"HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms" "" "" "" "3/22/2020 4:19 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AppSetup" "" "" "" "5/30/2020 10:21 PM" ""
"HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Startup" "" "" "" "" ""
"HKCU\Software\Policies\Microsoft\Windows\System\Scripts\Logon" "" "" "" "" ""
"HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Logon" "" "" "" "" ""
"HKCU\Environment\UserInitMprLogonScript" "" "" "" "5/20/2020 3:08 PM" ""
"HKLM\Environment\UserInitMprLogonScript" "" "" "" "" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" "" "" "" "5/30/2020 10:21 PM" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\VmApplet" "" "" "" "5/30/2020 10:21 PM" ""
"HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Shutdown" "" "" "" "" ""
"HKCU\Software\Policies\Microsoft\Windows\System\Scripts\Logoff" "" "" "" "" ""
"HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Logoff" "" "" "" "" ""
"HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Startup" "" "" "" "" ""
"HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Startup" "" "" "" "" ""
"HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Logon" "" "" "" "" ""
"HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Logon" "" "" "" "" ""
"HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Logoff" "" "" "" "" ""
"HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Logoff" "" "" "" "" ""
"HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Shutdown" "" "" "" "" ""
"HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Shutdown" "" "" "" "" ""
"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell" "" "" "" "3/22/2020 4:16 AM" ""
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" "" "" "" "5/31/2020 1:25 PM" ""
"HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell" "" "" "" "3/22/2020 8:07 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" "" "" "" "5/30/2020 10:21 PM" ""
"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\AlternateShell" "" "" "" "3/22/2020 4:11 AM" ""
+ "cmd.exe" "Windows Command Processor" "(Verified) Microsoft Windows" "c:\windows\system32\cmd.exe" "12/28/1914 2:19 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman" "" "" "" "5/30/2020 10:21 PM" ""
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells\AvailableShells" "" "" "" "3/19/2019 12:53 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Runonce" "" "" "" "" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\RunonceEx" "" "" "" "" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run" "" "" "" "" ""
"HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\InitialProgram" "" "" "" "3/22/2020 4:19 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" "" "5/30/2020 10:21 PM" ""
+ "AdobeAAMUpdater-1.0" "Adobe Updater Startup Utility" "(Verified) Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\oobe\pdapp\uwa\updaterstartuputility.exe" "5/17/2015 10:36 AM" ""
+ "AdobeGCInvoker-1.0" "Adobe GC Invoker Utility" "(Verified) Adobe Inc." "c:\program files (x86)\common files\adobe\adobegcclient\agcinvokerutility.exe" "3/4/2020 8:03 AM" ""
+ "IAStorIcon" "Delayed launcher" "(Not verified) Intel Corporation" "c:\program files\intel\intel(r) rapid storage technology\iastoriconlaunch.exe" "2/6/2013 6:13 PM" ""
+ "Launch LCore" "Logitech Gaming Framework" "(Verified) Logitech" "c:\program files\logitech gaming software\lcore.exe" "10/14/2014 2:31 PM" ""
+ "Logitech Download Assistant" "Logitech Download Assistant" "(Verified) Logitech" "c:\windows\system32\logilda.dll" "9/13/2012 6:51 PM" ""
+ "RtHDVBg" "HD Audio Background Process" "(Verified) Realtek Semiconductor Corp" "c:\program files\realtek\audio\hda\ravbg64.exe" "4/28/2015 3:44 AM" ""
+ "RTHDVCPL" "Realtek HD Audio Manager" "(Verified) Realtek Semiconductor Corp" "c:\program files\realtek\audio\hda\rtkngui64.exe" "6/23/2015 6:31 AM" ""
+ "Start WingMan Profiler" "Logitech WingMan Event Monitor" "(Verified) Logitech" "c:\program files\logitech\gaming software\lwemon.exe" "6/14/2010 7:03 PM" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" "" "" "" "5/30/2020 11:23 AM" ""
+ "Adobe ARM" "Adobe Reader and Acrobat Manager" "(Verified) Adobe Inc." "c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe" "2/25/2020 5:41 PM" ""
+ "APSDaemon" "Apple Push" "(Verified) Apple Inc." "c:\program files (x86)\common files\apple\apple application support\apsdaemon.exe" "8/8/2016 2:28 AM" ""
+ "Autodesk Desktop App" "Autodesk Desktop App" "(Verified) Autodesk, Inc." "c:\program files (x86)\autodesk\autodesk desktop app\autodeskdesktopapp.exe" "12/19/2017 1:58 AM" ""
+ "IndexSearch" "PaperPort IndexSearch" "(Verified) Nuance Communications, Inc." "c:\program files (x86)\nuance\paperport\indexsearch.exe" "8/2/2011 8:33 AM" ""
+ "PaperPort PTD" "PaperPort Print to Desktop for NT" "(Verified) Nuance Communications, Inc." "c:\program files (x86)\nuance\paperport\pptd40nt.exe" "8/2/2011 8:32 AM" ""
+ "PDF5 Registry Controller" "PDF Converter Registry Controller" "(Verified) Nuance Communications, Inc." "c:\program files (x86)\nuance\pdf viewer plus\registrycontroller.exe" "3/5/2010 1:56 PM" ""
+ "PDFHook" "PdfCreateHook Application" "(Verified) Nuance Communications, Inc." "c:\program files (x86)\nuance\pdf viewer plus\pdfpro5hook.exe" "3/5/2010 1:59 PM" ""
+ "SunJavaUpdateSched" "Java Update Scheduler" "(Verified) Oracle America, Inc." "c:\program files (x86)\common files\java\java update\jusched.exe" "3/12/2020 3:51 AM" ""
+ "Wondershare Helper Compact.exe" "Wondershare Studio" "(Not verified) Wondershare" "c:\program files (x86)\common files\wondershare\wondershare helper compact\wshelper.exe" "12/17/2013 11:43 PM" ""
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" "" "5/10/2020 1:30 PM" ""
+ "DAEMON Tools Lite Automount" "DAEMON Tools Lite" "(Verified) Disc Soft Ltd" "c:\program files\daemon tools lite\dtagent.exe" "11/30/2015 5:56 AM" ""
+ "Discord" "Discord" "(Verified) Discord Inc." "c:\users\geoffrey\appdata\local\discord\app-0.0.306\discord.exe" "2/6/2020 8:28 PM" ""
+ "ISUSPM" "Acresso Software Manager" "(Verified) Acresso Software Inc." "c:\programdata\flexnet\connect\11\isuspm.exe" "5/5/2009 5:05 PM" ""
+ "NordVPN" "NordVPN" "(Verified) TEFINCOM S.A." "c:\program files (x86)\nordvpn\nordvpn.exe" "4/21/2020 8:04 AM" ""
+ "Pushbullet" "Pushbullet" "(Not verified) Pushbullet inc" "c:\program files (x86)\pushbullet\pushbullet.exe" "7/1/2015 5:02 PM" ""
+ "Spotify" "Spotify" "(Verified) Spotify AB" "c:\users\geoffrey\appdata\roaming\spotify\spotify.exe" "5/12/2020 6:22 PM" ""
"HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" "" "" "" "" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx" "" "" "" "5/14/2020 6:33 PM" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx" "" "" "" "5/30/2020 10:21 PM" ""
