Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-06-2022
Ran by [removed] (administrator) on 2NDBR (ASUS System Product Name) (18-06-2022 13:20:29)
Running from C:\Users\[removed]\Downloads\Programs
[removed]
Platform: Microsoft Windows 10 Pro Version 21H2 19044.1766 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe ->) (Siber Systems -> Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon-x64.exe
(C:\Program Files\EnigmaSoft\SpyHunter\ShKernel.exe ->) (EnigmaSoft Limited -> EnigmaSoft Limited) C:\Program Files\EnigmaSoft\SpyHunter\SpyHunter5.exe
(C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe ->) () [File not signed] C:\Program Files\TechSmith\Snagit 2020\crashpad_handler.exe <2>
(C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe ->) (TechSmith Corporation -> TechSmith Corporation) C:\Program Files\TechSmith\Snagit 2020\SnagitEditor.exe
(C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe ->) (TechSmith Corporation -> TechSmith Corporation) C:\Program Files\TechSmith\Snagit 2020\SnagPriv.exe
(cmd.exe ->) (Siber Systems -> Siber Systems Inc.) C:\Program Files (x86)\Siber Systems\AI RoboForm\rf-chrome-nm-host.exe <2>
(explorer.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (ASUSTOR Inc. -> ASUSTOR) C:\Program Files (x86)\ASUSTOR\Control Center\ControlCenter.exe
(explorer.exe ->) (Emsisoft Ltd -> Emsisoft Ltd.) D:\4-Deadbolt Stuff\2-Software Tools\decrypt_DeadBolt.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <20>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
(explorer.exe ->) (Notepad++ -> Don HO [removed]) C:\Program Files\Notepad++\notepad++.exe
(explorer.exe ->) (Siber Systems -> Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(explorer.exe ->) (TechSmith Corporation -> TechSmith Corporation) C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe
(explorer.exe ->) (X-Ways Software Technology Aktiengesellschaft -> X-Ways Software Technology AG) D:\1-SOFTWARE\winhex\winhex\winhex.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ) C:\Windows\System32\AsusUpdateCheck.exe
(services.exe ->) (EnigmaSoft Limited -> EnigmaSoft Limited) C:\Program Files\EnigmaSoft\SpyHunter\ShKernel.exe
(services.exe ->) (EnigmaSoft Limited -> EnigmaSoft Limited) C:\Program Files\EnigmaSoft\SpyHunter\ShMonitor.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b887c7fe08960f6d\igfxCUIServiceN.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_20c0d314be40f1f8\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4241611fef09311c\IntelCpHDCPSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (NortonLifeLock Inc. -> NortonLifelock Inc.) C:\Program Files\Norton Security\Engine\22.22.4.11\NortonSecurity.exe <2>
(services.exe ->) (NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton Security\Engine\22.22.4.11\nsWscSvc.exe
(svchost.exe ->) (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(svchost.exe ->) (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_3.0.1.1_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Tonec Inc. -> Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(svchost.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Tonec Inc. -> Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3427104 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrotray.exe [6709528 2022-06-04] (Adobe Inc. -> Adobe Systems Inc.)
HKLM\...\Run: [WSVCUUpdateHelper.exe] => C:\Program Files\Wondershare\Wondershare UniConverter 13 for Windows (CPC)\WSVCUUpdateHelper.exe [38872 2022-05-18] (Wondershare Technology Group Co.,Ltd -> )
HKLM\...\Run: [TechSmithSnagit] => C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe [9094872 2022-02-25] (TechSmith Corporation -> TechSmith Corporation)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [827200 2021-12-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [850208 2022-06-15] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5085848 2021-12-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [441448 2019-09-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" (No File)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe /background /setautostart (No File)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe /background /setautostart (No File)
HKU\S-1-5-21-2119236083-4270076351-253614331-1001\...\Run: [MicrosoftEdgeAutoLaunch_4DCEC73C34109335E72EE8105F5CB3D1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3595168 2022-06-16] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2119236083-4270076351-253614331-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [5881872 2022-05-31] (Tonec Inc. -> Tonec Inc.)
HKU\S-1-5-21-2119236083-4270076351-253614331-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7202072 2022-06-04] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2119236083-4270076351-253614331-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [36836592 2022-05-11] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2119236083-4270076351-253614331-1001\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [148800 2022-06-17] (Siber Systems -> Siber Systems)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [203936 2022-06-04] (Adobe Inc. -> Adobe Systems Inc)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\102.0.5005.115\Installer\chrmstp.exe [2022-06-15] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01609794-AA70-4707-97E3-CA0DB975368F} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [148800 2022-06-17] (Siber Systems -> Siber Systems)
Task: {0FC5AD64-AAA2-4E72-B5AF-2CA5B2CECD7B} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3427104 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {12461CCC-CDD8-4E01-9BAB-9EC4FE0BBA59} - System32\Tasks\Norton 360\Norton 360 Error Analyzer => C:\Program Files\Norton Security\Engine\22.22.4.11\SymErr.exe [109312 2022-05-05] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Task: {1D02DB06-C2DC-4460-B83E-045B241A5A12} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (No File)
Task: {2A6090F9-5C85-4168-8697-11F66A7713FF} - System32\Tasks\Norton 360\Norton 360 Error Processor => C:\Program Files\Norton Security\Engine\22.22.4.11\SymErr.exe [109312 2022-05-05] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Task: {2D56FB37-64EB-4E8D-964E-D108833B2B8B} - System32\Tasks\ASUS\NoiseCancelingEngine => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe [1241960 2021-11-24] (ASUSTeK Computer Inc. -> ASUS)
Task: {3DDF1C81-A3AE-4272-A43F-FC57DA160E91} - System32\Tasks\CCleanerSkipUAC - JoeMe => C:\Program Files\CCleaner\CCleaner.exe [30924528 2022-05-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5B9A79EA-E49B-40CB-A656-62D6A1C6A864} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-06-15] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
Task: {63043B63-2374-4083-A8AA-96F4AF7B7497} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144800 2022-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {69D6580E-8B83-4101-8526-33DD9955EDCA} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144800 2022-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {721DBB78-9FCB-4B2A-ADDE-3D1F98716190} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton 360\Upgrade.exe [2353000 2022-05-05] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Task: {7F93ED16-9084-444A-88C8-801AF26B0084} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214144 2022-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {88D5243B-A74D-48FF-80D7-91827F386237} - System32\Tasks\Open URL by RoboForm => C:\Windows\system32\rundll32.exe url.dll,FileProtocolHandler "hxxps://www.roboform.com/test-pass.html?aaa=KICMGMOJOMIMNMMJJJMJCNJMNJJMNJCNLMLJMMNJCNNJPMJMJMCNMJOMPMGMLJKMKMGMNJNMOJJJJNIICMGMCNNMCNIMCNIMJNHJCMNMCNOMPMCNPMCNOMGMPMLMLMJNHICMEKMICNJJCKJNAJCMFLAJKJCLKJFIFIAJFLNIPLIJCJOJGJDJBNMJAJCJJNEJCMJNFJCMJNBJCMFLAJKJCLKJJNKJCMFJAJK (the data entry has 148 more characters).
