Problems logging in to websites

[sorcerer]

[HEADING=1]OK, this didn’t work as you said. When I clicked on the file it downloaded it, so I dragged the file onto the desktop where the FRST program is located. Then I carried out your instructions. Here is the result:
Fix result of Farbar Recovery Scan Tool (x64) Version: 16-02-2020
Ran by johnb (20-02-2020 10:33:05) Run:1
Running from C:\Users\johnb\Desktop
Loaded Profiles: johnb (Available Profiles: johnb)
Boot Mode: Normal[/HEADING]
fixlist content:

---

CreateRestorepoint:
CloseProcesses:
BHO: McAfee WebAdvisor → {B164E929-A1B6-4A06-B104-2CD0E90A88FF} → C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-02-05] (McAfee, LLC → McAfee, Inc.)
BHO-x32: McAfee WebAdvisor → {B164E929-A1B6-4A06-B104-2CD0E90A88FF} → C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-02-05] (McAfee, LLC → McAfee, Inc.)
FF HKLM...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-02-05]
FF HKLM-x32...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
CHR Extension: (McAfee® WebAdvisor) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepao oicaho [2019-12-11]
S2 0089261582040107mcinstcleanup; C:\ProgramData\McInstTemp0089261582040107\mcinst.e xe [953304 2019-11-20] (McAfee, LLC → McAfee, LLC.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [915832 2020-02-05] (McAfee, LLC → McAfee, Inc.)
S3 mfefire; “C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe”
S2 mfemms; “C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe”
S3 mfevtp; “C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe”
S0 cfwids; system32\drivers\cfwids.sys
R0 mfeaack; system32\drivers\mfeaack.sys
R0 mfeavfk; system32\drivers\mfeavfk.sys
S0 mfeelamk; system32\drivers\mfeelamk.sys
S0 mfefirek; system32\drivers\mfefirek.sys
R0 mfehidk; system32\drivers\mfehidk.sys
R0 mfeplk; system32\drivers\mfeplk.sys
R0 mfewfpk; system32\drivers\mfewfpk.sys
ContextMenuHandlers5: [igfxcui] → {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => → No File
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\McMPFSvc => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\MCODS => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\MCODS => “”=“Service”
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
C:\Program Files\mcafee
C:\Program Files\Common Files\mcafee
C:\ProgramData\McInstTemp0089261582040107
C:\ProgramData\McAfee
C:\Program Files (x86)\McAfee
Hosts:
Emptytemp:
CMD: RemoveProxy
Reboot:

---

Restore point was successfully created.
Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects{B164E929-A1B6-4A06-B104-2CD0E90A88FF} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Curren tVersion\Explorer\Browser Helper Objects{B164E929-A1B6-4A06-B104-2CD0E90A88FF} => removed successfully
“HKLM\Software\Mozilla\Firefox\Extensions\{4ED1F68 A-5463-4931-9384-8FFF5ED91D92}” => not found
“C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi” => not found
“HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensi ons\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}” => not found
CHR Extension: (McAfee® WebAdvisor) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepao oicaho [2019-12-11] => Error: No automatic fix found for this entry.
0089261582040107mcinstcleanup => service not found.
McAfee WebAdvisor => service not found.
mfefire => service not found.
mfemms => service not found.
mfevtp => service not found.
cfwids => service not found.
mfeaack => service not found.
mfeavfk => service not found.
mfeelamk => service not found.
mfefirek => service not found.
mfehidk => service not found.
mfeplk => service not found.
mfewfpk => service not found.
HKLM\Software\Classes\Directory\Background\ShellEx \ContextMenuHandlers\igfxcui => removed successfully
HKLM\System\CurrentControlSet\Control\SafeBoot\Net work\McMPFSvc => not found
HKLM\System\CurrentControlSet\Control\SafeBoot\Min imal\MCODS => not found
HKLM\System\CurrentControlSet\Control\SafeBoot\Net work\MCODS => not found
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
“C:\Program Files\mcafee” => not found
“C:\Program Files\Common Files\mcafee” => not found
C:\ProgramData\McInstTemp0089261582040107 => moved successfully
“C:\ProgramData\McAfee” => not found
“C:\Program Files (x86)\McAfee” => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

========= RemoveProxy =========

‘RemoveProxy’ is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========

=========== EmptyTemp: ==========

BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 17021793 B
Java, Flash, Steam htmlcache => 220236743 B
Windows/system/drivers => 246870 B
Edge => 62477 B
Chrome => 175581 B
Firefox => 0 B
Opera => 429573036 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 1849794 B
systemprofile32 => 1849794 B
LocalService => 1859300 B
NetworkService => 1859300 B
johnb => 40695420 B

RecycleBin => 121982 B
EmptyTemp: => 692.4 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 10:33:26 ====

[jmarket]

Hello sorcerer, yes it certainly did work. You now see the reason for running frst from the desktop and the instruction for running the fix from the same place as frst..As per the instructions for the fix [COLOR=rgb(250, 197, 28)]"[COLOR=rgb(250, 197, 28)]IMPORTANT the fixlist.txt file must be in the same location as the FRST program otherwise the fix will not work"[/COLOR][/COLOR][COLOR=rgb(250, 197, 28)][COLOR=rgb(250, 197, 28)]

The reason why there are many files not found is because the mcafee tool removed them, was just a double check.

Can you please open your chrome browser

Click the 3 dots to the right hand end of your URL address bar

Click on “More Tools”

Then click on “Extensions”

You should now see a page with all your Chrome extensions listed

See if there is anything Mcafee related, and if there is click the remove button for it. If another confirmation box asks you to confirm the removal, also click remove in that box.

