Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by [removed] (administrator) on DESKTOP-7DUR10C (02-04-2019 17:54:37)
Running from C:\Users\[removed]\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads
[removed]
Platform: Windows 10 Pro Version 1803 17134.648 (X64) Language: English (United States)
Default browser: Opera
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atiesrxx.exe
(Stardock Corporation -> Stardock Corporation) C:\Program Files (x86)\Stardock\WindowBlinds\WBSrv.exe
(SurfRight B.V. -> SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(RemoteMyApp sp. z o.o. -> RemoteMyApp sp. z o.o.) C:\Program Files (x86)\Remotr\RemotrService.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\avp.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atieclxx.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedlauncher.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\avpui.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe
(Firebit OU -> Rainmeter) C:\Program Files\Rainmeter\Rainmeter.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Skillbrains) [File not signed] C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.35\Lightshot.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19011.19410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginThinSetupInternal.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(Piriform Ltd -> Piriform Ltd) C:\Users\Dean Miles\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\spsetup132 (1)\Speccy64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11231.20192.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11231.20192.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [Fences] => C:\Program Files (x86)\Stardock\Fences\Fences.exe [3934168 2016-09-16] (Stardock Corporation -> Stardock Corporation) [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601928 2018-12-15] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] (OOO Lightshot -> )
HKU\S-1-5-21-3843450261-267223717-1376901193-1001\...\Run: [Fences] => C:\program files (x86)\stardock\fences\Fences.exe [3934168 2016-09-16] (Stardock Corporation -> Stardock Corporation) [File not signed]
HKU\S-1-5-21-3843450261-267223717-1376901193-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22488952 2019-03-11] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3843450261-267223717-1376901193-1001\...\Run: [DownloadAccelerator] => C:\Program Files (x86)\DAP\DAP.EXE [1747968 2016-05-10] (Speedbit Ltd.) [File not signed]
HKU\S-1-5-21-3843450261-267223717-1376901193-1001\...\Run: [Avira Phantom VPN] => C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe [840328 2019-03-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2011-02-18] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2011-02-18] (Electronic Arts -> On2.com)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.86\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
Startup: C:\Users\Dean Miles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2019-03-19]
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe (Firebit OU -> Rainmeter)
BootExecute: autocheck autochk * bootdelete

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{8da5c5ce-7bd9-4d15-a8f0-42701a28a433}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{8da5c5ce-7bd9-4d15-a8f0-42701a28a433}: [DhcpNameServer] 1.1.1.1 1.0.0.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2018-07-19] (IObit Information Technology -> IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-02-21] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-02-21] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: SpeedBit Link Verification Helper -> {D5974A72-C81C-4DC3-BE77-A8A7BBC8864E} -> C:\Program Files (x86)\DAP\LinkVerifier.dll [2019-03-31] (Speed-Bit LTD -> Speedbit Ltd.)

FireFox:
========
FF DefaultProfile: vy2x3jqu.default
FF ProfilePath: C:\Users\Dean Miles\AppData\Roaming\Mozilla\Firefox\Profiles\vy2x3jqu.default [2019-04-02]
FF Extension: (Google Translator for Firefox) - C:\Users\Dean Miles\AppData\Roaming\Mozilla\Firefox\Profiles\vy2x3jqu.default\Extensions\[removed] [2019-03-24]
FF Extension: (Dissenter Extension) - C:\Users\Dean Miles\AppData\Roaming\Mozilla\Firefox\Profiles\vy2x3jqu.default\Extensions\{20dd52e5-90c0-4a51-8b31-e70419c5b126}.xpi [2019-03-27]
FF Extension: (Adblock Plus - free ad blocker) - C:\Users\Dean Miles\AppData\Roaming\Mozilla\Firefox\Profiles\vy2x3jqu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-03-13]
FF HKLM\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\FFExt\light_plugin_firefox\addon.xpi [2019-03-31]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Users\Dean Miles\AppData\Roaming\Mozilla\Firefox\Profiles\vy2x3jqu.default\extensions\staged\[removed]
FF Extension: (SaveFrom.net helper) - C:\Users\Dean Miles\AppData\Roaming\Mozilla\Firefox\Profiles\vy2x3jqu.default\extensions\staged\[removed] [2019-01-09] [UpdateUrl:hxxps://download.sf-helper.com/mozilla/updates.json]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\DAP\daplinkchecker
FF Extension: (DAP Link Checker) - C:\Program Files (x86)\DAP\daplinkchecker [2019-03-31] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\FFExt\light_plugin_firefox\addon.xpi
FF HKU\S-1-5-21-3843450261-267223717-1376901193-1001\...\Firefox\Extensions: [[removed]] - C:\Users\Dean Miles\AppData\Roaming\Mozilla\Firefox\Profiles\vy2x3jqu.default\extensions\staged\[removed]
FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-02-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-02-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-03-31] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-03-31] <==== ATTENTION

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [560544 2019-02-24] (Advanced Micro Devices, Inc. -> AMD)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [362552 2019-03-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AVP19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\avp.exe [619640 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [139504 2019-04-01] (SurfRight B.V. -> SurfRight B.V.)
