Trovi

Status
Not open for further replies.
V

Viperml

New Member
Thread author
Jun 28, 2020
3
Hello,
I keep getting a popup message that says trovi macafee alert your computer is at risk in the bottom right side of my computer..
I have followed all the posted items on the MalwareTips website with page called how to remove trovi.com
Such as I have reset Chrome browser setting to default twice.
I deleted the other browser i had of Internet explorer browser.
I went into apps & features and I deleted the apps that i believe trovi installed.
None of those items have removed trovi from my computer/browser.
when i do a search on google it takes me to bing.com and tries to go to trovi website link.
I have free version of kaspersky and kapersky extension in chrome.
Kasptersky stops it from opening the trovi webpage but I still cannot get rid of it.
I have tried malwarebytes and HitmanPro. When I do a scan with them it shows there are no findings/no infections.
Also, when I run Kapersky it shows no infections.
As well as, I installed the Emsisoft Emergency Kit.
When i run a scan on it it shows no suspicious files.
I would appreciate any suggestions on what I can do to get rid of this.
 
nasdaq

nasdaq

Super Moderator
Verified
Staff Member
Nov 5, 2019
1,597
Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Attach Files.
Navigate to the location of the File.
Click the file. It will appear in the reply section.
Click the Post Reply button.

Please post the logs for my review.

Wait for further instructions
 
V

Viperml

New Member
Thread author
Jun 28, 2020
3
Hello,
Here is copy and paste of the (first.txt)
can result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-06-2020
Ran by Computer (administrator) on DESKTOP-DBODB5K (29-06-2020 15:19:48)
Running from C:\Users\Computer\Downloads
Loaded Profiles: Computer
Platform: Windows 10 Pro Version 1909 18363.900 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\SwAgent\ArmourySwAgent.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.38\atkexComSvc.exe
(ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe
(ASUSTeK Computer Inc. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe
(ASUSTeK Computer Inc. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe
(DTS, Inc. -> ) C:\Windows\System32\DTS\PC\APO3x\DTSAPO3Service.exe
(Emsisoft Ltd -> Emsisoft Ltd) C:\EEK\bin64\a2emergencykit.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <32>
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_5b2754329284e2d7\Intel_PIE_Service.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_tray.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 4.0\ksde.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 4.0\ksdeui.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 20.0\avp.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 20.0\avpui.exe
(Mega Limited -> Mega Limited) C:\Users\Computer\AppData\Local\MEGAsync\MEGAsync.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\EXCEL.EXE <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Computer\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\HxAccounts.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12006.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe <6>
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe <5>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [838432 2019-03-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-1894460055-3280049966-3379111095-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91683688 2020-06-09] (Skype Software Sarl -> Skype Technologies S.A.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-24] (Google LLC -> Google LLC)
Startup: C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2020-06-03]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Computer\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1A816E44-2E9C-4A99-A509-F2B3C0E7BB60} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {27BF66ED-3D76-498E-B6A3-E4BBEC7C09C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-02-09] (Google LLC -> Google LLC)
Task: {28E5DC09-F258-4D35-9755-ABDED0ACE575} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe [51120 2019-10-29] (ASUSTeK Computer Inc. -> )
Task: {2DA94F4D-DD49-41C6-BADC-4C7858EFDD74} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-02-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {52B44D87-5880-4546-826A-A10C30D057C3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-02-09] (Google LLC -> Google LLC)
Task: {75F0640A-DA7D-4545-A2A1-A2C0DA3E636F} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [1642488 2019-12-23] (ASUSTeK Computer Inc. -> ASUS)
Task: {765750AE-9913-4619-ACD0-AC0B6252844C} - System32\Tasks\G2MUpdateTask-S-1-5-21-1894460055-3280049966-3379111095-1001 => C:\Users\Computer\AppData\Local\GoToMeeting\18068\g2mupdate.exe [32424 2020-06-24] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {7B7F7CB7-CD99-4EC5-97AA-BBB244921A37} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [791232 2020-06-27] (Kaspersky Lab -> AO Kaspersky Lab)
Task: {B1FFE0F7-0E09-4945-A441-9F7130267D85} - System32\Tasks\G2MUploadTask-S-1-5-21-1894460055-3280049966-3379111095-1001 => C:\Users\Computer\AppData\Local\GoToMeeting\18068\g2mupload.exe [32424 2020-06-24] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {C5E33682-2BF0-4CA8-86A2-FEE9A6D31384} - System32\Tasks\kpm_tray.exe => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_tray.exe [629352 2020-04-01] (Kaspersky Lab -> AO Kaspersky Lab)
Task: {F1798A7D-5CA0-453D-9EF8-4446A03FF37C} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore1d5dacaa1e849dc => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-02-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {F9D031A8-EF80-473C-B1F4-62D8AABE03F0} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [38092952 2019-10-24] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-1894460055-3280049966-3379111095-1001.job => C:\Users\Computer\AppData\Local\GoToMeeting\18068\g2mupdate.exe
Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-1894460055-3280049966-3379111095-1001.job => C:\Users\Computer\AppData\Local\GoToMeeting\18068\g2mupload.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12
Tcpip\..\Interfaces\{c57ae276-e643-47b6-a8d7-fa9a7a1fdc27}: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)

Edge:
======
DownloadDir: C:\Users\Computer\Downloads
Edge Profile: C:\Users\Computer\AppData\Local\Microsoft\Edge\User Data\Default [2020-06-28]
Edge HKU\S-1-5-21-1894460055-3280049966-3379111095-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [elhpdacimkjpccooodognopfhbdgnpbk]

