[IndyBlue]

OK, I will buy a Western Digital today as soon as I hear from you. I posted two models--could you please advise on which model I should buy? (If there's another WD model that you recommend, I'm all ears.)

 

Also, I think 2TB would suffice for my needs, but if you think I should go larger, please advise.

 

THANKS!!

[Advertisements]

First one:

WD 2TB Black My Passport Portable External Hard Drive - USB 3.0 - WDBS4B0020BBK-WESN
by Western Digital would be my choice.  Usually comes with 3 year warranty.

[RKinner]

First one:

WD 2TB Black My Passport Portable External Hard Drive - USB 3.0 - WDBS4B0020BBK-WESN
by Western Digital would be my choice.  Usually comes with 3 year warranty.

[IndyBlue]

Hi, RKinner--

 

Just touching base. My new WD 2TB hard drive arrives tomorrow. I will follow your above instructions once it gets here, and then I will report back. 

 

Thanks again for everything.

IndyBlue

[IndyBlue]

Hi, RKinner,

 

May I ask what may be a really stupid question? (I told you: I'm a newb.)
 

Why do I have to clone the Seagate external hard drive using Macrium 7? If my desktop and internal hard drive are fine, wouldn't it just make sense to disconnect the Seagate, uninstall the program, and then start fresh with the WD passport external drive? I don't have anything "extra" stored on the Seagate. I just use it as insurance in case my computer craps out and I get the BSOD. (I have a solid state drive, and I've heard that once those die, you can't really retrieve anything from them, which is why it's crucial to have a good external back-up drive.)

Also, I just tried to use Windows Explorer to see what was on the Seagate hard drive, and I can't access any files. I don't really see any files either--just these strangely names folders that I can't access. (Again, I'm a newb, and maybe I don't know what I'm looking at. But when I had my former external hard drive, I could go in there and browse files just like I did on the C drive for my computer. I can't do anything with the Seagate files.)

So, to reiterate: can I just simply disconnect and uninstall Seagate and install the WD? Is there something important that I might be losing on the Seagate if I do it this way?

 

Thank you again for all help!

IndyBlue

[IndyBlue]

P.S. Also, when I try to open the Seagate dashboard using the icon on my desktop, it just gets hung up and won't open. So, I think (as you said) that something is seriously wrong with the Seagate, and that there's no value in cloning it. But please correct me if I'm mistaken in this assumption.

Still getting that Nero notification, which I want gone. I think it will disappear once I uninstall the Seagate.

[RKinner]

If there is nothing on the Seagate you need then you don't need to clone it.  May be too late anyway from the sounds of things.

[IndyBlue]

Thanks. I think the Seagate is FUBAR. Also, I noticed that the Kaspersky full scan would get completely hung up on the Seagate--it would spend hours and hours there, which I thought was strange.

Anyway, I will now uninstall the Seagate, install the WD Passport, and then run a new FRST scan and Speccy log per your instruction.

Talk to you soon!

[IndyBlue]

(1) Here's the FRST scan:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-07-2019

Ran by indre (administrator) on DESKTOP-EL88UDV (Dell Inc. OptiPlex 7440 AIO) (12-07-2019 13:31:01)

Running from C:\Users\indre\Desktop

Loaded Profiles: indre (Available Profiles: indre)

Platform: Windows 10 Pro Version 1803 17134.885 (X64) Language: English (United States)

Default browser: Chrome

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

() [File not signed] C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe

() [File not signed] C:\Program Files (x86)\DELL\DELLOSD\MediaButtons.exe

() [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.48.51.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe

(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe

(CyberLink Corp. -> CyberLink) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\Power2Go8\CLMLSvc_P2G8.exe

(CyberLink Corp. -> CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Dell Inc -> CREDANT Technologies, Inc.) C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityFramework.Agent.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\Dell Data Protection\Client Security Framework\DCF.Loader.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe

(Dell Inc -> Dell, Inc.) C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityFramework.LocalServer.exe

(Dell Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe

(Dell Inc. -> Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe

(FabulaTech -> ) C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgr.exe

(FabulaTech -> ) C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe

(FabulaTech -> VMware) C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe

(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe

(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

(Intel Corporation -> Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe

(Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe

(Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe

(Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel® Intel Network Drivers -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\igfxCUIService.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\igfxEM.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\IntelCpHDCPSvc.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\IntelCpHeciSvc.exe

(Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Intel® Wireless Display -> Intel) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\avp.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\avpui.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Users\indre\AppData\Local\Microsoft\OneDrive\OneDrive.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.48.51.0_x64__kzf8qxf38zg5c\SkypeApp.exe

(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.48.51.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe

(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedlauncher.exe

(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7033.2285\DSAPI.exe

(PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7033.2285\pcdrwi.exe

(Plex, Inc -> ) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe

(Plex, Inc -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe

(Plex, Inc -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe

(Plex, Inc -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe

(Plex, Inc -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe

(Plex, Inc -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(TEFINCOM S.A. -> ) C:\Program Files (x86)\NordVPN\nordvpn-service.exe

(TEFINCOM S.A. -> NordVPN) C:\Program Files (x86)\NordVPN\NordVPN.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\vmware-view-usbd.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\wsnm\wsnm.exe

(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe

(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe

(Western Digital Techologies -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8853248 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_MAXX6] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [322120 2016-04-29] (Intel® Rapid Storage Technology -> Intel Corporation)

HKLM\...\Run: [VMware Netlink 3 HV Install Utility] => C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnliu.exe [70080 2015-11-04] (FabulaTech -> )

HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [718256 2015-12-22] (Waves Inc -> Waves Audio Ltd.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-05-07] (Apple Inc. -> Apple Inc.)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe [1176208 2017-11-09] (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation)

HKLM-x32\...\Run: [WDDiscovery] => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe [81376496 2019-07-12] (Western Digital Technologies, Inc. -> Western Digital Corporation)

HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [21888 2019-01-02] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION

HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [Uploader] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [23081448 2019-04-04] (Plex, Inc -> Plex, Inc.)

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [NordVPN] => C:\Program Files (x86)\NordVPN\NordVPN.exe [2186704 2019-05-22] (TEFINCOM S.A. -> NordVPN)

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [kpm.exe] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm.exe [584128 2019-02-08] (Kaspersky Lab -> AO Kaspersky Lab)

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1555952 2019-06-17] (Google LLC -> Google LLC)

HKU\S-1-5-18\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30796352 2018-10-24] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)

HKLM\...\Drivers32-x32: [vidc.pDAD] => prodad-codec.dll

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\75.0.3770.100\Installer\chrmstp.exe [2019-06-20] (Google LLC -> Google LLC)

FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {03DFFC2C-FC22-4010-99E9-4F38D03C4728} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [113200 2019-07-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {05E39B49-EC8E-4991-9D71-943F1C76578E} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [491832 2019-06-13] (Bitdefender SRL -> Bitdefender)

Task: {06D92E0E-08B8-441B-94A2-7B231EE6DCE1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26804232 2019-06-26] (Microsoft Corporation -> Microsoft Corporation)

Task: {08E2F16C-4C59-4C34-A03C-C83EEEDEBBDE} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-06-17] (Intel® Software Asset Manager -> Intel Corporation)

Task: {0C0614F0-18B6-495C-99F1-B61633EE7B2A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe

Task: {0EBA0793-94A7-49CE-AB2C-1FEF6BA70765} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26804232 2019-06-26] (Microsoft Corporation -> Microsoft Corporation)

Task: {0FE0644F-58F4-43E8-A63F-AA62CD169246} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION

Task: {1D566C7D-1CD5-4E77-826C-E0DF557F6BFA} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_223_Plugin.exe [1457208 2019-07-10] (Adobe Inc. -> Adobe)

Task: {1E20F289-46AA-4529-B808-962BFEF268A3} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)

Task: {1E4AE78B-2D84-403D-9CD3-0703770FF0B5} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [113200 2019-07-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {267B2E60-3693-45B1-B32D-E5AA4FA083F4} - System32\Tasks\WD Discovery Service Task indre => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [71408 2019-07-12] (Western Digital Technologies, Inc. -> )

Task: {27CEA27E-1BF2-4A16-B5AE-DCA79020DF0D} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-10-11] (Intel® Trust Services -> Intel® Corporation)

Task: {2BE02930-09E5-4DB5-86B2-C883307D310D} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_223_pepper.exe [1453112 2019-07-10] (Adobe Inc. -> Adobe)

Task: {39820E81-9B7D-411F-A870-C6BEBCB2BF30} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [1698000 2015-06-05] (Intel® Software -> Intel Corporation)

Task: {4DF09A94-B680-4D73-A2BA-B28905CCA70D} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [39920 2018-10-24] (Garmin International, Inc. -> )

Task: {52187049-A19C-4B23-AFFC-5089227DB2E9} - System32\Tasks\Seagate_Install_Launch => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Dashboard.exe

Task: {5EF9065E-7942-4205-9A7E-625FDF39B32F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136056 2019-01-02] (HP Inc. -> HP Inc.)

Task: {6D0AA64B-75B4-49CF-9C53-3BF5D9356A9D} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-06-17] (Intel® Software Asset Manager -> Intel Corporation)

Task: {82F39D33-C846-4F84-8898-8F68198ADD97} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\CyberLink Media Suite\Power2Go8\CLVDLauncher.exe [340440 2015-01-28] (CyberLink Corp. -> CyberLink Corp.)

Task: {8B3F29DA-404A-4CB9-8309-9D94ECAA8D3F} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\CyberLink Media Suite\Power2Go8\CLMLSvc_P2G8.exe [110008 2016-04-27] (CyberLink Corp. -> CyberLink)

Task: {8D960D58-2C65-4690-A008-63A3B9664FD6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [654712 2019-06-05] (HP Inc. -> HP Inc.)

Task: {A5585A2F-2224-44F3-B48A-C02AA6E9CD5D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-09-11] (Google Inc -> Google Inc.)

Task: {AD7C3050-8C01-411A-AAEB-54D2522EE740} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2281944 2019-06-04] (AVAST Software s.r.o. -> AVAST Software)

Task: {BE8068C1-2DB9-4BBE-9031-9E917FD77777} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1448296 2019-07-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {BEEC0D34-AA7B-4933-B79B-EE5F2DA284E3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-07-10] (Adobe Inc. -> Adobe)

Task: {C9DAB848-B95A-4118-8DAB-0AA8CAE862C4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Task: {D31AD53B-7549-49C2-8D4E-273E8786E8FC} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe

Task: {DCF36F4E-53FF-403E-B92A-CAFE9380489C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)

Task: {DD6E66AE-D0AA-4C99-8D5F-5BA39CA6FC45} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1448296 2019-07-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {ECD51CA1-564E-49C6-A83B-0A4B7EC42B15} - System32\Tasks\WD Device Agent Task indre => C:\Users\indre\AppData\Roaming\WD Discovery\plugins\com.wdc.plugin.catalog\current\library\WD Device Agent.exe [724008 2019-06-18] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

Task: {F219FE43-71D7-4843-8134-11FF7BD69ACF} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistInstaller.exe [1512920 2019-05-24] (Dell Inc. -> Dell Inc.)