Then can you post some fresh frst logs please?[/color][/color]

[sorcerer]

First, I’ve got my email up and running now, since they sent me a new password through the mail. They haven’t advised me of the reason for the problems though, so it’s possible that I’ll get locked out again at some point. I won’t try Steam again until we’ve finished the process here.
I downloaded Chrome (I use Opera) and there was nothing McAfee related.
Here are the logs:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-02-2020
Ran by johnb (administrator) on DESKTOP-MQUKFNH (Dell Inc. XPS 8930) (21-02-2020 11:28:34)
Running from C:\Users\johnb\Desktop
Loaded Profiles: johnb (Available Profiles: johnb)
Platform: Windows 10 Home Version 1909 18363.657 (X64) Language: English (United States)
Default browser: Opera
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Dell Inc → ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(Dell Inc → ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(Dell Inc → Dell Inc.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRe medationService.exe
(Google LLC → Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler. exe
(Google LLC → Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler6 4.exe
(Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) pGFX → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\igfxCUIService.ex e
(Intel(R) pGFX → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\igfxEM.exe
(Intel(R) pGFX → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\IntelCpHDCPSvc.ex e
(Intel(R) pGFX → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\IntelCpHeciSvc.ex e
(Intel(R) Rapid Storage Technology → Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology → Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel(R) Rapid Storage Technology → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ias torac.inf_amd64_eea3cf789013ad4f\RstMwService.exe
(Intel(R) Software Development Products → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx _psw.inf_amd64_fd0b4b97d35097fa\aesm_service.exe
(Intel(R) Trust Services → Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe
(Malwarebytes Inc → Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc → Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation → Microsoft Corporation) C:\Users\johnb\AppData\Local\Microsoft\OneDrive\On eDrive.exe
(Microsoft Windows → Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows → Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows → Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher → Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(NVIDIA Corporation → NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation → NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\N VDisplay.Container.exe
(NVIDIA Corporation → NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\N VDisplay.Container.exe
(Piriform Software Ltd → Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. → Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. → Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. → Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. → Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Rivet Networks LLC → CloudBees, Inc.) C:\Windows\System32\drivers\RivetNetworks\Killer\x TendUtilityService.exe
(Rivet Networks LLC → Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\x TendUtility.exe
(Rivet Networks LLC → Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\K illerNetworkService.exe
(Waves Inc → Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Waves Inc → Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [319520 2018-10-27] (Intel(R) Rapid Storage Technology → Intel Corporation)
HKLM...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235944 2017-09-07] (Realtek Semiconductor Corp. → Realtek Semiconductor)
HKLM...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1493992 2017-09-07] (Realtek Semiconductor Corp. → Realtek Semiconductor)
HKLM...\Run: [DellMobileConnectWelcome] => C:\Program Files\Dell\DellMobileConnectDrivers\DellMobileConn ectWStartup.exe [313064 2018-10-05] (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.)
HKLM...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
HKLM...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [1198448 2017-08-30] (Waves Inc → Waves Audio Ltd.)
HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-16] (Piriform Software Ltd → Piriform Ltd)
HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [3365840 2020-02-11] (Valve → Valve Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] → C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.116\Inst aller\chrmstp.exe [2020-02-21] (Google LLC → Google LLC)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {080122B9-6627-4991-8195-61FDF454AE0D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [857024 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {0E4D0AEF-1126-40D5-B7D6-7D1EB201D9C9} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [982464 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {3210BA52-983D-40D0-8AAF-F16DBC0B6449} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [816960 2017-10-12] (Intel(R) Trust Services → Intel(R) Corporation)
Task: {38415009-8A87-49A7-A0E5-E974F7328440} - System32\Tasks\Opera scheduled Autoupdate 1557493179 => C:\Users\johnb\AppData\Local\Programs\Opera\launch er.exe [1532952 2020-02-18] (Opera Software AS → Opera Software)
Task: {40380448-F6A6-45D5-B6EC-32604FE42C55} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [934848 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {477F3A58-8891-4FDB-93DB-8F34F2509A31} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [934848 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {4A9DFFA5-8FF8-4B55-BFBF-328A12EA9E82} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3297728 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {52079FA4-9685-479A-9556-66B6ACDBB148} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3933576 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
Task: {5699EF4E-B305-493F-91B5-7E285BFBFE53} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [857024 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {6C36BA9B-01EE-4C8B-817A-E505446B59F9} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [934848 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {81549073-BF0B-4FCE-A93A-E89865B9DD0D} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1835112 2020-02-20] (Avast Software s.r.o. → AVAST Software)
Task: {8E6A4351-85A0-4619-A436-BA5C44F57102} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {95B578E5-5177-4B6D-8AF4-66038FEEFF8E} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [934848 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {A015C48E-6263-4DFB-8407-2D4D40A61E58} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-05-11] (Google Inc → Google Inc.)
Task: {A20DC11C-D3EB-4C76-87A8-F8E898333FD9} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-16] (Piriform Software Ltd → Piriform Software Ltd)
Task: {BA990EA0-F2A4-467F-B5D7-B87DE7696D43} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [654784 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {BECA6D38-F3C8-4ED9-98E6-A4B403E1346D} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE195 2-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {E1DCB656-C0BE-48B6-9A69-BA7946D6EB67} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-16] (Piriform Software Ltd → Piriform Ltd)
Task: {E2282557-6FE2-4817-944A-93CA1426A4C6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-05-11] (Google Inc → Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip..\Interfaces{5ce95e72-df66-4a08-8574-122ce42f266e}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip..\Interfaces{978c1f44-9dc0-4590-80b7-56e596bd69d3}: [DhcpNameServer] 192.168.1.1 192.168.1.1
[HEADING=1]Internet Explorer:[/HEADING]
HKU\S-1-5-21-1677839296-4017878107-255514410-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell17win10.msn.com/?pc=DCTE
HKU\S-1-5-21-1677839296-4017878107-255514410-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
[HEADING=1]Chrome:[/HEADING]
CHR Profile: C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default [2020-02-21]
CHR StartupUrls: Default → “hxxp://www.google.com”
CHR Extension: (Slides) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhon fmgoek [2019-05-11]
CHR Extension: (Docs) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfi lokake [2019-05-11]
CHR Extension: (YouTube) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldk acnbeo [2019-05-11]
CHR Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihc jkigck [2019-12-24]
CHR Extension: (Chrome Web Store Payments) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccm gmieda [2019-12-11]
CHR Extension: (Chrome Media Router) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcj beemfm [2020-02-21]
CHR HKLM-x32...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
[HEADING=1]Opera:[/HEADING]
OPR Notifications: hxxps://pchelpforum.net
OPR Session Restore: → is enabled.