FireFox:
========
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.asus.com/ASUS Update;version=3 -> C:\Program Files (x86)\ASUS\Update\1.3.107.17\npAsusUpdate3.dll [2020-03-18] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
FF Plugin-x32: @tools.asus.com/ASUS Update;version=9 -> C:\Program Files (x86)\ASUS\Update\1.3.107.17\npAsusUpdate3.dll [2020-03-18] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-03] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default [2020-06-29]
CHR StartupUrls: Default -> "hxxp://google.com/"
CHR Extension: (Slides) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-02-09]
CHR Extension: (Docs) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-02-09]
CHR Extension: (Google Drive) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-02-09]
CHR Extension: (YouTube) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-02-09]
CHR Extension: (Adblock for Youtube™) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2020-02-09]
CHR Extension: (Adskill - unstoppable ad blocker) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ebankhhelmanpnnckninjpdlhdipbghn [2020-02-19]
CHR Extension: (Adobe Acrobat) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-06-12]
CHR Extension: (Kaspersky Protection) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhpdacimkjpccooodognopfhbdgnpbk [2020-06-27]
CHR Extension: (Sheets) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-02-09]
CHR Extension: (Google Docs Offline) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-28]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-06-13]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-02-09]
CHR Extension: (Gmail) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-02-09]
CHR Extension: (Chrome Media Router) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-20]
CHR HKLM\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [296928 2020-05-15] (ASUSTeK Computer Inc. -> ASUSTeK COMPUTER INC.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.38\atkexComSvc.exe [440368 2019-12-16] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-02-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-02-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [833600 2020-06-28] (ASUSTeK Computer Inc. -> )
R2 AVP20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 20.0\avp.exe [357416 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
R2 DTSAPO3Service; C:\Windows\System32\DTS\PC\APO3x\DTSAPO3Service.exe [206744 2018-11-02] (DTS, Inc. -> )
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2017-03-09] (FUTUREMARK INC -> Futuremark)
S3 klvssbridge64_20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 20.0\x64\vssbridge64.exe [438928 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
S3 kpm_launch_service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe [354152 2020-04-01] (Kaspersky Lab -> AO Kaspersky Lab)
R2 KSDE4.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 4.0\ksde.exe [619752 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [2910704 2020-04-27] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
R2 ROG Live Service; C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe [2231776 2020-05-11] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-04-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\NisSrv.exe [2484256 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MsMpEng.exe [103168 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AFXfilt; C:\Windows\system32\drivers\AFXfilt.sys [33792 2017-02-13] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
R3 amdgpio2; C:\Windows\System32\drivers\amdgpio2.sys [45832 2019-10-01] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 AMDPCIDev; C:\Windows\System32\drivers\AMDPCIDev.sys [32544 2019-06-16] (Advanced Micro Devices INC. -> Advanced Micro Devices)
R0 amdpsp; C:\Windows\System32\drivers\amdpsp.sys [138544 2019-05-23] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [33832 2019-04-09] (ASUSTeK Computer Inc. -> )
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [231936 2019-10-06] (Microsoft Corporation) [File not signed] [File is in use]
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [246912 2019-02-16] (Kaspersky Lab -> AO Kaspersky Lab)
R3 cthdb; C:\Windows\system32\DRIVERS\cthdb.sys [43416 2019-11-21] (Creative Technology Ltd -> Creative Technology Ltd)
R1 EneTechIo; C:\Windows\system32\drivers\ene.sys [19968 2019-10-17] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 epp; C:\EEK\bin64\epp.sys [155112 2020-06-28] (Microsoft Windows Hardware Compatibility Publisher -> Emsisoft Ltd)
R1 GLCKIO2; C:\Windows\system32\drivers\GLCKIO2.sys [29368 2019-04-24] (ASUSTeK Computer Inc. -> )
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [79768 2020-05-19] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [145504 2020-05-19] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [93312 2019-03-12] (Kaspersky Lab -> AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [37816 2020-05-19] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [251800 2020-05-19] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [633600 2020-04-28] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [1217792 2020-04-28] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP20.0\Bases\klids.sys [215104 2020-06-27] (Kaspersky Lab -> AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [998296 2020-05-19] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klim6; C:\Windows\system32\DRIVERS\klim6.sys [58192 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [79760 2020-05-19] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [59512 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [51328 2019-03-13] (Kaspersky Lab -> AO Kaspersky Lab)
S3 klpnpflt; C:\Windows\system32\DRIVERS\klpnpflt.sys [45904 2019-03-10] (Kaspersky Lab -> AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\drivers\kltap.sys [48592 2018-03-16] (AnchorFree Inc -> The OpenVPN Project)
R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [256752 2020-06-27] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\Windows\System32\Drivers\klupd_klif_kimul.sys [99152 2020-06-27] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [309968 2020-06-27] (Kaspersky Lab -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [116920 2020-06-29] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [206880 2020-06-27] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [105600 2019-03-05] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [211048 2020-05-19] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [232344 2020-05-19] (Kaspersky Lab -> AO Kaspersky Lab)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [25616 2018-02-12] (MICSYS Technology Co., Ltd. -> )
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\nvlddmkm.sys [22094936 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [24000 2019-09-25] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
R3 UcmCxUcsiNvppc; C:\Windows\System32\drivers\UcmCxUcsiNvppc.sys [469736 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [45960 2020-06-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [401120 2020-06-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [64224 2020-06-04] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz136; \??\C:\Users\Computer\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X] <==== ATTENTION