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx" "" "" "" "5/10/2020 1:25 PM" ""
"HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx" "" "" "" "" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" "" "" "" "5/10/2020 1:30 PM" ""
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" "" "" "" "5/22/2020 2:57 PM" ""
"HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" "" "" "" "" ""
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup" "" "" "" "3/19/2019 12:52 AM" ""
"%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup" "" "" "" "" ""
"C:\Users\Geoffrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup" "" "" "" "5/14/2020 6:34 PM" ""
"HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load" "" "" "" "3/22/2020 4:21 AM" ""
"HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run" "" "" "" "3/22/2020 4:21 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" "" "" "" "3/22/2020 8:07 AM" ""
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" "" "" "" "3/22/2020 10:41 AM" ""
+ "Google Chrome" "Google Chrome Installer" "(Verified) Google LLC" "c:\program files (x86)\google\chrome\application\83.0.4103.61\installer\chrmstp.exe" "5/15/2020 8:06 PM" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components" "" "" "" "3/22/2020 10:41 AM" ""
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\IconServiceLib" "" "" "" "5/14/2020 6:33 PM" ""
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Runonce" "" "" "" "" ""
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\RunonceEx" "" "" "" "" ""
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run" "" "" "" "" ""
"HKLM\SOFTWARE\Microsoft\Windows CE Services\AutoStartOnConnect" "" "" "" "" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services\AutoStartOnConnect" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows CE Services\AutoStartOnDisconnect" "" "" "" "" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services\AutoStartOnDisconnect" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\SOFTWARE\Classes\Protocols\Filter" "" "" "" "" ""
"HKLM\SOFTWARE\Classes\Protocols\Filter" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\SOFTWARE\Classes\Protocols\Handler" "" "" "" "" ""
"HKLM\SOFTWARE\Classes\Protocols\Handler" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components" "" "" "" "3/22/2020 4:18 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler" "" "" "" "5/4/2020 8:07 PM" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler" "" "" "" "5/30/2020 10:21 PM" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects" "" "" "" "5/31/2020 1:34 PM" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad" "" "" "" "5/10/2020 1:25 PM" ""
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\*\ShellEx\ContextMenuHandlers" "" "" "" "5/20/2020 3:08 PM" ""
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers" "" "" "" "4/18/2020 7:11 PM" ""
+ "AcShellExtension.AcContextMenuHandler" "AutoCAD Dwg common shell extension handler" "(Verified) Autodesk, Inc" "c:\program files\common files\autodesk shared\acshellex\acshellextension.dll" "2/6/2016 10:36 PM" ""
+ "ANotepad++64" "ShellHandler for Notepad++ (64 bit)" "(Verified) Notepad++" "c:\program files (x86)\notepad++\nppshell_06.dll" "5/12/2014 5:49 AM" ""
+ "WinRAR" "WinRAR shell extension" "(Not verified) Alexander Roshal" "c:\program files (x86)\winrar\rarext64.dll" "6/9/2012 9:20 AM" ""
"HKLM\Software\Wow6432Node\Classes\*\ShellEx\ContextMenuHandlers" "" "" "" "4/18/2020 7:11 PM" ""
"HKCU\Software\Classes\Drive\ShellEx\ContextMenuHandlers" "" "" "" "" ""
"HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers" "" "" "" "4/18/2020 7:11 PM" ""
"HKLM\Software\Wow6432Node\Classes\Drive\ShellEx\ContextMenuHandlers" "" "" "" "4/18/2020 7:11 PM" ""
"HKCU\Software\Classes\*\ShellEx\PropertySheetHandlers" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\Software\Classes\*\ShellEx\PropertySheetHandlers" "" "" "" "5/12/2020 2:19 PM" ""
"HKLM\Software\Wow6432Node\Classes\*\ShellEx\PropertySheetHandlers" "" "" "" "5/12/2020 2:19 PM" ""
"HKCU\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" "" "" ""
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" "" "4/4/2020 7:04 PM" ""
+ "MBAMShlExt" "Malwarebytes" "(Verified) Malwarebytes Corporation" "c:\program files\malwarebytes\anti-malware\mbshlext.dll" "6/13/2019 6:48 PM" ""
"HKLM\Software\Wow6432Node\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" "" "4/4/2020 7:04 PM" ""
"HKCU\Software\Classes\AllFileSystemObjects\ShellEx\DragDropHandlers" "" "" "" "" ""
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\DragDropHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Classes\AllFileSystemObjects\ShellEx\DragDropHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\AllFileSystemObjects\ShellEx\PropertySheetHandlers" "" "" "" "" ""
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\PropertySheetHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Classes\AllFileSystemObjects\ShellEx\PropertySheetHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" "" "5/20/2020 3:08 PM" ""
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" "" "4/18/2020 7:11 PM" ""
"HKLM\Software\Wow6432Node\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" "" "4/18/2020 7:11 PM" ""
"HKCU\Software\Classes\Directory\Shellex\DragDropHandlers" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\Software\Classes\Directory\Shellex\DragDropHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Classes\Directory\Shellex\DragDropHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\Directory\Shellex\PropertySheetHandlers" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\Software\Classes\Directory\Shellex\PropertySheetHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Classes\Directory\Shellex\PropertySheetHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\Directory\Shellex\CopyHookHandlers" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\Software\Classes\Directory\Shellex\CopyHookHandlers" "" "" "" "3/22/2020 4:11 AM" ""
+ "Ath_CopyHook" "AthCopyHook Dynamic Link Library" "(Not verified) Atheros Commnucations" "c:\program files (x86)\dell wireless\bluetooth suite\athcopyhook.dll" "12/27/2012 9:24 AM" ""
"HKLM\Software\Wow6432Node\Classes\Directory\Shellex\CopyHookHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" "" "5/20/2020 3:08 PM" ""
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" "" "5/12/2020 2:19 PM" ""
+ "NvCplDesktopContext" "NVIDIA Display Shell Extension" "(Verified) NVIDIA Corporation" "c:\windows\system32\nvshext.dll" "12/6/2019 9:14 PM" ""