Task: {F266FDCC-EAB9-4691-867D-FA95BDE06352} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [791232 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

Task: {F932D694-A1C8-4A80-9BEA-DAAFEF0B6FE1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-09-11] (Google Inc -> Google Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{6fbafdae-3f34-452d-bbc1-3182c4eed1fc}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{df5feca7-b365-4e54-a128-6afee4fc4200}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{eb569711-9ed4-49b4-a209-84f1068bb002}: [DhcpNameServer] 192.168.1.1

 

Internet Explorer:

==================

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE

SearchScopes: HKU\S-1-5-21-1593158232-969496310-2340663774-1001 -> DefaultScope {97FF47F7-FF6D-4CCE-B19F-284086150FBF} URL = 

SearchScopes: HKU\S-1-5-21-1593158232-969496310-2340663774-1001 -> {97FF47F7-FF6D-4CCE-B19F-284086150FBF} URL = 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-06-25] (Microsoft Corporation -> Microsoft Corporation)

BHO: No Name -> {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2}' -> No File

BHO: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

BHO: Kaspersky Password Manager -> {F710F7E5-A520-471D-989C-F653AC328FB2} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\x64\ie_engine.dll [2019-05-08] (Kaspersky Lab -> AO Kaspersky Lab)

BHO-x32: No Name -> {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2}' -> No File

BHO-x32: CutePDF Form Filler Helper -> {D41289F2-69C6-417B-897E-C653D677CBAF} -> C:\Program Files (x86)\Acro Software\CutePDF Filler Evaluation\CPFillerCoE.dll [2014-03-27] (Acro Software Inc. -> Acro Software Inc.)

BHO-x32: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

BHO-x32: Kaspersky Password Manager -> {F710F7E5-A520-471D-989C-F653AC328FB2} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\ie_engine.dll [2019-05-08] (Kaspersky Lab -> AO Kaspersky Lab)

Toolbar: HKLM - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

Toolbar: HKU\S-1-5-21-1593158232-969496310-2340663774-1001 -> Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} hxxps://meetny.webex.com/client/WBXclient-T30L10NSP6EP6-20000/webex/ieatgpc1.cab

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-02] (Microsoft Corporation -> Microsoft Corporation)

 

FireFox:

========

FF DefaultProfile: 1cu7vqt4.default-1534000050440

FF ProfilePath: C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440 [2019-07-11]

FF Homepage: Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440 -> hxxps://www.google.com/

FF Extension: (ETP Search Volume Study) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-06-26]

FF Extension: (Notifier for Gmail™) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-03-31]

FF Extension: (Honey) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-05-18]

FF Extension: (Kaspersky Password Manager) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-05-08] [UpdateUrl:hxxps://special.s.kaspersky-labs.com/firefox_extensions/kpm_win_add_on/update.json]

FF Extension: (Avast Online Security) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-06-05]

FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi

FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi [2019-07-06]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_223.dll [2019-07-10] (Adobe Inc. -> )

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_223.dll [2019-07-10] (Adobe Inc. -> )

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-06] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-14] (Google Inc -> Google LLC)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-14] (Google Inc -> Google LLC)

FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-05-02] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1593158232-969496310-2340663774-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\indre\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2018-04-06] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-07-07] <==== ATTENTION (Points to *.cfg file)

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-07-07] <==== ATTENTION

 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default [2019-07-12]

CHR Extension: (Slides) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]

CHR Extension: (Kaspersky Protection) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\amkpcclbbgegoafihnpgomddadjhcadd [2019-07-06]

CHR Extension: (Docs) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]

CHR Extension: (Google Drive) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-11]

CHR Extension: (YouTube) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-11]

CHR Extension: (Honey) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2019-07-11]

CHR Extension: (Notifier for Gmail™) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcjichoefijpinlfnjghokpkojhlhkgl [2019-03-25]

CHR Extension: (Kaspersky Password Manager) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhnkblpjbkfklfloegejegedcafpliaa [2019-07-12]

CHR Extension: (Adobe Acrobat) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-06-11]

CHR Extension: (Sheets) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]

CHR Extension: (Google Docs Offline) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-22]

CHR Extension: (Avast Online Security) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-07-01]

CHR Extension: (F.B.(FluffBusting)Purity) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmkinhboiljjkhaknpaeaicmdjhagpep [2019-07-06]

CHR Extension: (Chrome Web Store Payments) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]

CHR Extension: (Gmail) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-03-26]

CHR Extension: (Chrome Media Router) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-06-20]

CHR Profile: C:\Users\indre\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-07-08]

CHR Profile: C:\Users\indre\AppData\Local\Google\Chrome\User Data\System Profile [2019-07-08]

CHR HKLM\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd

CHR HKU\S-1-5-21-1593158232-969496310-2340663774-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhnkblpjbkfklfloegejegedcafpliaa] - hxxps://chrome.google.com/webstore/detail/dhnkblpjbkfklfloegejegedcafpliaa

CHR HKLM-x32\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

 

==================== Services (Whitelisted) ====================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2019-04-29] (Apple Inc. -> Apple Inc.)

R2 AVP19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\avp.exe [619640 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11413600 2019-06-26] (Microsoft Corporation -> Microsoft Corporation)

S4 dcu-oobe; C:\Program Files (x86)\Dell\CommandUpdate\OobeService.exe [84408 2016-06-07] (Dell Inc. -> Dell Inc.)

R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [209392 2019-02-28] (Dell Inc -> Dell Inc.)

R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3363824 2019-02-28] (Dell Inc -> Dell Inc.)

R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [218096 2019-02-28] (Dell Inc -> Dell Inc.)

R2 Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7033.2285\DSAPI.exe [1050952 2019-06-02] (PC-Doctor, Inc. -> PC-Doctor, Inc.)

R2 Dell WMI Service; C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe [151552 2015-06-29] () [File not signed]

R2 DellMgmtAgent; C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityFramework.Agent.exe [22280 2016-07-13] (Dell Inc -> CREDANT Technologies, Inc.)

R2 DellMgmtLoader; C:\Program Files\Dell\Dell Data Protection\Client Security Framework\DCF.Loader.exe [35080 2016-07-13] (Dell Inc -> Dell Inc.)

R3 DellMgmtServer; C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityFramework.LocalServer.exe [52488 2016-07-13] (Dell Inc -> Dell, Inc.)

R2 ftnlsv3hv; C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe [233920 2015-11-04] (FabulaTech -> )

R2 ftscanmgr; C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgr.exe [6363792 2015-07-31] (FabulaTech -> )

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [356728 2019-06-12] (HP Inc. -> HP Inc.)

S3 iaStorAfsService; C:\WINDOWS\IAStorAfsService\iaStorAfsService.exe [2413752 2017-08-18] (Intel® Rapid Storage Technology -> Intel Corporation)

R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [190208 2016-10-15] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation)

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [742704 2017-10-11] (Intel® Trust Services -> Intel® Corporation)

R3 Intel® Security Assist; C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]

S2 Intel® TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [668472 2017-10-11] (Intel® Trust Services -> Intel® Corporation)

S3 Intel® WiDi SAM; C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-06-17] (Intel® Software Asset Manager -> Intel Corporation)

R2 IntelUSBoverIP; C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe [396992 2015-07-06] (Intel® Wireless Display -> Intel)

S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [213648 2017-11-09] (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation)

S3 klvssbridge64_19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\vssbridge64.exe [414352 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R2 kpm_launch_service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe [354008 2019-02-08] (Kaspersky Lab -> AO Kaspersky Lab)

R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [310880 2019-01-23] (Intel Corporation -> )

R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [217040 2019-05-22] (TEFINCOM S.A. -> )

R2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [1140200 2019-04-04] (Plex, Inc -> Plex, Inc.)

R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1294448 2019-05-14] (Bitdefender SRL -> Bitdefender)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2015-09-02] (CyberLink Corp. -> CyberLink)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [310016 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5073792 2019-07-04] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [39896 2019-05-24] (Dell Inc. -> Dell Inc.)

S2 tcsd_win32.exe; C:\Program Files\Dell\Dell Data Protection\Drivers\TSS\bin\tcsd_win32.exe [1636352 2012-12-10] (Security Innovation, Inc.) [File not signed]

R2 vmware-view-usbd; C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\vmware-view-usbd.exe [1158984 2016-02-23] (VMware, Inc. -> VMware, Inc.)

R2 vmwsprrdpwks; C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe [261776 2015-05-08] (FabulaTech -> VMware)

R2 WavesSysSvc; C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe [613296 2015-12-22] (Waves Inc -> Waves Audio Ltd.)

S3 WD Backup Drive Helper; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{4AB831D3-8315-414C-8A7A-303105288D0B} [19360 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

S3 WD Backup Drive Helper; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{4AB831D3-8315-414C-8A7A-303105288D0B} [19360 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

S3 WD Backup Snapshot; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{302480DF-3AC5-4400-BE7B-DD77AF93B6DD} [19360 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

S3 WD Backup Snapshot; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{302480DF-3AC5-4400-BE7B-DD77AF93B6DD} [19360 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [524632 2018-03-26] (Western Digital Techologies -> Western Digital Technologies, Inc.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4413440 2019-03-14] (Microsoft Corporation -> Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [107160 2019-02-16] (Microsoft Corporation -> Microsoft Corporation)

R2 wsnm; C:\Program Files (x86)\VMware\VMware Horizon View Client\wsnm\wsnm.exe [541400 2016-03-25] (VMware, Inc. -> VMware, Inc.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [4107360 2019-01-23] (Intel Corporation -> Intel® Corporation)

 

===================== Drivers (Whitelisted) ======================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [243400 2018-01-27] (Kaspersky Lab -> AO Kaspersky Lab)

R3 DDDriver; C:\WINDOWS\system32\drivers\DDDriver64Dcsa.sys [40824 2019-02-27] (Microsoft Windows Hardware Compatibility Publisher -> Dell Inc.)

S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [41208 2018-05-08] (Techporch Incorporated -> Dell Computer Corporation)

S3 iaStorAfs; C:\WINDOWS\System32\drivers\iaStorAfs.sys [70664 2017-08-18] (Intel® Rapid Storage Technology -> Intel Corporation)

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [732416 2016-10-15] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation)

R3 IntcAzAudAddService; C:\WINDOWS\system32\drivers\RTDVHD64.sys [2677504 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)

R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [75600 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [125568 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [91472 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [29208 2017-03-30] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)

R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [236672 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 KLHK; C:\WINDOWS\System32\drivers\klhk.sys [1093248 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klids; C:\ProgramData\Kaspersky Lab\AVP19.0.0\Bases\klids.sys [197464 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1168000 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [58704 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [60536 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [60784 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [50304 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [46416 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [48080 2018-02-12] (AnchorFree Inc -> The OpenVPN Project)

R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [245272 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [99152 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [302368 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [116104 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [198768 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [104576 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [184960 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [218240 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

S3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2018-04-11] (Microsoft Windows -> Intel Corporation)

R3 Netwtw06; C:\WINDOWS\system32\DRIVERS\Netwtw06.sys [8833952 2019-01-28] (Intel® Wireless Connectivity Solutions -> Intel Corporation)

R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [779232 2016-08-04] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)

R0 SEDFilter; C:\WINDOWS\System32\DRIVERS\SEDFilter.sys [197808 2016-07-13] (Dell Inc -> Dell Inc.)

