Jump to content
tuna1000

Blue Screen and Then Windows Fix after trying to install Antivirus

Recommended Posts

Hi Broni,

Just completed a clean install of windows so to change from 32 bit to 64 bit. When I try to install the Virus protection program the screen goes blue and says Your PC was unable to run this program, then reboots and performs a fix which deletes my office and other programs.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-05.2019
Ran by Don (administrator) on DESKTOP-EUU5D56 (17-05-2019 09:04:29)
Running from C:\Users\Don\Downloads
Loaded Profiles: Don (Available Profiles: Don)
Platform: Windows 10 Home Version 1809 17763.503 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.44.40.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19031.17720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19041.481.0_x64__8wekyb3d8bbwe\YourPhone.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19031.11411.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Adlice -> ) C:\Program Files\RogueKiller\RogueKiller64.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\Vpn.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
(D-Link Corporation -> ) C:\Program Files (x86)\D-Link Computer Inc\D-Link DWA-130\WPSHWPBC.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Ransomware\MB3Service.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Ransomware\mbarw.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1904.1-0\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1904.1-0\NisSrv.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Don\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.44.40.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.44.40.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11904.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> ) C:\Windows\System32\Windows.WARP.JITService.exe
(Microsoft Windows -> ) C:\Windows\System32\Windows.WARP.JITService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SonicWall Inc. -> SonicWall) C:\Program Files\SonicWall\Global VPN Client\SWGVCSvc.exe
(The Chromium Authors) [File not signed] C:\Users\Don\AppData\Local\chromium\Application\chrome.exe
(The Chromium Authors) [File not signed] C:\Users\Don\AppData\Local\chromium\Application\chrome.exe
(The Chromium Authors) [File not signed] C:\Users\Don\AppData\Local\chromium\Application\chrome.exe
(The Chromium Authors) [File not signed] C:\Users\Don\AppData\Local\chromium\Application\chrome.exe
(The Chromium Authors) [File not signed] C:\Users\Don\AppData\Local\chromium\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\...\Run: [Chromium] => c:\users\don\appdata\local\chromium\application\chrome.exe [4195328 2017-10-06] (The Chromium Authors) [File not signed]
HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\...\Run: [GoogleChromeAutoLaunch_335A7423259C3F976AAF7D59DF36EF07] => C:\Users\Don\AppData\Local\chromium\Application\chrome.exe [4195328 2017-10-06] (The Chromium Authors) [File not signed]
HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\...\MountPoints2: {01c016da-735c-11e9-a7d0-f46d0498c1ef} - "E:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\...\MountPoints2: {de6ffc53-7422-11e9-a7d1-f46d0498c1ef} - "E:\HiSuiteDownLoader.exe" 
HKLM\...\Drivers32: [msacm.l3acm] => C:\Windows\SysWOW64\l3codecp.acm [189952 2018-09-15] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.157\Installer\chrmstp.exe [2019-05-16] (Google LLC -> Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine.lnk [2019-05-10]
ShortcutTarget: Avast SecureLine.lnk -> C:\Program Files\AVAST Software\SecureLine\Vpn.exe (AVAST Software s.r.o. -> AVAST Software)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0D66358B-3AFE-4A27-A051-C4007AFD25BB} - System32\Tasks\RogueKiller Anti-Malware => C:\Program Files\RogueKiller\RogueKiller64.exe [33965624 2019-05-14] (Adlice -> )
Task: {1B273204-0894-48EB-8699-2696D0CAE35E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-05-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {3C260D7B-53BD-4C20-8EC0-8D9AFBC7ECA9} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2380088 2019-05-10] (AVAST Software s.r.o. -> AVAST Software)
Task: {437E58CA-7AAD-4B78-B11C-53F0B5BD80D2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {452A6672-101D-4AFC-9DD3-C210D42C06A4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-05-16] (Google Inc -> Google LLC)
Task: {534D6204-DDFE-4FB7-A2B1-86CC1B2CC690} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-05-16] (Google Inc -> Google LLC)
Task: {5733B07B-FAE1-4ED8-993E-E5E24B159C0E} - System32\Tasks\HPCustParticipation HP DeskJet 1110 series => C:\Program Files\HP\HP DeskJet 1110 series\Bin\HPCustPartic.exe [6438536 2017-04-18] (Hewlett Packard -> HP Inc.)
Task: {599CA975-1871-4EAD-9EE2-FE154943B29B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-05-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {A632556B-7919-4710-A9DA-D0B3053EDC8B} - System32\Tasks\Avast SecureLine Update => C:\Program Files\AVAST Software\SecureLine\VpnUpdate.exe [1389392 2019-05-11] (AVAST Software s.r.o. -> AVAST Software)
Task: {B7C8DFCB-26ED-4703-AA6D-CE73CEA45B03} - System32\Tasks\EPSON Perfection V39 Update => C:\Program Files (x86)\epson\escndv\update\e_dtsksd.exe [690536 2013-11-22] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {B870D3FE-9F5A-4B9B-8FE3-34AED6BFA653} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-05-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {D2869186-A670-42C5-8532-5C5A65FF5E99} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {DDD3AC51-A201-40E9-A9D2-F79895854B1D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {E470ECCA-D7DA-4674-9147-6C020BB7ECEB} - System32\Tasks\AAct => C:\Windows\AAct.exe [970568 2017-09-13] () [File not signed]
Task: {EB605267-3014-469A-A4B1-F26FA16A7E3E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-05-10] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\EPSON Perfection V39 Update.job => C:\Program Files (x86)\epson\escndv\update\e_dtsksd.exe7/EXE_S:EPSON Perfection V39,ES010D.DAT /F:UpdateDESKTOP-EUU5D56\DonĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 75.153.171.114
Tcpip\..\Interfaces\{24961ee0-b5d2-4df5-b149-dd642d30bc48}: [DhcpNameServer] 192.168.1.254 75.153.171.114
Tcpip\..\Interfaces\{55fd980d-2ae3-4ed0-b6a5-1bf384205d16}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{8654a1c7-4195-44a5-a7b7-095f261f3229}: [DhcpNameServer] 192.168.0.21 192.168.0.24
Tcpip\..\Interfaces\{9079fcab-9b55-40b5-9e60-f117b8cb4de9}: [NameServer] 100.120.160.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://ca.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_otvrxt_19_19_13&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dca%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyC0DtDyEzyzz0CtC0E0FtByCyBtBtN0D0Tzu0StByCzzyCtN1L2XzuyEtFyDtCtFtDtFtCtAyBtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StD0ByDtBtCtCtC0BtGtByBzzyCtGtD0DtDyCtGtD0DtDyCtGtD0FtB0EyDtByC0AzzyB0E0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1TyEtBtCtCyByDyCtGzy1TyD1PtGyEtCtCtAtGzy1QzztBtGtD1OtDtByEyDtD1S1O1OtA1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDyDyByEzyzzyCyCtD%26cr%3D1566158356%26a%3Dwbf_otvrxt_19_19_13%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://ca.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_otvrxt_19_19_13&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dca%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyC0DtDyEzyzz0CtC0E0FtByCyBtBtN0D0Tzu0StByCzzyCtN1L2XzuyEtFyDtCtFtDtFtCtAyBtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StD0ByDtBtCtCtC0BtGtByBzzyCtGtD0DtDyCtGtD0DtDyCtGtD0FtB0EyDtByC0AzzyB0E0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1TyEtBtCtCyByDyCtGzy1TyD1PtGyEtCtCtAtGzy1QzztBtGtD1OtDtByEyDtD1S1O1OtA1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDyDyByEzyzzyCyCtD%26cr%3D1566158356%26a%3Dwbf_otvrxt_19_19_13%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://ca.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_otvrxt_19_19_13&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dca%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyC0DtDyEzyzz0CtC0E0FtByCyBtBtN0D0Tzu0StByCzzyCtN1L2XzuyEtFyDtCtFtDtFtCtAyBtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StD0ByDtBtCtCtC0BtGtByBzzyCtGtD0DtDyCtGtD0DtDyCtGtD0FtB0EyDtByC0AzzyB0E0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1TyEtBtCtCyByDyCtGzy1TyD1PtGyEtCtCtAtGzy1QzztBtGtD1OtDtByEyDtD1S1O1OtA1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDyDyByEzyzzyCyCtD%26cr%3D1566158356%26a%3Dwbf_otvrxt_19_19_13%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://ca.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_otvrxt_19_19_13&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dca%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyC0DtDyEzyzz0CtC0E0FtByCyBtBtN0D0Tzu0StByCzzyCtN1L2XzuyEtFyDtCtFtDtFtCtAyBtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StD0ByDtBtCtCtC0BtGtByBzzyCtGtD0DtDyCtGtD0DtDyCtGtD0FtB0EyDtByC0AzzyB0E0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1TyEtBtCtCyByDyCtGzy1TyD1PtGyEtCtCtAtGzy1QzztBtGtD1OtDtByEyDtD1S1O1OtA1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDyDyByEzyzzyCyCtD%26cr%3D1566158356%26a%3Dwbf_otvrxt_19_19_13%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://ca.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_otvrxt_19_19_13&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dca%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyC0DtDyEzyzz0CtC0E0FtByCyBtBtN0D0Tzu0StByCzzyCtN1L2XzuyEtFyDtCtFtDtFtCtAyBtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StD0ByDtBtCtCtC0BtGtByBzzyCtGtD0DtDyCtGtD0DtDyCtGtD0FtB0EyDtByC0AzzyB0E0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1TyEtBtCtCyByDyCtGzy1TyD1PtGyEtCtCtAtGzy1QzztBtGtD1OtDtByEyDtD1S1O1OtA1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDyDyByEzyzzyCyCtD%26cr%3D1566158356%26a%3Dwbf_otvrxt_19_19_13%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://ca.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_otvrxt_19_19_13&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dca%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyC0DtDyEzyzz0CtC0E0FtByCyBtBtN0D0Tzu0StByCzzyCtN1L2XzuyEtFyDtCtFtDtFtCtAyBtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StD0ByDtBtCtCtC0BtGtByBzzyCtGtD0DtDyCtGtD0DtDyCtGtD0FtB0EyDtByC0AzzyB0E0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1TyEtBtCtCyByDyCtGzy1TyD1PtGyEtCtCtAtGzy1QzztBtGtD1OtDtByEyDtD1S1O1OtA1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDyDyByEzyzzyCyCtD%26cr%3D1566158356%26a%3Dwbf_otvrxt_19_19_13%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3151124813-3528671398-3086550368-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://ca.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_otvrxt_19_19_13&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dca%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyC0DtDyEzyzz0CtC0E0FtByCyBtBtN0D0Tzu0StByCzzyCtN1L2XzuyEtFyDtCtFtDtFtCtAyBtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StD0ByDtBtCtCtC0BtGtByBzzyCtGtD0DtDyCtGtD0DtDyCtGtD0FtB0EyDtByC0AzzyB0E0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1TyEtBtCtCyByDyCtGzy1TyD1PtGyEtCtCtAtGzy1QzztBtGtD1OtDtByEyDtD1S1O1OtA1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDyDyByEzyzzyCyCtD%26cr%3D1566158356%26a%3Dwbf_otvrxt_19_19_13%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-16] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-16] (Google Inc -> Google LLC)