"HKLM\Software\Wow6432Node\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" "" "5/12/2020 2:19 PM" ""
"HKCU\Software\Classes\Folder\Shellex\ColumnHandlers" "" "" "" "" ""
"HKLM\Software\Classes\Folder\Shellex\ColumnHandlers" "" "" "" "3/22/2020 4:11 AM" ""
+ "AcColumnHandler" "AutoCAD Dwg common shell extension handler" "(Verified) Autodesk, Inc" "c:\program files\common files\autodesk shared\acshellex\acshellextension.dll" "2/6/2016 10:36 PM" ""
"HKLM\Software\Wow6432Node\Classes\Folder\Shellex\ColumnHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" "" "" ""
"HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" "" "4/4/2020 7:04 PM" ""
+ "MBAMShlExt" "Malwarebytes" "(Verified) Malwarebytes Corporation" "c:\program files\malwarebytes\anti-malware\mbshlext.dll" "6/13/2019 6:48 PM" ""
+ "WinRAR" "WinRAR shell extension" "(Not Verified) Alexander Roshal" "c:\program files (x86)\winrar\rarext64.dll" "6/9/2012 9:20 AM" ""
"HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" "" "4/4/2020 7:04 PM" ""
"HKCU\Software\Classes\Folder\ShellEx\DragDropHandlers" "" "" "" "" ""
"HKLM\Software\Classes\Folder\ShellEx\DragDropHandlers" "" "" "" "3/22/2020 4:11 AM" ""
+ "WinRAR" "WinRAR shell extension" "(Not Verified) Alexander Roshal" "c:\program files (x86)\winrar\rarext64.dll" "6/9/2012 9:20 AM" ""
"HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\DragDropHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\Folder\ShellEx\ExtShellFolderViews" "" "" "" "" ""
"HKLM\Software\Classes\Folder\ShellEx\ExtShellFolderViews" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\ExtShellFolderViews" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\Folder\ShellEx\PropertySheetHandlers" "" "" "" "" ""
"HKLM\Software\Classes\Folder\ShellEx\PropertySheetHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\PropertySheetHandlers" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers" "" "" "" "5/31/2020 1:34 PM" ""
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers" "" "" "" "3/22/2020 4:11 AM" ""
+ "AutoCAD Digital Signatures Icon Overlay Handler" "AutoCAD component" "(Verified) Autodesk, Inc" "c:\windows\system32\acsignicon.dll" "2/6/2016 11:58 PM" ""
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\Clsid\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\Inprocserver32" "" "" "" "5/20/2020 3:08 PM" ""
"HKCU\Software\Microsoft\Ctf\LangBarAddin" "" "" "" "3/22/2020 3:22 PM" ""
"HKLM\Software\Microsoft\Ctf\LangBarAddin" "" "" "" "3/22/2020 4:18 AM" ""
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" "" "5/30/2020 11:23 AM" ""
+ "CIESpeechBHO Class" "Bluetooth IE PlugIn" "(Not verified) Atheros Commnucations" "c:\program files (x86)\dell wireless\bluetooth suite\ieplugin.dll" "12/27/2012 9:20 AM" ""
+ "Java(tm) Plug-In 2 SSV Helper" "Java(TM) Platform SE binary" "(Verified) Oracle America, Inc." "c:\program files (x86)\java\jre1.8.0_251\bin\jp2ssv.dll" "3/12/2020 2:48 AM" ""
+ "Java(tm) Plug-In SSV Helper" "Java(TM) Platform SE binary" "(Verified) Oracle America, Inc." "c:\program files (x86)\java\jre1.8.0_251\bin\ssv.dll" "3/12/2020 2:51 AM" ""
+ "PlusIEEventHelper Class" "PlusIEContextMenu.dll" "(Not verified) Zeon Corporation" "c:\program files (x86)\nuance\pdf viewer plus\bin\plusiecontextmenu.dll" "2/6/2009 4:40 AM" ""
+ "Wondershare AllMyTube 4.3.0" "" "" "File not found: C:\ProgramData\Wondershare\AllMyTube\WSBrowserAppMgr.dll" "" ""
"HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\Software\Microsoft\Internet Explorer\Toolbar" "" "" "" "5/13/2020 9:59 PM" ""
"HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar" "" "" "" "5/13/2020 9:59 PM" ""
"HKCU\Software\Microsoft\Internet Explorer\Explorer Bars" "" "" "" "5/30/2020 11:15 AM" ""
"HKLM\Software\Microsoft\Internet Explorer\Explorer Bars" "" "" "" "5/13/2020 9:59 PM" ""
"HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Explorer Bars" "" "" "" "" ""
"HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Explorer Bars" "" "" "" "5/13/2020 9:59 PM" ""
"HKCU\Software\Microsoft\Internet Explorer\Extensions" "" "" "" "5/30/2020 11:15 AM" ""
"HKLM\Software\Microsoft\Internet Explorer\Extensions" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions" "" "" "" "" ""
"HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions" "" "" "" "3/22/2020 4:11 AM" ""
+ "Send by Bluetooth to" "Bluetooth IE PlugIn" "(Not Verified) Atheros Commnucations" "c:\program files (x86)\dell wireless\bluetooth suite\ieplugin.dll" "12/27/2012 9:20 AM" ""
"Task Scheduler" "" "" "" "" ""
+ "\Adobe Acrobat Update Task" "Adobe Reader and Acrobat Manager" "(Verified) Adobe Inc." "c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe" "2/25/2020 5:41 PM" ""
+ "\AdobeAAMUpdater-1.0-Everything-Geoffrey" "Adobe Updater Startup Utility" "(Verified) Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\oobe\pdapp\uwa\updaterstartuputility.exe" "5/17/2015 10:36 AM" ""
+ "\AdobeGCInvoker-1.0" "Adobe GC Invoker Utility" "(Verified) Adobe Inc." "c:\program files (x86)\common files\adobe\adobegcclient\agcinvokerutility.exe" "3/4/2020 8:03 AM" ""
X "\Microsoft\Windows\Media Center\PeriodicScanRetry" "" "" "File not found: C:\WINDOWS\ehome\MCUpdate.exe" "" ""
+ "\Microsoft\Windows\rempl\shell" "" "" "File not found: C:\Program Files\rempl\sedlauncher.exe" "" ""
X "\Microsoft\Windows\Shell\WindowsParentalControlsMigration" "" "" "File not found: C:\Windows\SysWOW64\wpcmig.dll" "" ""
+ "\Microsoft\Windows\SMB\UninstallSMB1ClientTask" "" "" "File not found: Unrestricted" "" ""
+ "\Microsoft\Windows\SMB\UninstallSMB1ServerTask" "" "" "File not found: Unrestricted" "" ""
+ "\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" "Microsoft Malware Protection Command Line Utility" "(Not verified) Microsoft Corporation" "c:\programdata\microsoft\windows defender\platform\4.18.2004.6-0\mpcmdrun.exe" "10/18/1929 5:50 PM" ""
+ "\Microsoft\Windows\Windows Defender\Windows Defender Cleanup" "Microsoft Malware Protection Command Line Utility" "(Not Verified) Microsoft Corporation" "c:\programdata\microsoft\windows defender\platform\4.18.2004.6-0\mpcmdrun.exe" "10/18/1929 5:50 PM" ""
+ "\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" "Microsoft Malware Protection Command Line Utility" "(Not Verified) Microsoft Corporation" "c:\programdata\microsoft\windows defender\platform\4.18.2004.6-0\mpcmdrun.exe" "10/18/1929 5:50 PM" ""
+ "\Microsoft\Windows\Windows Defender\Windows Defender Verification" "Microsoft Malware Protection Command Line Utility" "(Not Verified) Microsoft Corporation" "c:\programdata\microsoft\windows defender\platform\4.18.2004.6-0\mpcmdrun.exe" "10/18/1929 5:50 PM" ""
