Solved high disk usage everytime i opened a program
- Thread starter Mamba
- Start date
-
Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.
Why not Click Here To Sign Up and start enjoying great FREE Tech Support.
This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
- Status
As far as O&O I’d turn off all spyware, select yes to all.
I assume you are back online with the machine.
I assume you are back online with the machine.
~ ZHPDiag v2022.4.15.25 By Nicolas Coolman (2022/04/15)
~ Run by Ganja (Administrator) (2022/04/15 23:10:28)
~ Assistance: https://forum.nicolascoolman.eu/
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ State version: Version OK
~ Mode: Scan
~ Report: C:\Users\Ganja\Desktop\ZHPDiag.txt
~ Report: C:\Users\Ganja\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ System startup: Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 19042) =>.Microsoft Corporation
---\\ Internet Browsers (2) - 0s
~ GCIE: Google Chrome v100.0.4896.88
~ MSIE: Internet Explorer v11.789.19041.0
---\\ Windows Product Information (3) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : KO
---\\ System protection software (1) - 4s
Windows Defender W10 (Activate) (Protection)
---\\ System optimization software (1) - 4s
~ CCleaner v5.92 (Optimisation)
---\\ Informations on the system (6) - 0s
~ Operating System: Intel64 Family 6 Model 142 Stepping 9, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4074.544 MB (33% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 831 GB (87%) free of 953 GB : OK =>.Disk Space
---\\ Connection to the system mode (3) - 0s
~ Computer Name: DESKTOP-V4BFEG5
~ User Name: Ganja
~ Logged in as Administrator
---\\ Enumeration of the disk units (1) - 0s
~ Drive C: has 831 GB free of 953 GB (System)
---\\ State of the Windows Security Center (7) - 0s
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
---\\ Search Generic System Files (25) - 4s
[MD5.25C8B9AE873248CD98AB17539F5B1F15] - 10/04/2022 - (.Microsoft Corporation - Windows Explorer.) -- C:\WINDOWS\Explorer.exe [4967688] =>.Microsoft®
[MD5.EF3179D498793BF4234F708D3BE28633] - 10/04/2022 - (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [71680] [Unsigned] =>.Microsoft Corporation
[MD5.FDA73105E744211CB0E28008882DAF21] - 10/04/2022 - (.Microsoft Corporation - Windows Start-Up Application.) -- C:\WINDOWS\System32\Wininit.exe [427192] [Unsigned] =>.Microsoft Corporation
[MD5.11F7419009AF2874C4B0E4505D185D79] - 10/04/2022 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [5038592] [Unsigned] =>.Microsoft Corporation
[MD5.FC7F68EE85A3AE64D6E58C2B2D673793] - 10/04/2022 - (.Microsoft Corporation - Windows Log-on Application.) -- C:\WINDOWS\System32\Winlogon.exe [910336] [Unsigned] =>.Microsoft Corporation
[MD5.A01E533388EF4141854A72CB9F17B5BE] - 10/04/2022 - (.Microsoft Corporation - Software Licensing Library.) -- C:\WINDOWS\System32\sppcomapi.dll [316416] [Unsigned] =>.Microsoft Corporation
[MD5.914AE33E90AF8D3C19ED7678D56B4977] - 10/04/2022 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [820728] =>.Microsoft®
[MD5.1EAD098027CC4D0CD3A8DBE7FFA4D244] - 10/04/2022 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\Syswow64\dnsapi.dll [581568] =>.Microsoft®
[MD5.CBD095290A7B0970D87AEB53A44D9018] - 10/04/2022 - (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\System32\wuaueng.dll [3403776] [Unsigned] =>.Microsoft Corporation
[MD5.E04072187F967B0041C994CCCDB9E101] - 10/04/2022 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [651096] [Unsigned] =>.Microsoft Corporation
[MD5.AF0AA60DD36E4FA227F3C441B008336E] - 10/04/2022 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [30032] [Unsigned] =>.Microsoft Corporation
[MD5.764FE2149251A246F6B047A0F09F5F0B] - 07/12/2019 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [100864] [Unsigned] =>.Microsoft Corporation
[MD5.054ABC6C64AE969D033B7876C04D52B4] - 10/04/2022 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [175616] [Unsigned] =>.Microsoft Corporation
[MD5.3D3CCAFC76E02403E2963A2CB45D61F7] - 10/04/2022 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [152064] [Unsigned] =>.Microsoft Corporation
[MD5.4F39254C6E087D4789D2C3EBD3C7F744] - 10/04/2022 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [134656] [Unsigned] =>.Microsoft Corporation
[MD5.E4B36C6EAAAB703CBFECB92EE590FB31] - 07/12/2019 - (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [118272] [Unsigned] =>.Microsoft Corporation
[MD5.F63572DF4295C78B3F7036AEDA878176] - 07/12/2019 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [225280] [Unsigned] =>.Microsoft Corporation
[MD5.570402953F29A5AC0FBD2715454DED89] - 10/04/2022 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [579432] [Unsigned] =>.Microsoft Corporation
[MD5.49F7DE6F689C47B64A2C2D46CD98E327] - 10/04/2022 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [341504] [Unsigned] =>.Microsoft Corporation
[MD5.69B5F6B8793F3E59B84D08A70BB1240C] - 10/04/2022 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2851664] [Unsigned] =>.Microsoft Corporation
[MD5.138FDB1EBCB61287A645BD3B06DBED5E] - 07/12/2019 - (.Microsoft Corporation - Parallel Port Driver.) -- C:\WINDOWS\System32\drivers\Parport.sys [109056] [Unsigned] =>.Microsoft Corporation
[MD5.40CBDB4B80284451536C8CA49561E5CD] - 10/04/2022 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [110080] [Unsigned] =>.Microsoft Corporation
[MD5.64991B36F0BD38026F7589572C98E3D6] - 10/04/2022 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [169984] [Unsigned] =>.Microsoft Corporation
[MD5.2A8B28579A4964AA7EA8CEB1AC121243] - 10/04/2022 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [117584] [Unsigned] =>.Microsoft Corporation
[MD5.988A7A685BB51BAC62F4E176BE5432AC] - 10/04/2022 - (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [429880] [Unsigned] =>.Microsoft Corporation
---\\ No disabled Windows Services (58) - 3s
O23 - Service: C:\WINDOWS\System32\AudioEndpointBuilder.dll (AudioEndpointBuilder) . (.Microsoft Corporation - Windows Audio Endpoint Builder.) - C:\WINDOWS\System32\AudioEndpointBuilder.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\audiosrv.dll (Audiosrv) . (.Microsoft Corporation - Windows Audio Service.) - C:\WINDOWS\System32\Audiosrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\bfe.dll (BFE) . (.Microsoft Corporation - Base Filtering Engine.) - C:\WINDOWS\System32\bfe.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\bisrv.dll (BrokerInfrastructure) . (.Microsoft Corporation - Process State Manager (PSM) Service.) - C:\WINDOWS\System32\psmsrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\cdpusersvc.dll (CDPUserSvc) . (.Microsoft Corporation - Microsoft (R) CDP User Components.) - C:\WINDOWS\System32\CDPUserSvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Connected Devices Platform User Service_6104c (CDPUserSvc_6104c) . (.Microsoft Corporation - Host Process for Windows Services.) - C:\Windows\System32\svchost.exe =>.Microsoft®
O23 - Service: C:\Windows\System32\coremessaging.dll (CoreMessagingRegistrar) . (.Microsoft Corporation - Microsoft CoreMessaging Dll.) - C:\Windows\System32\coremessaging.dll =>.Microsoft®
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) . (.Intel Corporation - Intel HD Graphics Drivers for Windows(R).) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe =>.Intel(R) pGFX 2020®
O23 - Service: C:\WINDOWS\System32\cryptsvc.dll (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) - C:\WINDOWS\System32\cryptsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) . (.Conexant Systems Inc. - Conexant Audio Message Service.) - C:\WINDOWS\system32\CxAudMsg64.exe [Unsigned] =>.Conexant Systems Inc.
O23 - Service: DbxSvc (DbxSvc) . (.Dropbox, Inc. - Dropbox Service.) - C:\WINDOWS\System32\DbxSvc.exe [Unsigned] =>.Dropbox, Inc.
O23 - Service: C:\WINDOWS\System32\umpnpmgr.dll (DeviceInstall) . (.Microsoft Corporation - User-mode Plug-and-Play Service.) - C:\WINDOWS\System32\umpnpmgr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dhcpcore.dll (Dhcp) . (.Microsoft Corporation - DHCP Client Service.) - C:\Windows\System32\dhcpcore.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\dispbroker.desktop.dll (DispBrokerDesktopSvc) . (.Microsoft Corporation - Desktop Display Broker.) - C:\WINDOWS\System32\DispBroker.Desktop.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dnsapi.dll (Dnscache) . (.Microsoft Corporation - DNS Caching Resolver Service.) - C:\WINDOWS\System32\dnsrslvr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\dusmsvc.dll (DusmSvc) . (.Microsoft Corporation - Data Usage Service.) - C:\WINDOWS\System32\dusmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: ESIF Upper Framework Service (esifsvc) . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) - C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [Unsigned] =>.Intel Corporation
O23 - Service: C:\WINDOWS\System32\wevtsvc.dll (EventLog) . (.Microsoft Corporation - Event Logging Service.) - C:\WINDOWS\System32\wevtsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @comres.dll,-2450 (EventSystem) . (.Microsoft Corporation - COM+.) - C:\Windows\System32\es.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\FntCache.dll (FontCache) . (.Microsoft Corporation - Windows Font Cache Service.) - C:\WINDOWS\System32\FntCache.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @gpapi.dll,-112 (gpsvc) . (.Microsoft Corporation - Group Policy Client.) - C:\WINDOWS\System32\gpsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: ICEsoundService (ICEsoundService) . (.ICEpower A/S - ICEpower ICEsound APO service.) - C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe {0B9DE2343AC13F9FDF2BC2D7F3A6C200}. =>.ICEpower a/s
O23 - Service: Intel(R) Graphics Command Center Service (igccservice) . (.Intel Corporation - Intel® Graphics Command Center Service.) - C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe =>.Intel(R) pGFX 2020®
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe =>.Intel(R) pGFX 2020®
O23 - Service: C:\WINDOWS\System32\ikeext.dll (IKEEXT) . (.Microsoft Corporation - IKE extension.) - C:\WINDOWS\System32\ikeext.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\srvsvc.dll (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) - C:\WINDOWS\System32\srvsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wkssvc.dll (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) - C:\WINDOWS\System32\wkssvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\lsm.dll (LSM) . (.Microsoft Corporation - Local Session Manager Service.) - C:\WINDOWS\System32\lsm.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\FirewallAPI.dll (mpssvc) . (.Microsoft Corporation - Microsoft Protection Service.) - C:\WINDOWS\System32\mpssvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\nlasvc.dll (NlaSvc) . (.Microsoft Corporation - Network Location Awareness 2.) - C:\WINDOWS\System32\nlasvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\nsisvc.dll (nsi) . (.Microsoft Corporation - Network Store Interface RPC server.) - C:\WINDOWS\System32\nsisvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation - NVIDIA Container.) - C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
O23 - Service: C:\WINDOWS\System32\APHostRes.dll (OneSyncSvc) . (.Microsoft Corporation - Accounts Host Service.) - C:\WINDOWS\System32\APHostService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Sync Host_6104c (OneSyncSvc_6104c) . (.Microsoft Corporation - Host Process for Windows Services.) - C:\Windows\System32\svchost.exe =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\umpo.dll (Power) . (.Microsoft Corporation - User-mode Power Service.) - C:\WINDOWS\System32\umpo.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\profsvc.dll (ProfSvc) . (.Microsoft Corporation - ProfSvc.) - C:\WINDOWS\System32\profsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\rasmans.dll (RasMan) . (.Microsoft Corporation - Remote Access Connection Manager.) - C:\WINDOWS\System32\rasmans.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\RpcEpMap.dll (RpcEptMapper) . (.Microsoft Corporation - RPC Endpoint Mapper.) - C:\WINDOWS\System32\RpcEpMap.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @combase.dll,-5010 (RpcSs) . (.Microsoft Corporation - Distributed COM Services.) - C:\WINDOWS\System32\rpcss.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Conexant SmartAudio service (SAService) . (.Conexant Systems, Inc. - SmartAudio Service Application.) - C:\Windows\System32\SASrv.exe =>.Conexant Systems, Inc.®
O23 - Service: C:\WINDOWS\System32\schedsvc.dll (Schedule) . (.Microsoft Corporation - Task Scheduler Service.) - C:\WINDOWS\System32\schedsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\Sens.dll (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) - C:\WINDOWS\System32\sens.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\SgrmBroker.exe,-100 (SgrmBroker) . (.Microsoft Corporation - System Guard Runtime Monitor Broker Service.) - C:\WINDOWS\System32\SgrmBroker.exe [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\shsvcs.dll (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) - C:\Windows\System32\shsvcs.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\sppsvc.exe,-101 (sppsvc) . (.Microsoft Corporation - Microsoft Software Protection Platform Serv.) - C:\WINDOWS\System32\sppsvc.exe [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\StorSvc.dll (StorSvc) . (.Microsoft Corporation - Storage Services.) - C:\WINDOWS\System32\storsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\SystemEventsBrokerServer.dll (SystemEventsBroker) . (.Microsoft Corporation - System Events Broker.) - C:\WINDOWS\System32\SystemEventsBrokerServer.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\themeservice.dll (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) - C:\WINDOWS\System32\themeservice.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\usermgr.dll (UserManager) . (.Microsoft Corporation - UserMgr.) - C:\WINDOWS\System32\usermgr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wcmsvc.dll (Wcmsvc) . (.Microsoft Corporation - Windows Connection Manager Service DLL.) - C:\WINDOWS\System32\wcmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wecsvc.dll (Wecsvc) . (.Microsoft Corporation - Event Collector Service.) - C:\WINDOWS\System32\wecsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) . (.Microsoft Corporation - Antimalware Service Executable.) - C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\wbem\wmisvc.dll (Winmgmt) . (.Microsoft Corporation - WMI.) - C:\WINDOWS\System32\wbem\WMIsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wlansvc.dll (WlanSvc) . (.Microsoft Corporation - Windows WLAN AutoConfig Service DLL.) - C:\WINDOWS\System32\wlansvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wpnservice.dll (WpnService) . (.Microsoft Corporation - Windows Push Notification System Service.) - C:\WINDOWS\System32\WpnService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\WpnUserService.dll (WpnUserService) . (.Microsoft Corporation - Windows Push Notification User Service.) - C:\WINDOWS\System32\WpnUserService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Windows Push Notifications User Service_6104c (WpnUserService_6104c) . (.Microsoft Corporation - Host Process for Windows Services.) - C:\Windows\System32\svchost.exe =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\wscsvc.dll (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) - C:\WINDOWS\System32\wscsvc.dll [Unsigned] =>.Microsoft Corporation
---\\ Services not Microsoft (SR=Run, SS=Stop) (92) - 25s
SR - Boot [07/12/2019] [ 107320] (3ware) . (.LSI.) - C:\WINDOWS\System32\drivers\3ware.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 1135416] (ADP80XX) . (.PMC-Sierra.) - C:\WINDOWS\System32\drivers\ADP80XX.SYS =>.Microsoft®
SR - Disabl [09/10/2019] [ 3147344] Adobe Genuine Monitor Service (AGMService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe =>.Adobe Inc.®
SR - Disabl [09/10/2019] [ 2914896] Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Inc.®
SR - Demand [07/12/2019] [ 18432] AMD GPIO Client Driver (amdgpio2) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdgpio2.sys [Unsigned] =>.Advanced Micro Devices, Inc
SR - Demand [07/12/2019] [ 45568] AMD I2C Controller Service (amdi2c) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdi2c.sys [Unsigned] =>.Advanced Micro Devices, Inc
SR - Boot [07/12/2019] [ 83256] (amdsata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdsata.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 259384] (amdsbs) . (.AMD Technologies Inc..) - C:\WINDOWS\System32\drivers\amdsbs.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 26936] (amdxata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdxata.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 131896] Adaptec SAS/SATA-II RAID S (arcsas) . (.PMC-Sierra, Inc..) - C:\WINDOWS\System32\drivers\arcsas.sys =>.Microsoft®
SR - Demand [24/04/2019] [ 108504] ASUS Touch Service (AsusPTPDrv) . (.ASUSTek COMPUTER INC..) - C:\WINDOWS\System32\drivers\AsusPTPFilter.sys =>.ASUSTek Computer Inc.®
SR - Disabl [31/01/2019] [ 415992] AtherosSvc (AtherosSvc) . (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\AdminService.exe =>.Qualcomm Atheros®
SR - Demand [21/05/2019] [ 4322552] Qualcomm Extensible Wire (athr) . (.Qualcomm Atheros Communications, Inc..) - C:\WINDOWS\System32\drivers\athw10x.sys =>.Qualcomm Atheros®
SR - Boot [07/12/2019] [ 533816] QLogic Network Adapter VBD (b06bdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\bxvbda.sys =>.Microsoft®
SR - Demand [07/12/2019] [ 9728] bcmfn2 Service (bcmfn2) . (...) - C:\WINDOWS\System32\drivers\bcmfn2.sys [Unsigned] =>.Broadcom Corporation
SR - Auto [30/03/2022] [ 320728] BlueStacks Hypervisor_nxt (BlueStacksDrv_nxt) . (.Bluestack System Inc..) - C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys =>.Bluestack Systems, Inc®
SR - Demand [31/01/2019] [ 69368] BtFilter (BtFilter) . (.Qualcomm.) - C:\WINDOWS\System32\drivers\btfilter.sys =>.Qualcomm Atheros®
SR - Boot [07/12/2019] [ 319800] (cht4iscsi) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4sx64.sys =>.Microsoft®
SR - Demand [07/12/2019] [ 1853752] Chelsio Virtual Bus Driver (cht4vbd) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4vx64.sys =>.Microsoft®
SR - Demand [05/01/2021] [ 3463992] Conexant U (CnxtHdAudService) . (.Conexant Systems Inc..) - C:\WINDOWS\System32\drivers\CHDRT64.sys =>.Synaptics Incorporated®
SS - Demand [11/09/2020] [ 513264] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe =>.Intel(R) pGFX 2020®
SR - Auto [11/09/2020] [ 527600] Intel(R) Content Protection HDCP Service (cplspcon) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe =>.Intel(R) pGFX 2020®
SR - Auto [20/10/2014] [ 207576] @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) . (.Conexant Systems Inc..) - C:\WINDOWS\system32\CxAudMsg64.exe =>.Conexant Systems, Inc.®
SR - Disabl [29/11/2021] [ 130320] Dropbox Update Service (dbupdate) (dbupdate) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
SR - Disabl [29/11/2021] [ 130320] Dropbox Update Service (dbupdatem) (dbupdatem) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
SR - Auto [12/04/2022] [ 45408] DbxSvc (DbxSvc) . (.Dropbox, Inc..) - C:\WINDOWS\System32\DbxSvc.exe =>.Dropbox, Inc®
SR - Demand [18/05/2016] [ 65088] (dptf_cpu) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\dptf_cpu.sys =>.Intel Corporation®
SR - Disabl [16/10/2019] [ 805488] EasyAntiCheat (EasyAntiCheat) . (.EasyAntiCheat Ltd.) - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe =>.EasyAntiCheat Oy®
SR - Boot [07/12/2019] [ 3418936] QLogic 10 Gigabit Ethernet Ada (ebdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\evbda.sys =>.Microsoft®
SR - Auto [19/05/2016] [ 1592064] ESIF Upper Framework Service (esifsvc) . (.Intel Corporation.) - C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe =>.Intel Corporation®
SR - Demand [19/05/2016] [ 343608] (esif_lf) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\esif_lf.sys =>.Intel Corporation®
SS - Demand [09/04/2022] [ 1591184] Google Chrome Elevation Service (GoogleChromeElevationServi (GoogleChromeElevationService) . (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\100.0.4896.88\elevation_service.exe =>.Google LLC®
SR - Disabl [29/02/2020] [ 156104] Google Update Service (gupdate) (gupdate) . (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google LLC®
SR - Disabl [29/02/2020] [ 156104] Google Update Service (gupdatem) (gupdatem) . (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google LLC®
SR - Demand [19/11/2020] [ 32696] ASUS Wireless Radio Control (HIDSwitch) . (.ASUS.) - C:\WINDOWS\System32\drivers\AsRadioControl.sys =>.ASUSTek Computer Inc.®
SR - Boot [07/12/2019] [ 64312] (HpSAMD) . (.Hewlett-Packard Company.) - C:\WINDOWS\System32\drivers\HpSAMD.sys =>.Microsoft®
SR - Demand [07/12/2019] [ 36352] Intel Serial IO GPIO Controlle (iagpio) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iagpio.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [07/12/2019] [ 91136] Intel(R) Serial IO I2C Host Cont (iai2c) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iai2c.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [07/12/2019] [ 79360] Intel(R) S (iaLPSS2i_GPIO2) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [Unsigned] =>.Intel Corporation
SR - Demand [07/12/2019] [ 93184] In (iaLPSS2i_GPIO2_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [Unsigned] =>.Intel Corporation
SR - Demand [07/12/2019] [ 112128] Intel( (iaLPSS2i_GPIO2_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [Unsigned] =>.Intel Corporation
SR - Demand [07/12/2019] [ 96256] Intel( (iaLPSS2i_GPIO2_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [Unsigned] =>.Intel Corporation
SR - Demand [07/12/2019] [ 171520] Intel(R) Seria (iaLPSS2i_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [Unsigned] =>.Intel Corporation
SR - Demand [07/12/2019] [ 175104] Intel( (iaLPSS2i_I2C_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [Unsigned] =>.Intel Corporation
SR - Demand [07/12/2019] [ 177152] Intel(R) S (iaLPSS2i_I2C_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [Unsigned] =>.Intel Corporation
SR - Demand [07/12/2019] [ 177664] Intel(R) S (iaLPSS2i_I2C_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [Unsigned] =>.Intel Corporation
SR - Demand [07/12/2019] [ 38128] Intel(R) Serial IO (iaLPSSi_GPIO) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys =>.Intel Corporation - Client Components Group®
SR - Demand [07/12/2019] [ 113152] Intel(R) Serial IO I (iaLPSSi_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [Unsigned] =>.Intel Corporation
SR - Boot [07/12/2019] [ 884752] Intel Chipset SATA RAI (iaStorAVC) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorAVC.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 412176] Intel RAID Controller Wi (iaStorV) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorV.sys =>.Microsoft®
SR - Demand [07/12/2019] [ 558904] Mellanox InfiniBand Bus/A (ibbus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ibbus.sys =>.Microsoft®
SR - Auto [05/01/2021] [ 817432] ICEsoundService (ICEsoundService) . (.ICEpower A/S.) - C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe {0B9DE2343AC13F9FDF2BC2D7F3A6C200}. =>.ICEpower a/s
SR - Auto [11/09/2020] [ 41200] Intel(R) Graphics Command Center Service (igccservice) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe =>.Intel(R) pGFX 2020®
SR - Demand [11/09/2020] [27076848] (igfx) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\igdkmd64.sys =>.Intel(R) pGFX 2020®
SR - Auto [11/09/2020] [ 409328] Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe =>.Intel(R) pGFX 2020®
SR - Demand [11/09/2020] [ 349936] Intel(R) Display Audio (IntcDAud) . (.Intel(R) Corporation.) - C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_1b570d7b9a790b1a\IntcDAud.sys =>.Intel(R) pGFX 2020®
SR - Boot [07/12/2019] [ 172344] (ItSas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\ItSas35i.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 108856] (LSI_SAS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 124216] (LSI_SAS2i) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas2i.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 135992] (LSI_SAS3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\lsi_sas3i.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 82744] (LSI_SSS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sss.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 59704] (megasas) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 81720] (megasas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\MegaSas2i.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 105480] (megasas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas35i.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 575800] (megasr) . (.LSI Corporation, Inc..) - C:\WINDOWS\System32\drivers\megasr.sys =>.Microsoft®
SR - Demand [14/04/2016] [ 202848] Intel(R) Management Engine Interfac (MEIx64) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group®
SR - Demand [07/12/2019] [ 1131320] Mellanox ConnectX Bus E (mlx4_bus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\mlx4_bus.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 63800] (mvumis) . (.Marvell Semiconductor, Inc..) - C:\WINDOWS\System32\drivers\mvumis.sys =>.Microsoft®
SR - Demand [07/12/2019] [ 146232] NetworkDirect Service (ndfltr) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ndfltr.sys =>.Microsoft®
SR - Demand [18/04/2020] [ 37824] VPN Client Device Driver (Neo_VPN) . (.SoftEther Corporation.) - C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys =>.SoftEther Corporation®
SR - Demand [10/01/2020] [ 23040] Apple Mobile Device Ethernet Service (Netaapl) . (.Apple Inc..) - C:\WINDOWS\System32\drivers\netaapl64.sys [Unsigned] =>.Apple Inc.