S2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [153360 2018-09-25] (IObit Information Technology -> IObit)
S3 klvssbridge64_19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\vssbridge64.exe [414352 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2298688 2019-03-05] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3171144 2019-03-05] (Electronic Arts, Inc. -> Electronic Arts)
R2 Remotr Service; C:\Program Files (x86)\Remotr\RemotrService.exe [207480 2017-02-27] (RemoteMyApp sp. z o.o. -> RemoteMyApp sp. z o.o.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737560 2019-02-24] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-03-31] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-03-31] (Microsoft Corporation -> Microsoft Corporation)
R2 WindowBlinds; C:\Program Files (x86)\Stardock\WindowBlinds\wbsrv.exe [86528 2017-03-22] (Stardock Corporation -> Stardock Corporation)
S3 GoogleChromeElevationService; "C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.86\elevation_service.exe" [X]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 LMIRescue_c9611d5e-6bc3-1822-acbb-0c07fbfd21b0; "C:\Program Files (x86)\LogMeIn Rescue Applet\LMIR0D032001.tmp\LMI_Rescue_srv.exe" -service -sid c9611d5e-6bc3-1822-acbb-0c07fbfd21b0 -wd "C:\Users\Dean Miles\AppData\Local\LogMeIn Rescue Applet\LMIR0CFE4001.tmp\\"

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0318486.inf_amd64_11ba0b4b7cc81d52\atikmdag.sys [38774688 2019-02-24] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0318486.inf_amd64_11ba0b4b7cc81d52\atikmpag.sys [549792 2019-02-24] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110104 2019-02-19] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
S3 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv.sys [303712 2019-02-04] (Bluestack Systems, Inc. -> Bluestack System Inc. )
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [243400 2018-01-27] (Kaspersky Lab -> AO Kaspersky Lab)
R4 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [55232 2019-04-02] (SurfRight B.V. -> )
R3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37184 2018-10-16] (IObit Information Technology -> IObit)
R3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [43392 2018-10-16] (IObit Information Technology -> IObit)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [73416 2019-02-18] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [123152 2019-02-18] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [89168 2019-02-18] (Kaspersky Lab -> AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [29208 2017-03-30] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [219744 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
R1 KLHK; C:\WINDOWS\System32\drivers\klhk.sys [1214752 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP19.0.0\Bases\klids.sys [190800 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1113696 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57032 2018-02-12] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [58048 2018-01-15] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [83496 2017-12-11] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [50648 2017-05-30] (Kaspersky Lab -> AO Kaspersky Lab)
S3 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [45768 2019-02-18] (Kaspersky Lab -> AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [48080 2018-02-12] (AnchorFree Inc -> The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [244544 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [99152 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [301336 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [116096 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [198464 2019-03-31] (Kaspersky Lab -> AO Kaspersky Lab)
S4 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [100552 2018-02-17] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [176976 2019-02-18] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [203968 2018-02-24] (Kaspersky Lab -> AO Kaspersky Lab)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [274416 2019-04-01] (Malwarebytes Corporation -> Malwarebytes)
R3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [45056 2019-03-11] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-12] (Microsoft Windows -> Realtek )
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46472 2019-03-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [333792 2019-03-31] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [62432 2019-03-31] (Microsoft Windows -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2019-02-24] (Intel(R) Software -> Intel Corporation)
S1 YzBiOTA3ZWUyOTdhM; \??\C:\WINDOWS\system32\drivers\YzBiOTA3ZWUyOTdhM [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-02 17:54 - 2019-04-02 17:54 - 000000000 ____D C:\FRST
2019-04-02 17:02 - 2019-04-02 17:02 - 000012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2019-04-02 17:02 - 2019-04-02 17:02 - 000000174 _____ C:\WINDOWS\system32\bootdelete.lst
2019-04-02 16:57 - 2019-04-02 16:57 - 000055232 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
2019-04-01 22:05 - 2019-04-01 22:05 - 000274416 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2019-04-01 22:03 - 2019-04-01 22:03 - 000001464 _____ C:\WINDOWS\system32\.crusader
2019-04-01 21:57 - 2019-04-01 21:57 - 000001969 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2019-04-01 21:57 - 2019-04-01 21:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2019-04-01 21:57 - 2019-04-01 21:57 - 000000000 ____D C:\Program Files\HitmanPro
2019-04-01 21:56 - 2019-04-01 22:04 - 000000000 ____D C:\ProgramData\HitmanPro
2019-04-01 21:20 - 2019-04-02 16:57 - 000000000 ____D C:\Users\Dean Miles\opera autoupdate
2019-04-01 21:20 - 2019-04-02 16:57 - 000000000 ____D C:\Users\Dean Miles\Downloads\opera autoupdate
2019-04-01 20:51 - 2019-04-01 20:51 - 000004246 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1554148284
