Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13.03.2019 01
Ran by [removed] (administrator) on DESKTOP-SC81EN4 (13-03-2019 12:33:51)
Running from C:\Users\[removed]\Downloads
[removed]
Platform: Windows 10 Home Version 1809 17763.379 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo -> Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSAS13.MSSQLSERVER\OLAP\bin\sqlceip.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\130\DTS\Binn\MsDtsSrvr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\130\DTS\Binn\sqlceip.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn\sqlceip.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn\fdhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics Incorporated -> Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe\WinStore.App.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1812.10048.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Interactive Brokers Group, Inc. -> Interactive Brokers LLC) C:\Jts\tws.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\PING.EXE
(WhatsApp, Inc. -> WhatsApp) C:\Users\Mirror\AppData\Local\WhatsApp\app-0.3.2386\WhatsApp.exe
(WhatsApp, Inc. -> WhatsApp) C:\Users\Mirror\AppData\Local\WhatsApp\app-0.3.2386\WhatsApp.exe
(WhatsApp, Inc. -> WhatsApp) C:\Users\Mirror\AppData\Local\WhatsApp\app-0.3.2386\WhatsApp.exe
(WhatsApp, Inc. -> WhatsApp) C:\Users\Mirror\AppData\Local\WhatsApp\app-0.3.2386\WhatsApp.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11231.20192.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11231.20192.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Irfan Skiljan -> Irfan Skiljan) C:\Program Files (x86)\IrfanView\i_view32.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16404224 2015-10-01] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2015-10-01] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2015-10-01] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKU\S-1-5-21-1701902139-1240069638-2550680353-1001\...\Run: [Wechat] => C:\Program Files (x86)\Tencent\WeChat\WeChat.exe [492744 2018-11-09] (Tencent Technology(Shenzhen) Company Limited -> Tencent)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.121\Installer\chrmstp.exe [2019-03-05] (Google LLC -> Google Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8a009401-7ff9-4d92-9ed2-9637f90628a6}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{f020f4ca-e5ed-4206-a08d-d698be1c5144}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1701902139-1240069638-2550680353-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://ca.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_pwrisopdi_18_13_20¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dca%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDzztAzyyBzyyEtB0EtB0BtN0D0Tzu0StBtBzztBtN1L2XzuyEtFtByEtFtDtFyCtBtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StBtDyCyDtC0CzztBtGtAtDtD0BtGtD0A0EzztGtDzz0ByBtGzztC0EzytByD0D0D0E0Fzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1S1T1RtAyBtC1O1PtG1R1OyD1TtGyEtCtC1PtGzzyEyEyBtG1TtB1SyD1RtA1TtD1R1O1S1R2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCyCyEyDtBtN1Q2Z1B1P1RzutCyDtBtByCtAtDyBtAtA%26cr%3D310953428%26a%3Dwbf_pwrisopdi_18_13_20%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-03-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2019-02-10] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2019-02-10] (Google Inc -> Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://vancouver.en.craigslist.ca/search/jjj?query=sql+server&srchType=A","hxxps://inside.allscripts.com/Pages/default.aspx","hxxps://www.google.com/","hxxps://www.google.com/"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default [2019-03-13]
CHR Extension: (Slides) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-02-10]
CHR Extension: (Docs) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-02-10]
CHR Extension: (Google Drive) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-02-10]
CHR Extension: (YouTube) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-02-10]
CHR Extension: (Sheets) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-02-10]
CHR Extension: (Google Docs Offline) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-02-13]
CHR Extension: (Delete All Messages for Facebook™) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\idnpnpdgfopkoibbhemhdinhcbghpokf [2019-02-10]
CHR Extension: (LINE) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde [2019-02-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-02-10]
CHR Extension: (Social Profile view notification) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\pegkceflonohbcefcbflfpficfkmpeod [2019-02-10]
CHR Extension: (Gmail) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-02-10]
CHR Extension: (Chrome Media Router) - C:\Users\Mirror\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-10]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11129928 2019-03-01] (Microsoft Corporation -> Microsoft Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [328608 2015-07-30] (Intel Corporation - pGFX -> Intel Corporation)
S2 LPlatSvc; C:\Windows\System32\LPlatSvc.exe [892760 2018-12-26] (Lenovo -> Lenovo.)
R2 MsDtsServer130; C:\Program Files\Microsoft SQL Server\130\DTS\Binn\MsDtsSrvr.exe [216768 2016-04-30] (Microsoft Corporation -> Microsoft Corporation)
S3 MsMpiLaunchSvc; C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe [23040 2016-03-04] () [File not signed]
R3 MSSQLFDLauncher; C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [51392 2016-04-30] (Microsoft Corporation -> Microsoft Corporation)
S2 MSSQLLaunchpad; C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn\launchpad.exe [1011392 2017-07-06] (Microsoft Corporation -> Microsoft Corporation)
R3 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [392384 2017-07-06] (Microsoft Corporation -> Microsoft Corporation)
S3 SQL Server Distributed Replay Client; C:\Program Files (x86)\Microsoft SQL Server\130\Tools\DReplayClient\DReplayClient.exe [121024 2016-04-30] (Microsoft Corporation -> Microsoft Corporation)
S3 SQL Server Distributed Replay Controller; C:\Program Files (x86)\Microsoft SQL Server\130\Tools\DReplayController\DReplayController.exe [350400 2016-04-30] (Microsoft Corporation -> Microsoft Corporation)
S3 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [565952 2017-07-06] (Microsoft Corporation -> Microsoft Corporation)
R2 SQLTELEMETRY; C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn\sqlceip.exe [198848 2016-04-30] (Microsoft Corporation -> Microsoft Corporation)
R2 SSASTELEMETRY; C:\Program Files\Microsoft SQL Server\MSAS13.MSSQLSERVER\OLAP\Bin\sqlceip.exe [198848 2016-04-30] (Microsoft Corporation -> Microsoft Corporation)
R2 SSISTELEMETRY130; C:\Program Files\Microsoft SQL Server\130\DTS\Binn\sqlceip.exe [198848 2016-04-30] (Microsoft Corporation -> Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [259176 2016-10-02] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-22] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-22] (Microsoft Corporation -> Microsoft Corporation)
S4 MSSQLServerOLAPService; "C:\Program Files\Microsoft SQL Server\MSAS13.MSSQLSERVER\OLAP\bin\msmdsrv.exe" -s "C:\Program Files\Microsoft SQL Server\MSAS13.MSSQLSERVER\OLAP\Config"

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [199472 2015-07-28] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [214328 2015-07-28] (Broadcom Corporation -> Broadcom Corporation.)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3343872 2018-09-15] (Microsoft Windows -> Intel Corporation)
R0 PMDRVS; C:\Windows\System32\drivers\pmdrvs.sys [44160 2018-12-26] (Lenovo -> Lenovo.)