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESMService; C:\WINDOWS\System32\DriverStore\FileRepository\sgx _psw.inf_amd64_fd0b4b97d35097fa\aesm_service.exe [716824 2019-09-22] (Intel(R) Software Development Products → Intel Corporation)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6259592 2019-12-19] (AVAST Software s.r.o. → AVAST Software)
R2 AtherosSvc; C:\WINDOWS\System32\drivers\AdminService.exe [386976 2019-08-08] (Microsoft Windows Hardware Compatibility Publisher → Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [417536 2020-02-14] (AVAST Software s.r.o. → AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [38096 2020-01-24] (Dell Inc → )
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRe medationService.exe [293528 2018-10-20] (Dell Inc → Dell Inc.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [36032 2019-11-08] (Dell Inc → )
S4 HfcDisableService; C:\WINDOWS\System32\DriverStore\FileRepository\ias torac.inf_amd64_eea3cf789013ad4f\HfcDisableService .exe [1881672 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
S3 iaStorAfsService; C:\WINDOWS\System32\iaStorAfsService.exe [2859592 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
R3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe [742704 2017-10-12] (Intel(R) Trust Services → Intel(R) Corporation)
S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe [668472 2017-10-12] (Intel(R) Trust Services → Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [213648 2017-11-09] (Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\K illerNetworkService.exe [2484408 2018-07-30] (Rivet Networks LLC → Rivet Networks)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2020-02-16] (Malwarebytes Inc → Malwarebytes)
S3 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
R2 RstMwService; C:\WINDOWS\System32\DriverStore\FileRepository\ias torac.inf_amd64_eea3cf789013ad4f\RstMwService.exe [2156616 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324584 2017-09-07] (Realtek Semiconductor Corp. → Realtek Semiconductor)
R2 WavesSysSvc; C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe [829816 2017-08-30] (Waves Inc → Waves Audio Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation → Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation → Microsoft Corporation)
S2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\x TendSoftAPService.exe [72888 2018-07-30] (Rivet Networks LLC → CloudBees, Inc.)
R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\x TendUtilityService.exe [72888 2018-07-30] (Rivet Networks LLC → CloudBees, Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\N VDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\p lugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
R2 NvTelemetryContainer; “C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe” -s NvTelemetryContainer -f “C:\ProgramData\NVIDIA\NvTelemetryContainer.log” -l 3 -d “C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins” -r