2019-04-01 20:51 - 2019-04-01 20:51 - 000001483 _____ C:\Users\Dean Miles\Desktop\Opera Browser.lnk
2019-04-01 20:51 - 2019-04-01 20:51 - 000001483 _____ C:\Users\Dean Miles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2019-04-01 20:02 - 2019-04-01 20:02 - 000000000 ____D C:\Users\Dean Miles\Downloads\codex-the.walking.dead.the.final.season.episode.2
2019-03-31 19:49 - 2019-03-31 19:49 - 000301336 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
2019-03-31 19:48 - 2019-03-31 19:48 - 000003392 _____ C:\WINDOWS\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2019-03-31 19:48 - 2019-03-31 19:48 - 000000000 ____D C:\Program Files\Common Files\AV
2019-03-31 19:47 - 2019-03-31 19:47 - 000244544 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
2019-03-31 19:47 - 2019-03-31 19:47 - 000198464 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
2019-03-31 19:47 - 2019-03-31 19:47 - 000116096 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
2019-03-31 19:47 - 2019-03-31 19:47 - 000099152 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2019-03-31 19:47 - 2019-03-31 19:47 - 000002115 _____ C:\Users\Public\Desktop\Kaspersky Free.lnk
2019-03-31 19:47 - 2019-03-31 19:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2019-03-31 19:47 - 2019-03-31 19:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Free
2019-03-31 19:47 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2019-03-31 19:46 - 2019-04-02 17:11 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2019-03-31 19:46 - 2019-03-31 19:47 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2019-03-31 19:46 - 2019-03-31 19:46 - 001214752 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2019-03-31 19:46 - 2019-03-31 19:46 - 001113696 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2019-03-31 19:46 - 2019-03-31 19:46 - 000219744 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2019-03-31 19:46 - 2019-03-31 19:46 - 000152960 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\klhkum.dll
2019-03-31 19:29 - 2019-03-31 19:30 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2019-03-31 13:17 - 2018-03-22 17:23 - 000000836 _____ C:\Users\Dean Miles\Documents\Readme.txt
2019-03-31 13:15 - 2019-03-31 13:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-03-31 13:15 - 2019-03-31 13:15 - 000000000 ____D C:\ProgramData\Avira
2019-03-31 13:15 - 2019-03-31 13:15 - 000000000 ____D C:\Program Files (x86)\Avira
2019-03-31 13:06 - 2019-03-31 17:08 - 2902419390 _____ C:\Users\Dean Miles\Downloads\The.Favourite.2018.1080p.BluRay.10bit.HEVC.6CH.MkvCage.ws.mkv
2019-03-31 12:32 - 2019-03-31 12:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2019-03-31 12:32 - 2019-03-31 12:32 - 000000000 ____D C:\Program Files\7-Zip
2019-03-31 11:02 - 2019-03-31 18:46 - 000000000 ____D C:\Users\Dean Miles\Desktop\OpenHardwareMonitor
2019-03-31 10:39 - 2019-03-31 10:39 - 000001348 _____ C:\Users\Dean Miles\Desktop\The Walking Dead The Final Season Episode 1.lnk
2019-03-31 10:39 - 2019-03-31 10:39 - 000000000 ____D C:\Users\Public\Documents\Steam
2019-03-31 10:39 - 2019-03-31 10:39 - 000000000 ____D C:\Users\Dean Miles\Documents\Telltale Games
2019-03-31 10:39 - 2019-03-31 10:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Walking Dead The Final Season Episode 1
2019-03-31 10:36 - 2019-03-31 10:39 - 000000000 ____D C:\Program Files (x86)\The Walking Dead The Final Season Episode 1
2019-03-31 10:23 - 2019-03-31 10:23 - 000001011 _____ C:\Users\Dean Miles\Desktop\Download Accelerator Plus (DAP).lnk
2019-03-31 10:22 - 2019-03-31 12:34 - 000000000 ____D C:\Users\Dean Miles\Documents\My DAP Downloads
2019-03-31 10:22 - 2019-03-31 10:30 - 000000000 ____D C:\Program Files (x86)\DAP
2019-03-31 10:22 - 2019-03-31 10:22 - 000001127 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Download Accelerator Plus (DAP).lnk
2019-03-31 10:22 - 2019-03-31 10:22 - 000000000 ____D C:\Users\Dean Miles\AppData\LocalLow\SpeedBIT
2019-03-31 10:22 - 2019-03-31 10:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Download Accelerator Plus (DAP)
2019-03-31 10:21 - 2019-03-31 10:21 - 000172032 _____ (Jin Hui E-mail: [removed] Web: hxxp://www.jcomsoft.com) C:\WINDOWS\SysWOW64\AniGIF.ocx
2019-03-30 21:03 - 2019-03-30 21:03 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\AdvinstAnalytics
2019-03-30 17:38 - 2019-03-30 17:38 - 000000000 ____D C:\Users\Dean Miles\AppData\LocalLow\Drunken Apes
2019-03-30 16:51 - 2019-03-30 16:51 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\IdleMaster
2019-03-30 16:50 - 2019-03-30 16:50 - 000000000 ____D C:\Users\Dean Miles\Documents\idle_master_extended_v1.3
2019-03-30 16:03 - 2019-03-30 16:03 - 000000000 ____D C:\Users\Dean Miles\Documents\My Games
2019-03-30 15:43 - 2019-03-30 15:43 - 000000000 ____D C:\Users\Dean Miles\Documents\SteamAchievementManager-master
2019-03-30 15:21 - 2019-03-30 15:21 - 000000222 _____ C:\Users\Dean Miles\Desktop\LOOT BOX ACHIEVEMENT SIMULATOR.url
2019-03-30 15:11 - 2019-03-30 15:11 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\GameAnalytics
2019-03-30 15:10 - 2019-03-30 15:10 - 000000000 ____D C:\Users\Dean Miles\AppData\LocalLow\Struckd AG
2019-03-30 15:02 - 2019-03-30 15:02 - 000000000 ____D C:\Users\Dean Miles\AppData\LocalLow\Congo Jungle Games
2019-03-30 12:20 - 2019-03-30 12:20 - 000000223 _____ C:\Users\Dean Miles\Desktop\The Floor Is Really Cheap Lava.url
2019-03-30 12:19 - 2019-03-30 12:19 - 000000222 _____ C:\Users\Dean Miles\Desktop\Struckd - 3D Game Creator.url
2019-03-29 22:49 - 2019-03-29 22:49 - 000108471 _____ C:\WINDOWS\uninstaller.dat
2019-03-28 21:31 - 2019-03-28 21:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Plugins
2019-03-28 21:29 - 2019-03-31 10:23 - 000000000 ____D C:\ProgramData\TEMP
2019-03-28 21:29 - 2019-03-31 10:22 - 000000000 ____D C:\ProgramData\SpeedBit
2019-03-28 21:29 - 2019-03-28 21:29 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\SpeedBit
2019-03-28 21:23 - 2019-03-28 21:23 - 000000000 ____D C:\Users\Dean Miles\Documents\PCSX2