+ "\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB" "Firefox Default Browser Agent" "(Verified) Mozilla Corporation" "c:\program files\mozilla firefox\default-browser-agent.exe" "5/7/2020 8:49 AM" ""
+ "\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA Container" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe" "2/26/2020 10:08 AM" ""
+ "\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA Container" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe" "2/26/2020 10:08 AM" ""
+ "\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA GeForce Experience" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\nvidia geforce experience\nvidia geforce experience.exe" "4/7/2020 7:25 PM" ""
+ "\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA nodejs launcher" "(Verified) NVIDIA Corporation" "c:\program files (x86)\nvidia corporation\nvnode\nvnodejslauncher.exe" "4/7/2020 9:21 AM" ""
+ "\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA driver profile updater" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\update core\nvprofileupdater64.exe" "3/31/2020 3:59 AM" ""
+ "\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA driver profile updater" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\update core\nvprofileupdater64.exe" "3/31/2020 3:59 AM" ""
+ "\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA crash and telemetry reporter" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\nvbackend\nvtmrep.exe" "3/31/2020 4:13 AM" ""
+ "\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA crash and telemetry reporter" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\nvbackend\nvtmrep.exe" "3/31/2020 4:13 AM" ""
+ "\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA crash and telemetry reporter" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\nvbackend\nvtmrep.exe" "3/31/2020 4:13 AM" ""
+ "\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" "NVIDIA crash and telemetry reporter" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\nvbackend\nvtmrep.exe" "3/31/2020 4:13 AM" ""
+ "\{0AF178CD-DEE2-237E-DB99-786B7B3BFF07}" "" "" "File not found: C:\Users\Geoffrey\AppData\Local\{B5068~1\UNINST~1.EXE" "" ""
"HKLM\System\CurrentControlSet\Services" "" "" "" "5/31/2020 11:54 AM" ""
+ "AdAppMgrSvc" "Autodesk Desktop App Service: Autodesk Desktop App Service" "(Verified) Autodesk, Inc." "c:\program files (x86)\autodesk\autodesk desktop app\adappmgrsvc.exe " "12/19/2017 2:33 AM" ""
+ "AdobeARMservice" "Adobe Acrobat Update Service: Adobe Acrobat Updater keeps your Adobe software up to date." "(Verified) Adobe Inc." "c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe" "2/25/2020 5:40 PM" ""
+ "AGMService" "Adobe Genuine Monitor Service: Adobe Genuine Monitor Service" "(Verified) Adobe Inc." "c:\program files (x86)\common files\adobe\adobegcclient\agmservice.exe" "3/4/2020 8:04 AM" ""
+ "AGSService" "Adobe Genuine Software Integrity Service: Adobe Genuine Software Integrity Service" "(Verified) Adobe Inc." "c:\program files (x86)\common files\adobe\adobegcclient\agsservice.exe" "3/4/2020 8:03 AM" ""
+ "Apple Mobile Device Service" "Apple Mobile Device Service: Provides the interface to Apple mobile devices." "(Verified) Apple Inc." "c:\program files\common files\apple\mobile device support\applemobiledeviceservice.exe" "2/12/2015 11:18 PM" ""
+ "Bonjour Service" "Bonjour Service: Enables hardware devices and software services to automatically configure themselves on the network and advertise their presence." "(Verified) Apple Inc." "c:\program files\bonjour\mdnsresponder.exe" "8/12/2015 6:47 PM" ""
+ "cphs" "Intel(R) Content Protection HECI Service: Intel(R) Content Protection HECI Service - enables communication with the Content Protection FW" "(Verified) Intel(R) pGFX" "c:\windows\syswow64\intelcphecisvc.exe" "7/9/2015 7:19 PM" ""
+ "DellDataVault" "Dell Data Vault: System health, performance, and environment data collection for Dell applications." "(Verified) Techporch Incorporated" "c:\program files\dell\delldatavault\delldatavault.exe" "12/18/2015 5:44 PM" ""
+ "DellDataVaultWiz" "Dell Data Vault Wizard: System health and performance alerts based on Dell Data Vault collection." "(Verified) Techporch Incorporated" "c:\program files\dell\delldatavault\delldatavaultwiz.exe" "12/18/2015 5:45 PM" ""
+ "DellDigitalDelivery" "Dell Digital Delivery Service: Downloads and installs the applications that you purchased with your computer." "(Verified) Dell Inc." "c:\program files (x86)\dell digital delivery\deliveryservice.exe" "3/13/2013 5:20 PM" ""
+ "Disc Soft Lite Bus Service" "Disc Soft Lite Bus Service: Disc Soft Bus Service" "(Verified) Disc Soft Ltd" "c:\program files\daemon tools lite\discsoftbusservice.exe" "11/30/2015 5:55 AM" ""
+ "Everything" "Everything: Everything" "" "c:\program files (x86)\everything\everything.exe" "8/5/2014 9:01 PM" ""
+ "FlexNet Licensing Service 64" "FlexNet Licensing Service 64: This service performs licensing functions on behalf of FlexNet enabled products." "(Verified) Flexera Software LLC" "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice64.exe" "6/22/2015 6:51 AM" ""
+ "Freemake Improver" "Freemake Improver: Freemake Improver" "(Not verified) Freemake" "c:\programdata\freemake\freemakeutilsservice\freemakeutilsservice.exe" "7/31/2013 5:33 AM" ""
+ "FreemakeVideoCapture" "FreemakeVideoCapture: CaptureLibService" "(Not verified) Ellora Assets Corp." "c:\program files (x86)\freemake\capturelib\capturelibservice.exe" "7/31/2013 5:33 AM" ""
+ "GoogleChromeElevationService" "Google Chrome Elevation Service: Google Chrome" "(Verified) Google LLC" "c:\program files (x86)\google\chrome\application\83.0.4103.61\elevation_service.exe" "5/15/2020 8:06 PM" ""
+ "gupdate" "Google Update Service (gupdate): Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it." "(Verified) Google Inc" "c:\program files (x86)\google\update\googleupdate.exe" "8/21/2015 10:13 PM" ""
+ "gupdatem" "Google Update Service (gupdatem): Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it." "(Verified) Google Inc" "c:\program files (x86)\google\update\googleupdate.exe" "8/21/2015 10:13 PM" ""
+ "IAStorDataMgrSvc" "Intel(R) Rapid Storage Technology: Provides storage event notification and manages communication between the storage driver and user space applications." "(Verified) Intel Corporation - Intel® Rapid Storage Technology" "c:\program files\intel\intel(r) rapid storage technology\iastordatamgrsvc.exe" "2/5/2013 1:35 PM" ""
+ "IconMan_R" "IconMan_R: Realtek Card Reader Patch Tool." "(Not verified) Realsil Microelectronics Inc." "c:\program files (x86)\realtek\realtek usb 2.0 card reader\riconman.exe" "7/13/2012 5:02 AM" ""
