att starta om tjänsten.

Date: 2020-02-03 03:47:57.624
Description: 
Funktionen för realtidsskydd i Windows Defender Antivirus har stött på ett fel och avslutats.
Funktion: Beteendeövervakning
Felkod: 0x80508023
Felbeskrivning: Det gick inte att hitta någon skadlig kod eller annan oönskad programvara på enheten. 
Orsak: Säkerhetsinsikter för program mot skadlig kod har slutat fungera av okänd anledning. I vissa fall kan det hjälpa att starta om tjänsten.

Date: 2020-02-02 22:23:48.871
Description: 
Funktionen för realtidsskydd i Windows Defender Antivirus har stött på ett fel och avslutats.
Funktion: Beteendeövervakning
Felkod: 0x80508023
Felbeskrivning: Det gick inte att hitta någon skadlig kod eller annan oönskad programvara på enheten. 
Orsak: Säkerhetsinsikter för program mot skadlig kod har slutat fungera av okänd anledning. I vissa fall kan det hjälpa att starta om tjänsten.

Date: 2020-02-01 23:29:50.175
Description: 
Windows Defender Antivirus påträffade ett fel när Windows Defender Offline skulle laddas ned och konfigureras.
Felkod: 0x8000000a
Felbeskrivning: Data som är nödvändiga för att slutföra den här åtgärden är inte tillgängliga ännu. 

CodeIntegrity:
===================================

Date: 2020-02-05 03:22:57.349
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-05 03:22:57.345
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-05 03:22:57.341
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-05 03:22:57.337
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-05 03:22:57.332
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-05 03:22:57.326
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-05 03:22:57.321
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-05 03:22:57.317
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

==================== Memory info =========================== 

BIOS: LENOVO O3QKT34A 04/29/2019
Motherboard: LENOVO 36EB
Processor: Intel(R) Core(TM) i5-9400F CPU @ 2.90GHz
Percentage of memory in use: 48%
Total physical RAM: 8099.28 MB
Available physical RAM: 4180.77 MB
Total Virtual: 10019.28 MB
Available Virtual: 4374.32 MB

==================== Drives ================================

Drive 😄 () (Fixed) (Total:237.84 GB) (Free:178.53 GB) NTFS

\\?\Volume{71d808e0-ec69-4a61-ab92-1b58bbfa9b27}\ (Återställning) (Fixed) (Total:0.52 GB) (Free:0.09 GB) NTFS
\\?\Volume{7e40e43a-c7e4-4a97-9cb7-59c0a0faa33b}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: BEB9727F)

Partition: GPT.

==================== End of Addition.txt =======================

 

I have added pictures and some event logs...

 

 

Disk 0 234GB ONLINE.jpg

network.jpg

network2.jpg

ports listening.jpg

remote acces.jpg

tcp conenctions.jpg

Event Log security.txt install log.txt

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Hello @ItsBad

Please do not directly post the logs. Please attach them

 

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and select Scan and let it run.
  • Once the scan is completed click on the View Report button, then the Export button and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know in your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan Now.
  • When finished, please click Clean & Repair.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Attach or Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a checkmark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.