Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13.03.2019 01
Ran by username (administrator) on DESKTOP-UU3V5LH (16-03-2019 10:37:31)
Running from C:\Users\username\Desktop
Loaded Profiles: username (Available Profiles: defaultuser0 & username)
Platform: Windows 10 Home Version 1607 (X64) Language: English (United States)
Default browser: Edge
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\syswow64\OneDriveSetup.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\syswow64\OneDriveSetup.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-07-16] (Microsoft Windows -> Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)


Internet Explorer:
==================

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 bcmfn; C:\WINDOWS\System32\drivers\bcmfn.sys [9728 2016-07-16] (Microsoft Windows -> Windows (R) Win 7 DDK provider)
R3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2016-07-16] (Microsoft Windows -> Realtek Semiconductor Corporation )
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Windows -> Microsoft Corporation)

========================== Drivers MD5 =======================

C:\WINDOWS\System32\drivers\1394ohci.sys A7901875F89D011C38CF52C98ACF5B29
C:\WINDOWS\System32\drivers\3ware.sys EE1CCC54F75C24727A218F98FC5349DA
C:\WINDOWS\System32\drivers\ACPI.sys 73C73E1AA0D4D727A04AAAB120B7F56A
C:\WINDOWS\System32\drivers\AcpiDev.sys 0935496EF9624B46B935CB35ECE1F205
C:\WINDOWS\System32\Drivers\acpiex.sys D6794C31F4077B71433988787BAA926E
C:\WINDOWS\System32\drivers\acpipagr.sys FE5F656D6B35089DA39112E74EC6A85A
C:\WINDOWS\System32\drivers\acpipmi.sys 2F242941E4DFF69B883D77A16F039557
C:\WINDOWS\System32\drivers\acpitime.sys C247E35A21682DA8D0DC3AF9F025FCC5
C:\WINDOWS\System32\drivers\ADP80XX.SYS 49B9DB97AFC85DCCBDACDAB2E90085B7
C:\WINDOWS\system32\drivers\afd.sys 983266DA83FFF73DBDDD3730A4712228
C:\WINDOWS\System32\DRIVERS\ahcache.sys E44DB3F7225EC3E119560738B3619972
C:\WINDOWS\System32\drivers\amdk8.sys DF21E05E41E5AC3F13F304D91457649A
C:\WINDOWS\System32\drivers\amdppm.sys 45D0AA4BB90B821DF92E8F19ABED0C5E
C:\WINDOWS\System32\drivers\amdsata.sys 74FFBC43B4B899C9A8CA06A892F2CE73
C:\WINDOWS\System32\drivers\amdsbs.sys AAB0F1D8D7E54761ABAB13AF161F1680
C:\WINDOWS\System32\drivers\amdxata.sys F91BAAC4237C40352A807000F3B716F9
C:\WINDOWS\System32\drivers\appid.sys BC121C099C6C659126AD2102AFDFF8CF
C:\WINDOWS\System32\drivers\applockerfltr.sys 68190E2BADF23BD782344970E5B5DE9E
C:\WINDOWS\System32\drivers\arcsas.sys E6AB1F0B4C3D4E0D2A88332D76FECD03
C:\WINDOWS\System32\drivers\asyncmac.sys 61C5A480C43E7E8E49C42869F49D0D3E
C:\WINDOWS\System32\drivers\atapi.sys A10F989A812B57B9695F6C305907C9C6
C:\WINDOWS\System32\drivers\bxvbda.sys 61BAC67048CA5C1D08C48FCC8012B613
C:\WINDOWS\System32\drivers\BasicDisplay.sys 68F72B05EBC6D1779C0D60A147C7CA0B
C:\WINDOWS\System32\drivers\BasicRender.sys 23156E7EDAF613D839E2839746B168D3
C:\WINDOWS\System32\drivers\bcmfn.sys 3F5523DCEFE42B385659C5CB46A6B810
C:\WINDOWS\System32\drivers\bcmfn2.sys 0B750A6A6D847E73CA48ADD7A0F5A393
C:\Windows\System32\Drivers\Beep.sys 0A508274355745EEF01C6BE3198D02C4
C:\WINDOWS\System32\DRIVERS\bowser.sys EEBFAEB4702E1049ECD44B10485E6C0C
C:\WINDOWS\System32\drivers\BthAvrcpTg.sys 722036C26D2C4E50EC2A2EC5FD678846
C:\WINDOWS\System32\drivers\bthhfenum.sys C2E31BE025D46D189E38DD1EDF07837A
C:\WINDOWS\System32\drivers\BthHFHid.sys F7CD605FC0B0B22F3F6F247595E3A655
C:\WINDOWS\System32\drivers\bthmodem.sys 535DC41A33630AE4C262406F9E981C03
C:\WINDOWS\System32\drivers\buttonconverter.sys 23F9EF739F685E07482116425E7879AA
C:\WINDOWS\System32\drivers\capimg.sys 4C61113687EB66035A70A55EE9B7DB4A
C:\WINDOWS\System32\DRIVERS\cdfs.sys F8FB51B9EF6372610E9B31A1D86B62FC
C:\WINDOWS\System32\drivers\cdrom.sys 613D0137C269187FA298A157E3D14A18
C:\WINDOWS\System32\drivers\cht4sx64.sys 0AED948DA8D5F08B3D6F12E4E2089736
C:\WINDOWS\System32\drivers\cht4vx64.sys 0002A0FDE087C1657AB31CE73077539C
C:\WINDOWS\System32\drivers\circlass.sys 6B4F90A287D75CCD78694F6790C911B2