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

Error(1) reading file: "C:\Users\Computer\Downloads\Market Stalkers "
Error(1) reading file: "C:\Users\Computer\Downloads\2 Topstep Courses & Indicators "
2020-06-29 15:19 - 2020-06-29 15:20 - 000023927 _____ C:\Users\Computer\Downloads\FRST.txt
2020-06-29 15:19 - 2020-06-29 15:19 - 000000000 ____D C:\Users\Computer\Downloads\FRST-OlderVersion
2020-06-29 15:19 - 2020-06-29 15:19 - 000000000 ____D C:\FRST
2020-06-29 09:50 - 2020-06-29 09:50 - 000000022 _____ C:\Users\Computer\Documents\MEGA-RECOVERYKEY.txt
2020-06-29 08:41 - 2020-06-29 15:19 - 002291712 _____ (Farbar) C:\Users\Computer\Downloads\FRST64.exe
2020-06-29 00:43 - 2020-06-29 00:43 - 000116920 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys
2020-06-28 16:12 - 2020-06-28 16:12 - 002294392 _____ (Opera Software) C:\Users\Computer\Downloads\OperaSetup.exe
2020-06-28 15:50 - 2020-06-28 15:50 - 000000000 ____D C:\ProgramData\Emsisoft
2020-06-28 15:49 - 2020-06-28 15:51 - 000000000 ____D C:\EEK
2020-06-28 15:48 - 2020-06-28 15:49 - 358015472 _____ C:\Users\Computer\Downloads\EmsisoftEmergencyKit.exe
2020-06-28 15:44 - 2020-06-28 15:44 - 038494576 _____ (Apple Inc.) C:\Users\Computer\Downloads\SafariSetup.exe
2020-06-28 15:32 - 2020-06-28 15:35 - 000000000 ____D C:\ProgramData\HitmanPro
2020-06-28 15:28 - 2020-06-28 15:29 - 011429976 _____ (SurfRight B.V.) C:\Users\Computer\Downloads\HitmanPro_x64.exe
2020-06-28 14:31 - 2020-06-28 14:31 - 041824168 _____ C:\Users\Computer\Downloads\vlc-3.0.11-win64.exe
2020-06-28 13:53 - 2020-06-28 13:53 - 006455520 _____ (EnigmaSoft Limited) C:\Users\Computer\Downloads\SpyHunter-Installer.exe
2020-06-27 16:26 - 2020-06-27 16:26 - 000019499 _____ C:\Users\Computer\Downloads\CourseList- LATEST.xlsx
2020-06-27 15:46 - 2020-06-27 15:46 - 000000000 ____D C:\Users\Computer\AppData\Local\Kaspersky Lab
2020-06-27 15:45 - 2020-06-27 15:45 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-shm
2020-06-27 15:45 - 2020-06-27 15:45 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb-shm
2020-06-27 15:45 - 2020-06-27 15:45 - 000032768 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-shm
2020-06-27 15:45 - 2020-06-27 15:45 - 000012288 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb
2020-06-27 15:45 - 2020-06-27 15:45 - 000012288 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb
2020-06-27 15:45 - 2020-06-27 15:45 - 000012288 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb
2020-06-27 15:45 - 2020-06-27 15:45 - 000000000 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-wal
2020-06-27 15:45 - 2020-06-27 15:45 - 000000000 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb-wal
2020-06-27 15:45 - 2020-06-27 15:45 - 000000000 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-wal
2020-06-27 15:10 - 2020-06-27 15:10 - 000309968 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys
2020-06-27 15:09 - 2020-06-27 15:09 - 000206880 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_mark.sys
2020-06-27 15:09 - 2020-06-27 15:09 - 000099152 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_kimul.sys
2020-06-27 15:09 - 2020-06-27 15:09 - 000003392 _____ C:\Windows\system32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2020-06-27 15:09 - 2020-06-27 15:09 - 000003192 _____ C:\Windows\system32\Tasks\kpm_tray.exe
2020-06-27 15:09 - 2020-06-27 15:09 - 000001227 _____ C:\Users\Public\Desktop\Kaspersky Password Manager.lnk
2020-06-27 15:09 - 2020-06-27 15:09 - 000001227 _____ C:\ProgramData\Desktop\Kaspersky Password Manager.lnk
2020-06-27 15:09 - 2020-06-27 15:09 - 000000000 ____D C:\Users\Default\AppData\Local\Kaspersky Lab
2020-06-27 15:09 - 2020-06-27 15:09 - 000000000 ____D C:\Users\Default User\AppData\Local\Kaspersky Lab
2020-06-27 15:09 - 2020-06-27 15:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager
2020-06-27 15:09 - 2020-06-27 15:09 - 000000000 ____D C:\Program Files\Common Files\AV
2020-06-27 15:08 - 2020-06-29 13:41 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2020-06-27 15:08 - 2020-06-27 15:09 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2020-06-27 15:08 - 2020-06-27 15:08 - 000256752 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_arkmon.sys
2020-06-27 15:08 - 2020-06-27 15:08 - 000002170 _____ C:\Users\Public\Desktop\Kaspersky Security Cloud.lnk
2020-06-27 15:08 - 2020-06-27 15:08 - 000002170 _____ C:\ProgramData\Desktop\Kaspersky Security Cloud.lnk
2020-06-27 15:08 - 2020-06-27 15:08 - 000001253 _____ C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk
2020-06-27 15:08 - 2020-06-27 15:08 - 000001253 _____ C:\ProgramData\Desktop\Kaspersky Secure Connection.lnk
2020-06-27 15:08 - 2020-06-27 15:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Cloud
2020-06-27 15:08 - 2020-06-27 15:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2020-06-27 15:08 - 2020-05-19 09:11 - 000998296 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2020-06-27 15:08 - 2020-05-19 09:11 - 000251800 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2020-06-27 15:08 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2020-06-27 15:07 - 2020-06-27 15:07 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2020-06-27 15:05 - 2020-06-27 15:05 - 002907480 _____ (Kaspersky) C:\Users\Computer\Downloads\ks3.020.0.14.1085abcdefghijen_es_fr_22684.exe
2020-06-27 15:00 - 2020-06-27 15:00 - 014827616 _____ (ESET spol. s r.o.) C:\Users\Computer\Downloads\esetonlinescanner.exe
2020-06-27 14:55 - 2020-06-27 14:55 - 000270160 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Computer\Downloads\avg_antivirus_free_setup (1).exe
2020-06-27 14:54 - 2020-06-27 14:54 - 000000000 ____D C:\Users\Computer\AppData\Local\CrashDumps
2020-06-27 14:51 - 2020-06-27 15:05 - 000000000 ____D C:\Program Files (x86)\AVG
2020-06-27 14:50 - 2020-06-27 15:05 - 000000000 ____D C:\ProgramData\AVG
2020-06-27 14:50 - 2020-06-27 14:50 - 000270160 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Computer\Downloads\avg_antivirus_free_setup.exe
2020-06-27 14:50 - 2020-06-27 14:50 - 000000000 ____D C:\Program Files\AVG
2020-06-27 14:48 - 2020-06-27 14:48 - 001988280 _____ (Malwarebytes) C:\Users\Computer\Downloads\MBSetup (1).exe
2020-06-27 14:45 - 2020-06-27 14:45 - 000000000 ____D C:\Users\Computer\AppData\Local\mbam
2020-06-27 14:44 - 2020-06-27 14:44 - 000000000 ____D C:\Malwarebytes
2020-06-27 14:39 - 2020-06-27 14:39 - 001988280 _____ (Malwarebytes) C:\Users\Computer\Downloads\MBSetup.exe
2020-06-27 14:36 - 2020-06-27 14:44 - 000065536 _____ C:\cert8.db
2020-06-27 14:36 - 2020-06-27 14:44 - 000016384 _____ C:\key3.db
2020-06-27 14:36 - 2020-06-27 14:36 - 000001024 _____ C:\.rnd
2020-06-27 14:36 - 2020-06-27 14:36 - 000000000 ____D C:\Users\Computer\AppData\Local\User Data
2020-06-27 14:36 - 2020-06-27 14:36 - 000000000 ____D C:\Users\Computer\AppData\Local\Chromium
2020-06-27 14:35 - 2020-06-27 14:44 - 000000000 ____D C:\Users\Computer\AppData\Local\DP_Tower_3.7
2020-06-27 14:35 - 2020-06-27 14:44 - 000000000 ____D C:\ProgramData\TMDP_Log
2020-06-27 14:35 - 2020-06-27 14:35 - 000000000 ____D C:\ProgramData\TMDP_Setup
2020-06-27 14:20 - 2020-06-29 13:01 - 000004174 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{AA91EEA5-313E-4FBE-A9C6-6C7D1ACC9B47}
2020-06-27 14:18 - 2020-06-27 14:44 - 000000000 ____D C:\Users\Computer\AppData\Local\Trend Micro
2020-06-27 14:18 - 2018-01-30 20:16 - 000036600 _____ (Riverbed Technology, Inc.) C:\Windows\system32\Drivers\npf.sys
2020-06-27 14:17 - 2020-06-27 14:54 - 000000000 ____D C:\Program Files (x86)\Trend Micro
2020-06-27 14:17 - 2020-06-27 14:30 - 001019160 _____ C:\Users\Computer\AppData\Local\census.cache
2020-06-27 14:17 - 2020-06-27 14:30 - 000402661 _____ C:\Users\Computer\AppData\Local\ars.cache
2020-06-27 14:10 - 2020-06-27 14:24 - 000000010 _____ C:\Users\Computer\AppData\Local\sponge.last.runtime.cache
2020-06-27 14:07 - 2020-06-27 14:44 - 000000000 ____D C:\ProgramData\Trend Micro
2020-06-27 14:07 - 2020-06-27 14:07 - 000000036 _____ C:\Users\Computer\AppData\Local\housecall.guid.cache
2020-06-27 14:07 - 2020-06-27 14:07 - 000000000 ____D C:\Windows\Trend Micro
2020-06-27 13:42 - 2020-06-27 13:42 - 002660008 _____ (Trend Micro Inc.) C:\Users\Computer\Downloads\HousecallLauncher64.exe
2020-06-27 12:27 - 2020-06-27 12:50 - 000000000 ____D C:\Users\Computer\Downloads\ND10X – 10X Your Money In 10 Days Trading System
2020-06-27 12:24 - 2020-06-27 12:24 - 010980823 _____ C:\Users\Computer\Downloads\Mark_Minervini_Trade_Like_a_Stock.pdf
2020-06-27 12:09 - 2020-06-27 12:09 - 114371669 _____ C:\Users\Computer\Downloads\Super_Trader_Tactics_Webinar_with.mp4
2020-06-26 12:32 - 2020-06-26 12:32 - 003058885 _____ C:\Users\Computer\Downloads\Liam_Vaughan_Flash_Crash_A_Trading_Savant,_a_Global_Manhunt,_and.pdf
2020-06-24 14:05 - 2020-06-24 14:05 - 000757158 _____ C:\Users\Computer\Downloads\SL Currency28 Pair Dashboard user manual.rar
2020-06-23 16:47 - 2020-06-23 16:47 - 000001853 _____ C:\Users\Computer\Downloads\webinar-507487241.ics
2020-06-23 07:07 - 2020-06-23 07:07 - 000039214 _____ C:\Users\Computer\Downloads\2279_001.pdf
2020-06-23 06:12 - 2020-01-06 02:43 - 000034087 _____ C:\Users\Computer\Downloads\US Bond Scalping 13 September 2019.pdf
2020-06-23 06:11 - 2020-01-06 02:43 - 000033057 _____ C:\Users\Computer\Downloads\US Bond Scalping 11 September 2019.pdf
2020-06-23 06:11 - 2020-01-05 20:43 - 078141781 _____ C:\Users\Computer\Downloads\US Bond Scalping 11 September 2019.mp4
2020-06-23 05:53 - 2020-06-23 06:08 - 000000000 ____D C:\Users\Computer\Downloads\Scalping Mentorship Market Maker Style
2020-06-22 19:19 - 2020-06-22 19:19 - 000000000 ____D C:\Program Files\Common Files\logishrd
2020-06-22 19:19 - 2012-10-26 09:42 - 010919784 _____ C:\Windows\SysWOW64\LogiDPP.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 010919784 _____ C:\Windows\system32\LogiDPP.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 004758176 _____ (Logitech Inc.) C:\Windows\system32\Drivers\lvuvc64.sys
2020-06-22 19:19 - 2012-10-26 09:42 - 000768288 _____ (Logitech Inc.) C:\Windows\system32\LVUI64.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 000560416 _____ (Logitech Inc.) C:\Windows\system32\LVUIRC64.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 000542568 _____ (Logitech Inc.) C:\Windows\SysWOW64\LVUI2.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 000538472 _____ (Logitech Inc.) C:\Windows\SysWOW64\LVUI2RC.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 000351520 _____ (Logitech Inc.) C:\Windows\system32\Drivers\lvrs64.sys
