OTL logfile created on: 02.04.2020 21:29:22 - Run 1 OTL by OldTimer - Version 3.2.70.2 Folder = B:\Program Files 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.18362.0) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy 7,87 Gb Total Physical Memory | 5,39 Gb Available Physical Memory | 68,44% Memory free 9,12 Gb Paging File | 6,77 Gb Available in Paging File | 74,26% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 194,42 Gb Total Space | 92,60 Gb Free Space | 47,63% Space Free | Partition Type: NTFS Computer Name: DESKTOP-ERJTRE0 | User Name: Przemek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - File not found -- PRC - [2020.04.02 21:27:13 | 000,601,088 | ---- | M] (OldTimer Tools) -- B:\Program Files\otl-3-2-70-2.exe PRC - [2020.04.02 21:26:00 | 003,236,176 | ---- | M] (Sisaref ) -- C:\Users\Przemek\Downloads\otl-3-2-70-2-ks_2668162146.exe PRC - [2020.03.21 09:18:24 | 000,295,368 | ---- | M] (Google LLC) -- C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe PRC - [2020.03.20 09:09:07 | 001,579,368 | ---- | M] (Microsoft Corporation) -- C:\Users\Przemek\AppData\Local\Microsoft\OneDrive\OneDrive.exe PRC - [2020.03.11 18:13:46 | 002,417,528 | ---- | M] (Wargaming.net) -- B:\ProgramData\Wargaming.net\GameCenter\wgc.exe PRC - [2020.03.11 18:13:43 | 002,513,784 | ---- | M] (Wargaming.net) -- B:\ProgramData\Wargaming.net\GameCenter\WargamingErrorMonitor.exe PRC - [2020.03.11 18:13:34 | 001,296,248 | ---- | M] (Wargaming.net) -- B:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer.exe PRC - [2019.12.14 16:12:23 | 000,673,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fontdrvhost.exe PRC - [2019.04.24 12:27:26 | 003,991,304 | ---- | M] (Malwarebytes) -- C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe PRC - [2019.04.02 12:28:24 | 000,268,624 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Users\Przemek\AppData\Local\Temp\in2A6C8B5A\7F41DAAA_stp\cookie_mmm_irs_ppi_902_451_o.exe PRC - [2018.12.16 20:29:48 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2018.01.12 06:24:36 | 011,397,488 | ---- | M] (AnVir Software) -- C:\Program Files (x86)\AnVir Task Manager Free\anvir.exe PRC - [2017.12.04 21:19:59 | 000,462,920 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe PRC - [2017.04.01 05:27:00 | 000,427,064 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe PRC - [2016.02.28 17:25:18 | 000,121,160 | ---- | M] (AnVir Software) -- C:\Program Files (x86)\AnVir Task Manager Free\anvirlauncher.exe PRC - [2014.09.28 21:58:18 | 000,323,584 | ---- | M] (Atheros) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe PRC - [2014.06.23 19:33:30 | 000,209,720 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe PRC - [2014.05.26 09:47:22 | 000,303,928 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe PRC - [2014.05.15 15:23:42 | 000,406,328 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe PRC - [2014.03.26 15:24:44 | 000,115,512 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe PRC - [2011.11.21 14:19:50 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2020.03.11 18:13:31 | 025,678,872 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\icudt57.dll MOD - [2020.03.11 18:13:28 | 004,441,112 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\Qt5Widgets.dll MOD - [2020.03.11 18:13:28 | 000,160,280 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\Qt5Xml.dll MOD - [2020.03.11 18:13:16 | 000,262,680 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\Qt5Svg.dll MOD - [2020.03.11 18:13:16 | 000,094,232 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\Qt5WebChannel.dll MOD - [2020.03.11 18:13:15 | 002,518,552 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\Qt5Qml.dll MOD - [2020.03.11 18:13:14 | 000,831,000 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\Qt5Network.dll MOD - [2020.03.11 18:13:13 | 012,783,480 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\game_center.dll MOD - [2020.03.11 18:13:05 | 004,177,432 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\Qt5Core.dll MOD - [2020.03.11 18:13:05 | 003,670,040 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\Qt5Gui.dll MOD - [2020.03.11 18:13:00 | 001,821,208 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\icuin57.dll MOD - [2020.03.11 18:13:00 | 001,242,648 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\icuuc57.dll MOD - [2019.12.19 19:24:18 | 000,083,784 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\VCRUNTIME140.dll MOD - [2019.12.19 19:24:17 | 000,290,168 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\SSLEAY32.dll MOD - [2019.12.19 19:24:10 | 001,279,864 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\LIBEAY32.dll MOD - [2019.12.19 19:24:10 | 000,440,120 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\MSVCP140.dll MOD - [2019.12.19 19:24:10 | 000,317,496 | ---- | M] () -- B:\ProgramData\Wargaming.net\GameCenter\dlls\libegl.dll MOD - [2019.12.19 19:24:09 | 000,906,296 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\chrome_elf.dll MOD - [2019.12.19 19:24:06 | 098,851,896 | ---- | M] () -- B:\ProgramData\Wargaming.net\GameCenter\dlls\libcef.dll MOD - [2019.12.19 19:24:06 | 098,851,896 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\libcef.dll MOD - [2019.12.19 19:24:02 | 006,618,680 | ---- | M] () -- B:\ProgramData\Wargaming.net\GameCenter\dlls\libglesv2.dll MOD - [2019.12.19 19:24:02 | 006,618,680 | ---- | M] () -- \\?\B:\ProgramData\Wargaming.net\GameCenter\dlls\libGLESv2.dll MOD - [2019.03.19 06:45:16 | 000,046,656 | ---- | M] () -- C:\Windows\SysWOW64\umpdc.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2020.04.02 21:29:40 | 000,345,960 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\Antivirus\AVGSvc.exe -- (AVG Antivirus) SRV:[b]64bit:[/b] - [2020.04.02 21:29:33 | 005,552,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [On_Demand | Stopped] -- C:\Program Files\AVG\Antivirus\aswidsagent.exe -- (avgbIDSAgent) SRV:[b]64bit:[/b] - [2020.03.13 12:15:36 | 002,180,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:[b]64bit:[/b] - [2020.03.13 12:14:58 | 001,190,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Microsoft.Graphics.Display.DisplayEnhancementService.dll -- (DisplayEnhancementService) SRV:[b]64bit:[/b] - [2020.03.13 12:14:58 | 000,358,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dusmsvc.dll -- (DusmSvc) SRV:[b]64bit:[/b] - [2020.03.13 12:14:23 | 000,613,888 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2020.03.13 12:14:18 | 000,921,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc) SRV:[b]64bit:[/b] - [2020.03.13 12:14:01 | 000,929,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SecurityHealthService.exe -- (SecurityHealthService) SRV:[b]64bit:[/b] - [2020.03.13 12:13:58 | 000,097,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service) SRV:[b]64bit:[/b] - [2020.03.13 12:13:53 | 003,799,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack) SRV:[b]64bit:[/b] - [2020.03.13 12:13:33 | 000,535,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usosvc.dll -- (UsoSvc) SRV:[b]64bit:[/b] - [2020.03.13 12:13:30 | 000,263,168 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService) SRV:[b]64bit:[/b] - [2020.03.13 12:13:28 | 002,453,504 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\InstallService.dll -- (InstallService) SRV:[b]64bit:[/b] - [2020.03.13 12:13:14 | 001,027,000 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC) SRV:[b]64bit:[/b] - [2020.03.13 12:13:13 | 002,157,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2020.03.13 12:13:11 | 003,708,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:[b]64bit:[/b] - [2020.03.13 12:13:02 | 001,057,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2020.03.13 12:12:56 | 000,878,080 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Management.Service.dll -- (WManSvc) SRV:[b]64bit:[/b] - [2020.03.13 12:12:50 | 005,929,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe -- (Sense) SRV:[b]64bit:[/b] - [2020.02.16 10:24:52 | 000,828,216 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AppVClient.exe -- (AppVClient) SRV:[b]64bit:[/b] - [2020.02.16 10:24:26 | 000,749,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer) SRV:[b]64bit:[/b] - [2020.02.16 10:23:49 | 000,407,040 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\DispBroker.Desktop.dll -- (DispBrokerDesktopSvc) SRV:[b]64bit:[/b] - [2020.02.16 10:22:24 | 000,864,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2020.02.16 10:21:55 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2020.02.16 10:21:10 | 000,355,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WaaSMedicSvc.dll -- (WaaSMedicSvc) SRV:[b]64bit:[/b] - [2020.02.16 10:20:58 | 001,602,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc) SRV:[b]64bit:[/b] - [2020.02.16 10:20:39 | 000,157,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc) SRV:[b]64bit:[/b] - [2020.02.16 10:20:38 | 000,646,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc) SRV:[b]64bit:[/b] - [2020.02.16 10:20:24 | 000,735,744 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2020.02.16 10:20:21 | 000,184,832 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\AarSvc.dll -- (AarSvc) SRV:[b]64bit:[/b] - [2020.01.17 01:02:00 | 000,083,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2019.12.14 16:11:49 | 000,034,816 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker) SRV:[b]64bit:[/b] - [2019.11.13 21:15:25 | 001,185,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AgentService.exe -- (UevAgentService) SRV:[b]64bit:[/b] - [2019.11.13 21:15:06 | 000,214,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvc.dll -- (diagsvc) SRV:[b]64bit:[/b] - [2019.11.13 21:14:43 | 000,061,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost) SRV:[b]64bit:[/b] - [2019.11.13 21:14:15 | 000,157,184 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc) SRV:[b]64bit:[/b] - [2019.11.13 21:13:38 | 000,649,728 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\DevicesFlowBroker.dll -- (DevicesFlowUserSvc) SRV:[b]64bit:[/b] - [2019.11.13 21:13:14 | 000,524,800 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc) SRV:[b]64bit:[/b] - [2019.11.13 21:13:05 | 002,120,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WpcDesktopMonSvc.dll -- (WpcMonSvc) SRV:[b]64bit:[/b] - [2019.11.13 21:13:02 | 000,534,528 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Microsoft.Bluetooth.UserService.dll -- (BluetoothUserService) SRV:[b]64bit:[/b] - [2019.11.13 21:13:01 | 001,070,080 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\BTAGService.dll -- (BTAGService) SRV:[b]64bit:[/b] - [2019.10.15 00:15:12 | 000,742,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo) SRV:[b]64bit:[/b] - [2019.10.15 00:14:51 | 000,960,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\assignedaccessmanagersvc.dll -- (AssignedAccessManagerSvc) SRV:[b]64bit:[/b] - [2019.10.15 00:14:09 | 000,599,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter) SRV:[b]64bit:[/b] - [2019.10.15 00:12:28 | 000,275,968 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2019.10.15 00:12:13 | 000,236,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc) SRV:[b]64bit:[/b] - [2019.09.12 14:40:39 | 001,122,816 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\CBDHSvc.dll -- (cbdhsvc) SRV:[b]64bit:[/b] - [2019.09.12 14:39:34 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2019.09.12 14:37:58 | 001,158,656 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc) SRV:[b]64bit:[/b] - [2019.09.12 14:36:38 | 000,810,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc) SRV:[b]64bit:[/b] - [2019.09.12 14:36:04 | 000,893,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc) SRV:[b]64bit:[/b] - [2019.08.16 10:38:26 | 000,236,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\psmsrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2019.08.16 10:37:35 | 000,957,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc) SRV:[b]64bit:[/b] - [2019.08.16 10:37:32 | 000,096,768 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate) SRV:[b]64bit:[/b] - [2019.08.16 10:37:30 | 001,497,088 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TokenBroker.dll -- (TokenBroker) SRV:[b]64bit:[/b] - [2019.07.20 13:11:39 | 000,986,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Spectrum.exe -- (spectrum) SRV:[b]64bit:[/b] - [2019.07.20 13:11:39 | 000,472,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SharedRealitySvc.dll -- (SharedRealitySvc) SRV:[b]64bit:[/b] - [2019.07.20 13:07:05 | 000,344,576 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\CapabilityAccessManager.dll -- (camsvc) SRV:[b]64bit:[/b] - [2019.07.20 13:06:03 | 003,548,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2019.03.19 08:23:12 | 000,198,656 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2019.03.19 08:21:51 | 000,384,512 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysNative\OpenSSH\ssh-agent.exe -- (ssh-agent) SRV:[b]64bit:[/b] - [2019.03.19 06:46:39 | 000,683,008 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:[b]64bit:[/b] - [2019.03.19 06:46:39 | 000,465,920 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Windows.Devices.Picker.dll -- (DevicePickerUserSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:46:39 | 000,430,592 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService) SRV:[b]64bit:[/b] - [2019.03.19 06:45:56 | 000,089,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:[b]64bit:[/b] - [2019.03.19 06:45:54 | 000,311,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2019.03.19 06:45:54 | 000,311,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2019.03.19 06:45:54 | 000,302,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession) SRV:[b]64bit:[/b] - [2019.03.19 06:45:54 | 000,302,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2019.03.19 06:45:54 | 000,302,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2019.03.19 06:45:54 | 000,302,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2019.03.19 06:45:54 | 000,302,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2019.03.19 06:45:54 | 000,302,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:[b]64bit:[/b] - [2019.03.19 06:45:54 | 000,120,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2019.03.19 06:45:53 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2019.03.19 06:45:50 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService) SRV:[b]64bit:[/b] - [2019.03.19 06:45:38 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:[b]64bit:[/b] - [2019.03.19 06:45:35 | 000,033,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:[b]64bit:[/b] - [2019.03.19 06:45:34 | 000,177,152 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\ConsentUxClient.dll -- (ConsentUxUserSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:45:34 | 000,103,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PerceptionSimulation\PerceptionSimulationService.exe -- (perceptionsimulation) SRV:[b]64bit:[/b] - [2019.03.19 06:45:32 | 001,392,640 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\bcastdvruserservice.dll -- (BcastDVRUserService) SRV:[b]64bit:[/b] - [2019.03.19 06:45:32 | 001,268,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:45:32 | 000,263,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SgrmBroker.exe -- (SgrmBroker) SRV:[b]64bit:[/b] - [2019.03.19 06:45:32 | 000,116,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\autotimesvc.dll -- (autotimesvc) SRV:[b]64bit:[/b] - [2019.03.19 06:45:04 | 001,264,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService) SRV:[b]64bit:[/b] - [2019.03.19 06:45:00 | 000,178,688 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PrintWorkflowService.dll -- (PrintWorkflowUserSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:47 | 000,079,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2019.03.19 06:44:47 | 000,058,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice) SRV:[b]64bit:[/b] - [2019.03.19 06:44:38 | 001,282,048 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager) SRV:[b]64bit:[/b] - [2019.03.19 06:44:36 | 000,336,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,676,864 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PrintWorkflowUserSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicesFlowUserSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicePickerUserSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DeviceAssociationBrokerSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (ConsentUxUserSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (cbdhsvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (CaptureService_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BluetoothUserService_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BcastDVRUserService_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:33 | 000,053,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (AarSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:44:30 | 000,859,632 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar) SRV:[b]64bit:[/b] - [2019.03.19 06:44:30 | 000,200,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:[b]64bit:[/b] - [2019.03.19 06:44:30 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\CaptureService.dll -- (CaptureService) SRV:[b]64bit:[/b] - [2019.03.19 06:44:23 | 000,239,104 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,521,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,487,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService) SRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,482,816 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2019.03.19 06:44:15 | 005,244,200 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository) SRV:[b]64bit:[/b] - [2019.03.19 06:44:15 | 001,536,512 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:15 | 000,374,784 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:[b]64bit:[/b] - [2019.03.19 06:44:15 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PushToInstall.dll -- (PushToInstall) SRV:[b]64bit:[/b] - [2019.03.19 06:44:15 | 000,190,464 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:15 | 000,082,432 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService) SRV:[b]64bit:[/b] - [2019.03.19 06:44:15 | 000,050,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager) SRV:[b]64bit:[/b] - [2019.03.19 06:44:15 | 000,047,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:12 | 000,092,160 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker) SRV:[b]64bit:[/b] - [2019.03.19 06:44:11 | 000,097,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GraphicsPerfSvc.dll -- (GraphicsPerfSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:11 | 000,061,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.WARP.JITService.dll -- (WarpJITSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:09 | 001,270,784 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SEMgrSvc.dll -- (SEMgrSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:06 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:06 | 000,231,912 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\deviceaccess.dll -- (DeviceAssociationBrokerSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:04 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter) SRV:[b]64bit:[/b] - [2019.03.19 06:44:03 | 000,265,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:44:03 | 000,172,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode) SRV:[b]64bit:[/b] - [2019.03.19 06:44:01 | 000,172,032 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:57 | 000,380,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\CredentialEnrollmentManager.exe -- (CredentialEnrollmentManagerUserSvc_86ac4) SRV:[b]64bit:[/b] - [2019.03.19 06:43:57 | 000,380,120 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\CredentialEnrollmentManager.exe -- (CredentialEnrollmentManagerUserSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:55 | 000,740,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WFDSConMgrSvc.dll -- (WFDSConMgrSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:53 | 000,831,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NaturalAuth.dll -- (NaturalAuthentication) SRV:[b]64bit:[/b] - [2019.03.19 06:43:49 | 000,064,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ipxlatcfg.dll -- (IpxlatCfgSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:47 | 001,063,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager) SRV:[b]64bit:[/b] - [2019.03.19 06:43:47 | 000,422,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vac.dll -- (VacSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 001,390,080 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lpasvc.dll -- (wlpasvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 001,263,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave) SRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 000,943,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 000,394,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\MitigationClient.dll -- (TroubleshootingSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 000,382,976 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\BthAvctpSvc.dll -- (BthAvctpSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 000,317,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LanguageOverlayServer.dll -- (LxpSvc) SRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService) SRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 000,072,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xboxgipsvc.dll -- (XboxGipSvc) SRV:[b]64bit:[/b] - [2019.03.18 17:11:00 | 000,351,744 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc) SRV:[b]64bit:[/b] - [2019.02.01 12:19:44 | 006,562,472 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe -- (MBAMService) SRV:[b]64bit:[/b] - [2019.01.30 23:44:54 | 000,415,992 | ---- | M] (Windows (R) Win 7 DDK provider) [Auto | Running] -- C:\Windows\SysNative\drivers\AdminService.exe -- (AtherosSvc) SRV:[b]64bit:[/b] - [2017.12.04 21:19:59 | 000,462,920 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -- (NVDisplay.ContainerLocalSystem) SRV:[b]64bit:[/b] - [2017.10.16 14:15:00 | 007,677,008 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysNative\GameMon.des -- (npggsvc) SRV:[b]64bit:[/b] - [2017.07.03 12:07:36 | 002,289,856 | ---- | M] (Disc Soft Ltd) [On_Demand | Stopped] -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe -- (Disc Soft Lite Bus Service) SRV:[b]64bit:[/b] - [2017.04.28 21:06:20 | 000,373,728 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService2.0.0.0) SRV:[b]64bit:[/b] - [2017.04.01 05:27:00 | 000,464,440 | ---- | M] (NVIDIA Corporation) [On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerNetworkService) SRV:[b]64bit:[/b] - [2017.04.01 05:27:00 | 000,464,440 | ---- | M] (NVIDIA Corporation) [On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerLocalSystem) SRV - [2020.03.26 09:55:28 | 003,294,680 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\NisSrv.exe -- (WdNisSvc) SRV - [2020.03.26 09:55:28 | 000,103,168 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\MsMpEng.exe -- (WinDefend) SRV - [2020.03.16 21:41:35 | 001,113,072 | ---- | M] (Google LLC) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.149\elevation_service.exe -- (GoogleChromeElevationService) SRV - [2020.03.13 12:14:47 | 000,646,656 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc) SRV - [2020.03.13 12:14:40 | 001,729,024 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\InstallService.dll -- (InstallService) SRV - [2020.01.22 17:35:56 | 006,617,160 | ---- | M] (GOG.com) [On_Demand | Stopped] -- C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe -- (GalaxyCommunication) SRV - [2020.01.22 17:35:56 | 001,582,664 | ---- | M] (GOG.com) [On_Demand | Stopped] -- B:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe -- (GalaxyClientService) SRV - [2019.12.16 19:00:36 | 001,719,248 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2019.11.19 16:13:48 | 003,344,176 | ---- | M] (Electronic Arts) [Auto | Stopped] -- B:\Program Files (x86)\Origin\OriginWebHelperService.exe -- (Origin Web Helper Service) SRV - [2019.11.19 16:13:42 | 002,466,608 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- B:\Program Files (x86)\Origin\OriginClientService.exe -- (Origin Client Service) SRV - [2019.11.13 21:14:17 | 000,700,416 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\BTAGService.dll -- (BTAGService) SRV - [2019.09.12 14:40:08 | 000,957,952 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc) SRV - [2019.09.12 14:39:50 | 000,729,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\FlightSettings.dll -- (wisvc) SRV - [2019.08.16 10:40:24 | 000,072,704 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\tzautoupdate.dll -- (tzautoupdate) SRV - [2019.08.16 10:40:05 | 001,244,672 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\TokenBroker.dll -- (TokenBroker) SRV - [2019.07.20 13:06:03 | 003,548,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2019.03.19 06:46:39 | 000,338,432 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Windows.Devices.Picker.dll -- (DevicePickerUserSvc) SRV - [2019.03.19 06:45:58 | 000,029,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2019.03.19 06:45:30 | 000,141,312 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\PrintWorkflowService.dll -- (PrintWorkflowUserSvc) SRV - [2019.03.19 06:45:19 | 000,553,896 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar) SRV - [2019.03.19 06:45:16 | 005,323,016 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository) SRV - [2019.03.19 06:45:16 | 000,185,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\deviceaccess.dll -- (DeviceAssociationBrokerSvc) SRV - [2018.12.16 20:29:48 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2017.04.28 21:16:31 | 001,394,360 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysWOW64\esif_uf.exe -- (esifsvc) SRV - [2017.04.28 21:06:22 | 000,301,536 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2017.04.01 05:27:00 | 000,427,064 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe -- (NvTelemetryContainer) SRV - [2014.09.28 21:58:18 | 000,323,584 | ---- | M] (Atheros) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (ZAtheros Bt and Wlan Coex Agent) SRV - [2014.03.26 15:24:44 | 000,115,512 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService) SRV - [2011.11.21 14:19:50 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2020.04.02 21:29:49 | 000,317,864 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\avgVmm.sys -- (avgVmm) DRV:[b]64bit:[/b] - [2020.04.02 21:29:48 | 000,460,184 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgSP.sys -- (avgSP) DRV:[b]64bit:[/b] - [2020.04.02 21:29:48 | 000,235,768 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\avgStm.sys -- (avgStm) DRV:[b]64bit:[/b] - [2020.04.02 21:29:47 | 000,175,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgMonFlt.sys -- (avgMonFlt) DRV:[b]64bit:[/b] - [2020.04.02 21:29:47 | 000,110,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgRdr2.sys -- (avgRdr) DRV:[b]64bit:[/b] - [2020.04.02 21:29:47 | 000,085,664 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\avgRvrt.sys -- (avgRvrt) DRV:[b]64bit:[/b] - [2020.04.02 21:29:47 | 000,043,568 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgKbd.sys -- (avgKbd) DRV:[b]64bit:[/b] - [2020.04.02 21:29:47 | 000,016,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\avgElam.sys -- (avgElam) DRV:[b]64bit:[/b] - [2020.04.02 21:29:35 | 000,206,672 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgArPot.sys -- (avgArPot) DRV:[b]64bit:[/b] - [2020.04.02 21:29:35 | 000,037,960 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\avgArDisk.sys -- (avgArDisk) DRV:[b]64bit:[/b] - [2020.04.02 21:29:34 | 000,852,392 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgSnx.sys -- (avgSnx) DRV:[b]64bit:[/b] - [2020.04.02 21:29:21 | 000,234,840 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgbidsdriver.sys -- (avgbidsdriver) DRV:[b]64bit:[/b] - [2020.04.02 21:29:21 | 000,179,032 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgbidsh.sys -- (avgbidsh) DRV:[b]64bit:[/b] - [2020.04.02 21:29:21 | 000,061,272 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgbuniv.sys -- (avgbuniv) DRV:[b]64bit:[/b] - [2020.04.02 21:22:01 | 000,275,232 | ---- | M] (Malwarebytes) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbamswissarmy.sys -- (MBAMSwissArmy) DRV:[b]64bit:[/b] - [2020.03.26 09:55:28 | 000,391,392 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2020.03.26 09:55:28 | 000,059,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdNisDrv.sys -- (WdNisDrv) DRV:[b]64bit:[/b] - [2020.03.26 09:55:28 | 000,045,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2020.03.13 12:15:35 | 000,032,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2020.03.13 12:14:29 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\afunix.sys -- (afunix) DRV:[b]64bit:[/b] - [2020.03.13 12:14:23 | 000,135,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2020.03.13 12:14:21 | 000,291,840 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:[b]64bit:[/b] - [2020.03.13 12:13:44 | 000,457,216 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\cldflt.sys -- (CldFlt) DRV:[b]64bit:[/b] - [2020.03.13 12:13:42 | 001,972,536 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS) DRV:[b]64bit:[/b] - [2020.03.13 12:13:32 | 000,201,744 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs) DRV:[b]64bit:[/b] - [2020.03.13 12:12:58 | 000,180,232 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2020.03.13 12:12:57 | 000,337,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Acx01000.sys -- (Acx01000) DRV:[b]64bit:[/b] - [2020.03.13 12:12:57 | 000,250,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winnat.sys -- (WinNat) DRV:[b]64bit:[/b] - [2020.03.13 12:12:49 | 000,254,776 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mssecflt.sys -- (MsSecFlt) DRV:[b]64bit:[/b] - [2020.03.13 12:12:23 | 000,531,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2020.03.13 12:12:23 | 000,250,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2020.03.13 12:12:22 | 000,174,392 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2020.03.13 12:12:22 | 000,141,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:[b]64bit:[/b] - [2020.03.13 12:12:22 | 000,036,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthMini.SYS -- (BthMini) DRV:[b]64bit:[/b] - [2020.03.13 12:12:20 | 000,355,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:[b]64bit:[/b] - [2020.02.16 10:24:53 | 000,174,392 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVemgr.sys -- (AppvVemgr) DRV:[b]64bit:[/b] - [2020.02.16 10:24:53 | 000,153,912 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVfs.sys -- (AppvVfs) DRV:[b]64bit:[/b] - [2020.02.16 10:24:53 | 000,138,040 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppVStrm.sys -- (AppvStrm) DRV:[b]64bit:[/b] - [2020.02.16 10:23:24 | 000,084,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice) DRV:[b]64bit:[/b] - [2020.02.16 10:22:25 | 000,400,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2020.02.16 10:21:15 | 000,117,264 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\bindflt.sys -- (bindflt) DRV:[b]64bit:[/b] - [2020.02.16 10:19:51 | 000,296,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2020.01.17 01:01:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub) DRV:[b]64bit:[/b] - [2019.12.14 16:11:54 | 000,986,936 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1) DRV:[b]64bit:[/b] - [2019.11.13 21:13:50 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr) DRV:[b]64bit:[/b] - [2019.11.13 21:13:02 | 000,359,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MbbCx.sys -- (MbbCx) DRV:[b]64bit:[/b] - [2019.11.13 21:12:51 | 000,551,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Vid.sys -- (Vid) DRV:[b]64bit:[/b] - [2019.11.13 21:12:50 | 000,657,424 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2019.10.15 00:12:59 | 000,225,080 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof) DRV:[b]64bit:[/b] - [2019.10.15 00:12:21 | 000,931,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi) DRV:[b]64bit:[/b] - [2019.10.15 00:12:01 | 000,079,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2019.10.15 00:12:01 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidspi.sys -- (hidspi) DRV:[b]64bit:[/b] - [2019.09.12 14:36:39 | 000,182,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2019.09.12 14:35:47 | 000,108,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\ufxchipidea.inf_amd64_624eef84faf426d6\UfxChipidea.sys -- (UfxChipidea) DRV:[b]64bit:[/b] - [2019.09.12 14:35:47 | 000,037,888 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\basicrender.inf_amd64_ba2a8de08ea0d469\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2019.09.12 14:35:47 | 000,030,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\urschipidea.inf_amd64_86da23c455846f41\urschipidea.sys -- (UrsChipidea) DRV:[b]64bit:[/b] - [2019.09.12 14:35:47 | 000,028,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\urssynopsys.inf_amd64_7302ce5d1420ed71\urssynopsys.sys -- (UrsSynopsys) DRV:[b]64bit:[/b] - [2019.09.12 14:35:47 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\genericusbfn.inf_amd64_b9c53b80e63af230\genericusbfn.sys -- (genericusbfn) DRV:[b]64bit:[/b] - [2019.09.12 14:35:46 | 000,068,096 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\basicdisplay.inf_amd64_307898c750ba9e44\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2019.09.12 14:35:46 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\umbus.inf_amd64_e566af5dd9858a0e\umbus.sys -- (umbus) DRV:[b]64bit:[/b] - [2019.09.12 14:35:46 | 000,055,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs) DRV:[b]64bit:[/b] - [2019.09.12 14:35:46 | 000,032,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\uefi.inf_amd64_4fcaf0fc6eaf7533\uefi.sys -- (UEFI) DRV:[b]64bit:[/b] - [2019.09.12 14:35:45 | 000,018,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_1c567926e5b29133\swenum.sys -- (swenum) DRV:[b]64bit:[/b] - [2019.09.12 14:35:44 | 000,231,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthA2dp.sys -- (BthA2dp) DRV:[b]64bit:[/b] - [2019.09.12 14:35:44 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_43ac632006e874bb\CompositeBus.sys -- (CompositeBus) DRV:[b]64bit:[/b] - [2019.08.16 10:36:55 | 000,324,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip) DRV:[b]64bit:[/b] - [2019.08.07 19:04:00 | 000,032,680 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AsRadioControl.sys -- (HIDSwitch) DRV:[b]64bit:[/b] - [2019.07.20 13:08:23 | 000,205,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\winquic.sys -- (WinQuic) DRV:[b]64bit:[/b] - [2019.07.20 13:07:43 | 000,180,536 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2019.07.20 13:05:58 | 000,257,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaudio2.sys -- (usbaudio2) DRV:[b]64bit:[/b] - [2019.03.19 08:23:15 | 000,031,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2019.03.19 08:23:14 | 000,041,272 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\UevAgentDriver.sys -- (UevAgentDriver) DRV:[b]64bit:[/b] - [2019.03.19 08:23:12 | 000,076,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpatialGraphFilter.sys -- (SpatialGraphFilter) DRV:[b]64bit:[/b] - [2019.03.19 06:45:50 | 000,096,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PktMon.sys -- (PktMon) DRV:[b]64bit:[/b] - [2019.03.19 06:45:50 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NDKPing.sys -- (NDKPing) DRV:[b]64bit:[/b] - [2019.03.19 06:45:38 | 000,085,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2019.03.19 06:45:32 | 000,132,096 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2019.03.19 06:45:32 | 000,089,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SgrmAgent.sys -- (SgrmAgent) DRV:[b]64bit:[/b] - [2019.03.19 06:45:00 | 000,078,848 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2019.03.19 06:45:00 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:[b]64bit:[/b] - [2019.03.19 06:44:36 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx) DRV:[b]64bit:[/b] - [2019.03.19 06:44:35 | 000,321,040 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2019.03.19 06:44:35 | 000,034,320 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2019.03.19 06:44:21 | 000,021,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdmCompanionFilter.sys -- (WdmCompanionFilter) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,311,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,186,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,170,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,160,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsiCx.sys -- (UcmUcsiCx0101) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,093,200 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,085,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,084,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,075,752 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,074,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,040,760 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\portcfg.sys -- (portcfg) DRV:[b]64bit:[/b] - [2019.03.19 06:44:18 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2019.03.19 06:44:16 | 000,092,672 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs) DRV:[b]64bit:[/b] - [2019.03.19 06:44:16 | 000,058,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2019.03.19 06:44:16 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd) DRV:[b]64bit:[/b] - [2019.03.19 06:44:16 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshwnclx.sys -- (HwNClx0101) DRV:[b]64bit:[/b] - [2019.03.19 06:44:01 | 000,070,456 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bam.sys -- (bam) DRV:[b]64bit:[/b] - [2019.03.19 06:44:00 | 000,100,152 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2019.03.19 06:43:49 | 000,244,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000) DRV:[b]64bit:[/b] - [2019.03.19 06:43:49 | 000,136,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2019.03.19 06:43:49 | 000,065,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2019.03.19 06:43:49 | 000,059,392 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt) DRV:[b]64bit:[/b] - [2019.03.19 06:43:49 | 000,054,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipt.sys -- (IPT) DRV:[b]64bit:[/b] - [2019.03.19 06:43:49 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx) DRV:[b]64bit:[/b] - [2019.03.19 06:43:49 | 000,041,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ramdisk.sys -- (Ramdisk) DRV:[b]64bit:[/b] - [2019.03.19 06:43:47 | 000,053,760 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS) DRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 000,056,632 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate) DRV:[b]64bit:[/b] - [2019.03.19 06:43:45 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv) DRV:[b]64bit:[/b] - [2019.03.19 06:43:44 | 000,246,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc.sys -- (netvsc) DRV:[b]64bit:[/b] - [2019.03.19 06:43:44 | 000,083,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2019.03.19 06:43:44 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:[b]64bit:[/b] - [2019.03.19 06:43:44 | 000,058,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2019.03.19 06:43:44 | 000,032,568 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hvcrash.sys -- (hvcrash) DRV:[b]64bit:[/b] - [2019.03.19 06:43:44 | 000,025,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2019.03.19 06:43:44 | 000,018,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,618,296 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,181,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,103,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,097,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys -- (BthLEEnum) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,054,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,053,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,042,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,041,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsiAcpiClient.sys -- (UcmUcsiAcpiClient) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,032,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,022,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2019.03.19 06:43:43 | 000,017,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 001,866,768 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 001,150,480 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,885,048 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAVC.sys -- (iaStorAVC) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,566,800 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,535,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbhost.sys -- (mausbhost) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,158,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvdimm.sys -- (nvdimm) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,153,616 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,151,352 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,127,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pmem.sys -- (pmem) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,079,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,077,832 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,062,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbip.sys -- (mausbip) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,042,808 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bttflt.sys -- (bttflt) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,037,928 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2019.03.19 06:43:41 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2019.03.19 06:43:40 | 000,319,528 | ---- | M] (Chelsio Communications) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi) DRV:[b]64bit:[/b] - [2019.03.19 06:43:40 | 000,305,672 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 001,135,632 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,259,600 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,220,176 | ---- | M] (Microsemi Corportation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\SmartSAMD.sys -- (SmartSAMD) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,148,520 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ItSas35i.sys -- (ItSas35i) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,128,528 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,124,448 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,107,528 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,094,736 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\megasas35i.sys -- (megasas35i) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,083,464 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,082,960 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,075,280 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\MegaSas2i.sys -- (megasas2i) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,068,624 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,064,528 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,064,016 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,058,896 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,031,240 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,027,176 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev) DRV:[b]64bit:[/b] - [2019.03.19 06:43:39 | 000,016,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume) DRV:[b]64bit:[/b] - [2019.03.19 06:43:38 | 003,419,176 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2019.03.19 06:43:38 | 000,534,032 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2019.03.19 06:43:38 | 000,113,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rhproxy.sys -- (rhproxy) DRV:[b]64bit:[/b] - [2019.03.19 06:43:38 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:[b]64bit:[/b] - [2019.03.19 06:43:38 | 000,033,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SDFRd.sys -- (SDFRd) DRV:[b]64bit:[/b] - [2019.03.19 06:43:38 | 000,017,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pnpmem.sys -- (PNPMEM) DRV:[b]64bit:[/b] - [2019.03.19 06:43:37 | 000,114,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2019.03.19 06:43:37 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,180,736 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_CNL.sys -- (iaLPSS2i_I2C_CNL) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,177,664 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_GLK.sys -- (iaLPSS2i_I2C_GLK) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,175,104 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_BXT_P.sys -- (iaLPSS2i_I2C_BXT_P) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,171,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,112,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_CNL.sys -- (iaLPSS2i_GPIO2_CNL) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,096,256 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_GLK.sys -- (iaLPSS2i_GPIO2_GLK) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,093,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_BXT_P.sys -- (iaLPSS2i_GPIO2_BXT_P) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,091,136 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,079,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,064,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CAD.sys -- (CAD) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,036,352 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelpmax.sys -- (intelpmax) DRV:[b]64bit:[/b] - [2019.03.19 06:43:34 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:[b]64bit:[/b] - [2019.03.19 06:43:33 | 004,233,728 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athw8x.sys -- (athr) DRV:[b]64bit:[/b] - [2019.03.19 06:43:33 | 000,131,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthHfEnum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2019.03.19 06:43:33 | 000,102,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb22.sys -- (xusb22) DRV:[b]64bit:[/b] - [2019.03.19 06:43:33 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Microsoft.Bluetooth.AvrcpTransport.sys -- (Microsoft_Bluetooth_AvrcpTransport) DRV:[b]64bit:[/b] - [2019.03.19 06:43:33 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid) DRV:[b]64bit:[/b] - [2019.03.19 06:43:33 | 000,037,888 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdi2c.sys -- (amdi2c) DRV:[b]64bit:[/b] - [2019.03.19 06:43:33 | 000,018,432 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdgpio2.sys -- (amdgpio2) DRV:[b]64bit:[/b] - [2019.02.01 12:20:22 | 000,020,936 | ---- | M] (Malwarebytes) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\MbamElam.sys -- (MbamElam) DRV:[b]64bit:[/b] - [2019.01.30 23:44:54 | 000,069,368 | ---- | M] (Qualcomm) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter) DRV:[b]64bit:[/b] - [2017.12.12 21:32:46 | 017,003,280 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\nvam.inf_amd64_1aae4f19e68d0780\nvlddmkm.sys -- (nvlddmkm) DRV:[b]64bit:[/b] - [2017.08.16 15:09:39 | 000,047,672 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtliteusbbus.sys -- (dtliteusbbus) DRV:[b]64bit:[/b] - [2017.08.16 15:09:36 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus) DRV:[b]64bit:[/b] - [2017.04.28 21:16:58 | 000,053,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dptf_cpu.sys -- (dptf_cpu) DRV:[b]64bit:[/b] - [2017.04.28 21:16:37 | 000,088,256 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\IntelPcc.sys -- (IntelHSWPcc) DRV:[b]64bit:[/b] - [2017.04.28 21:16:31 | 000,261,624 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\esif_lf.sys -- (esif_lf) DRV:[b]64bit:[/b] - [2017.04.28 21:06:16 | 007,969,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2017.04.28 20:41:43 | 000,184,304 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverW8x64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2017.04.01 05:27:00 | 000,029,240 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms) DRV:[b]64bit:[/b] - [2017.04.01 02:41:38 | 000,076,840 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvhci.sys -- (nvvhci) DRV:[b]64bit:[/b] - [2017.04.01 02:41:27 | 000,066,608 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible) DRV:[b]64bit:[/b] - [2017.02.16 04:56:04 | 000,428,032 | ---- | M] (Realsil Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUer.sys -- (RTSUER) DRV:[b]64bit:[/b] - [2016.05.12 05:32:26 | 000,481,768 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2015.02.09 09:06:00 | 001,399,536 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA) DRV:[b]64bit:[/b] - [2014.09.28 21:59:20 | 000,338,120 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP) DRV:[b]64bit:[/b] - [2014.09.28 21:59:20 | 000,179,432 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP) DRV:[b]64bit:[/b] - [2014.09.28 21:59:20 | 000,137,928 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP) DRV:[b]64bit:[/b] - [2014.09.28 21:59:20 | 000,118,984 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt) DRV:[b]64bit:[/b] - [2014.09.28 21:59:20 | 000,089,800 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort) DRV:[b]64bit:[/b] - [2014.09.28 21:59:20 | 000,077,464 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT) DRV:[b]64bit:[/b] - [2014.09.28 21:59:20 | 000,035,016 | ---- | M] (Qualcomm Atheros) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS) DRV:[b]64bit:[/b] - [2014.09.11 16:48:20 | 000,017,152 | ---- | M] (ASUSTek Computer Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AiCharger.sys -- (AiCharger) DRV:[b]64bit:[/b] - [2014.05.29 09:55:48 | 000,873,176 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168) DRV:[b]64bit:[/b] - [2013.05.19 02:02:52 | 000,039,168 | ---- | M] (Scarlet.Crush Productions) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ScpVBus.sys -- (ScpVBus) DRV - [2020.04.02 21:27:15 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\AnVir Task Manager Free\OpenHardwareMonitor\OpenHardwareMonitorLib.sys -- (WinRing0_1_2_0) DRV - [2020.03.13 12:14:55 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\afunix.sys -- (afunix) DRV - [2019.11.29 18:18:12 | 000,012,464 | ---- | M] (Macrovision Europe Ltd) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\SECDRV.SYS -- (SecDrv) DRV - [2019.09.12 14:35:47 | 000,108,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_624eef84faf426d6\UfxChipidea.sys -- (UfxChipidea) DRV - [2019.09.12 14:35:47 | 000,037,888 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\basicrender.inf_amd64_ba2a8de08ea0d469\BasicRender.sys -- (BasicRender) DRV - [2019.09.12 14:35:47 | 000,030,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\urschipidea.inf_amd64_86da23c455846f41\urschipidea.sys -- (UrsChipidea) DRV - [2019.09.12 14:35:47 | 000,028,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_7302ce5d1420ed71\urssynopsys.sys -- (UrsSynopsys) DRV - [2019.09.12 14:35:47 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_b9c53b80e63af230\genericusbfn.sys -- (genericusbfn) DRV - [2019.09.12 14:35:46 | 000,068,096 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_307898c750ba9e44\BasicDisplay.sys -- (BasicDisplay) DRV - [2019.09.12 14:35:46 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\umbus.inf_amd64_e566af5dd9858a0e\umbus.sys -- (umbus) DRV - [2019.09.12 14:35:46 | 000,032,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\uefi.inf_amd64_4fcaf0fc6eaf7533\UEFI.sys -- (UEFI) DRV - [2019.09.12 14:35:45 | 000,018,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_1c567926e5b29133\swenum.sys -- (swenum) DRV - [2019.09.12 14:35:44 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_43ac632006e874bb\CompositeBus.sys -- (CompositeBus) DRV - [2017.12.12 21:32:46 | 017,003,280 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\nvam.inf_amd64_1aae4f19e68d0780\nvlddmkm.sys -- (nvlddmkm) DRV - [2013.07.02 16:45:52 | 000,019,768 | ---- | M] (ASUSTek Computer Inc.) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO) DRV - [2009.07.02 17:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm IE - HKU\S-1-5-21-3726601081-637110299-688627238-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm IE - HKU\S-1-5-21-3726601081-637110299-688627238-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = F1 CD BD 7E D0 1D D3 01 [binary data] IE - HKU\S-1-5-21-3726601081-637110299-688627238-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Variant error. IE - HKU\S-1-5-21-3726601081-637110299-688627238-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3726601081-637110299-688627238-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKU\S-1-5-21-3726601081-637110299-688627238-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) [color=#E56717]========== Chrome ==========[/color] CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.10_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck\20.1.1601_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.2_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.9.1_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\20.1.480_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.2_0\ CHR - Extension: No name found = C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8220.313.1.1_0\ O1 HOSTS File: ([2019.01.08 22:08:56 | 000,000,832 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [AVGUI.exe] C:\Program Files\AVG\Antivirus\AvLaunch.exe (AVG Technologies CZ, s.r.o.) O4:[b]64bit:[/b] - HKLM..\Run: [SecurityHealth] C:\Windows\SysNative\SecurityHealthSystray.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3726601081-637110299-688627238-1001..\Run: [CCleaner Smart Cleaning] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd) O4 - HKU\S-1-5-21-3726601081-637110299-688627238-1001..\Run: [GalaxyClient] File not found O4 - HKU\S-1-5-21-3726601081-637110299-688627238-1001..\Run: [OneDrive] C:\Users\Przemek\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3726601081-637110299-688627238-1001..\Run: [Wargaming.net Game Center] B:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming.net) O4 - HKU\S-1-5-19..\RunOnce: [WAB Migrate] C:\Program Files (x86)\Windows Mail\wab.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [WAB Migrate] C:\Program Files (x86)\Windows Mail\wab.