Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-07-2020 01 Ran by Dan (administrator) on DESKTOP-JL222M0 (Hewlett-Packard p6551uk) (19-07-2020 03:09:16) Running from C:\Users\Dan\Downloads Loaded Profiles: Dan Platform: Windows 10 Education Version 1803 17134.1550 (X64) Language: English (United States) Default browser: Chrome Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ABBYY Production LLC -> ABBYY Production LLC) C:\Program Files (x86)\Common Files\ABBYY\FineReader\14.00\Licensing\NetworkLicenseServer.exe (ABBYY Production LLC -> ABBYY Production LLC.) C:\Program Files (x86)\ABBYY FineReader 14\ScreenshotReader.exe (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <3> (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems Incorporated) C:\Program Files\WindowsApps\Adobe.CC.XD_30.2.12.3_x64__adky2gkssdxte\XD.exe (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc\AdobeNotificationClient.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Epic Games Inc. -> Epic Games, Inc.) E:\Program Files\Epic Games\Launcher\Engine\Binaries\Win64\UnrealCEFSubProcess.exe (Epic Games Inc. -> Epic Games, Inc.) E:\Program Files\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <34> (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe (Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\Dan\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe <2> (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20560.0_x64__8wekyb3d8bbwe\HxAccounts.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20560.0_x64__8wekyb3d8bbwe\HxCalendarAppImm.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20560.0_x64__8wekyb3d8bbwe\HxOutlook.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20560.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12007.1001.2.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxApp_48.67.14001.0_x64__8wekyb3d8bbwe\XboxApp.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\NisSrv.exe (Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe (Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe (NoMachine S.a.r.l. -> NoMachine) C:\Program Files (x86)\NoMachine\bin\nxclient.bin (NoMachine S.a.r.l. -> NoMachine) C:\Program Files (x86)\NoMachine\bin\nxd.exe (NoMachine S.a.r.l. -> NoMachine) C:\Program Files (x86)\NoMachine\bin\nxnode.bin (NoMachine S.a.r.l. -> NoMachine) C:\Program Files (x86)\NoMachine\bin\nxserver.bin (NoMachine S.a.r.l. -> NoMachine) C:\Program Files (x86)\NoMachine\bin\nxservice64.exe (TEFINCOM S.A. -> ) C:\Program Files (x86)\NordVPN\nordvpn-service.exe (TEFINCOM S.A. -> NordVPN) C:\Program Files (x86)\NordVPN\NordVPN.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-14] (Logitech -> Logitech, Inc.) HKLM\...\Run: [MTPW] => C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] (MiniTool Software Limited -> ) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2091064 2020-06-20] (Adobe Inc. -> Adobe Inc.) HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [114824 2020-06-06] (Adobe Inc. -> ) HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3377440 2020-07-11] (Valve -> Valve Corporation) HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\Run: [NordVPN] => C:\Program Files (x86)\NordVPN\NordVPN.exe [1825744 2020-04-29] (TEFINCOM S.A. -> NordVPN) HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2013-01-16] (Hewlett-Packard Company) [File not signed] HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\Run: [EpicGamesLauncher] => E:\Program Files\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32350096 2020-07-02] (Epic Games Inc. -> Epic Games, Inc.) HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-05-16] (Nero AG -> Nero AG) HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\Run: [Bonus.SSR.FR14] => C:\Program Files (x86)\ABBYY FineReader 14\ScreenshotReader.exe [1082016 2019-02-13] (ABBYY Production LLC -> ABBYY Production LLC.) HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe [2630712 2020-06-20] (Adobe Inc. -> Adobe Inc.) HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Dan\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Dan\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\RunOnce: [Uninstall 20.084.0426.0007\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dan\AppData\Local\Microsoft\OneDrive\20.084.0426.0007\amd64" HKU\S-1-5-21-910847060-2977998255-1486674742-1001\...\RunOnce: [Uninstall 20.084.0426.0007] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dan\AppData\Local\Microsoft\OneDrive\20.084.0426.0007" HKLM\...\Print\Monitors\IppMon: C:\WINDOWS\system32\IPPMon.dll [251392 2020-05-06] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Print\Monitors\NoMachine Port Monitor: C:\Program Files (x86)\NoMachine\bin\libnxlp64.dll [850792 2020-05-11] (NoMachine S.a.r.l. -> ) HKLM\...\Print\Monitors\PDF-XChange5-ABBYY-FR: C:\WINDOWS\system32\pxc50pmaf.dll [57536 2016-10-03] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-07-01] (Google LLC -> Google LLC) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{10880D85-AAD9-4558-ABDC-2AB1552D831F}] -> C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe [2013-01-16] (Hewlett-Packard Company -> Hewlett-Packard Company) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{38978A22-CFC4-4D9A-8C96-1857214A4A1C}] -> C:\Program Files (x86)\ABBYY FineReader 14\ScreenshotReader.exe [2019-02-13] (ABBYY Production LLC -> ABBYY Production LLC.) Lsa: [Authentication Packages] msv1_0 nxlsa Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2020-04-25] () Startup: C:\Users\Dan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2018-10-29] () GroupPolicy: Restriction ? <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1296C3C3-5522-41CC-B1EC-382FFDEA1404} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-04-29] (Google LLC -> Google LLC) Task: {144048B7-AB6C-4AA7-A0D1-D99FF8321E67} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpCmdRun.exe [512272 2020-07-02] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {2DDC916D-312B-4AFB-ABDB-B8B260236C8D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpCmdRun.exe [512272 2020-07-02] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {44AD5165-8523-4E0E-834A-505B16041EE1} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {879689F1-2FD8-4CFF-B132-2514042AC897} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Task: {98650241-203D-4F69-8723-90667F61E9A4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpCmdRun.exe [512272 2020-07-02] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {A807DA06-80C5-4346-B368-5DBAB8BC1587} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpCmdRun.exe [512272 2020-07-02] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {B1C28886-6476-4796-B828-41F831E37772} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-04-29] (Google LLC -> Google LLC) Task: {D87D8C28-58B4-45D9-9D05-2F3F1F78464E} - System32\Tasks\MiniToolPartitionWizard => C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] (MiniTool Software Limited -> ) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{1ad21dbd-3f96-4097-8d56-fba94dfd83f0}: [DhcpNameServer] 103.86.96.100 103.86.99.100 Tcpip\..