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [204824 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [274456 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [209552 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [65120 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2019-10-03] (Microsoft Windows Early Launch Anti-malware Publisher → AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42736 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [161544 2019-11-02] (AVAST Software s.r.o. → AVAST Software)
R1 aswNetSec; C:\WINDOWS\System32\drivers\aswNetSec.sys [552848 2020-02-14] (AVAST Software s.r.o. → AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110320 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83792 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [848432 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460448 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [236024 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [316528 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R4 DBUtil_2_3; C:\WINDOWS\TEMP\DBUtil_2_3.Sys [14840 2020-02-20] (Dell Inc. → )
S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [36728 2019-05-21] (Microsoft Windows Hardware Compatibility Publisher → Dell Inc.)
R3 e2xw10x64; C:\WINDOWS\System32\drivers\e2xw10x64.sys [164816 2018-11-26] (Rivet Networks LLC → Qualcomm Atheros, Inc.)
R3 HfAudio; C:\WINDOWS\System32\drivers\HfAudio.sys [91200 2018-10-05] (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.)
S3 iaLPSS2_GPIO2; C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [98968 2017-10-16] (Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation)
R0 iaStorAC; C:\WINDOWS\System32\drivers\iaStorAC.sys [1033288 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
S3 iaStorAfs; C:\WINDOWS\System32\drivers\iaStorAfs.sys [72776 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\K feCo10X64.sys [144592 2018-07-30] (Rivet Networks LLC → Rivet Networks, LLC.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-02-20] (Malwarebytes Inc → Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-02-16] (Microsoft Windows Early Launch Anti-malware Publisher → Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-02-20] (Malwarebytes Inc → Malwarebytes)
R3 MEIx64; C:\WINDOWS\System32\DriverStore\FileRepository\hec i.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sy s [266128 2019-04-17] (Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\nvlddmkm.sys [22739392 2019-12-11] (NVIDIA Corporation → NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30656 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [67432 2018-03-15] (NVIDIA Corporation → NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [68112 2018-04-28] (NVIDIA Corporation → NVIDIA Corporation)
R3 ScrHIDDriver2; C:\WINDOWS\System32\drivers\ScrHIDDriver2.sys [75800 2018-10-05] (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher → Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows → Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows → Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-21 11:24 - 2020-02-21 11:24 - 001288408 _____ (Google LLC) C:\Users\johnb\Downloads\ChromeSetup.exe
2020-02-20 10:34 - 2020-02-20 10:34 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-02-20 10:34 - 2020-02-20 10:34 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-02-20 10:33 - 2020-02-20 10:33 - 000005601 _____ C:\Users\johnb\Desktop\Fixlog.txt
2020-02-20 10:31 - 2020-02-20 10:31 - 000002372 _____ C:\Users\johnb\Downloads\fixlist.txt
2020-02-20 10:30 - 2020-02-20 10:30 - 000002372 _____ C:\Users\johnb\Downloads\fixlist (1).txt
2020-02-19 10:00 - 2020-02-19 10:00 - 010651216 _____ (McAfee, LLC.) C:\Users\johnb\Downloads\MCPR.exe
2020-02-18 16:39 - 2020-02-21 11:28 - 000023869 _____ C:\Users\johnb\Desktop\FRST.txt
2020-02-17 11:46 - 2020-02-17 11:46 - 000000000 _____ C:\WINDOWS\invcol.tmp
2020-02-17 10:20 - 2020-02-21 11:28 - 000000000 ____D C:\FRST
2020-02-17 10:19 - 2020-02-17 10:19 - 002279424 _____ (Farbar) C:\Users\johnb\Desktop\FRST64.exe
2020-02-16 18:14 - 2020-02-16 18:14 - 000118422 _____ C:\Users\johnb\Documents\cc_20200216_181438.reg
2020-02-16 18:06 - 2020-02-16 18:06 - 000000000 ____D C:\Users\johnb\AppData\Local\mbamtray
2020-02-16 18:06 - 2020-02-16 18:06 - 000000000 ____D C:\Users\johnb\AppData\Local\mbam
2020-02-16 18:06 - 2020-02-16 18:06 - 000000000 ____D C:\Users\johnb\AppData\Local\cache
2020-02-16 18:05 - 2020-02-16 18:05 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-02-16 18:05 - 2020-02-16 18:05 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-02-16 18:04 - 2020-02-16 18:04 - 001924728 _____ (Malwarebytes) C:\Users\johnb\Downloads\MBSetup.exe
2020-02-16 18:04 - 2020-02-16 18:04 - 000000000 ____D C:\Program Files\Malwarebytes
2020-02-15 13:05 - 2020-02-15 13:05 - 000000000 ____D C:\Users\johnb\AppData\Roaming\GameSparks
2020-02-15 10:17 - 2020-02-15 10:17 - 000000222 _____ C:\Users\johnb\Desktop\Wolcen Lords of Mayhem.url
2020-02-14 17:32 - 2020-02-20 10:35 - 000000000 ____D C:\Program Files (x86)\Steam
2020-02-14 17:32 - 2020-02-14 17:32 - 001669632 _____ C:\Users\johnb\Downloads\SteamInstall.msi
2020-02-14 17:32 - 2020-02-14 17:32 - 000000988 _____ C:\Users\Public\Desktop\Steam.lnk
2020-02-14 17:32 - 2020-02-14 17:32 - 000000988 _____ C:\ProgramData\Desktop\Steam.lnk
2020-02-14 17:32 - 2020-02-14 17:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-02-14 10:59 - 2020-02-14 10:59 - 000552848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys
2020-02-14 10:59 - 2020-02-14 10:59 - 000002090 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2020-02-14 10:59 - 2019-10-03 14:21 - 000355720 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2020-02-13 04:06 - 2020-02-13 04:06 - 000000000 ____D C:\ProgramData\ssh
2020-02-13 04:06 - 2020-02-13 04:06 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-02-13 02:20 - 2020-02-13 02:20 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayR eady.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayR eady.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-02-13 02:20 - 2020-02-13 02:20 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-02-13 02:20 - 2020-02-13 02:20 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.oneco re.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-02-13 02:20 - 2020-02-13 02:20 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.deskt op.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-02-13 02:20 - 2020-02-13 02:20 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-02-13 02:20 - 2020-02-13 02:20 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-02-13 02:20 - 2020-02-13 02:20 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense. dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows. dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications .dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-02-13 02:20 - 2020-02-13 02:20 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-02-13 02:20 - 2020-02-13 02:20 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Conve rsationalAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-02-13 02:20 - 2020-02-13 02:20 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.d ll
2020-02-13 02:20 - 2020-02-13 02:20 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy .dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.d ll
2020-02-13 02:20 - 2020-02-13 02:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAcc ess.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-02-13 02:20 - 2020-02-13 02:20 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP .dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-02-13 02:20 - 2020-02-13 02:20 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionA lias.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApp s.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dl l
2020-02-13 02:20 - 2020-02-13 02:20 - 000059221 _____ C:\WINDOWS\system32\srms.dat
2020-02-13 02:20 - 2020-02-13 02:20 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dl l
2020-02-13 02:20 - 2020-02-13 02:20 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-02-13 02:16 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-02-13 02:16 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-10 17:20 - 2020-02-10 17:20 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_ 11_00.Wdf
2020-02-10 17:20 - 2020-02-10 17:20 - 000000000 ____D C:\Users\johnb\AppData\Roaming\CANON INC
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\Users\johnb\AppData\Roaming\canon
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\ProgramData\Canon_Inc_IC
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\Program Files (x86)\Canon
2020-02-07 14:21 - 2020-02-07 14:22 - 040044345 _____ C:\Users\johnb\Downloads\cdw-inst-8-10-4a-24-r2-u01-9l.zip
2020-02-01 13:32 - 2020-02-01 13:32 - 000000000 ____D C:\Users\johnb\AppData\Local\NVIDIA
2020-01-29 12:00 - 2020-01-29 12:00 - 005192280 _____ (Husdawg, LLC) C:\Users\johnb\Downloads\Detection.exe
2020-01-27 14:19 - 2020-01-27 14:19 - 000000000 ____D C:\Program Files (x86)\DummyDir
2020-01-22 23:01 - 2020-01-23 11:52 - 1468520317 _____ C:\Users\johnb\Downloads\Brecha-2009.rar
2020-01-22 02:20 - 2019-12-11 02:19 - 001073864 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 001073864 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000931528 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000931528 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000848584 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000848584 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000706248 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000706248 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000450392 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000352512 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-01-22 02:20 - 2019-12-11 02:18 - 011839856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2020-01-22 02:20 - 2019-12-11 02:18 - 010164936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 002074504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001568688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001483640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001370032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001144064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001065392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001000792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000824712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000812800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000686592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000677072 _____ C:\WINDOWS\system32\nvofapi64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000658680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000573360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2020-01-22 02:20 - 2019-12-11 02:17 - 000558080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000545112 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000055632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 040510848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 035379448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 017461248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 015028568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 005380296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 004716376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 000857856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2020-01-22 02:20 - 2019-12-11 02:16 - 000453120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2020-01-22 02:20 - 2019-12-11 02:15 - 004205776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2020-01-22 02:20 - 2019-12-11 01:59 - 000075819 _____ C:\WINDOWS\system32\nvinfo.pb