+ "igfxCUIService2.0.0.0" "Intel(R) HD Graphics Control Panel Service: Service for Intel(R) HD Graphics Control Panel" "(Verified) Intel(R) pGFX" "c:\windows\system32\igfxcuiservice.exe" "11/10/2016 9:10 PM" ""
+ "Intel(R) Capability Licensing Service Interface" "Intel(R) Capability Licensing Service Interface: Version: 1.27.757.1" "(Not verified) Intel(R) Corporation" "c:\program files\intel\icls client\heciserver.exe" "12/10/2012 9:31 AM" ""
+ "Intel(R) Capability Licensing Service TCP IP Interface" "Intel(R) Capability Licensing Service TCP IP Interface: Version: 1.27.757.1" "(Verified) Intel® Trusted Connect Service" "c:\program files\intel\icls client\socketheciserver.exe" "12/10/2012 9:31 AM" ""
+ "Intel(R) ME Service" "Intel(R) ME Service: Intel® Manageability Engine Service (Intel® ME Service)" "(Verified) Intel Corporation" "c:\program files (x86)\intel\intel(r) management engine components\fwservice\intelmefwservice.exe" "1/21/2013 5:29 PM" ""
+ "jhi_service" "Intel(R) Dynamic Application Loader Host Interface Service: Intel(R) Dynamic Application Loader Host Interface Service - Allows applications to access the local Intel (R) DAL" "(Verified) Intel Corporation" "c:\program files (x86)\intel\intel(r) management engine components\dal\jhi_service.exe" "1/21/2013 5:26 PM" ""
+ "LMS" "Intel(R) Management and Security Application Local Management Service: Intel(R) Management and Security Application Local Management Service - Provides OS-related Intel(R) ME functionality." "(Verified) Intel Corporation" "c:\program files (x86)\intel\intel(r) management engine components\lms\lms.exe" "1/21/2013 5:30 PM" ""
+ "LogiFacecamService" "Logi Facecam Service: Managing Extended Logi Camera Features" "(Verified) Logitech Inc" "c:\program files\logitech\logicapture\bin\service\logifacecamservice.exe" "10/11/2019 5:54 AM" ""
+ "MBAMService" "Malwarebytes Service: Malwarebytes Service" "(Verified) Malwarebytes Inc" "c:\program files\malwarebytes\anti-malware\mbamservice.exe" "2/18/2020 11:03 AM" ""
+ "MozillaMaintenance" "Mozilla Maintenance Service: The Mozilla Maintenance Service ensures that you have the latest and most secure version of Mozilla Firefox on your computer. Keeping Firefox up to date is very important for your online security, and Mozilla strongly recommends that you keep this service enabled." "(Verified) Mozilla Corporation" "c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe" "5/7/2020 8:49 AM" ""
+ "nordvpn-service" "nordvpn-service: nordvpn-service" "(Verified) TEFINCOM S.A." "c:\program files (x86)\nordvpn\nordvpn-service.exe" "4/21/2020 8:04 AM" ""
+ "NvContainerLocalSystem" "NVIDIA LocalSystem Container: Container service for NVIDIA root features" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe" "2/26/2020 10:08 AM" ""
+ "NVDisplay.ContainerLocalSystem" "NVIDIA Display Container LS: Container service for NVIDIA root features" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\display.nvcontainer\nvdisplay.container.exe" "9/9/2019 12:34 AM" ""
+ "PDFProFiltSrvPP" "PDFProFiltSrvPP: PDFPro IFilter Service" "(Verified) Nuance Communications, Inc." "c:\program files (x86)\nuance\paperport\pdfprofiltsrvpp.exe" "8/2/2011 8:29 AM" ""
+ "PnkBstrA" "PnkBstrA: PunkBuster Service Component [v1029]
http://www.evenbalance.com" "(Verified) Even Balance, Inc." "c:\windows\syswow64\pnkbstra.exe" "8/4/2007 4:38 PM" ""
+ "PnkBstrB" "PnkBstrB: PunkBuster Service Component [v2.57 COD2]
http://www.evenbalance.com" "(Verified) Even Balance, Inc." "c:\windows\syswow64\pnkbstrb.exe" "2/26/2008 2:17 PM" ""
+ "RtkAudioService" "Realtek Audio Service: For cooperation with Realtek audio driver." "(Verified) Realtek Semiconductor Corp" "c:\program files\realtek\audio\hda\rtkaudioservice64.exe" "5/22/2015 2:16 AM" ""
+ "SftService" "SoftThinks Agent Service: SoftThinks Agent Service" "(Verified) Dell Inc" "c:\program files (x86)\dell datasafe local backup\sftservice.exe" "2/15/2012 10:51 AM" ""
+ "ss_conn_service" "SAMSUNG Mobile Connectivity Service: MSS CS Connectivity Service" "(Verified) DEVGURU CO LTD" "c:\program files (x86)\samsung\usb drivers\25_escape\conn\ss_conn_service.exe" "10/1/2014 2:23 AM" ""
+ "Steam Client Service" "Steam Client Service: Steam Client Service monitors and updates Steam content" "(Verified) Valve" "c:\program files (x86)\common files\steam\steamservice.exe" "5/15/2020 2:20 PM" ""
+ "SupportAssistAgent" "Dell SupportAssist Agent: Dell SupportAssist Agent actively monitors the system and allows for remediation when an issue arise." "(Verified) Dell Inc." "c:\program files (x86)\dell\supportassistagent\bin\supportassistagent.exe" "3/14/2016 11:43 AM" ""
+ "WdNisSvc" "Windows Defender Antivirus Network Inspection Service: Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols" "(Not verified) Microsoft Corporation" "c:\programdata\microsoft\windows defender\platform\4.18.2004.6-0\nissrv.exe" "9/7/1921 4:57 PM" ""
+ "WinDefend" "Windows Defender Antivirus Service: Helps protect users from malware and other potentially unwanted software" "(Not verified) Microsoft Corporation" "c:\programdata\microsoft\windows defender\platform\4.18.2004.6-0\msmpeng.exe" "4/23/1967 7:53 AM" ""
+ "ZAtheros Bt and Wlan Coex Agent" "ZAtheros Bt and Wlan Coex Agent: Co-existence Coordinator Service between 11a/b/g/n Wireless LAN and Bluetooth." "(Not verified) Atheros" "c:\program files (x86)\dell wireless\bluetooth suite\ath_coexagent.exe" "11/23/2012 3:41 AM" ""
+ "ZAtheros Wlan Agent" "ZAtheros Wlan Agent: Atheros agent for Wlan" "(Not verified) Atheros" "c:\program files (x86)\dell wireless\ath_wlanagent.exe" "12/26/2012 5:31 AM" ""
"HKLM\System\CurrentControlSet\Services" "" "" "" "5/31/2020 11:54 AM" ""
+ "BrSerIb" "Brother Serial Interface Driver(WDM): Brother MFC Serial Interface Driver(WDM)" "(Verified) Brother Industries, Ltd." "c:\windows\system32\drivers\brserib.sys" "7/31/2012 7:54 AM" ""
+ "BrUsbSIb" "Brother Serial USB Driver(WDM): Brother MFC Serial USB Driver(WDM)" "(Verified) Brother Industries, Ltd." "c:\windows\system32\drivers\brusbsib.sys" "11/2/2009 11:06 PM" ""
+ "BTATH_BUS" "Atheros Bluetooth Bus: Atheros BUS driver" "(Not verified) Atheros" "c:\windows\system32\drivers\btath_bus.sys" "5/21/2012 2:52 AM" ""
+ "cpuz149" "cpuz149: " "" "File not found: C:\Users\Geoffrey\AppData\Local\Temp\cpuz149\cpuz149_x64.sys" "" ""
+ "DDDriver" "DDDriver: DDDriver.sys" "(Verified) Techporch Incorporated" "c:\windows\system32\drivers\dddriver64dcsa.sys" "5/28/2014 3:58 PM" ""
+ "DellProf" "DellProf: DellProf.sys" "(Verified) Techporch Incorporated" "c:\windows\system32\drivers\dellprof.sys" "5/13/2015 10:17 AM" ""
+ "dg_ssudbus" "SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.): SAMSUNG USB Composite Device Driver (MSS Ver.3)" "(Verified) DEVGURU CO LTD" "c:\windows\system32\drivers\ssudbus.sys" "6/9/2014 9:53 PM" ""