\Interfaces\{60a222a6-1049-4f52-b8b7-ac5222dc54ad}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{70a4a1de-0fbe-407f-9321-36a72f75f35f}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== FireFox: ======== FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-06-20] (Adobe Inc. -> Adobe Systems) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-18] (Adobe Systems, Incorporated -> Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-06-20] (Adobe Inc. -> Adobe Systems) Chrome: ======= CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default [2020-07-19] CHR HomePage: Default -> hxxp://natemat.pl/122411,kobiety-wariuja-na-widok-striptizera-bo-ich-faceci-sa-zaniedbani-lub-nie-potrafia-sprzedac-swojej-atrakcyjnosci CHR StartupUrls: Default -> "hxxp://9gag.com/gag/ae3exPv","hxxp://natemat.pl/122411,kobiety-wariuja-na-widok-striptizera-bo-ich-faceci-sa-zaniedbani-lub-nie-potrafia-sprzedac-swojej-atrakcyjnosci","hxxps://www.messenger.com/t/717028329","hxxps://trello.com/b/22b1A2lu/personal","hxxp://kokopeliseeds.com/" CHR DefaultSearchURL: Default -> hxxps://ssl.gstatic.com/apps-notify/drive_96_1x.png CHR Extension: (Prezentacje) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-04-29] CHR Extension: (Google Drive) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aghbiahbpaijignceidepookljebhfak [2020-05-15] CHR Extension: (Postman Interceptor) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aicmkgpgakddgnaphhhpliifpcfhicfo [2020-05-15] CHR Extension: (Privacy Pass) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajhmfdgkijocedmfjonnpjfojldioehi [2020-07-01] CHR Extension: (TheiaIDE) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\akobgogfldnoieamcnfebkghjjailmmj [2020-05-15] CHR Extension: (Dokumenty) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-04-29] CHR Extension: (Dysk Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-04-29] CHR Extension: (RescueTime for Chrome and Chrome OS) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdakmnplckeopfghnlpocafcepegjeap [2020-07-02] CHR Extension: (Sketchboard.io) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgafhjpdkfjfmmjbebbdckolonomaoil [2020-05-15] CHR Extension: (ColorZilla) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2020-05-15] CHR Extension: (Połączenia przez Skype) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2020-05-15] CHR Extension: (YouTube) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-04-29] CHR Extension: (Pushbullet) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2020-07-02] CHR Extension: (RentalWatch - wyszukiwarka Gumtree / Olx) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjaiampoeklkdecjifpekmpjdmpailig [2020-05-15] CHR Extension: (uBlock Origin) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-07-02] CHR Extension: (Image Downloader) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpniohnfphhjihaiiggeabnkjhpaldj [2020-05-15] CHR Extension: (Story Wars) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coadbejlmmejdkpdcnbikfcplabhgmpo [2020-05-15] CHR Extension: (jQuery Debugger) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi [2020-05-15] CHR Extension: (Colorblinding) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgbgleaofjainknadoffbjkclicbbgaa [2020-05-15] CHR Extension: (Mailto: for Gmail™) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgkkmcknielgdhebimdnfahpipajcpjn [2020-05-15] CHR Extension: (PerfectPixel by WellDoneCode (pixel perfect)) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkaagdgjmgdmbnecmcefdhjekcoceebi [2020-05-15] CHR Extension: (IPvFoo) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecanpcehffngcegjmadlcijfolapggal [2020-05-15] CHR Extension: (Session Buddy) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2020-05-15] CHR Extension: (Network and Internet tools) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekpdpmpcgcmpaeokmclflfpadaklgpji [2020-05-15] CHR Extension: (Google Font Previewer for Chrome) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\engndlnldodigdjamndkplafgmkkencc [2020-05-15] CHR Extension: (Productivity Owl) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\eoagmdboiealblmpaahjlhajggndaahi [2020-05-15] CHR Extension: (Appscope) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahhnljlgpcpinodieaejldlfobnggcl [2020-05-15] CHR Extension: (Arkusze) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-04-29] CHR Extension: (Stylish - Custom themes for any website) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2020-05-15] CHR Extension: (Dodatek Google Analytics Opt-out firmy Google) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2020-05-15] CHR Extension: (React Developer Tools) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmkadmapgofadopljbjfkapdkoienihi [2020-07-18] CHR Extension: (Dokumenty Google offline) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-07-01] CHR Extension: (Przycisk Zapisz Pinteresta) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2020-07-02] CHR Extension: (Wappalyzer) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gppongmhjkpfnbhagpmjfkannfbllamg [2020-07-02] CHR Extension: (Read Aloud: A Text to Speech Voice Reader) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdhinadidafjejdhmfkjgnolgimiaplp [2020-07-18] CHR Extension: (LastPass: Free Password Manager) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2020-07-18] CHR Extension: (Google Keep – notatki i listy) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2020-07-18] CHR Extension: (Messages) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpfldicfbfomlpcikngkocigghgafkph [2020-07-01] CHR Extension: (ModHeader) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\idgpnmonknjnojddfkpgkljpfnnfcklj [2020-07-02] CHR Extension: (Wypełniacz loterii paragonowej) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jheghjhekamfaapalhjciimpegfohfnm [2020-05-15] CHR Extension: (Notepad) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifbgbhljpaghakjimpldeicachacijp [2020-05-15] CHR Extension: (Extensity) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjmflmamggggndanpgfnpelongoepncg [2020-05-15] CHR Extension: (Floating for YouTube™) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2020-07-01] CHR Extension: (Private Internet Access) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jplnlifepflhkbkgonidnobkakhmpnmh [2020-07-02] CHR Extension: (Grammarly for Chrome) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2020-07-18] CHR Extension: (Design Grid Overlay) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmaadknbpdklpcommafmcboghdlopmbi [2020-05-15] CHR Extension: (TrackingTime | Time Tracker) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\knailkjkjcfegledhjhcfacdngnicimb [2020-05-15] CHR Extension: (StayFocusd) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\laankejkbhbdhmipfmgcngdelahlfoji [2020-05-15] CHR Extension: (Momentum) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\laookkfknpbbblfpciffpaejjkokdgca [2020-07-18] CHR Extension: (Allow CORS: Access-Control-Allow-Origin) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhobafahddgcelffkeicbaginigeejlf [2020-05-15] CHR Extension: (Loom for Chrome) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\liecbddmkiiihnedobmlmillhodjkdmb [2020-07-18] CHR Extension: (User-Agent Switcher) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkmofgnohbedopheiphabfhfjgkhfcgf [2020-05-15] CHR Extension: (Extensions Manager (aka Switcher)) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpleipinonnoibneeejgjnoeekmbopbc [2020-05-15] CHR Extension: (Google Dictionary (by Google)) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2020-05-15] CHR