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxp://srchbar.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> sse
CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
CHR Profile: C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default [2019-05-17]
CHR Extension: (Slides) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-05-10]
CHR Extension: (Docs) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-05-10]
CHR Extension: (Google Drive) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-05-10]
CHR Extension: (YouTube) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-05-10]
CHR Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-05-11]
CHR Extension: (Sheets) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-05-10]
CHR Extension: (Google Docs Offline) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-05-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-05-10]
CHR Extension: (Secured Search Extension) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdpcpceofkopegffcdnffeenbfdldock [2019-05-16]
CHR Extension: (Gmail) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-10]
CHR Extension: (Chrome Media Router) - C:\Users\Don\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-05-10]
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [pdpcpceofkopegffcdnffeenbfdldock] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pdpcpceofkopegffcdnffeenbfdldock] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pdpcpceofkopegffcdnffeenbfdldock] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
R2 MB3Service; C:\Program Files\Malwarebytes\Anti-Ransomware\mb3service.exe [6054352 2017-08-18] (Malwarebytes Corporation -> Malwarebytes)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [6688232 2019-03-28] (AVAST Software s.r.o. -> AVAST Software)
R2 SWGVCSvc; C:\Program Files\SonicWall\Global VPN Client\SWGVCSvc.exe [550264 2017-10-10] (SonicWall Inc. -> SonicWall)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\NisSrv.exe [3851264 2019-05-10] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MsMpEng.exe [118144 2019-05-10] (Microsoft Corporation -> Microsoft Corporation)
R2 WPSHWPBC_DWA_130; C:\Program Files (x86)\D-Link Computer Inc\D-Link DWA-130\WPSHWPBC.exe [317576 2018-10-15] (D-Link Corporation -> )