C:\WINDOWS\System32\drivers\CLFS.sys 09D0B94D3A06EFD1EB70189EC4B26DF7
C:\WINDOWS\System32\drivers\registry.sys EEC3A4A98AE1A337E3CD1483AD6F2E15
C:\WINDOWS\System32\drivers\CmBatt.sys 429623E266EF067A44E8CF148E9DFB9B
C:\WINDOWS\System32\Drivers\cng.sys D0438FBD80ECEF7591575AA9E7186E93
C:\WINDOWS\System32\DRIVERS\cnghwassist.sys 3DB10C59405931E2C72EFB82C1AF97D1
C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys 34C935AF2A414572B412B3556586D783
C:\WINDOWS\System32\drivers\condrv.sys 44EEEB2382F566999287E13F2067693C
C:\WINDOWS\System32\drivers\dam.sys 42F254BA851371E2F5351E59E391751B
C:\WINDOWS\System32\Drivers\dfsc.sys 7EAFDEF51136E8F2452CEBD8D084F108
C:\WINDOWS\System32\drivers\disk.sys 35B9D46560339A5A7F0CAC6ED702C817
C:\WINDOWS\System32\drivers\dmvsc.sys 815F45161A4571C2C44491564F3D5968
C:\WINDOWS\system32\DRIVERS\drmkaud.sys AE6BD4C879A8C849E53947C92DF3B3A0
C:\WINDOWS\System32\drivers\dxgkrnl.sys E28103485F82F30AFC5DE1CEDF4AF295
C:\WINDOWS\System32\drivers\evbda.sys 7EC6FC0266D74BD47ABB130A328B70EC
C:\WINDOWS\System32\drivers\EhStorClass.sys 8D74B8B5D6F7C5BC4C525BAF2B083FF1
C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys 4D49B99DCACA1FC782A94DB596246504
C:\WINDOWS\System32\drivers\errdev.sys 77B60DEC7DCB4233E4A69D3F52E5DB24
C:\Windows\System32\Drivers\exfat.sys FCD2C63754C2E739A8EEAD9BC63F9DDC
C:\Windows\System32\Drivers\fastfat.sys C077AA74EDDAF69985EB27597BCB342A
C:\WINDOWS\System32\drivers\fdc.sys 99598ECA5E41996E005D5B9D9FF1EFA2
C:\WINDOWS\System32\drivers\filecrypt.sys F44F666B0EACC3181544FFCF8CA0FFC7
C:\WINDOWS\System32\drivers\fileinfo.sys 78A210DDFDF2C9EC884631D2DAA573F0
C:\WINDOWS\System32\drivers\filetrace.sys 1A97DB5E701A186989F3795223C3BE39
C:\WINDOWS\System32\drivers\flpydisk.sys 46626665F0E5906E45619B4EFD6186B8
C:\WINDOWS\System32\drivers\fltmgr.sys FDA72ACA14D516D18C33AFCD0FD9260F
C:\WINDOWS\System32\drivers\FsDepends.sys D152CCBFC8251670BF0AAFE00D6BC782
C:\Windows\System32\Drivers\Fs_Rec.sys 6D6BB5C7363CD35FA715E826F3D029EE
C:\WINDOWS\System32\DRIVERS\fvevol.sys B719EAA1EC93586955B013BD7DD61356
C:\WINDOWS\System32\drivers\vmgencounter.sys EF78034773CE506323655A868C949144
C:\WINDOWS\System32\drivers\genericusbfn.sys B55FEBC6A00DAA1FE074F020B6907516
C:\WINDOWS\System32\Drivers\msgpioclx.sys DDD8A8CDDC7F13EF57D1DAAE71865936
C:\WINDOWS\System32\drivers\gpuenergydrv.sys 7ACD8F69B5D6EC97E6D2C006E19BED88
C:\WINDOWS\system32\DRIVERS\HdAudio.sys 217230B984AB2954E2FA5E36578D7B08
C:\WINDOWS\System32\drivers\HDAudBus.sys 10E3515FE5DBA6656FA62C29342EC4A1
C:\WINDOWS\System32\drivers\HidBatt.sys B90D284B97CD4CA9DE7430AAAD887A56
C:\WINDOWS\System32\drivers\hidbth.sys B2FE11643CC6ACDEE6C247DD36018FDB
C:\WINDOWS\System32\drivers\hidi2c.sys D24355488A2D4D2323518EC1AC7A6D9E
C:\WINDOWS\System32\drivers\hidinterrupt.sys 0AF9ABBA4F3F55C6C803890D64BC3C29
C:\WINDOWS\System32\drivers\hidir.sys CDBCF8E9AB06D88A1E1191D32F320C5D
C:\WINDOWS\System32\drivers\hidusb.sys 2B7002EEACFC2687788A34ADB204293D
C:\WINDOWS\System32\drivers\HpSAMD.sys F5CA18197B4646E04DB9EB2D6642CC4D
C:\WINDOWS\System32\drivers\HTTP.sys 65E358D604267CBAACB74A2598BBE22B
C:\WINDOWS\System32\drivers\hvservice.sys 3756E15BB86689412775DF22A442FC46
C:\WINDOWS\System32\drivers\hwpolicy.sys 771EDDA9830A3079F996F34D681FB6E5
C:\WINDOWS\System32\drivers\hyperkbd.sys 3B9F315E7FA72CC25228EB097DD9C694
C:\WINDOWS\System32\drivers\i8042prt.sys B54B30992620C97230013A74461C8517
C:\WINDOWS\System32\drivers\iagpio.sys C6B8743B213F06AA60943D8366FE968F
C:\WINDOWS\System32\drivers\iai2c.sys 9A2A2F3C69B9A30B6E78536F6D258BAD
C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys 5A0E850F8CD17791A3E6A3CF81D0CA28
C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys 7508F1096803385D6376BFD0BD473AC4
C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys 16A10CCEDCF5AC4CAAE43DC9FC40392F
C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys EB82A11613326691508D9ED9A4FE29E7
C:\WINDOWS\System32\drivers\iaStorAV.sys 97E553D03219D3D51705C7235D9EAEBD