R3 risdxc; C:\Windows\System32\drivers\risdxc64.sys [106496 2013-09-08] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
S4 RsFx0401; C:\Windows\System32\DRIVERS\RsFx0401.sys [260816 2016-03-29] (Microsoft Corporation -> Microsoft Corporation)
R3 SensorsSimulatorDriver; C:\Windows\System32\drivers\WUDFRd.sys [282112 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [24576 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46472 2019-02-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [333792 2019-02-22] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-22] (Microsoft Windows -> Microsoft Corporation)
S3 WinDivert1.1; C:\ProgramData\KMSAuto\bin\driver\x64WDV\WinDivert.sys [35376 2013-12-03] (Nemea Mjukvaruutveckling AB -> Basil Projects)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-13 12:33 - 2019-03-13 12:34 - 000021624 _____ C:\Users\Mirror\Downloads\FRST.txt
2019-03-13 12:32 - 2019-03-13 12:33 - 000000000 ____D C:\FRST
2019-03-13 12:07 - 2019-03-13 12:07 - 002433536 _____ (Farbar) C:\Users\Mirror\Downloads\FRST64.exe
2019-03-13 11:37 - 2019-03-13 11:37 - 000000074 _____ C:\Users\Mirror\Desktop\tradingviewNew.txt
2019-03-12 23:30 - 2019-03-12 23:30 - 026810368 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 024616960 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 023440896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 020814848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 019284480 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 019023872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 015224320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 012857856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 012151296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 008875008 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 007897088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 007882240 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 007251456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 006548168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 006440960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 006309040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 006069760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 005915936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 005588184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 005436184 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 004920832 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 004883968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 004689408 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 003923456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 003744256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 003729808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2019-03-12 23:30 - 2019-03-12 23:30 - 003656192 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 003652656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 003566080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 003551408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 003427840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 003108864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002942464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002926904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 002776712 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002752360 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002700792 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002689536 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002626360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 002469440 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002447360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002323688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002278240 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002275680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002127360 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002073240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 002001408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001994760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001899160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001860608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001782272 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001760768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001711616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001701376 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001590072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001572176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001521664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001506816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001457544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001387520 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001360696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 001332224 _____ (Microsoft Corporation) C:\Windows\system32\lpasvc.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001307648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001294856 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001289192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001272552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ttdrecordcpu.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001258808 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2019-03-12 23:30 - 2019-03-12 23:30 - 001224704 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001221944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001200920 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001180248 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001131520 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001098128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001077912 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001072720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001072640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 001047040 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000918032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000908800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl
2019-03-12 23:30 - 2019-03-12 23:30 - 000866152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000793088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000782968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000775168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000772608 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000772408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Services.TargetedContent.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingOnlineServices.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000703488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000684032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000655160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000652824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000649272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000642048 _____ (Microsoft Corporation) C:\Windows\system32\SharedRealitySvc.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000626176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000621568 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000599040 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000591832 _____ C:\Windows\SysWOW64\InputHost.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfh264enc.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000560128 _____ (Microsoft Corporation) C:\Windows\system32\mfh264enc.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000549376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000548864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000525312 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2019-03-12 23:30 - 2019-03-12 23:30 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsound.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000495104 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\ResourceMapper.