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswTap; C:\Windows\System32\drivers\aswTap.sys [53904 2018-09-05] (AVAST Software s.r.o. -> The OpenVPN Project)
R3 igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [6192640 2012-03-23] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 L1E; C:\Windows\System32\drivers\L1E62x64.sys [59904 2018-09-15] (Microsoft Windows -> Atheros Communications, Inc.)
R3 MB3SwissArmy; C:\Windows\System32\Drivers\mb3swissarmy.sys [261032 2019-05-17] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [127136 2019-05-16] (Malwarebytes Corporation -> Malwarebytes)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] (ASUSTeK Computer Inc. -> )
R3 netr28ux; C:\Windows\system32\DRIVERS\netr28ux.sys [2269608 2018-03-01] (MEDIATEK INC. -> MediaTek Inc.)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [28272 2019-05-17] (Adlice -> )
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46472 2019-05-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [344544 2019-05-10] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [60896 2019-05-10] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-17 09:04 - 2019-05-17 09:07 - 000024114 _____ C:\Users\Don\Downloads\FRST.txt
2019-05-17 09:04 - 2019-05-17 09:04 - 002434560 _____ (Farbar) C:\Users\Don\Downloads\FRST64 (1).exe
2019-05-17 09:02 - 2019-05-17 09:02 - 001793536 _____ (Farbar) C:\Users\Don\Downloads\FRST (3).exe
2019-05-17 08:55 - 2019-05-17 08:55 - 001793536 _____ (Farbar) C:\Users\Don\Downloads\FRST (2).exe
2019-05-17 08:46 - 2019-05-17 08:46 - 000000000 ___HD C:\OneDriveTemp
2019-05-17 08:12 - 2019-05-17 08:12 - 002434560 _____ (Farbar) C:\Users\Don\Downloads\FRST64.exe
2019-05-17 08:10 - 2019-05-17 08:11 - 001793536 _____ (Farbar) C:\Users\Don\Downloads\FRST (1).exe
2019-05-17 00:51 - 2019-05-17 00:51 - 000028272 _____ C:\Windows\system32\Drivers\truesight.sys
2019-05-17 00:50 - 2019-05-17 00:50 - 000003148 _____ C:\Windows\System32\Tasks\RogueKiller Anti-Malware
2019-05-17 00:50 - 2019-05-17 00:50 - 000000000 ____D C:\ProgramData\RogueKiller
2019-05-17 00:50 - 2019-05-17 00:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2019-05-17 00:50 - 2019-05-17 00:50 - 000000000 ____D C:\Program Files\RogueKiller
2019-05-17 00:49 - 2019-05-17 00:49 - 029928328 _____ (Adlice Software ) C:\Users\Don\Downloads\RogueKiller_setup_ref3.exe
2019-05-17 00:14 - 2019-05-17 00:14 - 007025360 _____ (Malwarebytes) C:\Users\Don\Downloads\AdwCleaner (1).exe
2019-05-16 23:57 - 2019-05-16 23:57 - 000152688 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-05-16 23:56 - 2019-05-17 08:03 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2019-05-16 23:56 - 2019-05-17 00:14 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2019-05-16 23:56 - 2019-05-16 23:56 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\324563B6.sys
2019-05-16 23:55 - 2019-05-17 00:14 - 000000000 ____D C:\Users\Don\Desktop\mbar
2019-05-16 23:55 - 2019-05-16 23:55 - 014178840 _____ (Malwarebytes Corp.) C:\Users\Don\Downloads\mbar-1.10.3.1001.exe
2019-05-16 23:53 - 2019-05-17 08:22 - 000261032 _____ (Malwarebytes) C:\Windows\system32\Drivers\mb3swissarmy.sys
2019-05-16 23:53 - 2019-05-16 23:57 - 000127136 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2019-05-16 23:53 - 2019-05-16 23:53 - 000001946 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Ransomware.lnk
2019-05-16 23:53 - 2019-05-16 23:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-05-16 23:52 - 2019-05-16 23:52 - 061819320 _____ (Malwarebytes ) C:\Users\Don\Downloads\mbarw-setup-consumer-0.9.18.807.exe
2019-05-16 21:03 - 2019-05-13 15:23 - 000835688 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-05-16 21:03 - 2019-05-13 15:23 - 000179816 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-05-16 20:58 - 2019-05-16 20:58 - 007025360 _____ (Malwarebytes) C:\Users\Don\Downloads\AdwCleaner.exe
2019-05-16 20:55 - 2019-05-16 20:55 - 009214024 _____ C:\Users\Don\Downloads\RogueKillerCMD.exe
2019-05-16 20:52 - 2019-05-16 20:53 - 001793536 _____ (Farbar) C:\Users\Don\Downloads\FRST.exe
2019-05-16 14:00 - 2019-05-16 14:00 - 026807808 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 020814848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 019022336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 006072320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 004883968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 004660736 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 003905536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 003743744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 001290752 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 001062400 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000703488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000684032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000525824 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2019-05-16 14:00 - 2019-05-16 14:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000376320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000217088 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2019-05-16 14:00 - 2019-05-16 14:00 - 000181248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2019-05-16 14:00 - 2019-05-16 14:00 - 000128000 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-processor-power-events.dll
2019-05-16 14:00 - 2019-05-16 14:00 - 000122368 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2019-05-16 13:59 - 2019-05-16 14:00 - 023438848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 009682744 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 007883776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 007879680 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 007687576 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 007645384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 006542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 006440960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 006309040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 005498880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 005040640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 004588544 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 003637248 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 003557888 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 003384832 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 003363856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 002780000 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 002708480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 002422272 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 002278240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 002189312 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 001860096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 001760768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 001701888 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 001699496 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-05-16 13:59 - 2019-05-16 13:59 - 001641616 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 001605120 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 001470016 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 001395264 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 001387520 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 001342608 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-05-16 13:59 - 2019-05-16 13:59 - 001253904 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 001225728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 001179680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 001054712 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 001048376 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 001026792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000895792 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000865280 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000807464 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 000758896 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 000680184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000660992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000586280 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000543744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 000532480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000508432 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 000495104 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000449376 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000444944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 000387832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000254952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 000223544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 000216064 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000212792 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 000203272 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000202768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 000201016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 000198456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 000192824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 000179728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000177976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 000163240 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000147736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000121656 _____ (Microsoft Corporation) C:\Windows\system32\kdnet.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2019-05-16 13:59 - 2019-05-16 13:59 - 000090640 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000080184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2019-05-16 13:59 - 2019-05-16 13:59 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2019-05-16 13:59 - 2019-05-16 13:59 - 000066688 _____ (Microsoft Corporation) C:\Windows\system32\cryptdll.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000055792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdll.dll
2019-05-16 13:59 - 2019-05-16 13:59 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-05-16 13:59 - 2019-05-16 13:59 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-05-16 13:59 - 2019-05-16 13:59 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-05-16 13:59 - 2019-05-16 13:59 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-05-16 13:59 - 2019-05-16 13:59 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-05-16 13:59 - 2019-05-16 13:59 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-05-16 13:59 - 2019-05-16 13:59 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-05-16 13:59 - 2019-05-16 13:59 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-05-16 12:27 - 2019-05-16 12:27 - 001056368 _____ C:\Users\Don\Downloads\YukonGold.exe
2019-05-16 12:06 - 2019-05-16 12:06 - 000003418 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-05-16 12:06 - 2019-05-16 12:06 - 000003294 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-05-16 12:06 - 2019-05-16 12:06 - 000002377 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-05-16 12:06 - 2019-05-16 12:06 - 000002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-05-16 12:02 - 2019-05-16 12:02 - 000002729 _____ C:\Users\Don\Desktop\Outlook 2016.lnk
2019-05-16 11:18 - 2019-05-16 11:18 - 000001388 _____ C:\Users\Public\Desktop\Office Tab Center 2013-16.lnk
2019-05-16 10:38 - 2019-05-16 10:38 - 000002729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2019-05-16 10:38 - 2019-05-16 10:38 - 000002662 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2019-05-16 10:38 - 2019-05-16 10:38 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2019-05-16 10:38 - 2019-05-16 10:38 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2019-05-16 10:38 - 2019-05-16 10:38 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2019-05-16 10:38 - 2019-05-16 10:38 - 000002642 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2019-05-16 10:38 - 2019-05-16 10:38 - 000002628 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2019-05-16 10:35 - 2019-05-16 10:35 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2019-05-16 10:32 - 2019-05-16 10:37 - 000000000 ____D C:\Windows\SHELLNEW
2019-05-16 09:43 - 2019-05-16 12:13 - 000000000 ____D C:\ProgramData\Avg
2019-05-16 09:43 - 2019-05-16 09:46 - 000000000 ____D C:\Program Files (x86)\AVG
2019-05-16 09:43 - 2019-05-16 09:44 - 000000000 ____D C:\Users\Don\AppData\Local\AvgSetupLog
2019-05-16 09:43 - 2019-05-16 09:43 - 000000000 ____D C:\Users\Don\AppData\Local\Avg
2019-05-16 09:41 - 2019-05-16 12:13 - 000000000 ____D C:\Users\Don\Desktop\AVG Antivirus 18.3 (2018) PRO by PirateCity.NET
2019-05-16 09:06 - 2019-05-16 09:11 - 298393695 _____ C:\Users\Don\Desktop\AVG Antivirus 18.3 (2018) PRO by PirateCity.NET.zip
2019-05-16 09:06 - 2019-05-16 09:06 - 000013881 _____ C:\Users\Don\Downloads\[limetorrents.info]AVG.AntiVirus.PRO.2018.With.Serial.Keys.torrent
2019-05-16 09:03 - 2019-05-16 09:03 - 000012952 _____ C:\Users\Don\Downloads\[limetorrents.info]Avast!.Internet.Security.18.5.2342..Build.18.5.3931..Full.With.Medicine[BabuPC].torrent
2019-05-16 09:01 - 2019-05-16 09:01 - 000010715 _____ C:\Users\Don\Downloads\[limetorrents.info]MalwareBytes.Anti-Malware.Premium.v7.6.7.1179.Setup..Crack.torrent
2019-05-16 08:58 - 2019-05-16 08:58 - 000008473 _____ C:\Users\Don\Downloads\[limetorrents.info]Avast!.2019.Premier.19.1.7394.0...Keys.torrent
2019-05-16 07:53 - 2019-05-16 07:53 - 000000000 ____D C:\Users\Don\AppData\Local\mbamtray
2019-05-16 07:53 - 2019-05-16 07:53 - 000000000 ____D C:\Users\Don\AppData\Local\mbam
2019-05-16 07:52 - 2019-05-16 23:56 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-05-16 07:52 - 2019-05-16 23:53 - 000000000 ____D C:\Program Files\Malwarebytes
2019-05-15 11:14 - 2019-05-16 11:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Office Tab
2019-05-15 11:12 - 2019-05-16 12:13 - 000000000 ____D C:\Program Files\Detong
2019-05-15 11:12 - 2019-05-15 11:14 - 000001109 _____ C:\Users\Public\Desktop\Office Tab Center.lnk
2019-05-15 11:06 - 2019-05-15 11:06 - 000000000 _____ C:\Windows\system32\last.dump
2019-05-15 11:03 - 2019-05-16 12:01 - 000000000 ____D C:\Windows\Minidump
2019-05-15 09:37 - 2019-05-15 09:37 - 000000000 ____D C:\Users\Don\Documents\Anvsoft
2019-05-15 09:37 - 2019-05-15 09:37 - 000000000 ____D C:\Users\Don\AppData\Roaming\AnvsoftPdfTools
2019-05-15 09:32 - 2019-05-15 09:32 - 000000000 ____D C:\Program Files (x86)\AnvSoft
2019-05-15 08:50 - 2019-05-15 08:50 - 000012193 _____ C:\Users\Don\Downloads\[limetorrents.info]Icecream.PDF.Converter.Pro.2.81...Activation.torrent
2019-05-15 08:48 - 2019-05-15 08:48 - 000013067 _____ C:\Users\Don\Downloads\[limetorrents.info]Icecream.PDF.Converter.Pro.2.83...Activator.[CracksMind].torrent
2019-05-15 08:44 - 2019-05-15 08:44 - 000006031 _____ C:\Users\Don\Downloads\[limetorrents.info]Free.PDF.to.Word.Converter.torrent
2019-05-15 08:43 - 2019-05-15 08:43 - 000006757 _____ C:\Users\Don\Downloads\[limetorrents.info]PDF.to.Word.Converter.torrent
2019-05-15 08:42 - 2019-05-15 08:42 - 000009495 _____ C:\Users\Don\Downloads\[limetorrents.info]Word.To.PDF.Converter.3.0.2 (2).torrent
2019-05-15 08:41 - 2019-05-15 08:41 - 000009495 _____ C:\Users\Don\Downloads\[limetorrents.info]Word.To.PDF.Converter.3.0.2 (1).torrent
2019-05-15 08:40 - 2019-05-15 08:40 - 000017325 _____ C:\Users\Don\Downloads\[limetorrents.info]AnyBizSoft.PDF.to.Word.Converter.3.0.0..Serial.torrent
2019-05-15 08:36 - 2019-05-15 08:36 - 000004296 _____ C:\Users\Don\Downloads\[limetorrents.info]AnyBizSoft.PDF.Converter.v2.5.0.8...Serial.[DwzRG].torrent
2019-05-14 12:24 - 2019-05-14 12:24 - 000016482 _____ C:\Users\Don\Desktop\COOEC Canada Travel Request form LLSW.xlsx
2019-05-13 19:36 - 2019-05-13 19:36 - 000000000 ____D C:\Users\Don\Documents\Wondershare PDF Converter Pro
2019-05-13 19:30 - 2019-05-13 19:30 - 000000000 ____D C:\Users\Don\AppData\Local\Wondershare
2019-05-13 19:29 - 2019-05-13 19:41 - 000000000 ____D C:\Program Files (x86)\Wondershare
2019-05-13 18:29 - 2019-05-13 18:29 - 000011370 _____ C:\Users\Don\Downloads\[limetorrents.info]Solid.PDF.to.Word.9.2.8186.2652...Keygen.torrent
2019-05-13 18:28 - 2019-05-13 18:28 - 000009495 _____ C:\Users\Don\Downloads\[limetorrents.info]Word.To.PDF.Converter.3.0.2.torrent
2019-05-13 18:26 - 2019-05-13 18:26 - 000007008 _____ C:\Users\Don\Downloads\[limetorrents.info]Quick-PDF.PDF.To.Word.Converter.2.2...Crack-{ASWED}.torrent
2019-05-13 18:24 - 2019-05-13 18:24 - 000011370 _____ C:\Users\Don\Downloads\[limetorrents.info]Quick-PDF.PDF.To.Word.Converter3.9...Crack08.9.torrent
2019-05-13 18:14 - 2019-05-13 18:14 - 000000000 ____D C:\Users\Don\AppData\Roaming\Softplicity
2019-05-13 17:37 - 2019-05-13 17:37 - 000002756 _____ C:\Users\Don\Downloads\[limetorrents.info]Coolutils.Total.PDF.Converter.6.1.0.191...key.-.Crackingpatching.torrent
2019-05-13 16:16 - 2019-05-13 16:16 - 005153162 _____ C:\Users\Don\Desktop\CalgaryPlace01_listingID5677.pdf
2019-05-13 13:39 - 2019-05-15 08:26 - 000000000 ____D C:\Users\Don\Desktop\DonCooec
2019-05-13 13:18 - 2019-05-13 13:18 - 000000000 ____D C:\Users\Don\Documents\Custom Office Templates
2019-05-13 12:37 - 2019-05-15 19:49 - 000000000 ____D C:\ProgramData\TEMP
2019-05-13 12:36 - 2019-05-13 12:36 - 000000000 ____D C:\Users\Don\AppData\Roaming\OfficeTab
2019-05-13 12:28 - 2019-05-13 12:28 - 000000000 ____D C:\Users\Public\Documents\Office Tab
2019-05-13 12:28 - 2019-05-13 12:28 - 000000000 ____D C:\Program Files (x86)\Detong
2019-05-13 11:51 - 2019-05-16 10:38 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2019-05-13 11:49 - 2019-05-13 11:49 - 000000000 ____D C:\Windows\PCHEALTH
2019-05-13 11:46 - 2019-05-13 11:46 - 000000000 ____D C:\Users\Don\AppData\Local\Microsoft Help
2019-05-13 11:46 - 2019-05-13 11:46 - 000000000 ____D C:\Program Files\Microsoft Analysis Services
2019-05-13 11:46 - 2019-05-13 11:46 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2019-05-13 11:45 - 2019-05-13 11:49 - 000000000 ____D C:\Program Files\Microsoft Office
2019-05-13 11:45 - 2019-05-13 11:45 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-05-13 10:19 - 2019-05-13 10:19 - 000004899 _____ C:\Users\Don\Downloads\[limetorrents.info]Microsoft.Office.Professional.Plus.2013..32-64....Activator.torrent
2019-05-13 08:50 - 2019-05-13 08:50 - 000000000 ____D C:\Users\Don\AppData\Local\TeamViewer
2019-05-13 08:48 - 2019-05-13 09:04 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2019-05-13 08:48 - 2019-05-13 08:48 - 000000000 ____D C:\Users\Don\AppData\Roaming\TeamViewer
2019-05-13 08:41 - 2019-05-13 08:41 - 000001692 _____ C:\Users\Don\Downloads\Map_AllDrive (4).txt
2019-05-13 08:40 - 2019-05-13 08:40 - 000001692 _____ C:\Users\Don\Downloads\Map_AllDrive (3).txt
2019-05-13 08:34 - 2019-05-13 08:34 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2019-05-13 08:30 - 2019-05-13 09:35 - 000001428 _____ C:\Users\Don\Desktop\xxx.bat
2019-05-13 08:06 - 2019-05-13 08:06 - 000000000 ____D C:\Users\Don\AppData\Local\OneDrive
2019-05-13 08:03 - 2019-05-13 08:03 - 000001692 _____ C:\Users\Don\Downloads\Map_AllDrive (2).txt
2019-05-13 07:54 - 2019-05-13 07:54 - 000001692 _____ C:\Users\Don\Downloads\Map_AllDrive (1).txt
2019-05-13 07:53 - 2019-05-13 07:53 - 000001692 _____ C:\Users\Don\Downloads\Map_AllDrive.txt
2019-05-11 16:24 - 2019-05-11 16:27 - 000000000 ____D C:\Users\Don\Desktop\My Companies1
2019-05-11 10:27 - 2019-05-11 10:27 - 000000000 ____D C:\ProgramData\Western Digital
2019-05-10 21:25 - 2019-05-10 21:25 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-05-10 21:25 - 2019-05-10 21:25 - 000000000 ____D C:\Program Files\MSBuild
2019-05-10 21:25 - 2019-05-10 21:25 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-05-10 21:25 - 2019-05-10 21:25 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-05-10 21:23 - 2018-09-09 18:17 - 001167960 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2019-05-10 21:23 - 2018-09-09 18:16 - 000126064 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2019-05-10 21:23 - 2018-09-09 18:16 - 000035440 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2019-05-10 21:23 - 2018-08-29 18:56 - 000780376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2019-05-10 21:23 - 2018-08-29 18:56 - 000104560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-05-10 21:23 - 2018-08-29 18:56 - 000036896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2019-05-10 21:19 - 2019-05-10 21:34 - 000000000 ____D C:\Program Files (x86)\Youtube Movie Maker
2019-05-10 21:19 - 2019-05-10 21:19 - 000000000 ____D C:\Users\Don\AppData\Local\Downloaded Installations
2019-05-10 20:34 - 2019-05-10 20:34 - 000000000 ____D C:\Users\Don\Desktop\The Beatles - The Lost Album II [14 CD Box Set] (2019) Mp3 Songs [PMEDIA]
2019-05-10 20:33 - 2019-05-10 20:33 - 000001033 _____ C:\Users\Don\Downloads\Youtube Movie Maker Platinum v10 59-TE-[rarbg.to].torrent
2019-05-10 20:30 - 2019-05-10 20:30 - 000011399 _____ C:\Users\Don\Downloads\Britains.Got.Talent.S13E05.WEBRip.x264-ION10-[rarbg.to].torrent
2019-05-10 20:30 - 2019-05-10 20:30 - 000011399 _____ C:\Users\Don\Downloads\Britains.Got.Talent.S13E05.WEBRip.x264-ION10-[rarbg.to] (1).torrent
2019-05-10 20:27 - 2019-05-10 20:27 - 000007698 _____ C:\Users\Don\Downloads\NASAs.Unexplained.Files.S06E06.Secrets.of.the.Alien.Signals.WEB.x264-CAFFEiNE[rartv]-[rarbg.to].torrent
2019-05-10 18:34 - 2019-05-10 18:34 - 000036936 _____ C:\Users\Don\Downloads\The Lego Movie 2 The Second Part (2019) [BluRay] [720p] [YTS.AM].torrent
2019-05-10 17:32 - 2019-05-10 17:35 - 000004004 _____ C:\Windows\System32\Tasks\Avast SecureLine Update
2019-05-10 17:32 - 2019-05-10 17:35 - 000001013 _____ C:\Users\Public\Desktop\Avast SecureLine.lnk
2019-05-10 17:31 - 2018-09-05 22:01 - 000053904 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\aswTap.sys
2019-05-10 17:18 - 2019-05-16 12:13 - 000000000 ____D C:\Users\Don\AppData\Roaming\Azureus
2019-05-10 17:18 - 2019-05-15 13:02 - 000000000 ____D C:\Users\Don\Documents\Vuze Downloads
2019-05-10 17:18 - 2019-05-10 17:18 - 000001867 _____ C:\Users\Public\Desktop\Vuze.lnk
2019-05-10 17:18 - 2019-05-10 17:18 - 000001867 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk
2019-05-10 17:18 - 2019-05-10 17:18 - 000000000 ____D C:\Users\Don\.swt
2019-05-10 17:18 - 2019-05-10 17:18 - 000000000 ____D C:\ProgramData\Oracle
2019-05-10 17:18 - 2019-05-10 17:18 - 000000000 ____D C:\Program Files\Vuze
2019-05-10 17:17 - 2019-05-10 17:17 - 000091808 _____ (Azureus Software, Inc.) C:\Users\Don\Downloads\VuzeBittorrentClientInstaller.exe
2019-05-10 17:10 - 2019-05-12 23:26 - 000002654 _____ C:\Windows\System32\Tasks\HPCustParticipation HP DeskJet 1110 series
2019-05-10 17:10 - 2019-05-10 17:10 - 000002064 _____ C:\Users\Public\Desktop\HP Photo Creations.lnk
2019-05-10 17:10 - 2019-05-10 17:10 - 000000000 ____D C:\ProgramData\Visan
2019-05-10 17:10 - 2019-05-10 17:10 - 000000000 ____D C:\ProgramData\HP Photo Creations
2019-05-10 17:10 - 2019-05-10 17:10 - 000000000 ____D C:\Program Files (x86)\HP Photo Creations
2019-05-10 17:09 - 2019-05-10 17:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2019-05-10 17:09 - 2019-05-10 17:09 - 000002289 _____ C:\Users\Public\Desktop\HP DeskJet 1110 series.lnk
2019-05-10 17:09 - 2019-05-10 17:09 - 000001236 _____ C:\Users\Public\Desktop\Shop for Supplies - HP DeskJet 1110 series.lnk
2019-05-10 17:09 - 2019-05-10 17:09 - 000000000 ____D C:\Program Files\HP
2019-05-10 17:09 - 2019-05-10 17:09 - 000000000 ____D C:\Program Files (x86)\HP
2019-05-10 17:08 - 2019-05-10 17:10 - 000000000 ____D C:\Users\Don\AppData\Local\HP
2019-05-10 17:06 - 2019-05-10 17:08 - 129379720 _____ C:\Users\Don\Downloads\DJ1110_Full_WebPack_40.11.1124.exe
2019-05-10 14:36 - 2019-05-10 17:09 - 000000000 ____D C:\ProgramData\HP
2019-05-10 13:37 - 2019-05-13 09:25 - 000000937 _____ C:\Windows\Tasks\EPSON Perfection V39 Update.job
2019-05-10 13:37 - 2019-05-12 23:26 - 000003412 _____ C:\Windows\System32\Tasks\EPSON Perfection V39 Update
2019-05-10 13:36 - 2019-05-10 13:36 - 000001007 _____ C:\Users\Public\Desktop\EPSON Scan.lnk
2019-05-10 13:36 - 2019-05-10 13:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2019-05-10 13:36 - 2019-05-10 13:36 - 000000000 ____D C:\Program Files (x86)\epson
2019-05-10 13:36 - 2015-04-30 01:00 - 000216064 _____ (Seiko Epson Corporation) C:\Windows\system32\esxi010c.dll
2019-05-10 13:36 - 2015-02-05 02:00 - 000065793 _____ C:\Windows\system32\esfw010c.bin
2019-05-10 13:36 - 2014-07-11 01:00 - 000472576 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2019-05-10 13:36 - 2013-12-18 01:00 - 000065536 _____ C:\Windows\SysWOW64\esint00.dll
2019-05-10 13:36 - 2012-05-17 01:00 - 000144560 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2019-05-10 13:35 - 2019-05-10 13:35 - 044066744 _____ C:\Users\Don\Downloads\V39_EScan_3947_AM.exe
2019-05-10 11:53 - 2019-05-10 11:53 - 000001020 _____ C:\Users\Don\Desktop\Connection to cooec ca.lnk
2019-05-10 11:48 - 2019-05-10 11:48 - 000000000 ____D C:\Users\Don\AppData\Roaming\SonicWall
2019-05-10 11:47 - 2019-05-10 11:47 - 000000000 ____D C:\ProgramData\Package Cache
2019-05-10 11:47 - 2019-05-10 11:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SonicWall
2019-05-10 11:47 - 2019-05-10 11:47 - 000000000 ____D C:\Program Files\SonicWall
2019-05-10 11:47 - 2017-10-10 20:18 - 000125576 _____ (SonicWall) C:\Windows\system32\Drivers\SWIPsec.sys
2019-05-10 11:45 - 2019-05-15 13:02 - 000000000 ____D C:\Users\Don\Desktop\VPN
2019-05-10 11:44 - 2019-05-10 11:44 - 000000000 ____D C:\Users\Don\AppData\LocalLow\Temp
2019-05-10 11:43 - 2019-05-10 11:43 - 019118144 _____ C:\Users\Don\Downloads\GVC 5.0.0.10_x64 (2).zip
2019-05-10 11:42 - 2019-05-10 11:42 - 019118144 _____ C:\Users\Don\Downloads\GVC 5.0.0.10_x64 (1).zip
2019-05-10 11:39 - 2019-05-10 11:39 - 019118144 _____ C:\Users\Don\Downloads\GVC 5.0.0.10_x64.zip
2019-05-10 11:02 - 2019-05-10 11:02 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-05-10 11:02 - 2019-05-10 11:02 - 000000000 ____D C:\Program Files (x86)\D-Link Computer Inc
2019-05-10 11:02 - 2018-03-01 11:40 - 002269608 _____ (MediaTek Inc.) C:\Windows\system32\Drivers\netr28ux.sys
2019-05-10 11:02 - 2018-03-01 11:40 - 000353192 _____ (Mediatek Inc.) C:\Windows\system32\RaCoInstx.dll
2019-05-10 11:02 - 2018-03-01 11:40 - 000079216 _____ C:\Windows\system32\Drivers\FW_7662.bin
2019-05-10 11:02 - 2018-03-01 11:40 - 000020626 _____ C:\Windows\system32\Drivers\Patch_7662.bin
2019-05-10 11:02 - 2018-03-01 11:40 - 000016389 _____ C:\Windows\system32\RaCoInst.dat
2019-05-10 11:00 - 2019-05-10 11:01 - 035609387 _____ C:\Users\Don\Downloads\DWA-130_REVF_DRIVERS_6.03_WIN.ZIP
2019-05-10 11:00 - 2019-05-10 11:01 - 035609387 _____ C:\Users\Don\Downloads\DWA-130_REVF_DRIVERS_6.03_WIN (1).ZIP
2019-05-10 10:35 - 2019-05-10 10:36 - 000000000 ____D C:\Users\Don\AppData\Local\{92A6A4FA-B60E-C842-DB96-EDAAFFFE1132}
2019-05-10 09:48 - 2019-05-16 01:39 - 000000000 ____D C:\Users\Don\AppData\Local\CrashDumps
2019-05-10 09:36 - 2019-05-10 09:36 - 000000000 ____D C:\Users\Don\AppData\Local\CEF
2019-05-10 09:34 - 2019-05-16 10:23 - 000000077 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2019-05-10 09:34 - 2019-05-15 13:02 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software
2019-05-10 09:33 - 2019-05-10 09:33 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2019-05-10 09:32 - 2019-05-10 09:32 - 000002328 _____ C:\Users\Don\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
2019-05-10 09:32 - 2019-05-10 09:32 - 000002320 _____ C:\Users\Don\Desktop\Chromium.lnk
2019-05-10 09:32 - 2019-05-10 09:32 - 000000000 ____D C:\Users\Public\Thunder Network
2019-05-10 09:32 - 2019-05-10 09:32 - 000000000 ____D C:\Users\Don\AppData\Local\chromium
2019-05-10 09:31 - 2019-05-17 08:22 - 000000000 ____D C:\ProgramData\AVAST Software
2019-05-10 09:31 - 2019-05-17 08:22 - 000000000 ____D C:\Program Files\AVAST Software
2019-05-10 09:31 - 2019-05-16 12:13 - 000000000 ____D C:\Users\Don\AppData\Local\{78D84E84-5C70-223C-31E8-07D41580FB4C}
2019-05-10 09:31 - 2019-05-10 09:32 - 000000000 ____D C:\ProgramData\{7EF842C4-56D0-3ABC-0E88-1294E660CA4C}
2019-05-10 09:31 - 2019-05-10 09:31 - 000001361 _____ C:\Users\Don\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HowToRemove.lnk
2019-05-10 09:30 - 2019-05-10 09:34 - 000000000 ____D C:\ProgramData\fjadz
2019-05-10 09:30 - 2019-05-10 09:30 - 016720984 _____ (OSToto Co., Ltd.) C:\Users\Don\Downloads\DriverTalent_setup.exe
2019-05-10 09:30 - 2019-05-10 09:30 - 000000000 ____D C:\Users\Don\Downloads\oujq.CIS
2019-05-10 09:30 - 2019-05-10 09:30 - 000000000 ____D C:\Users\Don\AppData\Local\DBG
2019-05-10 09:28 - 2019-05-10 09:28 - 000000000 ____D C:\Users\Don\AppData\Local\ElevatedDiagnostics
2019-05-10 09:27 - 2019-05-10 09:27 - 000000656 _____ C:\Users\Don\Downloads\wu10 (3).diagcab
2019-05-10 09:27 - 2019-05-10 09:27 - 000000656 _____ C:\Users\Don\Downloads\wu10 (2).diagcab
2019-05-10 09:27 - 2019-05-10 09:27 - 000000656 _____ C:\Users\Don\Downloads\wu10 (1).diagcab