C:\WINDOWS\System32\drivers\iaStorV.sys 8350FE3BCDE3428BC040877BB7E9EAEB
C:\WINDOWS\System32\drivers\ibbus.sys 3BA03F7C7700DDF4C383DDE9252F5817
C:\WINDOWS\System32\drivers\IndirectKmd.sys 2A01C96DF5802D3434634E55C91232D8
C:\WINDOWS\System32\drivers\intelide.sys 9F7E87F6595D065A8A200A291043045E
C:\WINDOWS\System32\drivers\intelpep.sys A6BD2E20AE1BC5CB2776C87C28E4F4CA
C:\WINDOWS\System32\drivers\intelppm.sys 2A48DA39542636DB0FA3BA915385D1B3
C:\WINDOWS\System32\drivers\iorate.sys 4A922CAB4AB5F29F1BECC9D95B4B7F05
C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys FE85D0A86CA7A5A99CF8CD04DE7F80AE
C:\WINDOWS\System32\drivers\IPMIDrv.sys 450DBDD716C7911F83E05F78EE18BFA2
C:\WINDOWS\System32\drivers\ipnat.sys F1DAECC3B3D6399875D4F10529D6A77C
C:\WINDOWS\system32\drivers\irda.sys 7475A2903BB704B446AA6309E34D3362
C:\WINDOWS\System32\drivers\irenum.sys 9725E7F0C64CE9916A5CDABE8D6E13C3
C:\WINDOWS\System32\drivers\isapnp.sys 58040898883A96160D41739C80328BBF
C:\WINDOWS\System32\drivers\msiscsi.sys C9FD02D62E09337B67B0C61EC8CA38CC
C:\WINDOWS\System32\drivers\kbdclass.sys 210808437570BDDEE71A43535E3A2D30
C:\WINDOWS\System32\drivers\kbdhid.sys 2D05785B0C58D90A34EA15032EADBBA9
C:\WINDOWS\System32\drivers\kdnic.sys 813BA3EB2CE038F2A5382DDD75CAD60B
C:\WINDOWS\System32\Drivers\ksecdd.sys 9FA1B5D84F596F0664F0465F302044DC
C:\WINDOWS\System32\Drivers\ksecpkg.sys ECC7F3CDF34AAA49C00504466FC2B698
C:\WINDOWS\system32\drivers\ksthunk.sys 4ED115CD1A1099705F56B5E0FFF97CC6
C:\WINDOWS\System32\drivers\lltdio.sys 5933A6673F00D8255C52957E40C2D601
C:\WINDOWS\System32\drivers\lsi_sas.sys 8E1B0946948CCC0BC1FA3CB70374A795
C:\WINDOWS\System32\drivers\lsi_sas2i.sys 4F68163FC04C973500DC4DA0946917B0
C:\WINDOWS\System32\drivers\lsi_sas3i.sys E5AC5F2815938651CDCC27F425474673
C:\WINDOWS\System32\drivers\lsi_sss.sys CCF6EC9FB9B8F18E05B4253E81013E48
C:\WINDOWS\system32\drivers\luafv.sys C9579D32219E5B936AC3A48D470117EC
C:\WINDOWS\System32\drivers\megasas.sys C3CDCCF07486BD2616A7B82946E07AC0
C:\WINDOWS\System32\drivers\megasr.sys FADB2FE017E69EECE0E1BA78661C2E8C
C:\WINDOWS\System32\drivers\mlx4_bus.sys FD60818B66B2E8A5415EA840E99A9D8F
C:\WINDOWS\system32\drivers\mmcss.sys 68F6977F1CFBAAC770D940A8C0326FA1
C:\WINDOWS\System32\drivers\modem.sys D842ADDB5911945D51F61A0B1C8F36E3
C:\WINDOWS\System32\drivers\monitor.sys 9CCCB7FC3EDADEBA461D78615A6011A6
C:\WINDOWS\System32\drivers\mouclass.sys 27A07B2FB2E3057DA8DAEA4F25D843C7
C:\WINDOWS\System32\drivers\mouhid.sys 7BD6E7F7C9001AB21B8362CFFEE80B25
C:\WINDOWS\System32\drivers\mountmgr.sys F5BDAEE4B7D369D4C74668DCFBA3FF10
C:\WINDOWS\System32\drivers\mpsdrv.sys 30844BD376F9D01E62C820BEF446F1F8
C:\WINDOWS\system32\drivers\mrxdav.sys 50C2389CD04C5B8632E3DC2D733EF15D
C:\WINDOWS\System32\DRIVERS\mrxsmb.sys C9BB4E2FCAB693FEB00CF940060D94F4
C:\WINDOWS\System32\DRIVERS\mrxsmb10.sys 8F58AEAE00B39AC9AD93755E777B19D8
C:\WINDOWS\System32\DRIVERS\mrxsmb20.sys 6C83C4A8278E48455DA13E554CEB45F1
C:\WINDOWS\System32\drivers\bridge.sys 74C9D21523DAE0C18F413C196DF0058A
C:\Windows\System32\Drivers\Msfs.sys F01B849D9D4A8CEAF32D4FDBD0B83C92
C:\WINDOWS\System32\drivers\msgpiowin32.sys 22ECD8F5D1DFADF2011BBB1700CB871D
C:\WINDOWS\System32\drivers\mshidkmdf.sys FD870F6968A145E4D2BA8A8842686B03
C:\WINDOWS\System32\drivers\mshidumdf.sys 30364757963A028CE5DF0FBAAC270173
C:\WINDOWS\System32\drivers\msisadrv.sys 6BB0FEDDAE7135FA37FFAFF4D9E0E876
C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys 13D614E6B51ECF36746C48CE829FA7F6
C:\WINDOWS\System32\drivers\mslldp.sys 642CDE46351D5D2D90311E77072AB46D
C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys F2302A5CE63CA7673200FAFCEEEDB6AF
C:\WINDOWS\system32\DRIVERS\MSPQM.sys 6114512EA26E835BA522C63635429DB5
C:\Windows\System32\Drivers\MsRPC.sys AA538E16E644D00E3BA5349BBA9598EC
C:\WINDOWS\System32\drivers\mssmbios.sys 0543BEFD41EC4D25C7F7CF36409CEC7D
C:\WINDOWS\system32\DRIVERS\MSTEE.sys C1569E4DB8EFE3617847BF041A3C842F
