Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-10-2019 02 Ran by [removed] (administrator) on RISEN-P (Acer Aspire A515-51) (15-10-2019 02:35:29) Running from C:\Users\[removed]\Downloads [removed] Platform: Windows 10 Pro Version 1903 18362.356 (X64) Language: Español (México) Default browser: FF Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe (Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdredline.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\downloader.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\82.4.155\QtWebEngineProcess.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\82.4.155\QtWebEngineProcess.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\82.4.155\QtWebEngineProcess.exe (Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_24de78387e6208e4\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_24de78387e6208e4\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_24de78387e6208e4\IntelCpHDCPSvc.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_24de78387e6208e4\IntelCpHeciSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe (IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Driver Booster\6.5.0\Pub\PubMonitor.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe (Microsoft Corporation -> Sysinternals - www.sysinternals.com) C:\Users\Bernardo\Desktop\procexp64.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1908.0.0_x64__8wekyb3d8bbwe\Calculator.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11909.1002.3.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19091.313.0_x64__8wekyb3d8bbwe\YourPhone.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LsaIso.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\usocoreworker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vmcompute.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vmms.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.387_none_5f0e233a5902e7db\TiWorker.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe (Popcorn Time) [File not signed] C:\Program Files (x86)\Popcorn Time\Updater.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.52.138.0_x64__kzf8qxf38zg5c\SkypeApp.exe (TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe (The PHP Group) [File not signed] C:\Users\Bernardo\AppData\Local\php7\php.exe Failed to access process -> vmmem ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321096 2017-06-09] (Intel(R) Rapid Storage Technology -> Intel Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [6210368 2019-10-02] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2623032 2019-07-05] (Adobe Inc. -> Adobe Inc.) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5007408 2019-07-31] (Adobe Inc. -> Adobe Systems Inc.) HKLM-x32\...\Run: [] => [X] HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-18] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-18] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [com.squirrel.slack.slack] => C:\Users\Bernardo\AppData\Local\slack\Update.exe [1569296 2019-09-16] (Slack Technologies, Inc. -> ) HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [6113328 2019-07-31] (Adobe Inc. -> Adobe Systems Incorporated) HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [144008 2019-08-12] (Adobe Inc. -> Adobe Systems Incorporated) HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [sljhivb] => C:\Users\Bernardo\AppData\Local\mmsxsw\sirikxw.exe [165888 2019-03-18] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php0] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php1] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php2] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php3] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php4] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php5] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php6] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php7] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php8] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\...\Run: [php9] => C:\Users\Bernardo\AppData\Local\php7\php.exe [106496 2019-05-29] (The PHP Group) [File not signed] HKLM\Software\Microsoft\Active Setup\Installed Components: [{401C381F-E0DE-4B85-8BD8-4F3F14FBDA57}] -> C:\Program Files (x86)\Microsoft\Edge Dev\Application\79.0.287.3\Installer\setup.exe [2019-10-03] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.120\Installer\chrmstp.exe [2019-10-15] (Google LLC -> Google LLC) Startup: C:\Users\Bernardo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mailspring.lnk [2018-10-05] ShortcutTarget: Mailspring.lnk -> C:\Users\Bernardo\AppData\Local\Mailspring\Update.exe (Foundry 376, LLC -> ) [File not signed] Startup: C:\Users\Bernardo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rhuhtl.lnk [2019-09-17] ShortcutTarget: rhuhtl.lnk -> C:\Users\Bernardo\AppData\Local\mmsxsw\sirikxw.exe (Microsoft Windows -> Microsoft Corporation) Startup: C:\Users\Bernardo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\user.lnk [2019-09-17] ShortcutAndArgument: user.lnk -> C:\Windows\System32\cmd.exe => /c explorer hxxp://www2.savemax.store/ GroupPolicy: Restriction ? <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0309B247-C6C1-4A0C-BEFC-8E54F3E6D21D} - System32\Tasks\Driver Booster SkipUAC (Bernardo) => C:\Program Files (x86)\IObit\Driver Booster\6.5.0\DriverBooster.exe [7614224 2019-06-11] (IObit Information Technology -> IObit) Task: {0C986D4C-48B6-49E9-A8EB-45C0111DE45C} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [136152 2019-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {0CE8F841-0810-47DD-AE58-76D83CFCB15C} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [72328 2019-04-04] (Microsoft Corporation -> Microsoft Corporation) Task: {2930720F-7DFA-4FE1-936F-51434F6E123B} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1100936 2019-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {2A6F20E1-21F6-4546-AB51-065A09683D13} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-10-13] (Google Inc -> Google Inc.) Task: {2EE5139E-A7E6-4C2E-8356-4AE86B3F93ED} - System32\Tasks\RtHDVBg_ASC => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506384 2018-12-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {4EA172E8-6514-4D7D-A79A-97F8F6F23006} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26045560 2019-09-04] (Microsoft Corporation -> Microsoft Corporation) Task: {51B3B25F-592C-4975-9F71-3195F72F067F} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-10-04] (Dropbox, Inc -> Dropbox, Inc.) Task: {53B246F3-FAB9-4690-8364-3798638CC237} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-7RU3LDF-Bernardo => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) Task: {5BCD1207-DB6A-4A56-8DA1-7EB30867FE4E} - System32\Tasks\Opera scheduled Autoupdate 1555839835 => C:\Users\Bernardo\AppData\Local\Programs\Opera\launcher.exe [1520152 2019-09-18] (Opera Software AS -> Opera Software) Task: {620A6FD3-499F-4C93-B0C2-F27241D2A10B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2153848 2019-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {63CFBA31-F9F0-4D71-BCDF-071726528AE7} - System32\Tasks\AdobeGCInvoker-1.0-DESKTOP-7RU3LDF-Bernardo => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {6816FFEF-0783-4FF5-ACB6-BC2D5F608FB2} - System32\Tasks\G2MUploadTask-S-1-5-21-2937623597-1657547211-2391554280-1001 => C:\Users\Bernardo\AppData\Local\GoToMeeting\14649\g2mupload.exe [32256 2019-09-18] (LogMeIn, Inc. -> LogMeIn, Inc.) Task: {79699EF4-25CD-4C55-926A-D36A2AC8D39F} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2153848 2019-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {874E81F6-D064-4686-8B29-199ABD17411A} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [158128 2019-06-26] (Microsoft Corporation -> Microsoft Corporation) Task: {8A6BEF20-8A2D-4F17-9181-E3622B042B3E} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26045560 2019-09-04] (Microsoft Corporation -> Microsoft Corporation) Task: {8E1A7ECB-29F6-445B-80F5-49A5513E4665} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [136152 2019-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {9CEC8A90-D7EB-467E-BC6B-05608C31B9CE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6059672 2019-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {B559805C-3C8C-4122-8E20-994045965CD7} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [488760 2019-07-15] (Bitdefender SRL -> Bitdefender) Task: {B5EA5D32-0E50-4A5E-A836-E117FEF2A693} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems) Task: {BD7DEB05-9B09-4E19-A2BC-6576A77EB6CD} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506384 2018-12-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {D166CC8D-4B92-4749-A0DF-CA8AD11D026B} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-10-04] (Dropbox, Inc -> Dropbox, Inc.) Task: {E581287A-B367-4257-A94C-73F048128729} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6059672 2019-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {F3B5D342-48D8-4D42-A2F9-B509CB566A6E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-10-13] (Google Inc -> Google Inc.) Task: {F8B14A39-A4E4-45E9-BE44-9711848F21FA} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\6.5.0\Scheduler.exe [149776 2019-06-11] (IObit Information Technology -> IObit) Task: {FB906EAC-FD53-4F40-9ABB-9D222E8FD1C9} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [158128 2019-06-26] (Microsoft Corporation -> Microsoft Corporation) Task: {FD27DC9F-7057-4927-BD0B-3C05C82E02C4} - System32\Tasks\G2MUpdateTask-S-1-5-21-2937623597-1657547211-2391554280-1001 => C:\Users\Bernardo\AppData\Local\GoToMeeting\14649\g2mupdate.exe [32256 2019-09-18] (LogMeIn, Inc. -> LogMeIn, Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2937623597-1657547211-2391554280-1001.job => C:\Users\Bernardo\AppData\Local\GoToMeeting\14649\g2mupdate.exe Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2937623597-1657547211-2391554280-1001.job => C:\Users\Bernardo\AppData\Local\GoToMeeting\14649\g2mupload.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{34a72d5c-5526-4b11-a81e-bebf81b14221}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{a666d05f-1453-450b-89b8-5f6b99d40cee}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2937623597-1657547211-2391554280-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-09-16] (Microsoft Corporation -> Microsoft Corporation) BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF DefaultProfile: rs841odh.default FF ProfilePath: C:\Users\Bernardo\AppData\Roaming\Mozilla\Firefox\Profiles\rs841odh.default [2019-10-15] FF Extension: (Facebook Container) - C:\Users\Bernardo\AppData\Roaming\Mozilla\Firefox\Profiles\rs841odh.default\Extensions\@contain-facebook.xpi [2019-10-01] FF Extension: (Firefox Multi-Account Containers) - C:\Users\Bernardo\AppData\Roaming\Mozilla\Firefox\Profiles\rs841odh.default\Extensions\@testpilot-containers.xpi [2019-08-01] FF Extension: (OneTab) - C:\Users\Bernardo\AppData\Roaming\Mozilla\Firefox\Profiles\rs841odh.default\Extensions\[removed] [2019-08-01] FF Extension: (DuckDuckGo Privacy Essentials) - C:\Users\Bernardo\AppData\Roaming\Mozilla\Firefox\Profiles\rs841odh.default\Extensions\[removed] [2019-09-16] FF Extension: (Notes by Firefox) - C:\Users\Bernardo\AppData\Roaming\Mozilla\Firefox\Profiles\rs841odh.default\Extensions\[removed] [2019-05-08] FF Extension: (Captura de página completa - FireShot) - C:\Users\Bernardo\AppData\Roaming\Mozilla\Firefox\Profiles\rs841odh.