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BtvStack = "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" (Atheros Communications) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableFullTrustStartupTasks = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUwpStartupTasks = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportFullTrustStartupTasks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportUwpStartupTasks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1 O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{558bf4eb-515b-463f-bfa0-544bcbb21050}: DhcpNameServer = 192.168.43.1 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation) O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2020.04.02 21:33:54 | 000,000,000 | ---D | C] -- C:\Users\Przemek\AppData\Roaming\AVG [2020.04.02 21:33:53 | 000,000,000 | ---D | C] -- C:\Users\Przemek\AppData\Local\Avg [2020.04.02 21:30:09 | 000,337,592 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\avgBoot.exe [2020.04.02 21:30:00 | 000,460,184 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgSP.sys [2020.04.02 21:30:00 | 000,317,864 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgVmm.sys [2020.04.02 21:30:00 | 000,235,768 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgStm.sys [2020.04.02 21:29:59 | 000,852,392 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgSnx.sys [2020.04.02 21:29:59 | 000,206,672 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgArPot.sys [2020.04.02 21:29:59 | 000,179,032 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgbidsh.sys [2020.04.02 21:29:59 | 000,175,984 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgMonFlt.sys [2020.04.02 21:29:59 | 000,110,064 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgRdr2.sys [2020.04.02 21:29:59 | 000,085,664 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgRvrt.sys [2020.04.02 21:29:59 | 000,061,272 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgbuniv.sys [2020.04.02 21:29:59 | 000,043,568 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgKbd.sys [2020.04.02 21:29:59 | 000,037,960 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgArDisk.sys [2020.04.02 21:29:59 | 000,016,520 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgElam.sys [2020.04.02 21:29:58 | 000,234,840 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgbidsdriver.sys [2020.04.02 21:29:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVG [2020.04.02 21:28:28 | 000,000,000 | ---D | C] -- C:\Program Files\AVG [2020.04.02 21:28:04 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG [2020.04.02 18:01:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood [2020.03.15 18:19:03 | 000,275,232 | ---- | C] (Malwarebytes) -- C:\WINDOWS\SysNative\drivers\mbamswissarmy.sys [2020.03.15 01:54:58 | 001,610,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HologramCompositor.dll [2020.03.15 01:54:55 | 025,444,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Hydrogen.dll [2020.03.15 01:54:54 | 000,689,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CPFilters.dll [2020.03.15 01:54:51 | 001,398,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe [2020.03.15 01:54:51 | 001,077,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe [2020.03.15 01:54:49 | 006,520,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll [2020.03.15 01:54:47 | 007,604,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll [2020.03.15 01:54:46 | 009,930,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2020.03.13 12:16:14 | 009,711,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll [2020.03.13 12:16:13 | 011,607,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll [2020.03.13 12:16:01 | 000,952,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DolbyDecMFT.dll [2020.03.13 12:16:00 | 002,315,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll [2020.03.13 12:16:00 | 001,555,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll [2020.03.13 12:16:00 | 001,417,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll [2020.03.13 12:16:00 | 000,757,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll [2020.03.13 12:16:00 | 000,380,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSFlacDecoder.dll [2020.03.13 12:16:00 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSFlacEncoder.dll [2020.03.13 12:15:59 | 001,867,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll [2020.03.13 12:15:59 | 001,108,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll [2020.03.13 12:15:59 | 001,098,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyDecMFT.dll [2020.03.13 12:15:59 | 001,012,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll [2020.03.13 12:15:54 | 019,812,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HologramWorld.dll [2020.03.13 12:15:54 | 001,770,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll [2020.03.13 12:15:53 | 002,494,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll [2020.03.13 12:15:53 | 001,835,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll [2020.03.13 12:15:53 | 001,282,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll [2020.03.13 12:15:53 | 000,444,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSFlacDecoder.dll [2020.03.13 12:15:53 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSFlacEncoder.dll [2020.03.13 12:15:52 | 002,956,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll [2020.03.13 12:15:52 | 002,072,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll [2020.03.13 12:15:51 | 004,129,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2020.03.13 12:15:51 | 001,490,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll [2020.03.13 12:15:50 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ddpchunk.dll [2020.03.13 12:15:50 | 000,145,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CscMig.dll [2020.03.13 12:15:46 | 003,243,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.dll [2020.03.13 12:15:46 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.Internal.dll [2020.03.13 12:15:45 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpcore.dll [2020.03.13 12:15:45 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\odbc32.dll [2020.03.13 12:15:45 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iemigplugin.dll [2020.03.13 12:15:45 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msimsg.dll [2020.03.13 12:15:44 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll [2020.03.13 12:15:43 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakradiag.dll [2020.03.13 12:15:43 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakrathunk.dll [2020.03.13 12:15:42 | 005,911,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll [2020.03.13 12:15:42 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IndexedDbLegacy.dll [2020.03.13 12:15:40 | 000,843,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll [2020.03.13 12:15:40 | 000,667,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll [2020.03.13 12:15:38 | 019,850,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll [2020.03.13 12:15:38 | 000,883,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll [2020.03.13 12:15:38 | 000,525,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsecedit.dll [2020.03.13 12:15:38 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\udhisapi.dll [2020.03.13 12:15:38 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\upnpcont.exe [2020.03.13 12:15:37 | 001,000,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Mirage.Internal.dll [2020.03.13 12:15:37 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProvSysprep.dll [2020.03.13 12:15:36 | 004,348,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Mirage.dll [2020.03.13 12:15:36 | 002,180,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\workfolderssvc.dll [2020.03.13 12:15:36 | 001,273,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcore.dll [2020.03.13 12:15:36 | 000,835,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkfoldersControl.dll [2020.03.13 12:15:36 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkFoldersShell.dll [2020.03.13 12:15:36 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkFolders.exe [2020.03.13 12:15:35 | 001,540,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll [2020.03.13 12:15:35 | 000,097,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll [2020.03.13 12:15:32 | 000,042,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SysResetErr.exe [2020.03.13 12:15:32 | 000,032,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rdpvideominiport.sys [2020.03.13 12:15:31 | 002,224,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.dll [2020.03.13 12:15:31 | 001,214,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll [2020.03.13 12:15:31 | 000,019,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.exe [2020.03.13 12:15:30 | 000,510,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemreset.exe [2020.03.13 12:15:30 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngOnline.dll [2020.03.13 12:15:30 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msimsg.dll [2020.03.13 12:15:25 | 004,580,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll [2020.03.13 12:15:24 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\odbc32.dll [2020.03.13 12:15:24 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iemigplugin.dll [2020.03.13 12:15:23 | 000,705,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll [2020.03.13 12:15:22 | 004,855,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll [2020.03.13 12:15:22 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll [2020.03.13 12:15:22 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakrathunk.dll [2020.03.13 12:15:21 | 007,755,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll [2020.03.13 12:15:21 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IndexedDbLegacy.dll [2020.03.13 12:15:18 | 001,319,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll [2020.03.13 12:15:18 | 000,923,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll [2020.03.13 12:15:14 | 025,900,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll [2020.03.13 12:15:14 | 001,284,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\werconcpl.dll [2020.03.13 12:15:14 | 001,088,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll [2020.03.13 12:15:14 | 000,668,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsecedit.dll [2020.03.13 12:15:14 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MDMAppInstaller.exe [2020.03.13 12:15:14 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseDesktopAppMgmtCSP.dll [2020.03.13 12:15:13 | 001,218,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe [2020.03.13 12:15:13 | 000,669,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\computecore.dll [2020.03.13 12:15:09 | 001,283,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi [2020.03.13 12:14:59 | 000,783,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcblaunch.exe [2020.03.13 12:14:59 | 000,210,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcbloader.dll [2020.03.13 12:14:58 | 001,190,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft.Graphics.Display.DisplayEnhancementService.dll [2020.03.13 12:14:58 | 000,358,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dusmsvc.dll [2020.03.13 12:14:58 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\udhisapi.dll [2020.03.13 12:14:58 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dusmapi.dll [2020.03.13 12:14:58 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\upnpcont.exe [2020.03.13 12:14:58 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dusmtask.exe [2020.03.13 12:14:57 | 003,860,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmpltfm.dll [2020.03.13 12:14:57 | 000,980,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmpal.dll [2020.03.13 12:14:57 | 000,915,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmcodecs.dll [2020.03.13 12:14:57 | 000,732,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ortcengine.dll [2020.03.13 12:14:57 | 000,055,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmmvrortc.dll [2020.03.13 12:14:56 | 000,105,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OpenWith.exe [2020.03.13 12:14:55 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsPrint.dll [2020.03.13 12:14:55 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iprtrmgr.dll [2020.03.13 12:14:55 | 000,251,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsDocumentTargetPrint.dll [2020.03.13 12:14:55 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\scecli.dll [2020.03.13 12:14:55 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtm.dll [2020.03.13 12:14:55 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drivers\afunix.sys [2020.03.13 12:14:55 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iprtprio.dll [2020.03.13 12:14:53 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgeIso.dll [2020.03.13 12:14:53 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msIso.dll [2020.03.13 12:14:53 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MicrosoftAccountTokenProvider.dll [2020.03.13 12:14:53 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msauserext.dll [2020.03.13 12:14:48 | 001,458,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll [2020.03.13 12:14:48 | 000,895,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll [2020.03.13 12:14:47 | 001,413,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll [2020.03.13 12:14:47 | 000,646,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Management.dll [2020.03.13 12:14:47 | 000,136,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\omadmapi.dll [2020.03.13 12:14:47 | 000,130,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmcmnutils.dll [2020.03.13 12:14:47 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\enterpriseresourcemanager.dll [2020.03.13 12:14:47 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf3216.dll [2020.03.13 12:14:47 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DMAlertListener.ProxyStub.dll [2020.03.13 12:14:46 | 000,892,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll [2020.03.13 12:14:46 | 000,868,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windowsperformancerecordercontrol.dll [2020.03.13 12:14:46 | 000,680,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll [2020.03.13 12:14:46 | 000,199,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wermgr.exe [2020.03.13 12:14:46 | 000,193,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\weretw.dll [2020.03.13 12:14:46 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\werdiagcontroller.dll [2020.03.13 12:14:45 | 002,584,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll [2020.03.13 12:14:45 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wincorlib.dll [2020.03.13 12:14:44 | 001,264,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll [2020.03.13 12:14:44 | 000,935,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Taskmgr.exe [2020.03.13 12:14:44 | 000,654,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\uReFS.dll [2020.03.13 12:14:44 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LaunchTM.exe [2020.03.13 12:14:43 | 002,800,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys [2020.03.13 12:14:43 | 000,469,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\daxexec.dll [2020.03.13 12:14:42 | 002,740,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\directml.dll [2020.03.13 12:14:42 | 001,985,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll [2020.03.13 12:14:42 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32k.sys [2020.03.13 12:14:42 | 000,089,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32u.dll [2020.03.13 12:14:41 | 006,084,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll [2020.03.13 12:14:41 | 000,748,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.OnlineId.dll [2020.03.13 12:14:41 | 000,668,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll [2020.03.13 12:14:41 | 000,120,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\profext.dll [2020.03.13 12:14:40 | 002,875,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\esent.dll [2020.03.13 12:14:40 | 001,729,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallService.dll [2020.03.13 12:14:40 | 001,260,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpsharercom.dll [2020.03.13 12:14:40 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallServiceTasks.dll [2020.03.13 12:14:39 | 002,561,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll [2020.03.13 12:14:39 | 002,305,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll [2020.03.13 12:14:39 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll [2020.03.13 12:14:39 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Search.ProtocolHandler.MAPI2.dll [2020.03.13 12:14:39 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll [2020.03.13 12:14:38 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssitlb.dll [2020.03.13 12:14:38 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GraphicsCapture.dll [2020.03.13 12:14:38 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msscntrs.dll [2020.03.13 12:14:37 | 002,021,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll [2020.03.13 12:14:37 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActivationManager.dll [2020.03.13 12:14:37 | 000,526,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidprov.dll [2020.03.13 12:14:37 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll [2020.03.13 12:14:36 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WsmWmiPl.dll [2020.03.13 12:14:36 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WsmAuto.dll [2020.03.13 12:14:36 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSManMigrationPlugin.dll [2020.03.13 12:14:36 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WsmRes.dll [2020.03.13 12:14:36 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsmprovhost.exe [2020.03.13 12:14:36 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSManHTTPConfig.exe [2020.03.13 12:14:36 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LaunchWinApp.exe [2020.03.13 12:14:36 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WsmAgent.dll [2020.03.13 12:14:36 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsmplpxy.dll [2020.03.13 12:14:35 | 005,112,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll [2020.03.13 12:14:35 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sxstrace.exe [2020.03.13 12:14:34 | 000,627,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicensingWinRT.dll [2020.03.13 12:14:34 | 000,287,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sppcomapi.dll [2020.03.13 12:14:34 | 000,213,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditionUpgradeManagerObj.dll [2020.03.13 12:14:34 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditionUpgradeHelper.dll [2020.03.13 12:14:34 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dot3api.dll [2020.03.13 12:14:34 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dot3msm.dll [2020.03.13 12:14:34 | 000,068,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DeviceReactivation.dll [2020.03.13 12:14:33 | 003,971,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe [2020.03.13 12:14:33 | 000,836,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TpmCoreProvisioning.dll [2020.03.13 12:14:33 | 000,042,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tbs.dll [2020.03.13 12:14:33 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TpmCertResources.dll [2020.03.13 12:14:32 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll [2020.03.13 12:14:32 | 000,595,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll [2020.03.13 12:14:31 | 000,680,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vpnike.dll [2020.03.13 12:14:31 | 000,562,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iprtrmgr.dll [2020.03.13 12:14:31 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\scecli.dll [2020.03.13 12:14:31 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtm.dll [2020.03.13 12:14:31 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iprtprio.dll [2020.03.13 12:14:30 | 001,688,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsPrint.dll [2020.03.13 12:14:30 | 001,412,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.Handlers.dll [2020.03.13 12:14:30 | 000,355,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsDocumentTargetPrint.dll [2020.03.13 12:14:30 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceUpdateAgent.dll [2020.03.13 12:14:30 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pnpclean.dll [2020.03.13 12:14:29 | 000,518,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll [2020.03.13 12:14:29 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe [2020.03.13 12:14:29 | 000,133,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ImplatSetup.dll [2020.03.13 12:14:29 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\afunix.sys [2020.03.13 12:14:23 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\NdisImPlatform.sys [2020.03.13 12:14:23 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\npmproxy.dll [2020.03.13 12:14:23 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nlmproxy.dll [2020.03.13 12:14:23 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nlmsprep.dll [2020.03.13 12:14:22 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netprofmsvc.dll [2020.03.13 12:14:21 | 000,734,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpksetup.exe [2020.03.13 12:14:21 | 000,443,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgeIso.dll [2020.03.13 12:14:21 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\ahcache.sys [2020.03.13 12:14:21 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LanguageComponentsInstaller.dll [2020.03.13 12:14:21 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpremove.exe [2020.03.13 12:14:21 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AxInstUI.exe [2020.03.13 12:14:21 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msauserext.dll [2020.03.13 12:14:21 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MUILanguageCleanup.dll [2020.03.13 12:14:21 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LangCleanupSysprepAction.dll [2020.03.13 12:14:21 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpksetupproxyserv.dll [2020.03.13 12:14:20 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msIso.dll [2020.03.13 12:14:19 | 001,697,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll [2020.03.13 12:14:19 | 001,097,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll [2020.03.13 12:14:18 | 001,647,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll [2020.03.13 12:14:18 | 000,921,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll [2020.03.13 12:14:18 | 000,898,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MdmDiagnostics.dll [2020.03.13 12:14:18 | 000,330,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmclient.exe [2020.03.13 12:14:18 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceMetadataRetrievalClient.dll [2020.03.13 12:14:18 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DMAlertListener.ProxyStub.dll [2020.03.13 12:14:17 | 001,835,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll [2020.03.13 12:14:17 | 000,329,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DiagnosticLogCSP.dll [2020.03.13 12:14:17 | 000,165,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcmnutils.dll [2020.03.13 12:14:17 | 000,164,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmapi.dll [2020.03.13 12:14:17 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterpriseresourcemanager.dll [2020.03.13 12:14:01 | 000,929,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthService.exe [2020.03.13 12:14:01 | 000,320,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthAgent.dll [2020.03.13 12:14:01 | 000,107,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthProxyStub.dll [2020.03.13 12:14:01 | 000,063,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthHost.exe [2020.03.13 12:13:59 | 000,845,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe [2020.03.13 12:13:59 | 000,098,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\crashdmp.sys [2020.03.13 12:13:59 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf3216.dll [2020.03.13 12:13:59 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msimg32.dll [2020.03.13 12:13:56 | 002,768,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll [2020.03.13 12:13:56 | 000,477,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\FWPKCLNT.SYS [2020.03.13 12:13:55 | 000,605,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sechost.dll [2020.03.13 12:13:55 | 000,133,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\profapi.dll [2020.03.13 12:13:54 | 001,999,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll [2020.03.13 12:13:53 | 000,877,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll [2020.03.13 12:13:53 | 000,248,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\weretw.dll [2020.03.13 12:13:53 | 000,221,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wermgr.exe [2020.03.13 12:13:53 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\utcutil.dll [2020.03.13 12:13:53 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\werdiagcontroller.dll [2020.03.13 12:13:52 | 003,799,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll [2020.03.13 12:13:52 | 001,394,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll [2020.03.13 12:13:52 | 001,153,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windowsperformancerecordercontrol.dll [2020.03.13 12:13:52 | 000,796,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll [2020.03.13 12:13:52 | 000,435,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wincorlib.dll [2020.03.13 12:13:52 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pacjsworker.exe [2020.03.13 12:13:51 | 006,436,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll [2020.03.13 12:13:51 | 003,371,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll [2020.03.13 12:13:51 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LaunchWinApp.exe [2020.03.13 12:13:50 | 001,260,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctf.dll [2020.03.13 12:13:50 | 000,741,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicensingWinRT.dll [2020.03.13 12:13:50 | 000,636,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sxs.dll [2020.03.13 12:13:50 | 000,234,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll [2020.03.13 12:13:50 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeHelper.dll [2020.03.13 12:13:50 | 000,089,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceReactivation.dll [2020.03.13 12:13:50 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sxstrace.exe [2020.03.13 12:13:49 | 001,743,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll [2020.03.13 12:13:49 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SppExtComObj.Exe [2020.03.13 12:13:49 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\slui.exe [2020.03.13 12:13:49 | 000,353,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppwinob.dll [2020.03.13 12:13:49 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcomapi.dll [2020.03.13 12:13:48 | 004,898,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmpltfm.dll [2020.03.13 12:13:48 | 001,354,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmpal.dll [2020.03.13 12:13:48 | 001,091,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmcodecs.dll [2020.03.13 12:13:48 | 000,056,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmmvrortc.dll [2020.03.13 12:13:47 | 001,032,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ortcengine.dll [2020.03.13 12:13:46 | 000,120,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OpenWith.exe [2020.03.13 12:13:45 | 003,552,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll [2020.03.13 12:13:45 | 001,396,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll [2020.03.13 12:13:45 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll [2020.03.13 12:13:44 | 001,757,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi [2020.03.13 12:13:44 | 001,513,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe [2020.03.13 12:13:44 | 001,366,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi [2020.03.13 12:13:44 | 001,182,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe [2020.03.13 12:13:44 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\cldflt.sys [2020.03.13 12:13:43 | 000,988,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\refsutil.exe [2020.03.13 12:13:42 | 001,972,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refs.sys [2020.03.13 12:13:42 | 000,765,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uReFS.dll [2020.03.13 12:13:38 | 004,048,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRH.dll [2020.03.13 12:13:38 | 001,071,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Taskmgr.exe [2020.03.13 12:13:38 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LaunchTM.exe [2020.03.13 12:13:38 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tier2punctuations.dll [2020.03.13 12:13:37 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Language.dll [2020.03.13 12:13:35 | 006,168,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.pcshell.dll [2020.03.13 12:13:35 | 004,140,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsThresholdAdminFlowUI.dll [2020.03.13 12:13:35 | 000,522,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlows.exe [2020.03.13 12:13:35 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Taskbar.dll [2020.03.13 12:13:34 | 001,083,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll [2020.03.13 12:13:34 | 000,605,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe [2020.03.13 12:13:34 | 000,459,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotifyIcon.exe [2020.03.13 12:13:34 | 000,448,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsEnvironment.Desktop.dll [2020.03.13 12:13:33 | 001,823,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll [2020.03.13 12:13:33 | 001,480,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocoreworker.exe [2020.03.13 12:13:33 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.UXRes.dll [2020.03.13 12:13:33 | 000,535,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usosvc.dll [2020.03.13 12:13:32 | 000,678,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\daxexec.dll [2020.03.13 12:13:32 | 000,638,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll [2020.03.13 12:13:32 | 000,201,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wcifs.sys [2020.03.13 12:13:32 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wci.dll [2020.03.13 12:13:31 | 003,728,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys [2020.03.13 12:13:31 | 000,127,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32u.dll [2020.03.13 12:13:30 | 001,657,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll [2020.03.13 12:13:30 | 001,609,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll [2020.03.13 12:13:30 | 000,908,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll [2020.03.13 12:13:30 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnprv.dll [2020.03.13 12:13:30 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnservice.dll [2020.03.13 12:13:30 | 000,258,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VPNv2CSP.dll [2020.03.13 12:13:30 | 000,146,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\profext.dll [2020.03.13 12:13:29 | 007,905,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll [2020.03.13 12:13:28 | 003,260,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\esent.dll [2020.03.13 12:13:28 | 002,453,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallService.dll [2020.03.13 12:13:28 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallServiceTasks.dll [2020.03.13 12:13:27 | 001,481,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpsharercom.dll [2020.03.13 12:13:27 | 000,916,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Core.TextInput.dll [2020.03.13 12:13:27 | 000,642,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TextInputFramework.dll [2020.03.13 12:13:27 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputLocaleManager.dll [2020.03.13 12:13:27 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditBufferTestHook.dll [2020.03.13 12:13:27 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WordBreakers.dll [2020.03.13 12:13:26 | 004,471,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputService.dll [2020.03.13 12:13:25 | 003,263,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll [2020.03.13 12:13:25 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll [2020.03.13 12:13:25 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Search.ProtocolHandler.MAPI2.dll [2020.03.13 12:13:25 | 000,368,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll [2020.03.13 12:13:25 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll [2020.03.13 12:13:25 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll [2020.03.13 12:13:24 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe [2020.03.13 12:13:23 | 000,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe [2020.03.13 12:13:22 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll [2020.03.13 12:13:22 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msscntrs.dll [2020.03.13 12:13:20 | 001,764,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll [2020.03.13 12:13:20 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GraphicsCapture.dll [2020.03.13 12:13:18 | 000,945,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll [2020.03.13 12:13:17 | 000,802,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll [2020.03.13 12:13:17 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ngcpopkeysrv.dll [2020.03.13 12:13:16 | 002,715,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys [2020.03.13 12:13:16 | 000,874,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys [2020.03.13 12:13:16 | 000,441,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys [2020.03.13 12:13:15 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdd.dll [2020.03.13 12:13:14 | 003,143,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\directml.dll [2020.03.13 12:13:14 | 002,474,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll [2020.03.13 12:13:14 | 001,027,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipSVC.dll [2020.03.13 12:13:14 | 000,914,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.OnlineId.dll [2020.03.13 12:13:13 | 002,522,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll [2020.03.13 12:13:13 | 002,157,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll [2020.03.13 12:13:13 | 000,749,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActivationManager.dll [2020.03.13 12:13:12 | 001,149,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplyTrustOffline.exe [2020.03.13 12:13:12 | 000,649,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidprov.dll [2020.03.13 12:13:12 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MicrosoftAccountExtension.dll [2020.03.13 12:13:12 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MicrosoftAccountCloudAP.dll [2020.03.13 12:13:12 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MicrosoftAccountTokenProvider.dll [2020.03.13 12:13:12 | 000,201,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXApplicabilityBlob.dll [2020.03.13 12:13:12 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CustomInstallExec.exe [2020.03.13 12:13:12 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAProfileNotificationHandler.dll [2020.03.13 12:13:11 | 003,708,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll [2020.03.13 12:13:11 | 002,289,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll [2020.03.13 12:13:11 | 001,751,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll [2020.03.13 12:13:11 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll [2020.03.13 12:13:10 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WsmWmiPl.dll [2020.03.13 12:13:10 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSManMigrationPlugin.dll [2020.03.13 12:13:10 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WsmRes.dll [2020.03.13 12:13:10 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsmprovhost.exe [2020.03.13 12:13:10 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSManHTTPConfig.exe [2020.03.13 12:13:10 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WsmAgent.dll [2020.03.13 12:13:10 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsmplpxy.dll [2020.03.13 12:13:09 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WsmAuto.dll [2020.03.13 12:13:09 | 000,066,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlrmdr.exe [2020.03.13 12:13:09 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mpnotify.exe [2020.03.13 12:13:08 | 000,833,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pkeyhelper.dll [2020.03.13 12:13:08 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vdsbas.dll [2020.03.13 12:13:07 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dot3msm.dll [2020.03.13 12:13:07 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dot3api.dll [2020.03.13 12:13:07 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WiredNetworkCSP.dll [2020.03.13 12:13:06 | 