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000474936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2019-03-12 23:30 - 2019-03-12 23:30 - 000453944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000449024 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000421688 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000414720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2019-03-12 23:30 - 2019-03-12 23:30 - 000411136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000383288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\DataUsageHandlers.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000359424 _____ (Microsoft Corporation) C:\Windows\system32\dusmsvc.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000340480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000331264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\MbbCx.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000279376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000272648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ttdwriter.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000263360 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000262456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000180736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srumsvc.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000176640 _____ (Microsoft Corporation) C:\Windows\system32\spacebridge.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000173568 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe
2019-03-12 23:30 - 2019-03-12 23:30 - 000134144 _____ (Microsoft Corporation) C:\Windows\system32\DataUsageLiveTileTask.exe
2019-03-12 23:30 - 2019-03-12 23:30 - 000132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srpapi.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2019-03-12 23:30 - 2019-03-12 23:30 - 000096256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2019-03-12 23:30 - 2019-03-12 23:30 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2019-03-12 23:30 - 2019-03-12 23:30 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\SecureBioSysprep.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 022114960 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 017520640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 009683256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 009670656 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 007883776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 007688088 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 007647256 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 007645392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 007556392 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 005566464 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 005296640 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 004588744 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 004245280 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 003983360 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 003761664 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 003660288 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 003504128 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 003399168 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 003382272 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 003378488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 002871312 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 002842112 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 002766648 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 002720768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 002637312 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 002630656 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 002488320 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 002437344 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 002187776 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 002044416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 002021584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 002013696 _____ C:\Windows\system32\rdpnano.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001969464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 001931264 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001893888 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001884672 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001844448 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001830200 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001742104 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001715712 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001697744 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-03-12 23:29 - 2019-03-12 23:29 - 001672704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001656832 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001644048 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001641400 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001604096 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001563336 _____ (Microsoft Corporation) C:\Windows\system32\ttdrecordcpu.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001496064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001481488 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001479480 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001468440 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 001341880 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-03-12 23:29 - 2019-03-12 23:29 - 001331536 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001296576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001267712 _____ (Microsoft Corporation) C:\Windows\system32\APMon.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001259320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 001256448 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001253688 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 001221120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 001208320 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001199104 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001191512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001179168 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 001176064 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001087800 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001078072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Services.TargetedContent.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001056272 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001054200 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 001052160 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001043256 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 001022616 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001008128 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 001001472 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2019-03-12 23:29 - 2019-03-12 23:29 - 000981816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000955392 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000926208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000902144 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000895048 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000888320 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000888120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pidgenx.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000883712 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000871792 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000865568 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000860160 _____ C:\Windows\system32\MBR2GPT.EXE