2019-03-28 21:21 - 2019-03-28 21:22 - 000000000 ____D C:\WINDOWS\SysWOW64\directx
2019-03-28 21:21 - 2019-03-28 21:22 - 000000000 ____D C:\Program Files (x86)\PCSX2 1.4.0
2019-03-28 21:21 - 2019-03-28 21:21 - 000002015 _____ C:\Users\Public\Desktop\PCSX2 1.4.0.lnk
2019-03-28 21:21 - 2019-03-28 21:21 - 000000000 ___HD C:\WINDOWS\msdownld.tmp
2019-03-28 21:21 - 2019-03-28 21:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCSX2
2019-03-27 21:35 - 2019-03-27 21:35 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\{0F376500-DFBE-47DE-A1F0-B86761A82BF2}
2019-03-27 18:52 - 2019-04-01 21:15 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-03-25 22:14 - 2019-03-25 22:14 - 000000951 _____ C:\Users\Dean Miles\Desktop\GIMP 2.10.8.lnk
2019-03-24 16:58 - 2018-09-20 05:12 - 001483576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2019-03-24 16:14 - 2019-03-24 16:14 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2019-03-24 16:06 - 2019-03-24 16:06 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\GIMP
2019-03-24 16:06 - 2019-03-24 16:06 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\GIMP
2019-03-24 16:06 - 2019-03-24 16:06 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\gegl-0.4
2019-03-24 16:06 - 2019-03-24 16:06 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\babl-0.1
2019-03-24 16:06 - 2019-03-24 16:06 - 000000000 ____D C:\Users\Dean Miles\.cache
2019-03-24 15:32 - 2019-03-24 15:32 - 000000951 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.10.8.lnk
2019-03-24 15:31 - 2019-03-24 15:31 - 000000000 ____D C:\Program Files\GIMP 2
2019-03-24 15:24 - 2019-03-24 15:31 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\Thunderbird
2019-03-24 15:24 - 2019-03-24 15:24 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Thunderbird
2019-03-24 15:21 - 2019-03-24 15:24 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Winamp
2019-03-24 15:21 - 2019-03-24 15:21 - 000001285 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2019-03-24 15:21 - 2019-03-24 15:21 - 000001273 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2019-03-24 15:21 - 2019-03-24 15:21 - 000001055 _____ C:\Users\Public\Desktop\Winamp.lnk
2019-03-24 15:21 - 2019-03-24 15:21 - 000000000 ____D C:\Program Files (x86)\Winamp
2019-03-24 15:21 - 2019-03-24 15:21 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2019-03-24 13:34 - 2019-03-24 13:34 - 000004096 _____ C:\WINDOWS\d3dx.dat
2019-03-24 11:25 - 2019-03-24 11:26 - 000000000 ____D C:\Users\Dean Miles\Desktop\HOD3
2019-03-24 11:10 - 2019-03-24 11:11 - 000000000 ____D C:\Users\Dean Miles\Desktop\The House of the Dead 2
2019-03-24 11:10 - 2019-03-24 11:11 - 000000000 ____D C:\Users\Dean Miles\Desktop\The House of the Dead
2019-03-23 15:55 - 2019-04-02 16:56 - 000004176 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A8E689DA-53DA-4B36-95EF-ED06519B40ED}
2019-03-23 15:47 - 2019-03-23 15:47 - 000002340 _____ C:\Users\Dean Miles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Support.lnk
2019-03-23 15:44 - 2019-03-23 15:44 - 000000000 ____H C:\Users\Dean Miles\Documents\Default.rdp
2019-03-23 15:21 - 2019-03-23 15:21 - 000000000 ____D C:\Users\Dean Miles\Documents\Lightshot
2019-03-23 15:20 - 2019-03-23 16:01 - 000000430 _____ C:\WINDOWS\Tasks\update-sys.job
2019-03-23 15:20 - 2019-03-23 16:01 - 000000430 _____ C:\WINDOWS\Tasks\update-S-1-5-21-3843450261-267223717-1376901193-1001.job
2019-03-23 15:20 - 2019-03-23 15:20 - 000003428 _____ C:\WINDOWS\System32\Tasks\update-S-1-5-21-3843450261-267223717-1376901193-1001
2019-03-23 15:20 - 2019-03-23 15:20 - 000003356 _____ C:\WINDOWS\System32\Tasks\update-sys
2019-03-23 15:20 - 2019-03-23 15:20 - 000000425 _____ C:\Users\Dean Miles\AppData\Local\UserProducts.xml
2019-03-23 15:20 - 2019-03-23 15:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
2019-03-23 15:20 - 2019-03-23 15:20 - 000000000 ____D C:\Program Files (x86)\Skillbrains
2019-03-21 14:54 - 2019-04-02 16:54 - 000000000 ____D C:\ProgramData\Remotr
2019-03-21 14:54 - 2019-03-21 14:54 - 000001221 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remotr Streamer.lnk
2019-03-21 14:54 - 2019-03-21 14:54 - 000000000 ____D C:\Program Files (x86)\Remotr
2019-03-20 21:05 - 2019-03-20 21:05 - 000000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-3843450261-267223717-1376901193-1001
2019-03-20 20:36 - 2019-03-20 20:36 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\SliderDock
2019-03-20 20:35 - 2019-03-20 20:35 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-03-20 20:35 - 2019-03-20 20:35 - 000000000 ____D C:\Program Files\MSBuild
2019-03-20 20:35 - 2019-03-20 20:35 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-03-20 20:35 - 2019-03-20 20:35 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-03-20 20:34 - 2018-03-05 17:07 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2019-03-20 20:34 - 2018-03-05 17:07 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-03-20 20:34 - 2018-03-05 17:07 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2019-03-20 20:34 - 2018-02-14 17:21 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-03-20 20:34 - 2018-02-14 17:21 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-03-20 20:34 - 2018-02-14 17:21 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2019-03-20 20:25 - 2019-03-21 11:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock
2019-03-20 20:24 - 2019-03-20 20:25 - 000000000 ____D C:\Program Files (x86)\dotnet
2019-03-20 20:24 - 2019-03-20 20:24 - 000000000 ____D C:\Program Files\dotnet
2019-03-19 22:31 - 2019-03-28 17:36 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Rainmeter
2019-03-19 22:31 - 2019-03-19 22:31 - 000001754 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter.lnk
2019-03-19 22:31 - 2019-03-19 22:31 - 000000000 ____D C:\Users\Dean Miles\Documents\Rainmeter
2019-03-19 22:31 - 2019-03-19 22:31 - 000000000 ____D C:\Program Files\Rainmeter
2019-03-17 15:01 - 2019-03-31 18:52 - 000000000 ____D C:\ProgramData\ProductData