2020-06-22 19:19 - 2012-10-26 09:42 - 000336232 _____ C:\Windows\SysWOW64\DevManagerCore.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 000336232 _____ C:\Windows\system32\DevManagerCore.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 000305000 _____ (Logitech Inc.) C:\Windows\SysWOW64\lvcodec2.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 000266828 _____ C:\Windows\system32\Drivers\LVAFT.cfg
2020-06-22 19:19 - 2012-10-26 09:42 - 000262432 _____ (Logitech Inc.) C:\Windows\system32\lvco1380853.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 000175392 _____ (Logitech Inc.) C:\Windows\system32\lvcod64.dll
2020-06-22 19:19 - 2012-10-26 09:42 - 000103272 _____ C:\Windows\SysWOW64\LogiDPPApp.exe
2020-06-22 19:19 - 2012-10-26 09:42 - 000103272 _____ C:\Windows\system32\LogiDPPApp.exe
2020-06-22 19:19 - 2012-10-26 09:42 - 000040398 _____ C:\Windows\system32\Repository.reg
2020-06-22 19:19 - 2012-10-26 09:42 - 000029494 _____ C:\Windows\system32\lvcoin64.ini
2020-06-21 16:54 - 2020-06-21 17:58 - 000000000 ____D C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2020-06-21 16:54 - 2020-06-21 17:58 - 000000000 ____D C:\Users\Computer\AppData\Local\Discord
2020-06-21 16:54 - 2020-06-21 17:54 - 000000000 ____D C:\Users\Computer\AppData\Roaming\discord
2020-06-21 16:54 - 2020-06-21 16:54 - 000000000 ____D C:\Users\Computer\AppData\Local\SquirrelTemp
2020-06-17 16:28 - 2020-06-17 16:29 - 007359955 _____ C:\Users\Computer\Documents\HFA BOND.pdf
2020-06-12 07:30 - 2020-06-12 07:30 - 025444352 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 019812864 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 011608064 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 009712640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 007012864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 006292480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 004129416 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 003525608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 003515392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 002494744 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 002230240 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 002204160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 002190648 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001704448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001610240 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001539072 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2020-06-12 07:30 - 2020-06-12 07:30 - 001497400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001467392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001410048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2020-06-12 07:30 - 2020-06-12 07:30 - 001344512 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001316352 _____ (Microsoft Corporation) C:\Windows\system32\srmclient.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001272160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001151824 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMNetMgr.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001099608 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 001012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000940544 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000932352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmclient.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000920064 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapi3.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000747832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000739840 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapi.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000651264 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000638464 _____ (Microsoft Corporation) C:\Windows\system32\srmscan.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000588800 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2020-06-12 07:30 - 2020-06-12 07:30 - 000567808 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2020-06-12 07:30 - 2020-06-12 07:30 - 000564736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000549376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000526336 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000516544 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSCOMEX.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000500224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
2020-06-12 07:30 - 2020-06-12 07:30 - 000484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000478208 _____ (Microsoft® Windows® Operating System) C:\Windows\SysWOW64\wvc.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000466944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmscan.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000430592 _____ (Microsoft Corporation) C:\Windows\system32\WalletService.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000422400 _____ (Microsoft Corporation) C:\Windows\system32\mswmdm.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000361472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\termmgr.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000349184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswmdm.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000342528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Feedback.Analog.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000338944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000323584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WlanMM.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000248320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wavemsp.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000219136 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2020-06-12 07:30 - 2020-06-12 07:30 - 000199168 _____ (Microsoft Corporation) C:\Windows\system32\wmidx.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000166912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmidx.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkspbrokerAx.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000083600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iemigplugin.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\BdeUISrv.exe
2020-06-12 07:30 - 2020-06-12 07:30 - 000028368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SecurityCenterBrokerPS.dll
2020-06-12 07:30 - 2020-06-12 07:30 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2020-06-12 07:29 - 2020-06-12 07:30 - 003822592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 025902080 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 019851776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 018029056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 009931576 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 008015360 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 007911176 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 007760384 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 007604592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 007268864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 007266080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 006526448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 006435840 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 006091048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 006066808 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 005909504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 005765144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 005283264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 005195432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 005111808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 005004344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 004858880 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 004610560 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 004565248 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 004012032 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Service.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 003726848 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 003712000 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 003581240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 003398656 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 003368104 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 003187200 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 002831872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 002798592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2020-06-12 07:29 - 2020-06-12 07:29 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2020-06-12 07:29 - 2020-06-12 07:29 - 002716672 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 002656256 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 002583496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 002289664 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 002281472 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 002235520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 002184504 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001942528 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001919488 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001803776 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 001751040 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001743680 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001697792 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001683968 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001657856 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001654960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001649152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001637888 _____ (Microsoft Corporation) C:\Windows\system32\TaskFlowDataEngine.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001637888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001583104 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001486336 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 001466368 _____ (Microsoft Corporation) C:\Windows\system32\rdpsharercom.