C:\WINDOWS\System32\drivers\MTConfig.sys 130B16970154BA9876B09E5C4BAC63BE
C:\WINDOWS\System32\Drivers\mup.sys 15D987C8F6CCD4AC94E070C5986762CB
C:\WINDOWS\System32\drivers\mvumis.sys 3D2C5B4995CA0751D32DEA0DE9FDFE44
C:\WINDOWS\System32\DRIVERS\nwifi.sys DB31EBB04C871F422C36A0962DA7D38B
C:\WINDOWS\System32\drivers\ndfltr.sys 629CB21AC49C8867E0F29DF1C16DB7B4
C:\WINDOWS\System32\drivers\ndis.sys 36DD2C614720EC2970CB5E870BA69D8D
C:\WINDOWS\System32\drivers\ndiscap.sys 6DD605338FAAF6BA17662AA874E0D162
C:\WINDOWS\System32\drivers\NdisImPlatform.sys E34196F285F8B8879E1FF36C31F7179E
C:\WINDOWS\System32\DRIVERS\ndistapi.sys 1FAD2398673F30CEC616B89C46B7DCBA
C:\WINDOWS\System32\drivers\ndisuio.sys AEB8ECBE66CC46854066CB1F5623E179
C:\WINDOWS\System32\drivers\NdisVirtualBus.sys 7340104C2BF2F126714F7CDE85E63610
C:\WINDOWS\System32\drivers\ndiswan.sys 07ADC1F8DCBEB8104D75129B11584B8C
C:\WINDOWS\System32\DRIVERS\ndiswan.sys 07ADC1F8DCBEB8104D75129B11584B8C
C:\WINDOWS\System32\DRIVERS\NDProxy.sys 78A12E3DF035B5D054986949B19BE43C
C:\WINDOWS\System32\drivers\Ndu.sys 04C8859355C1DC9C0FA198D1894D71C2
C:\WINDOWS\System32\drivers\NetAdapterCx.sys 6C76780A01FC2B885BD6E957B5C36B02
C:\WINDOWS\System32\drivers\netbios.sys 5D1513BD6430307C9DB86C6E351372ED
C:\WINDOWS\System32\DRIVERS\netbt.sys 6FEBB0A847FFD5F057B9AC8889F1B9A7
C:\Windows\System32\Drivers\Npfs.sys 001CBD7A2CD45C4EB39C01C3C677EF73
C:\WINDOWS\System32\drivers\npsvctrig.sys 90F5DC9802AAA00CD0B6E2AD9E7FFADC
C:\WINDOWS\System32\drivers\nsiproxy.sys 0C6218321A09A7B51BA7FFAFBA4CCB21
C:\Windows\System32\Drivers\NTFS.sys D1AF837A1555990602A51A3ED238EC80
C:\Windows\System32\Drivers\Null.sys 6E6DD6F9DD2A034CF85E94047DBDB992
C:\WINDOWS\System32\drivers\nvraid.sys D261DF41F0840F734856A2B4F5E072C7
C:\WINDOWS\System32\drivers\nvstor.sys 23B702B555EB0436B9DAA0BC63DA65CE
C:\WINDOWS\System32\drivers\parport.sys 6B81BF7853D161DB8AC62CD8B9C2DE6B
C:\WINDOWS\System32\drivers\partmgr.sys F9C32E5ECA5D29852A93C3888A4CC4B2
C:\WINDOWS\System32\drivers\pci.sys 55E45E0A89429AE9C62D728B9C4891C0
C:\WINDOWS\System32\drivers\pciide.sys 214DCC87E3898F738075D1341252A552
C:\WINDOWS\System32\drivers\pcmcia.sys AED76A3333B3A31536E430020E0226FC
C:\WINDOWS\System32\drivers\pcw.sys E63FB38B6E75B39467492FBAD2CD512A
C:\WINDOWS\System32\drivers\pdc.sys 2CCD68D8A6BBFF2DE0EC54F086C5F3BC
C:\WINDOWS\System32\drivers\peauth.sys 1509A77F840AA9E72CF8247D0CF2FBDE
C:\WINDOWS\System32\drivers\percsas2i.sys 540116170E2135FCD5DDE77702166B67
C:\WINDOWS\System32\drivers\percsas3i.sys 8356F87553BF49C703CF382033815898
C:\WINDOWS\System32\drivers\raspptp.sys 5645B9D9788CCA2C88B9534996ED2D6D
C:\WINDOWS\System32\drivers\processr.sys 372913E12677A8CBBBABDD8311894F9D
C:\WINDOWS\System32\drivers\pacer.sys FC98407B85A31161851FDE245517574F
C:\WINDOWS\system32\drivers\qwavedrv.sys 819602BBBFDB0BD46DEA3715BF0DD452
C:\WINDOWS\System32\DRIVERS\rasacd.sys CDF47037A0939F56D11F699629C276AD
C:\WINDOWS\System32\drivers\AgileVpn.sys 28C2EA278070EE12701D0EDF8CB0EC36
C:\WINDOWS\System32\drivers\rasl2tp.sys 17E565710172ED71B8531D8822E1C5D1
C:\WINDOWS\System32\DRIVERS\raspppoe.sys 9387DF155233D45D4E010F4F2FB52A57
C:\WINDOWS\System32\drivers\rassstp.sys F0F4EEDEEBEE7A4244FAFB96A16B5712
C:\WINDOWS\System32\DRIVERS\rdbss.sys BBE0FC9C9E7C556DA6E6E6904739DF7E
C:\WINDOWS\System32\drivers\rdpbus.sys 79A415E6FA915EFC00297DAB16EC2635
C:\WINDOWS\System32\drivers\rdpdr.sys 7135785C21CA79D270D11037C43D3F19
C:\WINDOWS\System32\drivers\rdpvideominiport.sys 97A61A3CB2B5CB4FC32B3224EF333448
C:\WINDOWS\System32\drivers\rdyboost.sys 69BB204AE07EE84ECFAB1BF13C4BD04B
C:\Windows\System32\Drivers\ReFSv1.sys 940D6F5A2B0A61EE4170DF84F6C95C20
C:\WINDOWS\System32\drivers\rspndr.sys 5FF28F097C9699097B473F8FC7C1AA7D
C:\WINDOWS\System32\drivers\rtwlane_13.sys 9748533EAF7F9E3D8F3F7A0AF066B31D
C:\WINDOWS\System32\drivers\vms3cap.sys B5DAEE69BACA64D2BB004568E22D8756
C:\WINDOWS\System32\drivers\sbp2port.sys 5E73FB63E2DBC75FE0C17DEB0010CE0E
C:\WINDOWS\System32\DRIVERS\scfilter.sys 3D9A82B03C92D1FEC42CB171D6F57778