Task: {92172165-6DA6-47A3-BF4C-83C80D3E4A36} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {990A3097-3993-46BA-B5F1-6D1E47FF398D} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2119236083-4270076351-253614331-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214144 2022-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {9FFD4F8B-D52D-4AE4-AC89-1866A5D08E26} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2022-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {A1C5A75D-D673-4C35-BFBA-730B202303AB} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [67472 2022-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {AA7A6DA2-976A-42E7-A010-13D82B99B5E3} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {B8321BC6-F23C-45B9-999D-70E38E793A25} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [815 2021-09-08] () [File not signed]
Task: {C400D2F7-4717-447F-AA24-09F6761DF755} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.22.4.11\WSCStub.exe [646520 2022-05-05] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Task: {C85BE7B4-552B-481F-9DAB-5D8387AE7631} - System32\Tasks\GoogleUpdateTaskMachineUA{7F2E5AB2-1BA3-46EF-A9E9-22450D5E721B} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-06-15] (Google LLC -> Google LLC)
Task: {C8BC8E91-9B52-4A78-B5EC-86CBFE1DC35A} - System32\Tasks\GoogleUpdateTaskMachineCore{2257A9C2-C541-4DB6-9463-8E283EED968A} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-06-15] (Google LLC -> Google LLC)
Task: {D077C59E-EB13-44FF-BB63-2BE66F46B395} - System32\Tasks\Norton 360\Norton 360 Autofix => C:\Program Files\Norton Security\Engine\22.22.4.11\SymErr.exe [109312 2022-05-05] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Task: {DA89983A-5AF9-40F4-885A-E4E08E8B85B4} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [1845272 2022-05-17] (ASUSTeK COMPUTER INC. -> ASUS)
Task: {DCA56409-6B0E-4394-BA2D-08AF4BF84D54} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
Task: {DCD45C17-22CB-449B-9A5A-862578AD606B} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore1d880e0a1072b10 => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-06-15] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
Task: {F8E47172-8581-4B7F-9543-536C58F776FF} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe [305176 2022-05-17] (ASUSTeK COMPUTER INC. -> ASUS)
Task: {FAD9420C-A93B-4E87-9D2F-80CC916C6042} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-11] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\..\Interfaces\{f7174db0-aba4-4c65-b883-ead99822cf9e}: [DhcpNameServer] 75.75.75.75 75.75.76.76

Edge: 
=======
Edge Profile: C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-18]
Edge HomePage: Default -> hxxp://foxnews.com/
Edge DefaultSearchURL: Default -> hxxps://search.becovi.com/serp.php?q={searchTerms}&i=OWY6G4MSAC&atr=001
Edge DefaultSearchKeyword: Default -> OpenSub
Edge DefaultSuggestURL: Default -> hxxps://ss-sym.search.ask.com/ss?limit=10&li=ff&hl=en&q={searchTerms}
Edge Extension: (Gmail Snippets by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aaogcnhlejoiamoopmnieonhbgajndlc [2022-06-15]
Edge Extension: (Google Translate) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-06-15]
Edge Extension: (Multi Email Forward by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\baebodhfcfpnmnpnnheadibijemdlmip [2022-06-15]
Edge Extension: (Norton Safe Web) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bdaafgjhhjkdplpffldcncdignokfkbo [2022-06-15]
Edge Extension: (Gmail Screenshot by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\boepdnhlmfleonjnaoaemgcggppoikog [2022-06-15]
Edge Extension: (Gmail Button by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bpcebgbjhnmhmjdgiofmphaplgpfkpco [2022-06-15]
Edge Extension: (Chrome Extension Manager by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caippejcknmhingeohbdohmolalmejpc [2022-06-15]
Edge Extension: (Gmail Tabs by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ckoglchhifaedlfjhnoaebnloipiepjg [2022-06-15]
Edge Extension: (AdGone Ad Blocker) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\clffdpipmcfnalhldgjlmpdgndkmccod [2022-06-15]
Edge Extension: (Adblock for Youtube™) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2022-06-15]
Edge Extension: (Popup View for Google™ Translate) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cpogidebfcfffnbjlmoknfpemngaijdj [2022-06-15]
Edge Extension: (Mailto: for Gmail™) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dgkkmcknielgdhebimdnfahpipajcpjn [2022-06-15]
Edge Extension: (Meeting Scheduler for Gmail by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dibjpgjiefaibdinijeddhaiiphfhejp [2022-06-15]
Edge Extension: (Checker Plus for Gmail™) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dkjkomkbjefdadfgbgdfgnpbmhmppiaa [2022-06-15]
Edge Extension: (OpenSub) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dkpeabmcccfccdlaeejhkapiofpjolaf [2022-06-15]
Edge Extension: (Save Emails to PDF by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dngbhajancmfmdnmhhdknhooljkddgnk [2022-06-15]
Edge Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-06-15]
Edge Extension: (Dictation for Gmail) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\eggdmhdpffgikgakkfojgiledkekfdce [2022-06-15]
Edge Extension: (iCloud Launchpad) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ehpomalhbdabpiijhpbcpfjiihnjhnmg [2022-06-15]
Edge Extension: (AdGuard Browser Assistant) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fbohpolgemkbfphodcfgnpjcmedcjhpn [2022-06-15]
Edge Extension: (Popup Blocker for Edge™) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fhnijjnklcofjoilpdahmhdoobjemdka [2022-06-15]
Edge Extension: (iCloud Bookmarks) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2022-06-15]
Edge Extension: (Email List Builder by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\flhabflppadhfbfhhdldooihfkbkaaci [2022-06-15]
Edge Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2022-06-15]
Edge Extension: (IBA Opt-out (by Google)) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb [2022-06-15]
Edge Extension: (Save Emails to Google Drive by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\glgaegbgegomicnedooifcbnmppmofkf [2022-06-15]
Edge Extension: (Adblock Plus - free ad blocker) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2022-06-15]
Edge Extension: (Resize Gmail Sidebar by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gohhgccbnglklfholnklomdkgclbodph [2022-06-15]
Edge Extension: (Mettl Tests : Enable Screen Sharing) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hkjemkcbndldepdbnbdnibeppofoooio [2022-06-15]
Edge Extension: (Price tracker - Otsledit) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ibamclpibpnhmkaphhemfbljmenlpbch [2022-06-15]
Edge Extension: (Export Emails to Google Sheets by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ibpbagbedfnlepijbnjeanihpoohkocm [2022-06-15]
Edge Extension: (Gmail Message Preview by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\iencecfjahgolpojakafmnobbkfgcehp [2022-06-15]
Edge Extension: (YouTube™ AdBlocker) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\imjnhcoogkbmemieaehgnopdleejnmll [2022-06-15]
Edge Extension: (Send Your Email to SMS (text)) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ipghnlmkjdejhibmialipjeaoobhaofe [2022-06-15]
Edge Extension: (Batch Reply for GMail) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jkeciloajjlchlmbjjogifpdkljppbei [2022-06-15]
Edge Extension: (Formatted email subject lines by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lbnejjahbkciooojokighdfkmcgkpjfb [2022-06-15]
Edge Extension: (RoboForm Password Manager) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ljfpcifpgbbchoddpjefaipoiigpdmag [2022-06-15]
Edge Extension: (IDM Integration Module) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llbjbkhnmlidjebalopleeepgdfgcpec [2022-06-15]
Edge Extension: (Application Launcher For Drive (by Google)) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-06-15]
Edge Extension: (Norton Privacy Builder) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lpognpnpncelknkahlngpojfjgdmkodn [2022-06-15]
Edge Extension: (Norton Home Page) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mhffmephdchhhbfjmdpoaldedhhdanbn [2022-06-15]