SS - Demand [00/00/0000] [ 0] nProtect GameGuard Service (npggsvc) . (...) - C:\Windows\System32\GameMon.des (.not file.) [Unsigned] =>.INCA Internet
SR - Auto [12/04/2020] [ 883088] NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation.) - C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
SR - Demand [12/04/2020] [23446760] (nvlddmkm) . (.NVIDIA Corporation.) - C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\nvlddmkm.sys =>.NVIDIA Corporation®
SR - Boot [07/12/2019] [ 150328] (nvraid) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvraid.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 166200] (nvstor) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvstor.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 58680] (percsas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas2i.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 68408] (percsas3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas3i.sys =>.Microsoft®
SR - Demand [19/03/2020] [ 1162832] Realtek RT640 NT Driver (rt640x64) . (.Realtek.) - C:\WINDOWS\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp.®
SR - Auto [27/10/2016] [ 416576] Conexant SmartAudio service (SAService) . (.Conexant Systems, Inc..) - C:\Windows\System32\SASrv.exe =>.Conexant Systems, Inc.®
SR - System [18/04/2020] [ 50624] SoftEther Lightweight Networ (SeLow) . (.SoftEther Corporation.) - C:\WINDOWS\System32\DRIVERS\SeLow_x64.sys =>.SoftEther Corporation®
SR - Boot [07/12/2019] [ 44856] (SiSRaid2) . (.Silicon Integrated Systems Corp..) - C:\WINDOWS\System32\drivers\SiSRaid2.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 81720] (SiSRaid4) . (.Silicon Integrated Systems.) - C:\WINDOWS\System32\drivers\sisraid4.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 209720] (SmartSAMD) . (.Microsemi Corportation.) - C:\WINDOWS\System32\drivers\SmartSAMD.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 31032] (stexstor) . (.Promise Technology, Inc..) - C:\WINDOWS\System32\drivers\stexstor.sys =>.Microsoft®
SR - Demand [02/12/2019] [ 31232] TAP-Win32 Adapter V9 (tap0901) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\tap0901.sys [Unsigned] =>.The OpenVPN Project
SR - Demand [29/06/2020] [ 812208] tesrsdt (tesrsdt) . (.TENCENT.) - C:\Windows\system32\drivers\tesrsdt.sys =>.Tencent Technology(Shenzhen) Company Limited®
SR - Demand [29/06/2020] [ 581912] UniSafe (UniSafe) . (.TENCENT.) - C:\Windows\system32\drivers\UniSafe.sys =>.Tencent Technology(Shenzhen) Company Limited®
SR - Boot [07/12/2019] [ 166712] (vsmraid) . (.VIA Technologies Inc.,Ltd.) - C:\WINDOWS\System32\drivers\vsmraid.sys =>.Microsoft®
SR - Boot [07/12/2019] [ 305464] VIA StorX Storage RAID Co (VSTXRAID) . (.VIA Corporation.) - C:\WINDOWS\System32\drivers\vstxraid.sys =>.Microsoft®
SR - Demand [07/12/2019] [ 36152] WinMad Service (WinMad) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winmad.sys =>.Microsoft®
SR - Demand [07/12/2019] [ 73016] WinVerbs Service (WinVerbs) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winverbs.sys =>.Microsoft®
---\\ Task Planned Automatically (Register) (16) - 12s
O38 - TASK: {21F74A47-3424-418E-A53B-4E2562C05ABA} [64Bits][\DropboxUpdateTaskMachineCore] - (.Dropbox, Inc. - Dropbox Update.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320] =>.Dropbox, Inc.
O38 - TASK: {8B831FA3-91A3-4CA8-8115-CED07AB87029} [64Bits][\CCleaner Update] - (.Piriform - Piriform CCleaner emergency updater.) -- C:\Program Files\CCleaner\CCUpdate.exe [684976] =>.Piriform
O38 - TASK: {A35BAD01-9115-4CE5-8E83-CE0363167108} [64Bits][\AdobeGCInvoker-1.0] - (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400] =>.Adobe Systems, Incorporated
O38 - TASK: {B40A30F0-F3F8-4F31-B890-EEC38512349B} [64Bits][\Microsoft\Windows\Conexant\SA2] - (.Conexant Systems, Inc. - SmartAudio CPL (32bit).) -- C:\Program Files\CONEXANT\SAII\SACpl.exe [1832280] =>.Conexant Systems, Inc.
O38 - TASK: {C630BFDF-4B2F-4271-9B1F-2DB64E5A7F09} [64Bits][\BlueStacksHelper_nxt] - (.BlueStack Systems, Inc. - BlueStacks Helper.) -- C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [275136] =>.BlueStack Systems, Inc.
O38 - TASK: {DC0F9DAF-1B83-45D9-AA91-B9C6BD78042B} [64Bits][\DropboxUpdateTaskMachineUA] - (.Dropbox, Inc. - Dropbox Update.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320] =>.Dropbox, Inc.
O38 - TASK: {E8D71E94-B741-496F-BAFF-AFADFF2255A0} [64Bits][\Microsoft\Windows\Conexant\AFA] - (.Conexant Systems, Inc. - SmartAudio CPL (32bit).) -- C:\Program Files\CONEXANT\cAudioFilterAgent\SACpl.exe [1823232] =>.Conexant Systems, Inc.
O38 - TASK: {EF5C000F-603E-4C0E-B31C-A6C10E91FE43} [64Bits][\CCleanerSkipUAC - Ganja] - (.Piriform Software Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [30836464] =>.Piriform Software Ltd
C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore - (.Dropbox, Inc..) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [/c] =>.Dropbox, Inc.
C:\WINDOWS\System32\Tasks\CCleaner Update - (.Piriform.) -- C:\Program Files\CCleaner\CCUpdate.exe [] =>.Piriform
C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0 - (.Adobe Systems, Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [-mode=scheduled] =>.Adobe Systems, Incorporated
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Conexant\SA2 - (.Conexant Systems, Inc..) -- C:\Program Files\CONEXANT\SAII\SACpl.exe [/c ./c] =>.Conexant Systems, Inc.
C:\WINDOWS\System32\Tasks\BlueStacksHelper_nxt - (.BlueStack Systems, Inc..) -- C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [-sr] =>.BlueStack Systems, Inc.
C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA - (.Dropbox, Inc..) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [/ua ./ua] =>.Dropbox, Inc.
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Conexant\AFA - (.Conexant Systems, Inc..) -- C:\Program Files\CONEXANT\cAudioFilterAgent\SACpl.exe [/uid:cAudioFilterAgent] =>.Conexant Systems, Inc.
C:\WINDOWS\System32\Tasks\CCleanerSkipUAC - Ganja - (.Piriform Software Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [$(Arg0)] =>.Piriform Software Ltd
---\\ Auto loading programs from Registry and folders (9) - 3s
O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Security notification icon.) -- C:\WINDOWS\system32\SecurityHealthSystray.exe [Unsigned] =>.Microsoft Corporation
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated®
O4 - HKLM\..\Run: [AdobeGCInvoker-1.0] . (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe =>.Adobe Inc.®
O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe =>.Microsoft®
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] . (.Piriform Software Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Software Ltd®
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive (32 bit) Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive (32 bit) Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKLM\..\Wow6432Node\Run: [Dropbox] . (.Dropbox, Inc. - Dropbox.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe =>.Dropbox, Inc®
O4 - HKUS\S-1-5-21-3947486154-1424391867-2577238500-1001\..\Run: [CCleaner Smart Cleaning] . (.Piriform Software Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Software Ltd®
---\\ Process running (34) - 6s
[MD5.B9B6CA44BB89F814084D04B7DCF85ED6] - (.Intel Corporation - Intel HD Graphics Drivers for Windows(R).) -- C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe [527600] [PID.1500] =>.Intel(R) pGFX 2020®
[MD5.5E7EA9CA8FBA5925C184BE86EC90D2C5] - (.Intel Corporation - IntelCpHeciSvc Executable.) -- C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe [513264] [PID.1668] =>.Intel(R) pGFX 2020®
[MD5.FA982D3189B9D683D4EE8F814F11D992] - (.NVIDIA Corporation - NVIDIA Container.) -- C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\Display.NvContainer\NVDisplay.Container.exe [883088] [PID.1676] =>.NVIDIA Corporation®
[MD5.00FA87158A61EDD41D7DC71BF435A711] - (.Intel Corporation - igfxCUIService Module.) -- C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe [409328] [PID.2276] =>.Intel(R) pGFX 2020®
[MD5.FA982D3189B9D683D4EE8F814F11D992] - (.NVIDIA Corporation - NVIDIA Container.) -- C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\Display.NvContainer\NVDisplay.Container.exe [883088] [PID.2552] =>.NVIDIA Corporation®
[MD5.6BAD46883E1336C4C8D6A6EEB6304C00] - (.Dropbox, Inc. - Dropbox Service.) -- C:\Windows\System32\DbxSvc.exe [45408] [PID.3496] [Unsigned] =>.Dropbox, Inc.
[MD5.320D14F293288A92A67FAE822624D3E7] - (.Intel Corporation - Intel® Graphics Command Center Service.) -- C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe [41200] [PID.3568] =>.Intel(R) pGFX 2020®
[MD5.8F6A6F22FF33DECBBC89F574CB54A2F3] - (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [1592064] [PID.3576] [Unsigned] =>.Intel Corporation
[MD5.07F3534C07C5110E9A424C04634C4A8D] - (.Conexant Systems Inc. - Conexant Audio Message Service.) -- C:\WINDOWS\system32\CxAudMsg64.exe [207576] [PID.3592] [Unsigned] =>.Conexant Systems Inc.
[MD5.6F3A5BDDFC17DD4A3E0F9F8AC809C5FD] - (.Conexant Systems, Inc. - SmartAudio Service Application.) -- C:\Windows\System32\SASrv.exe [416576] [PID.3600] =>.Conexant Systems, Inc.®
[MD5.9881CA7CD8792905DDA7109613B5F055] - (.ICEpower A/S - ICEpower ICEsound APO service.) -- C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe [817432] [PID.3620] {0B9DE2343AC13F9FDF2BC2D7F3A6C200}. =>.ICEpower a/s
[MD5.01DDF9BC7198C71B445ED89B8EDD660B] - (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\Windows\Temp\DPTF\esif_assist_64.exe [254184] [PID.4464] =>.Intel Corporation®
[MD5.8EE9FF6DC61DC96A69FF9DB0F3F30A98] - (.Intel Corporation - igfxEM Module.) -- C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe [896752] [PID.1368] =>.Intel(R) pGFX 2020®
[MD5.5CDDF06A40E89358807A2B9506F064D9] - (...) -- C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe [793416] [PID.2680] =>.Microsoft®
[MD5.D96679A3D3095F8C7392807803CF3F10] - (.Intel Corporation - IGCCTray.) -- C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3407.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe [356864] [PID.6596] [Unsigned] =>.Intel Corporation
[MD5.1DB4EE21CDF12711DA62D0361EFE33AB] - (.Intel Corporation - IGCC.) -- C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3407.0_x64__8j3eq9eme6ctt\IGCC.exe [20480] [PID.6832] [Unsigned] =>.Intel Corporation
[MD5.0D769AB9BF218DAC9B3E6D257B3BFAC2] - (.Conexant Systems, Inc. - Conexant High Definition Audio Filter Agent.) -- C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe [604496] [PID.7032] =>.Conexant Systems LLC®
[MD5.3892AD0CC7DC6564D98EA5894A709857] - (.Conexant Systems, Inc - SmartAudio.) -- C:\Program Files\CONEXANT\SAII\SmartAudio.exe [1100112] [PID.2664] =>.Conexant Systems LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.1784] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.7132] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.1240] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.3176] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.4400] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.6304] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.2040] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.1012] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.5104] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.5232] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.1144] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.6356] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.1056] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.1224] =>.Google LLC®
[MD5.BCFA5D72AB9F48067167E169ED8A8215] - (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2596240] [PID.6288] =>.Google LLC®
[MD5.AD397F4A6B926C7E65FC9B4B59B4573E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Ganja\ZHPDiag3.exe [3287240] [PID.6732] [Unsigned] =>.Nicolas Coolman
---\\ Google Chrome, Start,Search,Extensions (3) - 0s
G2 - GCE: Preference [Ganja][User Data\Default\Extensions] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [Ganja][User Data\Default\Local Extension Settings] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [Ganja][User Data\Default\Local Extension Settings] [glcimepnljoholdmjchkloafkggfoijh] =>.Legitimate
---\\ Internet Explorer Extensions, Start, Search (15) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Browser.) (11.00.19041.1503 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation
---\\ INTERNET EXPLORER, trusted site and sensitive site (1) - 0s
~ Microsoft Internet Explorer Restricted Site(s) Domains: 0(Good) / 0(Bad)
---\\ Internet Explorer, Proxy Management (3) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft
---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=
---\\ Hosts file redirection (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (1)
---\\ Browser Helper Object (BHO) (1) - 0s
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft®
---\\ Global shortcuts Startup (63) - 8s
O4 - GS\Desktop [Administrator]: BloonsTK.exe - Shortcut.lnk . (.ClassicTK - ClassicTK.) C:\Games\BloonsTK\BloonsTK.exe [Unsigned]
O4 - GS\Desktop [Administrator]: ESET Online Scanner.lnk . (...) C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [Unsigned]
O4 - GS\Desktop [Administrator]: Redfinger.lnk . (...) C:\Program Files (x86)\RedFingerPlayerGlobal\RedFingerPlayerGlobal.exe [Unsigned]
O4 - GS\Desktop [Administrator]: RöX.lnk . (.BlueStack Systems - .) C:\Program Files (x86)\BlueStacks_nxt\HD-Player.exe --instance Nougat32 --cmd launchApp --package "com.play.rosea" [Unsigned] =>.BlueStack Systems
O4 - GS\Desktop [Administrator]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\Ganja\AppData\Roaming\ZHP\ZHPCleaner.exe [Unsigned] =>.Nicolas Coolman
O4 - GS\Desktop [Administrator]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Ganja\ZHPDiag3.exe [Unsigned] =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrator]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\sendTo [Administrator]: Bluetooth File Transfer.LNK . (.Microsoft Corporation - Transfers files between device.) C:\Windows\System32\fsquirt.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\sendTo [Administrator]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo [Unsigned] =>.Microsoft Corporation
O4 - GS\TaskBar [Administrator]: CCleaner.lnk . (.Piriform Software Ltd - .) C:\Program Files (x86)\CCleaner\CCleaner64.exe [Unsigned] =>.Piriform Software Ltd
O4 - GS\TaskBar [Administrator]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\TaskBar [Administrator]: Microsoft Edge.lnk . (...) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --profile-directory=Default [Unsigned]
O4 - GS\TaskBar [Administrator]: x64dbg.lnk . (.x64dbg.com - x64dbg.) C:\debugger\release\x96dbg.exe {4E0B86EECF78E905EF7CA498D841EA16}. =>.x64dbg.com
O4 - GS\Programs [Administrator]: ESET Online Scanner.lnk . (...) C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [Unsigned]
O4 - GS\Desktop [Ganja]: BloonsTK.exe - Shortcut.lnk . (.ClassicTK - ClassicTK.) C:\Games\BloonsTK\BloonsTK.exe [Unsigned]
O4 - GS\Desktop [Ganja]: ESET Online Scanner.lnk . (...) C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [Unsigned]
O4 - GS\Desktop [Ganja]: Redfinger.lnk . (...) C:\Program Files (x86)\RedFingerPlayerGlobal\RedFingerPlayerGlobal.exe [Unsigned]
O4 - GS\Desktop [Ganja]: RöX.lnk . (.BlueStack Systems - .) C:\Program Files (x86)\BlueStacks_nxt\HD-Player.exe --instance Nougat32 --cmd launchApp --package "com.play.rosea" [Unsigned] =>.BlueStack Systems
O4 - GS\Desktop [Ganja]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\Ganja\AppData\Roaming\ZHP\ZHPCleaner.exe [Unsigned] =>.Nicolas Coolman
O4 - GS\Desktop [Ganja]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Ganja\ZHPDiag3.exe [Unsigned] =>.Nicolas Coolman
O4 - GS\Quicklaunch [Ganja]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\sendTo [Ganja]: Bluetooth File Transfer.LNK . (.Microsoft Corporation - Transfers files between device.) C:\Windows\System32\fsquirt.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\sendTo [Ganja]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo [Unsigned] =>.Microsoft Corporation
O4 - GS\TaskBar [Ganja]: CCleaner.lnk . (.Piriform Software Ltd - .) C:\Program Files (x86)\CCleaner\CCleaner64.exe [Unsigned] =>.Piriform Software Ltd
O4 - GS\TaskBar [Ganja]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\TaskBar [Ganja]: Microsoft Edge.lnk . (...) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --profile-directory=Default [Unsigned]
O4 - GS\TaskBar [Ganja]: x64dbg.lnk . (.x64dbg.com - x64dbg.) C:\debugger\release\x96dbg.exe {4E0B86EECF78E905EF7CA498D841EA16}. =>.x64dbg.com
O4 - GS\Programs [Ganja]: ESET Online Scanner.lnk . (...) C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [Unsigned]
O4 - GS\Desktop [Guest]: BloonsTK.exe - Shortcut.lnk . (.ClassicTK - ClassicTK.) C:\Games\BloonsTK\BloonsTK.exe [Unsigned]
O4 - GS\Desktop [Guest]: ESET Online Scanner.lnk . (...) C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [Unsigned]
O4 - GS\Desktop [Guest]: Redfinger.lnk . (...) C:\Program Files (x86)\RedFingerPlayerGlobal\RedFingerPlayerGlobal.exe [Unsigned]
O4 - GS\Desktop [Guest]: RöX.lnk . (.BlueStack Systems - .) C:\Program Files (x86)\BlueStacks_nxt\HD-Player.exe --instance Nougat32 --cmd launchApp --package "com.play.rosea" [Unsigned] =>.BlueStack Systems
O4 - GS\Desktop [Guest]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\Ganja\AppData\Roaming\ZHP\ZHPCleaner.exe [Unsigned] =>.Nicolas Coolman
O4 - GS\Desktop [Guest]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Ganja\ZHPDiag3.exe [Unsigned] =>.Nicolas Coolman
O4 - GS\Quicklaunch [Guest]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\sendTo [Guest]: Bluetooth File Transfer.LNK . (.Microsoft Corporation - Transfers files between device.) C:\Windows\System32\fsquirt.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\sendTo [Guest]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo [Unsigned] =>.Microsoft Corporation
O4 - GS\TaskBar [Guest]: CCleaner.lnk . (.Piriform Software Ltd - .) C:\Program Files (x86)\CCleaner\CCleaner64.exe [Unsigned] =>.Piriform Software Ltd
O4 - GS\TaskBar [Guest]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\TaskBar [Guest]: Microsoft Edge.lnk . (...) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --profile-directory=Default [Unsigned]
O4 - GS\TaskBar [Guest]: x64dbg.lnk . (.x64dbg.com - x64dbg.) C:\debugger\release\x96dbg.exe {4E0B86EECF78E905EF7CA498D841EA16}. =>.x64dbg.com
O4 - GS\Programs [Guest]: ESET Online Scanner.lnk . (...) C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [Unsigned]
O4 - GS\CommonDesktop [Public]: Binance.lnk . (.BinanceTech - Binance.) C:\Program Files\Binance\Binance.exe =>.Binance Holdings Limited®
O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Software Ltd - .) C:\Program Files (x86)\CCleaner\CCleaner64.exe [Unsigned] =>.Piriform Software Ltd
O4 - GS\Programs [Public]: ESET Online Scanner.lnk . (...) C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [Unsigned]
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft®
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Notepad.) C:\WINDOWS\system32\notepad.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Remote Desktop Connection.) C:\WINDOWS\system32\mstsc.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Snipping Tool.) C:\WINDOWS\system32\SnippingTool.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Steps Recorder.) C:\WINDOWS\system32\psr.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Windows Wordpad Application.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Character Map.) C:\WINDOWS\system32\charmap.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Binance.lnk . (.BinanceTech - Binance.) C:\Program Files\Binance\Binance.exe =>.Binance Holdings Limited®
O4 - GS\ProgramsCommon [Public]: BlueStacks 5 Multi-Instance Manager.lnk . (.BlueStack Systems - BlueStacks 5 Multi-Instance Ma.) C:\Program Files (x86)\BlueStacks_nxt\HD-MultiInstanceManager.exe [Unsigned] =>.BlueStack Systems
O4 - GS\ProgramsCommon [Public]: BlueStacks 5.lnk . (.BlueStack Systems - BlueStacks 5.lnk.) C:\Program Files (x86)\BlueStacks_nxt\HD-Player.exe --instance Nougat32 [Unsigned] =>.BlueStack Systems
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: PC Health Check.lnk . (...) C:\Program Files (x86)\PCHealthCheck\PCHealthCheck.exe [Unsigned] =>.Microsoft Corporation
---\\ Lop.com/Domain Hijackers (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.193 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{bff8e11e-7cb0-43cd-8ed2-84f8481e005d}: DhcpNameServer = 192.168.43.193 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{fc72d37d-562e-4e97-a7cf-ea1989188cd8}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
---\\ Extra protocols (24) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft®
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation®
---\\ AppInit_DLLs Registry value Autorun (1) - 0s
O20 - Winlogon : UserInit . (.Microsoft Corporation - Userinit Log-on Application.) - C:\Windows\system32\userinit.exe =>.Microsoft Corporation
---\\ List of key exploring StartupApproved (24) - 1s
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive =>.Microsoft Corporation
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]iscord =>.SUP.Discord
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:IDMan =>.Tonec Inc
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Steam =>.Valve
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:NoxMultiPlayer
[HKEY_USERS\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive =>.Microsoft Corporation
[HKEY_USERS\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
[HKEY_USERS\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd
[HKEY_USERS\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:IDMan =>.Tonec Inc
[HKEY_USERS\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Steam =>.Valve
[HKEY_USERS\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:NoxMultiPlayer
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SecurityHealth =>.Microsoft Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AdobeAAMUpdater-1.0 =>.Adobe Inc.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AdobeGCInvoker-1.0
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:iTunesHelper =>.Apple Inc.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:BCSSync =>.Microsoft Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SoftEther VPN Client UI Helper
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:RazerCortex =>.Razer Inc
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AdobeAAMUpdater-1.0 =>.Adobe Inc.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AdobeGCInvoker-1.0
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:SecurityHealth =>.Microsoft Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder]:SoftEther VPN Client Manager Startup.lnk
---\\ ASIC (ActiveSetup Installed Components) (6) - 1s
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Microsoft Windows Media Player Setup Utilit.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Microsoft Windows Media Player Setup Utilit.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialisation Utility.) -- C:\Windows\System32\ie4uinit.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll =>.Microsoft®
O40 - ASIC: Google Chrome [64Bits] - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google LLC - Google Chrome Installer.) -- C:\Program Files (x86)\Google\Chrome\Application\100.0.4896.88\Installer\chrmstp.exe =>.Google LLC®
---\\ Software installed (178) - 29s
O42 - Logiciel: 7-Zip 21.07 (x64) - (.Igor Pavlov.) [HKLM][64Bits] -- 7-Zip [Unsigned] =>.Igor Pavlov
O42 - Logiciel: AutoHotkey 1.1.33.10 - (.Lexikos.) [HKLM][64Bits] -- AutoHotkey [Unsigned] =>.Lexikos
O42 - Logiciel: BlueStacks 5 - (.BlueStack Systems, Inc..) [HKLM][64Bits] -- BlueStacks_nxt {0BB14E1AFFF5879B9717256081844B4E}. =>.BlueStack Systems, Inc.