S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [13920 2016-09-11] (SlimWare Utilities Inc. -> )

R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2018-07-24] (TEFINCOM S.A. -> The OpenVPN Project)

R3 usb3Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [212056 2015-07-06] (Intel® Wireless Display -> Windows ® Win 7 DDK provider)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

R1 wdfsconnect2017; C:\WINDOWS\system32\drivers\wdfsconnect2017.sys [468112 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

R3 wdvpnpbus; C:\WINDOWS\System32\drivers\wdvpnpbus.sys [20624 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One month (created) ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2019-07-12 13:29 - 2019-07-12 13:28 - 002095104 ____C (Farbar) C:\Users\indre\Desktop\FRST64.exe

2019-07-12 13:28 - 2019-07-12 13:28 - 002095104 _____ (Farbar) C:\Users\indre\Downloads\FRST64 (3).exe

2019-07-12 13:27 - 2019-07-12 13:27 - 002095104 _____ (Farbar) C:\Users\indre\Downloads\FRST64 (2).exe

2019-07-12 13:22 - 2019-07-12 13:22 - 000000000 ___HD C:\OneDriveTemp

2019-07-12 12:53 - 2019-07-12 12:53 - 000003240 _____ C:\WINDOWS\System32\Tasks\WD Device Agent Task indre

2019-07-12 12:51 - 2019-07-12 12:53 - 000003236 _____ C:\WINDOWS\System32\Tasks\WD Discovery Service Task indre

2019-07-12 12:51 - 2019-07-12 12:51 - 000001301 _____ C:\Users\Public\Desktop\WD Discovery.lnk

2019-07-12 12:51 - 2019-07-12 12:51 - 000000000 ___DC C:\Users\indre\AppData\Roaming\WDDesktop

2019-07-12 12:50 - 2019-07-12 13:24 - 000000000 ___DC C:\Users\indre\AppData\Roaming\WD Discovery

2019-07-12 12:50 - 2019-07-12 13:24 - 000000000 ____D C:\Users\indre\.wdc

2019-07-12 12:50 - 2019-07-12 12:54 - 000000000 ____D C:\Program Files\WD Desktop App

2019-07-12 12:50 - 2017-11-21 12:03 - 000468112 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\Drivers\wdfsconnect2017.sys

2019-07-12 12:50 - 2017-11-21 12:03 - 000020624 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\Drivers\wdvpnpbus.sys

2019-07-12 12:50 - 2017-11-10 12:51 - 000223744 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\SysWOW64\wdfsconnectNetRdr2017.dll

2019-07-12 12:50 - 2017-11-10 12:51 - 000180224 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\wdfsconnectMntNtf2017.dll

2019-07-12 12:50 - 2017-11-10 12:51 - 000154112 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\SysWOW64\wdfsconnectMntNtf2017.dll

2019-07-12 12:50 - 2017-11-10 12:51 - 000118272 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\wdfsconnectNetRdr2017.dll

2019-07-12 12:50 - 2017-11-10 12:51 - 000002560 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\wdfsconnectevtmsg.dll

2019-07-12 12:16 - 2019-07-12 12:16 - 000001192 _____ C:\Users\Public\Desktop\WD Drive Utilities.lnk

2019-07-12 12:14 - 2019-07-12 13:23 - 000002228 _____ C:\Users\Public\Desktop\WD Backup.lnk

2019-07-12 12:14 - 2019-07-12 13:23 - 000000000 ____D C:\Program Files (x86)\Western Digital

2019-07-12 12:14 - 2019-07-12 12:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WD Discovery

2019-07-12 12:14 - 2019-07-12 12:14 - 000000000 ___DC C:\Users\indre\AppData\Roaming\Western Digital

2019-07-12 12:14 - 2019-07-12 12:14 - 000000000 ____D C:\ProgramData\Western Digital

2019-07-12 11:29 - 2019-07-12 11:29 - 005278464 _____ (Paramount Software UK Ltd) C:\Users\indre\Downloads\ReflectDLHF (1).exe

2019-07-12 11:25 - 2019-07-12 11:31 - 000000000 ____D C:\ProgramData\Macrium

2019-07-12 11:25 - 2019-07-12 11:25 - 000000000 ____D C:\Users\indre\Downloads\Macrium

2019-07-12 11:24 - 2019-07-12 11:25 - 005278464 _____ (Paramount Software UK Ltd) C:\Users\indre\Downloads\ReflectDLHF.exe

2019-07-11 12:12 - 2019-07-11 12:12 - 000000000 ___DC C:\Users\indre\Documents\Kaspersky Password Manager

2019-07-10 22:50 - 2019-07-10 22:50 - 000000000 ___DC C:\Users\indre\AppData\Local\Garmin

2019-07-10 07:50 - 2019-07-04 05:40 - 021390504 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2019-07-10 07:50 - 2019-07-04 05:40 - 001616840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2019-07-10 07:50 - 2019-07-04 05:21 - 008627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2019-07-10 07:50 - 2019-07-04 05:18 - 003614208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2019-07-10 07:50 - 2019-07-04 04:51 - 020384128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2019-07-10 07:50 - 2019-07-04 04:37 - 002882048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2019-07-10 07:50 - 2019-07-04 01:00 - 001035040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe

2019-07-10 07:50 - 2019-07-04 00:58 - 001219896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2019-07-10 07:50 - 2019-07-04 00:57 - 003292152 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2019-07-10 07:50 - 2019-07-04 00:57 - 001027384 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2019-07-10 07:50 - 2019-07-04 00:56 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2019-07-10 07:50 - 2019-07-04 00:56 - 007519896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2019-07-10 07:50 - 2019-07-04 00:56 - 007436536 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2019-07-10 07:50 - 2019-07-04 00:56 - 002810680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2019-07-10 07:50 - 2019-07-04 00:56 - 002571640 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2019-07-10 07:50 - 2019-07-04 00:42 - 006570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2019-07-10 07:50 - 2019-07-04 00:42 - 006044008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2019-07-10 07:50 - 2019-07-04 00:42 - 002479176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2019-07-10 07:50 - 2019-07-04 00:42 - 001980984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2019-07-10 07:50 - 2019-07-04 00:37 - 025857536 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2019-07-10 07:50 - 2019-07-04 00:33 - 022017536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2019-07-10 07:50 - 2019-07-04 00:29 - 022717440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2019-07-10 07:50 - 2019-07-04 00:26 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll

2019-07-10 07:50 - 2019-07-04 00:25 - 019372544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2019-07-10 07:50 - 2019-07-04 00:25 - 007589888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2019-07-10 07:50 - 2019-07-04 00:25 - 004861440 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2019-07-10 07:50 - 2019-07-04 00:25 - 003401216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2019-07-10 07:50 - 2019-07-04 00:23 - 001765888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2019-07-10 07:50 - 2019-07-04 00:22 - 003707904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2019-07-10 07:50 - 2019-07-04 00:21 - 005784064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2019-07-10 07:50 - 2019-07-04 00:21 - 003202560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2019-07-10 07:50 - 2019-07-04 00:21 - 002166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2019-07-10 07:50 - 2019-07-04 00:20 - 001156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2019-07-10 07:50 - 2019-06-13 08:12 - 002871848 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2019-07-10 07:50 - 2019-06-13 08:05 - 000810296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2019-07-10 07:50 - 2019-06-13 08:04 - 001721144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2019-07-10 07:50 - 2019-06-13 08:00 - 000464696 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2019-07-10 07:50 - 2019-06-13 07:59 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2019-07-10 07:50 - 2019-06-13 07:58 - 000637752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2019-07-10 07:50 - 2019-06-13 07:58 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll

2019-07-10 07:50 - 2019-06-13 07:56 - 000164152 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2019-07-10 07:50 - 2019-06-13 07:43 - 001427984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll

2019-07-10 07:50 - 2019-06-13 07:42 - 004038688 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2019-07-10 07:50 - 2019-06-13 07:42 - 002266936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll

2019-07-10 07:50 - 2019-06-13 07:18 - 006586880 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2019-07-10 07:50 - 2019-06-13 07:18 - 004847104 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2019-07-10 07:50 - 2019-06-13 07:17 - 012756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2019-07-10 07:50 - 2019-06-13 07:16 - 000767488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll

2019-07-10 07:50 - 2019-06-13 07:15 - 004718080 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2019-07-10 07:50 - 2019-06-13 07:14 - 000900096 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe

2019-07-10 07:50 - 2019-06-13 07:13 - 002920448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2019-07-10 07:50 - 2019-06-13 07:13 - 000951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll

2019-07-10 07:50 - 2019-06-13 06:11 - 001539896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll

2019-07-10 07:50 - 2019-06-13 06:05 - 003700160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2019-07-10 07:50 - 2019-06-13 05:55 - 005657088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2019-07-10 07:50 - 2019-06-13 05:54 - 011942912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2019-07-10 07:50 - 2019-06-13 05:50 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll

2019-07-10 07:50 - 2019-06-13 03:01 - 000513336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2019-07-10 07:50 - 2019-06-13 03:01 - 000511288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2019-07-10 07:50 - 2019-06-13 02:47 - 005625160 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2019-07-10 07:50 - 2019-06-13 02:45 - 002421560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2019-07-10 07:50 - 2019-06-13 02:44 - 002769688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2019-07-10 07:50 - 2019-06-13 02:44 - 000607112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll

2019-07-10 07:50 - 2019-06-13 02:14 - 003318784 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2019-07-10 07:50 - 2019-06-13 02:13 - 004771840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll

2019-07-10 07:50 - 2019-06-13 02:13 - 002370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2019-07-10 07:50 - 2019-06-13 02:10 - 002912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2019-07-10 07:50 - 2019-06-13 02:10 - 001400832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2019-07-10 07:50 - 2019-06-13 02:10 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2019-07-10 07:50 - 2019-06-13 02:09 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll

2019-07-10 07:50 - 2019-06-13 01:14 - 000415544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll

2019-07-10 07:50 - 2019-06-13 01:06 - 002256768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2019-07-10 07:50 - 2019-06-13 00:47 - 002899456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2019-07-10 07:49 - 2019-07-04 05:45 - 001786680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll

2019-07-10 07:49 - 2019-07-04 05:43 - 000094008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2019-07-10 07:49 - 2019-07-04 05:41 - 000304144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys

2019-07-10 07:49 - 2019-07-04 05:40 - 001631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2019-07-10 07:49 - 2019-07-04 05:40 - 000790416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2019-07-10 07:49 - 2019-07-04 05:22 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe

2019-07-10 07:49 - 2019-07-04 05:22 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll

2019-07-10 07:49 - 2019-07-04 05:20 - 001609216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2019-07-10 07:49 - 2019-07-04 05:19 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe

2019-07-10 07:49 - 2019-07-04 05:18 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2019-07-10 07:49 - 2019-07-04 04:56 - 001453416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2019-07-10 07:49 - 2019-07-04 04:54 - 000662352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2019-07-10 07:49 - 2019-07-04 04:41 - 007990784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2019-07-10 07:49 - 2019-07-04 04:36 - 001471488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2019-07-10 07:49 - 2019-07-04 00:58 - 001328440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2019-07-10 07:49 - 2019-07-04 00:58 - 000416312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll

2019-07-10 07:49 - 2019-07-04 00:58 - 000192824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys

2019-07-10 07:49 - 2019-07-04 00:57 - 000986128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2019-07-10 07:49 - 2019-07-04 00:57 - 000776784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000723728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000708696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2019-07-10 07:49 - 2019-07-04 00:57 - 000568104 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe

2019-07-10 07:49 - 2019-07-04 00:57 - 000362264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000209424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2019-07-10 07:49 - 2019-07-04 00:57 - 000194360 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000137656 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000091776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys

2019-07-10 07:49 - 2019-07-04 00:56 - 001566520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 001459120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2019-07-10 07:49 - 2019-07-04 00:56 - 001260776 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2019-07-10 07:49 - 2019-07-04 00:56 - 001141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2019-07-10 07:49 - 2019-07-04 00:56 - 000983936 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2019-07-10 07:49 - 2019-07-04 00:56 - 000767536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 000734952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2019-07-10 07:49 - 2019-07-04 00:56 - 000493752 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 000115512 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll

2019-07-10 07:49 - 2019-07-04 00:43 - 000832016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2019-07-10 07:49 - 2019-07-04 00:43 - 000665440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2019-07-10 07:49 - 2019-07-04 00:43 - 000328696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll

2019-07-10 07:49 - 2019-07-04 00:43 - 000287376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll

