Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2019 Ran by piotr (administrator) on DESKTOP-FROVGQP (HP HP Pavilion All-in-One 24-r0xx) (05-11-2019 11:46:01) Running from C:\Users\piotr\Downloads Loaded Profiles: piotr (Available Profiles: piotr) Platform: Windows 10 Home Version 1903 18362.418 (X64) Language: Danish (Denmark) Default browser: Chrome Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe (Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe (Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atiesrxx.exe (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\84.4.170\QtWebEngineProcess.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\84.4.170\QtWebEngineProcess.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\84.4.170\QtWebEngineProcess.exe (F.lux Software LLC -> f.lux Software LLC) C:\Users\piotr\AppData\Local\FluxSoftware\Flux\flux.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.302\GoogleCrashHandler.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.302\GoogleCrashHandler64.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard Company -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe (HP Inc. -> ) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\piotr\AppData\Local\Microsoft\OneDrive\19.174.0902.0013\FileCoAuth.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\piotr\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.17920.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1908.0.0_x64__8wekyb3d8bbwe\Calculator.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\NisSrv.exe (Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe (PORTRAIT DISPLAYS, INC. -> ) C:\Program Files\Portrait Displays\HP Display Control\CTHelper.exe (PORTRAIT DISPLAYS, INC. -> Portrait Displays, Inc.) C:\Program Files\Portrait Displays\HP Display Control\DisplayControl.exe (PORTRAIT DISPLAYS, INC. -> Portrait Displays, Inc.) C:\Program Files\Portrait Displays\HP Display Control\DisplayControlService.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (WildTangent Inc -> ) C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe Failed to access process -> audiodg.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [DisplayControl.exe] => C:\Program Files\Portrait Displays\HP Display Control\DisplayControl.exe [3938112 2017-06-08] (PORTRAIT DISPLAYS, INC. -> Portrait Displays, Inc.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [704832 2017-04-27] (HP Inc. -> HP Inc.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [6210368 2019-10-30] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [4884016 2019-10-16] (Adobe Inc. -> Adobe Systems Inc.) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2622520 2019-05-19] (Adobe Inc. -> Adobe Inc.) HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-3956460003-1498418990-1826556186-1001\...\Run: [HP ENVY 4500 series (NET)] => C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP) HKU\S-1-5-21-3956460003-1498418990-1826556186-1001\...\Run: [f.lux] => C:\Users\piotr\AppData\Local\FluxSoftware\Flux\flux.exe [1385480 2019-08-30] (F.lux Software LLC -> f.lux Software LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.120\Installer\chrmstp.exe [2019-10-20] (Google LLC -> Google LLC) ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {059521C9-0E3B-4BE9-8CF1-57A51CBB799F} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9269328 2018-11-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {0AF18265-6FF5-4832-AFBD-E1EB67B209FD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [250232 2019-10-08] (HP Inc. -> HP Inc.) Task: {0DD61939-77F6-4EBA-AF7F-C883B00262B9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1094008 2019-10-10] (HP Inc. -> HP Inc.) Task: {13F7E4C5-0ACD-4A00-8DB0-F921E1B8A26E} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs] Task: {1CD868E8-0167-459A-AC9B-0A837DD19469} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {2100E3C4-A2CC-459E-A548-6CBBD172ECC7} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114720 2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Task: {26F737D6-D124-4D6C-B9D7-3C287C387A53} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-20] (Google Inc -> Google Inc.) Task: {35D877ED-39E1-4096-A2F7-A99D80BB93F0} - System32\Tasks\G2MUpdateTask-S-1-5-21-3956460003-1498418990-1826556186-1001 => C:\Users\piotr\AppData\Local\GoToMeeting\15502\g2mupdate.exe [32256 2019-10-30] (LogMeIn, Inc. -> LogMeIn, Inc.) Task: {37F725C7-DC28-4A82-A369-BF0B2B14099E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [144248 2019-10-10] (HP Inc. -> HP Inc.) Task: {617046E4-36E1-451C-A1DA-DEEEE643394B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.) Task: {66B54970-C825-4FFA-9006-D521CED2166C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-21] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {718DCE5D-9BE4-434C-A252-CD3CA55CD674} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1586296 2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Task: {811335CE-E4A7-46E9-8646-703FC288BC7A} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644472 2019-06-21] (HP Inc. -> HP Inc.) Task: {83AD8F40-4018-497A-B33D-78916F5FF622} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems) Task: {83DBD701-592E-4575-BD44-B8E5A2629790} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1094008 2019-10-10] (HP Inc. -> HP Inc.) Task: {8478A9FF-A4B6-4FC8-B26D-75C9B1A99420} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.) Task: {8FC8AFDC-D18C-4C83-BE71-26751A03AED7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367496 2019-10-25] (Microsoft Corporation -> Microsoft Corporation) Task: {9C62403C-E894-4CE4-94AA-24AF074EEE50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.) Task: {A1E4C6C7-497F-464B-B2E8-3CDF1724BD57} - System32\Tasks\HPCeeScheduleForpiotr => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [97656 2018-09-11] (HP Inc. -> HP Inc.) Task: {A5BC1B1B-4CE1-4222-9021-EFE35808CC96} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1423680 2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Task: {A7943314-6D92-4B53-982B-B68512A0AB45} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-12-20] (Dropbox, Inc -> Dropbox, Inc.) Task: {AC622D59-985D-40E2-AFF1-D238EC367B72} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [459680 2017-05-12] (HP Inc. -> ) Task: {B70E1045-FFCF-430C-8442-868CBA850538} - System32\Tasks\G2MUploadTask-S-1-5-21-3956460003-1498418990-1826556186-1001 => C:\Users\piotr\AppData\Local\GoToMeeting\15502\g2mupload.exe [32256 2019-10-30] (LogMeIn, Inc. -> LogMeIn, Inc.) Task: {B74174F8-AD0F-46C7-9E03-F84A9688645E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-21] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {B79E6E63-4E4A-4E4C-8FD3-FC05B292443C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-21] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {CFDBA9B5-1825-4E0C-88B5-9F3F2794C0A5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-21] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {D14B7094-DB9D-46FC-9DAA-E422C41F67B8} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114720 2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Task: {D7D9DA3D-BE97-4BFE-AE76-F1C42E653C55} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367496 2019-10-25] (Microsoft Corporation -> Microsoft Corporation) Task: {E180EB62-0567-4064-9089-8FE9871B5C8E} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2017-04-07] (HP Inc. -> HP Inc.) Task: {E7D8FB25-D1AE-4B19-878B-7EB097D4041F} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1423680 2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Task: {EF36201B-DDDD-45D4-BB1F-51199EE646EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-20] (Google Inc -> Google Inc.) Task: {F4BA7C48-75E4-44D6-9202-AFC6D1B327C7} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [52104 2017-06-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {FE2F37D7-1518-4949-A9D1-B1A10343ACC5} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-12-20] (Dropbox, Inc -> Dropbox, Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3956460003-1498418990-1826556186-1001.job => C:\Users\piotr\AppData\Local\GoToMeeting\15502\g2mupdate.exe Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3956460003-1498418990-1826556186-1001.job => C:\Users\piotr\AppData\Local\GoToMeeting\15502\g2mupload.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForpiotr.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{00bc0693-1efb-4429-a013-0ee43f57f5da}: [DhcpNameServer] 40.26.1.11 Tcpip\..\Interfaces\{e79fc9bb-4fd1-474d-a57a-1cb86e715d48}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE HKU\S-1-5-21-3956460003-1498418990-1826556186-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE HKU\S-1-5-21-3956460003-1498418990-1826556186-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE SearchScopes: HKLM -> {3BD88D7A-B1D9-43C6-8579-8D9DD55EAD69} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> {3BD88D7A-B1D9-43C6-8579-8D9DD55EAD69} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-3956460003-1498418990-1826556186-1001 -> {3BD88D7A-B1D9-43C6-8579-8D9DD55EAD69} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-06-26] (Microsoft Corporation -> Microsoft Corporation) BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-10-27] (HP Inc. -> HP Inc.) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-04] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF DefaultProfile: ohp8w2yw.default FF ProfilePath: C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\ohp8w2yw.default [2018-10-26] FF Extension: (NoFollow) - C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\ohp8w2yw.default\Extensions\nofollow@igor.jerosimic.xpi [2018-09-19] FF Extension: (Telemetry coverage) - C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\ohp8w2yw.default\features\{e80867ee-8144-47a7-b826-0c94742f854c}\telemetry-coverage-bug1487578@mozilla.org.xpi [2018-10-23] [Legacy] FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-02] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2019-05-19] (Adobe Inc. -> Adobe Systems) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-06] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.302\npGoogleUpdate3.dll [2019-10-02] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.302\npGoogleUpdate3.dll [2019-10-02] (Google Inc -> Google LLC) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2019-10-16] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-10-16] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2019-05-19] (Adobe Inc. -> Adobe Systems) Chrome: ======= CHR DefaultProfile: Default CHR StartupUrls: Default -> "hxxp://www.gazeta.pl/0,0.html?p=166" CHR Notifications: Default -> hxxps://app.alfabeto.dk; hxxps://imged.pl; hxxps://katusaresearch.com; hxxps://mail.mail-online.dk; hxxps://mail.one.com; hxxps://meet.google.com; hxxps://neilpatel.com; hxxps://sportowefakty.wp.pl; hxxps://stacja7.pl; hxxps://virginmobile.pl; hxxps://webmail.dandomain.dk; hxxps://www.airbaltic.com; hxxps://www.bzwbk.pl; hxxps://www.homebook.pl; hxxps://www.pinterest.dk; hxxps://www.seoreviewtools.com; hxxps://www.youtube.com CHR Profile: C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default [2019-11-05] CHR Extension: (Slides) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-20] CHR Extension: (Duolingo on the Web) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2017-12-20] CHR Extension: (Docs) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-20] CHR Extension: (Google Drev) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-12-20] CHR Extension: (YouTube) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-20] CHR Extension: (NoFollow) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfogidghaigoomjdeacndafapdijmiid [2019-10-28] CHR Extension: (Adobe Acrobat) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-10-02] CHR Extension: (Facebook Pixel Helper) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdgfkebogiimcoedlicjlajpkdmockpc [2019-09-25] CHR Extension: (Sheets) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-20] CHR Extension: (Google Docs Offline) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-17] CHR Extension: (SEO Minion) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\giihipjfimkajhlcilipnjeohabimjhi [2019-08-08] CHR Extension: (Pinterests Gem-knap) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2019-10-23] CHR Extension: (Keywords Everywhere - Keyword Tool) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbapdpeemoojbophdfndmlgdhppljgmp [2019-10-22] CHR Extension: (Tag Assistant (by Google)) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2018-11-20] CHR Extension: (Betalinger i Chrome Webshop) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04] CHR Extension: (Gmail) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-04] CHR Extension: (Chrome Media Router) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-09-20] CHR Profile: C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2 [2019-08-29] CHR Extension: (Slides) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-01-18] CHR Extension: (Docs) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2019-01-18] CHR Extension: (Google Drev) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-01-18] CHR Extension: (YouTube) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-01-18] CHR Extension: (Adobe Acrobat) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-08-29] CHR Extension: (Sheets) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-01-18] CHR Extension: (Google Docs Offline) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-01-19] CHR Extension: (Betalinger i Chrome Webshop) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-01-18] CHR Extension: (Gmail) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-29] CHR Extension: (Chrome Media Router) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-29] CHR Profile: C:\Users\piotr\AppData\Local\Google\Chrome\User Data\System Profile [2019-01-18] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [816184 2019-05-19] (Adobe Inc. -> Adobe Inc.) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [298872 2017-06-19] (Advanced Micro Devices, Inc. -> AMD) R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [134080 2017-05-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11642744 2019-10-25] (Microsoft Corporation -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-12-20] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-12-20] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2019-10-30] (Dropbox, Inc -> Dropbox, Inc.) R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1318184 2017-05-15] (HP Inc. -> HP Inc.) R2 HPDCService; C:\Program Files\Portrait Displays\HP Display Control\DisplayControlService.exe [203584 2017-06-08] (PORTRAIT DISPLAYS, INC. -> Portrait Displays, Inc.) R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-05-23] (HP Inc. -> HP Inc.) R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [360312 2019-10-14] (HP Inc. -> HP Inc.) R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [630776 2017-02-06] (HP Inc. -> HP Inc.) S3 iaStorAfsService; C:\windows\IAStorAfsService\iaStorAfsService.exe [2407576 2017-06-07] (Intel(R) Rapid Storage Technology -> Intel Corporation) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [268368 2018-11-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe [3201616 2019-10-21] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1549168 2017-06-03] (WildTangent Inc -> ) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe [103168 2019-10-21] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 amdkmcsp; C:\WINDOWS\system32\DRIVERS\amdkmcsp.sys [101232 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. ) R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0315087.inf_amd64_a27f9e273e87a888\atikmdag.sys [32702840 2017-06-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0315087.inf_amd64_a27f9e273e87a888\atikmpag.sys [525184 2017-06-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R0 amdpsp; C:\WINDOWS\System32\DRIVERS\amdpsp.sys [243048 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. ) R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [101376 2017-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) S3 iaStorAfs; C:\WINDOWS\System32\drivers\iaStorAfs.sys [69608 2017-06-07] (Intel(R) Rapid Storage Technology -> Intel Corporation) R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [329184 2017-06-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-04-18] (Realtek Semiconductor Corp. -> Realtek ) R3 RtkBtFilter; C:\WINDOWS\System32\drivers\RtkBtfilter.sys [784264 2018-05-31] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation) R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [9607640 2018-11-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation ) S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2017-10-10] (OpenVPN Technologies, Inc. -> The OpenVPN Project) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-10-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [351968 2019-10-21] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-10-21] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) =================== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-11-05 11:46 - 2019-11-05 11:47 - 000039731 _____ C:\Users\piotr\Downloads\FRST.txt 2019-11-05 11:41 - 2019-11-05 11:46 - 000000000 ____D C:\FRST 2019-11-05 11:40 - 2019-11-05 11:40 - 001619456 _____ (Farbar) C:\Users\piotr\Downloads\FRST64.exe 2019-11-05 11:14 - 2019-11-05 11:14 - 000076837 _____ C:\Users\piotr\Downloads\Send pakke billigt =_ Pakkepost og fragt =_ Sammenlign fragtpriser.pdf 2019-11-05 11:09 - 2019-11-05 11:09 - 000028240 _____ C:\Users\piotr\Downloads\00057126960622317379.pdf 2019-11-05 10:32 - 2019-11-05 10:32 - 000000000 ___HD C:\OneDriveTemp 2019-11-05 10:21 - 2019-11-05 10:21 - 000000000 ____D C:\Users\piotr\AppData\Roaming\TeamViewer 2019-11-05 10:21 - 2019-11-05 10:21 - 000000000 ____D C:\Users\piotr\AppData\Local\TeamViewer 2019-11-03 15:25 - 2019-11-03 15:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2019-10-30 19:45 - 2019-10-30 19:45 - 000051024 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2019-10-30 19:45 - 2019-10-30 19:45 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2019-10-30 19:45 - 2019-10-30 19:45 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2019-10-30 19:45 - 2019-10-30 19:45 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2019-10-16 21:27 - 2019-10-16 21:27 - 000065176 _____ (Adobe Systems Inc) C:\WINDOWS\system32\AdobePDF.dll 2019-10-16 21:27 - 2019-10-16 21:27 - 000036504 _____ (Adobe Systems Inc.) C:\WINDOWS\system32\AdobePDFUI.dll 2019-10-10 14:30 - 2019-10-10 14:30 - 000042631 _____ C:\Users\piotr\Downloads\message (3).pdf 2019-10-10 14:30 - 2019-10-10 14:30 - 000042625 _____ C:\Users\piotr\Downloads\message (1).pdf 2019-10-10 14:30 - 2019-10-10 14:30 - 000013685 _____ C:\Users\piotr\Downloads\message.pdf 2019-10-10 14:30 - 2019-10-10 14:30 - 000013439 _____ C:\Users\piotr\Downloads\message (2).pdf 2019-10-10 13:33 - 2019-10-10 13:33 - 001039079 _____ C:\Users\piotr\Downloads\2019-10-07T21-10_Nr_transakcji_2221358014640877-4972550.pdf 2019-10-10 13:10 - 2019-10-10 13:10 - 000788637 _____ C:\Users\piotr\OneDrive\Dokumenty\ACFrOgCHHKMslzt_h24uxYedMxDY6_7UEMrXV5MyfHK-EckOZ-V5gfhfTDZ0G8aEVgTMHmB-LqEuy9o6ZzYW285JGFpoOAFRKv3Hi75xJ5NAVkplflxlZwiN99S4EOk=.pdf 2019-10-10 08:42 - 2019-10-10 08:42 - 025900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 025443840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 022628352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 019849216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 019811840 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 018019840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 014816256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 008010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 007754240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 007195648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 007015936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 006517640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 