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Software Ltd®
O42 - Logiciel: Cheat Engine 7.0 - (.Cheat Engine.) [HKLM][64Bits] -- Cheat Engine 7.0_is1 =>.Cheat Engine®
O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM][64Bits] -- CNXT_AUDIO_HDA =>.Conexant Systems LLC®
O42 - Logiciel: Definition Update for Microsoft Office 2010 (KB3115475) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{2F7967D2-535C-4D3A-AEE8-CC9C204E7586} =>.Microsoft Corporation®
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKLM][64Bits] -- Dropbox =>.Dropbox, Inc®
O42 - Logiciel: Dropbox Update Helper - (.Dropbox, Inc..) [HKLM][64Bits] -- {099218A5-A723-43DC-8DB5-6173656A1E94} [Unsigned] =>.Dropbox, Inc. (Hidden)
O42 - Logiciel: Google Chrome - (.Google LLC.) [HKLM][64Bits] -- Google Chrome =>.Google LLC®
O42 - Logiciel: Intel(R) Graphics Driver Software - (.Intel.) [HKLM][64Bits] -- {7d2bdb54-268a-4ce6-8063-a6cad97dba41} =>.IntelGfxReleaseExternal2020® (Hidden)
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel®
O42 - Logiciel: Microsoft .NET Core 3.1 Templates 3.1.417 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {24764607-7353-45A3-B41D-B0E27DFD9324} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core AppHost Pack - 3.1.23 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {832FC239-AE54-4957-AFC3-67A723C2883C} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core AppHost Pack - 3.1.23 (x64_arm) - (.Microsoft Corporation.) [HKLM][64Bits] -- {643977DC-2D85-4198-B73B-D287098396F8} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core AppHost Pack - 3.1.23 (x64_arm64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {B0D52F62-1A2D-4023-8799-E8554E7E913E} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core AppHost Pack - 3.1.23 (x64_x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {112516EB-23D5-4F3A-AD7B-3AB68DC30E72} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Host - 2.1.30 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {8FD66631-B964-4E12-92E1-A8A4CAD5D14C} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Host - 3.1.23 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {9C7A4D28-C2E1-4CA7-A1F3-603049ED2937} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Host - 3.1.23 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {50C787F3-AD71-498F-96AE-748293C32704} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Host FX Resolver - 2.1.30 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {EB291DFA-DEDE-4355-98D9-17F95E91C437} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Host FX Resolver - 3.1.23 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {7FF9BE57-3115-4282-BC9A-7FAB77C27235} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Host FX Resolver - 3.1.23 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {C3E7A321-C146-47B7-9E3B-706A21031272} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Runtime - 2.1.30 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {92A0517D-D5F9-4D8F-87F9-83ABC04240C2} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Runtime - 2.1.30 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {e6e5b73d-9aea-4a61-9110-4f93d1b9bc75} =>.Microsoft®
O42 - Logiciel: Microsoft .NET Core Runtime - 3.1.23 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {81EDF4A0-FC57-48C3-B26A-E90C2DC266CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Runtime - 3.1.23 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {E40BC6AB-5820-4457-A2B9-2C628F8C7BFA} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core SDK 3.1.417 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {544cc8ed-e21c-4242-ab28-a1e70824f769} =>.Microsoft®
O42 - Logiciel: Microsoft .NET Core Targeting Pack - 3.1.0 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {31EDE1E7-C855-4633-9D73-56F566136567} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Core Toolset 3.1.417 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {40E525F8-4526-456F-8B8F-D74A40D2D019} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Framework 4.8 SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {949C0535-171C-480F-9CF4-D25C9E60FE88} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Standard Targeting Pack - 2.1.0 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {A7036CFB-B403-4598-85FF-D397ABB88173} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft ASP.NET Core 2.1.30 - Shared Framework - (.Microsoft Corporation.) [HKLM][64Bits] -- {614a1747-bef3-44e7-86a8-799e4d2ab88d} =>.Microsoft®
O42 - Logiciel: Microsoft ASP.NET Core 2.1.30 Shared Framework (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {3F0FA3FE-95FA-3B48-ABD1-46FB4DA4021E} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft ASP.NET Core 3.1.10 Targeting Pack (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {FEA48357-CE2F-3ED0-B2A0-8548BEC6F111} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft ASP.NET Core 3.1.23 - Shared Framework (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {8956749b-efd9-463b-9bcf-697d196c0c8a} =>.Microsoft®
O42 - Logiciel: Microsoft ASP.NET Core 3.1.23 Shared Framework (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {5673D71A-7C3A-3C2E-BF77-EA4890864EE4} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft ASP.NET Core 3.1.23 Shared Framework (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {BF9694C8-23BA-3602-991A-1008206AB753} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Excel 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- Office14.EXCEL =>.Microsoft®
O42 - Logiciel: Microsoft Office Excel 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Excel MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0016-0409-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Office 32-bit Components 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proof (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-0409-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proof (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-040C-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proof (Spanish) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-0C0A-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proofing (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-002C-0409-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Shared 32-bit MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0043-0409-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Shared MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-006E-0409-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Shared Setup Metadata MUI (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0115-0409-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Update Health Tools - (.Microsoft Corporation.) [HKLM][64Bits] -- {7B1FCD52-8F6B-4F12-A143-361EA39F5E7C} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {071c9b48-7c32-4621-a0ac-3f809523288f} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {ad8a2fa1-06e7-4b0d-927d-6e54b3d31028} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8220EEFE-38CD-377E-8595-13398D740ACE} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM][64Bits] -- {5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D8E6291-B0D5-35EC-8441-6616F567A0F7} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {37B8F9C7-03FB-3253-8781-2517C99D7C00} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {B175520C-86A2-35A7-8619-86DC379688B9} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BD95A8CD-1D9F-35AD-981A-3E7925026EBB} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 - (.Microsoft Corporation.) [HKLM][64Bits] -- {050d4fc8-5d48-4b8f-8972-47c82c46020f} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 - (.Microsoft Corporation.) [HKLM][64Bits] -- {f65db027-aff3-4070-886a-0d87064aabb1} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] -- {929FBD26-9020-399B-9A7A-751D61F0B942} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] -- {A749D8E6-B613-3BE3-8F5F-045C84EBA29B} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] -- {13A4EE12-23EA-3371-91EE-EFB36DDFFF3E} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 - (.Microsoft Corporation.) [HKLM][64Bits] -- {6913e92a-b64e-41c9-a5e6-cef39207fe89} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 - (.Microsoft Corporation.) [HKLM][64Bits] -- {65e650ff-30be-469d-b63a-418d71ea1765} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 - (.Microsoft Corporation.) [HKLM][64Bits] -- {EEA66967-97E2-4561-A999-5C22E3CDE428} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 - (.Microsoft Corporation.) [HKLM][64Bits] -- {0FA68574-690B-4B00-89AA-B28946231449} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2BC3BD4D-FABA-4394-93C7-9AC82A263FE2} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {9495AEB4-AB97-39DE-8C42-806EEF75ECA7} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Visual Studio 2010 Tools for Office Runtime (x64) =>.Microsoft®
O42 - Logiciel: Microsoft Windows Desktop Runtime - 3.1.23 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {4456FDE5-AAE9-4E03-9B34-0D9A476CEF5A} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Windows Desktop Runtime - 3.1.23 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {32D405E8-E1B0-4E1D-BCFF-B9FE5AB15F7E} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Windows Desktop Runtime - 3.1.23 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {b8f5b50f-4b72-421e-ac78-130b4bce05d1} =>.Microsoft®
O42 - Logiciel: Microsoft Windows Desktop Targeting Pack - 3.1.0 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {7519423C-A977-4160-83A2-48633600A216} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: MSVCRT Redists - (.MAGIX Computer Products Intl. Co..) [HKLM][64Bits] -- {E83D6FA1-B27C-11E9-B0DB-A5146957F833} [Unsigned] =>.MAGIX Computer Products Intl. Co. (Hidden)
O42 - Logiciel: NVIDIA Graphics Driver 445.87 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver [Unsigned] =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA PhysX System Software 9.21.0713 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX [Unsigned] =>.NVIDIA Corporation
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Redfinger - (.REDFINGER CLOUD PHONE.) [HKLM][64Bits] -- Redfinger [Unsigned]
O42 - Logiciel: SciTE4AutoHotkey v3.0.06.01 - (.fincs.) [HKLM][64Bits] -- SciTE4AutoHotkey [Unsigned]
O42 - Logiciel: Security Update for Microsoft Access 2010 (KB4484385) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{8BF74FCB-3035-4DFF-BB71-FC05B1714AE2} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Excel 2010 (KB3017810) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{29A8C5C7-8B7E-4175-97ED-D653E9FBCAD5} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Excel 2010 (KB3017810) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0409-1000-0000000FF1CE}_Office14.EXCEL_{F36EA81A-47DA-41E2-B81B-40A1FB8A2753} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Excel 2010 (KB3017810) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{29A8C5C7-8B7E-4175-97ED-D653E9FBCAD5} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Excel 2010 (KB3017810) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0409-1000-0000000FF1CE}_Office14.EXCEL_{F36EA81A-47DA-41E2-B81B-40A1FB8A2753} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft InfoPath 2010 (KB3114414) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{B78E5386-2F91-4CB4-A8CF-F5582CF3C920} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553313) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{A97FC79A-3344-410B-8E6B-95931B630C42} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553313) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{A97FC79A-3344-410B-8E6B-95931B630C42} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553332) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{0CC3786B-BA15-44EA-9210-3C3B1545EB8B} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553332) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{0CC3786B-BA15-44EA-9210-3C3B1545EB8B} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553491) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0409-1000-0000000FF1CE}_Office14.EXCEL_{FB2AE127-529A-4105-8836-3676B1D30FAB} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2589361) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{DBA66980-EE63-43AC-AFAC-A2420C199328} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2850016) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{DEE523DB-C590-45D3-B658-73F93062D7B3} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2880971) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{C7B639A9-54A9-4B30-87AA-45BD4F06E1A6} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2920748) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{58C697C0-E8B1-4AF2-9352-292877352216} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2956076) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-006E-0409-1000-0000000FF1CE}_Office14.EXCEL_{2CE7AC23-5E40-43BD-8DA3-8D17677D8199} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB3114565) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{7DF0FA0F-0C50-4065-91BE-E890C68BD33D} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB3191908) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{E6C29785-2909-4FAA-8A61-085F2F1D92A0} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB3203468) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0409-1000-0000000FF1CE}_Office14.EXCEL_{BABE5F32-A2B5-498E-BCB5-1325170A8F56} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB3203468) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-040C-1000-0000000FF1CE}_Office14.EXCEL_{569742BC-C32F-4C9C-9B21-18409AFF9599} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB3203468) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0C0A-1000-0000000FF1CE}_Office14.EXCEL_{512A0E32-6C63-4C73-9C82-FC1B10668ED8} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB3213626) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-006E-0409-1000-0000000FF1CE}_Office14.EXCEL_{437ECECB-17E8-4AC7-AF9E-F8A4308BBCC8} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB3213631) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{6BE89FBA-5B21-4752-85A2-1DE104A9F5DD} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB4011610) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-006E-0409-1000-0000000FF1CE}_Office14.EXCEL_{C799AC81-98A1-49EF-AA41-46F4534FAE06} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB4022206) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{8692BFE2-0A72-4503-A687-5B96B0815E76} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB4022206) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-006E-0409-1000-0000000FF1CE}_Office14.EXCEL_{8692BFE2-0A72-4503-A687-5B96B0815E76} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB4022208) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{337BCB84-C6C1-48F9-8370-425383A667CB} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB4484455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{1CB487A7-9FC0-42DF-A550-B80291521A3A} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB4493143) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{65C22C4A-7374-42B3-9215-6CA7CCA92CCE} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB4504738) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{6C7AE074-5411-4DB8-B9A3-8F7A6F046771} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB4504738) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{6C7AE074-5411-4DB8-B9A3-8F7A6F046771} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB4504739) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{E4848FE8-F0C1-43A3-84E8-3205B25C7AB0} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft OneNote 2010 (KB3114885) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{31243FE5-01D6-47AF-9A5E-6D021AA63358} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft PowerPoint 2010 (KB4504702) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{3935073D-AED7-4467-B884-CAA9680F90AB} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Project 2010 (KB4484463) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{46BA48B6-73B5-41AE-992B-5B073F035616} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Publisher 2010 (KB4032216) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{3F276C56-7A71-4B02-9E30-C332785D34A3} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Visio 2010 (KB4484376) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{B9582F02-1DFC-4E97-AAE5-FD4F08527C15} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Word 2010 (KB4493218) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{565C3C1B-B400-4DB6-B58B-589C66433C23} =>.Microsoft Corporation®
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{A3364707-2F53-4C83-8F68-C9877A9080C7} =>.Microsoft Corporation®
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0409-1000-0000000FF1CE}_Office14.EXCEL_{C7BC6847-623D-4D8F-B87C-82215F0752BA} =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0409-1000-0000000FF1CE}_Office14.EXCEL_{C814F7D9-CE9D-45AA-BA7C-88BDD0E1EB7C} =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-040C-1000-0000000FF1CE}_Office14.EXCEL_{77A8B979-11B0-4774-8003-574EE8A4BC22} =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0C0A-1000-0000000FF1CE}_Office14.EXCEL_{05916788-991E-417B-A8F3-77F90A2B8271} =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002C-0409-1000-0000000FF1CE}_Office14.EXCEL_{D4D48631-AC28-4250-B882-C956555B0B1D} =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{F3FAAB68-7697-4B1F-A23A-72312565AEAB} =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0409-1000-0000000FF1CE}_Office14.EXCEL_{944EFCFD-823D-4C0A-9B01-CD76EEAEA1F3} =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-006E-0409-1000-0000000FF1CE}_Office14.EXCEL_{58B1AD3E-54D7-42DC-AF42-218AA7C1ED8B} =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0115-0409-1000-0000000FF1CE}_Office14.EXCEL_{58B1AD3E-54D7-42DC-AF42-218AA7C1ED8B} =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Update for Microsoft Filter Pack 2.0 (KB3114879) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{85483BCA-BCA1-4046-9673-53FAB79E6979} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft InfoPath 2010 (KB2817369) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{DB0B0CDF-77EC-47B0-94E2-4738573A1E58} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553140) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{8C0FFF5F-4CC1-48F5-9B3F-8DE7DA2E116F} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553140) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-006E-0409-1000-0000000FF1CE}_Office14.EXCEL_{8C0FFF5F-4CC1-48F5-9B3F-8DE7DA2E116F} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0409-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0409-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-040C-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0C0A-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002C-0409-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0409-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-006E-0409-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553347) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0115-0409-1000-0000000FF1CE}_Office14.EXCEL_{1B114BCA-F84F-45EB-ACE8-FC3CB5557FB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553388) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{08E1BF53-B96E-4ADF-935F-A90F867E8F6B} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553388) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{08E1BF53-B96E-4ADF-935F-A90F867E8F6B} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{79C725A1-3964-421C-A528-78C1C083C7C7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2589318) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{9466D7C3-A2C9-457A-8135-03F20F3268B4} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2589339) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{C91587A2-1FEA-4F7B-BBC5-4D8914E8C0D3} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{EBD18DE5-BC84-4B57-9A30-097044871F9A} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{4AD36582-256B-433D-8593-F31773A15CA4} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{4AD36582-256B-433D-8593-F31773A15CA4} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2881030) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{F1B89D7E-298C-49C3-A136-9962C9123CB7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB2883019) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{956B3213-0246-42A8-A6FE-3EF7DC6E66A9} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB3054873) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{75A4ACD6-A407-41B3-8889-8AB7862A9D9D} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB3054886) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{4F55B2F9-E491-4630-A994-2F37D1AB3A77} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB3054886) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{4F55B2F9-E491-4630-A994-2F37D1AB3A77} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB3055047) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{4BC0A78F-012B-47BF-80E8-963D44286558} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB4092436) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{8539273B-603A-4939-AC68-206447EB9536} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB4461579) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{D7C90ED7-E184-4423-B3FC-F3AA7BB856E0} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB4461579) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{D7C90ED7-E184-4423-B3FC-F3AA7BB856E0} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB4461626) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{6E14E5FA-BB3A-4583-B77E-87284B73AD16} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2010 (KB4462172) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{ED7A5337-C4D3-455F-8B84-E90FB9605977} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0043-0000-1000-0000000FF1CE}_Office14.EXCEL_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D} =>.Microsoft Corporation®
O42 - Logiciel: Update for Windows 10 for x64-based Systems (KB5001716) - (.Microsoft Corporation.) [HKLM][64Bits] -- {82BD0A1C-815F-487F-9AE7-CE73DA413CFF} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player [Unsigned] =>.VideoLAN
O42 - Logiciel: Windows PC Health Check - (.Microsoft Corporation.) [HKLM][64Bits] -- {B1E7D0FD-7CFE-4E0C-A5DA-0F676499DB91} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Windows SDK AddOn - (.Microsoft Corporation.) [HKLM][64Bits] -- {E6F877A1-2F65-4BF0-87B6-A4071B7663D3} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: WinRAR 6.11 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®
---\\ HKCU & HKLM Software Keys (187) - 29s
HKLM\SOFTWARE\7-Zip =>.Igor Pavlov
HKLM\SOFTWARE\Adobe =>.Adobe
HKLM\SOFTWARE\AGEIA Technologies =>.AGEIA Technologies
HKLM\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKLM\SOFTWARE\Atheros =>.Qualcomm Atheros
HKLM\SOFTWARE\AutoHotkey =>.AutoHotkey
HKLM\SOFTWARE\BANDISOFT =>.Bandisoft
HKLM\SOFTWARE\Binance =>.Binance
HKLM\SOFTWARE\BlueStacksInstaller =>.BlueStack Systems, Inc.
HKLM\SOFTWARE\BlueStacks_nxt
HKLM\SOFTWARE\Conexant =>.Conexant Systems, Inc.
HKLM\SOFTWARE\CVSM =>.Legitimate
HKLM\SOFTWARE\DefaultUserEnvironment =>.Microsoft Corporation
HKLM\SOFTWARE\dotnet
HKLM\SOFTWARE\ej-technologies =>.ej-technologies
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\ICEpower =>.ICEpower
HKLM\SOFTWARE\InstalledOptions =>.Installed Options
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\Khronos =>.Khronos
HKLM\SOFTWARE\Malwarebytes =>.Malwarebytes
HKLM\SOFTWARE\Mozilla =>.Mozilla
HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Nahimic =>.Nahimic
HKLM\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\OEM =>.OEM
HKLM\SOFTWARE\OpenSSH =>.OpenBSD
HKLM\SOFTWARE\Partner =>.Google Inc.
HKLM\SOFTWARE\Patch My PC =>.Justin Chalfant
HKLM\SOFTWARE\Piriform =>.Piriform
HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\RTLSetup =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\SoftEther Project =>.SoftEther Project
HKLM\SOFTWARE\TrendMicro =>.TrendMicro
HKLM\SOFTWARE\UIU =>.Legitimate
HKLM\SOFTWARE\UIUTask
HKLM\SOFTWARE\VideoLAN =>.VideoLan Team
HKLM\SOFTWARE\Windows =>.Microsoft Corporation
HKLM\SOFTWARE\WinRAR =>.WinRAR
HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\360DocProtect
HKLM\SOFTWARE\WOW6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\WOW6432Node\Adware Removal Tool by TSA =>.TSA Softwares
HKLM\SOFTWARE\WOW6432Node\AGEIA Technologies =>.AGEIA Technologies
HKLM\SOFTWARE\WOW6432Node\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\WOW6432Node\CDDB =>.Cddb Software
HKLM\SOFTWARE\WOW6432Node\Conexant =>.Conexant Systems, Inc.
HKLM\SOFTWARE\WOW6432Node\dotnet
HKLM\SOFTWARE\WOW6432Node\Dropbox =>.Dropbox
HKLM\SOFTWARE\WOW6432Node\DropboxUpdate =>.Dropbox Inc.
HKLM\SOFTWARE\WOW6432Node\EasyAntiCheat =>.EasyAntiCheat
HKLM\SOFTWARE\WOW6432Node\Eset =>.ESET
HKLM\SOFTWARE\WOW6432Node\Google =>.Google
HKLM\SOFTWARE\WOW6432Node\Gravity Soft =>.Gravity Soft
HKLM\SOFTWARE\WOW6432Node\Intel =>.Intel
HKLM\SOFTWARE\WOW6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\WOW6432Node\kpzs
HKLM\SOFTWARE\WOW6432Node\Magix =>.MAGIX_Software_GmbH
HKLM\SOFTWARE\WOW6432Node\Malwarebytes =>.Malwarebytes
HKLM\SOFTWARE\WOW6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\WOW6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\WOW6432Node\NemuServer
HKLM\SOFTWARE\WOW6432Node\Nexon =>.Nexon
HKLM\SOFTWARE\WOW6432Node\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\WOW6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\WOW6432Node\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\WOW6432Node\SciTE4AutoHotkey =>.AutoHotkey
HKLM\SOFTWARE\WOW6432Node\SoftEther Project =>.SoftEther Project
HKLM\SOFTWARE\WOW6432Node\Sony Creative Software =>.Sony Creative Software
HKLM\SOFTWARE\WOW6432Node\Tencent =>.Tencent
HKLM\SOFTWARE\WOW6432Node\TrendMicro =>.TrendMicro
HKLM\SOFTWARE\WOW6432Node\Valve =>.Valve
HKLM\SOFTWARE\WOW6432Node\WOW6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\Apowersoft =>.Apowersoft
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc. =>.Apple Inc.
HKCU\SOFTWARE\AutoHotkey =>.AutoHotkey
HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKCU\SOFTWARE\BlueStacksInstaller =>.BlueStack Systems, Inc.
HKCU\SOFTWARE\Browedit
HKCU\SOFTWARE\Cheat Engine =>.Dark Byte
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\ClassicTK
HKCU\SOFTWARE\CocCoc =>.Legitimate
HKCU\SOFTWARE\Conexant =>.Conexant Systems, Inc.