2019-07-10 07:49 - 2019-07-04 00:43 - 000191800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2019-07-10 07:49 - 2019-07-04 00:42 - 001427768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll

2019-07-10 07:49 - 2019-07-04 00:42 - 000573808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2019-07-10 07:49 - 2019-07-04 00:42 - 000356312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2019-07-10 07:49 - 2019-07-04 00:42 - 000097272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll

2019-07-10 07:49 - 2019-07-04 00:41 - 000559328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2019-07-10 07:49 - 2019-07-04 00:26 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll

2019-07-10 07:49 - 2019-07-04 00:26 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2019-07-10 07:49 - 2019-07-04 00:25 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll

2019-07-10 07:49 - 2019-07-04 00:25 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll

2019-07-10 07:49 - 2019-07-04 00:24 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys

2019-07-10 07:49 - 2019-07-04 00:24 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2019-07-10 07:49 - 2019-07-04 00:24 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2019-07-10 07:49 - 2019-07-04 00:24 - 000153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll

2019-07-10 07:49 - 2019-07-04 00:23 - 001217536 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll

2019-07-10 07:49 - 2019-07-04 00:23 - 000786432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 002587648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 002176000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 001561088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 001175552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 001920000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 001220608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll

2019-07-10 07:49 - 2019-07-04 00:20 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2019-07-10 07:49 - 2019-07-04 00:20 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2019-07-10 07:49 - 2019-07-04 00:20 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll

2019-07-10 07:49 - 2019-07-04 00:19 - 000886272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2019-07-10 07:49 - 2019-07-04 00:19 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 002602496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 001076224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 000965632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 000953344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll

2019-07-10 07:49 - 2019-07-04 00:17 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2019-07-10 07:49 - 2019-07-03 23:01 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim

2019-07-10 07:49 - 2019-06-21 04:50 - 000280584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys

2019-07-10 07:49 - 2019-06-13 08:15 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2019-07-10 07:49 - 2019-06-13 07:43 - 001048480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2019-07-10 07:49 - 2019-06-13 07:42 - 000652088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll

2019-07-10 07:49 - 2019-06-13 07:42 - 000566536 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe

2019-07-10 07:49 - 2019-06-13 07:41 - 001626936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll

2019-07-10 07:49 - 2019-06-13 07:41 - 000830264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll

2019-07-10 07:49 - 2019-06-13 07:41 - 000825144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll

2019-07-10 07:49 - 2019-06-13 07:41 - 000670008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll

2019-07-10 07:49 - 2019-06-13 07:40 - 000749880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll

2019-07-10 07:49 - 2019-06-13 07:40 - 000540984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll

2019-07-10 07:49 - 2019-06-13 07:40 - 000495416 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll

2019-07-10 07:49 - 2019-06-13 07:38 - 000766264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll

2019-07-10 07:49 - 2019-06-13 07:37 - 000101192 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe

2019-07-10 07:49 - 2019-06-13 07:36 - 000251000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2019-07-10 07:49 - 2019-06-13 07:36 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll

2019-07-10 07:49 - 2019-06-13 07:35 - 001376688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2019-07-10 07:49 - 2019-06-13 07:34 - 000146888 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe

2019-07-10 07:49 - 2019-06-13 07:17 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll

2019-07-10 07:49 - 2019-06-13 07:17 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll

2019-07-10 07:49 - 2019-06-13 07:17 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

2019-07-10 07:49 - 2019-06-13 07:17 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe

2019-07-10 07:49 - 2019-06-13 07:15 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe

2019-07-10 07:49 - 2019-06-13 07:14 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll

2019-07-10 07:49 - 2019-06-13 07:14 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll

2019-07-10 07:49 - 2019-06-13 07:14 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopSwitcherDataModel.dll

2019-07-10 07:49 - 2019-06-13 07:13 - 001339392 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll

2019-07-10 07:49 - 2019-06-13 07:13 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll

2019-07-10 07:49 - 2019-06-13 07:13 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll

2019-07-10 07:49 - 2019-06-13 07:12 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll

2019-07-10 07:49 - 2019-06-13 07:10 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll

2019-07-10 07:49 - 2019-06-13 06:07 - 001027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2019-07-10 07:49 - 2019-06-13 06:07 - 000660496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll

2019-07-10 07:49 - 2019-06-13 06:07 - 000221232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll

2019-07-10 07:49 - 2019-06-13 05:54 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll

2019-07-10 07:49 - 2019-06-13 05:53 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2019-07-10 07:49 - 2019-06-13 05:51 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll

2019-07-10 07:49 - 2019-06-13 05:49 - 002406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll

2019-07-10 07:49 - 2019-06-13 05:49 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll

2019-07-10 07:49 - 2019-06-13 03:48 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll

2019-07-10 07:49 - 2019-06-13 03:46 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll

2019-07-10 07:49 - 2019-06-13 03:01 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2019-07-10 07:49 - 2019-06-13 02:59 - 000785264 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll

2019-07-10 07:49 - 2019-06-13 02:47 - 001063224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2019-07-10 07:49 - 2019-06-13 02:46 - 001076536 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll

2019-07-10 07:49 - 2019-06-13 02:46 - 000510296 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2019-07-10 07:49 - 2019-06-13 02:46 - 000093984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 002546704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 001098272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 001033696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 000545808 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 000130624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll

2019-07-10 07:49 - 2019-06-13 02:17 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll

2019-07-10 07:49 - 2019-06-13 02:16 - 001626112 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2019-07-10 07:49 - 2019-06-13 02:16 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2019-07-10 07:49 - 2019-06-13 02:15 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe

2019-07-10 07:49 - 2019-06-13 02:15 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2019-07-10 07:49 - 2019-06-13 02:15 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2019-07-10 07:49 - 2019-06-13 02:15 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll

2019-07-10 07:49 - 2019-06-13 02:15 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll

2019-07-10 07:49 - 2019-06-13 02:14 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll

2019-07-10 07:49 - 2019-06-13 02:14 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2019-07-10 07:49 - 2019-06-13 02:14 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll

2019-07-10 07:49 - 2019-06-13 02:13 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2019-07-10 07:49 - 2019-06-13 02:13 - 000322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2019-07-10 07:49 - 2019-06-13 02:13 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2019-07-10 07:49 - 2019-06-13 02:11 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll

2019-07-10 07:49 - 2019-06-13 02:11 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll

2019-07-10 07:49 - 2019-06-13 02:11 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll

2019-07-10 07:49 - 2019-06-13 02:10 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll

2019-07-10 07:49 - 2019-06-13 02:10 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll

2019-07-10 07:49 - 2019-06-13 02:10 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll

2019-07-10 07:49 - 2019-06-13 02:10 - 000523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2019-07-10 07:49 - 2019-06-13 02:09 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2019-07-10 07:49 - 2019-06-13 02:09 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll

2019-07-10 07:49 - 2019-06-13 02:08 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll

2019-07-10 07:49 - 2019-06-13 01:08 - 000443632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll

2019-07-10 07:49 - 2019-06-13 01:07 - 000101192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll

2019-07-10 07:49 - 2019-06-13 01:07 - 000080744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll

2019-07-10 07:49 - 2019-06-13 01:06 - 001130776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2019-07-10 07:49 - 2019-06-13 01:06 - 000581600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll

2019-07-10 07:49 - 2019-06-13 00:49 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll

2019-07-10 07:49 - 2019-06-13 00:47 - 003554304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll

2019-07-10 07:49 - 2019-06-13 00:47 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2019-07-10 07:49 - 2019-06-13 00:46 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2019-07-10 07:49 - 2019-06-13 00:46 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll

2019-07-10 07:49 - 2019-06-13 00:46 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll

2019-07-10 07:49 - 2019-06-13 00:45 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2019-07-10 07:49 - 2019-06-13 00:45 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 001003008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 000582144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2019-07-10 07:49 - 2019-06-13 00:43 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2019-07-10 07:49 - 2019-06-13 00:43 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll

2019-07-10 07:49 - 2019-06-13 00:43 - 000445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll

2019-07-09 13:11 - 2019-07-09 13:11 - 004730179 _____ C:\Users\indre\Downloads\Master Folder For Cleared Checks INDY (2).xlsx

2019-07-09 13:09 - 2019-07-09 13:09 - 008141856 _____ C:\Users\indre\Downloads\MASTER ALL CHECKS (4).xlsx

2019-07-08 13:49 - 2019-07-08 13:49 - 000000000 ___DC C:\Users\indre\Documents\ED stuff

2019-07-08 11:03 - 2019-07-08 11:04 - 000188559 ____C C:\Users\indre\Desktop\DESKTOP-EL88UDV.txt

2019-07-08 11:01 - 2019-07-08 11:01 - 000000839 _____ C:\Users\Public\Desktop\Speccy.lnk

2019-07-08 11:01 - 2019-07-08 11:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy

2019-07-08 11:01 - 2019-07-08 11:01 - 000000000 ____D C:\Program Files\Speccy

2019-07-08 10:59 - 2019-07-08 10:59 - 006889184 _____ (Piriform Ltd) C:\Users\indre\Downloads\spsetup132.exe

2019-07-08 10:59 - 2019-07-08 10:59 - 001309592 _____ (BraveSoftware Inc.) C:\Users\indre\Downloads\BraveBrowserSetup-TPF550.exe

2019-07-08 10:58 - 2019-07-08 10:58 - 000019118 ____C C:\Users\indre\Desktop\Tasklist 070819.txt

2019-07-08 10:56 - 2019-07-08 10:56 - 000019118 _____ C:\junk.txt

2019-07-08 10:54 - 2019-07-08 10:54 - 000026673 ____C C:\Users\indre\Desktop\Registry 070819.txt

2019-07-08 10:50 - 2019-07-08 10:50 - 002826520 _____ (Sysinternals - www.sysinternals.com) C:\Users\indre\Downloads\procexp (1).exe

2019-07-08 10:50 - 2019-07-08 10:50 - 000043192 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS

2019-07-08 10:49 - 2019-07-08 10:49 - 002826520 _____ (Sysinternals - www.sysinternals.com) C:\Users\indre\Downloads\procexp.exe

2019-07-08 10:47 - 2019-07-08 10:47 - 000023010 ____C C:\Users\indre\Desktop\VEW Application 070819.txt

2019-07-08 10:44 - 2019-07-08 10:44 - 000007664 ____C C:\Users\indre\Desktop\VEW Events 070819.txt

2019-07-08 10:43 - 2019-07-08 10:46 - 000023010 _____ C:\VEW.txt

2019-07-08 10:40 - 2019-07-08 10:40 - 000061440 _____ ( ) C:\Users\indre\Downloads\VEW.exe

2019-07-06 13:06 - 2019-07-06 13:06 - 000302368 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys

2019-07-06 13:04 - 2019-07-06 13:04 - 000001371 _____ C:\Users\Public\Desktop\Kaspersky Password Manager.lnk

2019-07-06 13:04 - 2019-07-06 13:04 - 000000000 ___DC C:\Users\indre\AppData\Local\Kaspersky Lab

2019-07-06 13:04 - 2019-07-06 13:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager

2019-07-06 13:00 - 2019-07-06 13:00 - 000245272 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys

2019-07-06 13:00 - 2019-07-06 13:00 - 000198768 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys

2019-07-06 13:00 - 2019-07-06 13:00 - 000116104 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys

2019-07-06 13:00 - 2019-07-06 13:00 - 000099152 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys

2019-07-06 13:00 - 2019-07-06 13:00 - 000003392 _____ C:\WINDOWS\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}