+ "dtlitescsibus" "DAEMON Tools Lite Virtual SCSI Bus: DAEMON Tools Lite Virtual SCSI Bus Driver" "(Verified) Disc Soft Ltd" "c:\windows\system32\drivers\dtlitescsibus.sys" "9/24/2015 4:17 PM" ""
+ "dtliteusbbus" "DAEMON Tools Lite Virtual USB Bus: DAEMON Tools Lite Virtual USB Bus Driver" "(Verified) Disc Soft Ltd" "c:\windows\system32\drivers\dtliteusbbus.sys" "11/29/2015 8:11 PM" ""
+ "GEARAspiWDM" "GEAR ASPI Filter Driver: CD DVD Filter" "(Verified) GEAR Software Inc." "c:\windows\system32\drivers\gearaspiwdm.sys" "5/3/2012 3:56 PM" ""
+ "iaLPSSi_GPIO" "Intel(R) Serial IO GPIO Controller Driver: Intel(R) Serial IO GPIO Controller Driver" "(Verified) Intel Corporation - Client Components Group" "c:\windows\system32\drivers\ialpssi_gpio.sys" "2/2/2015 5:00 AM" ""
+ "iaStorA" "iaStorA: Intel Rapid Storage Technology driver - x64" "(Verified) Intel Corporation - Intel® Rapid Storage Technology" "c:\windows\system32\drivers\iastora.sys" "1/14/2013 2:00 PM" ""
+ "igfx" "igfx: Intel Graphics Kernel Mode Driver" "(Verified) Intel(R) pGFX" "c:\windows\system32\drivers\igdkmd64.sys" "11/10/2016 9:58 PM" ""
+ "IntcAzAudAddService" "Service for Realtek HD Audio (WDM): Realtek(r) High Definition Audio Function Driver" "(Verified) Realtek Semiconductor Corp" "c:\windows\system32\drivers\rtkvhd64.sys" "6/24/2015 6:04 AM" ""
+ "IntcDAud" "Intel(R) Display Audio: Intel(R) Display Audio Driver" "(Verified) Intel(R) OWR" "c:\windows\system32\drivers\intcdaud.sys" "5/10/2016 4:08 AM" ""
+ "LGBusEnum" "Logitech GamePanel Virtual Bus Enumerator Driver: Logitech WingMan Virtual Bus Enumerator Driver" "(Verified) Logitech" "c:\windows\system32\drivers\lgbusenum.sys" "11/23/2009 9:36 PM" ""
+ "LGVirHid" "Logitech Gamepanel Virtual HID Device Driver: Logitech GamePanel Virtual Hid Device Driver" "(Verified) Logitech" "c:\windows\system32\drivers\lgvirhid.sys" "11/23/2009 9:36 PM" ""
+ "MBAMChameleon" "MBAMChameleon: Malwarebytes Anti-Malware Chameleon" "(Verified) Malwarebytes Inc" "c:\windows\system32\drivers\mbamchameleon.sys" "3/30/2020 10:51 AM" ""
+ "MBAMSwissArmy" "MBAMSwissArmy: Malwarebytes Anti-Malware Swiss Army" "(Verified) Malwarebytes Inc" "c:\windows\system32\drivers\mbamswissarmy.sys" "11/20/2019 10:57 AM" ""
+ "MEIx64" "Intel(R) Management Engine Interface : Intel(R) Management Engine Interface" "(Verified) Intel Corporation - Intel® Management Engine Firmware" "c:\windows\system32\drivers\hecix64.sys" "12/17/2012 3:32 PM" ""
+ "mfedisk" "McAfee AAC Disk Filter Driver: McAfee Disk Filter Driver" "(Verified) McAfee, Inc." "c:\windows\system32\drivers\mfedisk.sys" "2/11/2015 5:53 PM" ""
+ "MpKslDrv" "MpKslDrv: KSLDriver" "(Not verified) Microsoft Corporation" "c:\programdata\microsoft\windows defender\definition updates\{275fe39e-3505-4e95-9a76-5d420839aa85}\mpksldrv.sys" "9/9/1997 4:29 PM" ""
+ "nlwt" "Nlwt: Nlwt Tun" "(Verified) TEFINCOM S.A." "c:\windows\system32\drivers\nlwt.sys" "4/2/2020 2:34 AM" ""
+ "npf" "NetGroup Packet Filter Driver: npf.sys (NT5/6 AMD64) Kernel Driver" "(Verified) Riverbed Technology, Inc." "c:\windows\system32\drivers\npf.sys" "2/28/2013 9:31 PM" ""
+ "NVHDA" "Service for NVIDIA High Definition Audio Driver: NVIDIA HDMI Audio Driver" "(Verified) NVIDIA Corporation" "c:\windows\system32\drivers\nvhda64v.sys" "6/21/2019 3:35 PM" ""
+ "nvlddmkm" "nvlddmkm: NVIDIA Windows Kernel Mode Driver, Version 441.66 " "(Verified) NVIDIA Corporation" "c:\windows\system32\driverstore\filerepository\nv_dispi.inf_amd64_77e6900053c33f6f\nvlddmkm.sys" "12/6/2019 9:28 PM" ""
+ "NvStreamKms" "NVIDIA KMS: Nvidia Streaming Kernel Service" "(Verified) NVIDIA Corporation" "c:\program files\nvidia corporation\nvstreamsrv\nvstreamkms.sys" "6/25/2018 7:52 PM" ""
+ "nvvad_WaveExtensible" "NVIDIA Virtual Audio Device (Wave Extensible) (WDM): NVIDIA Virtual Audio Driver" "(Verified) NVIDIA Corporation" "c:\windows\system32\drivers\nvvad64v.sys" "3/14/2019 4:58 AM" ""
+ "nvvhci" "NVVHCI Enumerator Service: Virtual USB Host Controller driver" "(Verified) NVIDIA Corporation" "c:\windows\system32\drivers\nvvhci.sys" "1/10/2020 2:31 PM" ""
+ "PCDSRVC{3B54B31B-D06B6431-06020200}_0" "PCDSRVC{3B54B31B-D06B6431-06020200}_0 - PCDR Kernel Mode Service Helper Driver: Kernel Driver" "(Verified) PC-Doctor, Inc." "c:\program files\dell\supportassist\pcdsrvc_x64.pkms" "5/9/2011 8:20 PM" ""
+ "pmxdrv" "pmxdrv: " "(Verified) PAIPTAC Driver" "c:\windows\system32\drivers\pmxdrv.sys" "1/27/2010 5:53 PM" ""
+ "RTCore64" "RTCore64: " "(Verified) MICRO-STAR INTERNATIONAL CO., LTD." "c:\program files (x86)\msi afterburner\rtcore64.sys" "9/19/2019 6:45 AM" ""
+ "RTL8167" "Realtek 8167 NT Driver: Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver " "(Verified) Realtek Semiconductor Corp" "c:\windows\system32\drivers\rt64win7.sys" "12/26/2012 1:17 PM" ""
+ "speedfan" "speedfan: SpeedFan x64 Driver" "(Verified) SOKNO S.R.L." "c:\windows\syswow64\speedfan.sys" "12/29/2012 4:59 PM" ""
+ "ssudmdm" "SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.): SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.)" "(Verified) DEVGURU CO LTD" "c:\windows\system32\drivers\ssudmdm.sys" "6/9/2014 9:53 PM" ""
+ "tap-tb-0901" "TunnelBear Adapter V9: TAP-Windows Virtual Network Driver" "(Verified) TunnelBear, Inc." "c:\windows\system32\drivers\tap-tb-0901.sys" "8/12/2014 3:45 AM" ""
+ "tap0901" "TAP-Windows Adapter V9: TAP-Windows Virtual Network Driver (NDIS 6.0)" "(Verified) OpenVPN Technologies, Inc." "c:\windows\system32\drivers\tap0901.sys" "11/5/2014 9:16 AM" ""
+ "tapipvanish" "IPVanish Adapter: TAP-Windows Virtual Network Driver (NDIS 6.0)" "(Verified) IPVanish (Mudhook Marketing, Inc)" "c:\windows\system32\drivers\tapipvanish.sys" "7/6/2016 5:24 PM" ""
+ "tapnordvpn" "TAP-NordVPN Windows Adapter V9: TAP-Windows Virtual Network Driver (NDIS 6.0)" "(Verified) TEFINCOM S.A." "c:\windows\system32\drivers\tapnordvpn.sys" "5/31/2018 5:50 AM" ""
+ "UcmCxUcsiNvppc" "NVIDIA USB Type-C PPC Service: NVIDIA PPC Function Driver." "(Verified) NVIDIA Corporation" "c:\windows\system32\drivers\ucmcxucsinvppc.sys" "5/14/2019 10:16 PM" ""
+ "WmBEnum" "Logitech Virtual Bus Enumerator Driver: Logitech WingMan Virtual Bus Enumerator Driver" "(Verified) Logitech" "c:\windows\system32\drivers\wmbenum.sys" "4/27/2010 4:10 PM" ""
+ "WmVirHid" "Logitech Virtual Hid Device Driver: Logitech WingMan Virtual Hid Device Driver" "(Verified) Logitech" "c:\windows\system32\drivers\wmvirhid.sys" "4/27/2010 4:08 PM" ""
+ "WmXlCore" "Logitech Translation Layer Driver: Logitech WingMan Translation Driver" "(Verified) Logitech" "c:\windows\system32\drivers\wmxlcore.sys" "4/27/2010 4:09 PM" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Font Drivers" "" "" "" "3/22/2020 4:11 AM" ""