HKCU\SOFTWARE\DirectShow =>.Microsoft Corporation
HKCU\SOFTWARE\Dropbox =>.Dropbox
HKCU\SOFTWARE\DropboxUpdate =>.Dropbox Inc.
HKCU\SOFTWARE\DuoDianApp =>.DuoDianApp
HKCU\SOFTWARE\ej-technologies =>.ej-technologies
HKCU\SOFTWARE\ESET =>.ESET
HKCU\SOFTWARE\Geek Uninstaller =>.Geek Uninstaller
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Gravity =>.Gravity
HKCU\SOFTWARE\Hex-Rays
HKCU\SOFTWARE\INCAInternet =>.INCAInternet
HKCU\SOFTWARE\Intel =>.Intel
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\KRU
HKCU\SOFTWARE\LINE Games Corporation
HKCU\SOFTWARE\Magix =>.MAGIX_Software_GmbH
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\Nexon =>.Nexon
HKCU\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\RedFingerPlayerGlobal
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\SoftEther Project =>.SoftEther Project
HKCU\SOFTWARE\Sony Creative Software =>.Sony Creative Software
HKCU\SOFTWARE\TEAM R2R =>.TEAM R2R
HKCU\SOFTWARE\Tencent =>.Tencent
HKCU\SOFTWARE\University of Tsukuba =>.University of Tsukuba
HKCU\SOFTWARE\Valve =>.Valve
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\XuanZhi
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKU\.DEFAULT\SOFTWARE\Apple Inc. =>.Apple Inc.
HKU\.DEFAULT\SOFTWARE\Conexant =>.Conexant Systems, Inc.
HKU\.DEFAULT\SOFTWARE\Dropbox =>.Dropbox
HKU\.DEFAULT\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKU\.DEFAULT\SOFTWARE\Piriform =>.Piriform
HKU\.DEFAULT\SOFTWARE\Razer =>.Razer
HKU\.DEFAULT\SOFTWARE\Splashtop Inc. =>.Splashtop Inc.
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\7-Zip =>.Igor Pavlov
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Adobe =>.Adobe
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Apowersoft =>.Apowersoft
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Apple Inc. =>.Apple Inc.
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\AutoHotkey =>.AutoHotkey
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\BlueStacksInstaller =>.BlueStack Systems, Inc.
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Browedit
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Cheat Engine =>.Dark Byte
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Chromium =>.Chromium
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\ClassicTK
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\CocCoc =>.Legitimate
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Conexant =>.Conexant Systems, Inc.
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\DirectShow =>.Microsoft Corporation
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Dropbox =>.Dropbox
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\DropboxUpdate =>.Dropbox Inc.
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\DuoDianApp =>.DuoDianApp
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\ej-technologies =>.ej-technologies
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\ESET =>.ESET
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Geek Uninstaller =>.Geek Uninstaller
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Google =>.Google
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Gravity =>.Gravity
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Hex-Rays
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\INCAInternet =>.INCAInternet
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Intel =>.Intel
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\JavaSoft =>.JavaSoft
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\KRU
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\LINE Games Corporation
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Magix =>.MAGIX_Software_GmbH
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Mozilla =>.Mozilla
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Netscape =>.Netscape
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Nexon =>.Nexon
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Piriform =>.Piriform
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\QtProject =>.QtProject
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\RedFingerPlayerGlobal
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\SoftEther Project =>.SoftEther Project
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Sony Creative Software =>.Sony Creative Software
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\TEAM R2R =>.TEAM R2R
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Tencent =>.Tencent
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\University of Tsukuba =>.University of Tsukuba
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Valve =>.Valve
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\WinRAR =>.WinRAR
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\WinRAR SFX =>.RarLab
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\XuanZhi
HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\ZHP =>.Nicolas Coolman
---\\ Packages (5) - 0s
C:\Program Files (x86)\WindowsApps\MicrosoftWindows.UndockedDevKit_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy - (.Microsoft Corporation.) [][UDK Package] =>Microsoft Corporation
C:\Program Files (x86)\WindowsApps\NcsiUwpApp_1000.19041.1023.0_neutral_neutral_8wekyb3d8bbwe - (.Microsoft.) [][NcsiUwpApp] =>Microsoft
C:\Program Files (x86)\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj - (.nVidia Corporation.) [][NVIDIA Control Panel] =>nVidia Corporation
C:\Program Files (x86)\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj - (.nVidia Corporation.) [][NVIDIA Control Panel] =>nVidia Corporation
C:\Program Files (x86)\WindowsApps\TradingView.Desktop_1.0.0.679_x64__r4b1km8ya33za - (..) [][TradingView]
---\\ Contents of the Common Files folders (261) - 17s
O43 - CFD: 03/03/2020 - [] D -- C:\Program Files\7-Zip =>.Igor Pavlov
O43 - CFD: 02/03/2020 - [] D -- C:\Program Files\AutoHotkey =>.Chicony Multimedia
O43 - CFD: 13/04/2021 - [] D -- C:\Program Files\Binance =>.Binance Holdings Limited®
O43 - CFD: 15/04/2022 - [] D -- C:\Program Files\BlueStacks_nxt {02DC76C15066F447336766D85A04AF37}.
O43 - CFD: 15/04/2022 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files\Cheat Engine 7.0 =>.Dark Byte
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 15/04/2022 - [] D -- C:\Program Files\CONEXANT =>.Conexant Systems, Inc.
O43 - CFD: 09/04/2022 - [] D -- C:\Program Files\dotnet =>.Microsoft®
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files\Google =>.Google
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files\Intel =>.Intel Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 21/03/2020 - [] D -- C:\Program Files\Microsoft Analysis Services =>.Microsoft Corporation
O43 - CFD: 21/03/2020 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 21/03/2020 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition =>.Microsoft Corporation
O43 - CFD: 21/03/2020 - [] D -- C:\Program Files\Microsoft Synchronization Services =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Program Files\Microsoft Update Health Tools =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [0] D -- C:\Program Files\ModifiableWindowsApps =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Program Files\MuMu
O43 - CFD: 14/04/2022 - [0] D -- C:\Program Files\NemuVbox
O43 - CFD: 18/05/2020 - [] D -- C:\Program Files\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Program Files\PCHealthCheck =>.Microsoft®
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Program Files\ruxim =>.Microsoft®
O43 - CFD: 14/03/2022 - [] D -- C:\Program Files\SoftEther VPN Client =>.SoftEther
O43 - CFD: 01/03/2020 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files\UNP =>.Microsoft Corporation
O43 - CFD: 16/02/2021 - [] D -- C:\Program Files\VideoLAN =>.VideoLan Team
O43 - CFD: 09/04/2022 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files\Windows Defender Advanced Threat Protection =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files\Windows Security =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 15/04/2022 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 12/03/2022 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe
O43 - CFD: 13/04/2022 - [] D -- C:\Program Files (x86)\Adware Removal Tool by TSA =>.TSA Softwares
O43 - CFD: 15/04/2022 - [] D -- C:\Program Files (x86)\AmUStor =>.Alocr Micro
O43 - CFD: 15/04/2022 - [] D -- C:\Program Files (x86)\ASUS =>.ASUS
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Program Files (x86)\dotnet =>.Microsoft®
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Dropbox =>.Dropbox, Inc®
O43 - CFD: 21/04/2020 - [] D -- C:\Program Files (x86)\EasyAntiCheat =>.EasyAntiCheat
O43 - CFD: 30/03/2021 - [] D -- C:\Program Files (x86)\eNexia750
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Google =>.Google LLC®
O43 - CFD: 01/03/2020 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
O43 - CFD: 29/02/2020 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Microsoft =>.Microsoft Corporation
O43 - CFD: 21/03/2020 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation
O43 - CFD: 21/03/2020 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Microsoft SDKs =>.Microsoft Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio =>.Microsoft Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 18/05/2020 - [] D -- C:\Program Files (x86)\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Qualcomm =>.Qualcomm Atheros
O43 - CFD: 01/03/2020 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 18/03/2022 - [] D -- C:\Program Files (x86)\RedFingerPlayerGlobal [Unsigned]
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 18/03/2022 - [] D -- C:\Program Files (x86)\TurboVPN
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Windows Kits =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
O43 - CFD: 10/04/2022 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 10/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey =>.Chicony Multimedia
O43 - CFD: 10/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 10/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 7.0 =>.Dark Byte
O43 - CFD: 15/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant =>.Conexant Systems, Inc.
O43 - CFD: 14/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox =>.Dropbox
O43 - CFD: 07/12/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 13/04/2022 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tencent Software
O43 - CFD: 10/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 10/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019 =>.Pinnacle Systems, Inc.
O43 - CFD: 07/12/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 10/04/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 14/04/2022 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 15/04/2022 - [] D -- C:\ProgramData\AmUStor =>.Alocr Micro
O43 - CFD: 10/10/2020 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 23/03/2020 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc.
O43 - CFD: 09/04/2022 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 15/04/2022 - [] D -- C:\ProgramData\ASUS =>.ASUS
O43 - CFD: 15/04/2022 - [] D -- C:\ProgramData\ASUS Smart Gesture =>.ASUSTeK
O43 - CFD: 15/04/2022 - [] D -- C:\ProgramData\BlueStacks_nxt
O43 - CFD: 07/04/2021 - [] D -- C:\ProgramData\Conexant =>.Conexant Systems, Inc.
O43 - CFD: 09/04/2022 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 08/03/2020 - [] D -- C:\ProgramData\Dropbox =>.Dropbox
O43 - CFD: 29/02/2020 - [] D -- C:\ProgramData\Intel =>.Intel Corporation
O43 - CFD: 07/10/2020 - [] D -- C:\ProgramData\Magix =>.MAGIX_Software_GmbH
O43 - CFD: 14/04/2022 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 15/04/2021 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\ProgramData\Microsoft Visual Studio =>.Microsoft Corporation
O43 - CFD: 15/03/2022 - [] D -- C:\ProgramData\NVIDIA =>.nVidia Corporation
O43 - CFD: 18/03/2022 - [] D -- C:\ProgramData\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 29/03/2021 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 14/04/2022 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\ProgramData\Packages =>.Microsoft Corporation
O43 - CFD: 15/03/2020 - [] D -- C:\ProgramData\Razer =>.Razer
O43 - CFD: 15/04/2022 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
O43 - CFD: 03/03/2020 - [0] D -- C:\ProgramData\Solid State Networks =>.Solid State Networks
O43 - CFD: 10/04/2022 - [0] D -- C:\ProgramData\ssh =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation
O43 - CFD: 13/04/2022 - [] D -- C:\ProgramData\Tencent =>.Tencent
O43 - CFD: 14/04/2022 - [] D -- C:\ProgramData\UIU
O43 - CFD: 09/04/2022 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] D -- C:\ProgramData\WindowsHolographicDevices =>.Microsoft Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 14/04/2022 - [0] D -- C:\Program Files (x86)\Common Files\Apple =>.Apple Inc.
O43 - CFD: 14/04/2022 - [0] D -- C:\Program Files (x86)\Common Files\Atheros =>.Qualcomm Atheros
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 14/04/2022 - [] D -- C:\Program Files (x86)\Common Files\Qualcomm =>.Qualcomm Atheros
O43 - CFD: 07/12/2019 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 18/05/2020 - [] D -- C:\Program Files (x86)\Common Files\Steam =>.Steam Games
O43 - CFD: 10/04/2022 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 12/04/2022 - [0] D -- C:\Users\Ganja\AppData\Roaming\360DesktopLite
O43 - CFD: 11/03/2020 - [0] D -- C:\Users\Ganja\AppData\Roaming\360DrvMgr
O43 - CFD: 14/04/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 29/06/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\AndroidTbox
O43 - CFD: 16/02/2021 - [] D -- C:\Users\Ganja\AppData\Roaming\Apowersoft =>.Apowersoft
O43 - CFD: 23/03/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 18/04/2021 - [] D -- C:\Users\Ganja\AppData\Roaming\Binance =>.Binance
O43 - CFD: 15/12/2021 - [] D -- C:\Users\Ganja\AppData\Roaming\ChangZhi2
O43 - CFD: 29/11/2021 - [] D -- C:\Users\Ganja\AppData\Roaming\discord
O43 - CFD: 08/03/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\Dropbox =>.Dropbox
O43 - CFD: 21/04/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\EasyAntiCheat =>.EasyAntiCheat
O43 - CFD: 12/04/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\Geek Uninstaller =>.Geek Uninstaller
O43 - CFD: 09/05/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\Hex-Rays
O43 - CFD: 29/03/2021 - [] D -- C:\Users\Ganja\AppData\Roaming\java =>.Oracle
O43 - CFD: 15/12/2021 - [] D -- C:\Users\Ganja\AppData\Roaming\lddownloader
O43 - CFD: 01/05/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\Mael Horz
O43 - CFD: 07/10/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\MAGIX =>.MAGIX_Software_GmbH
O43 - CFD: 09/04/2022 - [] SD -- C:\Users\Ganja\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 30/04/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\Microsoft FxCop =>.Microsoft Corporation
O43 - CFD: 30/03/2021 - [] D -- C:\Users\Ganja\AppData\Roaming\Mirroring360
O43 - CFD: 30/04/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\NuGet =>.Microsoft Corporation
O43 - CFD: 22/05/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\NVIDIA =>.nVidia Corporation
O43 - CFD: 12/03/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\RedFinger
O43 - CFD: 07/10/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\Sony =>.Sony
O43 - CFD: 13/04/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\Tencent =>.Tencent
O43 - CFD: 08/03/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\Tk Patcher
O43 - CFD: 07/10/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\VEGAS =>.VEGAS
O43 - CFD: 14/04/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\Visual Studio Setup =>.Pinnacle Systems, Inc.
O43 - CFD: 14/03/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\vlc =>.VideoLan Team
O43 - CFD: 29/04/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\vstelemetry =>.Legitimate
O43 - CFD: 29/04/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\vs_installershell
O43 - CFD: 04/03/2020 - [] D -- C:\Users\Ganja\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 12/03/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\XuanZhi
O43 - CFD: 14/04/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\XuanZhi64
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 22/05/2020 - [] D -- C:\Users\Ganja\AppData\Local\.IdentityService
O43 - CFD: 06/03/2020 - [] D -- C:\Users\Ganja\AppData\Local\Adobe =>.Adobe
O43 - CFD: 23/03/2020 - [] D -- C:\Users\Ganja\AppData\Local\Apple Computer =>.Apple Inc.
O43 - CFD: 09/04/2022 - [0] SHD -- C:\Users\Ganja\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 31/03/2021 - [] D -- C:\Users\Ganja\AppData\Local\binance-updater
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\BlueStacks =>.BlueStack Systems, Inc.
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\BlueStacksSetup =>.BlueStack Systems, Inc.
O43 - CFD: 09/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\cache =>.Legitimate
O43 - CFD: 01/03/2020 - [] D -- C:\Users\Ganja\AppData\Local\CEF =>.CEF
O43 - CFD: 12/03/2022 - [] D -- C:\Users\Ganja\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\Conexant =>.Conexant Systems, Inc.
O43 - CFD: 27/03/2021 - [] D -- C:\Users\Ganja\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 08/04/2022 - [0] D -- C:\Users\Ganja\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\CrashRpt
O43 - CFD: 14/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\D3DSCache =>.Legitimate
O43 - CFD: 05/04/2020 - [0] D -- C:\Users\Ganja\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 12/03/2022 - [0] D -- C:\Users\Ganja\AppData\Local\Discord
O43 - CFD: 14/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\Dropbox =>.Dropbox
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 12/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\ESET =>.ESET
O43 - CFD: 29/02/2020 - [] D -- C:\Users\Ganja\AppData\Local\Google =>.Google
O43 - CFD: 09/04/2022 - [0] SHD -- C:\Users\Ganja\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\Intel =>.Intel Corporation
O43 - CFD: 30/04/2020 - [] D -- C:\Users\Ganja\AppData\Local\IsolatedStorage =>.id Software
O43 - CFD: 07/10/2020 - [] D -- C:\Users\Ganja\AppData\Local\MAGIX =>.MAGIX_Software_GmbH
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 21/03/2020 - [0] D -- C:\Users\Ganja\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 29/02/2020 - [] D -- C:\Users\Ganja\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\NemuPlayer
O43 - CFD: 14/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\Nox =>.FFmpeg Project
O43 - CFD: 09/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\NoxSrv
O43 - CFD: 22/05/2020 - [] D -- C:\Users\Ganja\AppData\Local\NuGet =>.Microsoft Corporation
O43 - CFD: 15/03/2022 - [] D -- C:\Users\Ganja\AppData\Local\NVIDIA =>.nVidia Corporation
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\OO Software =>.O&O Software GmbH
O43 - CFD: 14/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 16/02/2021 - [] D -- C:\Users\Ganja\AppData\Local\Patch_My_PC,_LLC
O43 - CFD: 02/03/2020 - [0] D -- C:\Users\Ganja\AppData\Local\PeerDistRepub =>.Microsoft Corporation
O43 - CFD: 06/04/2021 - [] D -- C:\Users\Ganja\AppData\Local\PlaceholderTileLogoFolder =>.Microsoft Corporation
O43 - CFD: 07/10/2020 - [] D -- C:\Users\Ganja\AppData\Local\Plugin.MxOfxRotation
O43 - CFD: 07/10/2020 - [] D -- C:\Users\Ganja\AppData\Local\Plugin.ofx360Stabilizer
O43 - CFD: 07/10/2020 - [] D -- C:\Users\Ganja\AppData\Local\Plugin.OfxStitch
O43 - CFD: 29/02/2020 - [] D -- C:\Users\Ganja\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 29/02/2020 - [] D -- C:\Users\Ganja\AppData\Local\Publishers =>.Microsoft Corporation
O43 - CFD: 15/03/2020 - [0] D -- C:\Users\Ganja\AppData\Local\Razer =>.Razer
O43 - CFD: 14/03/2022 - [] D -- C:\Users\Ganja\AppData\Local\RedFingerPlayer
O43 - CFD: 29/04/2020 - [] D -- C:\Users\Ganja\AppData\Local\ServiceHub
O43 - CFD: 07/10/2020 - [] D -- C:\Users\Ganja\AppData\Local\Sony =>.Sony
O43 - CFD: 01/03/2020 - [] D -- C:\Users\Ganja\AppData\Local\speech =>.Microsoft Corporation
O43 - CFD: 12/03/2022 - [] D -- C:\Users\Ganja\AppData\Local\SquirrelTemp =>.Squirrels
O43 - CFD: 18/05/2020 - [] D -- C:\Users\Ganja\AppData\Local\Steam =>.Steam Games
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Ganja\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [0] SHD -- C:\Users\Ganja\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 07/10/2020 - [] D -- C:\Users\Ganja\AppData\Local\VEGAS Pro
O43 - CFD: 01/03/2020 - [0] D -- C:\Users\Ganja\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 11/03/2020 - [] D -- C:\Users\Ganja\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 29/02/2020 - [0] D -- C:\Users\Ganja\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 06/03/2020 - [] D -- C:\Users\Ganja\AppData\LocalLow\Adobe =>.Adobe
O43 - CFD: 29/02/2020 - [] D -- C:\Users\Ganja\AppData\LocalLow\Intel =>.Intel Corporation
O43 - CFD: 18/05/2020 - [] D -- C:\Users\Ganja\AppData\LocalLow\LINE Games Corporation
O43 - CFD: 06/03/2020 - [] SD -- C:\Users\Ganja\AppData\LocalLow\Microsoft =>.Microsoft Corporation
O43 - CFD: 12/04/2022 - [0] D -- C:\Users\Ganja\AppData\LocalLow\Temp =>.Microsoft Corporation
O43 - CFD: 14/03/2022 - [] D -- C:\Users\Ganja\Desktop\macro
O43 - CFD: 29/01/2022 - [] D -- C:\Users\Ganja\Desktop\Wub
O43 - CFD: 10/04/2022 - [] RD -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] RD -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] RD -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 14/03/2022 - [0] D -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LDPlayer4
O43 - CFD: 07/12/2019 - [] D -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Redfinger
O43 - CFD: 12/04/2022 - [] RD -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [] RD -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] D -- C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 09/04/2022 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 15/04/2021 - [0] D -- C:\Users\Default\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 15/04/2022 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 15/04/2021 - [0] D -- C:\Users\Default User\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 07/12/2019 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 11/04/2022 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 09/04/2022 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\360safe =>.Qihu 360 Software
O43 - CFD: 09/04/2022 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation
---\\ ShellIconOverlayIdentifiers (SIOI) (12) - 0s
O106 - SIOI: DropboxExt1 Class [ DropboxExt01] - {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt7 Class [ DropboxExt02] - {FB314EDF-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt9 Class [ DropboxExt03] - {FB314EE1-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt3 Class [ DropboxExt04] - {FB314EDB-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt2 Class [ DropboxExt05] - {FB314EDA-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt4 Class [ DropboxExt06] - {FB314EDC-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt5 Class [ DropboxExt07] - {FB314EDD-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt8 Class [ DropboxExt08] - {FB314EE0-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt10 Class [ DropboxExt09] - {FB314EE2-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt6 Class [ DropboxExt10] - {FB314EDE-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O106 - SIOI: [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Windows Enhanced Storage Shell Extension DL.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation
O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - Client Side Caching UI.) -- C:\WINDOWS\System32\cscui.dll [Unsigned] =>.Microsoft Corporation
---\\ Search Context Menu Handlers (SCMH) (30) - 2s
O108 - CMH1: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft®
O108 - CMH1: ModernSharing [64Bits] - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Work Folders Shell Extension.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH2: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O108 - CMH2: NvAppShExt [64Bits] - {A929C4CE-FD36-4270-B4F5-34ECAC5BD63C} . (.NVIDIA Corporation - NVIDIA Shell Extensions.) -- C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\nv3dappshext.dll =>.NVIDIA Corporation®
O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH2: OpenGLShExt [64Bits] - {E97DEC16-A50D-49bb-AE24-CF682282E08D} . (.NVIDIA Corporation - NVIDIA Shell Extensions.) -- C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\nv3dappshext.dll =>.NVIDIA Corporation®
O108 - CMH2: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH4: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft®
O108 - CMH4: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - Client Side Caching UI.) -- C:\WINDOWS\System32\cscui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Work Folders Shell Extension.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc®
O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH5: NvCplDesktopContext [64Bits] - {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} . (.NVIDIA Corporation - NVIDIA Display Shell Extension.) -- C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\nvshext.dll =>.NVIDIA Corporation®
O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Work Folders Shell Extension.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH6: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - Client Side Caching UI.) -- C:\WINDOWS\System32\cscui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - App Resolver.) -- C:\Windows\System32\appresolver.dll =>.Microsoft®
O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - Windows Enhanced Storage Shell Extension DL.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH7: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft®
O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
---\\ Image File Execution Options (16) - 2s
O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - IE Per-User Initialisation Utility.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - IE 7.0 Unattended Install Utility.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Microsoft Windows Malicious Software Remova.) [CFGOptions\\1] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Microsoft (R) HTML Application host.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\MusNotification.exe - (.Microsoft Corporation - MusNotificationBroker.) [Debugger\\/] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\MusNotificationUx.exe - (.Microsoft Corporation - MusNotificationUx.exe.) [Debugger\\/] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\SihClient.exe - (.Microsoft Corporation - SIH Client.) [Debugger\\/] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Spooler SubSystem App.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Host Process for Windows Services.) [MinimumStackCommitInBytes\\32768] =>.Microsoft®
O50 - IFEO:C:\WINDOWS\System32\upfc.exe - (.Microsoft Corporation - Updateability From SCM.) [Debugger\\/] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\UsoClient.exe - (.Microsoft Corporation - UsoClient.) [Debugger\\/] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\WaasMedicAgent.exe - (.Microsoft Corporation - WaasMedic Agent Exe.) [Debugger\\/] [Unsigned] =>.Microsoft Corporation
---\\ System Drivers List (436) - 23s
O58 - SDL:2019/12/07 18:07:53 A . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\WINDOWS\System32\drivers\1394ohci.sys [266240] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:53 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107320] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:13 A . (.Microsoft Corporation - ACPI Driver for NT.) -- C:\WINDOWS\System32\drivers\acpi.sys [809288] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Microsoft Corporation - ACPI Devices Driver.) -- C:\WINDOWS\System32\drivers\AcpiDev.sys [23040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:09 A . (.Microsoft Corporation - ACPIEx Driver.) -- C:\WINDOWS\System32\drivers\acpiex.sys [139792] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) -- C:\WINDOWS\System32\drivers\acpipagr.sys [14336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\WINDOWS\System32\drivers\acpipmi.sys [18432] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - ACPI Wake Alarm.) -- C:\WINDOWS\System32\drivers\acpitime.sys [16384] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:35:20 A . (.Microsoft Corporation - Audio KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\Acx01000.sys [694272] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:53 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135416] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:34 A . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\afd.sys [651096] =>.Microsoft®