2019-03-12 23:29 - 2019-03-12 23:29 - 000850760 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000836096 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000833064 _____ C:\Windows\system32\InputHost.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000823296 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000808464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000790328 _____ (Microsoft Corporation) C:\Windows\system32\upshared.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000773120 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000764216 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000757664 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000745984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000741888 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000735760 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000726416 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000714240 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000691712 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000680184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000661816 _____ (Microsoft Corporation) C:\Windows\system32\computecore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000651576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000646656 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000646632 _____ (Microsoft Corporation) C:\Windows\system32\msvcp_win.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000622080 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000619832 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000605496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000604336 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\dsound.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000572416 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000566272 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000553784 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000543744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000540672 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2019-03-12 23:29 - 2019-03-12 23:29 - 000519992 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000511800 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000508216 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000505656 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000484976 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase_enclave.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000479232 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000463672 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000460304 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000456704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000452096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cldflt.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000449368 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000444728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000435712 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000419128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000407552 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000404792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000387832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000386872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000383288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000367616 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000355360 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000348160 _____ (Microsoft Corporation) C:\Windows\system32\BioCredProv.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000336744 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000330464 _____ (Microsoft Corporation) C:\Windows\system32\ttdwriter.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000322576 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000300344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000281600 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000264192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000248832 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000246584 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\smbwmiv2.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000224256 _____ (Microsoft Corporation) C:\Windows\system32\ptpprov.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000214528 _____ (Microsoft Corporation) C:\Windows\system32\srumsvc.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000202752 _____ (Microsoft Corporation) C:\Windows\system32\SecureTimeAggregator.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000202552 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000196608 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000195896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\ngcpopkeysrv.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000178688 _____ (Microsoft Corporation) C:\Windows\system32\winbio.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000177664 _____ (Microsoft Corporation) C:\Windows\system32\ngctasks.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\SpatialAudioLicenseSrv.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000169784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spacebridge.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000156984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000156160 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000147968 _____ (Microsoft Corporation) C:\Windows\system32\srpapi.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000147256 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000138960 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winbio.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000120832 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\DolbyMATEnc.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000115152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wldp.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000104248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bindflt.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000095544 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000095544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storqosflt.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000090424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000071184 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\hidparse.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rndismp6.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000035640 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2019-03-12 23:29 - 2019-03-12 23:29 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msfs.sys
2019-03-12 23:29 - 2019-03-12 23:29 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2019-03-12 23:29 - 2019-03-12 23:29 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-03-12 23:29 - 2019-03-12 23:29 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-03-12 23:29 - 2019-03-12 23:29 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-03-12 23:29 - 2019-03-12 23:29 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-03-12 23:29 - 2019-03-12 23:29 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-03-12 23:29 - 2019-03-12 23:29 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-03-12 23:29 - 2019-03-12 23:29 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-03-12 23:29 - 2019-03-12 23:29 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-03-12 08:54 - 2019-03-12 08:54 - 000002534 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2019-03-12 08:54 - 2019-03-12 08:54 - 000002498 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2019-03-12 08:54 - 2019-03-12 08:54 - 000002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2019-03-12 08:54 - 2019-03-12 08:54 - 000002492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2019-03-12 08:54 - 2019-03-12 08:54 - 000002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2019-03-12 08:54 - 2019-03-12 08:54 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2019-03-12 08:54 - 2019-03-12 08:54 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2019-03-12 08:54 - 2019-03-12 08:54 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2019-03-12 08:54 - 2019-03-12 08:54 - 000002435 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2019-03-12 08:54 - 2019-03-12 08:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2019-03-11 10:43 - 2019-03-13 11:36 - 000000075 _____ C:\Users\Mirror\Desktop\serviceCanada.txt