Edge Extension: (Rename Email Subject by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\miepnlkmnjdfcnkplikgackpobfmaifb [2022-06-15]
Edge Extension: (Norton Safe) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mpnlkmlkncncpgnnkmkgoobfpnjmblnk [2022-06-15]
Edge Extension: (Adblock for Youtube™) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nipggfgilmoiofmnkbeabghbcaohmjih [2022-06-15]
Edge Extension: (Free Email Tracker by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nknojfclnachdkpdkjbbhbkgpnladhnj [2022-06-15]
Edge Extension: (AdGuard AdBlocker) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pdffkfellgipmhklpdmokmckkkfcopbh [2022-06-15]
Edge Extension: (Send from Gmail (by Google)) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pgphcomnlaojlmmcjmiddhdapjpbgeoc [2022-06-15]
Edge Extension: (Email Reply Status by cloudHQ) - C:\Users\JoeMe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pjajkjcilhmhciekmbigpblaakjphkgl [2022-06-15]
Edge HKU\S-1-5-21-2119236083-4270076351-253614331-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2022-05-31]

FireFox:
========
FF HKLM\...\Firefox\Extensions: [[removed]] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKU\S-1-5-21-2119236083-4270076351-253614331-1001\...\SeaMonkey\Extensions: [[removed]] - C:\Users\JoeMe\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\JoeMe\AppData\Roaming\IDM\idmmzcc5 [2022-06-15] [Legacy] [not signed]
FF HKU\S-1-5-21-2119236083-4270076351-253614331-1001\...\SeaMonkey\Extensions: [[removed]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-19] [Legacy]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-06-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-06-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2022-06-15] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-06-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2022-06-15] (Adobe Inc. -> Adobe Systems)

Chrome: 
=======
CHR Profile: C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default [2022-06-18]
CHR HomePage: Default -> hxxp://foxnews.com/
CHR Extension: (Google Translate) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-06-15]
CHR Extension: (AdGuard AdBlocker) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2022-06-15]
CHR Extension: (PDF Editor for Docs:Edit, Fill, Sign, Print) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjboohgkgchdnfnjiaggdbkdmpieoagi [2022-06-15]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-06-15]
CHR Extension: (Dictation for Gmail) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggdmhdpffgikgakkfojgiledkekfdce [2022-06-15]
CHR Extension: (AdGuard Browser Assistant) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbohpolgemkbfphodcfgnpjcmedcjhpn [2022-06-15]
CHR Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2022-06-15]
CHR Extension: (Google Docs Offline) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-06-15]
CHR Extension: (Kindle Cloud Reader) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2022-06-15]
CHR Extension: (Google Play) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2022-06-15]
CHR Extension: (Formatted email subject lines by cloudHQ) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbnejjahbkciooojokighdfkmcgkpjfb [2022-06-15]
CHR Extension: (IDM Integration Module) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2022-06-15]
CHR Extension: (Chrome Web Store Payments) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-06-15]
CHR Extension: (RoboForm Password Manager) - C:\Users\JoeMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2022-06-15]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2022-05-31]
CHR HKU\S-1-5-21-2119236083-4270076351-253614331-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2022-05-31]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2022-05-31]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [10426224 2021-12-23] (Acronis International GmbH -> )
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1264400 2021-12-23] (Acronis International GmbH -> Acronis International GmbH)
S3 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [919328 2022-06-15] (Adobe Inc. -> Adobe Inc.)
S3 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6382320 2022-06-15] (Acronis International GmbH -> )
S3 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3815712 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
S3 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3580200 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
S2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe [457544 2022-02-10] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-06-15] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S3 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [181576 2021-09-30] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.)
S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-06-15] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
R2 AsusUpdateCheck; C:\WINDOWS\System32\AsusUpdateCheck.exe [842128 2022-06-17] (ASUSTeK Computer Inc. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988384 2022-06-10] (Microsoft Corporation -> Microsoft Corporation)
R2 EsgShKernel; C:\Program Files\EnigmaSoft\SpyHunter\ShKernel.exe [17435528 2022-06-18] (EnigmaSoft Limited -> EnigmaSoft Limited)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.111.0522.0002\FileSyncHelper.exe [3373960 2022-06-17] (Microsoft Corporation -> Microsoft Corporation)
S3 GameSDK Service; C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe [397544 2022-05-31] (ASUSTeK COMPUTER INC. -> ASUS Inc.)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4882992 2021-12-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-09-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1928184 2021-12-23] (Acronis International GmbH -> )
R2 NortonSecurity; C:\Program Files\Norton Security\Engine\22.22.4.11\NortonSecurity.exe [344888 2022-05-05] (NortonLifeLock Inc. -> NortonLifelock Inc.)
R2 nsWscSvc; C:\Program Files\Norton Security\Engine\22.22.4.11\nsWscSvc.exe [1059176 2022-05-05] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.111.0522.0002\OneDriveUpdaterService.exe [3812760 2022-06-17] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6254368 2022-06-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ShMonitor; C:\Program Files\EnigmaSoft\SpyHunter\ShMonitor.exe [533896 2022-06-18] (EnigmaSoft Limited -> EnigmaSoft Limited)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7393448 2021-12-23] (Acronis International GmbH -> )
R3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [7095824 2019-09-23] (Acronis International GmbH -> Acronis International GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [531456 2022-06-17] (Microsoft Windows -> Microsoft Corporation)
R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [34384 2022-02-10] (ASUSTeK Computer Inc. -> )
R1 Asusgio3; C:\Windows\system32\drivers\AsIO3.sys [43168 2021-09-30] (ASUSTeK Computer Inc. -> )
R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.22.4.11\Definitions\BASHDefs\20220616.011\BHDrvx64.sys [1672160 2022-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\1616040.00B\ccSetx64.sys [196864 2022-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R1 CTIAIO; C:\Windows\system32\drivers\CtiAIo64.sys [32304 2022-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [509904 2021-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R3 EnigmaFileMonDriver; C:\WINDOWS\system32\Drivers\EnigmaFileMonDriver.sys [76744 2022-06-18] (EnigmaSoft Limited -> EnigmaSoft Limited)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [145376 2022-06-16] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [701064 2022-06-15] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [390592 2022-06-15] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [182832 2022-06-15] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.22.4.11\Definitions\IPSDefs\20220617.061\IDSvia64.sys [1515496 2022-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R3 jakstaVA; C:\WINDOWS\System32\drivers\jaksta_va.sys [113248 2022-02-24] (Jaksta Technologies Pty Ltd -> e2eSoft)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [72792 2021-11-30] (Insecure.Com LLC -> Insecure.Com LLC.)