C:\WINDOWS\System32\drivers\scmbus.sys 9055ADDFBA4C8B914C914CE693B55C0A
C:\WINDOWS\System32\drivers\scmdisk0101.sys B6F2363584E62960846F7C3F00124A4F
C:\WINDOWS\System32\drivers\scmbus.sys 9055ADDFBA4C8B914C914CE693B55C0A
C:\WINDOWS\System32\drivers\scmdisk0101.sys B6F2363584E62960846F7C3F00124A4F
C:\WINDOWS\System32\drivers\sdbus.sys FCBB8A17B4437B2CA8CC8DA8CB1D306E
C:\WINDOWS\System32\drivers\sdstor.sys 120DFCB71D6C502613A9E2D50E16850C
C:\WINDOWS\System32\drivers\SerCx.sys 401D706DDC0A7AF18C3DD228ADF74551
C:\WINDOWS\System32\drivers\SerCx2.sys 7084D11083F0CDCA8B5C76F9846ABF5D
C:\WINDOWS\System32\drivers\serenum.sys 3FF478A8ED32A83C36581425F6282B6C
C:\WINDOWS\System32\drivers\serial.sys 92509187AA171A80521528B36F753E1D
C:\WINDOWS\System32\drivers\sermouse.sys 433D38FF6D08B993847EA2A10EB8CB52
C:\WINDOWS\System32\drivers\sfloppy.sys 697D3EE0740AEAB62B66ABCA1C83D13B
C:\WINDOWS\System32\drivers\SiSRaid2.sys A34CE1830E45DA98932295FDE4B7908A
C:\WINDOWS\System32\drivers\sisraid4.sys A7B5C670770E908DA5FEF5BF1136E933
C:\WINDOWS\System32\drivers\spaceport.sys 3DB9C2950439B61A038BF83E697C7A14
C:\WINDOWS\System32\drivers\SpbCx.sys E03264C4C25B568F92ED1656AD541E64
C:\WINDOWS\System32\DRIVERS\srv.sys EDCDCD95B916DB156A903AC6256F0CCF
C:\WINDOWS\System32\DRIVERS\srv.sys EDCDCD95B916DB156A903AC6256F0CCF
C:\WINDOWS\System32\DRIVERS\srv2.sys DF7147DE10921DBAAE9F9EEF94590E10
C:\WINDOWS\System32\DRIVERS\srvnet.sys 416D224AF7481A4179F018FB1F9A5B6B
C:\WINDOWS\System32\drivers\stexstor.sys 29D26E1347AE1BBD4201014E19880B2C
C:\WINDOWS\System32\drivers\storahci.sys 0FE3B9A9E40DE1029B0AC2368A3F765D
C:\WINDOWS\System32\drivers\vmstorfl.sys C5E0ACE4771F5575D9D5B457ABF3AD03
C:\WINDOWS\System32\drivers\stornvme.sys C1CFB9C19BF1134D8B9A7CF89BEC0AD1
C:\WINDOWS\System32\drivers\storqosflt.sys BEBF85EB4D90E6996047DA027D0ED26E
C:\WINDOWS\System32\drivers\storufs.sys 8E73037A6F8938475692FFCC26EBF385
C:\WINDOWS\System32\drivers\storvsc.sys 9D9DED47DA10E845EFF2DD57C94C809B
C:\WINDOWS\System32\drivers\swenum.sys 505E0C40B5D0ADDCBB414640F59BD2E0
C:\WINDOWS\System32\drivers\Synth3dVsc.sys 32F46FB0F290D16DAA452B289C985795
C:\WINDOWS\System32\drivers\tcpip.sys 172B5A199F917B4BACB38F13BCAA11CB
C:\WINDOWS\System32\drivers\tcpip.sys 172B5A199F917B4BACB38F13BCAA11CB
C:\WINDOWS\System32\drivers\tcpipreg.sys 8DBB1BE20C36E6D19BCC89EEA00B953C
C:\WINDOWS\system32\DRIVERS\tdx.sys 9D2DD64A0B51C56285512DC9454340F6
C:\WINDOWS\System32\drivers\terminpt.sys 06130AFFECEB94525FC2352936576B70
C:\WINDOWS\System32\drivers\tpm.sys 798C8CB861EB09C5AFB77468E5449BBB
C:\WINDOWS\System32\drivers\tsusbflt.sys A6F4025664C9D4BC2A9EDAB4092706D7
C:\WINDOWS\System32\drivers\TsUsbGD.sys 37A96AD493E110C0BF1EE0AC0F9E7DBD
C:\WINDOWS\System32\drivers\uaspstor.sys AA65954F512BA097DD190790876DD991
C:\WINDOWS\System32\Drivers\UcmCx.sys AB6268022C3A5B529075A39C33904DA6
C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys 7ED2EDA43D21C7A5F589A7960E265C52
C:\WINDOWS\System32\drivers\UcmUcsi.sys 169351463039B45F5CDED9768879F712
C:\WINDOWS\System32\drivers\ucx01000.sys 08A9E3AD29B215484FBB68CDC175DF3A
C:\WINDOWS\System32\drivers\udecx.sys DA70AEE267491AA56BC63AA0C0C96CA2
C:\WINDOWS\System32\DRIVERS\udfs.sys FBC5ECF6D5A868D0B116C2DBB02B8168
C:\WINDOWS\System32\drivers\UEFI.sys B918E40FAA9CD118CCA4AD388B748C98
C:\WINDOWS\System32\drivers\ufx01000.sys 0FD75222C1AD2687AB365BEBEA400DD4
C:\WINDOWS\System32\drivers\UfxChipidea.sys C1A78C53E01C641AE41BFA65797819F5
C:\WINDOWS\System32\drivers\ufxsynopsys.sys 767307212110EBEFB93EC9A5BE9E85B9
C:\WINDOWS\System32\drivers\umbus.sys DC460AAA18CA2342FBBFB2DF9B044472
C:\WINDOWS\System32\drivers\umpass.sys C3CF0377917ECE6D65D7623E1E61568F
C:\WINDOWS\System32\drivers\urschipidea.sys 6B46FC140C9AF68E6E7697D66D59CB4D
C:\WINDOWS\System32\drivers\urscx01000.sys B4402E7F0923F660270442CE76877ABE
C:\WINDOWS\System32\drivers\urssynopsys.sys 9DD431F1B94789CFB527E5D19261F124
C:\WINDOWS\System32\drivers\usbccgp.sys C87E32B90F085970D9637FBAD45EF6FE