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}.xpi [2019-03-13] FF Extension: (URLs List) - C:\Users\Bernardo\AppData\Roaming\Mozilla\Firefox\Profiles\rs841odh.default\Extensions\{88664789-f91e-40e1-adb9-e4e9a8c48867}.xpi [2019-02-08] FF HKLM\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-02] FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2019-07-05] (Adobe Inc. -> Adobe Systems) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-07-17] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.301\npGoogleUpdate3.dll [2019-10-15] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.301\npGoogleUpdate3.dll [2019-10-15] (Google Inc -> Google LLC) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2019-07-05] (Adobe Inc. -> Adobe Systems) FF Plugin HKU\S-1-5-21-2937623597-1657547211-2391554280-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Bernardo\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2019-05-27] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2019-07-19] <==== ATTENTION (Points to *.cfg file) FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2019-07-19] <==== ATTENTION Chrome: ======= CHR Profile: C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default [2019-08-09] CHR Extension: (Presentaciones) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-10-13] CHR Extension: (Documentos) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-10-13] CHR Extension: (Google Drive) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-13] CHR Extension: (YouTube) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-10-13] CHR Extension: (ARC Welder) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\emfinbmielocnlhgmfkkmkngdoccbadn [2019-08-01] CHR Extension: (Hojas de cálculo) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-10-13] CHR Extension: (Documentos de Google sin conexión) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-21] CHR Extension: (Chrome Remote Desktop) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\inomeogfingihgjfjlpeplalcfajhgai [2019-08-01] CHR Extension: (App Runtime for Chrome (Beta)) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfaihdlpglflfgpfjcifdjdjcckigekc [2019-08-01] CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-10-13] CHR Extension: (Gmail) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-15] CHR Extension: (Chrome Media Router) - C:\Users\Bernardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-09] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [816184 2019-07-05] (Adobe Inc. -> Adobe Inc.) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3117648 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2888272 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 bdredline; C:\Program Files\Bitdefender Antivirus Free\bdredline.exe [2500144 2019-05-28] (Bitdefender SRL -> Bitdefender) S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\78.0.3904.7\remoting_host.exe [72176 2019-09-08] (Google LLC -> Google Inc.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11153512 2019-09-04] (Microsoft Corporation -> Microsoft Corporation) R2 CmService; C:\WINDOWS\System32\CmService.dll [820536 2019-09-16] (Microsoft Windows -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-10-04] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-10-04] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2019-10-02] (Dropbox, Inc -> Dropbox, Inc.) S2 edgeupdate; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [158128 2019-06-26] (Microsoft Corporation -> Microsoft Corporation) S3 edgeupdatem; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [158128 2019-06-26] (Microsoft Corporation -> Microsoft Corporation) S3 gcs; C:\WINDOWS\system32\vmcomputeagent.exe [1390904 2019-09-16] (Microsoft Windows -> Microsoft Corporation) S3 HgClientService; C:\WINDOWS\system32\hgclientservice.dll [150528 2019-03-19] (Microsoft Windows -> Microsoft Corporation) R3 hns; C:\WINDOWS\System32\HostNetSvc.dll [3388928 2019-09-16] (Microsoft Windows -> Microsoft Corporation) R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [529696 2019-07-15] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) S2 IntelAudioService; C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelAudioService.exe [336384 2018-12-20] (Microsoft Windows Hardware Compatibility Publisher -> Intel) S3 MicrosoftEdgeDevElevationService; C:\Program Files (x86)\Microsoft\Edge Dev\Application\79.0.287.3\elevation_service.exe [1087880 2019-10-03] (Microsoft Corporation -> Microsoft Corporation) R3 nvagent; C:\WINDOWS\System32\NvAgent.dll [41992 2019-03-19] (Microsoft Windows -> Microsoft Corporation) R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1291888 2019-07-15] (Bitdefender SRL -> Bitdefender) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-09-16] (Microsoft Windows Publisher -> Microsoft Corporation) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12001112 2019-08-29] (TeamViewer GmbH -> TeamViewer GmbH) R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2018-04-06] (Popcorn Time) [File not signed] R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [238376 2019-05-28] (Bitdefender SRL -> Bitdefender) R3 vmcompute; C:\WINDOWS\system32\vmcompute.exe [3498296 2019-09-16] (Microsoft Windows -> Microsoft Corporation) R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [238376 2019-05-28] (Bitdefender SRL -> Bitdefender) R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [238376 2019-05-28] (Bitdefender SRL -> Bitdefender) S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [152480 2019-02-21] (Microsoft Corporation -> Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-18] (Microsoft Corporation -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-18] (Microsoft Corporation -> Microsoft Corporation) R2 WirelessKB850NotificationService; C:\WINDOWS\system32\WirelessKB850NotificationService.exe [176624 2018-05-14] (Microsoft Corporation -> Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1586784 2019-07-18] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA) R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [739264 2019-08-09] (Bitdefender SRL -> Bitdefender) S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-04-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender) R3 edrsensor; C:\WINDOWS\System32\DRIVERS\edrsensor.sys [296896 2019-08-21] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA) R1 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [596632 2019-09-17] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA) R0 gzflt; C:\WINDOWS\System32\drivers\gzflt.sys [188384 2019-04-26] (Bitdefender SRL -> BitDefender LLC) R3 hvsocketcontrol; C:\WINDOWS\system32\drivers\hvsocketcontrol.sys [36368 