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-21 11:26 - 2019-05-11 09:56 - 000002375 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-02-21 11:25 - 2019-05-11 10:18 - 000000000 ____D C:\Users\johnb\AppData\Local\Google
2020-02-21 11:21 - 2019-12-23 02:54 - 000000000 _D C:\WINDOWS\system32\SleepStudy
2020-02-21 11:21 - 2019-03-19 05:52 - 000000000 D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-21 10:51 - 2019-03-27 05:24 - 000000000 D C:\Program Files (x86)\Dell Digital Delivery Services
2020-02-21 10:47 - 2019-12-23 02:59 - 000003512 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1557493179
2020-02-21 10:47 - 2019-12-23 02:59 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineU A
2020-02-21 10:47 - 2019-12-23 02:59 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLog on{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000003180 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2020-02-21 10:47 - 2019-12-23 02:59 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000003124 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineC ore
2020-02-21 10:47 - 2019-12-23 02:59 - 000003016 _____ C:\WINDOWS\system32\Tasks\NvTmRepCR3{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000003016 _____ C:\WINDOWS\system32\Tasks\NvTmRepCR2{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000003016 _____ C:\WINDOWS\system32\Tasks\NvTmRepCR1{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-02-21 10:47 - 2019-12-23 02:59 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000002956 _____ C:\WINDOWS\system32\Tasks\NvTmRep{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1677839296-4017878107-255514410-1001
2020-02-21 10:47 - 2019-12-23 02:59 - 000002852 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1677839296-4017878107-255514410-500
2020-02-21 10:47 - 2019-12-23 02:59 - 000002838 _____ C:\WINDOWS\system32\Tasks\NvTmMon{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-21 10:47 - 2019-12-23 02:59 - 000002236 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-02-21 10:43 - 2019-12-23 02:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-02-21 10:43 - 2019-05-10 17:01 - 000000000 ____D C:\Users\johnb\AppData\Local\Battle.net
2020-02-21 09:55 - 2019-05-10 13:59 - 000001401 _____ C:\Users\johnb\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Opera Browser.lnk
2020-02-20 12:57 - 2019-03-27 05:24 - 000000000 ____D C:\ProgramData\NVIDIA
2020-02-20 10:40 - 2019-12-23 03:01 - 000797848 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-02-20 10:40 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF
2020-02-20 10:37 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-02-20 10:36 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\Registration
2020-02-20 10:34 - 2019-12-23 02:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-02-20 10:34 - 2019-10-21 08:26 - 000020382 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_ backup1
2020-02-20 10:34 - 2019-10-21 08:26 - 000009123 _____ C:\ProgramData\DisplaySessionContainer1.log_backup 1
2020-02-20 10:34 - 2019-10-21 08:26 - 000008560 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_back up1
2020-02-20 10:34 - 2019-05-10 13:48 - 000000000 __SHD C:\Users\johnb\IntelGraphicsProfiles
2020-02-20 10:34 - 2019-03-19 05:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-02-20 10:33 - 2020-01-15 02:25 - 000001205 _____ C:\ProgramData\NvcDispCorePlugin.log_backup1
2020-02-20 02:04 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-19 20:28 - 2019-05-10 17:04 - 000000000 ____D C:\Program Files (x86)\Diablo III
2020-02-19 09:59 - 2019-06-02 12:59 - 000000000 ____D C:\Users\johnb\AppData\Local\D3DSCache
2020-02-18 16:36 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-02-18 16:36 - 2019-03-19 05:37 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2020-02-18 16:34 - 2019-05-10 13:48 - 000000000 ____D C:\Users\johnb\AppData\Local\Packages
2020-02-17 16:09 - 2019-10-15 09:55 - 000000000 ____D C:\Program Files (x86)\Diablo III Public Test
2020-02-15 10:17 - 2019-05-10 14:54 - 000000000 ____D C:\Users\johnb\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Steam
2020-02-15 04:13 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-02-15 04:13 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-14 17:32 - 2019-12-23 02:55 - 000000000 ____D C:\Users\johnb
2020-02-14 10:59 - 2019-12-23 02:59 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-02-13 04:07 - 2019-12-23 02:54 - 000438640 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-02-13 04:07 - 2019-05-10 13:48 - 000000000 ___RD C:\Users\johnb\3D Objects
2020-02-13 04:07 - 2019-03-17 08:13 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-02-13 04:06 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\servicing
2020-02-13 02:23 - 2019-05-10 16:44 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-02-13 02:22 - 2019-05-10 16:44 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-02-08 19:34 - 2019-12-23 02:55 - 000002365 _____ C:\Users\johnb\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\OneDrive.lnk
2020-02-08 19:34 - 2019-05-10 13:49 - 000000000 ___RD C:\Users\johnb\OneDrive
2020-02-07 22:28 - 2019-05-10 16:59 - 000000000 ____D C:\Program Files (x86)\Battle.net
2020-02-04 20:57 - 2019-05-10 18:27 - 000000000 ____D C:\Users\johnb\Documents\Diablo III
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-01 15:41 - 2020-01-08 13:12 - 000030649 _____ C:\Users\johnb\Documents\cash20.ods
2020-02-01 14:36 - 2019-10-31 17:36 - 000064227 _____ C:\ProgramData\DisplaySessionContainer2.log_backup 1
2020-01-26 11:55 - 2019-06-07 17:01 - 000022590 _____ C:\Users\johnb\Documents\newfamily.ods

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)
[HEADING=1]==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-02-2020
Ran by johnb (21-02-2020 11:29:32)
Running from C:\Users\johnb\Desktop
Windows 10 Home Version 1909 18363.657 (X64) (2019-12-23 02:00:01)
Boot Mode: Normal[/HEADING]
==================== Accounts: =============================

Administrator (S-1-5-21-1677839296-4017878107-255514410-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1677839296-4017878107-255514410-503 - Limited - Disabled)
Guest (S-1-5-21-1677839296-4017878107-255514410-501 - Limited - Disabled)
johnb (S-1-5-21-1677839296-4017878107-255514410-1001 - Administrator - Enabled) => C:\Users\johnb
WDAGUtilityAccount (S-1-5-21-1677839296-4017878107-255514410-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {4DE344F8-6897-65B4-CED0-82B3AF2591B4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}