C:\WINDOWS\System32\drivers\usbcir.sys 0B663856474AC41924D9E9112203858F
C:\WINDOWS\System32\drivers\usbehci.sys F83D2250256203AC5DA5E8601C1AFDD7
C:\WINDOWS\System32\drivers\usbhub.sys 7FFD26742321919590ED77FCA556D65F
C:\WINDOWS\System32\drivers\UsbHub3.sys 7A749B2863B5561BE34B39E8E249AD8F
C:\WINDOWS\System32\drivers\usbohci.sys D2109F1F4FEBF1DAC415CDC5DE876479
C:\WINDOWS\System32\drivers\usbprint.sys 29C9572F2D061CFC3C0BD48A3163E343
C:\WINDOWS\System32\drivers\usbser.sys 429477D6DEF3321FF7D3EF23CAAADA00
C:\WINDOWS\System32\drivers\USBSTOR.SYS 0CC16F7B91C57AE9A4E44425A295FDAA
C:\WINDOWS\System32\drivers\usbuhci.sys C917D09064CDBD18F75ADC9B2C48F847
C:\WINDOWS\System32\drivers\USBXHCI.SYS 95BCCEFBC40D06484CF16144FE79B8A5
C:\WINDOWS\System32\drivers\vdrvroot.sys 0CBDE344FB48E42D78E29469F202ADBC
C:\WINDOWS\System32\drivers\VerifierExt.sys 723195568C8755CAD57F7933C5F2C5C2
C:\WINDOWS\System32\drivers\vhdmp.sys C12B4859FC255AA6B3021CF8BB14A11F
C:\WINDOWS\System32\drivers\vhf.sys 7929228F0E8B0C2FA0495A17A4FC27F6
C:\WINDOWS\System32\drivers\vmbus.sys AEE432ED868831B1F068E373598F6D93
C:\WINDOWS\System32\drivers\VMBusHID.sys 9444B23FC694B5F90F21B0FC7F10D8DD
C:\WINDOWS\System32\drivers\vmgid.sys 4D0287F566B36536DD812A54C015FC4A
C:\WINDOWS\System32\drivers\volmgr.sys 29075915F9BDC3437F8BED71C067D399
C:\WINDOWS\System32\drivers\volmgrx.sys 6BDB6CE6D2D9E3D3F28F1C97E12B62E2
C:\WINDOWS\System32\drivers\volsnap.sys BF2546583BB75F01DDA60A7921DFB230
C:\WINDOWS\System32\drivers\volume.sys AC2E20A74D09D24485BE8396CE04F07B
C:\WINDOWS\System32\drivers\vpci.sys 04BEC879AD7B3FDDD0339B19FECB0160
C:\WINDOWS\System32\drivers\vsmraid.sys FD9BCB8920973CEAD4D49DC7A6D8A618
C:\WINDOWS\System32\drivers\vstxraid.sys 0C111F220798CCE80484026E06822379
C:\WINDOWS\System32\drivers\vwifibus.sys 607639716E9DB1CEF4E18B5B229293B4
C:\WINDOWS\System32\drivers\vwififlt.sys B1ED64E628763148BF84FBE23F2AD711
C:\WINDOWS\System32\drivers\vwifimp.sys 59920894C38A827091A06AF559834E47
C:\WINDOWS\System32\drivers\wacompen.sys 55D00B785A7587F4263D125817871283
C:\WINDOWS\System32\DRIVERS\wanarp.sys CEF3D306C09BEC1A800E9B4A06F859F6
C:\WINDOWS\System32\DRIVERS\wanarp.sys CEF3D306C09BEC1A800E9B4A06F859F6
C:\WINDOWS\system32\drivers\wcifs.sys CD24DEEA22152524CCFE859591D12A57
C:\WINDOWS\system32\drivers\wcnfs.sys AEA1093B751339267D8C8C1EF3D669CF
C:\WINDOWS\System32\drivers\WdBoot.sys D520B1B849B6D4D707AB31722B952C2D
C:\WINDOWS\System32\drivers\Wdf01000.sys 5030C76047D756263093A47B82970868
C:\WINDOWS\System32\drivers\WdFilter.sys 29FF9199EDEB4F5470BB134D1A2563D2
C:\WINDOWS\System32\DRIVERS\wdiwifi.sys 373DF27CD5D5E50FFA2A90FEE0C0D994
C:\WINDOWS\System32\Drivers\WdNisDrv.sys 17CF416CFF408190F5A4CBD79AB12E55
C:\WINDOWS\System32\drivers\wfplwfs.sys E1785942AC51FEE6826CDF02075C5AA9
C:\WINDOWS\System32\drivers\wimmount.sys 0CF79A0EACFFBB75A50A469A27696D02
C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys 0DE131733317EB4BE67028366B0CAAC6
C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys 92EB5D38BDF10C790450F3E46BF93A0E
C:\WINDOWS\System32\drivers\winmad.sys F95DE20312ACCA7761446DE152BD1F7C
C:\WINDOWS\System32\drivers\WinUSB.SYS 4EFB346BFDAEEB29316AA52BBB9852B1
C:\WINDOWS\System32\drivers\winverbs.sys 8B9AFF5F08E66A6F1F1063DEC9457FB6
C:\WINDOWS\System32\drivers\wmiacpi.sys 6F4F4F5A007D1710BD76FB311DA97C07
C:\Windows\System32\Drivers\Wof.sys EDADABA8665AB5C51BF59C4E2566BA7E
C:\WINDOWS\System32\drivers\WpdUpFltr.sys 75A9284F01FE7CB1A7D5EAE5C1EB4F33
C:\WINDOWS\system32\drivers\ws2ifsl.sys 36D7B73ADC3E10607ED6EC874AFB5D1E
C:\WINDOWS\System32\drivers\WudfPf.sys AED7FE551E8672B824A56324076183EB
C:\WINDOWS\System32\drivers\WudfRd.sys CEFAB17FD7DFCFA515626C306262E89D
C:\WINDOWS\system32\DRIVERS\WUDFRd.sys CEFAB17FD7DFCFA515626C306262E89D
C:\WINDOWS\system32\DRIVERS\WUDFRd.sys CEFAB17FD7DFCFA515626C306262E89D
C:\WINDOWS\System32\drivers\xboxgip.sys 59335CEA021FB89E07AD5DB5D17F09D0
C:\WINDOWS\System32\drivers\xinputhid.sys 864F4209B03BE4267DDE09B067A165CA