2019-05-10 09:26 - 2019-05-10 09:26 - 000000656 _____ C:\Users\Don\Downloads\wu10.diagcab
2019-05-10 09:20 - 2019-05-10 09:20 - 000689864 _____ (PC Drivers HeadQuarters LP) C:\Users\Don\Downloads\DriverSupport.exe
2019-05-10 09:07 - 2019-05-10 09:07 - 000480019 _____ C:\Users\Don\Downloads\DWA-130_REVF_QIG_6.00_EN.PDF
2019-05-10 08:19 - 2019-05-16 12:06 - 000000000 ____D C:\Program Files (x86)\Google
2019-05-10 08:19 - 2019-05-10 09:03 - 000000000 ____D C:\Users\Don\AppData\Local\Google
2019-05-10 01:01 - 2019-05-10 01:01 - 000153088 _____ (Microsoft Corporation) C:\Windows\system32\fcon.dll
2019-05-10 01:01 - 2019-05-10 01:01 - 000101376 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncCsp.dll
2019-05-10 01:01 - 2019-05-10 01:01 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\EASPolicyManagerBrokerHost.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 012844032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 012140032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 008898048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 007919104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 005436904 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 004527624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 003690496 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 003656192 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 003551112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 003421696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 003406848 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 002942464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 002393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcGenral.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 002205184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 002127360 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001521664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001506304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001467552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001459080 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001370624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001297120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001294520 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001259320 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2019-05-10 01:00 - 2019-05-10 01:00 - 001072424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001047552 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 001019392 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000964096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000897536 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000828728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 000815616 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000772608 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000701440 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000695296 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2019-05-10 01:00 - 2019-05-10 01:00 - 000671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapi.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000642048 _____ (Microsoft Corporation) C:\Windows\system32\SharedRealitySvc.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000577024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2019-05-10 01:00 - 2019-05-10 01:00 - 000528384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000461824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000454144 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000370176 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 000364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000349696 _____ (Microsoft Corporation) C:\Windows\system32\AcGenral.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000331776 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000316416 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiag.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 000312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapibase.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000309760 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000263576 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 000176640 _____ (Microsoft Corporation) C:\Windows\system32\spacebridge.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000097280 _____ (Microsoft Corporation) C:\Windows\system32\EduPrintProv.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 000067072 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 000059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\RDSPnf.exe
2019-05-10 01:00 - 2019-05-10 01:00 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscapi.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfproc.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshhttp.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfts.dll
2019-05-10 01:00 - 2019-05-10 01:00 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscdll.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 015223296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 006925824 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 005765120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 005210904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 004704272 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 004304896 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 003982848 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 003496448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AI.MachineLearning.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 003426816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 003334144 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 002925880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 002871304 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 002765312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 002701512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 002689024 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 002627384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 002438368 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 002346496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 002073960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001994976 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001969464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 001918464 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001886208 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001830200 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001711104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001687552 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001674696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001671680 _____ (Microsoft Corporation) C:\Windows\system32\InstallService.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001671352 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001653760 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001647632 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001615872 ____R (The ICU Project) C:\Windows\SysWOW64\icuin.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001590064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001478968 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001458056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001360184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 001315328 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001311232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001256448 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001249280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallService.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001221944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001217024 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001155072 ____R (The ICU Project) C:\Windows\SysWOW64\icuuc.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001145856 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001072640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 001058304 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2019-05-10 00:59 - 2019-05-10 00:59 - 001057792 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 001001472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000998712 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000982528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Vpn.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000981816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 000976896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000948224 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000927232 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000926208 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000909840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000888320 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000884224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000882688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000882176 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2019-05-10 00:59 - 2019-05-10 00:59 - 000872448 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000865792 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000845824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000821048 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000815616 _____ (Microsoft Corporation) C:\Windows\system32\MdmDiagnostics.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000809784 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000782848 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000780632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000776192 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 000737080 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000731648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000730936 _____ (Microsoft Corporation) C:\Windows\system32\LicensingWinRT.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000730112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000725696 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000711168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000699392 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Language.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000673280 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000660480 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000653040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000649064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000638376 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000620560 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000617784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicensingWinRT.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000611840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000610304 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000598544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000579072 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000553784 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000553656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryPS.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000553472 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000552448 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000540720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StateRepository.Core.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000540448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000531968 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000514632 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000506880 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000505344 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000500224 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_PCDisplay.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000474928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2019-05-10 00:59 - 2019-05-10 00:59 - 000466432 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000461112 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000454160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 000451080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000448000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.Workflow.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000424960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000414720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2019-05-10 00:59 - 2019-05-10 00:59 - 000408528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000407552 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000385536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000359936 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000349184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000343552 _____ (Microsoft Corporation) C:\Windows\system32\RADCUI.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000332800 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000326144 _____ (Microsoft Corporation) C:\Windows\system32\DiagnosticLogCSP.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\sppcommdlg.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000322568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000320512 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000312632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000302080 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000301568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 000294912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000257696 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000254464 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000246784 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000246784 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\SharedPCCSP.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerCsp.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000201728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000201216 _____ (Microsoft Corporation) C:\Windows\system32\wincredui.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000188416 _____ (Microsoft Corporation) C:\Windows\system32\DMPushRouterCore.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000182784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.SharedPC.CredentialProvider.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000177152 _____ (Microsoft Corporation) C:\Windows\system32\LanguageComponentsInstaller.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredui.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000159272 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000147496 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000143880 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BitLockerCsp.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 000134456 _____ (Microsoft Corporation) C:\Windows\system32\ImplatSetup.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000122680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000121344 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000115360 _____ (Microsoft Corporation) C:\Windows\system32\phoneactivate.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleprn.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000107832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000101376 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000096256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvsetup.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000086960 _____ (Microsoft Corporation) C:\Windows\system32\taskhostw.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 000071208 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000066048 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntlanman.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000051712 _____ (Microsoft Corporation) C:\Windows\system32\MdmDiagnosticsTool.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000049664 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\perfproc.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000039736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WppRecorder.sys
2019-05-10 00:59 - 2019-05-10 00:59 - 000035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\sxssrv.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\RpcPing.exe
2019-05-10 00:59 - 2019-05-10 00:59 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmintegrator.dll
2019-05-10 00:59 - 2019-05-10 00:59 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcPing.exe
2019-05-10 00:58 - 2019-05-10 00:58 - 017513472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 005296640 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 004997096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 004866560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AI.MachineLearning.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 003334496 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 002995712 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 002842624 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 002592816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 002042368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 002022304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 002017792 _____ C:\Windows\system32\rdpnano.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001892864 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001856000 ____R (The ICU Project) C:\Windows\system32\icuin.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001844448 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001768960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001672704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001616384 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001567232 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001496576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001259320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 001219640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryPS.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001213752 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001191728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001053192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 001035776 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001022616 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 001007616 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000999424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000984888 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2019-05-10 00:58 - 2019-05-10 00:58 - 000982880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000974352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000877056 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000871792 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000865784 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000855040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000850760 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000822272 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2019-05-10 00:58 - 2019-05-10 00:58 - 000807424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000806600 _____ C:\Windows\SysWOW64\locale.nls
2019-05-10 00:58 - 2019-05-10 00:58 - 000806600 _____ C:\Windows\system32\locale.nls
2019-05-10 00:58 - 2019-05-10 00:58 - 000799568 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000793832 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000773120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000766480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000761280 _____ (Microsoft Corporation) C:\Windows\system32\pkeyhelper.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000756736 _____ (Microsoft Corporation) C:\Windows\system32\DolbyHrtfEnc.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000679424 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000676256 _____ (Microsoft Corporation) C:\Windows\system32\StateRepository.Core.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000675096 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000651792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000651576 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2019-05-10 00:58 - 2019-05-10 00:58 - 000607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000604008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000580024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000556544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000551936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000540672 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2019-05-10 00:58 - 2019-05-10 00:58 - 000522752 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000513040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000508208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000506168 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000495616 _____ (Microsoft Corporation) C:\Windows\system32\DDDS.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000485192 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase_enclave.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000469504 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000463672 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000447488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000424960 _____ (Microsoft Corporation) C:\Windows\system32\SDDS.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000421392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000407504 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000404792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000392704 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000386872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000386360 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000385024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000384312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000368640 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000366592 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000346624 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000343984 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000306488 _____ (Microsoft Corporation) C:\Windows\system32\computestorage.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000300344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000300032 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000283032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtapi.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000281600 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000280592 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000264704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000263680 _____ (Microsoft Corporation) C:\Windows\system32\WiFiCloudStore.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000255128 _____ (Microsoft Corporation) C:\Windows\system32\SgrmBroker.exe
2019-05-10 00:58 - 2019-05-10 00:58 - 000244224 _____ (Microsoft Corporation) C:\Windows\system32\JpnServiceDS.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000234808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netvsc.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000195896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000183296 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000169784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spacebridge.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000161280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000159112 _____ (Microsoft Corporation) C:\Windows\system32\winquic.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000157496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000157200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000156984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winquic.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000143872 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000131384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\negoexts.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000111104 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2019-05-10 00:58 - 2019-05-10 00:58 - 000108032 _____ (Microsoft Corporation) C:\Windows\system32\drvsetup.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\negoexts.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000098664 _____ (Microsoft Corporation) C:\Windows\system32\mpr.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000097808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2019-05-10 00:58 - 2019-05-10 00:58 - 000095544 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000089336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpr.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\KdsCli.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\wcimage.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000035640 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2019-05-10 00:58 - 2019-05-10 00:58 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2019-05-10 00:58 - 2019-05-10 00:58 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2019-05-10 00:47 - 2019-05-16 11:36 - 000000000 ____D C:\Windows\system32\MRT
2019-05-10 00:46 - 2019-05-16 10:39 - 132445408 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-05-10 00:42 - 2019-05-10 00:41 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-05-10 00:39 - 2019-05-10 09:17 - 000000000 ____D C:\Users\Don\AppData\Local\PlaceholderTileLogoFolder
2019-05-10 00:12 - 2019-05-10 00:19 - 000001908 _____ C:\Windows\diagwrn.xml
2019-05-10 00:12 - 2019-05-10 00:19 - 000001908 _____ C:\Windows\diagerr.xml
2019-05-09 23:56 - 2019-05-09 23:56 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2019-05-09 23:44 - 2019-05-10 09:35 - 000000000 ____D C:\Users\Don\AppData\Local\D3DSCache
2019-05-09 21:54 - 2019-05-10 00:12 - 000000000 ____D C:\Windows\Panther
2019-05-09 21:50 - 2019-05-09 21:50 - 000000000 ____D C:\Users\Don\AppData\Local\Comms
2019-05-09 21:47 - 2019-05-11 23:08 - 000000000 ____D C:\Windows.old.000
2019-05-09 21:47 - 2019-05-10 01:12 - 000000000 ____D C:\ProgramData\Packages
2019-05-09 21:36 - 2019-05-09 21:36 - 000000000 ___HD C:\Users\Don\MicrosoftEdgeBackups
2019-05-09 21:35 - 2019-05-11 23:04 - 000000000 ____D C:\Windows.old
2019-05-09 21:34 - 2019-05-17 08:46 - 000000000 ___RD C:\Users\Don\OneDrive
2019-05-09 21:34 - 2019-05-12 23:26 - 000002862 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3151124813-3528671398-3086550368-1001
2019-05-09 21:33 - 2019-05-09 21:33 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-05-09 21:32 - 2019-05-10 08:18 - 000000000 ____D C:\Users\Don\AppData\Local\MicrosoftEdge
2019-05-09 21:32 - 2019-05-09 21:32 - 000001446 _____ C:\Users\Don\Desktop\Microsoft Edge.lnk
2019-05-09 21:31 - 2019-05-15 19:49 - 000000000 ____D C:\Users\Don\AppData\Local\Packages
2019-05-09 21:31 - 2019-05-10 09:43 - 000000000 ____D C:\Users\Don\AppData\Local\ConnectedDevicesPlatform
2019-05-09 21:31 - 2019-05-10 08:38 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-05-09 21:31 - 2019-05-10 01:13 - 000000000 ____D C:\Users\Don\AppData\Local\Publishers
2019-05-09 21:31 - 2019-05-09 21:31 - 000000000 ___RD C:\Users\Don\3D Objects
2019-05-09 21:31 - 2019-05-09 21:31 - 000000000 ____D C:\Users\Don\AppData\Roaming\Adobe
2019-05-09 21:31 - 2019-05-09 21:31 - 000000000 ____D C:\Users\Don\AppData\Local\VirtualStore
2019-05-09 21:28 - 2019-05-16 10:17 - 000000000 ____D C:\Users\Don
2019-05-09 21:28 - 2019-05-10 00:39 - 000002361 _____ C:\Users\Don\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-05-09 21:28 - 2019-05-09 21:28 - 000000020 ___SH C:\Users\Don\ntuser.ini
2019-05-09 21:14 - 2019-05-16 21:06 - 000840852 _____ C:\Windows\system32\PerfStringBackup.INI
2019-05-09 21:12 - 2019-03-12 00:31 - 002865152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2019-05-09 21:02 - 2019-05-09 21:02 - 000000000 ____D C:\ProgramData\USOShared
2019-05-09 21:00 - 2019-05-10 02:24 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-05-09 20:59 - 2019-05-17 08:45 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-05-09 20:59 - 2019-05-17 08:22 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-05-09 20:59 - 2019-05-16 21:03 - 000434488 _____ C:\Windows\system32\FNTCACHE.DAT
2019-05-09 20:59 - 2019-05-09 20:59 - 000000000 ____D C:\Windows\ServiceProfiles
2019-05-09 18:37 - 2019-05-09 18:37 - 000000000 ___HD C:\$Windows.~WS
2019-05-09 16:15 - 2018-12-20 12:43 - 002790905 _____ C:\Users\Don\Desktop\Official New PPT Template for COOEC Canada May 1 2018.pptx
2019-05-09 14:01 - 2019-05-09 14:01 - 000000000 ____D C:\My Backups
2019-05-09 13:20 - 2019-05-09 13:20 - 000000000 ____D C:\Windows10Upgrade
2019-05-08 14:20 - 2019-05-08 14:19 - 000111794 _____ C:\Users\Don\Desktop\9th Floor, floor plan.pdf