Extension: (Screencastify - Screen Video Recorder) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmeijimgabbpbgpdklnllpncmdofkcpn [2020-07-18] CHR Extension: (About Chromebooks) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mojlgbmdejneipihaglfeocgchcachep [2020-05-28] CHR Extension: (drumbit) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mplpmdejoamenolpcojgegminhcnmibo [2020-05-15] CHR Extension: (Google Photos) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncmjhecbjeaamljdfahankockkkdmedg [2020-07-01] CHR Extension: (Video Speed Controller) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffaoalbilbmmfgbnbgppjihopabppdk [2020-07-02] CHR Extension: (Vue.js devtools) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhdogjmejiglipccpnnnanhbledajbpd [2020-05-15] CHR Extension: (Save to Pocket) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2020-05-15] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-04-29] CHR Extension: (JetBrains Toolbox Extension) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\offnedcbhjldheanlbojaefbfbllddna [2020-07-01] CHR Extension: (Neater Bookmarks) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofgjggbjanlhbgaemjbkiegeebmccifi [2020-05-15] CHR Extension: (Książkowa Cebula) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdkdbiepddofnnblfkaeogcfledfchcm [2020-05-15] CHR Extension: (Evernote Web Clipper) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2020-07-18] CHR Extension: (Spotify) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjibgclleladliembfgfagdaldikeohf [2020-05-15] CHR Extension: (Gmail) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-04-29] CHR Extension: (Chrome Media Router) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-07-01] CHR Extension: (Secure Shell App) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnhechapfaindjhompbnflcldabbghjo [2020-07-18] ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ABBYY.Licensing.FineReader.14.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\14.00\Licensing\NetworkLicenseServer.exe [1021984 2018-09-13] (ABBYY Production LLC -> ABBYY Production LLC) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [844856 2020-06-20] (Adobe Inc. -> Adobe Inc.) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [255472 2015-12-17] (Microsoft Windows Hardware Compatibility Publisher -> AMD) R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2013-01-16] (Hewlett-Packard Company) [File not signed] R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-05-16] (Nero AG -> Nero AG) R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [237520 2020-04-29] (TEFINCOM S.A. -> ) R2 nxservice; C:\Program Files (x86)\NoMachine\bin\nxservice64.exe [1039720 2020-05-11] (NoMachine S.a.r.l. -> NoMachine) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5327168 2020-03-31] (Microsoft Windows Publisher -> Microsoft Corporation) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\NisSrv.exe [2496144 2020-07-02] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MsMpEng.exe [104192 2020-07-02] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 ALCATELUSB; C:\WINDOWS\System32\Drivers\AlcatelUsb.sys [25088 2012-08-22] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider) R0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [21648880 2015-12-17] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [674288 2015-12-17] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110096 2016-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus.sys [131712 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R1 MpKslDrv; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F9AA1C89-2855-4B64-BAB4-EF017C34A03E}\MpKslDrv.sys [43232 2020-07-19] (Microsoft Windows -> Microsoft Corporation) R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2018-04-12] (Microsoft Windows -> MediaTek Inc.) R3 nlwt; C:\WINDOWS\system32\DRIVERS\nlwt.sys [39360 2020-04-24] (TEFINCOM S.A. -> WireGuard LLC) R2 nxaudio; C:\WINDOWS\system32\drivers\nxaudio.sys [38200 2020-04-09] (Microsoft Windows Hardware Compatibility Publisher -> NoMachine) R2 nxfs; C:\Program Files (x86)\NoMachine\bin\drivers\nxdisk\amd64\nxfs.sys [73080 2020-05-06] (NoMachine S.a.r.l. -> NoMachine) R2 nxusbf; C:\WINDOWS\System32\drivers\nxusbf.sys [122448 2018-08-22] (Microsoft Windows Hardware Compatibility Publisher -> NoMachine) R3 nxusbh; C:\WINDOWS\System32\drivers\nxusbh.sys [146512 2018-08-22] (Microsoft Windows Hardware Compatibility Publisher -> NoMachine) R3 nxusbs; C:\WINDOWS\System32\drivers\nxusbs.sys [28752 2018-08-22] (Microsoft Windows Hardware Compatibility Publisher -> NoMachine) R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> ) S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> ) S3 qcusbser; C:\WINDOWS\System32\drivers\qcusbser.sys [242688 2013-01-15] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated) S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64640 2016-09-05] (Samsung Electronics CO., LTD. -> QUALCOMM Incorporated) R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] (Valve Corp. -> ) R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp. -> ) R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2018-07-24] (TEFINCOM S.A. -> The OpenVPN Project) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45976 2020-07-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [408816 2020-07-02] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-07-02] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) =================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-07-19 03:09 - 2020-07-19 03:10 - 000033091 _____ C:\Users\Dan\Downloads\FRST.txt 2020-07-19 03:07 - 2020-07-19 03:07 - 002292736 _____ (Farbar) C:\Users\Dan\Downloads\FRST64.exe 2020-07-18 23:46 - 2020-07-19 00:11 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2020-07-18 23:45 - 2020-07-19 00:10 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2020-07-18 23:45 - 2020-07-18 23:45 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk 2020-07-18 23:45 - 2020-07-18 23:45 - 000002124 _____ C:\ProgramData\Desktop\Acrobat Reader DC.lnk 2020-07-03 17:54 - 2020-07-03 17:55 - 001406875 _____ C:\Users\Dan\Documents\Psych Kliniczna.epub 2020-07-03 16:34 - 2020-07-03 16:34 - 214747977 _____ C:\Users\Dan\Downloads\H.Sęk Psychologia kliniczna.PDF 2020-07-03 16:33 - 2020-07-03 16:33 - 000000000 ____D C:\Users\Dan\AppData\Roaming\ABBYY 2020-07-03 16:27 - 2020-07-03 16:27 - 000002289 _____ C:\Users\Public\Desktop\ABBYY FineReader 14.lnk 2020-07-03 16:27 - 2020-07-03 16:27 - 000002289 _____ C:\ProgramData\Desktop\ABBYY FineReader 14.lnk 2020-07-03 16:27 - 2020-07-03 16:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 14 2020-07-03 16:27 - 2016-10-03 15:46 - 000057536 _____ (Tracker Software Products (Canada) Ltd.) C:\WINDOWS\system32\pxc50pmaf.dll 2020-07-03 16:26 - 2020-07-03 16:33 - 000000000 ____D C:\Program Files (x86)\ABBYY FineReader 14 2020-07-03 16:26 - 2020-07-03 16:27 - 000000000 ____D C:\ProgramData\ABBYY 2020-07-03 16:26 - 2020-07-03 16:26 - 000000000 ____D C:\Users\Dan\AppData\Local\ABBYY 2020-07-03 16:16 - 2020-07-03 16:16 - 000000000 ____D C:\temp 2020-07-03 16:10 - 2020-07-03 16:10 - 000228544 _____ (AVAST Software) C:\Users\Dan\Downloads\avast_free_antivirus_setup_online.exe 2020-07-03 16:10 - 2020-07-03 16:10 - 000000000 ____D C:\ProgramData\Avast Software 