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-16 10:40 - 2019-03-16 10:40 - 000000000 ____D C:\Users\username\AppData\Local\mbam
2019-03-16 10:39 - 2019-03-16 10:39 - 000274416 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2019-03-16 10:39 - 2019-03-16 10:39 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-03-16 10:39 - 2019-03-16 10:39 - 000000000 ____D C:\Users\username\AppData\Local\mbamtray
2019-03-16 10:39 - 2019-03-16 10:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-03-16 10:39 - 2019-02-01 12:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2019-03-16 10:38 - 2019-03-16 18:42 - 062177776 ____N (Malwarebytes ) C:\Users\username\Desktop\mb3-setup-consumer-3.7.1.2839-1.0.538-1.0.9712.exe
2019-03-16 10:38 - 2019-03-16 10:38 - 000002376 _____ C:\Users\username\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-03-16 10:38 - 2019-03-16 10:38 - 000000000 ___RD C:\Users\username\OneDrive
2019-03-16 10:38 - 2019-03-16 10:38 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-03-16 10:38 - 2019-03-16 10:38 - 000000000 ____D C:\Program Files\Malwarebytes
2019-03-16 10:38 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2019-03-16 10:37 - 2019-03-16 10:39 - 000026292 _____ C:\Users\username\Desktop\FRST.txt
2019-03-16 10:37 - 2019-03-16 10:37 - 000000000 ____D C:\FRST
2019-03-16 10:36 - 2019-03-16 18:50 - 002433536 ____N (Farbar) C:\Users\username\Desktop\FRST64.exe
2019-03-16 10:36 - 2019-03-16 10:36 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2019-03-16 10:36 - 2019-03-16 10:36 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-03-16 10:34 - 2019-03-16 10:36 - 000000000 ____D C:\Users\username\AppData\Local\Packages
2019-03-16 10:34 - 2019-03-16 10:34 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-03-16 10:34 - 2019-03-16 10:34 - 000000000 ____D C:\Users\username\AppData\Roaming\Adobe
2019-03-16 10:34 - 2019-03-16 10:34 - 000000000 ____D C:\Users\username\AppData\Local\VirtualStore
2019-03-16 10:34 - 2019-03-16 10:34 - 000000000 ____D C:\Users\username\AppData\Local\TileDataLayer
2019-03-16 10:34 - 2019-03-16 10:34 - 000000000 ____D C:\Users\username\AppData\Local\Publishers
2019-03-16 10:34 - 2019-03-16 10:34 - 000000000 ____D C:\Users\username\AppData\Local\ConnectedDevicesPlatform
2019-03-16 10:33 - 2019-03-16 10:39 - 000000000 ____D C:\Users\username
2019-03-16 10:33 - 2019-03-16 10:33 - 000837818 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-03-16 10:33 - 2019-03-16 10:33 - 000000020 ___SH C:\Users\username\ntuser.ini
2019-03-16 10:32 - 2019-03-16 10:34 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2019-03-16 10:32 - 2019-03-16 10:32 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2019-03-16 10:32 - 2019-03-16 10:32 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer
2019-03-16 10:32 - 2019-03-16 10:32 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2019-03-16 10:30 - 2016-07-16 04:41 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-03-16 10:29 - 2019-03-16 10:29 - 000000020 ___SH C:\Users\defaultuser0\ntuser.ini
2019-03-16 10:29 - 2019-03-16 10:29 - 000000000 ____D C:\Users\defaultuser0
2019-03-16 10:27 - 2019-03-16 10:27 - 000000000 _SHDL C:\Users\Default User
2019-03-16 10:27 - 2019-03-16 10:27 - 000000000 _SHDL C:\Users\All Users
2019-03-16 10:27 - 2019-03-16 10:27 - 000000000 _SHDL C:\Documents and Settings
2019-03-16 10:21 - 2019-03-16 10:21 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2019-03-16 10:21 - 2019-03-16 10:21 - 000000000 ____D C:\ProgramData\USOShared
2019-03-16 10:20 - 2019-03-16 10:27 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-03-16 10:20 - 2019-03-16 10:20 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-03-16 10:20 - 2019-03-16 10:20 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2019-03-16 10:19 - 2019-03-16 10:20 - 000194192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-03-16 10:16 - 2019-03-16 10:31 - 000000000 ___DC C:\WINDOWS\Panther
2019-03-16 10:16 - 2019-03-16 10:18 - 000000000 ____D C:\Windows.old
2019-03-16 10:16 - 2019-03-16 10:16 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-03-16 10:16 - 2019-03-16 10:16 - 000000000 ____D C:\WINDOWS\InfusedApps
2019-03-16 10:15 - 2019-03-16 10:15 - 000000000 ____D C:\WINDOWS\Setup
2019-03-16 10:15 - 2019-03-16 10:15 - 000000000 ____D C:\WINDOWS\OCR
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\winrm
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\WCN
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\slmgr
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\0409
2019-03-16 10:14 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\DigitalLocker
2019-03-16 10:12 - 2016-07-16 04:44 - 000828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-03-16 10:12 - 2016-07-16 04:44 - 000176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-03-16 10:09 - 2019-03-16 10:39 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-03-16 10:09 - 2019-03-16 10:35 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-16 10:09 - 2019-03-16 10:35 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-03-16 10:09 - 2019-03-16 10:33 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2019-03-16 10:09 - 2019-03-16 10:33 - 000000000 ____D C:\WINDOWS\rescache
2019-03-16 10:09 - 2019-03-16 10:30 - 000000000 ____D C:\WINDOWS\system32\spool
2019-03-16 10:09 - 2019-03-16 10:30 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2019-03-16 10:09 - 2019-03-16 10:29 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-16 10:09 - 2019-03-16 10:22 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-03-16 10:09 - 2019-03-16 10:22 - 000000000 ___RD C:\WINDOWS\MiracastView
2019-03-16 10:09 - 2019-03-16 10:22 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-03-16 10:09 - 2019-03-16 10:21 - 000000000 ____D C:\ProgramData\USOPrivate
2019-03-16 10:09 - 2019-03-16 10:16 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2019-03-16 10:09 - 2019-03-16 10:15 - 000000000 ____D C:\WINDOWS\SystemApps
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ___SD C:\WINDOWS\system32\dsc
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\system32\Com
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\IME
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\Help
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2019-03-16 10:09 - 2019-03-16 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 __SHD C:\Program Files\Windows Sidebar
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 __RSD C:\WINDOWS\Media
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 __RHD C:\Users\Public\Libraries
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ___SD C:\WINDOWS\system32\Nui
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\Web
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\Vss
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\tracing
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\TAPI
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SystemResources
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\winevt
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\ras
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\IME
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\icsxml
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\ias
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\downlevel
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\DDFs
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\System
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SKB
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\security
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\schemas
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\SchCache
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\Resources
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\Registration
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\Provisioning
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\PLA
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\Performance
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\ModemLogs
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\L2Schemas
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\InputMethod
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\Globalization
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\Cursors
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\Branding
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\appcompat
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\addins
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\ProgramData\Comms
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\Program Files\Windows Portable Devices
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\Program Files\Windows NT
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\Program Files\Common Files\Services
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\Program Files (x86)\Windows NT
2019-03-16 10:09 - 2019-03-16 10:09 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2019-03-16 10:09 - 2019-03-16 10:06 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2019-03-16 10:09 - 2019-03-16 10:06 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2019-03-16 10:09 - 2019-03-16 10:06 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2019-03-16 10:09 - 2019-03-16 10:06 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2019-03-16 10:09 - 2019-03-16 10:06 - 000017463 _____ C:\WINDOWS\system32\Drivers\etc\services
2019-03-16 10:09 - 2019-03-16 10:06 - 000015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2019-03-16 10:09 - 2019-03-16 10:06 - 000004096 _____ C:\WINDOWS\system32\config\VSMIDK
2019-03-16 10:09 - 2019-03-16 10:06 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2019-03-16 10:09 - 2019-03-16 10:06 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2019-03-16 10:09 - 2019-03-16 10:06 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2019-03-16 10:09 - 2019-03-16 10:06 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2019-03-16 10:09 - 2019-03-16 10:06 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2019-03-16 10:09 - 2019-03-16 10:06 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2019-03-16 10:09 - 2019-03-16 10:06 - 000000219 _____ C:\WINDOWS\system.ini
2019-03-16 10:09 - 2019-03-16 10:06 - 000000092 _____ C:\WINDOWS\win.ini
2019-03-16 10:07 - 2019-03-16 10:36 - 000000000 ____D C:\WINDOWS\INF
2019-03-16 10:02 - 2019-03-16 10:15 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-03-16 09:59 - 2019-03-16 10:26 - 059244544 _____ C:\WINDOWS\system32\config\SOFTWARE
2019-03-16 09:59 - 2019-03-16 10:26 - 009699328 _____ C:\WINDOWS\system32\config\SYSTEM
2019-03-16 09:59 - 2019-03-16 10:26 - 000262144 _____ C:\WINDOWS\system32\config\DEFAULT
2019-03-16 09:59 - 2019-03-16 10:26 - 000131072 _____ C:\WINDOWS\system32\config\BBI
2019-03-16 09:59 - 2019-03-16 10:26 - 000065536 _____ C:\WINDOWS\system32\config\SECURITY
2019-03-16 09:59 - 2019-03-16 10:21 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2019-03-16 09:59 - 2019-03-16 10:14 - 000000000 ____D C:\WINDOWS\servicing
2019-03-16 09:59 - 2019-03-16 10:12 - 000032768 _____ C:\WINDOWS\system32\config\SAM
2019-03-16 09:59 - 2019-03-16 10:09 - 000000000 ___RD C:\Program Files (x86)
2019-03-16 09:59 - 2019-03-16 10:09 - 000000000 ____D C:\WINDOWS\system32\SMI
2019-03-16 09:59 - 2019-03-16 09:59 - 000000000 ____D C:\$WINDOWS.~BT
2019-03-16 09:58 - 2019-03-16 09:59 - 000000000 ___HD C:\$SysReset