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001458688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001447424 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 001416224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001397560 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 001393952 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001348096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001319936 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001284608 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001283072 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001274128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryPS.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001261568 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001260744 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpsharercom.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001215488 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 001193984 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001180672 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001158144 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001155944 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 001153024 _____ (Microsoft Corporation) C:\Windows\system32\windowsperformancerecordercontrol.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001138688 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001100288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001077048 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 001073664 _____ (Microsoft Corporation) C:\Windows\system32\BTAGService.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001066496 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001055184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001007104 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 001003832 _____ (Microsoft Corporation) C:\Windows\system32\DismApi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000994304 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000992256 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000982016 _____ (Microsoft Corporation) C:\Windows\system32\tapi3.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000971264 _____ (Microsoft Corporation) C:\Windows\system32\dsregcmd.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000932256 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000931840 _____ (Microsoft Corporation) C:\Windows\system32\InkObjCore.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000929280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000899584 _____ (Microsoft Corporation) C:\Windows\system32\MdmDiagnostics.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000897536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000894024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000893952 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000892416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000892048 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000881664 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000874296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 000868864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windowsperformancerecordercontrol.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000868352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000863232 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000843776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000836608 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000836608 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000826368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000797464 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000784896 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000783496 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000782336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000777216 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000776192 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000765440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000760296 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000740664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DismApi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000736768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000727040 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntime.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000722072 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000716320 _____ (Microsoft Corporation) C:\Windows\system32\StateRepository.Core.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000716288 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntimewindows.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000705536 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BTAGService.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000696832 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000692224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000690176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkObjCore.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000684856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000679424 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000674304 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000668672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000666624 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000651776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000650752 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000648192 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000640000 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000632320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000628408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000619008 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000614400 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000596992 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000593424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000575488 _____ (Microsoft® Windows® Operating System) C:\Windows\system32\wvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000574464 _____ (Microsoft Corporation) C:\Windows\system32\msTextPrediction.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000572200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryPS.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiaaut.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000569856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000564496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StateRepository.Core.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000561464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 000557056 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000553984 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 000548984 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000544256 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000533504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000531768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2020-06-12 07:29 - 2020-06-12 07:29 - 000529920 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000529920 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000522240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000518456 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000513536 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000508720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000508216 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroles.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000498176 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.FileExplorer.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000486912 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000477184 _____ (Microsoft Corporation) C:\Windows\system32\SharedRealitySvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000472064 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000467952 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000462848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000462848 _____ (Microsoft Corporation) C:\Windows\system32\iassdo.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000461112 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000453944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000451864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000441152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 000440832 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000435200 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000430592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000427008 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000426496 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000425056 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000423424 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000420352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000407864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000405936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000398336 _____ (Microsoft Corporation) C:\Windows\system32\WlanMM.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000398336 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000396800 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000394752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Preview.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000391680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000384512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000384000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000380728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000368640 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManager.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iassdo.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000357176 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthAgent.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000343552 _____ (Microsoft Corporation) C:\Windows\system32\wpr.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000328192 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000325120 _____ (Microsoft Corporation) C:\Windows\system32\rdpviewerax.