2019-03-19] (Microsoft Windows -> Microsoft Corporation) R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-07-15] (Martin Malik - REALiX -> REALiX(tm)) R0 iaStorAC; C:\WINDOWS\System32\drivers\iaStorAC.sys [906160 2019-07-15] (Intel(R) Rapid Storage Technology -> Intel Corporation) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [191992 2019-07-15] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) S3 l2bridge; C:\WINDOWS\System32\drivers\l2bridge.sys [58384 2019-03-19] (Microsoft Windows -> Microsoft Corporation) R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [8717088 2019-07-15] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) S3 pcip; C:\WINDOWS\System32\drivers\pcip.sys [62264 2019-03-19] (Microsoft Windows -> Microsoft Corporation) S3 ramparser; C:\WINDOWS\System32\drivers\ramparser.sys [41784 2019-03-19] (Microsoft Windows -> Microsoft Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1141536 2019-07-15] (Realtek Semiconductor Corp. -> Realtek ) R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [782304 2018-10-05] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation) R3 Synth3dVsp; C:\WINDOWS\System32\drivers\synth3dvsp.sys [107520 2019-03-19] (Microsoft Windows -> Microsoft Corporation) R2 trufos; C:\WINDOWS\System32\drivers\trufos.sys [611728 2019-07-18] (Bitdefender SRL -> Bitdefender) R1 VfpExt; C:\WINDOWS\System32\drivers\vfpext.sys [1409024 2019-03-19] (Microsoft Windows -> Microsoft Corporation) R0 VMSNPXY; C:\WINDOWS\System32\drivers\VmsProxyHNic.sys [39736 2019-08-14] (Microsoft Windows -> Microsoft Corporation) R3 VMSNPXYMP; C:\WINDOWS\System32\drivers\VmsProxyHNic.sys [39736 2019-08-14] (Microsoft Windows -> Microsoft Corporation) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-18] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-18] (Microsoft Windows -> Microsoft Corporation) S3 cpuz143; \??\C:\WINDOWS\temp\cpuz143\cpuz143_x64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) NETSVC: nvagent -> C:\Windows\System32\NvAgent.dll (Microsoft Corporation) NETSVC: HgClientService -> C:\Windows\system32\hgclientservice.dll (Microsoft Corporation) NETSVC: hns -> C:\Windows\System32\HostNetSvc.dll (Microsoft Corporation) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-10-15 02:30 - 2019-10-15 02:32 - 000053143 _____ C:\Users\Bernardo\Downloads\Addition.txt 2019-10-15 02:27 - 2019-10-15 02:36 - 000040200 _____ C:\Users\Bernardo\Downloads\FRST.txt 2019-10-15 02:26 - 2019-10-15 02:36 - 000000000 ____D C:\FRST 2019-10-15 02:26 - 2019-10-15 02:26 - 001616384 _____ (Farbar) C:\Users\Bernardo\Downloads\FRST64.exe 2019-10-15 02:26 - 2019-09-23 22:52 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2019-10-15 02:26 - 2019-09-23 22:49 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2019-10-15 02:01 - 2019-10-15 02:01 - 002004933 _____ C:\Users\Bernardo\Downloads\ProcessExplorer.zip 2019-10-15 02:01 - 2019-09-05 09:48 - 002794360 _____ (Sysinternals - www.sysinternals.com) C:\Users\Bernardo\Desktop\procexp.exe 2019-10-15 02:01 - 2019-09-05 09:45 - 001487224 _____ (Sysinternals - www.sysinternals.com) C:\Users\Bernardo\Desktop\procexp64.exe 2019-10-03 18:40 - 2019-10-03 18:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2019-10-03 18:38 - 2019-10-15 02:35 - 000000000 ____D C:\Program Files\Mozilla Firefox 2019-10-02 07:14 - 2019-10-02 07:14 - 000051024 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2019-10-02 07:14 - 2019-10-02 07:14 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2019-10-02 07:14 - 2019-10-02 07:14 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2019-10-02 07:14 - 2019-10-02 07:14 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2019-10-01 11:25 - 2019-10-01 12:00 - 000000000 __SHD C:\Users\Bernardo\Documents\cache 2019-10-01 11:25 - 2019-10-01 11:25 - 000000000 ____D C:\Users\Bernardo\AppData\Roaming\webex 2019-10-01 11:25 - 2019-10-01 11:25 - 000000000 ____D C:\Users\Bernardo\AppData\Local\WebEx 2019-10-01 11:24 - 2019-10-01 12:00 - 000000000 ____D C:\Users\Bernardo\AppData\LocalLow\WebEx 2019-09-19 15:33 - 2019-09-19 15:33 - 000111512 _____ C:\Users\Bernardo\Downloads\usbshow.zip 2019-09-19 15:33 - 2009-05-01 23:56 - 000116224 _____ (Ldc) C:\Users\Bernardo\Desktop\USB Show.exe 2019-09-17 18:16 - 2018-05-04 19:35 - 059192832 _____ () C:\Users\Bernardo\Desktop\Microsoft Toolkit.exe 2019-09-17 12:24 - 2019-09-17 12:24 - 001895157 _____ C:\Users\Bernardo\Desktop\diplomado en nutrición.pdf 2019-09-17 02:16 - 2019-10-03 18:37 - 000000000 ____D C:\Users\Bernardo\AppData\Local\php7 2019-09-17 02:16 - 2019-09-17 02:18 - 000000000 ___HD C:\Users\Bernardo\AppData\Local\mmsxsw 2019-09-17 02:16 - 2019-09-17 02:16 - 023484596 _____ C:\Users\Bernardo\AppData\Local\php.zip 2019-09-17 01:50 - 2019-09-03 20:56 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2019-09-17 01:50 - 2019-09-03 20:56 - 000179816 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2019-09-16 14:39 - 2019-09-16 14:39 - 025900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 025445376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 022626304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 019849216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 019811328 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 018019328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 008011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 007754240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 007196160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 007014912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 006236160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 005916672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 005762032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 005500928 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 005013504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 004857856 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 004306944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 003817472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 003637760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 003498296 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 003388928 _____ (Microsoft Corporation) C:\WINDOWS\system32\HostNetSvc.