2019-03-17 15:01 - 2019-03-17 15:04 - 000000000 ____D C:\Program Files\Defraggler
2019-03-17 15:01 - 2019-03-17 15:01 - 000002986 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Dean_Miles
2019-03-17 15:01 - 2019-03-17 15:01 - 000001772 _____ C:\Users\Public\Desktop\Defraggler.lnk
2019-03-17 15:01 - 2019-03-17 15:01 - 000001431 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2019-03-17 15:01 - 2019-03-17 15:01 - 000001419 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2019-03-17 15:01 - 2019-03-17 15:01 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2019-03-17 15:01 - 2019-03-17 15:01 - 000000000 ____D C:\Users\Dean Miles\AppData\LocalLow\IObit
2019-03-17 15:01 - 2019-03-17 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2019-03-17 15:01 - 2019-03-17 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2019-03-17 15:00 - 2019-03-17 15:05 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\IObit
2019-03-17 15:00 - 2019-03-17 15:04 - 000000000 ____D C:\ProgramData\IObit
2019-03-17 15:00 - 2019-03-17 15:00 - 000000000 ____D C:\Program Files (x86)\IObit
2019-03-17 14:59 - 2019-03-18 17:02 - 000004210 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2019-03-17 14:59 - 2019-03-17 14:59 - 000002898 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2019-03-17 14:59 - 2019-03-17 14:59 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-03-17 14:59 - 2019-03-17 14:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-03-17 14:59 - 2019-03-17 14:59 - 000000000 ____D C:\Program Files\CCleaner
2019-03-17 14:56 - 2019-03-28 17:38 - 000003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-03-17 14:56 - 2019-03-28 17:38 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-03-17 14:55 - 2019-04-02 17:47 - 000000000 ____D C:\Program Files (x86)\Google
2019-03-17 11:07 - 2019-03-17 11:01 - 000001304 _____ C:\Users\Dean Miles\Desktop\CursorFX.lnk
2019-03-17 11:01 - 2019-03-17 11:01 - 000000000 __HDC C:\ProgramData\{86309521-B982-4930-BEE5-E248EAAA84A7}
2019-03-17 00:15 - 2019-03-17 00:15 - 000003666 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2019-03-17 00:11 - 2019-03-17 00:11 - 000002106 _____ C:\Users\Dean Miles\Desktop\Customize Fences.lnk
2019-03-17 00:11 - 2019-03-17 00:11 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Stardock
2019-03-17 00:00 - 2019-03-24 16:14 - 000000000 ____D C:\Program Files\GetGo Software
2019-03-17 00:00 - 2019-03-17 00:00 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\GetGo Software
2019-03-16 23:34 - 2019-03-16 23:16 - 000002182 _____ C:\Users\Dean Miles\Desktop\WindowBlinds 10.lnk
2019-03-16 23:18 - 2019-03-17 00:15 - 000081408 _____ C:\WINDOWS\wontrust.dll
2019-03-16 23:18 - 2019-03-16 23:31 - 000095744 ____N C:\WINDOWS\womtrust.dll
2019-03-16 23:16 - 2019-03-17 11:07 - 000000000 ____D C:\ProgramData\Stardock
2019-03-16 23:16 - 2019-03-17 11:01 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\Stardock
2019-03-16 23:16 - 2019-03-17 11:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
2019-03-16 23:14 - 2019-03-17 11:01 - 000000000 ____D C:\Users\Public\Documents\Stardock
2019-03-16 23:14 - 2019-03-17 11:01 - 000000000 ____D C:\Program Files (x86)\Stardock
2019-03-16 23:12 - 2019-03-16 23:12 - 000001505 _____ C:\Users\Dean Miles\Desktop\Rar Zip 7zip Extractor.lnk
2019-03-16 22:46 - 2019-03-16 22:46 - 000000000 ____D C:\Users\Dean Miles\Desktop\GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}
2019-03-16 21:35 - 2019-03-16 23:21 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\NetSpeedMonitor
2019-03-16 15:40 - 2019-03-16 15:40 - 000000000 ____D C:\Users\Dean Miles\AppData\LocalLow\DefaultCompany
2019-03-15 20:50 - 2019-03-15 20:50 - 000000000 ____D C:\Users\Dean Miles\.android
2019-03-15 20:46 - 2019-03-24 16:14 - 000000000 ____D C:\Program Files (x86)\Kingo ROOT
2019-03-15 19:23 - 2019-03-15 19:23 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2019-03-14 20:35 - 2019-03-14 20:35 - 000000221 _____ C:\Users\Dean Miles\Desktop\GRID 2.url
2019-03-13 18:56 - 2019-03-13 18:56 - 000002332 _____ C:\Users\Dean Miles\Desktop\Summoners War.lnk
2019-03-13 18:31 - 2019-03-13 18:31 - 000003956 _____ C:\WINDOWS\System32\Tasks\BlueStacksHelper
2019-03-13 18:27 - 2019-03-13 18:27 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks Multi-Instance Manager.lnk
2019-03-13 18:27 - 2019-03-13 18:27 - 000001789 _____ C:\Users\Public\Desktop\BlueStacks.lnk
2019-03-13 18:27 - 2019-03-13 18:27 - 000001771 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks.lnk
2019-03-13 18:26 - 2019-03-13 18:27 - 000000000 ____D C:\ProgramData\BlueStacks
2019-03-13 18:26 - 2019-03-13 18:26 - 000000000 ____D C:\Program Files\BlueStacks
2019-03-13 18:25 - 2019-03-13 18:25 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\Bluestacks
2019-03-12 20:25 - 2019-03-06 16:39 - 000720536 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-03-12 20:25 - 2019-03-06 16:37 - 001616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-03-12 20:25 - 2019-03-06 16:36 - 001047352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-03-12 20:25 - 2019-03-06 16:20 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2019-03-12 20:25 - 2019-03-06 16:19 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-03-12 20:25 - 2019-03-06 16:17 - 012730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-03-12 20:25 - 2019-03-06 16:17 - 000810496 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2019-03-12 20:25 - 2019-03-06 16:17 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2019-03-12 20:25 - 2019-03-06 16:14 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-03-12 20:25 - 2019-03-06 16:14 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-03-12 20:25 - 2019-03-06 16:14 - 000488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-03-12 20:25 - 2019-03-06 16:13 - 004053504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-03-12 20:25 - 2019-03-06 16:13 - 001856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-03-12 20:25 - 2019-03-06 16:13 - 001662976 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-03-12 20:25 - 2019-03-06 16:13 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-03-12 20:25 - 2019-03-06 16:12 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2019-03-12 20:25 - 2019-03-06 13:18 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2019-03-12 20:25 - 2019-03-06 13:18 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-03-12 20:25 - 2019-03-06 13:10 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-03-12 20:25 - 2019-03-06 13:09 - 011919360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-03-12 20:25 - 2019-03-06 13:06 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-03-12 20:25 - 2019-03-06 13:05 - 004054016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-03-12 20:25 - 2019-03-06 13:05 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-03-12 20:25 - 2019-03-06 13:04 - 001471488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-03-12 20:25 - 2019-03-06 13:04 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-03-12 20:25 - 2019-03-06 12:59 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-03-12 20:25 - 2019-03-06 10:29 - 001035040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-03-12 20:25 - 2019-03-06 10:16 - 002822456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-03-12 20:25 - 2019-03-06 10:16 - 001457032 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-03-12 20:25 - 2019-03-06 10:16 - 001188000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2019-03-12 20:25 - 2019-03-06 10:16 - 000776792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-03-12 20:25 - 2019-03-06 10:16 - 000722744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-03-12 20:25 - 2019-03-06 10:16 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-03-12 20:25 - 2019-03-06 10:16 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-03-12 20:25 - 2019-03-06 10:11 - 000493880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-03-12 20:25 - 2019-03-06 10:10 - 000248880 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2019-03-12 20:25 - 2019-03-06 10:07 - 001219896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-03-12 20:25 - 2019-03-06 10:07 - 001023800 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-03-12 20:25 - 2019-03-06 10:07 - 000376120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-03-12 20:25 - 2019-03-06 10:06 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-03-12 20:25 - 2019-03-06 10:06 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-03-12 20:25 - 2019-03-06 10:06 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2019-03-12 20:25 - 2019-03-06 10:05 - 000439224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-03-12 20:25 - 2019-03-06 10:05 - 000436240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-03-12 20:25 - 2019-03-06 10:05 - 000159864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2019-03-12 20:25 - 2019-03-06 10:04 - 002765856 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-03-12 20:25 - 2019-03-06 10:04 - 000945464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-03-12 20:25 - 2019-03-06 10:04 - 000628024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpx.dll
2019-03-12 20:25 - 2019-03-06 10:03 - 007519896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-03-12 20:25 - 2019-03-06 10:03 - 002719544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-03-12 20:25 - 2019-03-06 10:03 - 002465784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-03-12 20:25 - 2019-03-06 10:03 - 001921848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-03-12 20:25 - 2019-03-06 10:03 - 000793400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-03-12 20:25 - 2019-03-06 10:03 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-03-12 20:25 - 2019-03-06 10:03 - 000375608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2019-03-12 20:25 - 2019-03-06 10:02 - 002421048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-03-12 20:25 - 2019-03-06 10:02 - 001257672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-03-12 20:25 - 2019-03-06 10:02 - 001140480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-03-12 20:25 - 2019-03-06 10:02 - 000982912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-03-12 20:25 - 2019-03-06 10:02 - 000626488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2019-03-12 20:25 - 2019-03-06 09:44 - 025856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-03-12 20:25 - 2019-03-06 09:36 - 022716928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-03-12 20:25 - 2019-03-06 09:36 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-03-12 20:25 - 2019-03-06 09:34 - 004866048 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-03-12 20:25 - 2019-03-06 09:33 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-03-12 20:25 - 2019-03-06 09:32 - 003399168 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-03-12 20:25 - 2019-03-06 09:32 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-03-12 20:25 - 2019-03-06 09:32 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2019-03-12 20:25 - 2019-03-06 09:32 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2019-03-12 20:25 - 2019-03-06 09:31 - 007598592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-03-12 20:25 - 2019-03-06 09:31 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-03-12 20:25 - 2019-03-06 09:31 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-03-12 20:25 - 2019-03-06 09:31 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-03-12 20:25 - 2019-03-06 09:31 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-03-12 20:25 - 2019-03-06 09:31 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-03-12 20:25 - 2019-03-06 09:31 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2019-03-12 20:25 - 2019-03-06 09:31 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-03-12 20:25 - 2019-03-06 09:31 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-03-12 20:25 - 2019-03-06 09:31 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-03-12 20:25 - 2019-03-06 09:31 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-03-12 20:25 - 2019-03-06 09:31 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-03-12 20:25 - 2019-03-06 09:29 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2019-03-12 20:25 - 2019-03-06 09:29 - 002174976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-03-12 20:25 - 2019-03-06 09:29 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-03-12 20:25 - 2019-03-06 09:29 - 000736256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-03-12 20:25 - 2019-03-06 09:28 - 004937728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-03-12 20:25 - 2019-03-06 09:28 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-03-12 20:25 - 2019-03-06 09:27 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-03-12 20:25 - 2019-03-06 09:27 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-03-12 20:25 - 2019-03-06 09:27 - 000542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-03-12 20:25 - 2019-03-06 09:27 - 000507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-03-12 20:25 - 2019-03-06 09:26 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-03-12 20:25 - 2019-03-06 09:26 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2019-03-12 20:25 - 2019-03-06 09:26 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2019-03-12 20:25 - 2019-03-06 09:25 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-03-12 20:25 - 2019-03-06 08:08 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2019-03-12 20:25 - 2019-03-06 07:17 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-03-12 20:25 - 2019-03-06 07:17 - 000146712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2019-03-12 20:25 - 2019-03-06 07:15 - 002253488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-03-12 20:25 - 2019-03-06 07:15 - 000434488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-03-12 20:25 - 2019-03-06 07:14 - 006568528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-03-12 20:25 - 2019-03-06 07:14 - 000785568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2019-03-12 20:25 - 2019-03-06 07:14 - 000665224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-03-12 20:25 - 2019-03-06 07:14 - 000450872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpx.dll
2019-03-12 20:25 - 2019-03-06 07:14 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-03-12 20:25 - 2019-03-06 07:13 - 000607248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2019-03-12 20:25 - 2019-03-06 07:05 - 022018048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-03-12 20:25 - 2019-03-06 06:56 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-03-12 20:25 - 2019-03-06 06:53 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2019-03-12 20:25 - 2019-03-06 06:53 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-03-12 20:25 - 2019-03-06 06:52 - 005790720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-03-12 20:25 - 2019-03-06 06:52 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-03-12 20:25 - 2019-03-06 06:52 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-03-12 20:25 - 2019-03-06 06:51 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2019-03-12 20:25 - 2019-03-06 06:51 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-03-12 20:25 - 2019-03-06 06:51 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2019-03-12 20:25 - 2019-03-06 06:50 - 001628160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-03-12 20:25 - 2019-03-06 06:50 - 001347584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2019-03-12 20:25 - 2019-03-06 06:50 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-03-12 20:25 - 2019-03-06 06:49 - 004516352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-03-12 20:25 - 2019-03-06 06:49 - 000318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-03-12 20:25 - 2019-03-06 06:49 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2019-03-12 20:25 - 2019-03-06 06:48 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-03-12 20:25 - 2019-03-06 06:48 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-03-12 20:25 - 2019-02-21 04:26 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2019-03-11 17:46 - 2019-03-11 17:46 - 000001644 _____ C:\Users\Dean Miles\Desktop\Minecraft 10.lnk
2019-03-11 16:53 - 2019-03-11 16:53 - 000045056 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\phantomtap.sys
2019-03-10 21:27 - 2019-03-10 21:27 - 000001572 _____ C:\Users\Dean Miles\Desktop\Roblox 10.lnk
2019-03-08 21:56 - 2019-03-08 21:56 - 000000000 _____ C:\Users\Dean Miles\Desktop\qh$GaITIPH.txt
2019-03-05 18:40 - 2019-03-05 18:40 - 000000720 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brackets.lnk
2019-03-05 18:40 - 2019-03-05 18:40 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Brackets
2019-03-05 18:38 - 2019-03-05 18:40 - 000000000 ____D C:\Program Files (x86)\Brackets
2019-03-03 11:39 - 2019-03-03 11:39 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\java
2019-03-03 11:38 - 2019-03-03 11:38 - 000280212 _____ C:\Users\Dean Miles\Desktop\Minecraft.jar

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-02 17:54 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-04-02 17:30 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2019-04-01 22:10 - 2019-01-13 00:59 - 000838560 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-04-01 22:05 - 2019-02-24 18:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-04-01 22:04 - 2019-02-19 16:07 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2019-04-01 22:04 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-04-01 21:51 - 2019-02-24 18:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-04-01 21:20 - 2019-02-24 18:38 - 000000000 ____D C:\Users\Dean Miles
2019-04-01 21:15 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-04-01 20:51 - 2018-04-11 22:04 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2019-04-01 20:47 - 2019-02-20 12:56 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Opera Software