2020-07-03 16:05 - 2020-07-03 16:05 - 000000000 ____D C:\Users\Dan\Downloads\ABBYY_FineReader_15.0.110.1875_Corporate_Multilingual +ABBYY_FineReader_Enterprise 2020-07-03 00:23 - 2020-07-03 00:24 - 000000000 ____D C:\Users\Dan\Desktop\eko2020 2020-07-02 23:15 - 2020-06-02 15:53 - 001787208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2020-07-02 23:15 - 2020-06-02 15:53 - 001627464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll 2020-07-02 23:15 - 2020-06-02 15:53 - 001429824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2020-07-02 23:15 - 2020-06-02 15:53 - 000830280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll 2020-07-02 23:15 - 2020-06-02 15:53 - 000825160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll 2020-07-02 23:15 - 2020-06-02 15:53 - 000749888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll 2020-07-02 23:15 - 2020-06-02 15:53 - 000670024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll 2020-07-02 23:15 - 2020-06-02 15:53 - 000652104 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll 2020-07-02 23:15 - 2020-06-02 15:53 - 000495424 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll 2020-07-02 23:15 - 2020-06-02 15:53 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll 2020-07-02 23:15 - 2020-06-02 15:48 - 002208056 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2020-07-02 23:15 - 2020-06-02 15:25 - 012886528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2020-07-02 23:15 - 2020-06-02 15:24 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll 2020-07-02 23:15 - 2020-06-02 15:24 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll 2020-07-02 23:15 - 2020-06-02 15:23 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2020-07-02 23:15 - 2020-06-02 15:23 - 001059328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll 2020-07-02 23:15 - 2020-06-02 15:23 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr 2020-07-02 23:15 - 2020-06-02 15:23 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll 2020-07-02 23:15 - 2020-06-02 15:22 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll 2020-07-02 23:15 - 2020-06-02 15:22 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2020-07-02 23:15 - 2020-06-02 15:21 - 001211392 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe 2020-07-02 23:15 - 2020-06-02 15:21 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2020-07-02 23:15 - 2020-06-02 15:21 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll 2020-07-02 23:15 - 2020-06-02 15:20 - 001861120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe 2020-07-02 23:15 - 2020-06-02 15:20 - 001365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2020-07-02 23:15 - 2020-06-02 15:20 - 001342464 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll 2020-07-02 23:15 - 2020-06-02 15:20 - 001194496 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll 2020-07-02 23:15 - 2020-06-02 15:19 - 001339392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll 2020-07-02 23:15 - 2020-06-02 15:19 - 000727552 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll 2020-07-02 23:15 - 2020-06-02 15:18 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll 2020-07-02 23:15 - 2020-06-02 15:18 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll 2020-07-02 23:15 - 2020-06-02 15:18 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll 2020-07-02 23:15 - 2020-06-02 14:02 - 001320128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2020-07-02 23:15 - 2020-06-02 13:49 - 005671936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2020-07-02 23:15 - 2020-06-02 13:46 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2020-07-02 23:15 - 2020-06-02 13:45 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-07-02 23:15 - 2020-06-02 13:44 - 002881024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-07-02 23:15 - 2020-06-02 13:43 - 002252800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2020-07-02 23:15 - 2020-06-02 11:07 - 001224504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-07-02 23:15 - 2020-06-02 11:07 - 001027384 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-07-02 23:15 - 2020-06-02 11:07 - 000568104 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-07-02 23:15 - 2020-06-02 11:07 - 000491216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2020-07-02 23:15 - 2020-06-02 11:07 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2020-07-02 23:15 - 2020-06-02 11:06 - 003285440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2020-07-02 23:15 - 2020-06-02 11:06 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2020-07-02 23:15 - 2020-06-02 11:06 - 000782984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2020-07-02 23:15 - 2020-06-02 11:06 - 000710240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2020-07-02 23:15 - 2020-06-02 11:06 - 000496456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2020-07-02 23:15 - 2020-06-02 11:06 - 000441632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2020-07-02 23:15 - 2020-06-02 11:06 - 000435512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2020-07-02 23:15 - 2020-06-02 11:06 - 000248888 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2020-07-02 23:15 - 2020-06-02 11:06 - 000243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-07-02 23:15 - 2020-06-02 11:06 - 000210240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2020-07-02 23:15 - 2020-06-02 11:06 - 000170312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2020-07-02 23:15 - 2020-06-02 11:06 - 000159664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2020-07-02 23:15 - 2020-06-02 11:05 - 009079096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-07-02 23:15 - 2020-06-02 11:05 - 007448968 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2020-07-02 23:15 - 2020-06-02 11:05 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-07-02 23:15 - 2020-06-02 11:05 - 001780352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2020-07-02 23:15 - 2020-06-02 11:05 - 001288720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2020-07-02 23:15 - 2020-06-02 11:05 - 001112504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2020-07-02 23:15 - 2020-06-02 11:05 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2020-07-02 23:15 - 2020-06-02 11:05 - 000787104 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2020-07-02 23:15 - 2020-06-02 11:05 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2020-07-02 23:15 - 2020-06-02 10:47 - 025857024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2020-07-02 23:15 - 2020-06-02 10:45 - 022747648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-07-02 23:15 - 2020-06-02 10:42 - 004852224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2020-07-02 23:15 - 2020-06-02 10:42 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll 2020-07-02 23:15 - 2020-06-02 10:41 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2020-07-02 23:15 - 2020-06-02 10:41 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll 2020-07-02 23:15 - 2020-06-02 10:40 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll 2020-07-02 23:15 - 2020-06-02 10:40 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2020-07-02 23:15 - 2020-06-02 10:40 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll 2020-07-02 23:15 - 2020-06-02 10:40 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2020-07-02 23:15 - 2020-06-02 