2019-03-10 22:44 - 2019-03-10 22:44 - 000022889 _____ C:\Users\Mirror\Downloads\Notice_of_reassessment_2019_03_04_16_20_59_235819.pdf
2019-03-10 21:18 - 2019-03-10 21:18 - 012224635 _____ C:\Users\Mirror\Documents\redvideoplayback.mp4
2019-03-10 12:37 - 2019-03-12 01:18 - 000000648 _____ C:\Users\Mirror\Desktop\words_english.txt
2019-03-10 10:31 - 2019-03-10 10:31 - 000225926 _____ C:\Users\Mirror\Downloads\WhatsApp Image 2019-03-10 at 10.31.51 AM.jpeg
2019-03-09 01:08 - 2019-03-09 01:08 - 016228177 _____ C:\Users\Mirror\Downloads\Talking Twin Babies - PART 2 - OFFICIAL VIDEO.mp4
2019-03-09 01:07 - 2019-03-09 01:07 - 008510263 _____ C:\Users\Mirror\Downloads\videoplayback.mp4
2019-03-08 20:20 - 2019-03-08 20:20 - 007532483 _____ C:\Users\Mirror\Downloads\BurnsideRdWest222-FloorPlans.pdf
2019-03-08 20:19 - 2019-03-08 20:19 - 000608796 _____ C:\Users\Mirror\Downloads\531WhitesideFloorplans.pdf
2019-03-08 20:19 - 2019-03-08 20:19 - 000053685 _____ C:\Users\Mirror\Downloads\SubdivisionPlanVIP10476531WhitesideSt.pdf
2019-03-07 16:34 - 2019-03-07 16:34 - 000640283 _____ C:\Users\Mirror\Downloads\SPX Day Trading Plan Template.pdf
2019-03-07 02:01 - 2019-03-07 02:01 - 000000014 _____ C:\Users\Mirror\Documents\tastytrade.txt
2019-03-06 16:09 - 2019-03-07 17:17 - 000203502 _____ C:\Users\Mirror\Documents\Ignite Technical Interview Prep Guide.pdf
2019-03-06 15:51 - 2019-03-06 15:51 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\TeamViewer
2019-03-06 15:50 - 2019-03-06 15:50 - 006122272 _____ (TeamViewer) C:\Users\Mirror\Downloads\TeamViewerQS.exe
2019-03-06 01:06 - 2019-03-06 05:17 - 000000000 ____D C:\Users\Mirror\AppData\Local\MetaGeek
2019-03-06 01:04 - 2019-03-06 05:17 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetaGeek
2019-03-06 01:04 - 2019-03-06 05:17 - 000000000 ____D C:\Users\Mirror\AppData\Local\inSSIDer
2019-03-06 01:02 - 2019-03-06 01:04 - 008152592 _____ (MetaGeek, LLC) C:\Users\Mirror\Downloads\inSSIDerSetup.exe
2019-03-06 00:41 - 2018-09-15 00:29 - 000092746 _____ C:\Users\Mirror\Desktop\services.msc
2019-03-05 15:33 - 2019-03-05 15:33 - 000277846 _____ C:\Users\Mirror\Downloads\statement (2).pdf
2019-03-05 15:23 - 2019-03-05 15:23 - 000288784 _____ C:\Users\Mirror\Downloads\statement (1).pdf
2019-03-01 22:54 - 2019-03-01 22:54 - 001290393 _____ C:\Users\Mirror\Downloads\Gongxia_T1_2018.pdf
2019-03-01 22:48 - 2019-03-01 22:48 - 000013750 _____ C:\Users\Mirror\Downloads\Gongxia_Summary.xlsx
2019-03-01 14:48 - 2019-03-01 14:48 - 000027441 _____ C:\Users\Mirror\Downloads\U8161296.2017.T5008 (2).htm
2019-03-01 14:47 - 2019-03-01 14:47 - 000162847 _____ C:\Users\Mirror\Downloads\U8161296.2018.T5008.htm
2019-02-27 16:15 - 2019-02-27 22:00 - 000000000 ____D C:\Users\Mirror\Documents\Zodiacs
2019-02-27 16:14 - 2019-02-27 16:14 - 000003308 _____ C:\Users\Mirror\Downloads\Zodiacs-20190227T231447Z-001.zip
2019-02-27 15:56 - 2019-02-27 15:56 - 029271408 _____ (TaxTron Inc ) C:\Users\Mirror\Downloads\TaxTronT2201722.exe
2019-02-27 15:56 - 2019-02-27 15:56 - 000000000 ___HD C:\ProgramData\{F7CF078D-5FC6-4671-A493-E54C4B6D2701}
2019-02-27 15:55 - 2019-02-27 15:55 - 000000000 ___HD C:\ProgramData\{02B0468D-4AA0-43A8-93F7-4D3F96DCCE41}
2019-02-27 15:54 - 2019-02-27 15:55 - 031439616 _____ (TaxTron Inc ) C:\Users\Mirror\Downloads\TaxTronT220162.exe
2019-02-27 15:50 - 2019-03-13 03:24 - 000000649 _____ C:\Users\Mirror\Documents\business_tax_2018.txt
2019-02-26 10:54 - 2019-02-26 10:54 - 000000277 _____ C:\Users\Mirror\Desktop\sql_assignment.txt
2019-02-25 22:22 - 2019-02-25 22:22 - 002619141 _____ C:\Users\Mirror\Downloads\reportingguide.pdf
2019-02-25 14:34 - 2016-04-30 09:10 - 000251072 _____ (Microsoft Corporation) C:\Windows\system32\SQSRVRES.DLL
2019-02-25 12:37 - 2019-02-25 12:37 - 000179967 _____ C:\Users\Mirror\Downloads\disability-2011.pdf
2019-02-25 12:30 - 2019-02-25 12:30 - 000000000 ____D C:\Users\Mirror\Documents\GitHub
2019-02-25 12:29 - 2019-02-25 12:29 - 000000208 _____ C:\Users\Mirror\.gitconfig
2019-02-25 12:25 - 2019-02-26 10:53 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\GitHub Desktop
2019-02-25 12:25 - 2019-02-25 12:25 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2019-02-25 12:25 - 2019-02-25 12:25 - 000000000 ____D C:\Users\Mirror\AppData\Local\GitHubDesktop
2019-02-25 12:24 - 2019-02-25 12:25 - 081878488 _____ (GitHub, Inc.) C:\Users\Mirror\Downloads\GitHubDesktopSetup.exe
2019-02-25 11:18 - 2019-02-25 11:18 - 000000000 ____D C:\ProgramData\KMSAuto
2019-02-25 11:15 - 2019-02-26 03:28 - 000000000 ____D C:\ProgramData\KMSAutoS
2019-02-25 11:15 - 2019-02-25 11:15 - 000010587 _____ C:\Users\Mirror\Documents\tax_rrsp.xlsx
2019-02-25 11:14 - 2019-02-25 11:18 - 000000000 ____D C:\Users\Mirror\AppData\Local\MSfree Inc
2019-02-25 11:12 - 2019-02-25 11:12 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-02-25 11:12 - 2019-02-25 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-02-25 11:07 - 2019-02-25 11:16 - 000000000 ____D C:\Users\Mirror\Documents\[]Microsoft Office Professional Plus (x64) 2013 Incl  Activator  P2P
2019-02-25 09:22 - 2019-03-06 00:08 - 000000000 ____D C:\Users\Mirror\Documents\Visual Studio 2015
2019-02-25 09:22 - 2019-03-06 00:08 - 000000000 ____D C:\Users\Mirror\Documents\SQL Server Management Studio
2019-02-25 09:22 - 2016-04-30 09:12 - 000116928 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQLSERVER-sqlctr13.0.1601.5.dll
2019-02-25 09:22 - 2016-04-30 09:12 - 000102080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQLSERVER-sqlctr13.0.1601.5.dll
2019-02-25 09:22 - 2016-04-30 09:12 - 000044232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL13.MSSQLSERVER-sqlagtctr.dll
2019-02-25 09:22 - 2016-04-30 09:11 - 000051912 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL13.MSSQLSERVER-sqlagtctr.dll
2019-02-25 09:20 - 2019-02-25 09:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Microsoft R Server
2019-02-25 09:18 - 2019-02-25 09:18 - 000000000 ____D C:\Windows\system32\RsFx
2019-02-25 09:16 - 2019-02-25 09:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
2019-02-25 09:14 - 2019-02-25 09:14 - 000000000 ____D C:\Program Files\Microsoft Visual Studio 10.0
2019-02-25 09:14 - 2019-02-25 09:14 - 000000000 ____D C:\Program Files\Microsoft MPI
2019-02-25 09:14 - 2019-02-25 09:14 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 10.0
2019-02-25 09:12 - 2019-02-25 09:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server Tools 17
2019-02-25 09:06 - 2019-02-25 09:06 - 000000000 ____D C:\Program Files (x86)\Windows Kits
2019-02-25 09:05 - 2019-02-25 09:05 - 000000000 ____D C:\Program Files (x86)\Microsoft SDKs
2019-02-25 09:04 - 2019-02-25 09:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2017
2019-02-25 09:04 - 2019-02-25 09:04 - 000000000 ____D C:\Program Files\Microsoft Analysis Services
2019-02-25 09:04 - 2019-02-25 09:04 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2019-02-25 09:03 - 2019-02-25 09:08 - 000000000 ____D C:\Windows\SysWOW64\1033
2019-02-25 09:03 - 2019-02-25 09:03 - 000000000 ____D C:\Windows\system32\1033
2019-02-25 08:51 - 2019-02-25 08:55 - 388677504 _____ (Microsoft Corporation) C:\Users\Mirror\Documents\SSMS-Setup-ENU-Upgrade.exe
2019-02-25 08:50 - 2019-02-25 09:03 - 846140744 _____ (Microsoft Corporation) C:\Users\Mirror\Documents\SSMS-Setup-ENU.exe
2019-02-25 08:44 - 2019-02-25 09:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2016
2019-02-23 23:13 - 2019-02-23 23:13 - 000218090 _____ C:\Users\Mirror\Downloads\WhatsApp Image 2019-02-23 at 6.21.33 PM.jpeg
2019-02-23 14:12 - 2019-02-23 14:12 - 000129175 _____ C:\Users\Mirror\Downloads\WhatsApp Image 2019-02-17 at 10.22.19 AM.jpeg
2019-02-22 16:25 - 2019-02-22 16:25 - 000294335 _____ C:\Users\Mirror\Downloads\WhatsApp Image 2019-02-22 at 2.57.54 PM(1).jpeg
2019-02-22 16:25 - 2019-02-22 16:25 - 000294335 _____ C:\Users\Mirror\Downloads\WhatsApp Image 2019-02-22 at 10.28.02 AM.jpeg
2019-02-22 16:25 - 2019-02-22 16:25 - 000187777 _____ C:\Users\Mirror\Downloads\WhatsApp Image 2019-02-22 at 2.57.54 PM(2).jpeg
2019-02-22 16:25 - 2019-02-22 16:25 - 000180498 _____ C:\Users\Mirror\Downloads\WhatsApp Image 2019-02-22 at 2.57.54 PM(3).jpeg