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-17 09:04 - 2019-04-05 19:01 - 000000000 ____D C:\FRST
2019-05-17 08:59 - 2018-09-15 01:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-05-17 08:21 - 2018-09-15 00:09 - 000524288 _____ C:\Windows\system32\config\BBI
2019-05-16 21:06 - 2018-09-15 01:31 - 000000000 ____D C:\Windows\INF
2019-05-16 21:01 - 2018-09-15 01:33 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2019-05-16 21:01 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\bcastdvr
2019-05-16 14:05 - 2018-09-15 01:23 - 000000000 ____D C:\Windows\CbsTemp
2019-05-16 12:13 - 2018-09-15 03:11 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2019-05-16 12:13 - 2018-09-15 03:11 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\TextInput
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\SysWOW64\oobe
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\SysWOW64\Dism
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\system32\oobe
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\system32\migwiz
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\system32\Macromed
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\ShellExperiences
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\ShellComponents
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\PolicyDefinitions
2019-05-16 12:13 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\Containers
2019-05-16 12:13 - 2018-09-15 00:09 - 000000000 ____D C:\Windows\system32\Sysprep
2019-05-16 12:13 - 2018-09-15 00:09 - 000000000 ____D C:\Windows\system32\Dism
2019-05-16 12:03 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\registration
2019-05-16 11:23 - 2018-09-15 01:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-05-16 11:23 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\AppReadiness
2019-05-16 11:16 - 2018-09-15 00:09 - 000000000 ____D C:\Windows\servicing
2019-05-16 10:54 - 2018-09-15 01:31 - 000000167 _____ C:\Windows\win.ini
2019-05-16 10:36 - 2018-09-15 01:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-05-16 10:31 - 2018-09-15 01:33 - 000000000 ____D C:\Program Files\Common Files\system
2019-05-16 10:23 - 2018-09-15 01:33 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-05-10 11:48 - 2015-01-20 01:30 - 000000000 ____D C:\temp
2019-05-10 11:35 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\system32\NDF
2019-05-10 08:20 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\appcompat
2019-05-10 02:24 - 2018-09-15 01:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-05-09 21:54 - 2018-09-15 01:31 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2019-05-09 21:47 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\ServiceState
2019-05-09 21:14 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2019-05-09 21:12 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\system32\spool
2019-05-09 21:12 - 2018-09-15 01:33 - 000000000 ____D C:\Windows\system32\FxsTmp
2019-05-09 21:02 - 2018-09-15 01:33 - 000000000 ___RD C:\Windows\PrintDialog
2019-05-09 21:02 - 2018-09-15 01:33 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2019-05-09 21:02 - 2018-09-15 01:33 - 000000000 ____D C:\ProgramData\USOPrivate
2019-05-09 21:01 - 2018-09-15 00:09 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-05-09 15:49 - 2016-05-07 17:21 - 000000000 ____D C:\ESD