10:39 - 007575552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2020-07-02 23:15 - 2020-06-02 10:39 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2020-07-02 23:15 - 2020-06-02 10:39 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2020-07-02 23:15 - 2020-06-02 10:39 - 000829440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll 2020-07-02 23:15 - 2020-06-02 10:39 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2020-07-02 23:15 - 2020-06-02 10:39 - 000468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2020-07-02 23:15 - 2020-06-02 10:39 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2020-07-02 23:15 - 2020-06-02 10:39 - 000296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll 2020-07-02 23:15 - 2020-06-02 10:38 - 000821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2020-07-02 23:15 - 2020-06-02 10:38 - 000622592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll 2020-07-02 23:15 - 2020-06-02 10:38 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll 2020-07-02 23:15 - 2020-06-02 10:36 - 000751616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll 2020-07-02 23:15 - 2020-06-02 10:36 - 000638976 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2020-07-02 23:15 - 2020-06-02 10:35 - 001588736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2020-07-02 23:15 - 2020-06-02 10:35 - 001149952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2020-07-02 23:15 - 2020-06-02 10:35 - 000910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-07-02 23:15 - 2020-06-02 10:35 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2020-07-02 23:15 - 2020-06-02 10:35 - 000547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2020-07-02 23:15 - 2020-06-02 10:11 - 000550528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2020-07-02 23:15 - 2020-06-02 10:10 - 000527296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll 2020-07-02 23:15 - 2020-06-02 10:09 - 006051264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2020-07-02 23:15 - 2020-06-02 10:09 - 004789960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2020-07-02 23:15 - 2020-06-02 10:09 - 004491984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2020-07-02 23:15 - 2020-06-02 10:09 - 001654960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2020-07-02 23:15 - 2020-06-02 10:09 - 001379088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2020-07-02 23:15 - 2020-06-02 10:09 - 001130584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2020-07-02 23:15 - 2020-06-02 10:09 - 001020064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2020-07-02 23:15 - 2020-06-02 10:09 - 000770072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2020-07-02 23:15 - 2020-06-02 10:09 - 000604320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2020-07-02 23:15 - 2020-06-02 09:53 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2020-07-02 23:15 - 2020-06-02 09:52 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2020-07-02 23:15 - 2020-06-02 09:52 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2020-07-02 23:15 - 2020-06-02 09:51 - 002903552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2020-07-02 23:15 - 2020-06-02 09:51 - 002258432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2020-07-02 23:15 - 2020-06-02 09:50 - 001198592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll 2020-07-02 23:15 - 2020-06-02 09:50 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2020-07-02 23:15 - 2020-06-02 09:50 - 000859136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2020-07-02 23:15 - 2020-06-02 09:49 - 000781312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-07-02 23:15 - 2020-06-02 09:49 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2020-07-02 23:15 - 2020-06-02 09:14 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim 2020-07-02 23:14 - 2020-06-02 15:43 - 001517488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2020-07-02 23:14 - 2020-06-02 15:42 - 021413504 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2020-07-02 23:14 - 2020-06-02 15:42 - 001633680 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2020-07-02 23:14 - 2020-06-02 15:42 - 000502072 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll 2020-07-02 23:14 - 2020-06-02 15:41 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe 2020-07-02 23:14 - 2020-06-02 15:41 - 000090376 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll 2020-07-02 23:14 - 2020-06-02 15:27 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2020-07-02 23:14 - 2020-06-02 15:26 - 006604800 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2020-07-02 23:14 - 2020-06-02 15:25 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll 2020-07-02 23:14 - 2020-06-02 15:25 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2020-07-02 23:14 - 2020-06-02 15:24 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2020-07-02 23:14 - 2020-06-02 15:24 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll 2020-07-02 23:14 - 2020-06-02 15:24 - 000258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll 2020-07-02 23:14 - 2020-06-02 15:24 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll 2020-07-02 23:14 - 2020-06-02 15:24 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll 2020-07-02 23:14 - 2020-06-02 15:24 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll 2020-07-02 23:14 - 2020-06-02 15:24 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll 2020-07-02 23:14 - 2020-06-02 15:24 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2020-07-02 23:14 - 2020-06-02 15:24 - 000116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll 2020-07-02 23:14 - 2020-06-02 15:24 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll 2020-07-02 23:14 - 2020-06-02 15:23 - 008631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-07-02 23:14 - 2020-06-02 15:23 - 000965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll 2020-07-02 23:14 - 2020-06-02 15:23 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe 2020-07-02 23:14 - 2020-06-02 15:23 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe 2020-07-02 23:14 - 2020-06-02 15:23 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2020-07-02 23:14 - 2020-06-02 15:23 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll 2020-07-02 23:14 - 2020-06-02 15:23 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2020-07-02 23:14 - 2020-06-02 15:23 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 006574080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 002860544 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 001727488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmclient.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 000715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 000570368 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 000387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll 2020-07-02 23:14 - 2020-06-02 15:22 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2020-07-02 23:14 - 2020-06-02 15:21 - 004264960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll 2020-07-02 23:14 - 2020-06-02 15:21 - 004092928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2020-07-02 23:14 - 2020-06-02 15:21 - 004000768 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll 2020-07-02 23:14 - 2020-06-02 15:21 - 001668608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll 2020-07-02 23:14 - 2020-06-02 15:21 - 001277440 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2020-07-02 23:14 - 2020-06-02 15:21 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll 2020-07-02 23:14 - 2020-06-02 15:21 - 000645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmscan.dll 2020-07-02 23:14 - 2020-06-02 15:21 - 000438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe 2020-07-02 23:14 - 2020-06-02 15:20 - 003613184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-07-02 23:14 - 2020-06-02 15:20 - 003524096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2020-07-02 23:14 - 2020-06-02 15:20 - 002903552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll 2020-07-02 23:14 - 2020-06-02 15:20 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2020-07-02 23:14 - 2020-06-02 15:20 - 001608192 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2020-07-02 23:14 - 2020-06-02 15:20 - 001345024 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll 2020-07-02 23:14 - 2020-06-02 15:20 - 001181184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2020-07-02 23:14 - 2020-06-02 15:20 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2020-07-02 23:14 - 2020-06-02 15:20 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2020-07-02 23:14 - 2020-06-02 15:20 - 000459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 001668608 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 001541120 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2020-07-02 23:14 - 2020-06-02 15:19 - 001532928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe 2020-07-02 23:14 - 2020-06-02 15:19 - 001291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 000937472 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 000837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 000600064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe 2020-07-02 23:14 - 2020-06-02 15:19 - 000587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 000545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2020-07-02 23:14 - 2020-06-02 15:19 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll 2020-07-02 23:14 - 2020-06-02 15:18 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSNP.ax 2020-07-02 23:14 - 2020-06-02 15:18 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax 2020-07-02 23:14 - 2020-06-02 15:18 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll 2020-07-02 23:14 - 2020-06-02 15:18 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll 2020-07-02 23:14 - 2020-06-02 14:08 - 001454984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2020-07-02 23:14 - 2020-06-02 14:01 - 000413496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll 2020-07-02 23:14 - 2020-06-02 13:56 - 020403768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2020-07-02 23:14 - 2020-06-02 13:53 - 000083104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll 2020-07-02 23:14 - 2020-06-02 13:48 - 012082176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2020-07-02 23:14 - 2020-06-02 13:47 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll 2020-07-02 23:14 - 2020-06-02 13:47 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll 2020-07-02 23:14 - 2020-06-02 13:47 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll 2020-07-02 23:14 - 2020-06-02 13:47 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll 2020-07-02 23:14 - 2020-06-02 13:47 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll 2020-07-02 23:14 - 2020-06-02 13:47 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll 2020-07-02 23:14 - 2020-06-02 13:47 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2020-07-02 23:14 - 2020-06-02 13:47 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll 2020-07-02 23:14 - 2020-06-02 13:46 - 000857600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll 2020-07-02 23:14 - 2020-06-02 13:46 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe 2020-07-02 23:14 - 2020-06-02 13:46 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll 2020-07-02 23:14 - 2020-06-02 13:46 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmscan.dll 2020-07-02 23:14 - 2020-06-02 13:46 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll 2020-07-02 23:14 - 2020-06-02 13:46 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll 2020-07-02 23:14 - 2020-06-02 13:46 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll 2020-07-02 23:14 - 2020-06-02 13:46 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 004177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 001532416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000941568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmclient.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000842752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000780288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr 2020-07-02 23:14 - 2020-06-02 13:45 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000372736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll 2020-07-02 23:14 - 2020-06-02 13:45 - 000161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll 2020-07-02 23:14 - 2020-06-02 13:44 - 004087296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2020-07-02 23:14 - 2020-06-02 13:44 - 003493888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll 2020-07-02 23:14 - 2020-06-02 13:44 - 002718720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll 2020-07-02 23:14 - 2020-06-02 13:44 - 002390528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll 2020-07-02 23:14 - 2020-06-02 13:44 - 001302016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll 2020-07-02 23:14 - 2020-06-02 13:44 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll 2020-07-02 23:14 - 2020-06-02 13:44 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2020-07-02 23:14 - 2020-06-02 13:44 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 001510400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 001472000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 001443840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe 2020-07-02 23:14 - 2020-06-02 13:43 - 001383936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 001196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 000867840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 000569344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 000484864 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll 2020-07-02 23:14 - 2020-06-02 13:43 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll 2020-07-02 23:14 - 2020-06-02 13:42 - 000357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll 2020-07-02 23:14 - 2020-06-02 13:42 - 000216576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax 2020-07-02 23:14 - 2020-06-02 13:42 - 000173056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll 2020-07-02 23:14 - 2020-06-02 13:42 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll 2020-07-02 23:14 - 2020-06-02 12:39 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll 2020-07-02 23:14 - 2020-06-02 12:37 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll 2020-07-02 23:14 - 2020-06-02 11:14 - 000797472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2020-07-02 23:14 - 2020-06-02 11:14 - 000268600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2020-07-02 23:14 - 2020-06-02 11:14 - 000094024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2020-07-02 23:14 - 2020-06-02 11:07 - 001018168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll 2020-07-02 23:14 - 2020-06-02 11:07 - 000552648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2020-07-02 23:14 - 2020-06-02 11:07 - 000299832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe 2020-07-02 23:14 - 2020-06-02 11:06 - 000770624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll 2020-07-02 23:14 - 2020-06-02 11:06 - 000152888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2020-07-02 23:14 - 2020-06-02 11:05 - 007519896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-07-02 23:14 - 2020-06-02 11:05 - 005009016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2020-07-02 23:14 - 2020-06-02 11:05 - 002809656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-07-02 23:14 - 2020-06-02 11:05 - 002165240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2020-07-02 23:14 - 2020-06-02 11:05 - 001459120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-07-02 23:14 - 2020-06-02 11:05 - 001260784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2020-07-02 23:14 - 2020-06-02 11:05 - 001141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2020-07-02 23:14 - 2020-06-02 11:05 - 000983936 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2020-07-02 23:14 - 2020-06-02 11:05 - 000790328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2020-07-02 23:14 - 2020-06-02 11:05 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2020-07-02 23:14 - 2020-06-02 11:05 - 000313488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2020-07-02 23:14 - 2020-06-02 11:05 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe 2020-07-02 23:14 - 2020-06-02 11:05 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll 2020-07-02 23:14 - 2020-06-02 10:42 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2020-07-02 23:14 - 2020-06-02 10:41 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2020-07-02 23:14 - 2020-06-02 10:41 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll 2020-07-02 23:14 - 2020-06-02 10:41 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxGipRadioManager.dll 2020-07-02 23:14 - 2020-06-02 10:41 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000397824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll 2020-07-02 23:14 - 2020-06-02 10:40 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll 2020-07-02 23:14 - 2020-06-02 10:39 - 000961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll 2020-07-02 23:14 - 2020-06-02 10:39 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2020-07-02 23:14 - 2020-06-02 10:39 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2020-07-02 23:14 - 2020-06-02 10:39 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2020-07-02 23:14 - 2020-06-02 10:39 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll 2020-07-02 23:14 - 2020-06-02 10:38 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2020-07-02 23:14 - 2020-06-02 10:38 - 003150336 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2020-07-02 23:14 - 2020-06-02 10:38 - 002587648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2020-07-02 23:14 - 2020-06-02 10:38 - 000832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2020-07-02 23:14 - 2020-06-02 10:38 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2020-07-02 23:14 - 2020-06-02 10:38 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll 2020-07-02 23:14 - 2020-06-02 10:37 - 002739200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2020-07-02 23:14 - 2020-06-02 10:37 - 001376768 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2020-07-02 23:14 - 2020-06-02 10:37 - 001028096 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2020-07-02 23:14 - 2020-06-02 10:37 - 000791552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll 2020-07-02 23:14 - 2020-06-02 10:37 - 000548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2020-07-02 23:14 - 2020-06-02 10:36 - 002158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-07-02 23:14 - 2020-06-02 10:36 - 001059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2020-07-02 23:14 - 2020-06-02 10:36 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll 2020-07-02 23:14 - 2020-06-02 10:35 - 001085952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2020-07-02 23:14 - 2020-06-02 10:35 - 000929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll 2020-07-02 23:14 - 2020-06-02 10:35 - 000885760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2020-07-02 23:14 - 2020-06-02 10:35 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2020-07-02 23:14 - 2020-06-02 10:35 - 000428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll 2020-07-02 23:14 - 2020-06-02 10:35 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2020-07-02 23:14 - 2020-06-02 10:35 - 000321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2020-07-02 23:14 - 2020-06-02 10:35 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2020-07-02 23:14 - 2020-06-02 10:35 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2020-07-02 23:14 - 2020-06-02 10:11 - 000458592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2020-07-02 23:14 - 2020-06-02 10:10 - 000436536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2020-07-02 23:14 - 2020-06-02 10:10 - 000386296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2020-07-02 23:14 - 2020-06-02 10:10 - 000192312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2020-07-02 23:14 - 2020-06-02 10:10 - 000185912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-07-02 23:14 - 2020-06-02 10:10 - 000146712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2020-07-02 23:14 - 2020-06-02 10:09 - 006567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-07-02 23:14 - 2020-06-02 10:09 - 002478160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2020-07-02 23:14 - 2020-06-02 10:09 - 000880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2020-07-02 23:14 - 2020-06-02 10:09 - 000758088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll 2020-07-02 23:14 - 2020-06-02 10:09 - 000671408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2020-07-02 23:14 - 2020-06-02 10:09 - 000379208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2020-07-02 23:14 - 2020-06-02 10:09 - 000287128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll 2020-07-02 23:14 - 2020-06-02 10:09 - 000227648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe 2020-07-02 23:14 - 2020-06-02 10:09 - 000129104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2020-07-02 23:14 - 2020-06-02 10:02 - 022018048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-07-02 23:14 - 2020-06-02 09:56 - 019394560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-07-02 23:14 - 2020-06-02 09:54 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll 2020-07-02 23:14 - 2020-06-02 09:53 - 003691008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2020-07-02 23:14 - 2020-06-02 09:53 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll 2020-07-02 23:14 - 2020-06-02 09:53 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll 2020-07-02 23:14 - 2020-06-02 09:53 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll 2020-07-02 23:14 - 2020-06-02 09:53 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll 2020-07-02 23:14 - 2020-06-02 09:53 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 005770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkObjCore.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll 2020-07-02 23:14 - 2020-06-02 09:52 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll 2020-07-02 23:14 - 2020-06-02 09:51 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll 2020-07-02 23:14 - 2020-06-02 09:51 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2020-07-02 23:14 - 2020-06-02 09:51 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2020-07-02 23:14 - 2020-06-02 09:51 - 000382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2020-07-02 23:14 - 2020-06-02 09:51 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll 2020-07-02 23:14 - 2020-06-02 09:51 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll 2020-07-02 23:14 - 2020-06-02 09:51 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2020-07-02 23:14 - 2020-06-02 09:50 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2020-07-02 23:14 - 2020-06-02 09:50 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll 2020-07-02 23:14 - 2020-06-02 09:49 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2020-07-02 23:14 - 2020-06-02 09:49 - 001212928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll 2020-07-02 23:14 - 2020-06-02 09:49 - 000736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll 2020-07-02 23:14 - 2020-06-02 09:49 - 000670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2020-07-02 23:14 - 2020-06-02 09:49 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll 2020-07-02 23:14 - 2020-06-02 09:49 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2020-07-02 23:14 - 2020-06-02 09:49 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2020-07-02 23:14 - 2020-05-21 07:50 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll 2020-07-02 23:14 - 2020-05-14 03:01 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2020-07-02 23:14 - 2020-05-14 03:01 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2020-07-02 23:14 - 2019-08-13 16:43 - 001295872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2020-07-02 01:00 - 2020-07-19 03:06 - 000000000 ____D C:\Users\Dan\AppData\Local\CrashDumps 2020-07-02 00:57 - 2020-07-02 01:00 - 000000444 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2020-07-01 13:14 - 2020-07-01 13:14 - 000001026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge 2020.lnk 2020-07-01 13:00 - 2020-07-05 08:52 - 000000000 ___RD C:\Users\Dan\Creative Cloud Files 2020-07-01 12:58 - 2020-07-01 12:58 - 000003522 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0 2020-07-01 12:56 - 2020-07-01 12:56 - 000001364 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk 2020-07-01 12:56 - 2020-07-01 12:56 - 000001352 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2020-07-01 12:56 - 2020-07-01 12:56 - 000001352 _____ C:\ProgramData\Desktop\Adobe Creative Cloud.lnk 2020-07-01 12:55 - 2020-07-18 23:47 - 000000000 ____D C:\ProgramData\Adobe 2020-07-01 12:55 - 2020-07-18 23:02 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2020-07-01 12:55 - 2020-07-18 23:02 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData 2020-07-01 12:53 - 2020-07-18 23:45 - 000000000 ____D C:\Program Files (x86)\Adobe 2020-07-01 12:53 - 2020-07-01 13:14 - 000000000 ____D C:\Program Files\Common Files\Adobe 2020-07-01 12:53 - 2020-07-01 13:09 - 000000000 ____D C:\Program Files\Adobe 2020-07-01 12:52 - 2020-07-18 23:46 - 000000000 ____D C:\Users\Dan\AppData\Local\Adobe ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-07-19 03:10 - 2017-03-19 22:03 - 000000000 ____D C:\FRST 2020-07-19 03:06 - 2020-04-26 20:50 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-07-19 03:06 - 2020-04-26 11:04 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-07-18 23:47 - 2016-11-27 00:42 - 000000000 ____D C:\Users\Dan\AppData\LocalLow\Adobe 2020-07-18 23:46 - 2020-04-26 11:20 - 000000000 ____D C:\Users\Dan\AppData\Roaming\Adobe 2020-07-18 23:28 - 2020-04-26 20:40 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-07-18 23:15 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-07-18 23:14 - 2020-04-26 20:50 - 000000000 ___HD C:\Program Files\WindowsApps 2020-07-18 23:13 - 2020-04-28 00:36 - 000000000 ____D C:\Program Files (x86)\Steam 2020-07-18 23:10 - 2020-04-28 17:53 - 000000000 ____D C:\ProgramData\Packages 2020-07-18 23:01 - 2020-04-26 20:48 - 000000000 ____D C:\WINDOWS\INF 2020-07-18 23:01 - 2020-04-26 11:21 - 000838560 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-07-18 22:59 - 2020-05-20 16:02 - 000000000 ___HD C:\Users\Dan\.nx 2020-07-18 22:59 - 2020-04-28 17:45 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-910847060-2977998255-1486674742-1001 2020-07-18 22:59 - 2020-04-26 11:13 - 000002357 _____ C:\Users\Dan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2020-07-18 22:59 - 2016-11-26 19:03 - 000000000 ___RD C:\Users\Dan\OneDrive 2020-07-18 22:56 - 2020-04-26 11:13 - 000000000 ____D C:\Users\Dan 2020-07-18 22:55 - 2020-04-26 11:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-07-18 22:55 - 2020-04-26 11:04 - 000261512 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-07-05 15:58 - 2020-05-20 16:02 - 000000000 ____D C:\Users\nx\.nx 2020-07-03 18:59 - 2020-05-15 12:35 - 000000000 ____D C:\Users\Dan\AppData\Roaming\qBittorrent 2020-07-03 16:00 - 2020-05-20 15:55 - 000000000 ____D C:\Program Files (x86)\NoMachine 2020-07-03 00:03 - 2017-12-05 23:08 - 000000000 ___RD C:\Users\Dan\3D Objects 2020-07-03 00:03 - 2016-11-26 19:01 - 000000000 __RHD C:\Users\Public\AccountPictures 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ___SD C:\WINDOWS\system32\F12 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\TextInput 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\SysWOW64\com 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\system32\oobe 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\system32\Dism 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\system32\com 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\ShellExperiences 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2020-07-03 00:00 - 2020-04-26 20:50 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2020-07-03 00:00 - 2020-04-26 20:25 - 000262144 _____ C:\WINDOWS\system32\config\BBI 2020-07-02 23:05 - 2020-04-26 11:19 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2020-07-01 14:06 - 2020-05-14 23:28 - 000000000 ____D C:\Users\Dan\AppData\Local\D3DSCache 2020-07-01 13:22 - 2020-04-29 14:38 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2020-07-01 13:22 - 2020-04-29 14:38 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2020-07-01 13:22 - 2020-04-29 14:38 - 000002260 _____ C:\ProgramData\Desktop\Google Chrome.lnk 2020-07-01 13:19 - 2020-05-15 12:29 - 000000000 ____D C:\Users\Dan\AppData\Local\NordVPN 2020-07-01 13:08 - 2020-04-26 11:20 - 000000000 ____D C:\Users\Dan\AppData\Local\Packages 2020-07-01 12:54 - 2020-04-26 11:08 - 000000000 ____D C:\ProgramData\Package Cache 2020-07-01 12:53 - 2019-02-23 14:59 - 000000000 ____D C:\Users\Dan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome ==================== Files in the root of some directories ======== 2020-04-29 14:35 - 2020-04-29 14:35 - 000284338 _____ () C:\Users\Dan\AppData\Roaming\w1k_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt 2020-07-01 17:26 - 2020-07-01 17:26 - 000000000 _____ () C:\Users\Dan\AppData\Local\oobelibMkey.log ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================