S3 nsvst_NGC; C:\WINDOWS\System32\drivers\NGCx64\1616040.00B\nsvst.sys [56080 2022-05-05] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
R3 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\1616040.00B\SRTSP64.SYS [954144 2022-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\1616040.00B\SRTSPX64.SYS [51456 2022-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\1616040.00B\SYMEFASI64.SYS [2091256 2022-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\1616040.00B\SymELAM.sys [34600 2022-05-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [100320 2022-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R3 SymEvnt; C:\Program Files\Norton Security\NortonData\22.22.4.11\SymPlatform\SymEvnt.sys [712432 2021-06-15] (Symantec Corporation -> Symantec Corporation)
R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\1616040.00B\Ironx64.SYS [304896 2022-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\1616040.00B\symnets.sys [481248 2022-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [883256 2022-06-15] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [171968 2022-06-15] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [693768 2022-06-15] (Acronis International GmbH -> Acronis International GmbH)
R3 usbip_vhci; C:\WINDOWS\System32\drivers\usbip_vhci.sys [45904 2019-09-03] (ASUSTOR Inc. -> )
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [330176 2022-06-15] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2022-06-15] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R1 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\1616040.00B\wpCtrlDrv.sys [1015760 2022-05-05] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-06-18 13:19 - 2022-06-18 13:20 - 000000000 ____D C:\FRST
2022-06-18 13:14 - 2022-06-18 13:16 - 000002994 _____ C:\RakhniDecryptor.1.32.0.0_18.06.2022_13.14.31_log.txt
2022-06-18 13:14 - 2022-06-18 13:14 - 000000000 ____D C:\Users\JoeMe\Downloads\Compressed
2022-06-18 12:37 - 2022-06-18 12:37 - 000026952 _____ (Wiper Software) C:\WINDOWS\system32\wiperrm.exe
2022-06-18 12:30 - 2022-06-18 12:30 - 000076744 _____ (EnigmaSoft Limited) C:\WINDOWS\system32\Drivers\EnigmaFileMonDriver.sys
2022-06-18 12:30 - 2022-06-18 12:30 - 000001084 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpyHunter5.lnk
2022-06-18 12:30 - 2022-06-18 12:30 - 000001060 _____ C:\Users\Public\Desktop\SpyHunter5.lnk
2022-06-18 12:30 - 2022-06-18 12:30 - 000000000 ____D C:\sh5ldr
2022-06-18 12:30 - 2022-06-18 12:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EnigmaSoft
2022-06-18 12:30 - 2022-06-18 12:30 - 000000000 ____D C:\ProgramData\EnigmaSoft Limited
2022-06-18 12:30 - 2022-06-18 12:30 - 000000000 ____D C:\Program Files\EnigmaSoft
2022-06-18 12:29 - 2022-06-18 12:30 - 000002370 _____ C:\RakhniDecryptor.1.32.0.0_18.06.2022_12.29.03_log.txt
2022-06-18 11:34 - 2022-06-18 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlexHEX
2022-06-18 11:34 - 2022-06-18 11:34 - 000000000 ____D C:\Program Files (x86)\FlexHEX
2022-06-18 11:20 - 2022-06-18 11:20 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2022-06-18 01:49 - 2022-06-18 01:49 - 000012618 _____ C:\ProgramData\goyslgxe.nnn
2022-06-18 01:49 - 2022-06-18 01:49 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Movavi Video Editor Plus 2022
2022-06-18 01:49 - 2022-06-18 01:49 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor Plus 2022
2022-06-18 01:14 - 2022-06-18 01:37 - 000000000 ____D C:\Users\JoeMe\Downloads\Video
2022-06-17 23:30 - 2022-06-17 23:30 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-06-17 15:29 - 2022-06-17 11:31 - 000000000 ____D C:\Windows.old
2022-06-17 15:28 - 2022-06-17 15:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2022-06-17 15:10 - 2022-06-17 15:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUSTOR
2022-06-17 15:10 - 2022-06-17 15:10 - 000000000 ____D C:\Program Files (x86)\ASUSTOR
2022-06-17 15:10 - 2020-06-30 15:41 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\devcon.exe
2022-06-17 15:10 - 2019-09-03 17:14 - 000045904 _____ C:\WINDOWS\system32\Drivers\usbip_vhci.sys
2022-06-17 15:03 - 2022-06-17 15:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2022-06-17 12:08 - 2022-06-18 02:08 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\vlc
2022-06-17 12:08 - 2022-06-17 12:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2022-06-17 12:08 - 2022-06-17 12:08 - 000000000 ____D C:\Program Files\VideoLAN
2022-06-17 11:36 - 2022-06-17 11:36 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2022-06-17 11:35 - 2022-06-17 15:14 - 000795738 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-06-17 11:34 - 2022-06-17 11:34 - 000000020 ___SH C:\Users\JoeMe\ntuser.ini
2022-06-17 11:31 - 2022-06-18 03:44 - 000000000 ____D C:\WINDOWS\system32\Tasks\Norton 360
2022-06-17 11:31 - 2022-06-17 23:30 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2119236083-4270076351-253614331-1001
2022-06-17 11:31 - 2022-06-17 23:30 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-06-17 11:31 - 2022-06-17 15:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-17 11:31 - 2022-06-17 11:31 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2022-06-17 11:31 - 2022-06-17 11:31 - 000007623 _____ C:\WINDOWS\diagerr.xml
2022-06-17 11:31 - 2022-06-17 11:31 - 000003916 _____ C:\WINDOWS\system32\Tasks\Open URL by RoboForm
2022-06-17 11:31 - 2022-06-17 11:31 - 000003840 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2022-06-17 11:31 - 2022-06-17 11:31 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-06-17 11:31 - 2022-06-17 11:31 - 000003464 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-17 11:31 - 2022-06-17 11:31 - 000003424 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{7F2E5AB2-1BA3-46EF-A9E9-22450D5E721B}
2022-06-17 11:31 - 2022-06-17 11:31 - 000003240 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-06-17 11:31 - 2022-06-17 11:31 - 000003200 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{2257A9C2-C541-4DB6-9463-8E283EED968A}
2022-06-17 11:31 - 2022-06-17 11:31 - 000003100 _____ C:\WINDOWS\system32\Tasks\Run RoboForm TaskBar Icon
2022-06-17 11:31 - 2022-06-17 11:31 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-06-17 11:31 - 2022-06-17 11:31 - 000002612 _____ C:\WINDOWS\system32\Tasks\Norton WSC Integration
2022-06-17 11:31 - 2022-06-17 11:31 - 000002612 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2022-06-17 11:31 - 2022-06-17 11:31 - 000002252 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - JoeMe
2022-06-17 11:31 - 2022-06-17 11:31 - 000002160 _____ C:\WINDOWS\system32\Tasks\npcapwatchdog
2022-06-17 11:31 - 2022-06-17 11:31 - 000000000 ____D C:\WINDOWS\system32\Tasks\ASUS
2022-06-17 11:29 - 2022-06-18 11:19 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-06-17 11:29 - 2022-06-17 11:29 - 000509208 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-17 11:25 - 2022-06-17 15:29 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2022-06-17 11:24 - 2022-06-18 01:14 - 000000000 ____D C:\Users\JoeMe