006232064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 006084048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 005915648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 005764872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 005105152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 004481536 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 004129616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 003964056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 003742032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 002821120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 002799616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2019-10-10 08:42 - 2019-10-10 08:42 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2019-10-10 08:42 - 2019-10-10 08:42 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2019-10-10 08:42 - 2019-10-10 08:42 - 002494440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 002422592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL 2019-10-10 08:42 - 2019-10-10 08:42 - 002314648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 002258856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 002236144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 002138472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL 2019-10-10 08:42 - 2019-10-10 08:42 - 002132280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 002095104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001957008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001952360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001913296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001847808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001788728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001730560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001692160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001664928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001664376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001616784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001610752 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001563648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001510752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001505320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001473488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001394488 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 001334064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001297936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001283072 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001273392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001263616 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001244944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001217904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001178816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001154656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001152016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001098712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001072952 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 001054872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001047968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000904704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000904208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000829536 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000792296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000775768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000774672 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000772656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000722944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000679880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000598024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000568336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000537600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000510464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000501232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2019-10-10 08:42 - 2019-10-10 08:42 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000487576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000463272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000452408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000450360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11on12.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2019-10-10 08:42 - 2019-10-10 08:42 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000404392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000383984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000380216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000379840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000375720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2019-10-10 08:42 - 2019-10-10 08:42 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000300184 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000285256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000283688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2019-10-10 08:42 - 2019-10-10 08:42 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2019-10-10 08:42 - 2019-10-10 08:42 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2019-10-10 08:42 - 2019-10-10 08:42 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComposableShellProxyStub.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000139264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000137864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000125232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000116904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000110080 _____ C:\WINDOWS\system32\ResBParser.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000100664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys 2019-10-10 08:42 - 2019-10-10 08:42 - 000093712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000089544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2019-10-10 08:42 - 2019-10-10 08:42 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000073024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000033048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000021544 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe 2019-10-10 08:42 - 2019-10-10 08:42 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL 2019-10-10 08:42 - 2019-10-10 08:42 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000011576 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlibres.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin 2019-10-10 08:42 - 2019-10-10 08:42 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2019-10-10 08:41 - 2019-10-10 08:41 - 017787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 009928504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 007905000 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 007848192 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 007600664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 006425600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 006227624 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 006164480 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 005865272 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizimg.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 004612520 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 004562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 004046336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 004012544 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 003771392 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 003727360 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 003701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 003553280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 003386880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 003184128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 003105280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002772032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002762504 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002723328 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 002703360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002590208 _____ C:\WINDOWS\system32\dwmscene.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002552120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002456064 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002448712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002284032 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002160640 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002120704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002120272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002114048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002081976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002069504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 002000168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001940952 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001857024 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001845408 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2019-10-10 08:41 - 2019-10-10 08:41 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001743672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001721144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001656392 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001607680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001543168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 001439744 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 001413704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001383856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2019-10-10 08:41 - 2019-10-10 08:41 - 001261800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001182240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 001150240 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 001091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001084432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001036800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001029432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 001023128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 001009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000984376 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000975872 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000944664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000890472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000880088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000856576 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2019-10-10 08:41 - 2019-10-10 08:41 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000833312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000818688 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000759488 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000758584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000732176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mousocoreworker.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000674072 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000656960 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11on12.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000639400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000598016 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000551952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000541480 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000516408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000515896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000466416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000449888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000442704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000436536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000412152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000398728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000363624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000342896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000334936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposableShellProxyStub.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000293344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directxdatabaseupdater.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000278080 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ManageCI.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000225080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000223032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgiadaptercache.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000220472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000202040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000201016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000176152 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000140496 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ForceSync.