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 000312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000312832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 000307712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000306688 _____ (Microsoft Corporation) C:\Windows\system32\RASMM.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000294400 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\CXHProvisioningServer.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000287232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Preview.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000283136 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000280376 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpviewerax.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000269312 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000267776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000264192 _____ (Microsoft Corporation) C:\Windows\system32\netman.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000260096 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000259776 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000259584 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2020-06-12 07:29 - 2020-06-12 07:29 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\FileHistory.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000247856 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000242688 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManagerClient.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000237056 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000230912 _____ (Microsoft Corporation) C:\Windows\system32\RdpRelayTransport.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000228864 _____ (Microsoft Corporation) C:\Windows\system32\psr.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000228864 _____ (Microsoft Corporation) C:\Windows\system32\netprofm.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000228352 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000223544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dism.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000221496 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000218624 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000211256 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000209216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000208384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryUpgrade.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000208384 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000205824 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000204008 _____ (Microsoft Corporation) C:\Windows\system32\SecurityCenterBroker.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000201528 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SIUF.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000199992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000196096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000194560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psr.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000193592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\AarSvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000190048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000184320 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000183808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netprofm.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\dot3mm.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000179512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2020-06-12 07:29 - 2020-06-12 07:29 - 000170496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000165888 _____ (Microsoft Corporation) C:\Windows\system32\msaatext.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000165832 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000165296 _____ (Microsoft Corporation) C:\Windows\system32\dmcmnutils.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000165192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000150328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000148992 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000148992 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000137728 _____ (Microsoft Corporation) C:\Windows\system32\imapi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrecst.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000132608 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000132424 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000130112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmcmnutils.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000129600 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\NetworkStatus.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000128312 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000127488 _____ (Microsoft Corporation) C:\Windows\system32\wkspbrokerAx.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000127064 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\sdshext.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\DAMM.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaatext.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleprn.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000114688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000108856 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthProxyStub.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000107520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000105984 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000105472 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000104248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000099712 _____ (Microsoft Corporation) C:\Windows\system32\FsIso.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\atl.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000093448 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000090952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryBroker.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000089344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\WwanRadioManager.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2020-06-12 07:29 - 2020-06-12 07:29 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000080384 _____ (Microsoft Corporation) C:\Windows\system32\RpcEpMap.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\iasads.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2020-06-12 07:29 - 2020-06-12 07:29 - 000067584 _____ (Microsoft Corporation) C:\Windows\system32\WlanRadioManager.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000067072 _____ (Microsoft Corporation) C:\Windows\system32\XboxGipRadioManager.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000065024 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollCtrl.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000063288 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthHost.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasads.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000053760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\NfcRadioMedia.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000051712 _____ (Microsoft Corporation) C:\Windows\system32\MdmDiagnosticsTool.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnrollCtrl.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000045568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryCore.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000041864 _____ (Microsoft Corporation) C:\Windows\system32\SecurityCenterBrokerPS.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\atlthunk.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atlthunk.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryCore.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\nlmproxy.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\nlmsprep.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000013312 _____ C:\Windows\system32\agentactivationruntimestarter.exe
2020-06-12 07:29 - 2020-06-12 07:29 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\DMAlertListener.ProxyStub.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DMAlertListener.ProxyStub.dll
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth9.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth12.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth11.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth10.bin
2020-06-12 07:29 - 2020-06-12 07:29 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2020-06-12 07:27 - 2020-05-14 21:29 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2020-06-12 07:27 - 2020-05-14 21:10 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2020-06-09 14:02 - 2020-06-09 14:02 - 000000000 ____D C:\Users\Computer\AppData\Roaming\Macromedia
2020-06-07 10:07 - 2020-06-07 10:07 - 000000000 ____D C:\Users\Computer\Documents\Zoom
2020-06-07 10:07 - 2020-06-07 10:07 - 000000000 ____D C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2020-06-03 15:35 - 2020-06-17 06:25 - 000000000 ___RD C:\Users\Computer\Documents\MEGAsync
2020-06-03 15:34 - 2020-06-03 15:34 - 000001138 _____ C:\Users\Computer\Desktop\MEGAsync.lnk
2020-06-03 15:34 - 2020-06-03 15:34 - 000000000 ____D C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync
2020-06-03 15:34 - 2020-06-03 15:34 - 000000000 ____D C:\Users\Computer\AppData\Local\MEGAsync
2020-06-03 15:34 - 2020-06-03 15:34 - 000000000 ____D C:\Users\Computer\AppData\Local\Mega Limited
2020-05-30 18:26 - 2020-05-30 18:26 - 000000000 ____D C:\Users\Computer\Documents\YOUTUBE
2020-05-30 18:25 - 2020-05-30 18:25 - 000000000 ____D C:\Users\Computer\Documents\LIFE INSURANCE
2020-05-30 18:24 - 2020-05-30 18:24 - 000000000 ____D C:\Users\Computer\Documents\TAX RETURNS
2020-05-30 18:22 - 2020-05-30 18:24 - 000000000 ____D C:\Users\Computer\Documents\FOREX
2020-05-30 18:20 - 2020-05-30 18:25 - 000000000 ____D C:\Users\Computer\Documents\HOUSE PICTURES
2020-05-30 18:20 - 2020-05-30 18:20 - 000000000 ____D C:\Users\Computer\Documents\MICROSOFT OFFICE
2020-05-30 18:19 - 2020-05-30 18:24 - 000000000 ____D C:\Users\Computer\Documents\RAAD
2020-05-30 18:19 - 2020-05-30 18:19 - 000000000 ____D C:\Users\Computer\Documents\JEFF PICTURES
2020-05-30 18:18 - 2020-06-29 12:32 - 000000000 ____D C:\Users\Computer\Documents\JEFF RESUME