2019-02-22 16:24 - 2019-02-22 16:24 - 000265043 _____ C:\Users\Mirror\Downloads\WhatsApp Image 2019-02-22 at 2.57.54 PM.jpeg
2019-02-21 15:13 - 2019-02-21 15:13 - 007933364 _____ C:\Users\Mirror\Downloads\Naked+Forex.pdf
2019-02-21 15:10 - 2019-02-21 15:10 - 001443680 _____ (Igor Pavlov) C:\Users\Mirror\Downloads\7z1806-x64.exe
2019-02-21 15:10 - 2019-02-21 15:10 - 001443680 _____ (Igor Pavlov) C:\Users\Mirror\Downloads\7z1806-x64 (1).exe
2019-02-21 15:10 - 2019-02-21 15:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2019-02-21 15:10 - 2019-02-21 15:10 - 000000000 ____D C:\Program Files\7-Zip
2019-02-21 14:27 - 2019-02-21 14:27 - 000000193 _____ C:\Users\Mirror\Desktop\transfer manulife to ib.txt
2019-02-21 11:59 - 2019-02-21 11:59 - 000346863 _____ C:\Users\Mirror\Desktop\manulife_statement_document.pdf
2019-02-20 21:10 - 2019-02-20 21:10 - 004938392 _____ (Microsoft Corporation) C:\Users\Mirror\Downloads\SQLServer2017-SSEI-Eval.exe
2019-02-20 20:42 - 2016-04-30 09:12 - 000177856 _____ (Microsoft Corporation) C:\Windows\system32\hadrres.dll
2019-02-20 20:42 - 2016-04-30 09:12 - 000081600 _____ (Microsoft Corporation) C:\Windows\system32\fssres.dll
2019-02-20 20:35 - 2019-02-25 09:08 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0
2019-02-20 20:35 - 2019-02-20 20:35 - 000000000 ____D C:\ProgramData\VsTelemetry
2019-02-20 20:35 - 2019-02-20 20:35 - 000000000 ____D C:\Program Files\Microsoft Help Viewer
2019-02-20 20:35 - 2019-02-20 20:35 - 000000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2019-02-20 20:30 - 2019-02-20 20:30 - 000009053 _____ C:\Users\Mirror\Documents\tax.xlsx
2019-02-20 20:29 - 2019-02-20 20:29 - 000000000 ____D C:\Users\Mirror\AppData\Local\Microsoft_Corporation
2019-02-20 20:28 - 2019-02-20 20:28 - 000166248 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2019-02-20 20:28 - 2019-02-20 20:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2019-02-20 20:28 - 2019-02-20 20:28 - 000000000 ____D C:\Program Files\Java
2019-02-20 20:27 - 2019-02-20 20:27 - 000000000 ____D C:\Users\Mirror\AppData\LocalLow\Oracle
2019-02-20 20:24 - 2019-02-20 20:27 - 158268784 _____ (Oracle Corporation) C:\Users\Mirror\Downloads\jdk-11.0.2_windows-x64_bin.exe
2019-02-20 20:18 - 2019-02-25 14:30 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2019-02-20 20:16 - 2019-02-25 14:30 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2019-02-20 19:22 - 2019-02-20 19:39 - 2206038016 _____ C:\Users\Mirror\Documents\sql_server_2016_standard.iso
2019-02-20 10:16 - 2019-02-20 10:16 - 000000000 ____D C:\Users\Mirror\AppData\Local\DBG
2019-02-19 13:58 - 2019-02-19 13:58 - 000142264 _____ C:\Users\Mirror\Downloads\Image 2019-02-19 at 12.58.31 PM(1).jpeg
2019-02-19 13:58 - 2019-02-19 13:58 - 000123060 _____ C:\Users\Mirror\Downloads\Image 2019-02-19 at 12.58.31 PM.jpeg
2019-02-19 13:57 - 2019-02-19 13:57 - 000061943 _____ C:\Users\Mirror\Desktop\EmployeePayStatementsDeposits201901081750.pdf
2019-02-19 13:56 - 2019-02-19 13:56 - 000061970 _____ C:\Users\Mirror\Desktop\EmployeePayStatementsDeposits201901221849.pdf
2019-02-19 13:53 - 2019-02-19 13:53 - 000239621 _____ C:\Users\Mirror\Downloads\Fido-Dec16_2018-1962747588.pdf
2019-02-19 13:53 - 2019-02-19 13:53 - 000236312 _____ C:\Users\Mirror\Downloads\Fido-Jan16_2019-1973645898.pdf
2019-02-19 11:47 - 2019-02-19 11:47 - 000000000 ____D C:\Program Files\Microsoft Office 15
2019-02-19 11:20 - 2019-02-19 11:20 - 000000000 ____D C:\Users\Mirror\AppData\LocalLow\Temp
2019-02-19 11:18 - 2019-02-19 11:43 - 000000000 ____D C:\Users\Mirror\Documents\MICROSOFT Office PRO Plus 2016 v16.0.4266.1003 RTM + Activator [TechTools.NET]
2019-02-19 11:17 - 2019-03-13 09:15 - 000000000 ____D C:\Users\Mirror\AppData\LocalLow\uTorrent
2019-02-19 11:06 - 2019-02-19 12:07 - 000000119 _____ C:\Users\Mirror\Desktop\password greatwestlife.txt
2019-02-19 08:25 - 2019-02-19 08:25 - 000365209 _____ C:\Users\Mirror\Downloads\U8161296.2018.fx (2).pdf
2019-02-18 04:02 - 2019-02-18 04:02 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\WinRAR
2019-02-18 04:01 - 2019-03-13 03:21 - 000000000 ____D C:\ProgramData\TaxTron
2019-02-18 04:01 - 2019-03-06 15:54 - 000000000 ____D C:\Users\Mirror\Documents\TaxTron
2019-02-18 04:01 - 2019-02-07 08:05 - 000009453 _____ C:\Users\Mirror\Desktop\watches_rolex.xlsx
2019-02-18 04:01 - 2018-12-26 04:00 - 000001278 _____ C:\Users\Mirror\Desktop\MotivationalSpeech.txt
2019-02-18 04:01 - 2018-05-13 14:54 - 000000326 _____ C:\Users\Mirror\Desktop\airbnbQuestions.txt
2019-02-18 04:01 - 2018-05-12 21:52 - 000000101 _____ C:\Users\Mirror\Desktop\ccmy info.txt
2019-02-18 03:58 - 2019-02-25 09:05 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-02-18 03:58 - 2019-02-18 03:58 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-02-18 03:58 - 2019-02-18 03:58 - 000000000 ____D C:\Program Files\MSBuild
2019-02-18 03:58 - 2019-02-18 03:58 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-02-18 03:58 - 2018-09-09 18:17 - 001167960 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2019-02-18 03:58 - 2018-09-09 18:16 - 000126064 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2019-02-18 03:58 - 2018-09-09 18:16 - 000035440 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2019-02-18 03:58 - 2018-08-29 18:56 - 000780376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2019-02-18 03:58 - 2018-08-29 18:56 - 000104560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-02-18 03:58 - 2018-08-29 18:56 - 000036896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2019-02-18 03:57 - 2019-02-27 15:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TaxTron
2019-02-18 03:57 - 2019-02-27 15:56 - 000000000 ____D C:\Program Files (x86)\TaxTron
2019-02-18 03:57 - 2019-02-18 03:57 - 000000000 ___HD C:\ProgramData\{739101F3-C5DB-4EB3-8835-886ABF00913A}
2019-02-18 03:54 - 2019-02-18 03:54 - 000000000 ____D C:\Users\Mirror\AppData\Local\IIIQ
2019-02-18 03:53 - 2019-02-18 03:53 - 030635792 _____ (TaxTron Inc ) C:\Users\Mirror\Downloads\TaxTronT220182.exe
2019-02-18 03:43 - 2019-02-18 03:43 - 000365209 _____ C:\Users\Mirror\Downloads\U8161296.2018.fx (1).pdf
2019-02-15 21:49 - 2019-02-15 21:49 - 019229160 _____ (Microsoft Corporation) C:\Users\Mirror\Downloads\MediaCreationTool1809 (1).exe
2019-02-15 21:49 - 2019-02-15 21:49 - 000000000 ___HD C:\$Windows.~WS
2019-02-15 07:13 - 2019-02-15 07:13 - 000000000 ____D C:\ProgramData\Foxit Software
2019-02-15 07:08 - 2019-02-26 10:54 - 000000000 ____D C:\Program Files\WinRAR
2019-02-15 07:08 - 2019-02-15 07:13 - 000000000 ____D C:\Users\Public\Foxit Software
2019-02-15 07:08 - 2019-02-15 07:09 - 000000000 ____D C:\Users\Mirror\AppData\Local\Opera Software
2019-02-15 07:08 - 2019-02-15 07:08 - 000004218 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1550239683
2019-02-15 07:07 - 2019-02-15 07:16 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Foxit Software
2019-02-15 07:07 - 2019-02-15 07:09 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Opera Software
2019-02-15 07:07 - 2019-02-15 07:07 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Foxit AgentInformation
2019-02-15 07:07 - 2019-02-15 07:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2019-02-15 07:07 - 2019-02-15 07:07 - 000000000 ____D C:\ProgramData\Foxit ContentPlatform
2019-02-15 07:07 - 2019-02-15 07:07 - 000000000 ____D C:\Program Files (x86)\Foxit Software
2019-02-15 07:02 - 2019-02-15 07:02 - 000000000 ____D C:\Users\Mirror\Documents\resume
2019-02-15 07:02 - 2019-02-15 07:02 - 000000000 ____D C:\Users\Mirror\Documents\Custom Office Templates
2019-02-14 12:30 - 2019-03-13 11:37 - 000000000 ____D C:\Users\Mirror\Documents\2018_CorpTax
2019-02-14 03:14 - 2019-02-14 03:14 - 000000144 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-02-14 00:14 - 2019-02-14 01:29 - 000000000 ____D C:\Users\Mirror\Documents\The Town EXTENDED (2010)
2019-02-12 21:15 - 2019-02-15 23:37 - 000000000 ____D C:\ESD
2019-02-12 21:04 - 2019-02-12 21:04 - 000000451 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2019-02-12 21:02 - 2019-03-06 00:20 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2019-02-12 21:00 - 2019-03-06 00:20 - 001668374 _____ C:\Windows\ntbtlog.txt