O58 - SDL:2022/04/10 03:40:35 A . (.Microsoft Corporation - AF_UNIX socket provider.) -- C:\WINDOWS\System32\drivers\afunix.sys [48128] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:52 A . (.Microsoft Corporation - RAS Agile Vpn Miniport Call Manager.) -- C:\WINDOWS\System32\drivers\agilevpn.sys [118784] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:08 A . (.Microsoft Corporation - Application Compatibility Cache.) -- C:\WINDOWS\System32\drivers\ahcache.sys [292352] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Advanced Micro Devices, Inc - AMD GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\amdgpio2.sys [18432] [Unsigned] =>.Advanced Micro Devices, Inc
O58 - SDL:2019/12/07 18:07:47 A . (.Advanced Micro Devices, Inc - AMD I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\amdi2c.sys [45568] [Unsigned] =>.Advanced Micro Devices, Inc
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdk8.sys [207160] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdppm.sys [211256] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83256] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259384] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26936] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:53 A . (.Microsoft Corporation - AppID Driver.) -- C:\WINDOWS\System32\drivers\appid.sys [215400] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:53 A . (.Microsoft Corporation - Applocker Filter.) -- C:\WINDOWS\System32\drivers\applockerfltr.sys [18432] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:46:40 A . (.Microsoft Corporation - Microsoft Application Virtualization Stream.) -- C:\WINDOWS\System32\drivers\AppVStrm.sys [138056] =>.Microsoft®
O58 - SDL:2022/04/10 03:46:40 A . (.Microsoft Corporation - Microsoft Application Virtualization VE Man.) -- C:\WINDOWS\System32\drivers\AppvVemgr.sys [174408] =>.Microsoft®
O58 - SDL:2022/04/10 03:46:40 A . (.Microsoft Corporation - Microsoft Application Virtualization VFS Fi.) -- C:\WINDOWS\System32\drivers\AppvVfs.sys [154952] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131896] =>.Microsoft®
O58 - SDL:2020/11/19 01:02:54 A . (.ASUS - ASUS Wireless Radio Control.) -- C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696] =>.ASUSTek Computer Inc.®
O58 - SDL:2019/04/24 15:01:46 A . (.ASUSTek COMPUTER INC. - Asus PTP Filter Driver (x64).) -- C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [108504] =>.ASUSTek Computer Inc.®
O58 - SDL:2019/12/07 18:09:07 A . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\WINDOWS\System32\drivers\asyncmac.sys [31232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [30032] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\WINDOWS\System32\drivers\ataport.sys [224080] =>.Microsoft®
O58 - SDL:2019/05/21 12:00:00 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\athw10x.sys [4322552] =>.Qualcomm Atheros®
O58 - SDL:2019/12/07 18:08:41 A . (.Microsoft Corporation - BAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\bam.sys [78136] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Battery Class Driver.) -- C:\WINDOWS\System32\drivers\battc.sys [41272] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:47 A . (. - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] [Unsigned] =>.Broadcom Corporation
O58 - SDL:2019/12/07 18:09:00 A . (.Microsoft Corporation - BEEP Driver.) -- C:\WINDOWS\System32\drivers\beep.sys [10240] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:38:00 A . (.Microsoft Corporation - Windows Bind Filter Driver.) -- C:\WINDOWS\System32\drivers\bindflt.sys [149320] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:32 A . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\WINDOWS\System32\drivers\bowser.sys [117760] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:39 A . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\WINDOWS\System32\drivers\bridge.sys [127488] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Mana.) -- C:\WINDOWS\System32\drivers\BtaMPM.sys [36352] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/01/31 08:44:54 A . (.Qualcomm - BT Filter.) -- C:\WINDOWS\System32\drivers\btfilter.sys [69368] =>.Qualcomm Atheros®
O58 - SDL:2019/12/07 18:07:47 A . (.Microsoft Corporation - Bluetooth A2DP Driver.) -- C:\WINDOWS\System32\drivers\BthA2dp.sys [279040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:21 A . (.Microsoft Corporation - Bluetooth Bus Extender.) -- C:\WINDOWS\System32\drivers\bthenum.sys [113664] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control.) -- C:\WINDOWS\System32\drivers\BthHfEnum.sys [144896] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:22 A . (.Microsoft Corporation - Bluetooth Transport Extensibility Miniport.) -- C:\WINDOWS\System32\drivers\BthMini.SYS [45568] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\WINDOWS\System32\drivers\bthmodem.sys [76800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:22 A . (.Microsoft Corporation - Bluetooth Bus Driver.) -- C:\WINDOWS\System32\drivers\bthport.sys [1559552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:22 A . (.Microsoft Corporation - Bluetooth Miniport Driver.) -- C:\WINDOWS\System32\drivers\BTHUSB.SYS [110592] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - VHD BTT Filter Driver.) -- C:\WINDOWS\System32\drivers\bttflt.sys [43832] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Button Converter Driver.) -- C:\WINDOWS\System32\drivers\buttonconverter.sys [44032] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:50 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [533816] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:47 A . (.Microsoft Corporation - Charge Arbiration Driver.) -- C:\WINDOWS\System32\drivers\CAD.sys [66576] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:37 A . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\cdfs.sys [100864] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:13 A . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\cdrom.sys [175616] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:37:47 A . (.Microsoft Corporation - Event Aggregation Kernel Mode Library.) -- C:\WINDOWS\System32\drivers\CEA.sys [82256] =>.Microsoft®
O58 - SDL:2021/01/05 01:52:46 A . (.Conexant Systems Inc. - 64-bit High Definition Audio Function Drive.) -- C:\WINDOWS\System32\drivers\CHDRT64.sys [3463992] =>.Synaptics Incorporated®
O58 - SDL:2019/12/07 18:07:54 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [144184] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [319800] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Chelsio Communications - VF library for Chelsio ® T5/T6 Chipset.) -- C:\WINDOWS\System32\drivers\cht4vfx.sys [28672] [Unsigned] =>.Chelsio Communications
O58 - SDL:2019/12/07 18:07:54 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T5/T6 Chip.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [1853752] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:00 A . (...) -- C:\WINDOWS\System32\drivers\cimfs.sys [98304] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\WINDOWS\System32\drivers\circlass.sys [52224] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:21 A . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\WINDOWS\System32\drivers\Classpnp.sys [417080] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:58 A . (.Microsoft Corporation - Cloud Files Mini Filter Driver.) -- C:\WINDOWS\System32\drivers\cldflt.sys [499712] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:39 A . (.Microsoft Corporation - Common Log File System Driver.) -- C:\WINDOWS\System32\drivers\clfs.sys [414024] =>.Microsoft®
O58 - SDL:2022/04/10 03:36:34 A . (.Microsoft Corporation - CLIP Service.) -- C:\WINDOWS\System32\drivers\ClipSp.sys [1094456] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\WINDOWS\System32\drivers\CmBatt.sys [36864] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:35:20 A . (.Microsoft Corporation - Kernel Configuration Manager Initial Config.) -- C:\WINDOWS\System32\drivers\cmimcext.sys [29000] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:17 A . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\WINDOWS\System32\drivers\cng.sys [746416] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:37 A . (.Microsoft Corporation - CNG Hardware Assist algorithm provider.) -- C:\WINDOWS\System32\drivers\cnghwassist.sys [40968] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:00 A . (.Microsoft Corporation - Console Driver.) -- C:\WINDOWS\System32\drivers\condrv.sys [57144] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\crashdmp.sys [99368] =>.Microsoft®
O58 - SDL:2022/04/10 03:46:57 A . (.Microsoft Corporation - Windows Client Side Caching Driver.) -- C:\WINDOWS\System32\drivers\csc.sys [586752] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:38:25 A . (.Microsoft Corporation - DAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\dam.sys [97096] =>.Microsoft®
O58 - SDL:2022/04/12 08:52:22 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\WINDOWS\System32\drivers\dbx-canary.sys [47600] =>.Microsoft®
O58 - SDL:2022/04/12 08:52:22 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\WINDOWS\System32\drivers\dbx-dev.sys [47600] =>.Microsoft®
O58 - SDL:2022/04/12 08:52:22 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\WINDOWS\System32\drivers\dbx-stable.sys [47600] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:07 A . (.Microsoft Corporation - Xbox Device Authentication Driver.) -- C:\WINDOWS\System32\drivers\devauthe.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:39 A . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\dfsc.sys [152064] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - PnP Disk Driver.) -- C:\WINDOWS\System32\drivers\disk.sys [98624] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:52 A . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\WINDOWS\System32\drivers\Diskdump.sys [38200] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:52 A . (.Microsoft Corporation - Boot Over USB Dump Driver.) -- C:\WINDOWS\System32\drivers\Dmpusbstor.sys [15360] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Dynamic Memory.) -- C:\WINDOWS\System32\drivers\dmvsc.sys [59192] =>.Microsoft®
O58 - SDL:2016/05/18 18:50:44 A . (.Intel Corporation - DPTF CPU Device (64-Bit).) -- C:\WINDOWS\System32\drivers\dptf_cpu.sys [65088] =>.Intel Corporation®
O58 - SDL:2022/04/10 03:34:09 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmk.sys [97792] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:09 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmkaud.sys [16128] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:46 A . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpata.sys [37392] =>.Microsoft®
O58 - SDL:2022/04/10 03:49:32 A . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\WINDOWS\System32\drivers\dumpfve.sys [94176] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:23 A . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsd.sys [196432] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:37 A . (.Microsoft Corporation - SD Host Controller Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsdport.sys [32768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:52 A . (.Microsoft Corporation - Storport Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpstorport.sys [35128] =>.Microsoft®
O58 - SDL:2022/04/10 03:36:36 A . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\WINDOWS\System32\drivers\dxgkrnl.sys [3814768] =>.Microsoft®
O58 - SDL:2022/04/10 03:36:36 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms1.sys [456016] =>.Microsoft®
O58 - SDL:2022/04/10 03:36:36 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms2.sys [901960] =>.Microsoft®
O58 - SDL:2022/04/10 03:44:19 A . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667.) -- C:\WINDOWS\System32\drivers\EhStorClass.sys [95032] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - Microsoft driver for storage devices suppor.) -- C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys [124728] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Error Device Driver.) -- C:\WINDOWS\System32\drivers\errdev.sys [15872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2016/05/19 01:51:24 A . (.Intel Corporation - DPTF Zone (64-Bit).) -- C:\WINDOWS\System32\drivers\esif_lf.sys [343608] =>.Intel Corporation®
O58 - SDL:2019/12/07 18:07:50 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3418936] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:05 A . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\WINDOWS\System32\drivers\exfat.sys [418648] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:05 A . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\WINDOWS\System32\drivers\fastfat.sys [426352] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\WINDOWS\System32\drivers\fdc.sys [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:09 A . (.Microsoft Corporation - Windows sandboxing and encryption filter.) -- C:\WINDOWS\System32\drivers\filecrypt.sys [59392] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:46 A . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\WINDOWS\System32\drivers\fileinfo.sys [94736] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:46 A . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\WINDOWS\System32\drivers\filetrace.sys [40448] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Floppy Driver.) -- C:\WINDOWS\System32\drivers\flpydisk.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:21 A . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\System32\drivers\fltMgr.sys [435568] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:20 A . (.Microsoft Corporation - File System Dependency Manager Mini Filter.) -- C:\WINDOWS\System32\drivers\fsdepends.sys [69968] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\WINDOWS\System32\drivers\fs_rec.sys [33592] =>.Microsoft®
O58 - SDL:2022/04/10 03:49:32 A . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\WINDOWS\System32\drivers\fvevol.sys [801608] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:35 A . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\WINDOWS\System32\drivers\FWPKCLNT.SYS [502584] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:05 A . (.Microsoft Corporation - GPU Energy Kernel Driver.) -- C:\WINDOWS\System32\drivers\gpuenergydrv.sys [8704] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:08 A . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [134656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:08 A . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\HdAudio.sys [430080] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Hid Battery Driver.) -- C:\WINDOWS\System32\drivers\hidbatt.sys [39440] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:22 A . (.Microsoft Corporation - Bluetooth Miniport Driver for HID Devices.) -- C:\WINDOWS\System32\drivers\hidbth.sys [120320] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:22 A . (.Microsoft Corporation - Hid Class Library.) -- C:\WINDOWS\System32\drivers\hidclass.sys [225792] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - I2C HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidi2c.sys [57344] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - HID Button over Interrupt Driver.) -- C:\WINDOWS\System32\drivers\hidinterrupt.sys [55824] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidir.sys [48640] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:22 A . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\System32\drivers\hidparse.sys [46080] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - SPI HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidspi.sys [66560] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:22 A . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidusb.sys [44032] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:53 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64312] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:17 A . (.Microsoft Corporation - HTTP Protocol Stack.) -- C:\WINDOWS\System32\drivers\http.sys [1576760] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Hyper-V Crashdump.) -- C:\WINDOWS\System32\drivers\hvcrash.sys [35128] =>.Microsoft®
O58 - SDL:2022/04/10 03:43:57 A . (.Microsoft Corporation - Hypervisor Boot Driver.) -- C:\WINDOWS\System32\drivers\hvservice.sys [95048] =>.Microsoft®
O58 - SDL:2022/04/10 03:45:30 A . (.Microsoft Corporation - Microsoft Hyper-V Socket Provider.) -- C:\WINDOWS\System32\drivers\hvsocket.sys [148280] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:21 A . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\WINDOWS\System32\drivers\hwpolicy.sys [33096] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) -- C:\WINDOWS\System32\drivers\hyperkbd.sys [27448] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Drive.) -- C:\WINDOWS\System32\drivers\HyperVideo.sys [41784] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [118272] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [36352] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [91136] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [79360] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [93184] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [112128] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [96256] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [171520] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [175104] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [177152] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/12/07 18:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [177664] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/12/07 18:07:50 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2019/12/07 18:07:50 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAVC.sys [884752] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412176] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [558904] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:01 A . (.Microsoft Corporation - Indirect displays kernel-mode filter driver.) -- C:\WINDOWS\System32\drivers\IndirectKmd.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\WINDOWS\System32\drivers\intelide.sys [19792] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:13 A . (.Microsoft Corporation - Intel Power Engine Plugin.) -- C:\WINDOWS\System32\drivers\intelpep.sys [418800] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:47 A . (.Microsoft Corporation - Intel Power Limit Driver.) -- C:\WINDOWS\System32\drivers\intelpmax.sys [30720] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\intelppm.sys [230728] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:13 A . (.Microsoft Corporation - Intel Telemetry Driver.) -- C:\WINDOWS\System32\drivers\IntelTA.sys [26608] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:02 A . (.Microsoft Corporation - I/O rate control Filter.) -- C:\WINDOWS\System32\drivers\iorate.sys [57168] =>.Microsoft®
O58 - SDL:2022/04/10 03:40:50 A . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\WINDOWS\System32\drivers\ipfltdrv.sys [90112] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - WMI IPMI DRIVER.) -- C:\WINDOWS\System32\drivers\IPMIDrv.sys [117584] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:34 A . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\ipnat.sys [225280] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:09 A . (.Microsoft Corporation - IPT Driver.) -- C:\WINDOWS\System32\drivers\ipt.sys [59704] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - PNP ISA Bus Driver.) -- C:\WINDOWS\System32\drivers\isapnp.sys [22864] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\ItSas35i.sys [172344] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Keyboard Class Driver.) -- C:\WINDOWS\System32\drivers\kbdclass.sys [71480] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - HID Keyboard Filter Driver.) -- C:\WINDOWS\System32\drivers\kbdhid.sys [46592] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:46:48 A . (.Microsoft Corporation - Keyboard Lockdown Subsystem.) -- C:\WINDOWS\System32\drivers\kbldfltr.sys [29000] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) -- C:\WINDOWS\System32\drivers\kdnic.sys [33296] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:04 A . (.Microsoft Corporation - Network Power Dependency Broker.) -- C:\WINDOWS\System32\drivers\KNetPwrDepBroker.sys [32256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:58 A . (.Microsoft Corporation - Kernel CSA Library.) -- C:\WINDOWS\System32\drivers\ks.sys [449024] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:33 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecdd.sys [148312] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:18 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecpkg.sys [180040] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:58 A . (.Microsoft Corporation - Kernel Streaming WOW Thunk Service.) -- C:\WINDOWS\System32\drivers\ksthunk.sys [29696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:55 A . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\WINDOWS\System32\drivers\lltdio.sys [72704] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:53 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108856] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [124216] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [135992] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82744] =>.Microsoft®
O58 - SDL:2022/04/10 03:40:08 A . (.Microsoft Corporation - LUA File Virtualization Filter Driver.) -- C:\WINDOWS\System32\drivers\luafv.sys [140800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - MA-USB Host Controller Driver.) -- C:\WINDOWS\System32\drivers\mausbhost.sys [537608] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - MA-USB IP Driver.) -- C:\WINDOWS\System32\drivers\mausbip.sys [64016] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:03 A . (.Microsoft Corporation - Windows Mobile Broadband Class Extension.) -- C:\WINDOWS\System32\drivers\MbbCx.sys [391168] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:00 A . (.Microsoft Corporation - Medium changer class driver.) -- C:\WINDOWS\System32\drivers\mcd.sys [25088] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59704] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [81720] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas35i.sys [105480] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575800] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:47 A . (.Microsoft Corporation - Microsoft Bluetooth Avrcp Transport Driver.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [65024] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:22 A . (.Microsoft Corporation - Legacy Bluetooth LE Bus Enumerator.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [106496] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [1131320] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:17 A . (.Microsoft Corporation - MMCSS Driver.) -- C:\WINDOWS\System32\drivers\mmcss.sys [53248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:45:19 A . (.Microsoft Corporation - Modem Device Driver.) -- C:\WINDOWS\System32\drivers\modem.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:12 A . (.Microsoft Corporation - Monitor Driver.) -- C:\WINDOWS\System32\drivers\monitor.sys [83968] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Mouse Class Driver.) -- C:\WINDOWS\System32\drivers\mouclass.sys [67600] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - HID Mouse Filter Driver.) -- C:\WINDOWS\System32\drivers\mouhid.sys [35328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - Mount Point Manager.) -- C:\WINDOWS\System32\drivers\mountmgr.sys [110392] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:33 A . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\WINDOWS\System32\drivers\mpsdrv.sys [80896] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:45:33 A . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\WINDOWS\System32\drivers\mrxdav.sys [165888] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:39 A . (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\mrxsmb.sys [579432] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:39 A . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\WINDOWS\System32\drivers\mrxsmb20.sys [261448] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - Mailslot driver.) -- C:\WINDOWS\System32\drivers\msfs.sys [44048] =>.Microsoft®
O58 - SDL:2022/04/10 03:36:41 A . (.Microsoft Corporation - GPIO Class Extension Driver.) -- C:\WINDOWS\System32\drivers\msgpioclx.sys [183112] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - GPIO Button Driver.) -- C:\WINDOWS\System32\drivers\msgpiowin32.sys [56120] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:36 A . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\WINDOWS\System32\drivers\mshidkmdf.sys [8192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:16 A . (.Microsoft Corporation - Pass-through Driver for HID-UMDF Interface.) -- C:\WINDOWS\System32\drivers\mshidumdf.sys [12288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:36 A . (.Microsoft Corporation - Hardware Notification Class Extension Drive.) -- C:\WINDOWS\System32\drivers\mshwnclx.sys [30208] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - ISA Driver.) -- C:\WINDOWS\System32\drivers\msisadrv.sys [20280] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\WINDOWS\System32\drivers\msiscsi.sys [293176] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:58 A . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\System32\drivers\mskssrv.sys [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:05 A . (.Microsoft Corporation - Microsoft Link-Layer Discovery Protocol Dri.) -- C:\WINDOWS\System32\drivers\mslldp.sys [78848] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:58 A . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\System32\drivers\mspclock.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:58 A . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\System32\drivers\mspqm.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:13 A . (.Microsoft Corporation - Windows QUIC Driver.) -- C:\WINDOWS\System32\drivers\msquic.sys [322376] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:34 A . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\WINDOWS\System32\drivers\msrpc.sys [375608] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:58 A . (.Microsoft Corporation - Microsoft Security Events Component file sy.) -- C:\WINDOWS\System32\drivers\mssecflt.sys [331064] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\WINDOWS\System32\drivers\mssmbios.sys [47928] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:58 A . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\WINDOWS\System32\drivers\mstee.sys [12288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:53 A . (.Microsoft Corporation - Microsoft Multi-Touch HID Driver.) -- C:\WINDOWS\System32\drivers\MTConfig.sys [17920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:39 A . (.Microsoft Corporation - Multiple UNC Provider Driver.) -- C:\WINDOWS\System32\drivers\mup.sys [132920] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63800] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [146232] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:34 A . (.Microsoft Corporation - Network Driver Interface Specification (NDI.) -- C:\WINDOWS\System32\drivers\ndis.sys [1476944] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:48 A . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) -- C:\WINDOWS\System32\drivers\ndiscap.sys [54272] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:34 A . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) -- C:\WINDOWS\System32\drivers\NdisImPlatform.sys [135168] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:52 A . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\WINDOWS\System32\drivers\ndistapi.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - NDIS User mode I/O driver.) -- C:\WINDOWS\System32\drivers\ndisuio.sys [70656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:05 A . (.Microsoft Corporation - Microsoft Virtual Network Adapter Enumerato.) -- C:\WINDOWS\System32\drivers\NdisVirtualBus.sys [23040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:52 A . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\WINDOWS\System32\drivers\ndiswan.sys [212992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:48 A . (.Microsoft Corporation - RDMA Sample Driver.) -- C:\WINDOWS\System32\drivers\NDKPing.sys [72720] =>.Microsoft®
O58 - SDL:2022/04/10 03:40:52 A . (.Microsoft Corporation - NDIS Proxy.) -- C:\WINDOWS\System32\drivers\ndproxy.sys [93696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:33 A . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) -- C:\WINDOWS\System32\drivers\Ndu.sys [131584] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/04/18 23:48:37 A . (.SoftEther Corporation - SoftEther VPN.) -- C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [37824] =>.SoftEther Corporation®
O58 - SDL:2020/01/10 19:43:42 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\WINDOWS\System32\drivers\netaapl64.sys [23040] [Unsigned] =>.Apple Inc.