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-05.2019
Ran by Don (17-05-2019 09:09:16)
Running from C:\Users\Don\Downloads
Windows 10 Home Version 1809 17763.503 (X64) (2019-05-10 03:12:28)
Boot Mode: Normal

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast SecureLine (HKLM\...\{2CD3C92F-EDC5-4B02-9B0A-9C1D37C58EF5}_is1) (Version: 5.2.438 - AVAST Software)
Chromium (HKLM-x32\...\{CC4D248D-9CCD-F50D-2D4D-858DFDCD560D}) (Version:  - )
D-Link DWA-130 (HKLM-x32\...\{09828F4D-CE2E-403A-8708-A02E53495F3D}) (Version: 1.00.00 - D-Link Computer Inc)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Global VPN Client (HKLM\...\{B53B8B37-83FF-45A1-9136-D41305CE554E}) (Version: 5.0.0.1010 - SonicWall)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.157 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
HP DeskJet 1110 series Basic Device Software (HKLM\...\{1FD07F90-C399-4FE8-B6B0-B7AABC2401FC}) (Version: 40.11.1124.17107 - HP Inc.)
HP DeskJet 1110 series Help (HKLM-x32\...\{9477806C-4CDB-4878-8B9D-800933878781}) (Version: 35.0.0 - Hewlett Packard)
HP Dropbox Plugin (HKLM-x32\...\{D12BC084-97D6-438A-AA7C-5962608D17A0}) (Version: 36.0.41.58587 - HP)
HP Google Drive Plugin (HKLM-x32\...\{BFA42100-DB54-467A-BB87-CF70732B4065}) (Version: 36.0.41.58587 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
Malwarebytes Anti-Ransomware version 0.9.18.807 (HKLM\...\{bebf7481-07c5-42f5-941e-2e9f78a76d56}_is1) (Version: 0.9.18.807 - Malwarebytes)
Microsoft Office Standard 2016 (HKLM\...\Office16.STANDARD) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\...\OneDriveSetup.exe) (Version: 19.062.0331.0006 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Office Tab (HKLM\...\{DE469D65-1DEB-4058-BF95-C642D733668D}_is1) (Version: 11.00 - Addin Technology Inc.)
Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Product Improvement Study for HP DeskJet 1110 series (HKLM\...\{1C2362F9-C6AA-4BF9-906B-934AD742DC7A}) (Version: 40.11.1124.17107 - HP Inc.)
RogueKiller version 13.2.0.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 13.2.0.0 - Adlice Software)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.7.6.0 - Azureus Software, Inc.)
Засоби перевірки правопису Microsoft Office 2016 – українська (HKLM\...\{90160000-001F-0422-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Средства проверки правописания Microsoft Office 2016 — русский (HKLM\...\{90160000-001F-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden

Packages:
=========
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.13.5.0_x86__kgqvnymyfvs32 [2019-05-16] (king.com)
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1501.2.0_x86__kgqvnymyfvs32 [2019-05-16] (king.com)
Xbox One SmartGlass -> C:\Program Files\WindowsApps\Microsoft.XboxOneSmartGlass_2.2.1702.2004_x64__8wekyb3d8bbwe [2019-05-16] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2019-05-10 09:32 - 2017-10-06 19:01 - 000106496 _____ () [File not signed] C:\Users\Don\AppData\Local\chromium\Application\63.0.3235.0\swiftshader\libegl.dll
2019-05-10 09:32 - 2017-10-06 19:01 - 001979904 _____ () [File not signed] C:\Users\Don\AppData\Local\chromium\Application\63.0.3235.0\swiftshader\libglesv2.dll
2019-05-16 23:53 - 2019-05-16 23:56 - 001677824 _____ (Igor Pavlov) [File not signed] C:\PROGRAM FILES\MALWAREBYTES\ANTI-RANSOMWARE\7z.dll
2019-05-10 09:32 - 2017-10-06 19:01 - 036970496 _____ (The Chromium Authors) [File not signed] C:\Users\Don\AppData\Local\chromium\Application\63.0.3235.0\chrome.dll
2019-05-10 09:32 - 2017-10-06 19:01 - 049748480 _____ (The Chromium Authors) [File not signed] C:\Users\Don\AppData\Local\chromium\Application\63.0.3235.0\chrome_child.dll
2019-05-10 09:32 - 2017-10-06 19:01 - 000427520 _____ (The Chromium Authors) [File not signed] C:\Users\Don\AppData\Local\chromium\Application\63.0.3235.0\chrome_elf.dll
2019-05-10 09:32 - 2017-10-06 19:01 - 004195328 _____ (The Chromium Authors) [File not signed] C:\Users\Don\AppData\Local\chromium\Application\chrome.exe
2019-05-10 17:31 - 2018-09-05 22:32 - 002095104 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\AVAST Software\SecureLine\libcrypto-1_1.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000030208 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\iconengines\qsvgicon.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000038912 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qdds.dll
2019-05-16 23:53 - 2017-06-23 09:44 - 000024576 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qgif.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000031232 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qicns.dll
2019-05-16 23:53 - 2017-06-23 09:44 - 000025088 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qico.dll
2019-05-16 23:53 - 2017-06-23 09:44 - 000242176 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qjpeg.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000019968 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qsvg.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000018944 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qtga.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000318976 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qtiff.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000017920 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qwbmp.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000328704 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\imageformats\qwebp.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000992768 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\platforms\qwindows.dll
2019-05-16 23:53 - 2017-06-23 09:51 - 000044032 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\Qt\labs\folderlistmodel\qmlfolderlistmodelplugin.dll
2019-05-16 23:53 - 2017-06-23 09:51 - 000022528 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\Qt\labs\settings\qmlsettingsplugin.dll
2019-05-16 23:53 - 2017-07-14 12:07 - 004793344 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\Qt5Core.dll
2019-05-16 23:53 - 2017-06-23 09:41 - 005093888 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\Qt5Gui.dll
2019-05-16 23:53 - 2017-06-23 09:39 - 000672768 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\Qt5Network.dll
2019-05-16 23:53 - 2017-06-23 09:47 - 002514432 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\Qt5Qml.dll
2019-05-16 23:53 - 2017-06-23 09:49 - 002567168 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\Qt5Quick.dll
2019-05-16 23:53 - 2017-06-23 09:45 - 000247808 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\Qt5Svg.dll
2019-05-16 23:53 - 2017-06-23 09:43 - 004480512 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\Qt5Widgets.dll
2019-05-16 23:53 - 2017-06-23 09:51 - 000013312 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\QtQml\Models.2\modelsplugin.dll
2019-05-16 23:53 - 2017-06-23 09:51 - 000013312 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\QtQuick.2\qtquick2plugin.dll
2019-05-16 23:53 - 2017-06-23 09:57 - 000697344 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-05-16 23:53 - 2017-06-23 09:56 - 000172544 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\QtQuick\Dialogs\dialogplugin.dll
2019-05-16 23:53 - 2017-06-23 09:55 - 000035328 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\QtQuick\Dialogs\Private\dialogsprivateplugin.dll
2019-05-16 23:53 - 2017-06-23 09:55 - 000069632 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-05-16 23:53 - 2017-06-23 09:51 - 000013312 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\QtQuick\Window.2\windowplugin.dll
2019-05-16 23:53 - 2017-06-23 09:57 - 000104960 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Malwarebytes\Anti-Ransomware\scenegraph\softwarecontext.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:58A5270D [376]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MB3Service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MB3Service => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 01:31 - 2019-05-10 21:33 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3151124813-3528671398-3086550368-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Don\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
DNS Servers: 192.168.1.254 - 75.153.171.114
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{FE5F192C-E0B8-4D0C-9099-176250BC1448}] => (Allow) C:\Users\Don\AppData\Local\Chromium\Application\chrome.exe (The Chromium Authors) [File not signed]
FirewallRules: [TCP Query User{BF06C87E-D053-480B-865B-36DDA62E9A10}C:\program files\sonicwall\global vpn client\swgvc.exe] => (Allow) C:\program files\sonicwall\global vpn client\swgvc.exe (SonicWall Inc. -> SonicWall)
FirewallRules: [UDP Query User{98C61F0B-739E-44AC-9A53-74E19AB06C0F}C:\program files\sonicwall\global vpn client\swgvc.exe] => (Allow) C:\program files\sonicwall\global vpn client\swgvc.exe (SonicWall Inc. -> SonicWall)
FirewallRules: [{A1BC8B64-20E7-4B23-9D06-6624EA7E5EE5}] => (Allow) C:\Program Files\HP\HP DeskJet 1110 series\Bin\USBSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{4B35405D-B8AE-49B7-AF6C-3E0EA0EF8D6E}] => (Allow) C:\Program Files\HP\HP DeskJet 1110 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{19484D0B-0004-43A6-8C3D-D1567D4545E6}] => (Allow) C:\Program Files\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [{477745A5-D231-4F27-AC68-80EF5C1950DA}] => (Allow) C:\Program Files\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [{599AF46B-DF3C-4C2E-80D4-7DA395624D39}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Restore Points =========================

10-05-2019 00:37:40 Windows Update
13-05-2019 11:43:53 Installed Microsoft Office Standard 2016
13-05-2019 11:44:29 STANDARD
15-05-2019 11:15:30 Installed Microsoft Office Standard 2016
15-05-2019 11:18:00 STANDARD

==================== Faulty Device Manager Devices =============

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: SonicWall GVC Adapter
Description: SonicWall GVC Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: SonicWall Inc.
Service: SWVNIC
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/17/2019 12:13:57 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program WinStore.App.exe version 11904.1001.1.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 222c

Start Time: 01d50c776c1b5eee

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\Microsoft.WindowsStore_11904.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe

Report Id: 0b0aea37-3f4c-430d-b624-a8a3f4f2217d

Faulting package full name: Microsoft.WindowsStore_11904.1001.1.0_x64__8wekyb3d8bbwe

Faulting package-relative application ID: App

Hang type: Activation

Error: (05/16/2019 09:09:02 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: User hive is loaded by another process (Registry Lock) Process name: C:\Program Files\AVAST Software\Avast\AvastSvc.exe, PID: 2532, ProfSvc PID: 1364.