2022-06-17 11:24 - 2022-06-17 11:25 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2022-06-17 11:22 - 2022-06-17 11:22 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-06-17 11:21 - 2022-06-17 11:21 - 000479744 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2022-06-17 11:21 - 2022-06-17 11:21 - 000188928 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2022-06-17 11:21 - 2022-06-17 11:21 - 000040960 _____ C:\WINDOWS\system32\uwfservicingapi.dll
2022-06-17 11:20 - 2022-06-17 11:20 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-17 11:20 - 2022-06-17 11:20 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2022-06-17 11:20 - 2022-06-17 11:20 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-17 11:20 - 2022-06-17 11:20 - 000523776 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-06-17 11:20 - 2022-06-17 11:20 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-06-17 11:20 - 2022-06-17 11:20 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-06-17 11:20 - 2022-06-17 11:20 - 000272896 _____ C:\WINDOWS\system32\TpmTool.exe
2022-06-17 11:20 - 2022-06-17 11:20 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-17 11:20 - 2022-06-17 11:20 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-06-17 11:20 - 2022-06-17 11:20 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-06-17 11:20 - 2022-06-17 11:20 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-17 11:20 - 2022-06-17 11:20 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-06-17 11:20 - 2022-06-17 11:20 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2022-06-17 11:20 - 2022-06-17 11:20 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2022-06-17 11:20 - 2022-06-17 11:20 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2022-06-17 11:20 - 2022-06-17 11:20 - 000011787 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-17 11:14 - 2022-06-17 11:14 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2022-06-17 11:13 - 2022-06-17 11:13 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2022-06-17 10:43 - 2022-06-17 10:44 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\audacity
2022-06-17 10:43 - 2022-06-17 10:43 - 000000870 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2022-06-17 10:43 - 2022-06-17 10:43 - 000000000 ____D C:\Users\JoeMe\AppData\Local\audacity
2022-06-17 10:43 - 2022-06-17 10:43 - 000000000 ____D C:\Program Files\Audacity
2022-06-17 10:40 - 2022-06-17 11:34 - 000000000 ___DC C:\WINDOWS\Panther
2022-06-17 10:28 - 2022-06-17 15:29 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2022-06-17 03:36 - 2022-06-17 03:36 - 000000000 ____D C:\Users\JoeMe\AppData\Local\VideoEditorPlus
2022-06-17 03:18 - 2022-06-17 03:18 - 000344064 _____ C:\Users\JoeMe\OneDrive\Documents\Database1.accdb
2022-06-17 03:16 - 2022-06-17 03:16 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Wondershare Filmora9
2022-06-17 03:16 - 2022-06-17 03:16 - 000000000 ____D C:\Users\JoeMe\.Wondershare Filmora9
2022-06-17 03:15 - 2022-06-17 03:15 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2022-06-17 03:13 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2022-06-17 03:13 - 2022-06-17 03:13 - 000002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2022-06-17 03:13 - 2022-06-17 03:13 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2022-06-17 03:13 - 2022-06-17 03:13 - 000002419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2022-06-17 03:13 - 2022-06-17 03:13 - 000002418 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2022-06-17 03:13 - 2022-06-17 03:13 - 000002412 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-06-17 03:13 - 2022-06-17 03:13 - 000002406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2022-06-17 03:13 - 2022-06-17 03:13 - 000002398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2022-06-17 02:58 - 2022-06-17 03:13 - 000000000 ____D C:\Program Files\Microsoft Office
2022-06-17 02:58 - 2022-06-17 02:58 - 000000000 ____D C:\Program Files\Microsoft Office 15
2022-06-17 02:27 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2022-06-17 02:27 - 2022-06-17 02:27 - 000000000 ____D C:\ProgramData\RoboForm
2022-06-17 02:26 - 2022-06-17 02:28 - 000000000 ____D C:\Users\JoeMe\AppData\Local\RoboForm
2022-06-17 02:26 - 2022-06-17 02:26 - 000000000 ____D C:\Program Files (x86)\Siber Systems
2022-06-16 21:19 - 2022-06-16 21:19 - 000000000 ____D C:\Program Files\Common Files\AV
2022-06-16 21:03 - 2022-06-16 21:03 - 001328408 _____ C:\WINDOWS\system32\FaceTrackerInternal.dll
2022-06-16 21:03 - 2022-06-16 21:03 - 001321984 _____ C:\WINDOWS\system32\FaceProcessor.dll
2022-06-16 21:03 - 2022-06-16 21:03 - 000503576 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2022-06-16 20:58 - 2022-06-16 20:58 - 000000000 ___HD C:\$WinREAgent
2022-06-16 20:57 - 2022-06-16 20:57 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-06-16 20:56 - 2022-06-16 20:57 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-06-16 20:56 - 2022-06-16 20:56 - 000001151 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2022-06-16 20:56 - 2022-06-16 20:56 - 000000000 ____D C:\Program Files\PCHealthCheck
2022-06-16 20:54 - 2022-06-16 20:54 - 000000000 ____D C:\WINDOWS\CSC
2022-06-16 20:51 - 2022-06-17 15:01 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-15 16:37 - 2022-06-17 15:01 - 000880672 _____ C:\WINDOWS\system32\wpbbin.exe
2022-06-15 16:37 - 2022-06-17 15:01 - 000842128 _____ C:\WINDOWS\system32\AsusUpdateCheck.exe
2022-06-15 16:37 - 2022-06-17 11:31 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-15 16:37 - 2022-06-15 16:37 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-06-15 16:37 - 2022-06-15 13:59 - 000000000 ____D C:\ProgramData\ASUS
2022-06-15 15:07 - 2022-06-17 11:56 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Acronis
2022-06-15 14:58 - 2022-06-17 14:58 - 000000000 ____D C:\Users\JoeMe\AppData\LocalLow\Norton
2022-06-15 14:57 - 2022-06-15 14:57 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Norton
2022-06-15 14:56 - 2022-06-17 15:29 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2022-06-15 14:56 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2022-06-15 14:56 - 2022-06-15 14:56 - 000100320 _____ (Broadcom) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2022-06-15 14:56 - 2022-06-15 14:56 - 000011265 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2022-06-15 14:56 - 2022-06-15 14:56 - 000000000 ____D C:\WINDOWS\system32\Drivers\NGCx64
2022-06-15 14:56 - 2022-06-15 14:56 - 000000000 ____D C:\ProgramData\NortonInstaller
2022-06-15 14:56 - 2022-06-15 14:56 - 000000000 ____D C:\Program Files\Norton Security
2022-06-15 14:56 - 2022-06-15 14:56 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2022-06-15 14:56 - 2022-06-15 14:56 - 000000000 ____D C:\Program Files (x86)\NortonInstaller
2022-06-15 14:55 - 2022-06-15 14:57 - 000000000 ____D C:\ProgramData\Norton