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-29 15:08 - 2019-03-18 21:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-06-29 09:21 - 2020-02-04 03:40 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-06-28 15:47 - 2020-02-03 12:47 - 000795992 _____ C:\Windows\system32\PerfStringBackup.INI
2020-06-28 15:47 - 2019-03-18 21:50 - 000000000 ____D C:\Windows\INF
2020-06-28 15:41 - 2020-02-04 03:40 - 000833600 _____ C:\Windows\system32\AsusUpdateCheck.exe
2020-06-28 15:41 - 2020-02-04 03:40 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-06-28 15:41 - 2020-02-03 12:48 - 000006615 _____ C:\CosairDram.txt
2020-06-28 15:40 - 2020-02-04 03:40 - 000872200 _____ C:\Windows\system32\wpbbin.exe
2020-06-28 15:40 - 2020-02-03 13:29 - 000006596 _____ C:\ProgramData\DisplaySessionContainer1.log_backup1
2020-06-28 15:40 - 2020-02-03 12:46 - 000025130 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_backup1
2020-06-28 15:40 - 2020-02-03 12:46 - 000012969 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_backup1
2020-06-28 15:40 - 2019-03-18 21:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-06-28 15:25 - 2020-02-03 12:44 - 000000000 ____D C:\Users\Computer\AppData\Local\Packages
2020-06-28 15:25 - 2019-03-18 21:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-06-28 15:25 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\AppReadiness
2020-06-28 14:33 - 2020-04-24 16:17 - 000000876 _____ C:\Users\Public\Desktop\VLC media player.lnk
2020-06-28 14:33 - 2020-04-24 16:17 - 000000876 _____ C:\ProgramData\Desktop\VLC media player.lnk
2020-06-28 14:33 - 2020-04-24 16:17 - 000000000 ____D C:\Users\Computer\AppData\Roaming\vlc
2020-06-28 13:29 - 2019-03-18 21:37 - 000000000 ____D C:\Windows\CbsTemp
2020-06-27 15:08 - 2019-03-18 21:52 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-06-27 15:08 - 2019-03-18 21:37 - 000032768 _____ C:\Windows\system32\config\ELAM
2020-06-27 14:35 - 2019-03-18 21:49 - 000000368 _____ C:\Windows\win.ini
2020-06-26 06:57 - 2020-02-03 12:46 - 000003386 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1894460055-3280049966-3379111095-1001
2020-06-26 06:57 - 2020-02-03 12:46 - 000000000 ___RD C:\Users\Computer\OneDrive
2020-06-26 06:57 - 2020-02-03 12:44 - 000002376 _____ C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-06-26 05:23 - 2020-04-28 16:10 - 000000000 ____D C:\Users\Computer\AppData\Local\GoToMeeting
2020-06-25 05:23 - 2020-04-28 16:10 - 000000684 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-1894460055-3280049966-3379111095-1001.job
2020-06-25 05:23 - 2020-04-28 16:10 - 000000588 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-1894460055-3280049966-3379111095-1001.job
2020-06-24 11:06 - 2020-04-28 16:10 - 000003860 _____ C:\Windows\system32\Tasks\G2MUploadTask-S-1-5-21-1894460055-3280049966-3379111095-1001
2020-06-24 11:06 - 2020-04-28 16:10 - 000003764 _____ C:\Windows\system32\Tasks\G2MUpdateTask-S-1-5-21-1894460055-3280049966-3379111095-1001
2020-06-24 10:31 - 2020-02-09 15:19 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-24 10:31 - 2020-02-09 15:19 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-06-24 10:31 - 2020-02-09 15:19 - 000002260 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-06-23 06:02 - 2020-04-24 15:21 - 000000000 ____D C:\Users\Computer\Documents\TRADING
2020-06-19 05:37 - 2020-02-03 12:48 - 000000000 ____D C:\Program Files (x86)\LightingService
2020-06-18 04:58 - 2020-02-14 22:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2020-06-16 05:09 - 2020-02-04 03:40 - 000000000 ____D C:\ProgramData\ASUS
2020-06-13 06:49 - 2020-02-03 12:44 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-06-13 06:49 - 2020-02-03 12:44 - 000000000 ___RD C:\Users\Computer\3D Objects
2020-06-13 06:48 - 2020-02-04 03:40 - 000368112 _____ C:\Windows\system32\FNTCACHE.DAT
2020-06-12 18:27 - 2019-03-18 23:23 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-06-12 18:27 - 2019-03-18 23:23 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ___SD C:\Windows\SysWOW64\F12
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ___SD C:\Windows\system32\F12
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\SysWOW64\Dism
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\SysWOW64\Com
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\SystemResources
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\system32\oobe
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\system32\Dism
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\system32\Com
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\ShellExperiences
2020-06-12 18:27 - 2019-03-18 21:52 - 000000000 ____D C:\Windows\bcastdvr
2020-06-12 07:29 - 2020-02-03 12:43 - 002876416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2020-06-07 10:07 - 2020-04-25 12:05 - 000000000 ____D C:\Users\Computer\AppData\Roaming\Zoom
2020-06-05 14:03 - 2019-03-18 21:56 - 000835480 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-06-05 14:03 - 2019-03-18 21:56 - 000179608 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-04 05:43 - 2020-02-04 03:40 - 000000000 ____D C:\Windows\system32\Drivers\wd
2020-06-03 05:32 - 2020-02-10 14:28 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-06-02 13:53 - 2020-05-17 15:57 - 000000000 ____D C:\Users\Computer\Documents\JEFF BACK