2019-07-06 13:00 - 2019-07-06 13:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection

2019-07-06 12:59 - 2019-07-12 13:24 - 000000000 ____D C:\ProgramData\Kaspersky Lab

2019-07-06 12:59 - 2019-07-06 13:17 - 000236672 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys

2019-07-06 12:59 - 2019-07-06 13:16 - 001168000 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys

2019-07-06 12:59 - 2019-07-06 13:16 - 001093248 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys

2019-07-06 12:59 - 2019-07-06 13:16 - 000152288 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\klhkum.dll

2019-07-06 12:59 - 2019-07-06 13:04 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab

2019-07-06 12:59 - 2019-07-06 12:59 - 000002210 _____ C:\Users\Public\Desktop\Safe Money.lnk

2019-07-06 12:59 - 2019-07-06 12:59 - 000002182 _____ C:\Users\Public\Desktop\Kaspersky Total Security.lnk

2019-07-06 12:59 - 2019-07-06 12:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security

2019-07-06 12:59 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll

2019-07-06 12:57 - 2019-07-06 12:56 - 000592616 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2019-07-06 12:54 - 2019-07-06 12:55 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files

2019-07-06 12:54 - 2019-07-06 12:54 - 002660224 _____ (Kaspersky Lab) C:\Users\indre\Downloads\startup_14445.exe

2019-07-06 10:01 - 2019-07-06 10:01 - 002420224 _____ (Farbar) C:\Users\indre\Downloads\FRST64 (1).exe

2019-07-06 10:00 - 2019-07-12 13:31 - 000047747 ____C C:\Users\indre\Desktop\FRST.txt

2019-07-06 09:58 - 2019-07-06 10:00 - 000039445 _____ C:\Users\indre\Downloads\Addition.txt

2019-07-06 09:55 - 2019-07-06 09:59 - 000079818 _____ C:\Users\indre\Downloads\FRST.txt

2019-07-06 09:54 - 2019-07-12 13:31 - 000000000 ____D C:\FRST

2019-07-06 09:53 - 2019-07-06 09:53 - 002420224 _____ (Farbar) C:\Users\indre\Downloads\FRST64.exe

2019-07-01 19:18 - 2019-07-01 19:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools

2019-06-29 23:56 - 2019-06-29 23:56 - 011069444 _____ C:\Users\indre\Downloads\thecourtshipofeddiesfather-1st (1).mpg

2019-06-29 23:55 - 2019-06-29 23:55 - 011069444 _____ C:\Users\indre\Downloads\thecourtshipofeddiesfather-1st.mpg

2019-06-29 11:29 - 2019-06-29 11:29 - 000074636 _____ C:\ProgramData\agent.update.1561822169.bdinstall.v2.bin

2019-06-27 20:31 - 2019-06-27 20:31 - 022709477 _____ C:\Users\indre\Downloads\20190627_202829_19399014677980 (1).mp4

2019-06-27 20:30 - 2019-06-27 20:30 - 022709477 _____ C:\Users\indre\Downloads\20190627_202829_19399014677980.mp4

2019-06-27 19:53 - 2019-06-27 19:53 - 000000054 ____C C:\Users\indre\Desktop\cryptic stacey 062719.txt

2019-06-24 00:13 - 2019-07-07 22:03 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2019-06-23 23:58 - 2019-06-23 23:58 - 000068279 _____ C:\Users\indre\Downloads\Iulo_Susan_References_2019.pdf

2019-06-23 14:04 - 2019-06-23 14:04 - 000128245 _____ C:\Users\indre\Downloads\Iulo_Susan_-_Resume_2019.pdf

2019-06-21 20:51 - 2019-06-21 20:51 - 000128344 _____ C:\Users\indre\Downloads\Iulo_Susan_-_resume_June_2019_FIRST DRAFT (2).pdf

2019-06-21 20:28 - 2019-06-21 20:28 - 000128344 _____ C:\Users\indre\Downloads\Iulo_Susan_-_resume_June_2019_FIRST DRAFT (1).pdf

2019-06-21 20:25 - 2019-06-21 20:25 - 000128344 _____ C:\Users\indre\Downloads\Iulo_Susan_-_resume_June_2019_FIRST DRAFT.pdf

2019-06-20 12:13 - 2019-06-20 12:13 - 000004919 _____ C:\Users\indre\Downloads\imp8A93.pdf

2019-06-20 12:13 - 2019-06-20 12:13 - 000004919 _____ C:\Users\indre\Downloads\imp8A93 (1).pdf

2019-06-18 21:05 - 2019-06-18 21:05 - 000039557 _____ C:\Users\indre\Downloads\Letters_2019_06_14_12_42_30_156.pdf

2019-06-18 02:30 - 2019-06-18 02:30 - 000363078 _____ C:\Users\indre\Downloads\Preprinted UPS label for Treasury to Farmingdale 010918.pdf

2019-06-17 14:37 - 2019-06-17 14:37 - 000350164 _____ C:\Users\indre\Downloads\Statement_062019_8810.pdf

2019-06-13 20:33 - 2019-06-13 20:33 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless

2019-06-13 20:32 - 2019-06-13 20:32 - 000000000 ____D C:\Program Files\Common Files\Intel

2019-06-13 18:57 - 2019-06-13 18:57 - 000042697 _____ C:\Users\indre\Downloads\Vet papers on baby panthers.pdf

2019-06-13 18:56 - 2019-06-13 18:56 - 000115738 _____ C:\Users\indre\Downloads\Indre adoption contract.pdf

2019-06-12 20:53 - 2019-06-07 06:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll

2019-06-12 20:53 - 2019-06-07 06:47 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll

2019-06-12 20:53 - 2019-06-07 06:41 - 004055552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2019-06-12 20:53 - 2019-06-07 06:40 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll

2019-06-12 20:53 - 2019-06-07 06:10 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll

2019-06-12 20:53 - 2019-06-07 06:04 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2019-06-12 20:53 - 2019-06-07 02:07 - 000707384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2019-06-12 20:53 - 2019-06-07 01:58 - 000422416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll

2019-06-12 20:53 - 2019-06-07 01:58 - 000076304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 001934808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2019-06-12 20:53 - 2019-06-07 01:57 - 001209696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2019-06-12 20:53 - 2019-06-07 01:57 - 000792888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 000594024 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2019-06-12 20:53 - 2019-06-07 01:57 - 000435000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2019-06-12 20:53 - 2019-06-07 01:57 - 000413720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2019-06-12 20:53 - 2019-06-07 01:57 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 000383504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 000170296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 000148280 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll

2019-06-12 20:53 - 2019-06-07 01:47 - 000380432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2019-06-12 20:53 - 2019-06-07 01:46 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2019-06-12 20:53 - 2019-06-07 01:46 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2019-06-12 20:53 - 2019-06-07 01:46 - 000128792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll

2019-06-12 20:53 - 2019-06-07 01:24 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll

2019-06-12 20:53 - 2019-06-07 01:23 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2019-06-12 20:53 - 2019-06-07 01:23 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll

2019-06-12 20:53 - 2019-06-07 01:22 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll

2019-06-12 20:53 - 2019-06-07 01:22 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll

2019-06-12 20:53 - 2019-06-07 01:21 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2019-06-12 20:53 - 2019-06-07 01:21 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2019-06-12 20:53 - 2019-06-07 01:20 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll

2019-06-12 20:53 - 2019-06-07 01:20 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2019-06-12 20:53 - 2019-06-07 01:19 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2019-06-12 20:53 - 2019-06-07 01:19 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll

2019-06-12 20:53 - 2019-06-07 01:18 - 000686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2019-06-12 20:53 - 2019-06-07 01:17 - 000961024 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2019-06-12 20:53 - 2019-06-07 01:17 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2019-06-12 20:53 - 2019-06-07 01:16 - 001102336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2019-06-12 20:53 - 2019-06-07 01:16 - 000900096 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2019-06-12 20:53 - 2019-06-07 01:16 - 000478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll

2019-06-12 20:53 - 2019-05-18 18:12 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll

2019-06-12 20:53 - 2019-05-18 18:12 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll

2019-06-12 20:53 - 2019-05-18 18:12 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll

2019-06-12 20:53 - 2019-05-18 18:12 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll

2019-06-12 20:53 - 2019-05-17 08:44 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe

2019-06-12 20:53 - 2019-05-17 08:40 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL

2019-06-12 20:53 - 2019-05-17 08:25 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe

2019-06-12 20:53 - 2019-05-17 08:25 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsUpdateElevatedInstaller.exe

2019-06-12 20:53 - 2019-05-17 08:24 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll

2019-06-12 20:53 - 2019-05-17 08:23 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll

2019-06-12 20:53 - 2019-05-17 08:23 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll

2019-06-12 20:53 - 2019-05-17 08:23 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll

2019-06-12 20:53 - 2019-05-17 08:22 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2019-06-12 20:53 - 2019-05-17 08:22 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpui.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2019-06-12 20:53 - 2019-05-17 08:20 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2019-06-12 20:53 - 2019-05-17 08:20 - 001970688 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll

2019-06-12 20:53 - 2019-05-17 08:20 - 000725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCacheProvider.dll

2019-06-12 20:53 - 2019-05-17 08:20 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSh.dll

2019-06-12 20:53 - 2019-05-17 08:20 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll

2019-06-12 20:53 - 2019-05-17 08:19 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2019-06-12 20:53 - 2019-05-17 08:07 - 002206424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL

2019-06-12 20:53 - 2019-05-17 07:58 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe

2019-06-12 20:53 - 2019-05-17 07:58 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll

2019-06-12 20:53 - 2019-05-17 07:56 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2019-06-12 20:53 - 2019-05-17 07:56 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpui.dll

2019-06-12 20:53 - 2019-05-17 07:55 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll

2019-06-12 20:53 - 2019-05-17 07:55 - 000668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2019-06-12 20:53 - 2019-05-17 07:55 - 000470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll

2019-06-12 20:53 - 2019-05-17 07:55 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDistSh.dll

2019-06-12 20:53 - 2019-05-17 07:54 - 002016768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2019-06-12 20:53 - 2019-05-17 07:54 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll

2019-06-12 20:53 - 2019-05-17 05:33 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll

2019-06-12 20:53 - 2019-05-17 04:52 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll

2019-06-12 20:53 - 2019-05-17 03:07 - 000105272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2019-06-12 20:53 - 2019-05-17 02:44 - 000829960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2019-06-12 20:53 - 2019-05-17 02:44 - 000550520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2019-06-12 20:53 - 2019-05-17 02:43 - 000297688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 004789944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 001989552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 001620264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 001380096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 000125504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll

2019-06-12 20:53 - 2019-05-17 02:30 - 013878784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2019-06-12 20:53 - 2019-05-17 02:26 - 002969600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2019-06-12 20:53 - 2019-05-17 02:23 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe

2019-06-12 20:53 - 2019-05-17 02:23 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll

2019-06-12 20:53 - 2019-05-17 02:23 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2019-06-12 20:53 - 2019-05-17 02:22 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll

2019-06-12 20:53 - 2019-05-17 02:22 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll

2019-06-12 20:53 - 2019-05-17 02:21 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe

2019-06-12 20:53 - 2019-05-17 02:21 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll

2019-06-12 20:53 - 2019-05-17 02:20 - 000366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2019-06-12 20:53 - 2019-05-17 02:20 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 004515840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 001630720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2019-06-12 20:53 - 2019-05-17 02:18 - 002796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2019-06-12 20:53 - 2019-05-17 02:18 - 001006592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2019-06-12 20:53 - 2019-05-17 02:08 - 000491200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2019-06-12 20:53 - 2019-05-17 02:08 - 000401328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 002467320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 001288712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 000930616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2019-06-12 20:53 - 2019-05-17 02:07 - 000275768 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2019-06-12 20:53 - 2019-05-17 02:06 - 001943136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2019-06-12 20:53 - 2019-05-17 02:06 - 001784696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll

2019-06-12 20:53 - 2019-05-17 02:06 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll

2019-06-12 20:53 - 2019-05-17 02:06 - 000151888 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll

2019-06-12 20:53 - 2019-05-17 02:04 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2019-06-12 20:53 - 2019-05-17 02:00 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll

2019-06-12 20:53 - 2019-05-17 01:44 - 016597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2019-06-12 20:53 - 2019-05-17 01:38 - 004709376 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2019-06-12 20:53 - 2019-05-17 01:37 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll

2019-06-12 20:53 - 2019-05-17 01:37 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DuCsps.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys

2019-06-12 20:53 - 2019-05-17 01:36 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe

2019-06-12 20:53 - 2019-05-17 01:36 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2019-06-12 20:53 - 2019-05-17 01:35 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe

2019-06-12 20:53 - 2019-05-17 01:34 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe

2019-06-12 20:53 - 2019-05-17 01:34 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll

2019-06-12 20:53 - 2019-05-17 01:33 - 003091456 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2019-06-12 20:53 - 2019-05-17 01:33 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll

2019-06-12 20:53 - 2019-05-17 01:33 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2019-06-12 20:53 - 2019-05-17 01:33 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2019-06-12 20:53 - 2019-05-17 01:32 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll

2019-06-12 20:53 - 2019-05-17 01:32 - 000815104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 004937216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 003376640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 003293184 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 001805312 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 001383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 001211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 001027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 000620032 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2019-06-12 20:53 - 2019-05-17 01:30 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2019-06-12 20:53 - 2019-05-17 01:30 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll

 

==================== One month (modified) ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2019-07-12 13:27 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\Registration

2019-07-12 13:23 - 2016-08-09 19:33 - 000000000 ____D C:\ProgramData\Package Cache

2019-07-12 13:22 - 2016-09-11 19:32 - 000000000 ___RD C:\Users\indre\OneDrive

2019-07-12 13:21 - 2018-04-11 19:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2019-07-12 13:21 - 2016-09-11 19:30 - 000000000 __SHD C:\Users\indre\IntelGraphicsProfiles

2019-07-12 12:50 - 2018-05-23 14:38 - 000000000 ____D C:\Users\indre

2019-07-12 12:50 - 2018-04-11 19:36 - 000000000 ____D C:\WINDOWS\INF

2019-07-12 12:10 - 2016-10-12 00:52 - 000000000 ___DC C:\Users\indre\AppData\Roaming\Seagate

2019-07-12 11:43 - 2018-04-11 19:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2019-07-12 11:43 - 2016-09-16 22:45 - 000000000 ____D C:\ProgramData\Malwarebytes

2019-07-12 10:22 - 2018-05-23 14:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2019-07-12 09:08 - 2018-05-23 14:44 - 000004166 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{71AF15CB-04B4-4B18-8047-5E35B9C7421E}

2019-07-11 11:16 - 2018-05-23 14:43 - 000840376 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2019-07-11 11:11 - 2018-06-09 20:55 - 000406920 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2019-07-11 11:11 - 2018-05-23 14:44 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2019-07-11 11:11 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\AppReadiness

2019-07-11 11:11 - 2017-11-15 23:45 - 000000000 ___RD C:\Users\indre\3D Objects

2019-07-11 11:11 - 2016-08-09 19:48 - 000000000 __RHD C:\Users\Public\AccountPictures

2019-07-11 04:10 - 2018-04-11 17:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2019-07-11 04:09 - 2018-04-12 05:20 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\TextInput

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\oobe

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\appraiser

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\ShellComponents

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\Provisioning

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\bcastdvr

2019-07-11 04:09 - 2018-04-11 17:04 - 000000000 ____D C:\WINDOWS\system32\Dism

2019-07-11 04:01 - 2016-11-18 22:39 - 000000000 ___DC C:\Users\indre\AppData\LocalLow\Mozilla

2019-07-10 11:30 - 2018-04-11 19:38 - 000000000 ___HD C:\Program Files\WindowsApps

2019-07-10 08:13 - 2018-04-11 19:30 - 000000000 ____D C:\WINDOWS\CbsTemp

2019-07-10 07:49 - 2016-09-12 20:21 - 000000000 ____D C:\WINDOWS\system32\MRT

2019-07-10 07:36 - 2016-09-12 20:20 - 136618864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2019-07-10 02:37 - 2018-05-23 14:44 - 000004600 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier

2019-07-10 02:37 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2019-07-10 02:37 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\Macromed

2019-07-10 01:37 - 2018-05-23 14:44 - 000004588 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier

2019-07-10 01:37 - 2018-05-23 14:44 - 000004386 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2019-07-09 13:12 - 2017-11-15 23:37 - 000000000 ___DC C:\Users\indre\AppData\Local\Packages

2019-07-08 14:37 - 2016-09-18 09:35 - 000000000 ___DC C:\Users\indre\AppData\Local\CrashDumps

2019-07-08 13:50 - 2016-09-17 01:49 - 000000000 ___DC C:\Users\indre\Documents\Funny stuff

2019-07-08 13:43 - 2018-12-02 19:00 - 000000000 ___DC C:\Users\indre\Documents\Editing for Josh

2019-07-06 13:17 - 2019-02-13 14:10 - 000184960 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwtp.sys

2019-07-06 13:17 - 2019-02-13 14:10 - 000125568 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klbackupflt.sys

2019-07-06 13:17 - 2019-02-13 14:10 - 000091472 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kldisk.sys

2019-07-06 13:17 - 2018-02-24 05:17 - 000218240 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kneps.sys

2019-07-06 13:17 - 2018-02-17 02:50 - 000104576 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwfp.sys

2019-07-06 13:17 - 2018-01-15 05:13 - 000060536 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klkbdflt.sys

2019-07-06 13:16 - 2019-02-13 14:10 - 000075600 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klbackupdisk.sys

2019-07-06 13:16 - 2019-02-13 14:10 - 000046416 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klpnpflt.sys

2019-07-06 13:16 - 2018-02-12 04:17 - 000058704 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klim6.sys

2019-07-06 13:16 - 2017-12-11 11:49 - 000060784 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klmouflt.sys

2019-07-06 13:16 - 2017-05-30 18:51 - 000050304 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klpd.sys

2019-07-06 13:00 - 2017-02-04 10:05 - 000000000 ____D C:\Program Files\Common Files\AV

2019-07-06 12:59 - 2018-04-11 17:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2019-07-06 12:57 - 2016-09-11 22:04 - 000000000 ____D C:\ProgramData\AVAST Software

2019-07-06 01:15 - 2018-06-20 22:44 - 000002365 ____C C:\Users\indre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2019-07-06 01:15 - 2018-05-23 14:44 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1593158232-969496310-2340663774-1001

2019-07-06 00:04 - 2016-09-17 01:09 - 000000000 ___DC C:\Users\indre\Documents\Letters

2019-07-04 21:08 - 2019-02-24 19:35 - 000003802 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864

2019-07-04 12:01 - 2018-05-23 14:44 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2019-07-04 12:01 - 2018-05-23 14:44 - 000003346 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2019-07-04 12:01 - 2018-05-23 14:44 - 000003298 _____ C:\WINDOWS\System32\Tasks\Dell SupportAssistAgent AutoUpdate

2019-07-04 12:01 - 2018-05-23 14:44 - 000003122 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2019-07-04 12:01 - 2018-05-23 14:44 - 000003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification

2019-07-04 12:01 - 2018-05-23 14:44 - 000003042 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473

2019-07-04 12:01 - 2018-05-23 14:44 - 000003040 _____ C:\WINDOWS\System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec

2019-07-04 12:01 - 2018-05-23 14:44 - 000002806 _____ C:\WINDOWS\System32\Tasks\Seagate_Install_Launch

2019-07-04 12:01 - 2018-05-23 14:44 - 000002702 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask

2019-07-04 12:01 - 2018-05-23 14:44 - 000002674 _____ C:\WINDOWS\System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon

2019-07-04 12:01 - 2018-05-23 14:44 - 000002528 _____ C:\WINDOWS\System32\Tasks\CLVDLauncher

2019-07-04 12:01 - 2018-05-23 14:44 - 000002528 _____ C:\WINDOWS\System32\Tasks\CLMLSvc_P2G8

2019-07-04 12:01 - 2018-05-23 14:44 - 000002304 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_PushButton

2019-07-04 12:01 - 2018-05-23 14:44 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software

2019-07-01 19:18 - 2019-05-14 13:15 - 000002495 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk

2019-07-01 19:18 - 2019-05-14 13:15 - 000002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk

2019-07-01 19:18 - 2019-05-14 13:15 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk

2019-07-01 19:18 - 2019-05-14 13:15 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk

2019-07-01 19:18 - 2019-05-14 13:15 - 000002437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk

2019-07-01 19:18 - 2016-08-09 19:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Office

2019-06-29 23:58 - 2017-10-14 21:56 - 000000000 ___DC C:\Users\indre\AppData\Roaming\vlc

2019-06-29 23:56 - 2017-10-14 21:56 - 000001141 _____ C:\Users\Public\Desktop\VLC media player.lnk

2019-06-29 11:29 - 2019-02-24 19:33 - 000000000 ____D C:\Program Files\Bitdefender Agent

2019-06-28 08:30 - 2016-09-16 13:57 - 000000000 ___DC C:\Users\indre\AppData\Roaming\VMware

2019-06-27 18:32 - 2016-09-11 19:59 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2019-06-27 00:47 - 2017-07-15 20:02 - 000014706 ____C C:\Users\indre\Documents\Indy's Finances.xlsx

2019-06-26 22:10 - 2016-09-11 19:59 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2019-06-21 21:34 - 2016-09-17 01:09 - 000000000 ___DC C:\Users\indre\Documents\Resumes etc

2019-06-21 16:50 - 2016-09-17 01:09 - 000000000 ___DC C:\Users\indre\Documents\Recipes

2019-06-20 20:08 - 2016-09-11 19:57 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2019-06-20 20:08 - 2016-09-11 19:57 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2019-06-20 20:03 - 2018-11-16 12:19 - 000000000 ____D C:\Program Files\rempl

2019-06-20 08:58 - 2017-05-09 21:49 - 000000000 ____D C:\Program Files\UNP

2019-06-18 05:52 - 2016-09-17 01:38 - 000000000 ___DC C:\Users\indre\Documents\Akiko stuff

2019-06-13 20:33 - 2016-08-09 19:33 - 000000000 ____D C:\ProgramData\Intel

2019-06-13 20:33 - 2015-10-30 02:28 - 000000000 ____D C:\Users\Default.migrated

2019-06-13 20:32 - 2017-05-21 14:10 - 000000000 ____D C:\Program Files (x86)\Intel

2019-06-13 20:31 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData

2019-06-13 20:31 - 2017-05-21 14:10 - 000000000 ____D C:\Program Files\Intel

2019-06-13 18:45 - 2016-09-16 22:23 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2019-06-13 18:22 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\ShellExperiences

2019-06-13 18:22 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

 

==================== Files in the root of some directories ================

 

2018-11-19 21:23 - 2018-11-19 21:23 - 000000017 ____C () C:\Users\indre\AppData\Local\resmon.resmoncfg

 

==================== SigCheck ===============================

 

(There is no automatic fix for files that do not pass verification.)