004,622,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [2020.03.13 12:13:02 | 001,057,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll [2020.03.13 12:13:02 | 000,782,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll [2020.03.13 12:13:02 | 000,259,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmcsp.dll [2020.03.13 12:13:02 | 000,128,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifitask.exe [2020.03.13 12:13:02 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cellulardatacapabilityhandler.dll [2020.03.13 12:13:02 | 000,029,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tbs.sys [2020.03.13 12:13:01 | 001,092,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmCoreProvisioning.dll [2020.03.13 12:13:01 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provpackageapidll.dll [2020.03.13 12:13:01 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tbs.dll [2020.03.13 12:13:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.Provisioning.ProxyStub.dll [2020.03.13 12:13:01 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmCertResources.dll [2020.03.13 12:13:00 | 000,294,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provops.dll [2020.03.13 12:13:00 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll [2020.03.13 12:13:00 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll [2020.03.13 12:13:00 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provdatastore.dll [2020.03.13 12:13:00 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProvPluginEng.dll [2020.03.13 12:13:00 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemovableMediaProvisioningPlugin.dll [2020.03.13 12:12:59 | 000,863,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32spl.dll [2020.03.13 12:12:59 | 000,379,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll [2020.03.13 12:12:59 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCore.dll [2020.03.13 12:12:59 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCsp.dll [2020.03.13 12:12:59 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NFCProvisioningPlugin.dll [2020.03.13 12:12:59 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BarcodeProvisioningPlugin.dll [2020.03.13 12:12:59 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provtool.exe [2020.03.13 12:12:59 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FaxPrinterInstaller.dll [2020.03.13 12:12:58 | 001,180,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll [2020.03.13 12:12:58 | 000,540,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winspool.drv [2020.03.13 12:12:58 | 000,291,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceDirectoryClient.dll [2020.03.13 12:12:58 | 000,180,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys [2020.03.13 12:12:57 | 000,637,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys [2020.03.13 12:12:57 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Acx01000.sys [2020.03.13 12:12:57 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\winnat.sys [2020.03.13 12:12:57 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TetheringMgr.dll [2020.03.13 12:12:57 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TelephonyInteractiveUser.dll [2020.03.13 12:12:57 | 000,131,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DTUHandler.exe [2020.03.13 12:12:57 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TelephonyInteractiveUserRes.dll [2020.03.13 12:12:56 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.Service.dll [2020.03.13 12:12:56 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\autopilot.dll [2020.03.13 12:12:56 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll [2020.03.13 12:12:56 | 000,067,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsManagementServiceWinRt.ProxyStub.dll [2020.03.13 12:12:56 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\KNetPwrDepBroker.sys [2020.03.13 12:12:56 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\autopilotdiag.dll [2020.03.13 12:12:55 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanprotdim.dll [2020.03.13 12:12:49 | 003,977,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tellib.dll [2020.03.13 12:12:49 | 000,254,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\mssecflt.sys [2020.03.13 12:12:49 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssecuser.dll [2020.03.13 12:12:23 | 000,531,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS [2020.03.13 12:12:23 | 000,250,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tpm.sys [2020.03.13 12:12:23 | 000,028,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vmbuspipe.dll [2020.03.13 12:12:22 | 000,174,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storahci.sys [2020.03.13 12:12:22 | 000,141,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys [2020.03.13 12:12:22 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BthMini.SYS [2020.03.13 12:12:21 | 000,222,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\ataport.sys [2020.03.13 12:12:21 | 000,056,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pciidex.sys [2020.03.13 12:12:20 | 000,355,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\intelpep.sys [2020.03.13 02:00:18 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\poqexec.exe [2020.03.13 02:00:15 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\poqexec.exe [2020.01.25 20:21:13 | 012,875,104 | ---- | C] (DeskShare Inc. ) -- C:\Users\Przemek\dictation-pro-1-08.exe [28 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ] [14 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2020.04.02 21:33:51 | 000,001,987 | ---- | M] () -- C:\Users\Public\Desktop\AVG AntiVirus FREE.lnk [2020.04.02 21:29:49 | 000,317,864 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgVmm.sys [2020.04.02 21:29:48 | 000,460,184 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgSP.sys [2020.04.02 21:29:48 | 000,235,768 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgStm.sys [2020.04.02 21:29:47 | 000,337,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\avgBoot.exe [2020.04.02 21:29:47 | 000,175,984 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgMonFlt.sys [2020.04.02 21:29:47 | 000,110,064 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgRdr2.sys [2020.04.02 21:29:47 | 000,085,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgRvrt.sys [2020.04.02 21:29:47 | 000,043,568 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgKbd.sys [2020.04.02 21:29:47 | 000,016,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgElam.sys [2020.04.02 21:29:35 | 000,206,672 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgArPot.sys [2020.04.02 21:29:35 | 000,037,960 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgArDisk.sys [2020.04.02 21:29:34 | 000,852,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgSnx.sys [2020.04.02 21:29:21 | 000,234,840 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgbidsdriver.sys [2020.04.02 21:29:21 | 000,179,032 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgbidsh.sys [2020.04.02 21:29:21 | 000,061,272 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgbuniv.sys [2020.04.02 21:27:33 | 000,750,610 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat [2020.04.02 21:27:33 | 000,145,206 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat [2020.04.02 21:27:32 | 001,678,738 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2020.04.02 21:27:32 | 000,667,958 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat [2020.04.02 21:27:32 | 000,126,202 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat [2020.04.02 21:24:04 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2020.04.02 21:22:01 | 000,275,232 | ---- | M] (Malwarebytes) -- C:\WINDOWS\SysNative\drivers\mbamswissarmy.sys [2020.04.02 21:21:08 | 000,000,180 | ---- | M] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat [2020.04.02 21:20:28 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2020.04.02 21:20:27 | 3380,346,880 | -HS- | M] () -- C:\hiberfil.sys [2020.03.26 09:55:28 | 000,391,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdFilter.sys [2020.03.26 09:55:28 | 000,059,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdNisDrv.sys [2020.03.26 09:55:28 | 000,045,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdBoot.sys [2020.03.15 01:54:58 | 025,444,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Hydrogen.dll [2020.03.15 01:54:58 | 001,610,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HologramCompositor.dll [2020.03.15 01:54:54 | 000,689,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CPFilters.dll [2020.03.15 01:54:51 | 001,398,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe [2020.03.15 01:54:51 | 001,077,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe [2020.03.15 01:54:49 | 006,520,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll [2020.03.15 01:54:48 | 007,604,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll [2020.03.15 01:54:47 | 009,930,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2020.03.14 12:11:15 | 000,453,840 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2020.03.13 12:16:15 | 009,711,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll [2020.03.13 12:16:13 | 011,607,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll [2020.03.13 12:16:01 | 000,952,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DolbyDecMFT.dll [2020.03.13 12:16:00 | 002,315,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll [2020.03.13 12:16:00 | 001,555,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll [2020.03.13 12:16:00 | 001,417,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll [2020.03.13 12:16:00 | 000,757,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll [2020.03.13 12:16:00 | 000,380,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSFlacDecoder.dll [2020.03.13 12:16:00 | 000,239,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSFlacEncoder.dll [2020.03.13 12:15:59 | 001,867,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll [2020.03.13 12:15:59 | 001,108,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll [2020.03.13 12:15:59 | 001,098,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyDecMFT.dll [2020.03.13 12:15:59 | 001,012,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll [2020.03.13 12:15:56 | 019,812,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HologramWorld.dll [2020.03.13 12:15:54 | 002,494,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll [2020.03.13 12:15:54 | 001,770,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll [2020.03.13 12:15:53 | 002,072,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll [2020.03.13 12:15:53 | 001,835,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll [2020.03.13 12:15:53 | 001,282,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll [2020.03.13 12:15:53 | 000,444,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSFlacDecoder.dll [2020.03.13 12:15:53 | 000,287,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSFlacEncoder.dll [2020.03.13 12:15:52 | 004,129,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2020.03.13 12:15:52 | 002,956,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll [2020.03.13 12:15:51 | 001,490,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll [2020.03.13 12:15:50 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ddpchunk.dll [2020.03.13 12:15:50 | 000,145,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CscMig.dll [2020.03.13 12:15:46 | 003,243,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.dll [2020.03.13 12:15:46 | 000,701,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.Internal.dll [2020.03.13 12:15:45 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpcore.dll [2020.03.13 12:15:45 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\odbc32.dll [2020.03.13 12:15:45 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iemigplugin.dll [2020.03.13 12:15:45 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msimsg.dll [2020.03.13 12:15:44 | 000,562,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll [2020.03.13 12:15:43 | 005,911,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll [2020.03.13 12:15:43 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakradiag.dll [2020.03.13 12:15:43 | 000,105,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakrathunk.dll [2020.03.13 12:15:42 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IndexedDbLegacy.dll [2020.03.13 12:15:40 | 019,850,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll [2020.03.13 12:15:40 | 000,843,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll [2020.03.13 12:15:40 | 000,667,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll [2020.03.13 12:15:38 | 000,883,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll [2020.03.13 12:15:38 | 000,525,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsecedit.dll [2020.03.13 12:15:38 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\udhisapi.dll [2020.03.13 12:15:38 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\upnpcont.exe [2020.03.13 12:15:37 | 004,348,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Mirage.dll [2020.03.13 12:15:37 | 001,000,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Mirage.Internal.dll [2020.03.13 12:15:37 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProvSysprep.dll [2020.03.13 12:15:36 | 002,180,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\workfolderssvc.dll [2020.03.13 12:15:36 | 002,031,104 | ---- | M] () -- C:\WINDOWS\SysNative\rdpnano.dll [2020.03.13 12:15:36 | 001,273,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcore.dll [2020.03.13 12:15:36 | 000,835,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkfoldersControl.dll [2020.03.13 12:15:36 | 000,225,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkFoldersShell.dll [2020.03.13 12:15:36 | 000,105,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkFolders.exe [2020.03.13 12:15:35 | 001,540,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll [2020.03.13 12:15:35 | 000,097,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll [2020.03.13 12:15:35 | 000,032,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rdpvideominiport.sys [2020.03.13 12:15:32 | 000,042,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SysResetErr.exe [2020.03.13 12:15:31 | 002,224,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.dll [2020.03.13 12:15:31 | 001,214,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll [2020.03.13 12:15:31 | 000,019,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.exe [2020.03.13 12:15:30 | 000,510,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemreset.exe [2020.03.13 12:15:30 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngOnline.dll [2020.03.13 12:15:30 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msimsg.dll [2020.03.13 12:15:26 | 004,580,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll [2020.03.13 12:15:24 | 000,710,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\odbc32.dll [2020.03.13 12:15:24 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iemigplugin.dll [2020.03.13 12:15:23 | 004,855,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll [2020.03.13 12:15:23 | 000,705,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll [2020.03.13 12:15:22 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll [2020.03.13 12:15:22 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakrathunk.dll [2020.03.13 12:15:21 | 007,755,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll [2020.03.13 12:15:21 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IndexedDbLegacy.dll [2020.03.13 12:15:18 | 001,319,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll [2020.03.13 12:15:18 | 000,923,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll [2020.03.13 12:15:17 | 025,900,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll [2020.03.13 12:15:14 | 001,284,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\werconcpl.dll [2020.03.13 12:15:14 | 001,088,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll [2020.03.13 12:15:14 | 000,668,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsecedit.dll [2020.03.13 12:15:14 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MDMAppInstaller.exe [2020.03.13 12:15:14 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseDesktopAppMgmtCSP.dll [2020.03.13 12:15:13 | 001,218,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe [2020.03.13 12:15:13 | 000,669,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\computecore.dll [2020.03.13 12:15:09 | 001,283,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi [2020.03.13 12:15:07 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth12.bin [2020.03.13 12:15:07 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth11.bin [2020.03.13 12:15:06 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth10.bin [2020.03.13 12:15:05 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth9.bin [2020.03.13 12:15:04 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth8.bin [2020.03.13 12:15:04 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth7.bin [2020.03.13 12:15:03 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth6.bin [2020.03.13 12:15:03 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth5.bin [2020.03.13 12:15:02 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth4.bin [2020.03.13 12:15:02 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth3.bin [2020.03.13 12:15:01 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth2.bin [2020.03.13 12:15:00 | 000,210,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcbloader.dll [2020.03.13 12:15:00 | 000,000,315 | ---- | M] () -- C:\WINDOWS\SysNative\DrtmAuth1.bin [2020.03.13 12:14:59 | 000,783,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcblaunch.exe [2020.03.13 12:14:58 | 001,190,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft.Graphics.Display.DisplayEnhancementService.dll [2020.03.13 12:14:58 | 000,358,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dusmsvc.dll [2020.03.13 12:14:58 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\udhisapi.dll [2020.03.13 12:14:58 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dusmapi.dll [2020.03.13 12:14:58 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\upnpcont.exe [2020.03.13 12:14:58 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dusmtask.exe [2020.03.13 12:14:57 | 003,860,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmpltfm.dll [2020.03.13 12:14:57 | 000,980,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmpal.dll [2020.03.13 12:14:57 | 000,915,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmcodecs.dll [2020.03.13 12:14:57 | 000,732,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ortcengine.dll [2020.03.13 12:14:57 | 000,055,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmmvrortc.dll [2020.03.13 12:14:56 | 000,105,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OpenWith.exe [2020.03.13 12:14:55 | 001,031,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsPrint.dll [2020.03.13 12:14:55 | 000,516,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iprtrmgr.dll [2020.03.13 12:14:55 | 000,251,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsDocumentTargetPrint.dll [2020.03.13 12:14:55 | 000,214,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\scecli.dll [2020.03.13 12:14:55 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtm.dll [2020.03.13 12:14:55 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drivers\afunix.sys [2020.03.13 12:14:55 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iprtprio.dll [2020.03.13 12:14:53 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgeIso.dll [2020.03.13 12:14:53 | 000,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msIso.dll [2020.03.13 12:14:53 | 000,166,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MicrosoftAccountTokenProvider.dll [2020.03.13 12:14:53 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msauserext.dll [2020.03.13 12:14:48 | 001,458,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll [2020.03.13 12:14:48 | 000,895,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll [2020.03.13 12:14:47 | 001,413,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll [2020.03.13 12:14:47 | 000,646,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Management.dll [2020.03.13 12:14:47 | 000,136,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\omadmapi.dll [2020.03.13 12:14:47 | 000,130,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmcmnutils.dll [2020.03.13 12:14:47 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\enterpriseresourcemanager.dll [2020.03.13 12:14:47 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf3216.dll [2020.03.13 12:14:47 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DMAlertListener.ProxyStub.dll [2020.03.13 12:14:46 | 000,892,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll [2020.03.13 12:14:46 | 000,868,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windowsperformancerecordercontrol.dll [2020.03.13 12:14:46 | 000,680,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll [2020.03.13 12:14:46 | 000,199,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wermgr.exe [2020.03.13 12:14:46 | 000,193,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\weretw.dll [2020.03.13 12:14:46 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\werdiagcontroller.dll [2020.03.13 12:14:45 | 002,584,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll [2020.03.13 12:14:45 | 000,307,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wincorlib.dll [2020.03.13 12:14:44 | 001,264,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll [2020.03.13 12:14:44 | 000,935,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Taskmgr.exe [2020.03.13 12:14:44 | 000,654,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\uReFS.dll [2020.03.13 12:14:44 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LaunchTM.exe [2020.03.13 12:14:43 | 002,800,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys [2020.03.13 12:14:43 | 000,469,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\daxexec.dll [2020.03.13 12:14:43 | 000,324,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32k.sys [2020.03.13 12:14:42 | 002,740,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\directml.dll [2020.03.13 12:14:42 | 001,985,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll [2020.03.13 12:14:42 | 000,748,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.OnlineId.dll [2020.03.13 12:14:42 | 000,089,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32u.dll [2020.03.13 12:14:41 | 006,084,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll [2020.03.13 12:14:41 | 000,668,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll [2020.03.13 12:14:41 | 000,120,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\profext.dll [2020.03.13 12:14:40 | 002,875,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\esent.dll [2020.03.13 12:14:40 | 001,729,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallService.dll [2020.03.13 12:14:40 | 001,260,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpsharercom.dll [2020.03.13 12:14:40 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallServiceTasks.dll [2020.03.13 12:14:39 | 002,561,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll [2020.03.13 12:14:39 | 002,305,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll [2020.03.13 12:14:39 | 000,299,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll [2020.03.13 12:14:39 | 000,283,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Search.ProtocolHandler.MAPI2.dll [2020.03.13 12:14:39 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll [2020.03.13 12:14:38 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssitlb.dll [2020.03.13 12:14:38 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GraphicsCapture.dll [2020.03.13 12:14:38 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msscntrs.dll [2020.03.13 12:14:37 | 002,021,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll [2020.03.13 12:14:37 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActivationManager.dll [2020.03.13 12:14:37 | 000,526,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidprov.dll [2020.03.13 12:14:37 | 000,279,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll [2020.03.13 12:14:36 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WsmWmiPl.dll [2020.03.13 12:14:36 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WsmAuto.dll [2020.03.13 12:14:36 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSManMigrationPlugin.dll [2020.03.13 12:14:36 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WsmRes.dll [2020.03.13 12:14:36 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsmprovhost.exe [2020.03.13 12:14:36 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSManHTTPConfig.exe [2020.03.13 12:14:36 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LaunchWinApp.exe [2020.03.13 12:14:36 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WsmAgent.dll [2020.03.13 12:14:36 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsmplpxy.dll [2020.03.13 12:14:35 | 005,112,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll [2020.03.13 12:14:35 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sxstrace.exe [2020.03.13 12:14:34 | 003,971,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe [2020.03.13 12:14:34 | 000,627,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicensingWinRT.dll [2020.03.13 12:14:34 | 000,287,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sppcomapi.dll [2020.03.13 12:14:34 | 000,213,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditionUpgradeManagerObj.dll [2020.03.13 12:14:34 | 000,168,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditionUpgradeHelper.dll [2020.03.13 12:14:34 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dot3api.dll [2020.03.13 12:14:34 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dot3msm.dll [2020.03.13 12:14:34 | 000,068,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DeviceReactivation.dll [2020.03.13 12:14:33 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TpmCoreProvisioning.dll [2020.03.13 12:14:33 | 000,042,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tbs.dll [2020.03.13 12:14:33 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TpmCertResources.dll [2020.03.13 12:14:32 | 000,814,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll [2020.03.13 12:14:32 | 000,595,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll [2020.03.13 12:14:31 | 000,680,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vpnike.dll [2020.03.13 12:14:31 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iprtrmgr.dll [2020.03.13 12:14:31 | 000,277,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\scecli.dll [2020.03.13 12:14:31 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtm.dll [2020.03.13 12:14:31 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iprtprio.dll [2020.03.13 12:14:30 | 001,688,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsPrint.dll [2020.03.13 12:14:30 | 001,412,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.Handlers.dll [2020.03.13 12:14:30 | 000,355,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsDocumentTargetPrint.dll [2020.03.13 12:14:30 | 000,181,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe [2020.03.13 12:14:30 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceUpdateAgent.dll [2020.03.13 12:14:30 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pnpclean.dll [2020.03.13 12:14:29 | 000,518,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll [2020.03.13 12:14:29 | 000,133,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ImplatSetup.dll [2020.03.13 12:14:29 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\afunix.sys [2020.03.13 12:14:23 | 000,613,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netprofmsvc.dll [2020.03.13 12:14:23 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\NdisImPlatform.sys [2020.03.13 12:14:23 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\npmproxy.dll [2020.03.13 12:14:23 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nlmproxy.dll [2020.03.13 12:14:23 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nlmsprep.dll [2020.03.13 12:14:21 | 000,734,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpksetup.exe [2020.03.13 12:14:21 | 000,443,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgeIso.dll [2020.03.13 12:14:21 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msIso.dll [2020.03.13 12:14:21 | 000,291,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\ahcache.sys [2020.03.13 12:14:21 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LanguageComponentsInstaller.dll [2020.03.13 12:14:21 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpremove.exe [2020.03.13 12:14:21 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AxInstUI.exe [2020.03.13 12:14:21 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msauserext.dll [2020.03.13 12:14:21 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MUILanguageCleanup.dll [2020.03.13 12:14:21 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LangCleanupSysprepAction.dll [2020.03.13 12:14:21 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpksetupproxyserv.dll [2020.03.13 12:14:19 | 001,697,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll [2020.03.13 12:14:19 | 001,647,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll [2020.03.13 12:14:19 | 001,097,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll [2020.03.13 12:14:18 | 000,921,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll [2020.03.13 12:14:18 | 000,898,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MdmDiagnostics.dll [2020.03.13 12:14:18 | 000,330,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmclient.exe [2020.03.13 12:14:18 | 000,164,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmapi.dll [2020.03.13 12:14:18 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceMetadataRetrievalClient.dll [2020.03.13 12:14:18 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DMAlertListener.ProxyStub.dll [2020.03.13 12:14:17 | 001,835,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll [2020.03.13 12:14:17 | 000,329,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DiagnosticLogCSP.dll [2020.03.13 12:14:17 | 000,165,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcmnutils.dll [2020.03.13 12:14:17 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterpriseresourcemanager.dll [2020.03.13 12:14:01 | 000,929,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthService.exe [2020.03.13 12:14:01 | 000,320,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthAgent.dll [2020.03.13 12:14:01 | 000,107,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthProxyStub.dll [2020.03.13 12:14:01 | 000,063,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthHost.exe [2020.03.13 12:13:59 | 000,845,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe [2020.03.13 12:13:59 | 000,098,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\crashdmp.sys [2020.03.13 12:13:59 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf3216.dll [2020.03.13 12:13:59 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msimg32.dll [2020.03.13 12:13:56 | 002,768,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll [2020.03.13 12:13:56 | 000,605,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sechost.dll [2020.03.13 12:13:56 | 000,477,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\FWPKCLNT.SYS [2020.03.13 12:13:55 | 000,133,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\profapi.dll [2020.03.13 12:13:54 | 001,999,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll [2020.03.13 12:13:53 | 003,799,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll [2020.03.13 12:13:53 | 000,877,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll [2020.03.13 12:13:53 | 000,248,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\weretw.dll [2020.03.13 12:13:53 | 000,221,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wermgr.exe [2020.03.13 12:13:53 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\utcutil.dll [2020.03.13 12:13:53 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\werdiagcontroller.dll [2020.03.13 12:13:52 | 003,371,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll [2020.03.13 12:13:52 | 001,394,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll [2020.03.13 12:13:52 | 001,153,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windowsperformancerecordercontrol.dll [2020.03.13 12:13:52 | 000,796,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll [2020.03.13 12:13:52 | 000,435,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wincorlib.dll [2020.03.13 12:13:52 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pacjsworker.exe [2020.03.13 12:13:51 | 006,436,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll [2020.03.13 12:13:51 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LaunchWinApp.exe [2020.03.13 12:13:50 | 001,260,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctf.dll [2020.03.13 12:13:50 | 000,741,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicensingWinRT.dll [2020.03.13 12:13:50 | 000,636,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sxs.dll [2020.03.13 12:13:50 | 000,234,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll [2020.03.13 12:13:50 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeHelper.dll [2020.03.13 12:13:50 | 000,089,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceReactivation.dll [2020.03.13 12:13:50 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sxstrace.exe [2020.03.13 12:13:49 | 001,743,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll [2020.03.13 12:13:49 | 000,578,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SppExtComObj.Exe [2020.03.13 12:13:49 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\slui.exe [2020.03.13 12:13:49 | 000,353,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppwinob.dll [2020.03.13 12:13:49 | 000,307,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcomapi.dll [2020.03.13 12:13:48 | 004,898,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmpltfm.dll [2020.03.13 12:13:48 | 001,354,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmpal.dll [2020.03.13 12:13:48 | 001,091,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmcodecs.dll [2020.03.13 12:13:48 | 001,032,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ortcengine.dll [2020.03.13 12:13:48 | 000,056,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmmvrortc.dll [2020.03.13 12:13:46 | 000,120,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OpenWith.exe [2020.03.13 12:13:45 | 003,552,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll [2020.03.13 12:13:45 | 001,396,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll [2020.03.13 12:13:45 | 000,974,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll [2020.03.13 12:13:44 | 001,757,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi [2020.03.13 12:13:44 | 001,513,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe [2020.03.13 12:13:44 | 001,366,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi [2020.03.13 12:13:44 | 001,182,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe [2020.03.13 12:13:44 | 000,457,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\cldflt.sys [2020.03.13 12:13:43 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\refsutil.exe [2020.03.13 12:13:43 | 000,765,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uReFS.dll [2020.03.13 12:13:42 | 001,972,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refs.sys [2020.03.13 12:13:38 | 004,048,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRH.dll [2020.03.13 12:13:38 | 001,071,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Taskmgr.exe [2020.03.13 12:13:38 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LaunchTM.exe [2020.03.13 12:13:38 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tier2punctuations.dll [2020.03.13 12:13:37 | 000,838,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Language.dll [2020.03.13 12:13:36 | 006,168,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.pcshell.dll [2020.03.13 12:13:35 | 004,140,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsThresholdAdminFlowUI.dll [2020.03.13 12:13:35 | 000,522,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlows.exe [2020.03.13 12:13:35 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Taskbar.dll [2020.03.13 12:13:34 | 001,083,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll [2020.03.13 12:13:34 | 000,605,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe [2020.03.13 12:13:34 | 000,459,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotifyIcon.exe [2020.03.13 12:13:34 | 000,448,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsEnvironment.Desktop.dll [2020.03.13 12:13:33 | 001,823,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll [2020.03.13 12:13:33 | 001,480,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocoreworker.exe [2020.03.13 12:13:33 | 000,568,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.UXRes.dll [2020.03.13 12:13:33 | 000,535,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usosvc.dll [2020.03.13 12:13:32 | 003,728,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys [2020.03.13 12:13:32 | 000,678,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\daxexec.dll [2020.03.13 12:13:32 | 000,638,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll [2020.03.13 12:13:32 | 000,201,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wcifs.sys [2020.03.13 12:13:32 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wci.dll [2020.03.13 12:13:31 | 001,657,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll [2020.03.13 12:13:31 | 000,127,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32u.dll [2020.03.13 12:13:30 | 001,609,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll [2020.03.13 12:13:30 | 000,908,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll [2020.03.13 12:13:30 | 000,568,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnprv.dll [2020.03.13 12:13:30 | 000,263,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnservice.dll [2020.03.13 12:13:30 | 000,258,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VPNv2CSP.dll [2020.03.13 12:13:30 | 000,146,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\profext.dll [2020.03.13 12:13:29 | 007,905,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll [2020.03.13 12:13:28 | 003,260,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\esent.dll [2020.03.13 12:13:28 | 002,453,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallService.dll [2020.03.13 12:13:28 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallServiceTasks.dll [2020.03.13 12:13:27 | 004,471,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputService.dll [2020.03.13 12:13:27 | 001,481,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpsharercom.dll [2020.03.13 12:13:27 | 000,916,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Core.TextInput.dll [2020.03.13 12:13:27 | 000,642,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TextInputFramework.dll [2020.03.13 12:13:27 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputLocaleManager.dll [2020.03.13 12:13:27 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditBufferTestHook.dll [2020.03.13 12:13:27 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WordBreakers.dll [2020.03.13 12:13:26 | 003,263,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll [2020.03.13 12:13:25 | 002,870,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll [2020.03.13 12:13:25 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Search.ProtocolHandler.MAPI2.dll [2020.03.13 12:13:25 | 000,368,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll [2020.03.13 12:13:25 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll [2020.03.13 12:13:25 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll [2020.03.13 12:13:24 | 000,240,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe [2020.03.13 12:13:23 | 000,401,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe [2020.03.13 12:13:23 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll [2020.03.13 12:13:22 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GraphicsCapture.dll [2020.03.13 12:13:22 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msscntrs.dll [2020.03.13 12:13:20 | 001,764,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll [2020.03.13 12:13:18 | 000,945,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll [2020.03.13 12:13:17 | 002,715,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys [2020.03.13 12:13:17 | 000,802,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll [2020.03.13 12:13:17 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ngcpopkeysrv.dll [2020.03.13 12:13:16 | 000,874,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys [2020.03.13 12:13:16 | 000,441,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys [2020.03.13 12:13:15 | 003,143,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\directml.dll [2020.03.13 12:13:15 | 000,265,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdd.dll [2020.03.13 12:13:14 | 002,474,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll [2020.03.13 12:13:14 | 001,027,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipSVC.dll [2020.03.13 12:13:14 | 000,914,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.OnlineId.dll [2020.03.13 12:13:13 | 002,522,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll [2020.03.13 12:13:13 | 002,157,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll [2020.03.13 12:13:13 | 000,749,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActivationManager.dll [2020.03.13 12:13:12 | 001,751,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll [2020.03.13 12:13:12 | 001,149,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplyTrustOffline.exe [2020.03.13 12:13:12 | 000,649,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidprov.dll [2020.03.13 12:13:12 | 000,433,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MicrosoftAccountExtension.dll [2020.03.13 12:13:12 | 000,273,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MicrosoftAccountCloudAP.dll [2020.03.13 12:13:12 | 000,228,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MicrosoftAccountTokenProvider.dll [2020.03.13 12:13:12 | 000,201,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXApplicabilityBlob.dll [2020.03.13 12:13:12 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CustomInstallExec.exe [2020.03.13 12:13:12 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAProfileNotificationHandler.dll [2020.03.13 12:13:11 | 003,708,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll [2020.03.13 12:13:11 | 002,289,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll [2020.03.13 12:13:11 | 000,338,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll [2020.03.13 12:13:10 | 000,285,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WsmWmiPl.dll [2020.03.13 12:13:10 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSManMigrationPlugin.dll [2020.03.13 12:13:10 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WsmRes.dll [2020.03.13 12:13:10 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsmprovhost.exe [2020.03.13 12:13:10 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSManHTTPConfig.exe [2020.03.13 12:13:10 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WsmAgent.dll [2020.03.13 12:13:10 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsmplpxy.dll [2020.03.13 12:13:09 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WsmAuto.dll [2020.03.13 12:13:09 | 000,066,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlrmdr.exe [2020.03.13 12:13:09 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mpnotify.exe [2020.03.13 12:13:08 | 000,833,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pkeyhelper.dll [2020.03.13 12:13:08 | 000,239,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vdsbas.dll [2020.03.13 12:13:07 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dot3msm.dll [2020.03.13 12:13:07 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dot3api.dll [2020.03.13 12:13:07 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WiredNetworkCSP.dll [2020.03.13 12:13:06 | 004,622,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [2020.03.13 12:13:02 | 001,057,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll [2020.03.13 12:13:02 | 000,782,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll [2020.03.13 12:13:02 | 000,259,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmcsp.dll [2020.03.13 12:13:02 | 000,128,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifitask.exe [2020.03.13 12:13:02 | 000,048,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tbs.dll [2020.03.13 12:13:02 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cellulardatacapabilityhandler.dll [2020.03.13 12:13:02 | 000,029,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tbs.sys [2020.03.13 12:13:01 | 001,092,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmCoreProvisioning.dll [2020.03.13 12:13:01 | 000,141,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provpackageapidll.dll [2020.03.13 12:13:01 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.Provisioning.ProxyStub.dll [2020.03.13 12:13:01 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmCertResources.dll [2020.03.13 12:13:00 | 000,294,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provops.dll [2020.03.13 12:13:00 | 000,271,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll [2020.03.13 12:13:00 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll [2020.03.13 12:13:00 | 000,097,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provdatastore.dll [2020.03.13 12:13:00 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProvPluginEng.dll [2020.03.13 12:13:00 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemovableMediaProvisioningPlugin.dll [2020.03.13 12:12:59 | 000,863,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32spl.dll [2020.03.13 12:12:59 | 000,379,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll [2020.03.13 12:12:59 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCore.dll [2020.03.13 12:12:59 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCsp.dll [2020.03.13 12:12:59 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NFCProvisioningPlugin.dll [2020.03.13 12:12:59 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BarcodeProvisioningPlugin.dll [2020.03.13 12:12:59 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provtool.exe [2020.03.13 12:12:59 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FaxPrinterInstaller.dll [2020.03.13 12:12:58 | 001,180,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll [2020.03.13 12:12:58 | 000,540,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winspool.drv [2020.03.13 12:12:58 | 000,291,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceDirectoryClient.dll [2020.03.13 12:12:58 | 000,180,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys [2020.03.13 12:12:57 | 000,637,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys [2020.03.13 12:12:57 | 000,337,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Acx01000.sys [2020.03.13 12:12:57 | 000,250,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\winnat.sys [2020.03.13 12:12:57 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TetheringMgr.dll [2020.03.13 12:12:57 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TelephonyInteractiveUser.dll [2020.03.13 12:12:57 | 000,131,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DTUHandler.exe [2020.03.13 12:12:57 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TelephonyInteractiveUserRes.dll [2020.03.13 12:12:56 | 000,878,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.Service.dll [2020.03.13 12:12:56 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\autopilot.dll [2020.03.13 12:12:56 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll [2020.03.13 12:12:56 | 000,067,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsManagementServiceWinRt.ProxyStub.dll [2020.03.13 12:12:56 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\KNetPwrDepBroker.sys [2020.03.13 12:12:56 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\autopilotdiag.dll [2020.03.13 12:12:55 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanprotdim.dll [2020.03.13 12:12:49 | 003,977,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tellib.dll [2020.03.13 12:12:49 | 000,254,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\mssecflt.sys [2020.03.13 12:12:49 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssecuser.dll [2020.03.13 12:12:23 | 000,531,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS [2020.03.13 12:12:23 | 000,250,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tpm.sys [2020.03.13 12:12:23 | 000,131,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\UsbXhciCompanion.dll [2020.03.13 12:12:23 | 000,028,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vmbuspipe.dll [2020.03.13 12:12:22 | 000,174,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storahci.sys [2020.03.13 12:12:22 | 000,141,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys [2020.03.13 12:12:22 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BthMini.SYS [2020.03.13 12:12:21 | 000,222,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\ataport.sys [2020.03.13 12:12:21 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\RdpIdd.dll [2020.03.13 12:12:21 | 000,056,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pciidex.sys [2020.03.13 12:12:20 | 000,355,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\intelpep.sys [2020.03.13 12:12:20 | 000,047,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\SecureUSBVideo.dll [2020.03.13 02:00:55 | 000,492,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\poqexec.exe [2020.03.13 02:00:55 | 000,390,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\poqexec.exe [28 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ] [14 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2020.04.02 21:33:51 | 000,001,999 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG AntiVirus FREE.lnk [2020.04.02 21:33:51 | 000,001,987 | ---- | C] () -- C:\Users\Public\Desktop\AVG AntiVirus FREE.lnk [2020.03.13 12:15:35 | 002,031,104 | ---- | C] () -- C:\WINDOWS\SysNative\rdpnano.dll [2020.03.13 12:15:07 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth12.bin [2020.03.13 12:15:07 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth11.bin [2020.03.13 12:15:06 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth10.bin [2020.03.13 12:15:05 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth9.bin [2020.03.13 12:15:04 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth8.bin [2020.03.13 12:15:04 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth7.bin [2020.03.13 12:15:03 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth6.bin [2020.03.13 12:15:03 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth5.bin [2020.03.13 12:15:02 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth4.bin [2020.03.13 12:15:02 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth3.bin [2020.03.13 12:15:01 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth2.bin [2020.03.13 12:15:00 | 000,000,315 | ---- | C] () -- C:\WINDOWS\SysNative\DrtmAuth1.bin [2019.11.29 15:29:43 | 000,000,568 | ---- | C] () -- C:\WINDOWS\eReg.dat [2019.08.14 12:49:26 | 000,000,701 | ---- | C] () -- C:\Users\Przemek\AppData\Roaming\p2wsound.dll [2019.07.20 16:01:58 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2019.07.20 13:10:06 | 001,101,312 | ---- | C] () -- C:\WINDOWS\SysWow64\TextInputMethodFormatter.dll [2019.05.15 16:50:12 | 000,007,606 | ---- | C] () -- C:\Users\Przemek\AppData\Local\Resmon.ResmonCfg [2019.03.19 06:49:45 | 000,003,103 | ---- | C] () -- C:\WINDOWS\SysWow64\mmc.exe.config [2019.03.19 06:49:45 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT [2019.03.19 06:49:44 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat [2019.03.19 06:46:09 | 000,019,485 | ---- | C] () -- C:\WINDOWS\SysWow64\srms-apr.dat [2019.03.19 06:46:04 | 000,518,144 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2019.03.19 06:45:59 | 000,053,248 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2019.03.19 06:45:19 | 000,002,404 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini [2019.03.19 06:45:16 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat [2019.03.19 06:45:16 | 000,046,656 | ---- | C] () -- C:\WINDOWS\SysWow64\umpdc.dll [2019.03.19 06:45:13 | 003,577,856 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.Analysis.dll [2019.03.19 06:45:13 | 000,208,384 | ---- | C] () -- C:\WINDOWS\SysWow64\HeatCore.dll [2019.03.19 06:45:13 | 000,107,008 | ---- | C] () -- C:\WINDOWS\SysWow64\WindowsDefaultHeatProcessor.dll [2019.03.19 06:45:13 | 000,064,000 | ---- | C] () -- C:\WINDOWS\SysWow64\xboxgipsynthetic.dll [2019.03.19 06:45:13 | 000,054,784 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.WARP.JITService.exe [2019.03.19 06:45:07 | 000,330,752 | ---- | C] () -- C:\WINDOWS\SysWow64\ssdm.dll [2019.03.19 06:44:58 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat [2019.03.19 06:44:30 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2017.08.14 13:13:27 | 000,000,000 | ---- | C] () -- C:\ProgramData\DP45977C.lfl [color=#E56717]========== ZeroAccess Check ==========[/color] [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\windows.storage.dll -- [2020.03.13 12:13:29 | 007,905,784 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\windows.storage.dll -- [2020.03.13 12:14:41 | 006,084,344 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2019.03.19 06:43:54 | 001,031,680 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2019.03.19 06:45:12 | 000,810,496 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2019.03.19 06:44:00 | 000,532,992 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2020.04.02 21:33:54 | 000,000,000 | ---D | M] -- C:\Users\Przemek\AppData\Roaming\AVG [2020.01.30 22:29:32 | 000,000,000 | ---D | M] -- C:\Users\Przemek\AppData\Roaming\DAEMON Tools Lite [2019.07.12 08:05:01 | 000,000,000 | ---D | M] -- C:\Users\Przemek\AppData\Roaming\DS4Windows [2017.08.15 13:04:07 | 000,000,000 | ---D | M] -- C:\Users\Przemek\AppData\Roaming\Mafia III_Uninstall [2018.06.20 18:42:58 | 000,000,000 | ---D | M] -- C:\Users\Przemek\AppData\Roaming\Mount&Blade Warband [2019.12.10 21:17:42 | 000,000,000 | ---D | M] -- C:\Users\Przemek\AppData\Roaming\Origin [2020.02.11 18:44:43 | 000,000,000 | ---D | M] -- C:\Users\Przemek\AppData\Roaming\uTorrent [2019.11.05 22:58:59 | 000,000,000 | ---D | M] -- C:\Users\Przemek\AppData\Roaming\Wargaming.net [2019.08.14 12:51:55 | 000,000,000 | ---D | M] -- C:\Users\Przemek\AppData\Roaming\YCanPDF [color=#E56717]========== Purity Check ==========[/color] < End of report >