==================== Installed Programs ======================

(Only the adware programs with “Hidden” flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast Premium Security (HKLM-x32...\Avast Antivirus) (Version: 19.8.2393 - AVAST Software)
Battle.net (HKLM-x32...\Battle.net) (Version: - Blizzard Entertainment)
Canon Utilities CameraWindow DC 8 (HKLM-x32...\CameraWindowDC) (Version: 8.10.4.24 - Canon Inc.)
CCleaner (HKLM...\CCleaner) (Version: 5.62 - Piriform)
Dell Digital Delivery Services (HKLM-x32...{2F67D318-DCDC-4D94-9048-37789F3C065B}) (Version: 4.0.51.0 - Dell Inc.)
Dell Mobile Connect Drivers (HKLM...{04DF02C6-E3D7-4D26-A44C-6F8A2E218D2C}) (Version: 1.3.6844 - Screenovate Technologies Ltd.)
Dell SupportAssist Remediation (HKLM...{03C35F56-A9AD-4B59-B061-B8CE41C4C22B}) (Version: 4.1.0.6830 - Dell Inc.) Hidden
Dell SupportAssist Remediation (HKLM-x32...{f4ee83d8-d901-4c1a-b5a2-288427598fe2}) (Version: 4.1.0.6830 - Dell Inc.)
Dell Update - SupportAssist Update Plugin (HKLM...{9BEF4D9A-592C-4073-B202-30234347B3DA}) (Version: 4.1.0.6830 - Dell Inc.) Hidden
Dell Update - SupportAssist Update Plugin (HKLM-x32...{286db51f-336c-4d5e-b1e2-3fbc3becd693}) (Version: 4.1.0.6830 - Dell Inc.)
Dell Update for Windows 10 (HKLM...{70E9F8CC-A23E-4C25-B292-C86C1821587C}) (Version: 3.1.0 - Dell, Inc.)
Diablo III (HKLM-x32...\Diablo III) (Version: - Blizzard Entertainment)
Diablo III Public Test (HKLM-x32...\Diablo III Public Test) (Version: - Blizzard Entertainment)
Google Chrome (HKLM-x32...\Google Chrome) (Version: 80.0.3987.116 - Google LLC)
Google Update Helper (HKLM-x32...{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
Honeyview (HKLM...\Honeyview) (Version: 5.31 - Bandisoft.com)
Intel(R) Chipset Device Software (HKLM-x32...{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM...{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32...{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7263 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM...{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.7.9.1027 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32...{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32...{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel® Optane™ Pinning Explorer Extensions (HKLM...{95ED8AFD-8AB7-477D-8AC4-ACADAE167ADF}) (Version: 16.7.9.1027 - Intel Corporation)
Killer Ethernet Performance Driver Suite UWD (HKLM...{29348809-E240-49DF-A095-9987141548F0}) (Version: 1.7.1042 - Rivet Networks)
LibreOffice 6.1.6.3 (HKLM...{FDD378C0-438D-4E89-A692-6D010D5AF9D0}) (Version: 6.1.6.3 - The Document Foundation)
Malwarebytes version 4.0.4.49 (HKLM...{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
Maxx Audio Installer (x64) (HKLM...{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9266.0 - Waves Audio Ltd.) Hidden
Microsoft OneDrive (HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\OneDriveSetup.exe) (Version: 19.232.1124.0005 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM...{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32...{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32...{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32...{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32...{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32...{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32...{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
NVIDIA GeForce Experience 3.14.0.139 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.0.139 - NVIDIA Corporation)
NVIDIA Graphics Driver 441.12 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 441.12 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Opera Stable 66.0.3515.103 (HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\Opera 66.0.3515.103) (Version: 66.0.3515.103 - Opera Software)
Qualcomm 11ac Wireless LAN&Bluetooth Installer (HKLM-x32...{E7086B15-806E-4519-A876-DBA9FDDE9A13}) (Version: 11.0.0.10483 - Qualcomm)
Realtek High Definition Audio Driver (HKLM-x32...{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8248 - Realtek Semiconductor Corp.)
Speccy (HKLM...\Speccy) (Version: 1.32 - Piriform)
Steam (HKLM-x32...{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Windows 7 Games for Windows 10 and 8 (HKLM...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
[HEADING=1]Packages:[/HEADING]
Bubble Witch 3 Saga → C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.5.9. 0_x86__kgqvnymyfvs32 [2020-02-10] (king.com)
Candy Crush Friends → C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.30. 3.0_x86__kgqvnymyfvs32 [2020-02-08] (king.com)
Candy Crush Saga → C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1700.2 .0_x86__kgqvnymyfvs32 [2020-02-13] (king.com)
Dell Customer Connect → C:\Program Files\WindowsApps\DellInc.DellCustomerConnect_5.2. 21.0_x64__htrsf667h5kn2 [2020-01-10] (Dell Inc)
Dell Digital Delivery → C:\Program Files\WindowsApps\DellInc.DellDigitalDelivery_4.0. 51.0_x64__htrsf667h5kn2 [2020-01-27] (Dell Inc)
Dell Mobile Connect → C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobi leConnect_2.0.8168.0_x64__0vhbc3ng4wbp0 [2019-05-10] (Screenovate Technologies) [Startup Task]
Dell Update → C:\Program Files\WindowsApps\DellInc.DellUpdate_3.1.54.0_x64_ _htrsf667h5kn2 [2019-12-19] (Dell Inc)
Dropbox promotion → C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64 __xbfy0k16fey96 [2020-01-16] (Dropbox Inc.)
HP Smart → C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_110.1. 671.0_x64__v10z8vjag6ke6 [2020-02-06] (HP Inc.)
Killer Control Center → C:\Program Files\WindowsApps\RivetNetworks.KillerControlCente r_1.6.2148.0_x64__rh07ty8m5nkag [2019-05-10] (Rivet Networks LLC)
LinkedIn → C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1. 7098.0_neutral__w1wdnht996qgy [2019-05-10] (LinkedIn)
Media Suite Essentials for Dell → C:\Program Files\WindowsApps\DB6EA5DB.MediaSuiteEssentialsfor Dell_2.4.2725.0_x86__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.)
Microsoft Access → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_ 16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.18 11.1.0_x64__8wekyb3d8bbwe [2019-05-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.18 11.1.0_x86__8wekyb3d8bbwe [2019-05-10] (Microsoft Corporation) [MS Ad]
Microsoft Excel → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_1 6051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft News → C:\Program Files\WindowsApps\Microsoft.BingNews_4.35.20273.0_ x64__8wekyb3d8bbwe [2020-02-06] (Microsoft Corporation) [MS Ad]
Microsoft Office Desktop Apps → C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.1 2430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Outlook → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook _16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft PowerPoint → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPo int_16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Publisher → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publish er_16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Remote Desktop → C:\Program Files\WindowsApps\Microsoft.RemoteDesktop_10.1.114 9.0_x86__8wekyb3d8bbwe [2020-02-15] (Microsoft Corporation)
Microsoft Solitaire Collection → C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireColl ection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-11] (Microsoft Studios) [MS Ad]
Microsoft Word → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16 051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
MPEG-2 Video Extension → C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1. 0.22661.0_x64__8wekyb3d8bbwe [2019-09-24] (Microsoft Corporation)
MSN Weather → C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393 .0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Corporation) [MS Ad]
My Dell → C:\Program Files\WindowsApps\DellInc.MyDell_1.2.46.0_x64__htr sf667h5kn2 [2019-12-19] (Dell Inc)
Netflix → C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.95.602.0_x64_ _mcm4njqhnhss8 [2019-10-25] (Netflix, Inc.)
NVIDIA Control Panel → C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8. 1.956.0_x64__56jybvy8sckqj [2019-09-30] (NVIDIA Corp.)
Photos Add-on → C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Mai n_2017.39121.36610.0_x64__8wekyb3d8bbwe [2019-07-09] (Microsoft Corporation)
Power Media Player for Dell → C:\Program Files\WindowsApps\DB6EA5DB.PowerMediaPlayerforDell _14.1.9506.0_x86__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.)
Power2Go for Dell → C:\Program Files\WindowsApps\DB6EA5DB.Power2GoforDell_8.0.890 8.0_x86__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.) [Startup Task]
PowerDirector for Dell → C:\Program Files\WindowsApps\DB6EA5DB.PowerDirectorforDell_15 .0.4409.0_x64__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.)
Spotify Music → C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.126.501 .0_x86__zpdnekdrzrea0 [2020-02-19] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1677839296-4017878107-255514410-1001_Classes\CLSID{9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF}\InprocServer32 → C:\Program Files\Honeyview\HVShell64.dll (Bandisoft → Bandisoft.com)
CustomCLSID: HKU\S-1-5-21-1677839296-4017878107-255514410-1001_Classes\CLSID{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 → C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc → Waves Audio Ltd)
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] → {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.d ll [2018-10-15] () [File not signed]
ShellIconOverlayIdentifiers: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers1: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)
ContextMenuHandlers1: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers3: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] → {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-16] (Malwarebytes Corporation → Malwarebytes)
ContextMenuHandlers3: [OptaneContextMenu] → {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.d ll [2018-10-15] () [File not signed]
ContextMenuHandlers4: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)
ContextMenuHandlers5: [igfxDTCM] → {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\igfxDTCM.dll [2019-10-16] (Microsoft Windows Hardware Compatibility Publisher → Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] → {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\nvshext.dll [2019-12-11] (NVIDIA Corporation → NVIDIA Corporation)
ContextMenuHandlers6: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] → {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-16] (Malwarebytes Corporation → Malwarebytes)
ContextMenuHandlers1_S-1-5-21-1677839296-4017878107-255514410-1001: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)
ContextMenuHandlers4_S-1-5-21-1677839296-4017878107-255514410-1001: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2020-01-24 17:38 - 2020-01-24 17:38 - 000019456 _____ () [File not signed] C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.HSA.Server.dll
2018-10-15 17:52 - 2018-10-15 17:52 - 000126976 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\OptaneShellExtensions\iaStorAfsService Api.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The “AlternateShell” will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\MBAMService => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\MBAMService => “”=“Service”