2019-02-12 17:28 - 2019-02-12 17:28 - 007724992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 005561856 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 005527552 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 005205464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 005112792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 005086208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 004991096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 004702704 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 004627456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 004526080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 004298752 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 004019200 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 003556352 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 002992640 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 002618880 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 002466304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 002392576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcGenral.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 002298880 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 002149368 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 002085376 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001720936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001700880 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001674480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001671864 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001533440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001467560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001462272 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001446400 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001415680 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001282640 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001271608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContentDeliveryManager.Utilities.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001254912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001209360 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001064448 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001032704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 001010176 _____ (Microsoft Corporation) C:\Windows\system32\refsutil.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000982576 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000970256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000956416 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000954368 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000913920 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000901632 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000864056 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000829440 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000822448 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000820736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000800256 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000799568 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000787456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000765960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000762272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000752136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000742912 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000700416 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Language.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000684544 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000651304 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000629576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000615936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000612368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000588304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000580024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000556544 _____ (Microsoft Corporation) C:\Windows\system32\BTAGService.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000553984 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000547840 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000535048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000527872 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000522312 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000516608 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000506408 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000496872 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000494080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000494080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Activities.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000461824 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TileDataRepository.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000430904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000429056 _____ (Microsoft Corporation) C:\Windows\system32\MixedReality.Broker.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000427520 _____ (Microsoft Corporation) C:\Windows\system32\MSFlacDecoder.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000420864 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000408800 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000407040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000394752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcLayers.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000388096 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000375544 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSFlacDecoder.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000365056 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\AcGenral.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000346624 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000326144 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000324408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000314368 _____ (Microsoft Corporation) C:\Windows\system32\AcLayers.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000305664 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000298296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000289792 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000284160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasppp.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000276488 _____ (Microsoft Corporation) C:\Windows\system32\MTF.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000251904 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngOnline.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000217600 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000202552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MTF.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000201216 _____ (Microsoft Corporation) C:\Windows\system32\wincredui.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000198144 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000195072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryUpgrade.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000193032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000184320 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000165376 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSrv.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryUpgrade.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredui.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasman.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000148480 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000146888 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000143872 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000137216 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000132104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spopk.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000122368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000121872 _____ (Microsoft Corporation) C:\Windows\system32\kdnet.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000114856 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSup.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000097592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\nlahc.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\PktMon.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000091424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CompPkgSup.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000080400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpci.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nslookup.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000074424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WindowsTrustedRT.sys