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2019-09-16 14:39 - 2019-09-16 14:39 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2019-09-16 14:39 - 2019-09-16 14:39 - 002494232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 002426024 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwp.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 002314440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 002224952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001716776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001608192 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001563648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001510744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001488216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001394488 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 001390904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmComputeAgent.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001283600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2019-09-16 14:39 - 2019-09-16 14:39 - 001263104 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001244728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001192096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 001138688 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001122816 _____ (Microsoft Corporation) C:\WINDOWS\system32\CBDHSvc.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001105480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001098928 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 001073168 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000904704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000902456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsSandbox.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000820536 _____ (Microsoft Corporation) C:\WINDOWS\system32\CmService.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000781912 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000774456 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcIsoCtnr.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000722944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000677176 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys 2019-09-16 14:39 - 2019-09-16 14:39 - 000568336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000516752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000510984 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000431448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DavSyncProvider.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000362056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DavSyncProvider.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000316216 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000291848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationVdev.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000210448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmclient.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCenter.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000167136 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000145720 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-processor-power-events.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000145208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CscMig.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\madrid.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000085008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcsetupagent.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys 2019-09-16 14:39 - 2019-09-16 14:39 - 000084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2019-09-16 14:39 - 2019-09-16 14:39 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000069944 _____ C:\WINDOWS\system32\cmdiag.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000067584 _____ C:\WINDOWS\system32\cmimageworker.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput1_4.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2019-09-16 14:39 - 2019-09-16 14:39 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput1_4.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecerts.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000021544 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fvecerts.dll 2019-09-16 14:39 - 2019-09-16 14:39 - 000019984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 014816256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 009927992 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 007902912 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 007582752 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 007261648 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 006516864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 006408704 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 006162432 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 006081744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 005848840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 005091840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 004562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 004538368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 004012032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 004009472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 003916048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 003771392 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 003750912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 003738376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 003724800 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 003551232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 003372448 