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 08:31 - 2020-02-20 10:33 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\Path → C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS;C:\Windows\system32;C:\Windows;C:\ Windows\System32\Wbem;C:\Windows\System32\WindowsP owerShell\v1.0;C:\Windows\System32\OpenSSH;C:\Prog ram Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%Sy stemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\ System32\WindowsPowerShell\v1.0;%SYSTEMROOT%\Syste m32\OpenSSH
HKU\S-1-5-21-1677839296-4017878107-255514410-1001\Control Panel\Desktop\Wallpaper → c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Pol icies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{1F9F9553-9D00-4D0C-9C25-F5DAEE0A55B8}C:\program files (x86)\diablo iii\diablo iii.exe] => (Block) C:\program files (x86)\diablo iii\diablo iii.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [TCP Query User{FF56D12A-E51B-43D9-A980-721C2F85287F}C:\program files (x86)\diablo iii\diablo iii.exe] => (Block) C:\program files (x86)\diablo iii\diablo iii.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [{59FE6F7B-A821-4DF9-8268-7EE520D3BD1B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve → Valve Corporation)
FirewallRules: [{DAFABEAC-8330-47EE-B29F-D9EE53B0A31E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve → Valve Corporation)
FirewallRules: [UDP Query User{FAB0F80E-A68D-4974-B785-A0D0921C9241}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [TCP Query User{FC73CBEE-EF3B-4D6F-A59B-9868249DBB90}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [{16BBC63C-0CE6-4817-A479-2606AE46E52B}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobi leConnect_2.0.8168.0_x64__0vhbc3ng4wbp0\app\DellMo bileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.) [File not signed]
FirewallRules: [{F591C0D0-73D1-4270-90A4-DB4CED5B3576}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobi leConnect_2.0.8168.0_x64__0vhbc3ng4wbp0\app\DellMo bileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.) [File not signed]
FirewallRules: [{5D4B98D6-D9A0-4BED-A5C6-F420C0568A15}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{4B116BA2-2F8B-4848-8757-18F730848910}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{2F0E8491-A09A-44BF-B390-50AF55616296}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{B7449BCD-5E12-433A-A72A-55D58B162F35}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{523358B8-6B27-43D5-BD76-40763D0E58B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{B3E5E6EA-1C17-4938-AC03-34727079AEE7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{5F571963-DEE7-4F59-8257-7FCD6EA57435}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{FC097D9B-FB1C-4688-BA95-9D237D84FF73}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{AE3EB668-3C2B-4FBA-8E07-4CB26A3D403A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{72CC28B1-3F14-4D82-BE21-818B6A49F84D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{169B123B-70B9-4C2D-917A-D648C028D0D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolcen\win_x64\Wolcen .exe (Wolcen Studio) [File not signed]
FirewallRules: [{AD4484F9-70B3-4B94-8709-9D1647C1164A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolcen\win_x64\Wolcen .exe (Wolcen Studio) [File not signed]
FirewallRules: [{29E85FBF-3DDD-4836-A14B-452062C432F1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook _16051.12430.20264.0_x86__8wekyb3d8bbwe\Office16\O UTLOOK.exe (Microsoft Corporation → Microsoft Corporation)
FirewallRules: [{4707A82C-9763-43E0-B388-0A803109F20F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.126.501 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{40A47295-B47F-4C90-9EAF-5D2F7F596A8B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.126.501 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{5AA7E9D2-339B-4E02-8A41-F111B8EEACC4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.126.501 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{02DB38A1-AE62-408F-809D-AC0E2A84A937}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.126.501 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{5B3C8127-C617-4323-BD52-4D3BE28D73F7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.126.501 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{1F36063F-EFAC-459E-B7AD-5EA835A8036B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.126.501 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{8B528B68-5AFB-4B1F-8E16-85944BF4E082}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.126.501 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{4EE50FAF-43CD-4FBA-9B2E-E79AF8843151}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.126.501 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{0AA0E167-14E9-4131-A31A-39475B795BA9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC → Google LLC)