2019-02-12 17:28 - 2019-02-12 17:28 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\umpo-overrides.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000047136 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\lpkinstall.exe
2019-02-12 17:28 - 2019-02-12 17:28 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000039304 _____ (Microsoft Corporation) C:\Windows\system32\NtlmShared.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NtlmShared.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2019-02-12 17:28 - 2019-02-12 17:28 - 000000072 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2019-02-12 00:21 - 2019-03-04 17:57 - 000000000 ____D C:\Users\Mirror\Documents\2018_IndividualTax
2019-02-11 08:55 - 2019-03-13 09:25 - 000004170 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{75982CA0-838C-4EAC-8F4E-286EB6AA4D94}
2019-02-11 08:49 - 2019-02-11 08:49 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Skype
2019-02-11 08:47 - 2019-03-12 08:53 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-02-11 07:02 - 2019-03-12 16:23 - 000000000 ____D C:\Users\Mirror\Documents\WeChat Files
2019-02-11 07:02 - 2019-02-11 22:43 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Tencent
2019-02-11 07:02 - 2019-02-11 07:02 - 000000000 ____D C:\Users\Mirror\AppData\Local\CEF
2019-02-11 07:02 - 2019-02-11 07:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WeChat
2019-02-11 07:02 - 2019-02-11 07:02 - 000000000 ____D C:\Program Files (x86)\Tencent
2019-02-11 04:24 - 2019-03-13 11:38 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Exodus
2019-02-11 04:24 - 2019-03-01 07:45 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Exodus Movement Inc
2019-02-11 04:23 - 2019-03-01 07:44 - 000000000 ____D C:\Users\Mirror\AppData\Local\exodus

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-13 12:06 - 2018-09-15 00:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-13 11:45 - 2019-02-10 20:51 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\WhatsApp
2019-03-13 11:45 - 2019-02-10 17:40 - 001108680 _____ C:\Windows\system32\PerfStringBackup.INI
2019-03-13 11:45 - 2018-09-15 00:31 - 000000000 ____D C:\Windows\INF
2019-03-13 11:40 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\AppReadiness
2019-03-13 11:39 - 2019-02-10 17:40 - 000003700 _____ C:\Windows\System32\Tasks\Lenovo Power Management Driver PnP Task
2019-03-13 11:39 - 2019-02-10 17:39 - 000000000 __SHD C:\Users\Mirror\IntelGraphicsProfiles
2019-03-13 11:39 - 2019-02-10 17:36 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-03-13 11:39 - 2019-02-10 17:36 - 000000000 ___RD C:\Users\Mirror\3D Objects
2019-03-13 11:39 - 2019-02-10 17:31 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-03-13 11:39 - 2019-02-10 17:30 - 000441664 _____ C:\Windows\system32\FNTCACHE.DAT
2019-03-13 11:38 - 2018-09-15 00:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-03-13 11:38 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\TextInput
2019-03-13 11:38 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\system32\oobe
2019-03-13 11:38 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\system32\appraiser
2019-03-13 11:38 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\ShellExperiences
2019-03-13 11:38 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\bcastdvr
2019-03-13 11:38 - 2018-09-14 23:09 - 000524288 _____ C:\Windows\system32\config\BBI
2019-03-13 11:24 - 2019-02-10 17:30 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-03-13 09:15 - 2019-02-10 22:21 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\uTorrent
2019-03-13 09:08 - 2019-02-10 17:47 - 000000000 ____D C:\Jts
2019-03-13 00:28 - 2019-02-10 23:44 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\vlc
2019-03-12 23:52 - 2018-04-08 00:29 - 000000000 ____D C:\--- BT
2019-03-12 23:31 - 2018-09-15 00:23 - 000000000 ____D C:\Windows\CbsTemp
2019-03-12 23:29 - 2019-02-10 17:34 - 002865152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2019-03-12 23:27 - 2019-02-10 19:41 - 000000000 ____D C:\Windows\system32\MRT
2019-03-12 23:24 - 2019-02-10 19:40 - 127411920 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-03-12 16:08 - 2018-09-15 00:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-08 20:43 - 2019-02-10 17:40 - 000003380 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1701902139-1240069638-2550680353-1001
2019-03-08 20:43 - 2019-02-10 17:40 - 000000000 ___RD C:\Users\Mirror\OneDrive
2019-03-08 20:43 - 2019-02-10 17:35 - 000002370 _____ C:\Users\Mirror\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-03-08 15:55 - 2019-02-10 20:51 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2019-03-08 15:55 - 2019-02-10 20:51 - 000000000 ____D C:\Users\Mirror\AppData\Local\WhatsApp
2019-03-06 01:05 - 2019-02-10 20:51 - 000000000 ____D C:\Users\Mirror\AppData\Local\SquirrelTemp
2019-03-06 01:02 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\system32\NDF
2019-03-06 00:20 - 2019-02-10 17:42 - 000000000 ____D C:\Windows\pss
2019-03-05 12:50 - 2019-02-10 17:45 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-03-05 10:36 - 2019-02-10 17:47 - 000000000 ____D C:\Users\Mirror\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trader Workstation
2019-03-02 17:45 - 2018-09-15 00:36 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-03-02 17:45 - 2018-09-15 00:36 - 000179608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-03-01 22:48 - 2019-02-10 17:36 - 000000000 ____D C:\Users\Mirror\AppData\Local\Packages
2019-02-25 12:29 - 2019-02-10 17:35 - 000000000 ____D C:\Users\Mirror
2019-02-25 09:19 - 2018-09-15 00:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-02-25 09:09 - 2019-02-10 21:16 - 000000000 ____D C:\ProgramData\Package Cache
2019-02-22 18:42 - 2019-02-10 17:31 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-02-20 20:48 - 2019-02-10 17:30 - 000000000 ____D C:\Windows\ServiceProfiles
2019-02-20 20:31 - 2019-02-10 17:36 - 000000000 ____D C:\Users\Mirror\AppData\Local\ConnectedDevicesPlatform
2019-02-19 11:14 - 2019-02-10 22:32 - 000000000 ____D C:\Users\Mirror\Documents\MS Office 2019 Pro Plus Retail x86 x64  MULTi-22 OCT 2018 {Gen2}
2019-02-19 10:41 - 2019-02-10 17:55 - 000000000 ____D C:\Users\Mirror\AppData\Local\Comms
2019-02-19 10:16 - 2019-02-10 17:45 - 000000000 ____D C:\Users\Mirror\AppData\Local\PlaceholderTileLogoFolder
2019-02-19 09:28 - 2019-02-10 21:23 - 000000300 _____ C:\Users\Mirror\Documents\tradingview.txt
2019-02-18 04:01 - 2019-02-10 17:36 - 000000000 ____D C:\Users\Mirror\AppData\Local\VirtualStore
2019-02-15 23:37 - 2019-02-10 17:29 - 000000000 ____D C:\Windows\Panther
2019-02-14 03:13 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\SysWOW64\oobe
2019-02-14 03:13 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\SysWOW64\Dism
2019-02-14 03:13 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\system32\migwiz
2019-02-14 03:13 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\ShellComponents
2019-02-14 03:13 - 2018-09-14 23:09 - 000000000 ____D C:\Windows\system32\Dism
2019-02-12 17:23 - 2018-09-14 23:09 - 000000000 ____D C:\Windows\servicing
2019-02-11 04:15 - 2018-09-15 00:33 - 000000000 ____D C:\Windows\appcompat

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\dllhost.exe => File is digitally signed
C:\Windows\SysWOW64\dllhost.exe => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================