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002871608 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 002771520 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002762296 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002743808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002703360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002586816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002576384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002562048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002466512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002258640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002095104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002081976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 002032640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001957000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001913088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001845616 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001815040 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001754232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2019-09-16 14:38 - 2019-09-16 14:38 - 001721144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001691136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001664168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001647072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001633648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001616568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001531656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001509728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 001482256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 001439232 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 001413624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001410048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001371648 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2019-09-16 14:38 - 2019-09-16 14:38 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001305608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001261256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001182240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 001158656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001154952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001068560 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001065984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001054656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001052608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 001009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000957952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000944664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000913168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000910336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000909736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000889960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000849920 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000822416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000822072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000810808 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000797112 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000776704 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000775768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000771584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000727752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000683008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000680976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000676632 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000673456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000667272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000637752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000631808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000628400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000596008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000593112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000561680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000541264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000538624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000531456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000515448 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000513336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000513024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000511488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000511288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000488056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000464696 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000454736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000442304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000415760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000411128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000401832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000401208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000375512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000334936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000310072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directxdatabaseupdater.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000267496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000237880 _____ C:\WINDOWS\system32\containerdevicemanagement.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgiadaptercache.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\twext.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000164152 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000147184 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000146416 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000141840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000120344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000117048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000106296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edpnotify.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddrawex.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\compact.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameInput.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddrawex.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compact.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInputUap.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2019-09-16 14:38 - 2019-09-16 14:38 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys 2019-09-16 14:38 - 2019-09-16 14:38 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wci.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL 2019-09-16 14:38 - 2019-09-16 14:38 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKOR.DLL 2019-09-16 14:38 - 2019-09-16 14:38 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2019-09-16 14:38 - 2019-09-16 14:38 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 017787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 007839120 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 006226352 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 004551352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 003947520 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 003701248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 003590672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 003353088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 002723840 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 002551096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 002284032 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 002120272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 002119168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 001744400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 001686528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 001259424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 001149200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 001094144 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 001091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000977408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000905728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000863744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000808960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000804880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000731960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000722288 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000589600 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 000551736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000478264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000441360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000435728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000352232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000338800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000252944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wosc.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApproveChildRequest.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2dp.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000225080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssrvlic.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000201016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ManageCI.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000182288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000149504 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tsusbhub.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssecuser.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000088568 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidspi.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\LSCSHostPolicy.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInput.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000055304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2019-09-16 14:09 - 2019-09-16 14:09 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInputUap.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\lstelemetry.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilotdiag.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll 2019-09-16 14:09 - 2019-09-16 14:09 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe 2019-09-16 14:09 - 2019-09-16 14:09 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-10-15 02:37 - 2018-10-04 12:12 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free 2019-10-15 02:33 - 2019-03-18 23:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-10-15 02:29 - 2018-10-13 21:55 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-10-15 02:26 - 2019-03-18 23:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-10-15 02:23 - 2019-07-12 13:35 - 000003558 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2019-10-15 02:23 - 2019-07-12 13:35 - 000003434 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2019-10-15 02:22 - 2019-07-17 09:49 - 000000000 ____D C:\Users\Bernardo\AppData\Local\Deployment 2019-10-15 02:22 - 2018-10-13 21:55 - 000000000 ____D C:\Program Files (x86)\Google 2019-10-15 01:50 - 2019-07-12 13:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-10-14 12:47 - 2018-10-04 23:51 - 000000000 ___RD C:\Users\Bernardo\Dropbox 2019-10-14 12:46 - 2019-04-05 02:55 - 000000619 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2019-10-14 12:46 - 2019-03-18 23:37 - 000065536 _____ C:\WINDOWS\system32\config\ELAM 2019-10-14 12:46 - 2018-10-04 11:43 - 000000000 __SHD C:\Users\Bernardo\IntelGraphicsProfiles 2019-10-14 12:46 - 2018-10-04 11:35 - 000000000 ____D C:\Users\Bernardo\AppData\LocalLow\Mozilla 