==================== Restore Points =========================

07-02-2020 22:37:25 Scheduled Checkpoint
13-02-2020 02:15:55 Windows Update
14-02-2020 17:32:40 Installed Steam

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================
[HEADING=1]Application errors:[/HEADING]
Error: (02/21/2020 11:26:49 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11516,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/21/2020 11:03:11 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11176,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/21/2020 10:52:50 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (8532,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/21/2020 10:08:24 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4140,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/20/2020 10:50:42 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11828,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/20/2020 10:42:47 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7400,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/20/2020 10:33:13 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW. hr = 0x8007001f, A device attached to the system is not functioning.
.

Operation:
Executing Asynchronous Operation

Context:
Current State: DoSnapshotSet

Error: (02/20/2020 10:33:06 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {80587548-80e9-4080-b22b-0f2a425f6d0d}
[HEADING=1]System errors:[/HEADING]
Error: (02/20/2020 10:33:13 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Dell Client Management Service service terminated unexpectedly. It has done this 1 time(s).

Error: (02/20/2020 10:33:13 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Dell SupportAssist Remediation service terminated unexpectedly. It has done this 1 time(s).

Error: (02/20/2020 10:33:13 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel(R) Management and Security Application Local Management Service service terminated unexpectedly. It has done this 1 time(s).

Error: (02/20/2020 10:33:13 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s).

Error: (02/20/2020 10:33:13 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Dell Digital Delivery Services service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (02/20/2020 10:33:13 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel(R) Capability Licensing Service TCP IP Interface service terminated unexpectedly. It has done this 1 time(s).

Error: (02/20/2020 10:33:13 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel(R) Dynamic Application Loader Host Interface Service service terminated unexpectedly. It has done this 1 time(s).

Error: (02/20/2020 10:33:13 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Intel® SGX AESM service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
[HEADING=1]CodeIntegrity:[/HEADING]
Date: 2020-02-21 11:27:38.716
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-21 11:27:38.714
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-21 11:27:38.711
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-21 11:27:38.709
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-21 11:26:55.497
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-21 11:26:55.495
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-21 11:26:35.571
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-21 11:26:35.569
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: Dell Inc. 1.1.3 11/02/2018
Motherboard: Dell Inc. 0H0P0M
Processor: Intel(R) Core™ i7-8700 CPU @ 3.20GHz
Percentage of memory in use: 36%
Total physical RAM: 16187.28 MB
Available physical RAM: 10239.58 MB
Total Virtual: 18619.28 MB
Available Virtual: 11104.7 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:219.56 GB) (Free:102.5 GB) NTFS
Drive d: (DATA) (Fixed) (Total:1862.89 GB) (Free:1860.4 GB) NTFS
Drive g: () (Removable) (Total:7.48 GB) (Free:6.68 GB) FAT32

\?\Volume{15053041-274d-4c07-92f3-fe27a5708f38}\ (WINRETOOLS) (Fixed) (Total:0.97 GB) (Free:0.53 GB) NTFS
\?\Volume{ed7e443f-2fe5-4367-b81e-987b013811a5}\ (Image) (Fixed) (Total:16.01 GB) (Free:0.13 GB) NTFS
\?\Volume{e5034f44-c6cb-4e90-9978-dcc7fe089dd1}\ (DELLSUPPORT) (Fixed) (Total:1.16 GB) (Free:0.48 GB) NTFS
\?\Volume{803bf31e-8418-4367-8162-8f46e2f42bca}\ (ESP) (Fixed) (Total:0.63 GB) (Free:0.57 GB) FAT32

==================== MBR & Partition Table ====================

================================================== ========
Disk: 0 (Size: 1863 GB) (Disk ID: DB53DC21)

Partition: GPT.

================================================== ========
Disk: 1 (Size: 238.5 GB) (Disk ID: DB53DC18)

Partition: GPT.

================================================== ========
Disk: 3 (Size: 7.5 GB) (Disk ID: 8EAB9A2A)
Partition 1: (Not Active) - (Size=7.5 GB) - (Type=0B)

==================== End of Addition.txt =======================

Thanks for spending your time on this.

[jmarket]

Hello sorcerer

I downloaded Chrome (I use Opera) and there was nothing McAfee related.

According to your logs Chrome was already installed??

Let me go through your logs again.

[sorcerer]

I couldn’t find it…probably just me.

[jmarket]

Your logs look ok, will move this thread back.

@Rustys

[sorcerer]

Ok, good, thanks very much for your help.

Since I know my system is clean, and I’ve already got my email back, I’ll try and recover my Steam accounts using their recovery system, and report back.

[Rustys]

Thank you @gus

Since I know my system is clean, and I’ve already got my email back, I’ll try and recover my Steam accounts using their recovery system, and report back.

Glad to hear the system is clean and you have gotten the email back. Let us know how things go with the Steam accounts. You may have to get with their support as far as the accounts and games are concerned.

[veeg]

Any updates?

[sorcerer]

Yeah, I started the process but I didn’t get their email, I thought there was a problem so I left it, and then it arrived like 15 mins later after I’d got out of the process. I’m going to try again next weeK. I want to do it when the Orange helpline is up - this is France so they’re not 24/7 - in case the email login screws up again.

I’m open to any advice people may have about the Steam account recovery system, such as it is.

Btw, I made a donation, I hope you got it.

[Rustys]

@sorcerer do you have any news for us?

[sorcerer]

Not atm. If you want, you can close this thread and I’ll start another in case of further problems.