O58 - SDL:2022/04/10 03:39:35 A . (.Microsoft Corporation - Network Adapter Class Extension for WDF.) -- C:\WINDOWS\System32\drivers\NetAdapterCx.sys [214528] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:04 A . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\WINDOWS\System32\drivers\netbios.sys [64312] =>.Microsoft®
O58 - SDL:2022/04/10 03:40:34 A . (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netbt.sys [341504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:34 A . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\WINDOWS\System32\drivers\netio.sys [601944] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:27 A . (.Microsoft Corporation - Virtual NDIS Miniport.) -- C:\WINDOWS\System32\drivers\netvsc.sys [252264] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:22 A . (.Microsoft Corporation - NPFS Driver.) -- C:\WINDOWS\System32\drivers\npfs.sys [87368] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Named pipe service triggers.) -- C:\WINDOWS\System32\drivers\npsvctrig.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:34 A . (.Microsoft Corporation - NSI Proxy.) -- C:\WINDOWS\System32\drivers\nsiproxy.sys [48640] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:32 A . (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2851664] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:58 A . (.Microsoft Corporation - NTOS extension host driver.) -- C:\WINDOWS\System32\drivers\ntosext.sys [20792] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - NULL Driver.) -- C:\WINDOWS\System32\drivers\null.sys [7680] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - NVDIMM device driver.) -- C:\WINDOWS\System32\drivers\nvdimm.sys [168464] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150328] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166200] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:43 A . (.Microsoft Corporation - NativeWiFi Miniport Driver.) -- C:\WINDOWS\System32\drivers\nwifi.sys [757760] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:37:48 A . (.Microsoft Corporation - QoS Packet Scheduler.) -- C:\WINDOWS\System32\drivers\pacer.sys [161608] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Parallel Port Driver.) -- C:\WINDOWS\System32\drivers\parport.sys [109056] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:33 A . (.Microsoft Corporation - Partition driver.) -- C:\WINDOWS\System32\drivers\partmgr.sys [182608] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - NT Plug and Play PCI Enumerator.) -- C:\WINDOWS\System32\drivers\pci.sys [469840] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\pciide.sys [16712] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\WINDOWS\System32\drivers\pciidex.sys [56656] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - PCMCIA Bus Driver.) -- C:\WINDOWS\System32\drivers\pcmcia.sys [127800] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:12 A . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\WINDOWS\System32\drivers\pcw.sys [57656] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:20 A . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\WINDOWS\System32\drivers\pdc.sys [159056] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:29 A . (.Microsoft Corporation - Protected Environment Authentication and Au.) -- C:\WINDOWS\System32\drivers\PEAuth.sys [823808] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58680] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [68408] =>.Microsoft®
O58 - SDL:2022/04/10 03:45:15 A . (.Microsoft Corporation - Packet Monitor Driver.) -- C:\WINDOWS\System32\drivers\PktMon.sys [130360] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Persistent memory driver.) -- C:\WINDOWS\System32\drivers\pmem.sys [138040] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - Plug and Play Memory Driver.) -- C:\WINDOWS\System32\drivers\pnpmem.sys [17408] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:36 A . (.Microsoft Corporation - Port Device Class Configuration Filter Driv.) -- C:\WINDOWS\System32\drivers\portcfg.sys [27136] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:09 A . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\System32\drivers\portcls.sys [388608] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\processr.sys [216376] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:33 A . (.Microsoft Corporation - Time Travel Debugging Process Launch Monito.) -- C:\WINDOWS\System32\drivers\ProcLaunchMon.sys [43448] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:05 A . (.Microsoft Corporation - Microsoft Quality Windows Audio Video Exper.) -- C:\WINDOWS\System32\drivers\qwavedrv.sys [53248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:09 A . (.Microsoft Corporation - RAM Disk Driver.) -- C:\WINDOWS\System32\drivers\ramdisk.sys [42296] =>.Microsoft®
O58 - SDL:2022/04/10 03:40:50 A . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\WINDOWS\System32\drivers\rasacd.sys [20480] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:52 A . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\rasl2tp.sys [110080] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:07 A . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\raspppoe.sys [87552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:52 A . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\WINDOWS\System32\drivers\raspptp.sys [101376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:52 A . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\WINDOWS\System32\drivers\rassstp.sys [86016] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:39 A . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) -- C:\WINDOWS\System32\drivers\rdbss.sys [462696] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\WINDOWS\System32\drivers\rdpbus.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:45:14 A . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [169984] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:44:58 A . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\WINDOWS\System32\drivers\rdpvideominiport.sys [32624] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:54 A . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\WINDOWS\System32\drivers\rdyboost.sys [297784] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:55 A . (.Microsoft Corporation - NT ReFS FS Driver.) -- C:\WINDOWS\System32\drivers\refs.sys [2004792] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:55 A . (.Microsoft Corporation - NT ReFS FS Driver.) -- C:\WINDOWS\System32\drivers\refsv1.sys [990536] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\System32\drivers\rfcomm.sys [213504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:27 A . (.Microsoft Corporation - Microsoft RemoteFX VM Transport.) -- C:\WINDOWS\System32\drivers\RfxVmt.sys [8192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - ResourceHub Proxy Driver.) -- C:\WINDOWS\System32\drivers\rhproxy.sys [115712] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:41 A . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\WINDOWS\System32\drivers\rmcast.sys [158208] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:07 A . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\WINDOWS\System32\drivers\RNDISMP.sys [37376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:51 A . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\WINDOWS\System32\drivers\rootmdm.sys [13824] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:55 A . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) -- C:\WINDOWS\System32\drivers\rspndr.sys [89088] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/19 03:50:08 A . (.Realtek - Realtek 8125/8136/8168/8169 NDIS 6.40 64-bi.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [1162832] =>.Realtek Semiconductor Corp.®
O58 - SDL:2019/12/07 18:08:09 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys [48640] [Unsigned] =>.Realtek
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\WINDOWS\System32\drivers\sbp2port.sys [118088] =>.Microsoft®
O58 - SDL:2022/04/10 03:41:08 A . (.Microsoft Corporation - Microsoft Smart Card Reader Filter Driver.) -- C:\WINDOWS\System32\drivers\scfilter.sys [44032] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - Storage Class Memory Bus Driver.) -- C:\WINDOWS\System32\drivers\scmbus.sys [158520] =>.Microsoft®
O58 - SDL:2022/04/10 03:40:13 A . (.Microsoft Corporation - SCSI Port Driver.) -- C:\WINDOWS\System32\drivers\scsiport.sys [188232] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:23 A . (.Microsoft Corporation - SecureDigital Bus Driver.) -- C:\WINDOWS\System32\drivers\sdbus.sys [306544] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - SDF Reflector.) -- C:\WINDOWS\System32\drivers\SDFRd.sys [35128] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:09 A . (.Microsoft Corporation - SD Host Controller Port Driver.) -- C:\WINDOWS\System32\drivers\sdport.sys [105488] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:23 A . (.Microsoft Corporation - SD Storage Class Driver.) -- C:\WINDOWS\System32\drivers\sdstor.sys [104264] =>.Microsoft®
O58 - SDL:2020/04/18 23:45:05 A . (.SoftEther Corporation - SoftEther VPN.) -- C:\WINDOWS\System32\drivers\SeLow_x64.sys [50624] =>.SoftEther Corporation®
O58 - SDL:2019/12/07 18:08:36 A . (.Microsoft Corporation - Serial Class Extension.) -- C:\WINDOWS\System32\drivers\SerCx.sys [86328] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:36 A . (.Microsoft Corporation - Serial Class Extension V2.) -- C:\WINDOWS\System32\drivers\SerCx2.sys [173072] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\WINDOWS\System32\drivers\serenum.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Serial Device Driver.) -- C:\WINDOWS\System32\drivers\serial.sys [90624] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Serial Mouse Filter Driver.) -- C:\WINDOWS\System32\drivers\sermouse.sys [29184] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\WINDOWS\System32\drivers\sfloppy.sys [19456] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:33 A . (.Microsoft Corporation - System Guard Runtime Monitor Agent Driver.) -- C:\WINDOWS\System32\drivers\SgrmAgent.sys [88080] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44856] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81720] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - Sleep Study Helper.) -- C:\WINDOWS\System32\drivers\SleepStudyHelper.sys [38200] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Microsemi Corportation - Storport Miniport Driver for SmartRAID/Smar.) -- C:\WINDOWS\System32\drivers\SmartSAMD.sys [209720] =>.Microsoft®
O58 - SDL:2019/12/07 23:48:54 A . (.Microsoft Corporation - SMB Network Direct Driver.) -- C:\WINDOWS\System32\drivers\smbdirect.sys [172544] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:09 A . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\WINDOWS\System32\drivers\smclib.sys [21504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - Storage Spaces Dump Driver.) -- C:\WINDOWS\System32\drivers\spacedump.sys [215864] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:34 A . (.Microsoft Corporation - Storage Spaces Parser.) -- C:\WINDOWS\System32\drivers\spaceparser.sys [26624] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\WINDOWS\System32\drivers\spaceport.sys [679736] =>.Microsoft®
O58 - SDL:2019/12/07 23:48:51 A . (.Microsoft Corporation - Holographic Spatial Graph Filter.) -- C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [90936] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:37 A . (.Microsoft Corporation - SPB Class Extension.) -- C:\WINDOWS\System32\drivers\SpbCx.sys [87352] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:39 A . (.Microsoft Corporation - Smb 2.0 Server driver.) -- C:\WINDOWS\System32\drivers\srv2.sys [784896] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:39:39 A . (.Microsoft Corporation - Server Network driver.) -- C:\WINDOWS\System32\drivers\srvnet.sys [315904] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:53 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31032] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storahci.sys [186168] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:15 A . (.Microsoft Corporation - Microsoft NVM Express Storport Miniport Dri.) -- C:\WINDOWS\System32\drivers\stornvme.sys [162128] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:20 A . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\WINDOWS\System32\drivers\storport.sys [723280] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:37 A . (.Microsoft Corporation - Storage QoS Filter.) -- C:\WINDOWS\System32\drivers\storqosflt.sys [92984] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:16 A . (.Microsoft Corporation - MS UFS Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storufs.sys [61264] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Storage VSC Driver.) -- C:\WINDOWS\System32\drivers\storvsc.sys [44048] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:00 A . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\WINDOWS\System32\drivers\stream.sys [82432] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:27 A . (.Microsoft Corporation - Microsoft RemoteFX Synth3D Video VSC.) -- C:\WINDOWS\System32\drivers\Synth3dVsc.sys [6656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/02 17:49:00 A . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\WINDOWS\System32\drivers\tap0901.sys [31232] [Unsigned] =>.The OpenVPN Project
O58 - SDL:2019/12/07 18:09:00 A . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\WINDOWS\System32\drivers\tape.sys [33280] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:35:35 A . (.Microsoft Corporation - Export driver for kernel mode TPM API.) -- C:\WINDOWS\System32\drivers\tbs.sys [31568] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:35 A . (.Microsoft Corporation - TCP/IP Driver.) -- C:\WINDOWS\System32\drivers\tcpip.sys [2991416] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:04 A . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\WINDOWS\System32\drivers\tcpipreg.sys [54784] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - TDI Wrapper.) -- C:\WINDOWS\System32\drivers\tdi.sys [39736] =>.Microsoft®
O58 - SDL:2022/04/10 03:43:55 A . (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [117584] =>.Microsoft®
O58 - SDL:2016/04/14 18:37:54 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [202848] =>.Intel(R) Embedded Subsystems and IP Blocks Group®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Terminal Server Input Driver.) -- C:\WINDOWS\System32\drivers\terminpt.sys [41272] =>.Microsoft®
O58 - SDL:2020/06/29 20:28:57 A . (.TENCENT - tesrsdt64 NT Driver.) -- C:\WINDOWS\System32\drivers\tesrsdt.sys [812208] =>.Tencent Technology(Shenzhen) Company Limited®
O58 - SDL:2022/04/10 03:39:39 A . (.Microsoft Corporation - Kernel Transaction Manager Driver.) -- C:\WINDOWS\System32\drivers\tm.sys [142136] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:24 A . (.Microsoft Corporation - TPM Device Driver.) -- C:\WINDOWS\System32\drivers\tpm.sys [255288] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:09 A . (.Microsoft Corporation - Remote Desktop USB Hub Filter Driver.) -- C:\WINDOWS\System32\drivers\TsUsbFlt.sys [66560] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:13 A . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\WINDOWS\System32\drivers\TsUsbGD.sys [37888] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:28 A . (.Microsoft Corporation - Remote Desktop USB Hub.) -- C:\WINDOWS\System32\drivers\tsusbhub.sys [137728] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:04 A . (.Microsoft Corporation - Microsoft Tunnel Interface Driver.) -- C:\WINDOWS\System32\drivers\tunnel.sys [129024] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:16 A . (.Microsoft Corporation - Microsoft Uasp Driver.) -- C:\WINDOWS\System32\drivers\uaspstor.sys [79160] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:02 A . (.Microsoft Corporation - USB Connector Manager KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmCx.sys [160256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:37 A . (.Microsoft Corporation - UCM-TCPCI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmTcpciCx.sys [188416] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - UCM-UCSI ACPI Client Driver.) -- C:\WINDOWS\System32\drivers\UcmUcsiAcpiClient.sys [36864] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:38:02 A . (.Microsoft Corporation - UCM-UCSI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmUcsiCx.sys [113152] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:09 A . (.Microsoft Corporation - USB Controller Extension.) -- C:\WINDOWS\System32\drivers\Ucx01000.sys [259896] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:09 A . (.Microsoft Corporation - "udecx.DRIVER".) -- C:\WINDOWS\System32\drivers\Udecx.sys [52736] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:09:51 A . (.Microsoft Corporation - UDF File System Driver.) -- C:\WINDOWS\System32\drivers\udfs.sys [344064] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:46:41 A . (.Microsoft Corporation - Microsoft User Experience Virtualization Ag.) -- C:\WINDOWS\System32\drivers\UevAgentDriver.sys [41288] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:02 A . (.Microsoft Corporation - USB Function Driver Class Extension.) -- C:\WINDOWS\System32\drivers\ufx01000.sys [324432] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:23 A . (.Microsoft Corporation - UFX Synopsys Client Driver.) -- C:\WINDOWS\System32\drivers\ufxsynopsys.sys [168264] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Generic pass-through driver.) -- C:\WINDOWS\System32\drivers\umpass.sys [15360] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/29 23:00:07 A . (.TENCENT - Loader64 NT Driver.) -- C:\WINDOWS\System32\drivers\UniSafe.sys [581912] =>.Tencent Technology(Shenzhen) Company Limited®
O58 - SDL:2019/12/07 18:08:37 A . (.Microsoft Corporation - USB Role-Switch Class Extension.) -- C:\WINDOWS\System32\drivers\urscx01000.sys [76304] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:07 A . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\WINDOWS\System32\drivers\usb8023.sys [24064] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:08 A . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\WINDOWS\System32\drivers\USBAUDIO.sys [209920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - Microsoft USB Audio Class 2.0 Driver.) -- C:\WINDOWS\System32\drivers\usbaudio2.sys [260608] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:41 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\System32\drivers\USBCAMD2.sys [40448] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:23 A . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\WINDOWS\System32\drivers\usbccgp.sys [185664] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:50 A . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\WINDOWS\System32\drivers\usbcir.sys [107520] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\WINDOWS\System32\drivers\usbd.sys [33080] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbehci.sys [86544] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\WINDOWS\System32\drivers\usbhub.sys [528184] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:23 A . (.Microsoft Corporation - USB3 HUB Driver.) -- C:\WINDOWS\System32\drivers\USBHUB3.SYS [648016] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbohci.sys [30208] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:37 A . (...) -- C:\WINDOWS\System32\drivers\UsbPmApi.sys [53248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - USB 1.1 & 2.0 Port Driver.) -- C:\WINDOWS\System32\drivers\usbport.sys [473400] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:12 A . (.Microsoft Corporation - USB Printer driver.) -- C:\WINDOWS\System32\drivers\usbprint.sys [40448] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:18 A . (.Microsoft Corporation - USB Serial Driver.) -- C:\WINDOWS\System32\drivers\usbser.sys [81408] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:23 A . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS [136528] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbuhci.sys [39424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:13 A . (.Microsoft Corporation - USB Video Class Driver.) -- C:\WINDOWS\System32\drivers\usbvideo.sys [330576] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:23 A . (.Microsoft Corporation - USB XHCI Driver.) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS [624976] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Virtual Drive Root Enumerator.) -- C:\WINDOWS\System32\drivers\vdrvroot.sys [67384] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - Driver Verifier Extension.) -- C:\WINDOWS\System32\drivers\VerifierExt.sys [347448] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:19 A . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\WINDOWS\System32\drivers\vhdmp.sys [821584] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Virtual HID Framework (VHF) Driver.) -- C:\WINDOWS\System32\drivers\vhf.sys [47616] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:25 A . (.Microsoft Corporation - Microsoft Hyper-V Virtualization Infrastruc.) -- C:\WINDOWS\System32\drivers\Vid.sys [641352] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - Video Port Driver.) -- C:\WINDOWS\System32\drivers\videoprt.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:45:23 A . (.Microsoft Corporation - Hyper-V VMBus KMCL.) -- C:\WINDOWS\System32\drivers\vmbkmcl.sys [114504] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:26 A . (.Microsoft Corporation - Microsoft Hyper-V Virtual Machine Bus Child.) -- C:\WINDOWS\System32\drivers\vmbus.sys [160072] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) -- C:\WINDOWS\System32\drivers\VMBusHID.sys [36664] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Virtual Machine Generation Counter.) -- C:\WINDOWS\System32\drivers\vmgencounter.sys [23864] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Virtual Machine Guest Infrastructure Driver.) -- C:\WINDOWS\System32\drivers\vmgid.sys [19768] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) -- C:\WINDOWS\System32\drivers\vms3cap.sys [18960] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:26 A . (.Microsoft Corporation - Virtual Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\vmstorfl.sys [54080] =>.Microsoft®
O58 - SDL:2022/04/10 03:34:14 A . (.Microsoft Corporation - Volume Manager Driver.) -- C:\WINDOWS\System32\drivers\volmgr.sys [90960] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:37 A . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\WINDOWS\System32\drivers\volmgrx.sys [389432] =>.Microsoft®
O58 - SDL:2022/04/10 03:36:00 A . (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [429880] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:53 A . (.Microsoft Corporation - Volume driver.) -- C:\WINDOWS\System32\drivers\volume.sys [16696] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:57 A . (.Microsoft Corporation - Virtual PCI Bus.) -- C:\WINDOWS\System32\drivers\vpci.sys [89400] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166712] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305464] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:13 A . (.Microsoft Corporation - Virtual Wireless Bus Driver.) -- C:\WINDOWS\System32\drivers\vwifibus.sys [29184] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:35:44 A . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\WINDOWS\System32\drivers\vwififlt.sys [77824] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:13 A . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\WINDOWS\System32\drivers\vwifimp.sys [50688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:53 A . (.Microsoft Corporation - Wacom Serial Pen Tablet HID Driver.) -- C:\WINDOWS\System32\drivers\wacompen.sys [31232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:52 A . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\WINDOWS\System32\drivers\wanarp.sys [93184] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:36:36 A . (.Microsoft Corporation - Watchdog Driver.) -- C:\WINDOWS\System32\drivers\watchdog.sys [74752] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:38:00 A . (.Microsoft Corporation - Windows Container Isolation FS Filter Drive.) -- C:\WINDOWS\System32\drivers\wcifs.sys [202568] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:00 A . (.Microsoft Corporation - Windows Container Name Virtualization FS Fi.) -- C:\WINDOWS\System32\drivers\wcnfs.sys [93184] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:15 A . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\WINDOWS\System32\drivers\WdBoot.sys [46688] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:33 A . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\System32\drivers\Wdf01000.sys [828240] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:15 A . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\WINDOWS\System32\drivers\WdFilter.sys [350136] =>.Microsoft®
O58 - SDL:2022/04/10 03:39:33 A . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\WINDOWS\System32\drivers\WdfLdr.sys [59192] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:43 A . (.Microsoft Corporation - WDI Driver Framework Driver.) -- C:\WINDOWS\System32\drivers\WdiWiFi.sys [967168] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:39 A . (.Microsoft Corporation - WDM Companion Filter.) -- C:\WINDOWS\System32\drivers\WdmCompanionFilter.sys [23560] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:16 A . (.Microsoft Corporation - Windows Defender Network Stream Filter.) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys [54200] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - Windows Error Reporting Kernel Driver.) -- C:\WINDOWS\System32\drivers\werkernel.sys [52024] =>.Microsoft®
O58 - SDL:2022/04/10 03:37:48 A . (.Microsoft Corporation - WFP NDIS 6.30 Lightweight Filter Driver.) -- C:\WINDOWS\System32\drivers\wfplwfs.sys [180040] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:59 A . (.Microsoft Corporation - Wim file system Driver.) -- C:\WINDOWS\System32\drivers\wimmount.sys [39760] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:37 A . (.Microsoft Corporation - Windows Trusted Runtime Interface Driver.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys [76984] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Windows Trusted Runtime Service Proxy Drive.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys [18920] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:51 A . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) -- C:\WINDOWS\System32\drivers\winhv.sys [32784] =>.Microsoft®
O58 - SDL:2019/12/07 18:09:33 A . (.Microsoft Corporation - Windows Hypervisor Root Interface Driver.) -- C:\WINDOWS\System32\drivers\winhvr.sys [96056] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [36152] =>.Microsoft®
O58 - SDL:2022/04/10 03:35:10 A . (.Microsoft Corporation - Windows NAT Driver.) -- C:\WINDOWS\System32\drivers\winnat.sys [261120] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:56 A . (.Microsoft Corporation - Windows WinUSB Class Driver.) -- C:\WINDOWS\System32\drivers\winusb.sys [107008] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:07:54 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [73016] =>.Microsoft®
O58 - SDL:2019/12/07 18:07:54 A . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\WINDOWS\System32\drivers\wmiacpi.sys [19456] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\WINDOWS\System32\drivers\wmilib.sys [19472] =>.Microsoft®
O58 - SDL:2022/04/10 03:38:58 A . (.Microsoft Corporation - Windows Overlay Filter.) -- C:\WINDOWS\System32\drivers\wof.sys [234296] =>.Microsoft®
O58 - SDL:2019/12/07 23:48:53 A . (.Microsoft Corporation - Windows Portable Device Upper Class Filter.) -- C:\WINDOWS\System32\drivers\WpdUpFltr.sys [32568] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:49 A . (.Microsoft Corporation - WPP Trace Recorder.) -- C:\WINDOWS\System32\drivers\WppRecorder.sys [43832] =>.Microsoft®
O58 - SDL:2019/12/07 18:08:41 A . (.Microsoft Corporation - Winsock2 IFS Layer.) -- C:\WINDOWS\System32\drivers\ws2ifsl.sys [25088] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:08 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFPf.sys [136192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:40:08 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFRd.sys [315392] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:07 A . (.Microsoft Corporation - Game Input Protocol Driver.) -- C:\WINDOWS\System32\drivers\xboxgip.sys [332288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:34:07 A . (.Microsoft Corporation - XINPUT filter driver for HID.) -- C:\WINDOWS\System32\drivers\xinputhid.sys [51712] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:37:51 A . (.Microsoft Corporation - Multi-User Win32 Driver.) -- C:\WINDOWS\System32\win32k.sys [596992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:37:02 A . (.Microsoft Corporation - Base Win32k Kernel Driver.) -- C:\WINDOWS\System32\win32kbase.sys [2892800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:37:51 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\System32\win32kfull.sys [3813888] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/07 18:08:34 A . (.Microsoft Corporation - Win32k non session driver.) -- C:\WINDOWS\System32\win32kns.sys [30208] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:42:40 A . (.Microsoft Corporation - Multi-User Win32 Driver.) -- C:\WINDOWS\SysWOW64\win32k.sys [329728] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2022/04/10 03:42:40 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\SysWOW64\win32kfull.sys [2753536] [Unsigned] =>.Microsoft Corporation
---\\ Last modified or created user files (2) - 42s
O61 - LFC: 2022/04/13 17:21:55 A . (..) -- C:\Users\Ganja\Desktop\adware-removal-tool-by-tsa.exe [752296] {317DD1C55F51AC2756D9C93C060C6FA5}.