+ "Adobe Type Manager" "" "" "File not found: atmfd.dll" "" ""
"HKCU\Software\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" "" "5/11/2020 3:59 PM" ""
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" "" "5/13/2020 9:59 PM" ""
+ "VIDC.RTV1" "" "" "c:\windows\system32\rtvcvfw64.dll" "9/28/2012 3:45 PM" ""
"HKCU\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" "" "" ""
"HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" "" "3/22/2020 4:11 AM" ""
+ "VIDC.RTV1" "" "" "c:\windows\syswow64\rtvcvfw32.dll" "9/28/2012 3:45 PM" ""
"HKCU\Software\Classes\Filter" "" "" "" "5/31/2020 1:34 PM" ""
"HKLM\Software\Classes\Filter" "" "" "" "5/30/2020 11:23 AM" ""
"HKCU\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" "" "" ""
"HKCU\Software\Wow6432Node\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" "" "" ""
"HKCU\Software\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance" "" "" "" "" ""
"HKCU\Software\Wow6432Node\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance" "" "" "" "" ""
"HKCU\Software\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance" "" "" "" "" ""
"HKCU\Software\Wow6432Node\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance" "" "" "" "" ""
"HKCU\Software\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\Instance" "" "" "" "" ""
"HKCU\Software\Wow6432Node\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\Instance" "" "" "" "" ""
"HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" "" "4/10/2020 1:16 PM" ""
+ "AMD MJPEG Decoder" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files\common files\ati technologies\multimedia\atimpenc64.dll" "3/7/2013 11:25 PM" ""
+ "ATI MPEG Audio Encoder" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files\common files\ati technologies\multimedia\atimpenc64.dll" "3/7/2013 11:25 PM" ""
+ "ATI MPEG File Writer" "ATI MPEG Encoder" "(Not verified) Advanced Micro Devices Inc." "c:\program files\common files\ati technologies\multimedia\atimpenc64.dll" "3/7/2013 11:25 PM" ""
+ "ATI MPEG Multiplexer" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files\common files\ati technologies\multimedia\atimpenc64.dll" "3/7/2013 11:25 PM" ""
+ "ATI MPEG Video Decoder" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files\common files\ati technologies\multimedia\atimpenc64.dll" "3/7/2013 11:25 PM" ""
+ "ATI MPEG Video Encoder" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files\common files\ati technologies\multimedia\atimpenc64.dll" "3/7/2013 11:25 PM" ""
+ "ATI Video Rotation Filter" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files\common files\ati technologies\multimedia\atimpenc64.dll" "3/7/2013 11:25 PM" ""
+ "ATI Video Scaler Filter" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files\common files\ati technologies\multimedia\atimpenc64.dll" "3/7/2013 11:25 PM" ""
"HKLM\Software\Wow6432Node\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" "" "3/22/2020 4:11 AM" ""
+ "AMD MJPEG Decoder" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files (x86)\common files\ati technologies\multimedia\atimpenc.dll" "3/7/2013 11:20 PM" ""
+ "ATI MPEG Audio Encoder" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files (x86)\common files\ati technologies\multimedia\atimpenc.dll" "3/7/2013 11:20 PM" ""
+ "ATI MPEG File Writer" "ATI MPEG Encoder" "(Not verified) Advanced Micro Devices Inc." "c:\program files (x86)\common files\ati technologies\multimedia\atimpenc.dll" "3/7/2013 11:20 PM" ""
+ "ATI MPEG Multiplexer" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files (x86)\common files\ati technologies\multimedia\atimpenc.dll" "3/7/2013 11:20 PM" ""
+ "ATI MPEG Video Decoder" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files (x86)\common files\ati technologies\multimedia\atimpenc.dll" "3/7/2013 11:20 PM" ""
+ "ATI MPEG Video Encoder" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files (x86)\common files\ati technologies\multimedia\atimpenc.dll" "3/7/2013 11:20 PM" ""
+ "ATI Video Rotation Filter" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files (x86)\common files\ati technologies\multimedia\atimpenc.dll" "3/7/2013 11:20 PM" ""
+ "ATI Video Scaler Filter" "ATI MPEG Encoder" "(Not Verified) Advanced Micro Devices Inc." "c:\program files (x86)\common files\ati technologies\multimedia\atimpenc.dll" "3/7/2013 11:20 PM" ""
+ "DirectVobSub" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "(Not verified) xy-VSFilter Team" "c:\program files (x86)\combined community codec pack\filters\vsfilter.dll" "5/10/2014 9:09 AM" ""
+ "DirectVobSub (auto-loading version)" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "(Not Verified) xy-VSFilter Team" "c:\program files (x86)\combined community codec pack\filters\vsfilter.dll" "5/10/2014 9:09 AM" ""
+ "Haali Matroska Muxer" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax" "11/15/2013 2:49 PM" ""
+ "Haali Media Splitter" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax" "11/15/2013 2:49 PM" ""
+ "Haali Media Splitter (AR)" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax" "11/15/2013 2:49 PM" ""
+ "Haali Simple Media Splitter" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax" "11/15/2013 2:49 PM" ""
+ "Haali Video Renderer" "" "" "c:\program files (x86)\combined community codec pack\filters\haali\dxr.dll" "11/15/2013 2:49 PM" ""
+ "Haali Video Sink" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax" "11/15/2013 2:49 PM" ""
+ "LAV Audio Decoder" "LAV Audio Decoder - DirectShow Audio Decoder" "(Not verified) 1f0.de - Hendrik Leppkes" "c:\program files (x86)\combined community codec pack\filters\lavfilters\lavaudio.ax" "6/22/2014 2:39 PM" ""
+ "LAV Splitter" "LAV Splitter - DirectShow Media Splitter" "(Not verified) 1f0.de - Hendrik Leppkes" "c:\program files (x86)\combined community codec pack\filters\lavfilters\lavsplitter.ax" "6/22/2014 2:39 PM" ""
+ "LAV Splitter Source" "LAV Splitter - DirectShow Media Splitter" "(Not Verified) 1f0.de - Hendrik Leppkes" "c:\program files (x86)\combined community codec pack\filters\lavfilters\lavsplitter.ax" "6/22/2014 2:39 PM" ""
+ "LAV Video Decoder" "LAV Video Decoder - DirectShow Video Decoder" "(Not verified) 1f0.de - Hendrik Leppkes" "c:\program files (x86)\combined community codec pack\filters\lavfilters\lavvideo.ax" "6/22/2014 2:40 PM" ""
"HKLM\Software\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance" "" "" "" "" ""
"HKLM\Software\Wow6432Node\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance" "" "" "" "" ""
"HKLM\Software\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\Instance" "" "" "" "" ""