 

==================== End of FRST.txt ============================

 

(2) Here's the Addition scan:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-07-2019

Ran by indre (12-07-2019 13:32:10)

Running from C:\Users\indre\Desktop

Windows 10 Pro Version 1803 17134.885 (X64) (2018-05-23 18:44:41)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-1593158232-969496310-2340663774-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-1593158232-969496310-2340663774-503 - Limited - Disabled)

Guest (S-1-5-21-1593158232-969496310-2340663774-501 - Limited - Disabled)

indre (S-1-5-21-1593158232-969496310-2340663774-1001 - Administrator - Enabled) => C:\Users\indre

WDAGUtilityAccount (S-1-5-21-1593158232-969496310-2340663774-504 - Limited - Disabled)

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Kaspersky Total Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}

AS: Kaspersky Total Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Kaspersky Total Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

Across Lite (HKLM-x32\...\{5F5C7350-9731-420F-97CC-8CAFEE7DA7A3}) (Version: 2.4.2451.1 - Literate Software)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.012.20035 - Adobe Systems Incorporated)

Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.223 - Adobe)

Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.223 - Adobe)

Angry Birds (HKLM-x32\...\{2F7D5734-056F-4A0A-A1C7-CA1AAE5BB1EB}) (Version: 1.6.3.1 - Rovio)

ANT Drivers Installer x64 (HKLM\...\{D559687A-60C5-4786-9429-C21EC195789D}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden

Apple Application Support (32-bit) (HKLM-x32\...\{C1BCFECF-6EC2-4750-9072-5E2489423F8F}) (Version: 7.5 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{B202C7F5-7DE3-4FBF-B259-E70E625F56FC}) (Version: 7.5 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{B5A46811-3612-4DA5-8A5A-E6DED5D7C523}) (Version: 12.2.1.12 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)

Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 1.0.1 - Bitdefender)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Cisco WebEx Meetings (HKLM-x32\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)

CmgMasterPrerequisites (HKLM\...\{EE34FA4E-715A-46FA-9CAF-06E26AE4217D}) (Version: 1.10.0.34 - Dell, Inc.) Hidden

CutePDF Form Filler 3.6 (Evaluation) (HKLM-x32\...\CutePDF Form Filler (Evaluation)_is1) (Version:  - Acro Software Inc.)

CyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 12 - CyberLink Corp.)

Dell Command | Update (HKLM-x32\...\{EC542D5D-B608-4145-A8F7-749C02BE6D94}) (Version: 2.2.0 - Dell Inc.)

Dell Data Protection | Client Security Framework (HKLM\...\{FAE38E46-ECB2-44EA-A52B-6955AA6B1B3A}) (Version: 8.10.0.39 - Dell, Inc.)

Dell Data Protection | Security Tools (HKLM-x32\...\{812AA6D3-5BEB-4577-88B1-00998B91AB41}) (Version: 1.10.0.34 - Dell, Inc.) Hidden

Dell Data Protection | Security Tools (HKLM-x32\...\InstallShield_{812AA6D3-5BEB-4577-88B1-00998B91AB41}) (Version: 1.10.0.34 - Dell, Inc.)

Dell Digital Delivery (HKLM-x32\...\{AB7F2792-2ED1-4C5C-9F28-680E5110BF72}) (Version: 3.1.1018.0 - Dell Products, LP)

Dell SupportAssist (HKLM\...\{806422F1-FC4E-4D7C-8855-05748AEFC031}) (Version: 3.2.2.119 - Dell Inc.)

DELLOSD (HKLM-x32\...\{BED3193A-897B-47F6-AEDC-45D147122957}) (Version: 1.0.0.0 - DELL)

Elevated Installer (HKLM-x32\...\{0BF90608-2F95-4C7C-9A85-E90E0CAF4FE9}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden

FileZilla Client 3.25.1 (HKLM-x32\...\FileZilla Client) (Version: 3.25.1 - Tim Kosse)

Garmin Express (HKLM-x32\...\{95D0EADA-5123-41C0-931A-F37946BC0E8E}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden

Garmin Express (HKLM-x32\...\{eab4691c-4022-41cd-8d39-c3097ba62d4b}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 75.0.3770.100 - Google LLC)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden

HP Support Solutions Framework (HKLM-x32\...\{2B5A1E68-6617-406D-B797-5DAB5B4630B8}) (Version: 12.11.24.11 - HP Inc.)

Intel® Chipset Device Software (HKLM-x32\...\{fb610cea-ba50-4d4b-a717-cf025419035c}) (Version: 10.1.1.13 - Intel® Corporation) Hidden

Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation)

Intel® Network Connections 20.3.300.1 (HKLM\...\PROSetDX) (Version: 20.3.300.1 - Intel)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 23.20.16.4973 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.9.1053 - Intel Corporation)

Intel® Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden

Intel® Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden

Intel® WiDi (HKLM\...\{C7CD6D54-26AF-4D93-B06F-D81ACE8624CB}) (Version: 6.0.40.0 - Intel Corporation)

Intel® WiDi Software Asset Manager (HKLM-x32\...\{5B5CD20C-29F0-4857-A4FA-A4F4C716B019}) (Version: 1.1.347 - Intel Corporation) Hidden

Intel® Wireless Bluetooth® (HKLM-x32\...\{5068B0F8-CE24-4B61-9C2F-301B411FFB9C}) (Version: 18.1.1611.3223 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{f430aa46-62c4-47a0-8a03-42e7fff664b7}) (Version: 20.120.0 - Intel Corporation)

Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)

iTunes (HKLM\...\{A8AF3EF8-5010-4A92-BCCA-90F62A7D62B8}) (Version: 12.9.5.7 - Apple Inc.)

Kaspersky Password Manager (HKLM-x32\...\{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611}) (Version: 9.0.2.767 - Kaspersky Lab) Hidden

Kaspersky Password Manager (HKLM-x32\...\InstallWIX_{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611}) (Version: 9.0.2.767 - Kaspersky Lab)

Kaspersky Secure Connection (HKLM-x32\...\{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden

Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab)

Kaspersky Total Security (HKLM-x32\...\{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden

Kaspersky Total Security (HKLM-x32\...\InstallWIX_{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab)

LaserJet 1020 series (HKLM-x32\...\HP-LaserJet 1020 series) (Version:  - )

Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.6.8006.3 - Waves Audio Ltd.) Hidden

Microsoft Office Famille et Petite Entreprise 2016 - fr-fr (HKLM\...\HomeBusinessRetail - fr-fr) (Version: 16.0.11727.20230 - Microsoft Corporation)

Microsoft Office Hogar y Empresas 2016 - es-es (HKLM\...\HomeBusinessRetail - es-es) (Version: 16.0.11727.20230 - Microsoft Corporation)

Microsoft Office Home and Business 2016 - en-us (HKLM\...\HomeBusinessRetail - en-us) (Version: 16.0.11727.20230 - Microsoft Corporation)

Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\OneDriveSetup.exe) (Version: 19.103.0527.0003 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)

Mozilla Firefox 67.0.4 (x64 en-US) (HKLM\...\Mozilla Firefox 67.0.4 (x64 en-US)) (Version: 67.0.4 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 66.0.3 - Mozilla)

NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)

NordVPN (HKLM-x32\...\{F4325B30-A8A0-4D09-B0DE-7CBB485A52D8}) (Version: 6.22.6 - NordVPN) Hidden

NordVPN (HKLM-x32\...\NordVPN 6.22.6) (Version: 6.22.6 - NordVPN)

NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0C0A-0000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Plex Media Server (HKLM-x32\...\{72238E55-A877-4785-A5E9-0C35EAFB0746}) (Version: 1.15.876 - Plex, Inc.) Hidden

Plex Media Server (HKLM-x32\...\{9203fc01-57c0-4cc8-858d-92911b5142de}) (Version: 1.15.3.876 - Plex, Inc.)

Pretty Good Solitaire version 12.4.0 (HKLM-x32\...\Pretty Good Solitaire_is1) (Version: 12.4.0 - Goodsol Development Inc.)

proDAD Adorage 3.0 (HKLM-x32\...\proDAD-Adorage-3.0) (Version: 3.0.114.1 - proDAD GmbH)

Realtek Audio COM Components (HKLM-x32\...\{2355B503-9B11-4449-861D-1C1748B26320}) (Version: 1.0.2 - Realtek Semiconductor Corp.)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.21292 - Realtek Semiconductor Corp.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6105 - Realtek Semiconductor Corp.)

Security Innovation TSS (HKLM\...\{0C11FE22-53F2-4C9B-9E79-824B10D0976E}) (Version: 2.1.42 - Security Innovation) Hidden

Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)

Spotify (HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Spotify) (Version: 1.0.96.181.gf6bc1b6b - Spotify AB)

Stopping Plex (HKLM-x32\...\{3C6D43CB-1211-4C3F-8F3C-2B4F90C5BB95}) (Version: 1.15.876 - Plex, Inc.) Hidden

TextPad 8 (HKLM\...\{861AB1C1-1967-4C4A-BF86-C255E2D2B8FD}) (Version: 8.0.2 - Helios)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F14FB68A-9188-4036-AD0D-D054BC9C9291}) (Version: 2.59.0.0 - Microsoft Corporation)

VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)

VMware Horizon Client (HKLM\...\{93CEC220-0D24-41C0-8647-BA1C62A3EE89}) (Version: 4.0.1.781 - VMware, Inc.)

Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0) (Version: 1.0.33.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0-2) (Version: 1.0.33.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.)

Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

WD Backup (HKLM-x32\...\{50C6CAE8-562E-440D-8616-E0514D41CC10}) (Version: 1.9.6941.25593 - Western Digital Technologies, Inc) Hidden

WD Backup (HKLM-x32\...\{6531bf4b-4bad-46a5-9562-766d0a858003}) (Version: 1.9.6941.25593 - Western Digital Technologies, Inc.)

WD Desktop App 2.1.0.245 (HKLM-x32\...\{d303f1fe-6729-4693-b2e1-51d13b450de5}) (Version: 2.1.0.245 - Western Digital Corporation) Hidden

WD Desktop App 2.1.0.245 (x64) (HKLM\...\{CA7F7232-526E-41BD-971A-47BE28C18516}) (Version: 2.1.0.245 - Western Digital Corporation) Hidden

WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 3.3.34 - Western Digital Technologies, Inc.)

WD Drive Utilities (HKLM-x32\...\{5ea95ccc-fc68-4182-88a9-e563ba3900ed}) (Version: 2.0.0.26 - Western Digital Technologies, Inc.)

WD Drive Utilities (HKLM-x32\...\{893C7059-0464-47FB-85A4-5E1ADDA56141}) (Version: 2.0.0.26 - Western Digital Technologies, Inc.) Hidden

WD SES Driver Setup (HKLM-x32\...\{924A274D-38B6-4930-8859-F3F51CFA8DDD}) (Version: 1.1.0.25 - Western Digital) Hidden

Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)

Windows Driver Package - Intel Corporation (iaStorA) HDC  (08/10/2017 15.7.5.1025) (HKLM\...\FF1B55CEF8D39B696D1F5DF141ACFA7A5D1F2743) (Version: 08/10/2017 15.7.5.1025 - Intel Corporation)

Windows Driver Package - Intel Corporation (iaStorA) SCSIAdapter  (08/10/2017 15.7.5.1025) (HKLM\...\6D773A6E21B2A480569157737F58E8FF7DC6608A) (Version: 08/10/2017 15.7.5.1025 - Intel Corporation)

Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)

Zoom (HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\ZoomUMX) (Version: 4.1 - Zoom Video Communications, Inc.)