==================== Files in the root of some directories ========

2020-06-27 14:17 - 2020-06-27 14:30 - 000402661 _____ () C:\Users\Computer\AppData\Local\ars.cache
2020-06-27 14:17 - 2020-06-27 14:30 - 001019160 _____ () C:\Users\Computer\AppData\Local\census.cache
2020-06-27 14:07 - 2020-06-27 14:07 - 000000036 _____ () C:\Users\Computer\AppData\Local\housecall.guid.cache
2020-06-27 14:10 - 2020-06-27 14:24 - 000000010 _____ () C:\Users\Computer\AppData\Local\sponge.last.runtime.cache

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
 

Attachments

  • Addition.txt
    44.8 KB · Views: 6
nasdaq

nasdaq

Super Moderator
Verified
Staff Member
Nov 5, 2019
1,597
Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

find out why this is error causing a reading file in the Downloads folder.

Error(1) reading file: "C:\Users\Computer\Downloads\Market Stalkers "
Error(1) reading file: "C:\Users\Computer\Downloads\2 Topstep Courses & Indicators "

Delete them the folder in bold if not required.

===

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

If the problem persists and Chrome is Synced with other Devices reset it.

forums.malwarebytes.com

Chrome Secure Preferences detection always returns

Browser-related remediation (especially concerning preference/configuration files) can be particularly troublesome given the safeguards built into the browsers, along with syncing mechanisms and other complications associated with Internet browsers. The issue you're experiencing is likely caused ...
forums.malwarebytes.com forums.malwarebytes.com

Sign in and sync in Chrome - Computer - Google Chrome Help

When you sign in to Chrome with your Google Account, you can get your info on all your devices and use additional Chrome features. When you sign in You can get your bookmarks, passwords, and
support.google.com

Execute the suggested fix.

Restart the computer normally.
===========

Post the Fixlog.txt and let me know if the problem is solved.
 

Attachments

  • fixlist.txt
    703 bytes · Views: 6
Status
Not open for further replies.

Similar threads

T
    • Like
  • Locked
Has anyone heard of skyjem?
Replies
2
Views
263
Windows Malware Removal Help & Support
nasdaq
nasdaq
suthey1
  • Locked
Google Chrome Extension Can't Be Removed
Replies
6
Views
714
Windows Malware Removal Help & Support
nasdaq
nasdaq
snaps12
  • Locked
Hello my daughter got the oneetx virus.
Replies
2
Views
371
Windows Malware Removal Help & Support
nasdaq
nasdaq

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

Quick Navigation

Forum Rules Warning System Welcome Guide Two-factor Authentication

User Menu

Login

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top