O61 - LFC: 2022/04/09 01:49:38 A . (.NetEase, Inc..) -- C:\Users\Ganja\Downloads\MuMuInstaller_1.4.0.0_gw-overseas_all_1644473805.exe [9731600] {036AF95E02CE45D35F44511E61C6CED6}.
---\\ File Associations Shell Spawning (10) - 1s
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value
---\\ Start Menu Internet (8) - 0s
O68 - StartMenuInternet: <Google Chrome> <Google Chrome> [64Bits][HKLM\..\Shell\open\Command] (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC®
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer> [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O68 - StartMenuInternet: <Google Chrome> <Google Chrome> [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer> [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\WINDOWS\System32\ie4ushowIE.exe =>.Microsoft Corporation
O68 - StartMenuInternet: <Google Chrome> <Google Chrome> [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer> [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialisation Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: <Google Chrome> <Google Chrome> [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Google LLC - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer> [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\WINDOWS\System32\ie4ushowIE.exe =>.Microsoft Corporation
---\\ Search Browser Infection (3) - 0s
O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] [64Bits]{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} - (Google) - http://www.google.com/ =>.Google Inc.
O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com
---\\ Search Svchost Services (51) - 3s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smart card Certificate Propagatio.) -- C:\WINDOWS\System32\certprop.dll [196608] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smart card Certificate Propagatio.) -- C:\Windows\System32\certprop.dll [196608] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\Windows\System32\srvsvc.dll [301568] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\Windows\System32\gpsvc.dll [1335808] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\IKEEXT.DLL [1054208] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [836096] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Log-on Service DLL.) -- C:\Windows\System32\seclogon.dll [32768] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\Windows\System32\iscsiexe.dll [160256] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll [112640] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\Windows\System32\schedsvc.dll [814592] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [243712] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [488960] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [515072] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports.) -- C:\Windows\System32\wercplsupport.dll [134656] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [2430976] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll [340480] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: TroubleshootingSvc (TroubleshootingSvc) . (.Microsoft Corporation - MitigationClient.) -- C:\Windows\System32\MitigationClient.dll [487936] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Provides infrastructure support for deployi.) -- C:\Windows\System32\LanguageOverlayServer.dll [302080] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [223232] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [1270272] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - Windows Managent Service DLL.) -- C:\Windows\System32\Windows.Internal.Management.dll [1016320] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: WManSvc (WManSvc) . (.Microsoft Corporation - Windows Management Service DLL.) -- C:\Windows\System32\Windows.Management.Service.dll [809984] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\Windows\System32\themeservice.dll [70656] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [1484288] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Network Setup Service.) -- C:\Windows\System32\NetSetupSvc.dll [335360] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\Windows\System32\wlidsvc.dll [2246144] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Token Broker.) -- C:\Windows\System32\TokenBroker.dll [1522176] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Geolocation Service.) -- C:\Windows\System32\lfsvc.dll [48640] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Natural Authentication Service.) -- C:\Windows\System32\NaturalAuth.dll [454656] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\Windows\System32\rasauto.dll [111616] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll [967680] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [551936] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\Windows\System32\Sens.dll [77824] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll [619008] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [316928] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [3403776] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\Windows\System32\qmgr.dll [1481216] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [259584] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [58880] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Flight Settings.) -- C:\Windows\System32\flightsettings.dll [939984] =>.Microsoft®
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Windows Push Notification System Service.) -- C:\Windows\System32\WpnService.dll [245248] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\Windows\System32\appinfo.dll [223232] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [1295360] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Update Session Orchestrator Service.) -- C:\Windows\System32\usosvc.dll [569856] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll [72704] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\Windows\System32\NcaSvc.dll [171520] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [1049088] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\Windows\System32\DeviceSetupManager.dll [288256] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Software installation Service.) -- C:\Windows\System32\appmgmts.dll [207360] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\Windows\System32\bdesvc.dll [555008] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\Windows\System32\KeyboardFilterSvc.dll [161096] =>.Microsoft®
---\\ Firewall Active Exception List (2) - 2s
O87 - FAEL: "TCP Query User{00DD2D5B-35AC-4505-8572-AA4C92765065}C:\program files (x86)\google\chrome\application\chrome.exe" [In-None-P6-TRUE] .(.Google LLC - Google Chrome.) -- C:\program files (x86)\google\chrome\application\chrome.exe =>.Google LLC®
O87 - FAEL: "UDP Query User{CCA87CB5-4478-4120-A651-06E6B64D3D65}C:\program files (x86)\google\chrome\application\chrome.exe" [In-None-P17-TRUE] .(.Google LLC - Google Chrome.) -- C:\program files (x86)\google\chrome\application\chrome.exe =>.Google LLC®
---\\ Product Upgrade Codes (64) - 2s
O90 - PUC: "00004109340000000100000000F01FEC" [HKLM] . (.Microsoft Office Office 32-bit Components 2010.) =>.Microsoft Corporation
O90 - PUC: "00004109340090400100000000F01FEC" [HKLM] . (.Microsoft Office Shared 32-bit MUI (English) 2010.) =>.Microsoft Corporation
O90 - PUC: "00004109511090400100000000F01FEC" [HKLM] . (.Microsoft Office Shared Setup Metadata MUI (English) 2010.) =>.Microsoft Corporation
O90 - PUC: "00004109610000000100000000F01FEC" [HKLM] . (.Microsoft Office Excel 2010.) =>.Microsoft Corporation
O90 - PUC: "00004109610090400100000000F01FEC" [HKLM] . (.Microsoft Office Excel MUI (English) 2010.) =>.Microsoft Corporation
O90 - PUC: "00004109C20090400100000000F01FEC" [HKLM] . (.Microsoft Office Proofing (English) 2010.) =>.Microsoft Corporation
O90 - PUC: "00004109E60090400100000000F01FEC" [HKLM] . (.Microsoft Office Shared MUI (English) 2010.) =>.Microsoft Corporation
O90 - PUC: "00004109F10090400100000000F01FEC" [HKLM] . (.Microsoft Office Proof (English) 2010.) =>.Microsoft Corporation
O90 - PUC: "00004109F100A0C00100000000F01FEC" [HKLM] . (.Microsoft Office Proof (Spanish) 2010.) =>.Microsoft Corporation
O90 - PUC: "00004109F100C0400100000000F01FEC" [HKLM] . (.Microsoft Office Proof (French) 2010.) =>.Microsoft Corporation
O90 - PUC: "0A4FDE1875CF3C842BA69EC0D22C66EC" [HKLM] . (.Microsoft .NET Core Runtime - 3.1.23 (x64).) =>.Microsoft Corporation
O90 - PUC: "123A7E3C641C7B74E9B307A612302127" [HKLM] . (.Microsoft .NET Core Host FX Resolver - 3.1.23 (x86).) =>.Microsoft Corporation
O90 - PUC: "13666DF8469B21E4291E8A4AAC5D1DC4" [HKLM] . (.Microsoft .NET Core Host - 2.1.30 (x64).) =>.Microsoft Corporation
O90 - PUC: "1926E8D15D0BCE53481466615F760A7F" [HKLM] . (.Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219.) =>.bl.org
O90 - PUC: "1A778F6E56F20FB4786B4A70B167363D" [HKLM] . (.Windows SDK AddOn.) =>.Microsoft Corporation
O90 - PUC: "1af2a8da7e60d0b429d7e6453b3d0182" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable (x64).) =>.bl.org
O90 - PUC: "1AF6D38EC72B9E110BBD5A4196758F33" [HKLM] . (.MSVCRT Redists.) =>.Advanced Micro Devices Inc
O90 - PUC: "1D5E3C0FEDA1E123187686FED06E995A" [HKLM] . (.Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219.) =>.bl.org
O90 - PUC: "21EE4A31AE32173319EEFE3BD6FDFFE3" [HKLM] . (.Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005.) =>.Microsoft Corporation
O90 - PUC: "22BEFC8F7E2A1793E9ADB411DEFE1C58" [HKLM] . (.Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005.) =>.Microsoft Corporation
O90 - PUC: "25DCF1B7B6F821F41A3463E13AF9E5C7" [HKLM] . (.Microsoft Update Health Tools.) =>.Microsoft Corporation
O90 - PUC: "26F25D0BD2A1320478998E55E4E719E3" [HKLM] . (.Microsoft .NET Core AppHost Pack - 3.1.23 (x64_arm64).) =>.Microsoft Corporation
O90 - PUC: "2C47B0D78F3C1FA449F0DC97BAB4D2EC" [HKLM] . (.Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508.) =>.Microsoft Corporation
O90 - PUC: "3e43b73803c7c394f8a6b2f0402e19c2" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable.) =>.bl.org
O90 - PUC: "3F787C0517DAF89469EA4728393C7240" [HKLM] . (.Microsoft .NET Core Host - 3.1.23 (x86).) =>.Microsoft Corporation
O90 - PUC: "47586AF0B09600B498AA2B9864324194" [HKLM] . (.Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508.) =>.Microsoft Corporation
O90 - PUC: "4BEA594979BAED93C82408E6FE57CE7A" [HKLM] . (.Microsoft Visual Studio 2010 Tools for Office Runtime (x64).) =>.Microsoft Corporation
O90 - PUC: "5350C949C171F084C94F2DC5E906EF88" [HKLM] . (.Microsoft .NET Framework 4.8 SDK.) =>.Microsoft Corporation
O90 - PUC: "5A812990327ACD34D85B163756A6E149" [HKLM] . (.Dropbox Update Helper.) =>.WINSE
O90 - PUC: "5EDF65449EAA30E4B943D0A974C6FEA5" [HKLM] . (.Microsoft Windows Desktop Runtime - 3.1.23 (x64).) =>.Microsoft Corporation
O90 - PUC: "62DBF9290209B993A9A757D1160F9B24" [HKLM] . (.Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005.) =>.Microsoft Corporation
O90 - PUC: "67D6ECF5CD5FBA732B8B22BAC8DE1B4D" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161.) =>.bl.org
O90 - PUC: "6E815EB96CCE9A53884E7857C57002F0" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161.) =>.bl.org
O90 - PUC: "6E8D947A316B3EB3F8F540C548BE2AB9" [HKLM] . (.Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005.) =>.Microsoft Corporation
O90 - PUC: "7064674235373A544BD10B2ED7DF3942" [HKLM] . (.Microsoft .NET Core 3.1 Templates 3.1.417 (x64).) =>.Microsoft Corporation
O90 - PUC: "75384AEFF2EC0DE32B0A5884EB6C1F11" [HKLM] . (.Microsoft ASP.NET Core 3.1.10 Targeting Pack (x64).) =>.Microsoft Corporation
O90 - PUC: "75EB9FF751132824CBA9F7BA772C2753" [HKLM] . (.Microsoft .NET Core Host FX Resolver - 3.1.23 (x64).) =>.Microsoft Corporation
O90 - PUC: "76966AEE2E7916549A99C5223EDC4E82" [HKLM] . (.Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508.) =>.Microsoft Corporation
O90 - PUC: "7C9F8B73BF303523781852719CD9C700" [HKLM] . (.Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "7E1EDE13558C3364D937655F66315676" [HKLM] . (.Microsoft .NET Core Targeting Pack - 3.1.0 (x64).) =>.Microsoft Corporation
O90 - PUC: "82D4A7C91E2C7AC41A3F060394DE9273" [HKLM] . (.Microsoft .NET Core Host - 3.1.23 (x64).) =>.Microsoft Corporation
O90 - PUC: "84b9c17023c712640acaf308593282f8" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable (x64).) =>.bl.org
O90 - PUC: "8C4969FBAB32206399A1018002A67B35" [HKLM] . (.Microsoft ASP.NET Core 3.1.23 Shared Framework (x86).) =>.Microsoft Corporation
O90 - PUC: "8E504D230B1ED1E4CBFF9BEFA51BF5E7" [HKLM] . (.Microsoft Windows Desktop Runtime - 3.1.23 (x86).) =>.Microsoft Corporation
O90 - PUC: "8F525E046254F654B8F87DA4042D0D91" [HKLM] . (.Microsoft .NET Core Toolset 3.1.417 (x64).) =>.Microsoft Corporation
O90 - PUC: "932CF23845EA7594FA3C767A322C88C3" [HKLM] . (.Microsoft .NET Core AppHost Pack - 3.1.23 (x64).) =>.Microsoft Corporation
O90 - PUC: "A17D3765A3C7E2C3FB77AE840968E44E" [HKLM] . (.Microsoft ASP.NET Core 3.1.23 Shared Framework (x64).) =>.Microsoft Corporation
O90 - PUC: "AFD192BEEDED5534899D719FE5194C73" [HKLM] . (.Microsoft .NET Core Host FX Resolver - 2.1.30 (x64).) =>.Microsoft Corporation
O90 - PUC: "BA6CB04E028575442A9BC226F8C8B7AF" [HKLM] . (.Microsoft .NET Core Runtime - 3.1.23 (x86).) =>.Microsoft Corporation
O90 - PUC: "BE6152115D32A3F4DAB7A36BD83CE027" [HKLM] . (.Microsoft .NET Core AppHost Pack - 3.1.23 (x64_x86).) =>.Microsoft Corporation
O90 - PUC: "BFC6307A304B895458FF3D79BA8B1837" [HKLM] . (.Microsoft .NET Standard Targeting Pack - 2.1.0 (x64).) =>.Microsoft Corporation
O90 - PUC: "C025571B2A687A53689168CD7369889B" [HKLM] . (.Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "C1A0DB28F518F784A97EEC37AD14C3FF" [HKLM] . (.Update for Windows 10 for x64-based Systems (KB5001716).) =>.Microsoft Corporation
O90 - PUC: "c1c4f01781cc94c4c8fb1542c0981a2a" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable.) =>.bl.org
O90 - PUC: "C3249157779A0614382A843663002A61" [HKLM] . (.Microsoft Windows Desktop Targeting Pack - 3.1.0 (x64).) =>.Microsoft Corporation
O90 - PUC: "C3AEB2FCAE628F23AAB933F1E743AB79" [HKLM] . (.Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "CD77934658D289147BB32D789038698F" [HKLM] . (.Microsoft .NET Core AppHost Pack - 3.1.23 (x64_arm).) =>.Microsoft Corporation
O90 - PUC: "D20352A90C039D93DBF6126ECE614057" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17.) =>.bl.org
O90 - PUC: "D4DB3CB2ABAF4934397CA98CA262F32E" [HKLM] . (.Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508.) =>.Microsoft Corporation
O90 - PUC: "D7150A299F5DF8D4789F38BA0C24042C" [HKLM] . (.Microsoft .NET Core Runtime - 2.1.30 (x64).) =>.Microsoft Corporation
O90 - PUC: "DC8A59DBF9D1DA5389A1E3975220E6BB" [HKLM] . (.Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "DF0D7E1BEFC7C0E45AADF0764699BD19" [HKLM] . (.Windows PC Health Check.) -- C:\WINDOWS\Installer\{B1E7D0FD-7CFE-4E0C-A5DA-0F676499DB91}\ArpIcon.ico
O90 - PUC: "EF3AF0F3AF5984B3BA1D64BFD44A20E1" [HKLM] . (.Microsoft ASP.NET Core 2.1.30 Shared Framework (x64).) =>.Microsoft Corporation
O90 - PUC: "EFEE0228DC83E77358593193D847A0EC" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17.) =>.bl.org
---\\ Windows Installer Scan (2) - 36s
[MD5.65A283FB9F881E295B3A652970D3E9E9] [WIS][2019/07/30 13:18:24] (.MAGIX Computer Products Intl. Co. - MSVCRT Redists.) -- C:\WINDOWS\Installer\1aaf5f.msi [52375552] =>.MAGIX Computer Products Intl. Co.
[MD5.C8930105EF370D14C12EAEF50D25599F] [WIS][2022/03/12 16:08:57] (.Dropbox, Inc. - Dropbox Update Helper.) -- C:\WINDOWS\Installer\557b2.msi [24576] =>.Dropbox, Inc.
---\\ FEATURE CONTROL. (129) - 1s
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPURPOSEDETECTION]resentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:Apowersoft iPhone Recorder.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPfewgsrv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGUI.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGuiIT.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLgPad.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLOGON.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:Scale_for_R3.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:ieuser.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOCUMENT_COMPATIBLE_MODE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:dexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FEEDS]:msfeedssync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PROLOG]:msiexec.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:cs.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:waol.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:wm.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHELL_FOLDERS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPARAMS]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONTROL_BEHAVIORS]:wlmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:mshta.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]utlook.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:sidebar.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING]:communicator.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:excel.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:winword.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEBOC_IS_UNSAFE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]:msn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:wmplayer.exe =>.Legitimate
---\\ Observer Of Events (137) - 22s
Application.Error: VSS (57)
~Numéro: 2944
~Date: 04/15/2022 10:40:59 PM
~ID: 8193
~Description: Volume Shadow Copy Service error: Unexpected error calling routine %1. hr = %2.
~Suggestion: Utiliser la procédure de reconstruction du VSS
Application.Warning: ESENT (25)
~Numéro: 2917
~Date: 04/15/2022 09:39:29 PM
~ID: 636
~Description: %1 (%2) %3Flush map file "%4" will be deleted. Reason: %5.
~Suggestion: Aucune
Application.Error: Application Error (2)
~Numéro: 2146
~Date: 04/14/2022 07:02:29 PM
~ID: 1000
~Description: Faulting application name: %1, version: %2, time stamp: 0xfd932244 Faulting module name: %4, version: %5, time stamp: 0xcc5f0e77 Exception code: 0xc0000005 Fault offset: 0x0000000000047583 Faulting process ID: 0xbbc Faulting application start time: 0
~Suggestion: Réparer ou réinstaller l'application.
Application.Warning: Microsoft-Windows-System-Restore (3)
~Numéro: 1242
~Date: 04/14/2022 06:23:53 PM
~ID: 8303
~Description: Scoping unsuccessful for shadowcopy %1 with error %2.
~Suggestion: Exécuter la commande chkdsk / f
Application.Warning: MsiInstaller (1)
~Numéro: 1196
~Date: 04/14/2022 05:32:10 PM
~ID: 1032
~Description: An error occurred while refreshing environment variables updated during the installation of '%1'. Some users logged on to the machine may not see these changes until they log off and then log back on again.
Application.Error: Microsoft-Windows-CAPI2 (11)
~Numéro: 933
~Date: 04/12/2022 09:30:08 PM
~ID: 513
~Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.%1.
Application.Error: SecurityCenter (6)
~Numéro: 909
~Date: 04/12/2022 09:18:23 PM
~ID: 17
~Description: Security Center failed to validate caller with error %1.
Application.Warning: Wlclntfy (3)
~Numéro: 837
~Date: 04/09/2022 09:35:26 PM
~ID: 6001
~Description: The winlogon notification subscriber <%1> failed a notification event.
Application.Error: Software Protection Platform Service (1)
~Numéro: 750
~Date: 04/09/2022 08:52:20 PM
~ID: 16385
~Description: Failed to schedule Software Protection service for re-start at %2. Error Code: %1.
Application.Warning: Windows Search Service (2)
~Numéro: 688
~Date: 04/09/2022 08:26:28 PM
~ID: 10024
~Description: The filter host process %2 did not respond and is being forcibly terminated.
Application.Warning: Microsoft-Windows-User Profiles Service (1)
~Numéro: 483
~Date: 04/09/2022 07:47:05 PM
~ID: 1534
~Description: Profile notification of event %1 for component %2 failed, error code is %3.
~Suggestion: https://www.ghacks.net/2018/12/29/windows-10-user-profile-service-event-id-1534-warnings/
Application.Error: Application Hang (1)
~Numéro: 97
~Date: 04/09/2022 07:42:07 PM
~ID: 1002
~Description: The program %1 version %2 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: f9c Start Time: 01d84bfddcf81
~Suggestion: Essayer les commandes suivantes ipconfig /release et ipconfig / renew.
Application.Warning: Microsoft-Windows-WMI (84)
~Numéro: 86
~Date: 04/09/2022 07:36:32 PM
~ID: 63
~Description: A provider, %1, has been registered in the Windows Management Instrumentation namespace %2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
~Suggestion: Généralement LocalSystem n'est pas nécessaire et le contexte de sécurité NetworkServiceHost est plus approprié.
System.Warning: DCOM (75)
~Numéro: 2303
~Date: 04/15/2022 11:11:47 PM
~ID: 10016
~Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-V4BFEG5GanjaS-1-5-21-3947486154-1424391867-2577238500-1001LocalHost (Using LRPC)Microsoft.Windows.ShellExperienceHost_10.0.19041.1320_ne
~Suggestion: Vérifier les autorisations pour l'accès DCOM
System.Error: Service Control Manager (148)
~Numéro: 2294
~Date: 04/15/2022 10:45:28 PM
~ID: 7000
~Description: The %1 service failed to start due to the following error: %%1053
System.Warning: Microsoft-Windows-Kernel-Processor-Power (21)
~Numéro: 2285
~Date: 04/15/2022 10:43:17 PM
~ID: 37
~Description: The speed of Hyper-V logical processor %2 is being limited by system firmware. The processor has been in this reduced performance state for %3 seconds since the last report.
System.Warning: Microsoft-Windows-Kernel-PnP (20)
~Numéro: 2254
~Date: 04/15/2022 10:42:05 PM
~ID: 219
~Description: The driver %5 failed to load for the device %2.
~Suggestion: Vérifier que le pilote a bien été chargé dans les informations système
System.Error: Microsoft-Windows-Kernel-General (4)
~Numéro: 2126
~Date: 04/15/2022 09:13:23 PM
~ID: 5
~Description: 0x8000002a171\??\Volume{5e2ce3be-94ff-4f37-8958-d5019686b841}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{8CF88437-4736-447F-8639-BAC44A804E9B}
System.Error: EventLog (1)
~Numéro: 1993
~Date: 04/15/2022 07:14:24 PM
~ID: 6008
~Description: The previous system shutdown at %1 on %2 was unexpected.
System.Warning: BTHUSB (10)
~Numéro: 1976
~Date: 04/15/2022 06:20:57 PM
~ID: 34
~Description: The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is %2; got %3. Low Energy peripheral role functionality will not be available.
System.Error: Application Popup (15)
~Numéro: 800
~Date: 04/12/2022 09:59:41 PM
~ID: 1060
~Description: \??\C:\Users\Ganja\AppData\Local\Temp\ehdrv.sys
System.Warning: Microsoft-Windows-DNS-Client (1)
~Numéro: 624
~Date: 04/11/2022 09:22:31 PM
~ID: 1014
~Description: Name resolution for the name %1 timed out after none of the configured DNS servers responded.
~Suggestion: https://social.technet.microsoft.co...ent-id-1014-microsoft-windows-dns-client.aspx
System.Warning: Microsoft-Windows-NDIS (3)
~Numéro: 623
~Date: 04/11/2022 09:22:26 PM
~ID: 10400
~Description: The network interface "%4" has begun resetting. There will be a momentary disruption in network connectivity while the hardware resets. Reason: %5. This network interface has reset %6 time(s) since it was last initialized.