"HKLM\Software\Wow6432Node\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\Instance" "" "" "" "" ""
"HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute" "" "" "" "5/30/2020 11:16 AM" ""
"HKLM\System\CurrentControlSet\Control\Session Manager\SetupExecute" "" "" "" "5/30/2020 11:16 AM" ""
"HKLM\System\CurrentControlSet\Control\Session Manager\Execute" "" "" "" "5/30/2020 11:16 AM" ""
"HKLM\System\CurrentControlSet\Control\Session Manager\S0InitialCommand" "" "" "" "5/30/2020 11:16 AM" ""
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Microsoft\Command Processor\Autorun" "" "" "" "3/22/2020 4:19 AM" ""
"HKLM\Software\Wow6432Node\Microsoft\Command Processor\Autorun" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Microsoft\Command Processor\Autorun" "" "" "" "3/22/2020 4:18 AM" ""
"HKCU\SOFTWARE\Classes\Exefile\Shell\Open\Command\(Default)" "" "" "" "" ""
"HKLM\SOFTWARE\Classes\Exefile\Shell\Open\Command\(Default)" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\Software\Classes\.exe" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\.exe" "" "" "" "5/31/2020 1:34 PM" ""
"HKLM\Software\Classes\.cmd" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Classes\.cmd" "" "" "" "5/31/2020 1:34 PM" ""
"HKCU\SOFTWARE\Classes\Htmlfile\Shell\Open\Command\(Default)" "" "" "" "" ""
"HKLM\SOFTWARE\Classes\Htmlfile\Shell\Open\Command\(Default)" "" "" "" "3/22/2020 4:19 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls" "" "" "" "5/14/2020 6:33 PM" ""
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls" "" "" "" "5/30/2020 11:16 AM" ""
"HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls" "" "" "" "3/19/2019 12:53 AM" ""
+ "_wow64cpu" "" "" "c:\windows\syswow64\wow64cpu.dll" "" ""
+ "_wowarmhw" "" "" "c:\windows\system32\wowarmhw.dll" "" ""
+ "_wowarmhw" "" "" "c:\windows\syswow64\wowarmhw.dll" "" ""
+ "_xtajit" "" "" "c:\windows\system32\xtajit.dll" "" ""
+ "_xtajit" "" "" "c:\windows\syswow64\xtajit.dll" "" ""
+ "wow64" "" "" "c:\windows\syswow64\wow64.dll" "" ""
+ "wow64win" "" "" "c:\windows\syswow64\wow64win.dll" "" ""
"HKLM\SYSTEM\Setup\CmdLine" "" "" "" "5/30/2020 10:21 PM" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers" "" "" "" "3/22/2020 4:11 AM" ""
+ "AthCredentialProvider" "Bluetooth Credential Provider" "(Not verified) Atheros Commnucations" "c:\windows\system32\athcredentialprovider.dll" "12/27/2012 9:26 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters" "" "" "" "3/22/2020 4:11 AM" ""
+ "AthCredentialProvider" "Bluetooth Credential Provider" "(Not Verified) Atheros Commnucations" "c:\windows\system32\athcredentialprovider.dll" "12/27/2012 9:26 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\PLAP Providers" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman" "" "" "" "5/30/2020 10:21 PM" ""
"HKCU\SOFTWARE\Policies\Microsoft\Windows\Control Panel\Desktop\Scrnsave.exe" "" "" "" "" ""
"HKCU\Control Panel\Desktop\Scrnsave.exe" "" "" "" "5/30/2020 10:21 PM" ""
"HKLM\System\CurrentControlSet\Control\BootVerificationProgram\ImagePath" "" "" "" "5/30/2020 10:21 PM" ""
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GpExtensions" "" "" "" "3/22/2020 4:11 AM" ""
+ "{6cfb9c5c-138e-4bb3-8a3d-d5383e910e57}" "Remote Desktop Protocol Group Policy Extension" "(Not verified) Microsoft Corporation" "c:\windows\system32\rdpgrouppolicyextension.dll" "5/5/2014 6:18 PM" ""
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries" "" "" "" "3/24/2020 7:06 PM" ""
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64" "" "" "" "3/24/2020 7:06 PM" ""
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders" "" "" "" "3/22/2020 4:11 AM" ""
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages" "" "" "" "5/30/2020 9:29 PM" ""
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages" "" "" "" "5/30/2020 9:29 PM" ""
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages" "" "" "" "5/30/2020 9:29 PM" ""
+ "livessp" "" "" "File not found: livessp" "" ""
"HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order" "" "" "" "3/22/2020 4:11 AM" ""
"WMI Database Entries - run as Administrator for complete scan" "" "" "" "" ""
+ "BVTConsumer" "" "" "File not found: File not found: KernCap.vbs" "" ""
"HKLM\Software\Microsoft\Office\Outlook\Addins" "" "" "" "5/30/2020 11:12 AM" ""
+ "Connect Class" "OutlookChangeNotifier" "(Verified) Apple Inc." "c:\program files\common files\apple\mobile device support\outlookchangenotifieraddin.dll" "4/21/2016 2:32 AM" ""
"HKCU\Software\Microsoft\Office\Outlook\Addins" "" "" "" "3/22/2020 4:16 AM" ""
+ "{5B7AB748-6D2E-4827-90A5-32B426DC61B7}" "" "" "" "3/22/2020 4:16 AM" ""
+ "{EFEF7FDB-0CED-4FB6-B3BB-3C50D39F4120}" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\Software\Wow6432Node\Microsoft\Office\Outlook\Addins" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Wow6432Node\Microsoft\Office\Outlook\Addins" "" "" "" "" ""
"HKLM\Software\Microsoft\Office\Excel\Addins" "" "" "" "" ""
"HKCU\Software\Microsoft\Office\Excel\Addins" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\Software\Wow6432Node\Microsoft\Office\Excel\Addins" "" "" "" "" ""
"HKCU\Software\Wow6432Node\Microsoft\Office\Excel\Addins" "" "" "" "" ""
"HKLM\Software\Microsoft\Office\PowerPoint\Addins" "" "" "" "" ""
"HKCU\Software\Microsoft\Office\PowerPoint\Addins" "" "" "" "3/22/2020 4:16 AM" ""
X "{3A7CAEBB-C5C3-4EFF-ADDF-C32663BDF8DA}" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\Software\Wow6432Node\Microsoft\Office\PowerPoint\Addins" "" "" "" "" ""
"HKCU\Software\Wow6432Node\Microsoft\Office\PowerPoint\Addins" "" "" "" "" ""
"HKLM\Software\Microsoft\Office\Word\Addins" "" "" "" "" ""
"HKCU\Software\Microsoft\Office\Word\Addins" "" "" "" "3/22/2020 4:16 AM" ""
X "{C580A1B2-5915-4DC3-BE93-8A51F4CAB320}" "" "" "" "3/22/2020 4:16 AM" ""
"HKLM\Software\Wow6432Node\Microsoft\Office\Word\Addins" "" "" "" "" ""
"HKCU\Software\Wow6432Node\Microsoft\Office\Word\Addins" "" "" "" "" ""
"HKLM\Software\Microsoft\Office\Access\Addins" "" "" "" "" ""
"HKCU\Software\Microsoft\Office\Access\Addins" "" "" "" "" ""
"HKLM\Software\Wow6432Node\Microsoft\Office\Access\Addins" "" "" "" "" ""
"HKCU\Software\Wow6432Node\Microsoft\Office\Access\Addins" "" "" "" "" ""
"HKLM\Software\Microsoft\Office\Onenote\Addins" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Microsoft\Office\Onenote\Addins" "" "" "" "" ""
"HKLM\Software\Wow6432Node\Microsoft\Office\Onenote\Addins" "" "" "" "3/22/2020 4:11 AM" ""
"HKCU\Software\Wow6432Node\Microsoft\Office\Onenote\Addins" "" "" "" "" ""
"HKLM\SOFTWARE\Microsoft\Office test\Special\Perf\(Default)" "" "" "" "" ""
"HKCU\SOFTWARE\Microsoft\Office test\Special\Perf\(Default)" "" "" "" "" ""