2022-06-15 14:55 - 2022-06-15 14:55 - 000000000 ____D C:\Users\Public\Downloads\Norton
2022-06-15 14:50 - 2022-06-18 06:34 - 000000000 ____D C:\Users\JoeMe\AppData\Local\CrashDumps
2022-06-15 14:46 - 2022-06-15 14:46 - 000000000 ____D C:\ProgramData\Apple
2022-06-15 14:46 - 2022-06-15 14:46 - 000000000 ____D C:\Program Files\Bonjour
2022-06-15 14:46 - 2022-06-15 14:46 - 000000000 ____D C:\Program Files (x86)\Bonjour
2022-06-15 14:45 - 2022-06-17 12:16 - 000000000 ____D C:\ProgramData\Acronis
2022-06-15 14:45 - 2022-06-17 11:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2022-06-15 14:45 - 2022-06-15 15:04 - 000883256 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib.sys
2022-06-15 14:45 - 2022-06-15 15:04 - 000701064 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\file_protector.sys
2022-06-15 14:45 - 2022-06-15 15:04 - 000693768 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tnd.sys
2022-06-15 14:45 - 2022-06-15 15:04 - 000390592 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\file_tracker.sys
2022-06-15 14:45 - 2022-06-15 15:04 - 000330176 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\virtual_file.sys
2022-06-15 14:45 - 2022-06-15 15:04 - 000243472 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\volume_tracker.sys
2022-06-15 14:45 - 2022-06-15 15:04 - 000171968 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib_mounter.sys
2022-06-15 14:45 - 2022-06-15 15:03 - 000371144 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\snapman.sys
2022-06-15 14:45 - 2022-06-15 15:03 - 000001291 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis True Image.lnk
2022-06-15 14:45 - 2022-06-15 14:45 - 000182832 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\fltsrv.sys
2022-06-15 14:45 - 2022-06-15 14:45 - 000000000 ____D C:\ProgramData\Acronis Mobile Backup Data
2022-06-15 14:45 - 2022-06-15 14:45 - 000000000 ____D C:\Program Files (x86)\Acronis
2022-06-15 14:44 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderSizes 9
2022-06-15 14:44 - 2022-06-15 14:44 - 000000000 ____D C:\ProgramData\2003-05.com.keymetricsoft
2022-06-15 14:44 - 2022-06-15 14:44 - 000000000 ____D C:\Program Files\Key Metric Software
2022-06-15 14:39 - 2022-06-15 14:44 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Key Metric Software
2022-06-15 14:39 - 2022-06-15 14:39 - 000000000 ____D C:\ProgramData\Key Metric Software
2022-06-15 14:38 - 2022-06-17 08:54 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Notepad++
2022-06-15 14:38 - 2022-06-15 14:38 - 000000882 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2022-06-15 14:38 - 2022-06-15 14:38 - 000000000 ____D C:\Program Files\Notepad++
2022-06-15 14:36 - 2022-06-17 03:38 - 000000000 ____D C:\Users\JoeMe\.fontconfig
2022-06-15 14:36 - 2022-06-15 14:36 - 000000000 ____D C:\Users\JoeMe\AppData\Local\converter
2022-06-15 14:35 - 2022-06-15 14:35 - 000000000 ____D C:\Users\JoeMe\AppData\Local\SolidDocuments
2022-06-15 14:35 - 2022-06-15 14:35 - 000000000 ____D C:\Users\JoeMe\.ms-ad
2022-06-15 14:34 - 2022-06-15 14:34 - 000000000 ____D C:\Users\JoeMe\AppData\Local\FNativeWebEngineExe
2022-06-15 14:33 - 2022-06-15 14:33 - 000000000 ____D C:\Users\JoeMe\.QtWebEngineProcess
2022-06-15 14:33 - 2022-06-15 14:33 - 000000000 ____D C:\Users\JoeMe\.FNativeWebEngineExe
2022-06-15 14:32 - 2022-06-15 14:32 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Applian
2022-06-15 14:31 - 2022-06-15 14:31 - 000000000 ____D C:\ProgramData\Movavi Video Suite 20
2022-06-15 14:30 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Applian Technologies
2022-06-15 14:28 - 2022-06-18 01:49 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Movavi
2022-06-15 14:28 - 2022-06-15 14:28 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Wondershare
2022-06-15 14:28 - 2022-06-15 14:28 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Suite
2022-06-15 14:28 - 2022-06-15 14:28 - 000000000 ____D C:\Users\JoeMe\AppData\Local\CrashRpt
2022-06-15 14:28 - 2022-06-15 14:28 - 000000000 ____D C:\Users\JoeMe\AppData\Local\cache
2022-06-15 14:28 - 2022-06-15 14:28 - 000000000 ____D C:\Program Files (x86)\WondershareUpdate
2022-06-15 14:26 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2022-06-15 14:26 - 2022-06-15 14:26 - 000000000 ____D C:\Program Files\Speccy
2022-06-15 14:25 - 2022-06-17 15:29 - 000000000 ____D C:\WINDOWS\SysWOW64\Npcap
2022-06-15 14:25 - 2022-06-17 15:29 - 000000000 ____D C:\WINDOWS\system32\Npcap
2022-06-15 14:25 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2022-06-15 14:25 - 2022-06-15 14:32 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Replay Media Catcher 9
2022-06-15 14:25 - 2022-06-15 14:26 - 000000000 ____D C:\Program Files\Recuva
2022-06-15 14:25 - 2022-06-15 14:25 - 000000000 ____D C:\ProgramData\Piriform
2022-06-15 14:25 - 2022-06-15 14:25 - 000000000 ____D C:\Program Files\Npcap
2022-06-15 14:24 - 2022-06-15 14:24 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Jaksta_Technologies_Pty_L
2022-06-15 14:24 - 2022-06-15 14:24 - 000000000 ____D C:\Program Files (x86)\Applian Technologies
2022-06-15 14:22 - 2022-06-15 14:30 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\TechSmith
2022-06-15 14:22 - 2022-06-15 14:22 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Applian Director.lnk
2022-06-15 14:22 - 2022-06-15 14:22 - 000000000 ____D C:\Users\JoeMe\AppData\Local\TechSmith
2022-06-15 14:22 - 2022-06-15 14:22 - 000000000 ____D C:\ProgramData\TechSmith
2022-06-15 14:22 - 2022-06-15 14:22 - 000000000 ____D C:\ProgramData\ABBYY
2022-06-15 14:22 - 2022-06-15 14:22 - 000000000 ____D C:\Program Files\TechSmith
2022-06-15 14:22 - 2022-06-15 14:22 - 000000000 ____D C:\Program Files\Common Files\TechSmith Shared
2022-06-15 14:22 - 2022-06-15 14:22 - 000000000 ____D C:\Program Files (x86)\Applian Director
2022-06-15 14:21 - 2022-06-18 02:21 - 000000000 ____D C:\Program Files\CCleaner
2022-06-15 14:21 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2022-06-15 14:21 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2022-06-15 14:21 - 2022-06-15 14:25 - 000000000 ____D C:\Program Files\Defraggler
2022-06-15 14:20 - 2022-06-17 15:29 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Suite 2020
2022-06-15 14:20 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bulk Rename Utility
2022-06-15 14:20 - 2022-06-15 14:20 - 000012319 _____ C:\ProgramData\qdaliobv.akn
2022-06-15 14:20 - 2022-06-15 14:20 - 000000016 _____ C:\ProgramData\mntemp
2022-06-15 14:20 - 2022-06-15 14:20 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Movavi Video Suite 2020
2022-06-15 14:20 - 2022-06-15 14:20 - 000000000 ____D C:\ProgramData\movavi
2022-06-15 14:20 - 2022-06-15 14:20 - 000000000 ____D C:\Program Files\Bulk Rename Utility
2022-06-15 14:19 - 2022-06-17 11:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasiestSoft
2022-06-15 14:19 - 2022-06-15 14:19 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\EasiestSoft