~Suggestion: Vérifier la connexion à l'interface réseau
System.Error: Microsoft-Windows-WindowsUpdateClient (1)
~Numéro: 372
~Date: 04/09/2022 08:54:36 PM
~ID: 20
~Description: Installation Failure: Windows failed to install the following update with error %1: %2.
~Suggestion: http://kb.eventtracker.com/evtpass/...crosoft-Windows-WindowsUpdateClient_63351.asp
System.Warning: Microsoft-Windows-Kernel-Tm (2)
~Numéro: 123
~Date: 04/09/2022 07:49:27 PM
~ID: 4
~Description: The TransactionManager (TmId=%1, LogPath=%3) has failed to advance its log tail, due to the transaction (UOW=%4, Description='%6') being unresolved for some time. The transaction must be forced to resolve in order for the TransactionManager to conti
---\\ Additional Scan (O88) (30) - 7s
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\program files\mumu\emulator\nemu\emulatorshell\nemuplayer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\program files\mumu\emulator\nemu\emulatorshell\nemuplayer.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\MuMu\emulator\nemu\EmulatorShell\NemuMultiPlayer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\MuMu\emulator\nemu\EmulatorShell\NemuMultiPlayer.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\Desktop\adware-removal-tool-by-tsa.exe.FriendlyAppName =>.Unsigned
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\Desktop\trjsetup.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\Desktop\trjsetup.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\AppData\Local\Temp\{575B4C18-69B5-42B1-86F6-DE1D5E995F52}\Set-up.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\AppData\Local\Temp\{575B4C18-69B5-42B1-86F6-DE1D5E995F52}\Set-up.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\AppData\Local\Temp\geek64.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\AppData\Local\Temp\geek64.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\program files\ldplayerbox\ldvboxheadless.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\program files\ldplayerbox\ldvboxheadless.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\RedFingerPlayerGlobal\RedFingerPlayerGlobal.exe.FriendlyAppName =>.Unsigned
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\program files\mumu\emulator\nemu\emulatorshell\nemuplayer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\program files\mumu\emulator\nemu\emulatorshell\nemuplayer.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\MuMu\emulator\nemu\EmulatorShell\NemuMultiPlayer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\MuMu\emulator\nemu\EmulatorShell\NemuMultiPlayer.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\Desktop\adware-removal-tool-by-tsa.exe.FriendlyAppName =>.Unsigned
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\Desktop\trjsetup.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\Desktop\trjsetup.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\AppData\Local\Temp\{575B4C18-69B5-42B1-86F6-DE1D5E995F52}\Set-up.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\AppData\Local\Temp\{575B4C18-69B5-42B1-86F6-DE1D5E995F52}\Set-up.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\AppData\Local\Temp\geek64.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Ganja\AppData\Local\Temp\geek64.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\program files\ldplayerbox\ldvboxheadless.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\program files\ldplayerbox\ldvboxheadless.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\RedFingerPlayerGlobal\RedFingerPlayerGlobal.exe.FriendlyAppName =>.Unsigned
---\\ Summary of the elements found (5) - 0s
https://nicolascoolman.eu/forum/Topic/Discord-logiciel-potentiellement-superflu-lps/ =>.SUP.Discord
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/forum/Topic/warning-eventlogapp-evenement-dapplication/ =>Warning.EventLogApp
https://nicolascoolman.eu/forum/Topic/warning-eventlogsys-evenement-systeme/ =>Warning.EventLogSys
https://nicolascoolman.eu/forum/Topic/orphan-muicache-logiciel-potentiellement-superflu-lps/ =>.SUP.Orphan.MUICache
---\\ Serial Number
[00C82FAC5D4F7288471464A39982A0D37F] [23/03/2022] (.CrystalBit Solutions.) - C:\Users\Ganja\Desktop\geek.exe =>.CrystalBit Solutions
[01EA62E443CB2250C870FF6BB13BA98E] [29/06/2020] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Windows\system32\drivers\UniSafe.sys =>.Tencent Technology(Shenzhen) Company Limited
[024FD22ED89C8823D79C2A09A4E6423F] [19/11/2020] (.ASUSTek Computer Inc..) - C:\WINDOWS\System32\drivers\AsRadioControl.sys =>.ASUSTek Computer Inc.
[02DC76C15066F447336766D85A04AF37] [20/01/2022] (.Bluestack Systems, Inc.) - C:\Program Files\BlueStacks_nxt\7zr.exe =>.Not verified
[02FA994D660DE659EE9037ECB437D766] [07/04/2022] (.Piriform Software Ltd.) - C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Software Ltd
[02FA994D660DE659EE9037ECB437D766] [07/04/2022] (.Piriform Software Ltd.) - C:\Program Files\CCleaner\uninst.exe =>.Piriform Software Ltd
[036AF95E02CE45D35F44511E61C6CED6] [09/04/2022] (.NetEase (Hangzhou) Network Co., Ltd.) - C:\Users\Ganja\Downloads\MuMuInstaller_1.4.0.0_gw-overseas_all_1644473805.exe =>.Not verified
[04DF4D56733AE38D598EA004DD2D9C51] [19/03/2020] (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp.
[04E705BCC353AEEDB59DC141D48C972B] [18/04/2020] (.SoftEther Corporation.) - C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys =>.SoftEther Corporation
[04E705BCC353AEEDB59DC141D48C972B] [18/04/2020] (.SoftEther Corporation.) - C:\WINDOWS\System32\DRIVERS\SeLow_x64.sys =>.SoftEther Corporation
[04F86C94518495194426A7CDAC0DBA3C] [14/04/2022] (.ASUSTeK COMPUTER INC..) - C:\Users\Ganja\Downloads\Audio_Conexant_Z_V8.66.95.70Sub3_21875.exe =>.Not verified
[05A4B4E2F89B34D179FB48C3642251C8] [15/04/2022] (.O&O Software GmbH.) - C:\Users\Ganja\Desktop\OOSU10.exe =>.Not verified
[0678BE9B85D65AC22E0BE99D3FBB4DA3] [05/01/2021] (.Synaptics Incorporated.) - C:\WINDOWS\System32\drivers\CHDRT64.sys =>.Synaptics Incorporated
[06AEA76BAC46A9E8CFE6D29E45AAF033] [29/02/2020] (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google LLC
[06B922A8397E632FE5348DA267275B4F] [11/04/2018] (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
[06F24D9F4DB07BD7ECAD067F5EE26C29] [09/10/2019] (.Adobe Inc..) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe =>.Adobe Inc.
[06F24D9F4DB07BD7ECAD067F5EE26C29] [09/10/2019] (.Adobe Inc..) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe =>.Adobe Inc.
[06F24D9F4DB07BD7ECAD067F5EE26C29] [09/10/2019] (.Adobe Inc..) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Inc.
[07F3E5C0807B417CAFDBD7D4AB23CF8B] [30/03/2022] (.Bluestack Systems, Inc.) - C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys =>.Bluestack Systems, Inc
[0B0497702C3210F09ED59602E6F2EA27] [24/04/2019] (.ASUSTek Computer Inc..) - C:\WINDOWS\System32\drivers\AsusPTPFilter.sys =>.ASUSTek Computer Inc.
[0B9DE2343AC13F9FDF2BC2D7F3A6C200] [05/01/2021] (.ICEpower a/s.) - C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe =>.Not verified
[0BB14E1AFFF5879B9717256081844B4E] [14/04/2022] (.Bluestack Systems, Inc.) - C:\Users\Ganja\AppData\Local\BlueStacksSetup\BlueStacksInstaller_5.6.110.1002_native_4c661996e1ba1c2021d19369110b3d98_0.exe =>.Not verified
[0BB14E1AFFF5879B9717256081844B4E] [30/03/2022] (.Bluestack Systems, Inc.) - C:\Program Files\BlueStacks_nxt\BlueStacksUninstaller.exe =>.Not verified
[0D07705FA0E0C4827CC287CFCDEC20C4] [11/03/2021] (.Binance Holdings Limited.) - C:\Program Files\Binance\Binance.exe =>.Binance Holdings Limited
[0D36AB0805BA9450220F865C58918F52] [12/04/2022] (.Malwarebytes Inc.) - C:\Users\Ganja\Desktop\adwcleaner_8.3.1.exe =>.Malwarebytes Inc
[0E4418E2DEDE36DD2974C3443AFB5CE5] [09/04/2022] (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\100.0.4896.88\elevation_service.exe =>.Google LLC
[0E4418E2DEDE36DD2974C3443AFB5CE5] [09/04/2022] (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLC
[0E4418E2DEDE36DD2974C3443AFB5CE5] [14/04/2022] (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\100.0.4896.88\Installer\chrmstp.exe =>.Google LLC
[0E4418E2DEDE36DD2974C3443AFB5CE5] [14/04/2022] (.Google LLC.) - C:\Program Files (x86)\Google\Chrome\Application\100.0.4896.88\Installer\setup.exe =>.Google LLC
[0E4418E2DEDE36DD2974C3443AFB5CE5] [29/03/2022] (.Google LLC.) - C:\Users\Ganja\AppData\Local\Google\Chrome\User Data\SwReporter\100.281.200\software_reporter_tool.exe =>.Google LLC
[0F7A165550163D5ED7D1CAA3FC13DA06] [12/04/2022] (.Dropbox, Inc.) - C:\Program Files (x86)\Dropbox\Client\Dropbox.exe =>.Dropbox, Inc
[0F7A165550163D5ED7D1CAA3FC13DA06] [12/04/2022] (.Dropbox, Inc.) - C:\Program Files (x86)\Dropbox\Client\DropboxUninstaller.exe =>.Dropbox, Inc
[0F7A165550163D5ED7D1CAA3FC13DA06] [12/04/2022] (.Dropbox, Inc.) - C:\WINDOWS\System32\DbxSvc.exe =>.Dropbox, Inc
[0F7A165550163D5ED7D1CAA3FC13DA06] [27/02/2022] (.Dropbox, Inc.) - C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll =>.Dropbox, Inc
[0F7A165550163D5ED7D1CAA3FC13DA06] [29/11/2021] (.Dropbox, Inc.) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc
[13222A5DCCF716DF5AF9C87084412DD9] [09/07/2015] (.Realtek Semiconductor Corp.) - C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe =>.Realtek Semiconductor Corp
[167DB6F0182412A5F7E507AD73FD4A04] [05/01/2021] (.Conexant Systems LLC.) - C:\Program Files\CONEXANT\CNXT_AUDIO_HDA\UIU64a.exe =>.Conexant Systems LLC
[167DB6F0182412A5F7E507AD73FD4A04] [20/06/2018] (.Conexant Systems LLC.) - C:\Program Files\CONEXANT\SAII\SmartAudio.exe =>.Conexant Systems LLC
[167DB6F0182412A5F7E507AD73FD4A04] [24/11/2017] (.Conexant Systems LLC.) - C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe =>.Conexant Systems LLC
[19D2BBA6922F3C7A0242B54C040F8B11] [27/10/2016] (.Conexant Systems, Inc..) - C:\Windows\System32\SASrv.exe =>.Conexant Systems, Inc.
[234175E3D1A23EF8ACB50245] [16/10/2019] (.EasyAntiCheat Oy.) - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe =>.EasyAntiCheat Oy
[317DD1C55F51AC2756D9C93C060C6FA5] [13/04/2022] (.Pawan Kumar.) - C:\Users\Ganja\Desktop\adware-removal-tool-by-tsa.exe =>.Not verified
[3DD79449EA86A17D1AED3D553A987DDF] [21/05/2019] (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\athw10x.sys =>.Qualcomm Atheros
[3DD79449EA86A17D1AED3D553A987DDF] [31/01/2019] (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\AdminService.exe =>.Qualcomm Atheros
[3DD79449EA86A17D1AED3D553A987DDF] [31/01/2019] (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\btfilter.sys =>.Qualcomm Atheros
[411239DA46A29C98B8A15077] [04/03/2020] (.Cheat Engine.) - C:\Program Files\Cheat Engine 7.0\unins000.exe =>.Cheat Engine
[4CE26AB7B08A86A56200DE244E294BA5] [20/10/2014] (.Conexant Systems, Inc..) - C:\WINDOWS\system32\CxAudMsg64.exe =>.Conexant Systems, Inc.
[4E0B86EECF78E905EF7CA498D841EA16] [01/03/2020] (.Open Source Developer, Duncan Ogilvie.) - C:\debugger\release\x96dbg.exe =>.Not verified
[5600000027396847078B466FFF000000000027] [14/04/2016] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group
[5600000C148C3F94CD2631870A000000000C14] [29/02/2020] (.IntelGfxReleaseExternal2020.) - C:\ProgramData\Package Cache\{7d2bdb54-268a-4ce6-8063-a6cad97dba41}\win64.exe =>.IntelGfxReleaseExternal2020
[5600000C3BF9A3682289A06F40000000000C3B] [11/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe =>.Intel(R) pGFX 2020
[5600000C3BF9A3682289A06F40000000000C3B] [11/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe =>.Intel(R) pGFX 2020
[5600000C3BF9A3682289A06F40000000000C3B] [11/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe =>.Intel(R) pGFX 2020
[5600000C3BF9A3682289A06F40000000000C3B] [11/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\igdkmd64.sys =>.Intel(R) pGFX 2020
[5600000C3BF9A3682289A06F40000000000C3B] [11/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe =>.Intel(R) pGFX 2020
[5600000C3BF9A3682289A06F40000000000C3B] [11/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe =>.Intel(R) pGFX 2020
[5600000C3BF9A3682289A06F40000000000C3B] [11/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_1b570d7b9a790b1a\IntcDAud.sys =>.Intel(R) pGFX 2020
[62E745E92165213C971F5C490AEA12A5] [12/04/2020] (.NVIDIA Corporation.) - C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation
[62E745E92165213C971F5C490AEA12A5] [12/04/2020] (.NVIDIA Corporation.) - C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\nv3dappshext.dll =>.NVIDIA Corporation
[62E745E92165213C971F5C490AEA12A5] [12/04/2020] (.NVIDIA Corporation.) - C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\nvlddmkm.sys =>.NVIDIA Corporation
[62E745E92165213C971F5C490AEA12A5] [12/04/2020] (.NVIDIA Corporation.) - C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_036f20146ac187ce\nvshext.dll =>.NVIDIA Corporation
[65628C146ACE93037FC58659F14BD35F] [12/04/2022] (.ESET, spol. s r.o..) - C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\sciter-x.dll =>.ESET, spol. s r.o.
[65628C146ACE93037FC58659F14BD35F] [12/04/2022] (.ESET, spol. s r.o..) - C:\Users\Ganja\Desktop\esetonlinescanner.exe =>.ESET, spol. s r.o.
[731D40AE3F3A1FB2BC3D8395] [03/03/2022] (.win.rar GmbH.) - C:\Program Files\WinRAR\Rar.exe =>.win.rar GmbH
[731D40AE3F3A1FB2BC3D8395] [03/03/2022] (.win.rar GmbH.) - C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH
[731D40AE3F3A1FB2BC3D8395] [03/03/2022] (.win.rar GmbH.) - C:\Program Files\WinRAR\uninstall.exe =>.win.rar GmbH
[7C443D7DBB054E459C513D665DFA8DB7] [29/06/2020] (.Tencent Technology(Shenzhen) Company Limited.) - C:\Windows\system32\drivers\tesrsdt.sys =>.Tencent Technology(Shenzhen) Company Limited
~ Unselected Options:
~ End of the scan, 8330 items in 04mn51s (2178)(0)
Download attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system. Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
Code:
Start::
CloseProcesses:
SystemRestore: On
CreateRestorePoint:
RemoveProxy:
Task: {35C3CE0C-6E9C-4368-8970-5A1EC2984974} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe SCHED (No File)
Task: {A9461498-6A3F-4F98-B10D-680CD902F8BB} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe LOGON (No File)
C:\Users\Ganja\AppData\Local\ESET\ESETOnlineScanner
R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [37824 2020-04-18] (SoftEther Corporation -> SoftEther Corporation)
R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [50624 2020-04-18] (SoftEther Corporation -> SoftEther Corporation)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [31232 2019-12-02] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tesrsdt; C:\Windows\system32\drivers\tesrsdt.sys [812208 2020-06-29] (Tencent Technology(Shenzhen) Company Limited -> TENCENT)
S3 UniSafe; C:\Windows\system32\drivers\UniSafe.sys [581912 2020-06-29] (Tencent Technology(Shenzhen) Company Limited -> TENCENT)
C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys
C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys
C:\WINDOWS\System32\drivers\tap0901.sys
C:\Windows\system32\drivers\tesrsdt.sys
C:\Windows\system32\drivers\UniSafe.sys
C:\Users\Ganja\AppData\Roaming\Tencent
C:\ProgramData\Tencent
C:\Users\Ganja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
C:\Users\Ganja\Desktop\ESET Online Scanner.lnk
C:\Users\Ganja\AppData\Local\ESET
C:\Users\Ganja\Desktop\esetonlinescanner.exe
C:\Users\Ganja\AppData\Roaming\XuanZhi64
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tencent Software
C:\Program Files (x86)\TurboVPN
C:\Users\Ganja\AppData\Roaming\changzhi_leidian.data
C:\Users\Ganja\AppData\Roaming\changzhi_leidianmac.data
ShortcutWithArgument: C:\Users\Ganja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Magic - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
MSCONFIG\Services: QHActiveDefense =>
MSCONFIG\Services: QMEmulatorService => 2
HKLM\...\StartupApproved\StartupFolder: => "SoftEther VPN Client Manager Startup.lnk"
HKLM\...\StartupApproved\Run: => "SoftEther VPN Client UI Helper"
C:\Windows\system32\drivers\tesrsdt.sys
C:\Windows\system32\drivers\UniSafe.sys
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tencent
C:\ProgramData\Tencent
C:\Users\Ganja\AppData\Roaming\Tencent
C:\Program Files\SoftEther
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder|SoftEther VPN Client Manager Startup.lnk
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|SoftEther VPN Client UI Helper
DeleteKey: HKLM\SOFTWARE\WOW6432Node\Tencent
DeleteKey: HKCU\SOFTWARE\Tencent
DeleteKey: HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\Tencent
DeleteKey: HKCU\SOFTWARE\AvastAdSDK
DeleteKey: HKU\S-1-5-21-3947486154-1424391867-2577238500-1001\SOFTWARE\AvastAdSDK
File: C:\Users\Ganja\d4ac4633ebd6440fa397b84f1bc94a3c.7z
File: C:\WINDOWS\system32\noise.jpn
VirusTotal: C:\WINDOWS\system32\noise.jpn
VirusTotal: C:\Users\Ganja\d4ac4633ebd6440fa397b84f1bc94a3c.7z
MSCONFIG\Services: Bonjour Service => 2
CMD: netsh int ip reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state On
CMD: "%WINDIR%\SYSTEM32\lodctr.exe /R"
CMD: "%WINDIR%\SysWOW64\lodctr.exe /R"
CMD: "C:\Windows\SYSTEM32\lodctr.exe /R"
CMD: "C:\Windows\SysWOW64\lodctr.exe /R"
StartBatch:
del /s /q C:\Windows\SoftwareDistribution\download\*.*
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*"
del /s /q "%userprofile%\AppData\Local\temp\*.*"
ipconfig /flushdns
endbatch:
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
C:\Windows\Temp\*.*
C:\WINDOWS\system32\*.tmp
C:\WINDOWS\syswow64\*.tmp
emptytemp:
Reboot:
End::The laptop is really smooth now.
Although after the frst fix, the laptop restarted and I checked task manager, this still happened
It doesnt slow me down like it used to be though.
Thank you!
Although after the frst fix, the laptop restarted and I checked task manager, this still happened
It doesnt slow me down like it used to be though.
Thank you!
Speccy Scan.
Step 2 Autoruns Scan.
Download Autoruns and Autorunsc Unzip it to your desktop and then double click autoruns.exe
After the scan is finished then click on File>>>>>>>>>>>Save
The default name will be autoruns.arn make sure to save it as Autoruns.arn under the file type option.
Attach the text in your next reply. If the file is too large, then use catbox.moe or filedropper.com and send the link in your next reply.
Step 3 Hd Tune scan.
Download HD Tune and save the file.
Install HD Tune and restart it after installation.
Then go to the tab Error Scan , select the hard drive you want to check and press Start .
The check can be quite time consuming take depends on the size of the hard drive check.
Take a screen shot of the result and save it.
Upload the image here.
Do Not tick the quick scan!!
Step 4 Crystal Disk
Download and run CrystalDisk info standard edition from here
Run the program, grab any screenshots and attach to your next reply for us.
- Please go here and download Speccy.
- Install and run the program.
- Upon Completion:
- Hit File
- Publish Snap Shot
- A link will appear, post that link.
Step 2 Autoruns Scan.
Download Autoruns and Autorunsc Unzip it to your desktop and then double click autoruns.exe
After the scan is finished then click on File>>>>>>>>>>>Save
The default name will be autoruns.arn make sure to save it as Autoruns.arn under the file type option.
Attach the text in your next reply. If the file is too large, then use catbox.moe or filedropper.com and send the link in your next reply.
Step 3 Hd Tune scan.
Download HD Tune and save the file.
Install HD Tune and restart it after installation.
Then go to the tab Error Scan , select the hard drive you want to check and press Start .
The check can be quite time consuming take depends on the size of the hard drive check.
Take a screen shot of the result and save it.
Upload the image here.
Do Not tick the quick scan!!
Step 4 Crystal Disk
Download and run CrystalDisk info standard edition from here
Run the program, grab any screenshots and attach to your next reply for us.
Last edited:
Right Click on Autoruns and run as admin, uncheck the items I have highlighted then reboot the machine.
Next issue you want to address is purchasing some more Ram for this machine.
4 gigs of ram isn't going to let you play many games, I'd suggest a Crucial scan to see if how much more your machine can take.
www.crucial.com
Hard drive is in good shape and temps are good. so that's a plus, but for any laptop I highly suggest a cooling fan. Especially if you are going to game.
If you want to see if your machine can handle a certain game, then there is this.
www.systemrequirementslab.com
Download easy service optmizer, save it to your desktop and unzip it there. Right click it and run as admin, then select Tweaked at the bottom. Then click on the rocket, this will turn off a lot of useless items.
You will however need to change one setting. Right Click on Wlansvc — WLAN AutoConfig, then select start service, the edit service. Make sure it is automatic across the board, as per the picture.
Next issue you want to address is purchasing some more Ram for this machine.
4 gigs of ram isn't going to let you play many games, I'd suggest a Crucial scan to see if how much more your machine can take.
Crucial System Scanner | Memory Upgrade Scanner | Crucial
Upgrade your system storage with our range of solid state drives. Find prices, specs and customer reviews to help choose the best device for you.
www.crucial.com
Hard drive is in good shape and temps are good. so that's a plus, but for any laptop I highly suggest a cooling fan. Especially if you are going to game.
If you want to see if your machine can handle a certain game, then there is this.
Requirements Test
Check your system requirements. Can I Run it? Test your specs and rate your gamimg PC.
www.systemrequirementslab.com
Download easy service optmizer, save it to your desktop and unzip it there. Right click it and run as admin, then select Tweaked at the bottom. Then click on the rocket, this will turn off a lot of useless items.
You will however need to change one setting. Right Click on Wlansvc — WLAN AutoConfig, then select start service, the edit service. Make sure it is automatic across the board, as per the picture.
- Status