2019-04-01 20:46 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-04-01 20:39 - 2019-02-19 13:23 - 000000000 ____D C:\Users\Dean Miles\AppData\LocalLow\Mozilla
2019-04-01 20:03 - 2019-02-24 18:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-03-31 21:14 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Windows Defender
2019-03-31 20:50 - 2019-02-19 13:34 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Discord
2019-03-31 19:46 - 2018-04-12 00:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-03-31 18:47 - 2019-02-19 13:23 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-03-31 18:46 - 2019-02-19 15:18 - 000000000 ____D C:\Program Files (x86)\Steam
2019-03-31 12:31 - 2019-02-24 19:13 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\PlaceholderTileLogoFolder
2019-03-31 12:31 - 2019-01-13 01:00 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\Packages
2019-03-30 21:30 - 2019-02-24 18:45 - 000003388 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3843450261-267223717-1376901193-1001
2019-03-30 21:30 - 2019-02-24 18:38 - 000002385 _____ C:\Users\Dean Miles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-03-30 21:30 - 2019-01-13 01:02 - 000000000 ___RD C:\Users\Dean Miles\OneDrive
2019-03-30 15:48 - 2018-05-27 06:10 - 000049152 _____ (Gibbed) C:\Users\Dean Miles\Documents\SAM.Picker.exe
2019-03-30 15:48 - 2018-05-27 06:10 - 000045568 _____ (Gibbed) C:\Users\Dean Miles\Documents\SAM.Game.exe
2019-03-30 15:48 - 2018-05-27 06:10 - 000029184 _____ (Gibbed) C:\Users\Dean Miles\Documents\SAM.API.dll
2019-03-30 15:48 - 2018-05-27 06:10 - 000004272 _____ C:\Users\Dean Miles\Documents\git-log.txt
2019-03-30 15:48 - 2018-05-27 06:10 - 000000874 _____ C:\Users\Dean Miles\Documents\LICENSE.txt
2019-03-30 15:21 - 2019-02-19 15:40 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2019-03-30 15:11 - 2019-02-21 19:59 - 000000000 ____D C:\Users\Dean Miles\AppData\LocalLow\Unity
2019-03-29 20:49 - 2019-02-24 17:18 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2019-03-26 21:54 - 2019-02-19 13:34 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\.minecraft
2019-03-26 00:20 - 2019-02-19 15:21 - 000000000 ____D C:\ProgramData\Origin
2019-03-24 16:58 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-03-24 16:12 - 2019-02-20 12:59 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\Opera Software
2019-03-24 13:35 - 2019-02-19 18:52 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\ElevatedDiagnostics
2019-03-24 13:34 - 2019-01-13 01:00 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\VirtualStore
2019-03-23 11:10 - 2019-02-19 12:14 - 000001441 _____ C:\Users\Dean Miles\Desktop\Roblox Player.lnk
2019-03-23 11:10 - 2019-02-19 12:09 - 000001256 _____ C:\Users\Dean Miles\Desktop\Roblox Studio.lnk
2019-03-23 11:10 - 2019-02-19 12:09 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2019-03-21 19:04 - 2019-02-24 19:00 - 000001111 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2019-03-21 19:04 - 2019-02-24 19:00 - 000001099 _____ C:\Users\Public\Desktop\paint.net.lnk
2019-03-21 19:04 - 2019-02-24 19:00 - 000000000 ____D C:\Program Files\paint.net
2019-03-21 11:42 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Registration
2019-03-21 10:46 - 2019-02-24 18:29 - 000242992 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-03-20 20:24 - 2019-02-19 16:07 - 000000000 ____D C:\ProgramData\Package Cache
2019-03-20 17:33 - 2019-02-19 16:07 - 000000000 ____D C:\Program Files\rempl
2019-03-18 00:21 - 2019-02-27 20:02 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\D3DSCache
2019-03-17 15:07 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-03-17 10:42 - 2019-02-20 12:54 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\BitLord
2019-03-16 23:09 - 2019-02-24 19:05 - 000000000 ____D C:\ProgramData\Packages
2019-03-15 17:36 - 2019-02-24 18:45 - 000004250 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1550663975
2019-03-12 22:07 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2019-03-12 22:07 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-03-12 22:07 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-03-12 20:25 - 2019-02-19 10:04 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-03-12 20:23 - 2019-02-19 10:04 - 127411920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-03-12 20:06 - 2019-02-19 13:34 - 000002265 _____ C:\Users\Dean Miles\Desktop\Discord.lnk
2019-03-12 20:06 - 2019-02-19 13:34 - 000000000 ____D C:\Users\Dean Miles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2019-03-12 20:06 - 2019-02-19 13:33 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\Discord
2019-03-06 07:20 - 2015-07-10 14:20 - 000407706 __RSH C:\bootmgr
2019-03-05 17:51 - 2019-02-19 15:21 - 000000000 ____D C:\Program Files (x86)\Origin
2019-03-05 17:30 - 2019-02-19 15:49 - 000000000 ____D C:\Users\Dean Miles\AppData\Local\Origin
2019-03-03 17:54 - 2018-04-12 00:41 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-03-03 17:54 - 2018-04-12 00:41 - 000179608 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2019-03-23 15:20 - 2019-03-23 15:20 - 000000003 _____ () C:\Users\Dean Miles\AppData\Local\updater.log
2019-03-23 15:20 - 2019-03-23 15:20 - 000000425 _____ () C:\Users\Dean Miles\AppData\Local\UserProducts.xml

Some files in TEMP:
====================
2019-03-31 10:21 - 2014-07-20 13:24 - 000105064 _____ () C:\Users\Dean Miles\AppData\Local\Temp\cabex.dll
2019-03-31 10:14 - 2019-03-28 21:28 - 000137896 _____ (Speedbit Ltd.) C:\Users\Dean Miles\AppData\Local\Temp\DAPREMOVE.EXE
2019-03-31 10:22 - 2014-07-21 10:23 - 000130712 _____ () C:\Users\Dean Miles\AppData\Local\Temp\RunWizards.exe
2019-03-31 10:21 - 2013-06-03 08:36 - 000041984 _____ () C:\Users\Dean Miles\AppData\Local\Temp\SetupUtils6.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-02-24 18:29

==================== End of FRST.txt ============================