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== BCD ================================

Windows Boot Manager
--------------------
identifier              {bootmgr}
device                  partition=\Device\HarddiskVolume1
description             Windows Boot Manager
locale                  en-US
inherit                 {globalsettings}
default                 {current}
resumeobject            {34c58ecd-480f-11e9-8530-c9ad06264709}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 0

Windows Boot Loader
-------------------
identifier              {current}
device                  partition=C:
path                    \WINDOWS\system32\winload.exe
description             Windows 10
locale                  en-US
inherit                 {bootloadersettings}
recoverysequence        {61fcc94a-474e-11e9-b285-9ac643d00237}
displaymessageoverride  Recovery
recoveryenabled         Yes
allowedinmemorysettings 0x15000075
osdevice                partition=C:
systemroot              \WINDOWS
resumeobject            {34c58ecd-480f-11e9-8530-c9ad06264709}
nx                      OptIn
bootmenupolicy          Standard

Windows Boot Loader
-------------------
identifier              {61fcc94a-474e-11e9-b285-9ac643d00237}
device                  ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{61fcc94b-474e-11e9-b285-9ac643d00237}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment
locale                  en-US
inherit                 {bootloadersettings}
displaymessage          Recovery
displaymessageoverride  Recovery
osdevice                ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{61fcc94b-474e-11e9-b285-9ac643d00237}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Resume from Hibernate
---------------------
identifier              {34c58ecd-480f-11e9-8530-c9ad06264709}
device                  partition=C:
path                    \WINDOWS\system32\winresume.exe
description             Windows Resume Application
locale                  en-US
inherit                 {resumeloadersettings}
recoverysequence        {61fcc94a-474e-11e9-b285-9ac643d00237}
recoveryenabled         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Windows Memory Tester
---------------------
identifier              {memdiag}
device                  partition=\Device\HarddiskVolume1
path                    \boot\memtest.exe
description             Windows Memory Diagnostic
locale                  en-US
inherit                 {globalsettings}
badmemoryaccess         Yes

EMS Settings
------------
identifier              {emssettings}
bootems                 No

Debugger Settings
-----------------
identifier              {dbgsettings}
debugtype               Local

RAM Defects
-----------
identifier              {badmemory}

Global Settings
---------------
identifier              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Boot Loader Settings
--------------------
identifier              {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Hypervisor Settings
-------------------
identifier              {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Resume Loader Settings
----------------------
identifier              {resumeloadersettings}
inherit                 {globalsettings}

Device options
--------------
identifier              {61fcc94b-474e-11e9-b285-9ac643d00237}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume1
ramdisksdipath          \Recovery\WindowsRE\boot.sdi


LastRegBack: 2019-03-16 10:19

==================== End of FRST.txt ============================