2019-10-04 10:46 - 2019-03-18 23:52 - 000000000 ___HD C:\Program Files\WindowsApps 2019-10-04 10:46 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-10-04 10:30 - 2018-10-04 11:35 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2019-10-03 18:53 - 2019-01-29 16:27 - 000000000 ____D C:\Users\Bernardo\AppData\Roaming\WhatsApp 2019-10-03 18:46 - 2019-06-26 11:49 - 000002346 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge Dev.lnk 2019-10-03 18:41 - 2018-10-04 23:49 - 000000000 ____D C:\Program Files (x86)\Dropbox 2019-10-03 18:40 - 2019-01-29 16:27 - 000000000 ____D C:\Users\Bernardo\AppData\Local\WhatsApp 2019-10-02 16:14 - 2018-10-24 21:50 - 000000000 ____D C:\Users\Bernardo\AppData\Roaming\vlc 2019-10-02 16:14 - 2018-10-05 18:32 - 000000000 ____D C:\Users\Bernardo\AppData\Roaming\Slack 2019-10-02 01:26 - 2018-10-04 11:28 - 000000000 ____D C:\Users\Bernardo\AppData\Local\Packages 2019-10-02 01:20 - 2019-03-18 23:50 - 000000000 ____D C:\WINDOWS\INF 2019-09-30 02:24 - 2019-07-12 13:35 - 000003580 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2019-09-30 02:24 - 2019-07-12 13:35 - 000003456 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2019-09-30 02:23 - 2019-07-12 13:35 - 000003370 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2937623597-1657547211-2391554280-1001 2019-09-30 02:23 - 2019-07-12 13:15 - 000002376 _____ C:\Users\Bernardo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-09-30 02:23 - 2018-10-04 11:31 - 000000000 ___RD C:\Users\Bernardo\OneDrive 2019-09-20 13:23 - 2018-10-05 15:28 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2019-09-20 03:39 - 2019-07-12 13:35 - 000004190 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1555839835 2019-09-20 03:39 - 2019-04-21 04:43 - 000001412 _____ C:\Users\Bernardo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navegador Opera.lnk 2019-09-20 03:36 - 2019-06-11 16:18 - 000000000 ____D C:\Users\Bernardo\AppData\Local\GoToMeeting 2019-09-18 23:22 - 2019-07-12 13:35 - 000003828 _____ C:\WINDOWS\system32\Tasks\G2MUploadTask-S-1-5-21-2937623597-1657547211-2391554280-1001 2019-09-18 23:22 - 2019-07-12 13:35 - 000003732 _____ C:\WINDOWS\system32\Tasks\G2MUpdateTask-S-1-5-21-2937623597-1657547211-2391554280-1001 2019-09-18 23:22 - 2019-06-11 16:18 - 000000668 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2937623597-1657547211-2391554280-1001.job 2019-09-18 23:22 - 2019-06-11 16:18 - 000000572 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2937623597-1657547211-2391554280-1001.job 2019-09-17 18:29 - 2019-01-09 01:46 - 000000000 ____D C:\Users\Bernardo\Downloads\Archive-0ee6 2019-09-17 12:50 - 2018-10-24 21:08 - 000596632 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys 2019-09-17 12:16 - 2018-10-04 11:35 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2019-09-17 01:57 - 2019-07-12 13:37 - 001680300 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-09-17 01:57 - 2019-03-19 06:49 - 000748460 _____ C:\WINDOWS\system32\perfh00A.dat 2019-09-17 01:57 - 2019-03-19 06:49 - 000145184 _____ C:\WINDOWS\system32\perfc00A.dat 2019-09-17 01:51 - 2018-10-04 11:28 - 000000000 __RHD C:\Users\Public\AccountPictures 2019-09-17 01:51 - 2018-10-04 11:28 - 000000000 ___RD C:\Users\Bernardo\3D Objects 2019-09-17 01:50 - 2019-07-12 13:35 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-09-17 01:50 - 2019-07-12 13:30 - 000452224 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-09-17 01:50 - 2019-07-12 13:30 - 000001527 _____ C:\WINDOWS\system32\config\VSMIDK 2019-09-17 01:50 - 2018-10-04 23:49 - 000000986 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2019-09-17 01:50 - 2018-10-04 23:49 - 000000982 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2019-09-17 01:49 - 2019-07-12 17:06 - 000000000 ___SD C:\WINDOWS\system32\containers 2019-09-17 01:49 - 2019-07-12 12:58 - 000000000 ____D C:\Program Files\Hyper-V 2019-09-17 01:49 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ___RD C:\WINDOWS\PrintDialog 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\TextInput 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\SystemResources 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\system32\es-MX 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\ShellExperiences 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\Provisioning 2019-09-17 01:49 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\bcastdvr 2019-09-17 01:49 - 2019-03-18 23:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2019-09-16 17:34 - 2018-10-05 18:32 - 000000000 ____D C:\Users\Bernardo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies 2019-09-16 17:34 - 2018-10-05 18:32 - 000000000 ____D C:\Users\Bernardo\AppData\Local\slack 2019-09-16 17:34 - 2018-10-05 15:05 - 000000000 ____D C:\Users\Bernardo\AppData\Local\SquirrelTemp 2019-09-16 17:11 - 2019-09-13 16:31 - 000160853 _____ C:\Users\Bernardo\Desktop\WhatsApp Image 2019-09-13 at 4.28.24 PM.jpeg 2019-09-16 14:42 - 2019-03-19 06:52 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll 2019-09-16 14:42 - 2019-03-19 06:52 - 000018903 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2019-09-16 14:01 - 2019-03-18 23:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2019-09-16 13:59 - 2019-03-06 21:39 - 000000000 ____D C:\Program Files\Microsoft Office ==================== Files in the root of some directories ================ 2018-10-05 18:47 - 2018-10-05 18:47 - 000000033 _____ () C:\Users\Bernardo\AppData\Roaming\AdobeWLCMCache.dat 2019-05-03 03:40 - 2019-06-05 10:20 - 000001456 _____ () C:\Users\Bernardo\AppData\Local\Adobe Guardar para Web 13.0 Prefs 2018-10-05 18:38 - 2018-10-05 18:38 - 000000410 _____ () C:\Users\Bernardo\AppData\Local\oobelibMkey.log 2019-09-17 02:16 - 2019-09-17 02:16 - 023484596 _____ () C:\Users\Bernardo\AppData\Local\php.zip 2018-10-05 00:26 - 2018-10-05 00:26 - 000007604 _____ () C:\Users\Bernardo\AppData\Local\Resmon.ResmonCfg ==================== SigCheck =============================== (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ============================