2022-06-15 14:19 - 2022-06-15 14:19 - 000000000 ____D C:\ProgramData\GraphicsType13
2022-06-15 14:19 - 2022-06-15 14:19 - 000000000 ____D C:\Program Files (x86)\EasiestSoft
2022-06-15 14:18 - 2022-06-18 02:16 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Wondershare
2022-06-15 14:18 - 2022-06-17 11:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2022-06-15 14:18 - 2022-06-17 03:28 - 000000000 ____D C:\ProgramData\Wondershare Filmora
2022-06-15 14:18 - 2022-06-15 14:20 - 000000000 ____D C:\ProgramData\Wondershare
2022-06-15 14:18 - 2022-06-15 14:18 - 000001093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver 2021.lnk
2022-06-15 14:18 - 2022-06-15 14:18 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\TransferSupport
2022-06-15 14:18 - 2022-06-15 14:18 - 000000000 ____D C:\Program Files\Wondershare
2022-06-15 14:17 - 2022-06-15 14:35 - 000000000 ____D C:\Users\JoeMe\AppData\LocalLow\Adobe
2022-06-15 14:17 - 2022-06-15 14:17 - 000002089 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2022-06-15 14:17 - 2022-06-15 14:17 - 000002078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-06-15 14:17 - 2022-06-15 14:17 - 000000000 ____D C:\Users\JoeMe\AppData\Local\CEF
2022-06-15 14:13 - 2022-06-17 12:05 - 000000000 ___RD C:\Users\JoeMe\Creative Cloud Files
2022-06-15 14:10 - 2022-06-15 14:17 - 000000000 ____D C:\Program Files\Common Files\Adobe
2022-06-15 14:10 - 2022-06-15 14:17 - 000000000 ____D C:\Program Files\Adobe
2022-06-15 14:10 - 2022-06-15 14:12 - 000000000 ____D C:\Program Files (x86)\Adobe
2022-06-15 14:10 - 2022-06-15 14:10 - 000001387 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2022-06-15 14:09 - 2022-06-15 15:02 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Adobe
2022-06-15 14:05 - 2022-06-15 14:05 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Comms
2022-06-15 13:59 - 2022-06-15 13:59 - 000000000 ___RD C:\Users\Default\OneDrive
2022-06-15 13:58 - 2022-06-18 13:16 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\DMCache
2022-06-15 13:58 - 2022-06-18 13:03 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-15 13:58 - 2022-06-17 23:30 - 000002137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-15 13:58 - 2022-06-17 23:30 - 000000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2022-06-15 13:58 - 2022-06-17 15:29 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2022-06-15 13:58 - 2022-06-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2022-06-15 13:58 - 2022-06-17 10:28 - 000000000 ____D C:\Program Files (x86)\LightingService
2022-06-15 13:58 - 2022-06-17 10:15 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\IDM
2022-06-15 13:58 - 2022-06-15 14:23 - 000000000 ____D C:\Program Files\Google
2022-06-15 13:58 - 2022-06-15 14:10 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Google
2022-06-15 13:58 - 2022-06-15 14:01 - 000002324 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-06-15 13:58 - 2022-06-15 13:58 - 000000000 ____D C:\Users\JoeMe\AppData\Local\ASUS
2022-06-15 13:58 - 2022-06-15 13:58 - 000000000 ____D C:\ProgramData\IDM
2022-06-15 13:58 - 2022-06-15 13:58 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager
2022-06-15 13:57 - 2022-06-17 10:28 - 000000000 ____D C:\Program Files\ASUS
2022-06-15 13:57 - 2022-06-15 13:57 - 000032304 _____ (Creative Technology Innovation Co., LTd.) C:\WINDOWS\system32\Drivers\CtiAIo64.sys
2022-06-15 13:57 - 2022-06-15 13:57 - 000000000 ____D C:\Users\JoeMe\AppData\Local\PeerDistRepub
2022-06-15 13:57 - 2022-06-15 13:57 - 000000000 ____D C:\Program Files\PHISON
2022-06-15 13:57 - 2022-06-15 13:57 - 000000000 ____D C:\Program Files\PD
2022-06-15 13:57 - 2022-06-15 13:57 - 000000000 ____D C:\Program Files\Patriot
2022-06-15 13:57 - 2022-06-15 13:57 - 000000000 ____D C:\Program Files\ENE
2022-06-15 13:57 - 2022-02-10 11:20 - 000120880 _____ C:\WINDOWS\system32\AsIO2.dll
2022-06-15 13:57 - 2022-02-10 11:20 - 000095280 _____ C:\WINDOWS\SysWOW64\AsIO2.dll
2022-06-15 13:57 - 2022-02-10 11:20 - 000034384 _____ C:\WINDOWS\system32\Drivers\AsIO2.sys
2022-06-15 13:57 - 2020-01-19 19:49 - 000017424 _____ (MICSYS Technology Co., LTd) C:\WINDOWS\system32\Drivers\MsIo64.sys
2022-06-15 13:57 - 2020-01-19 19:49 - 000017424 _____ (MICSYS Technology Co., LTd) C:\WINDOWS\system32\Drivers\MsIo64.old
2022-06-15 13:56 - 2022-06-15 13:58 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2022-06-15 13:56 - 2022-06-15 13:58 - 000000000 ____D C:\Users\JoeMe\AppData\Local\AcSdkInsLog
2022-06-15 13:55 - 2022-06-15 14:17 - 000000000 ____D C:\ProgramData\Adobe
2022-06-15 13:52 - 2022-06-15 13:56 - 000000074 _____ C:\WINDOWS\skipsavetoini
2022-06-15 13:51 - 2022-06-18 11:20 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Wondershare Filmora 9
2022-06-15 13:51 - 2022-06-17 10:28 - 000000000 ____D C:\Program Files (x86)\ASUS
2022-06-15 13:51 - 2022-06-15 14:30 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Snagit
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Wondershare MediaServer
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Wondershare DVD Creator
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Scanned Documents
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\replay dir
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Office Lens
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\My Data Sources
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\index_files
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Fiddler2
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Bulk Rename Utility
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\AutoRun Pro Projects
2022-06-15 13:51 - 2022-06-15 13:54 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\AnyDVD_logs
2022-06-15 13:51 - 2022-06-15 13:51 - 001189784 _____ (ASUSTeK Computer Inc.) C:\WINDOWS\system32\AsusDownloadAgent.exe
2022-06-15 13:51 - 2022-06-15 13:51 - 000378376 _____ C:\WINDOWS\system32\syncas.dll
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Wondershare PDF Password Remover
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Wondershare Filmora
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Wondershare
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\TurboTax
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\temp
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Snagit Stamps
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Security Monitor Pro
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\NewBlueFX
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\My Web Sites
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\My Shapes
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Freemake
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\FeedbackHub
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Fax
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\CyberLink
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Custom Office Templates
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Applian