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000132408 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000119840 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000117048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShellExtFramework.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000105272 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000092624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000079376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uaspstor.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000066832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidspi.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnppolicy.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000053248 _____ C:\WINDOWS\system32\Drivers\UsbPmApi.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000052752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000047616 _____ C:\WINDOWS\system32\UsbPmApi.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000037176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys 2019-10-10 08:41 - 2019-10-10 08:41 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32_DeviceGuard.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000016696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizres.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe 2019-10-10 08:41 - 2019-10-10 08:41 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll 2019-10-10 08:41 - 2019-10-10 08:41 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll 2019-10-10 08:23 - 2019-09-20 05:36 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2019-10-10 08:23 - 2019-09-20 05:14 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2019-10-07 10:53 - 2019-10-07 10:53 - 000028266 _____ C:\Users\piotr\Downloads\Label_00057126960597246704.pdf 2019-10-07 10:53 - 2019-10-07 10:53 - 000009501 _____ C:\Users\piotr\Downloads\pakke.dk_832130.pdf ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-11-05 11:46 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-11-05 10:32 - 2017-12-20 20:27 - 000000000 ___RD C:\Users\piotr\OneDrive 2019-11-05 09:30 - 2019-08-10 18:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-11-04 17:20 - 2017-06-17 08:18 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2019-11-04 13:26 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-11-04 13:25 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps 2019-11-04 13:25 - 2018-06-25 08:39 - 000000000 ____D C:\ProgramData\Packages 2019-11-04 12:16 - 2019-08-10 19:12 - 000003256 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForpiotr 2019-11-04 12:16 - 2019-04-11 12:24 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForpiotr.job 2019-11-04 08:43 - 2019-08-10 19:12 - 000004166 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{3817F065-CE5A-4180-812C-B5246433368B} 2019-11-04 08:42 - 2019-09-26 14:55 - 000000000 ____D C:\Users\piotr\AppData\Local\GoToMeeting 2019-11-03 15:25 - 2017-12-20 20:28 - 000000000 ____D C:\Program Files (x86)\Dropbox 2019-11-03 15:24 - 2017-12-20 20:32 - 000000000 ___RD C:\Users\piotr\Dropbox 2019-10-30 20:28 - 2019-09-26 14:55 - 000003836 _____ C:\WINDOWS\system32\Tasks\G2MUploadTask-S-1-5-21-3956460003-1498418990-1826556186-1001 2019-10-30 20:28 - 2019-09-26 14:55 - 000003740 _____ C:\WINDOWS\system32\Tasks\G2MUpdateTask-S-1-5-21-3956460003-1498418990-1826556186-1001 2019-10-30 20:28 - 2019-09-26 14:55 - 000000666 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3956460003-1498418990-1826556186-1001.job 2019-10-30 20:28 - 2019-09-26 14:55 - 000000570 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3956460003-1498418990-1826556186-1001.job 2019-10-27 22:43 - 2018-07-05 10:27 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk 2019-10-27 22:39 - 2017-12-21 12:56 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-10-23 16:51 - 2019-08-10 19:12 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3956460003-1498418990-1826556186-1001 2019-10-23 16:51 - 2019-08-10 19:04 - 000002374 _____ C:\Users\piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-10-23 15:04 - 2019-10-03 11:21 - 000003518 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0 2019-10-23 15:04 - 2019-08-09 16:55 - 000000000 ____D C:\Jts 2019-10-23 14:41 - 2019-08-09 16:55 - 000000000 ____D C:\Users\piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trader Workstation 2019-10-23 12:06 - 2018-06-25 10:39 - 000000000 ____D C:\Users\piotr\AppData\Local\PlaceholderTileLogoFolder 2019-10-22 09:25 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF 2019-10-21 18:13 - 2018-03-01 09:28 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2019-10-21 08:19 - 2019-08-10 19:12 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2019-10-21 08:18 - 2018-07-05 10:27 - 000002121 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk 2019-10-21 07:58 - 2017-12-20 20:28 - 000000000 ____D C:\Users\piotr\AppData\Local\Dropbox 2019-10-20 16:29 - 2017-12-21 12:54 - 000000000 ____D C:\Users\piotr\AppData\Local\Adobe 2019-10-20 16:27 - 2017-12-20 20:33 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-10-10 17:31 - 2019-08-10 19:10 - 002501874 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-10-10 17:31 - 2019-08-10 18:55 - 000808304 _____ C:\WINDOWS\system32\perfh015.dat 2019-10-10 17:31 - 2019-08-10 18:55 - 000169102 _____ C:\WINDOWS\system32\perfc015.dat 2019-10-10 17:31 - 2019-03-19 12:41 - 000501228 _____ C:\WINDOWS\system32\perfh006.dat 2019-10-10 17:31 - 2019-03-19 12:41 - 000095986 _____ C:\WINDOWS\system32\perfc006.dat 2019-10-10 17:27 - 2018-01-08 11:31 - 000000000 ___RD C:\Users\piotr\3D Objects 2019-10-10 17:27 - 2017-03-18 04:53 - 000000000 __RHD C:\Users\Public\AccountPictures 2019-10-10 17:24 - 2019-08-10 19:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-10-10 17:24 - 2019-08-10 18:58 - 000565688 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\PrintDialog 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\migwiz 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\inetsrv 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2019-10-10 17:23 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr 2019-10-10 17:23 - 2019-03-19 05:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2019-10-10 17:23 - 2017-09-27 10:21 - 000065536 _____ C:\WINDOWS\psp_storage.bin 2019-10-10 08:51 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-10-10 08:49 - 2018-01-08 09:41 - 000000000 ____D C:\WINDOWS\system32\MRT 2019-10-10 08:47 - 2018-01-08 09:41 - 127230528 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Files in the root of some directories ======== 2018-09-28 07:37 - 2018-09-28 07:37 - 000000000 _____ () C:\Users\piotr\AppData\Local\oobelibMkey.log ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================