Error: (05/16/2019 10:46:45 AM) (Source: MsiInstaller) (EventID: 1024) (User: DESKTOP-EUU5D56)
Description: Product: Microsoft Office 32-bit Components 2016 - Update '{D57DBD71-B426-45C4-9B1D-6347DE27B73D}' could not be installed. Error code 1642. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (05/16/2019 10:35:23 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: The Cryptographic Services service failed to initialize the Catalog Database. The ESENT error was: -1216.

Error: (05/16/2019 10:35:23 AM) (Source: ESENT) (EventID: 454) (User: )
Description: Catalog Database (3652,U,98) Catalog Database: Database recovery/restore failed with unexpected error -1216.

Error: (05/16/2019 10:35:23 AM) (Source: ESENT) (EventID: 494) (User: )
Description: Catalog Database (3652,U,98) Catalog Database: Database recovery failed with error -1216 because it encountered references to a database, 'C:\Windows\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb', which is no longer present. The database was not brought to a Clean Shutdown state before it was removed (or possibly moved or renamed). The database engine will not permit recovery to complete for this instance until the missing database is re-instated. If the database is truly no longer available and no longer required, procedures for recovering from this error are available in the Microsoft Knowledge Base or by following the "more information" link at the bottom of this message.

Error: (05/16/2019 10:24:02 AM) (Source: MsiInstaller) (EventID: 1041) (User: NT AUTHORITY)
Description: Failed to begin a Windows Installer transaction C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleUpdateHelper.msi. Error 1618 occurred while beginning the transaction.

Error: (05/16/2019 10:16:24 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3660,R,98) SRUJet: Error -1811 (0xfffff8ed) occurred while opening logfile C:\Windows\system32\SRU\SRU00002.log.


System errors:
=============
Error: (05/17/2019 09:05:48 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EUU5D56)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user DESKTOP-EUU5D56\Don SID (S-1-5-21-3151124813-3528671398-3086550368-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/17/2019 09:05:41 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EUU5D56)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user DESKTOP-EUU5D56\Don SID (S-1-5-21-3151124813-3528671398-3086550368-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/17/2019 08:55:03 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EUU5D56)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user DESKTOP-EUU5D56\Don SID (S-1-5-21-3151124813-3528671398-3086550368-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/17/2019 08:54:59 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EUU5D56)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user DESKTOP-EUU5D56\Don SID (S-1-5-21-3151124813-3528671398-3086550368-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/17/2019 08:46:18 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EUU5D56)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user DESKTOP-EUU5D56\Don SID (S-1-5-21-3151124813-3528671398-3086550368-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/17/2019 08:46:17 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EUU5D56)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user DESKTOP-EUU5D56\Don SID (S-1-5-21-3151124813-3528671398-3086550368-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/17/2019 08:24:42 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/17/2019 08:04:31 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EUU5D56)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user DESKTOP-EUU5D56\Don SID (S-1-5-21-3151124813-3528671398-3086550368-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.


Windows Defender:
===================================
Date: 2019-05-17 09:06:48.611
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Vagger!rfn&threatid=2147723591&enterprise=0
Name: Trojan:Win32/Vagger!rfn
ID: 2147723591
Severity: Severe
Category: Trojan
Path: file:_C:\Windows\AAct.exe; file:_C:\Windows\System32\Tasks\AAct->(UTF-16LE); regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E470ECCA-D7DA-4674-9147-6C020BB7ECEB}; regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AAct; taskscheduler:_C:\Windows\System32\Tasks\AAct
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Users\Don\Downloads\FRST64 (1).exe
Signature Version: AV: 1.293.1797.0, AS: 1.293.1797.0, NIS: 1.293.1797.0
Engine Version: AM: 1.1.15900.4, NIS: 1.1.15900.4

Date: 2019-05-17 09:04:55.086
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Vagger!rfn&threatid=2147723591&enterprise=0
Name: Trojan:Win32/Vagger!rfn
ID: 2147723591
Severity: Severe
Category: Trojan
Path: file:_C:\Windows\AAct.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Users\Don\Downloads\FRST64 (1).exe
Signature Version: AV: 1.293.1797.0, AS: 1.293.1797.0, NIS: 1.293.1797.0
Engine Version: AM: 1.1.15900.4, NIS: 1.1.15900.4

Date: 2019-05-16 11:45:04.656
Description: 
Windows Defender Antivirus has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted: Current
Error Code: 0x80070003
Error description: The system cannot find the path specified. 
Signature version: 0.0.0.0;0.0.0.0
Engine version: 0.0.0.0

Date: 2019-05-15 11:06:24.646
Description: 
Windows Defender Antivirus has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted: Current
Error Code: 0x80070003
Error description: The system cannot find the path specified. 
Signature version: 0.0.0.0;0.0.0.0
Engine version: 0.0.0.0

Date: 2019-05-10 00:46:51.064
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.293.1264.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.15900.4
Error code: 0x80240016
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 

Date: 2019-05-10 00:19:06.997
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.273.933.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.15100.1
Error code: 0x80072ee7
Error description: The server name or address could not be resolved 

Date: 2019-05-10 00:19:06.997
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.273.933.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiSpyware
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.15100.1
Error code: 0x80072ee7
Error description: The server name or address could not be resolved 

CodeIntegrity:
===================================

Date: 2019-05-17 00:17:33.308
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-05-17 00:17:33.305
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-05-17 00:17:33.285
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-05-17 00:17:33.282
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-05-16 21:03:10.443
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-05-16 10:23:56.420
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-05-16 10:23:56.417
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-05-16 10:23:56.386
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info =========================== 

BIOS: American Megatrends Inc. 0501 08/20/2010
Motherboard: ASUSTeK Computer INC. P5KPL-AM EPU
Processor: Pentium(R) Dual-Core CPU E6600 @ 3.06GHz
Percentage of memory in use: 65%
Total physical RAM: 4086.18 MB
Available physical RAM: 1404.04 MB
Total Virtual: 4790.18 MB
Available Virtual: 1808.22 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.92 GB) (Free:685.48 GB) NTFS
Drive e: (WD Unlocker) (CDROM) (Total:0.01 GB) (Free:0 GB) UDF

\\?\Volume{73d20f68-0000-0000-0000-100000000000}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{73d20f68-0000-0000-0000-80c1e8000000}\ () (Fixed) (Total:0.49 GB) (Free:0.17 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 73D20F68)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=500 MB) - (Type=27)
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 1.

==================== End of Addition.txt ============================

Share this post


Link to post
Share on other sites

I'm not sure if this topic belongs to this forum because we don't have any malware related issues here.

However what bother me is this line:

Task: {E470ECCA-D7DA-4674-9147-6C020BB7ECEB} - System32\Tasks\AAct => C:\Windows\AAct.exe [970568 2017-09-13] () [File not signed]

AAct.exe file is a part of KMS Activator, which makes illegal copy of Windows legit.

You said that you performed clean installation of Windows , so maybe you can explain to me what is the above file doing on your computer.

Share this post


Link to post
Share on other sites

I had bought the computer with windows on it. All I did was reinstalled it using the id number from the windows sticker on my computer.The windows OS came from Microsoft, as that is where I downloaded it from - so you tell me. 

Should I reinstall it? WTF, you have me confused now.

D

Share this post


Link to post
Share on other sites

Was it used computer or brand new one?

 

Share this post


Link to post
Share on other sites

I have been using this computer for 3-4 years now, I bought it brand new. Never had an issue with this. let me know your thoughts please. If I downloaded it off of Microsoft site, how could it be not genuine. I checked last night and It does say it is not a genuine copy.

Weird.

 

D

Share this post


Link to post
Share on other sites

Yes, it's strange.

I'd redo a whole clean installation.

Share this post


Link to post
Share on other sites

Sorry Broni, It says that it is a genuine copy. Anyways, i will do as you say and reinstall everything again. Just a pain in the butt .

 

thanks,

 

best,

 

D

 

Share this post


Link to post
Share on other sites

Hi Broni,

 

All done, now I am back to windows 7 without the availability for the free windows 10 download among many other things. When you work from your computer at home as a living and half to clean install windows you can't imagine the hardship this has created.

Best,

Don

Share this post


Link to post
Share on other sites

Work stuff that took me hours and hours to get back up and running. Scanner, printer, 187 downloads, ect.. you know what i mean. 

Thanks for the link Broni, you da man.

 

Best,

 

Don

Share this post


Link to post
Share on other sites

At the very end it said is wasn't able to complete the installation, then it took me back to my old windows.

D

Share this post


Link to post
Share on other sites

It took some time to complete, should I try it again?

D

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...