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\AnyDVDHD
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\AnyDVD Copier
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\Users\JoeMe\OneDrive\Documents\Adobe
2022-06-15 13:51 - 2022-06-15 13:51 - 000000000 ____D C:\ProgramData\Intel
2022-06-15 13:51 - 2022-05-20 06:18 - 000000122 ____R C:\Users\JoeMe\OneDrive\Documents\Joe's Notebook-DESKTOP-ECC6V94.url
2022-06-15 13:51 - 2021-09-30 10:14 - 000043168 _____ C:\WINDOWS\system32\Drivers\AsIO3.sys
2022-06-15 13:51 - 2021-09-16 16:25 - 000151608 _____ (©ASUSTeK Computer Inc.) C:\WINDOWS\system32\AsIO3.dll
2022-06-15 13:51 - 2021-09-16 16:25 - 000123744 _____ (©ASUSTeK Computer Inc.) C:\WINDOWS\SysWOW64\AsIO3.dll
2022-06-15 13:49 - 2022-06-17 15:29 - 000000000 ___RD C:\Users\JoeMe\OneDrive
2022-06-15 13:49 - 2022-06-17 02:45 - 000000000 ____D C:\Users\JoeMe\AppData\Local\PlaceholderTileLogoFolder
2022-06-15 13:48 - 2022-06-17 11:34 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-06-15 13:48 - 2022-06-17 11:34 - 000000000 ___RD C:\Users\JoeMe\3D Objects
2022-06-15 13:48 - 2022-06-17 11:25 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Packages
2022-06-15 13:48 - 2022-06-17 08:49 - 000000000 ____D C:\Users\JoeMe\AppData\Local\D3DSCache
2022-06-15 13:48 - 2022-06-17 02:45 - 000000000 ____D C:\ProgramData\Packages
2022-06-15 13:48 - 2022-06-15 14:35 - 000000000 ____D C:\Users\JoeMe\AppData\Roaming\Adobe
2022-06-15 13:48 - 2022-06-15 13:51 - 000338272 _____ () C:\WINDOWS\system32\AsusDownLoadLicense.exe
2022-06-15 13:48 - 2022-06-15 13:50 - 000000000 ____D C:\Users\JoeMe\AppData\Local\ConnectedDevicesPlatform
2022-06-15 13:48 - 2022-06-15 13:48 - 000000000 ____D C:\Users\JoeMe\AppData\LocalLow\Intel
2022-06-15 13:48 - 2022-06-15 13:48 - 000000000 ____D C:\Users\JoeMe\AppData\Local\VirtualStore
2022-06-15 13:48 - 2022-06-15 13:48 - 000000000 ____D C:\Users\JoeMe\AppData\Local\Publishers
2022-06-15 13:47 - 2021-02-08 06:59 - 000341760 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll
2022-06-15 13:47 - 2021-02-08 06:59 - 000283408 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll
2022-06-15 13:47 - 2021-02-08 06:59 - 000171528 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2022-06-15 13:47 - 2021-02-08 06:59 - 000146816 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 026672984 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 013518168 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 001789704 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-06-15 13:47 - 2021-02-08 06:58 - 001789704 _____ C:\WINDOWS\system32\vulkaninfo.exe
2022-06-15 13:47 - 2021-02-08 06:58 - 001385736 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-06-15 13:47 - 2021-02-08 06:58 - 001385736 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-06-15 13:47 - 2021-02-08 06:58 - 001096320 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 001096320 _____ C:\WINDOWS\system32\vulkan-1.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 000949376 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 000949376 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 000507736 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 000427864 _____ C:\WINDOWS\system32\ze_loader.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 000370520 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2022-06-15 13:47 - 2021-02-08 06:58 - 000148824 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2022-06-15 13:46 - 2022-06-17 11:25 - 000000000 ____D C:\Program Files\Common Files\Logitech
2022-06-15 13:46 - 2022-06-17 10:31 - 000000000 ____D C:\ProgramData\Package Cache
2022-06-13 18:30 - 2022-06-13 20:05 - 000000000 ____D C:\ESD
2022-06-13 18:26 - 2022-06-13 18:26 - 000000000 ___HD C:\$Windows.~WS
2022-06-10 08:58 - 2022-06-10 08:58 - 000000000 ____D C:\RESUME
2022-06-04 19:41 - 2022-06-04 19:41 - 000203936 _____ (Adobe Systems Inc) C:\WINDOWS\system32\AdobePDF.dll
2022-06-04 19:41 - 2022-06-04 19:41 - 000146592 _____ (Adobe Systems Inc.) C:\WINDOWS\system32\AdobePDFUI.dll
2022-05-31 02:34 - 2018-12-19 20:05 - 000229296 _____ (Tonec Inc.) C:\WINDOWS\system32\Drivers\idmwfp.sys
2022-05-26 02:30 - 2022-05-26 02:30 - 000000000 _SHDL C:\Documents and Settings
2022-05-25 16:13 - 2022-06-04 01:20 - 000000000 ____D C:\Wondershare UniConverter
2022-05-25 13:16 - 2022-05-25 13:16 - 000000000 ____D C:\plc_debug
2022-05-25 12:59 - 2022-06-15 13:54 - 000000000 ___HD C:\OneDriveTemp
2022-05-25 12:37 - 2022-06-17 15:01 - 000000000 ____D C:\Intel

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-06-18 12:29 - 2019-12-07 05:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-18 11:20 - 2019-12-07 05:13 - 000000000 ____D C:\WINDOWS\INF
2022-06-18 04:35 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\appcompat
2022-06-17 15:29 - 2019-12-07 05:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2022-06-17 15:29 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2022-06-17 15:29 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2022-06-17 15:29 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\spool
2022-06-17 15:29 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2022-06-17 15:29 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2022-06-17 15:29 - 2019-12-07 05:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-06-17 15:01 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-06-17 15:01 - 2019-12-07 05:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-06-17 14:57 - 2019-12-07 05:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-17 14:57 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-06-17 14:57 - 2019-12-07 05:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-06-17 11:47 - 2019-12-07 05:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-06-17 11:34 - 2019-12-07 05:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-06-17 11:32 - 2019-12-07 05:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-06-17 11:31 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-06-17 11:30 - 2019-12-07 05:14 - 000000000 __RSD C:\WINDOWS\Media
2022-06-17 11:29 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-06-17 11:28 - 2019-12-07 05:18 - 000000000 ____D C:\WINDOWS\Setup
2022-06-17 11:27 - 2019-12-07 05:14 - 000000000 ____D C:\ProgramData\USOPrivate
2022-06-17 11:22 - 2019-12-07 05:54 - 000000000 ___SD C:\WINDOWS\system32\AppV
2022-06-17 11:22 - 2019-12-07 05:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\setup
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\Provisioning
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-06-17 11:22 - 2019-12-07 05:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-06-17 11:22 - 2019-12-07 05:03 - 000000000 ____D C:\WINDOWS\servicing

==================== Files in the root of some directories ========

2022-06-15 14:55 - 2022-06-15 14:55 - 000000000 _____ () C:\Users\JoeMe\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================