 

Packages:

=========

CyberLink Media Suite Essentials -> C:\Program Files\WindowsApps\DB6EA5DB.CyberLinkMediaSuiteEssentials_1.0.10.0_x86__mcezb6ze687jp [2018-03-13] (CYBERLINK CORPORATION.)

Dell SupportAssist for PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.2.5.0_x64__htrsf667h5kn2 [2019-05-29] (Dell Inc)

Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2019-07-10] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2018-09-22] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-12] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-12] (Microsoft Corporation) [MS Ad]

Microsoft Jigsaw -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJigsaw_1.8.1812.301_x86__8wekyb3d8bbwe [2019-03-14] (Microsoft Studios) [MS Ad]

Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_3.9.4100.0_x64__8wekyb3d8bbwe [2019-04-18] (Microsoft Studios) [MS Ad]

Microsoft Minesweeper -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMinesweeper_2.7.4300.0_x86__8wekyb3d8bbwe [2019-02-18] (Microsoft Studios) [MS Ad]

Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.31.11723.0_x64__8wekyb3d8bbwe [2019-06-26] (Microsoft Corporation) [MS Ad]

Microsoft Phone -> C:\Program Files\WindowsApps\Microsoft.CommsPhone_3.43.20002.1000_x64__8wekyb3d8bbwe [2018-09-08] (Microsoft Corporation)

Microsoft Phone Companion -> C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1802.311.0_x64__8wekyb3d8bbwe [2018-02-12] (Microsoft Corporation)

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.6132.0_x64__8wekyb3d8bbwe [2019-06-17] (Microsoft Studios) [MS Ad]

MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.29.10701.0_x64__8wekyb3d8bbwe [2019-03-22] (Microsoft Corporation) [MS Ad]

MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.28.3242.0_x64__8wekyb3d8bbwe [2018-12-15] (Microsoft Corporation) [MS Ad]

MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe [2019-02-12] (Microsoft Corporation) [MS Ad]

PAC-MAN Battle -> C:\Program Files\WindowsApps\50867PocketKingGames.PAC-MANBattle_1.1.0.0_x64__m8bdd0rdw5vr0 [2018-12-15] (Pocket King Games) [MS Ad]

The Backgammon -> C:\Program Files\WindowsApps\6918E89D.TheBackgammon_1.2.0.0_x64__66n08swfvvka0 [2018-12-15] (UNBALANCE corp.) [MS Ad]

Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-08] (Twitter Inc.)

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

CustomCLSID: HKU\S-1-5-21-1593158232-969496310-2340663774-1001_Classes\CLSID\{5A9E21A2-851A-4BEB-B16F-DBBE7D648AF9}\InprocServer32 -> C:\Program Files\TextPad 8\System\ShellExt64.dll (Helios Software Solutions Ltd -> )

SSODL: WDFSMountNotificator-wdfsconnect2017 - {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2} - C:\WINDOWS\system32\wdfsconnectMntNtf2017.dll (Western Digital Technologies, Inc.) [File not signed]

SSODL-x32: WDFSMountNotificator-wdfsconnect2017 - {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2} - C:\WINDOWS\SysWOW64\wdfsconnectMntNtf2017.dll (Western Digital Technologies, Inc.) [File not signed]

ShellServiceObjects: Virtual Storage Mount Notification -> {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2} => C:\WINDOWS\system32\wdfsconnectMntNtf2017.dll [2017-11-10] (Western Digital Technologies, Inc.) [File not signed]

ShellServiceObjects-x32: Virtual Storage Mount Notification -> {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2} => C:\WINDOWS\SysWOW64\wdfsconnectMntNtf2017.dll [2017-11-10] (Western Digital Technologies, Inc.) [File not signed]

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay01] -> {4F8A325E-9DAF-44B8-A825-1A14DFA0FA78} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay02] -> {0176BDDE-B59A-4A1E-808B-CAD461415CCA} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay03] -> {B65909D1-57AF-41F5-AB94-BEB733F62B35} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay04] -> {C6C2397D-8238-4332-8935-86C39C7C165F} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay05] -> {E7B3BCF9-0386-4B5F-AE6A-91B9F1423973} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay06] -> {564EA121-D9DA-485D-82C2-C2ED7BFCCEAD} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File

ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2016-04-27] (CyberLink Corp. -> Cyberlink)

ContextMenuHandlers1: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\ShellEx.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers1: [WDDesktopContextMenu] -> {4961b028-350a-3bb9-9d6c-079dc724e5f0} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2016-04-27] (CyberLink Corp. -> Cyberlink)

ContextMenuHandlers2: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\ShellEx.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers4: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\ShellEx.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers4: [WDDesktopContextMenu] -> {4961b028-350a-3bb9-9d6c-079dc724e5f0} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\igfxDTCM.dll [2018-03-22] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

ContextMenuHandlers6: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\ShellEx.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers1_S-1-5-21-1593158232-969496310-2340663774-1001: [TextPad8] -> {5A9E21A2-851A-4BEB-B16F-DBBE7D648AF9} => C:\Program Files\TextPad 8\System\ShellExt64.dll [2016-02-28] (Helios Software Solutions Ltd -> )

 

==================== Shortcuts & WMI ========================

 

(The entries could be listed to be restored or removed.)

 

 

==================== Loaded Modules (Whitelisted) ==============

 

2016-08-09 19:32 - 2015-06-29 20:13 - 000151552 _____ () [File not signed] C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe

2016-08-09 19:32 - 2015-06-29 20:09 - 000548864 _____ () [File not signed] C:\Program Files (x86)\DELL\DELLOSD\MediaButtons.exe

2019-01-21 07:55 - 2019-01-21 07:55 - 000251392 _____ () [File not signed] C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll

2015-05-19 12:11 - 2015-05-19 12:11 - 000335872 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe

2016-03-25 23:50 - 2016-03-25 23:50 - 001491968 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\LIBEAY32.dll

2016-03-25 23:50 - 2016-03-25 23:50 - 000298496 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\SSLEAY32.dll

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

 

==================== Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost

IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com

IE trusted site: HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\localhost -> localhost

IE trusted site: HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\webcompanion.com -> hxxp://webcompanion.com

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2015-10-30 03:24 - 2019-01-10 23:55 - 000002507 _____ C:\WINDOWS\system32\drivers\etc\hosts

 

0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly

0.0.0.0 tracking.opencandy.com.s3.amazonaws.com

0.0.0.0 media.opencandy.com

0.0.0.0 cdn.opencandy.com

0.0.0.0 tracking.opencandy.com

0.0.0.0 api.opencandy.com

0.0.0.0 api.recommendedsw.com

0.0.0.0 rp.yefeneri2.com

0.0.0.0 os.yefeneri2.com

0.0.0.0 os2.yefeneri2.com

0.0.0.0 installer.betterinstaller.com

0.0.0.0 installer.filebulldog.com

0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net

0.0.0.0 inno.bisrv.com

0.0.0.0 nsis.bisrv.com

0.0.0.0 cdn.file2desktop.com

0.0.0.0 cdn.goateastcach.us

0.0.0.0 cdn.guttastatdk.us

0.0.0.0 cdn.inskinmedia.com

0.0.0.0 cdn.insta.oibundles2.com

0.0.0.0 cdn.insta.playbryte.com

0.0.0.0 cdn.llogetfastcach.us

0.0.0.0 cdn.montiera.com

0.0.0.0 cdn.msdwnld.com

0.0.0.0 cdn.mypcbackup.com

0.0.0.0 cdn.ppdownload.com

0.0.0.0 cdn.riceateastcach.us

0.0.0.0 cdn.shyapotato.us

0.0.0.0 cdn.solimba.com

0.0.0.0 cdn.tuto4pc.com

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Dell\Dell Data Protection\Drivers\TSS\bin\;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL;C:\Program Files\Intel\Intel® Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT;C:\Program Files\Intel\Intel® Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\indre\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

If an entry is included in the fixlist, it will be removed.

 

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [{F26FF42A-FABC-4237-AF27-9A74BAD6E0C7}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [UDP Query User{B71B19F6-E012-4D87-BC64-170CDB9AE748}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [TCP Query User{FF6FAF1B-3C9B-4453-9D51-82A62172D810}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{6A551C3A-B926-43D8-9A75-06A3CEEB5AAF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{AD297B5D-2C9A-4E26-9193-5DEFE2B8D5DD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{6CC73312-41C6-4002-A0B0-4F73A84DBE2F}] => (Allow) LPort=8888

FirewallRules: [{277A97E1-8E11-4C68-985D-B7CC9AFC4A42}] => (Allow) LPort=8888

FirewallRules: [{B768845C-68FA-4F5D-8CB0-8915F5518FBE}] => (Allow) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe (Intel® Wireless Display -> Intel)

FirewallRules: [TCP Query User{3696DD75-4C0C-490B-A914-59C0D82CE209}C:\program files (x86)\vmware\vmware horizon view client\vmware-remotemks.exe] => (Allow) C:\program files (x86)\vmware\vmware horizon view client\vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [UDP Query User{881A5D70-E076-4553-AFB1-5DCEB88E106E}C:\program files (x86)\vmware\vmware horizon view client\vmware-remotemks.exe] => (Allow) C:\program files (x86)\vmware\vmware horizon view client\vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [TCP Query User{56C4283E-A791-4CBC-9F68-AC60C8E0C7B4}C:\users\indre\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\indre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [UDP Query User{1DC4DC8A-7F42-44CE-9FE4-78B806402CE0}C:\users\indre\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\indre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{3E499D19-4DBA-4DEF-8CF8-19DA405CDB89}] => (Block) C:\users\indre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{69A76876-400F-4C97-9AC9-188D74D4DEA6}] => (Block) C:\users\indre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{FE7FEA92-FE61-4E07-AB28-B07698433507}] => (Allow) LPort=8889

FirewallRules: [TCP Query User{5BEC10D3-14A2-4D91-86E2-3FF9AC49678E}C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe] => (Allow) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe No File

FirewallRules: [UDP Query User{DC37BDA6-DFD4-4AE9-A106-AF2D1149CAC6}C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe] => (Allow) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe No File

FirewallRules: [{2F7C3E13-8189-49BC-AD54-293606BAB75F}] => (Block) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe No File

FirewallRules: [{2A5D3459-4437-4C54-AAC4-9E96FEE61614}] => (Block) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe No File

FirewallRules: [{DED84BE3-3BD6-4E0D-A420-B30E49FC626F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{56381F91-7873-4CEA-8ABE-E10213107A2E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{835008C9-6A51-4365-AFEC-F24E67C44C2E}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc -> Plex, Inc.)

FirewallRules: [{B9F683A9-6869-4425-ACDF-4BBE734023A1}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc -> Python Software Foundation)

FirewallRules: [{73C29C77-9A88-433D-8F93-2CEF6E260A57}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc -> Plex, Inc.)

FirewallRules: [{FCB7161E-863C-4365-A934-94FC0E83A38E}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc -> )

FirewallRules: [{F52C8ACB-334D-404D-AC77-F60981439024}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{35F1740E-5C7F-48A0-9424-553F25A67238}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{4D93D1F7-7788-460E-AB49-CA919F927793}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )

FirewallRules: [{F29C6F66-709F-4614-A9A3-B60FCED2E26A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

 

==================== Restore Points =========================

 

20-06-2019 20:03:03 Windows Update

29-06-2019 20:49:28 Scheduled Checkpoint

10-07-2019 07:35:27 Windows Update

12-07-2019 11:29:53 Installed Macrium Reflect Free Edition

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (07/12/2019 01:16:52 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: The Open Procedure for service "WmiApRpl" in DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

 

Error: (07/12/2019 01:16:52 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: Windows cannot load the extensible counter DLL rdyboost. The first four bytes (DWORD) of the Data section contains the Windows error code.

 

Error: (07/12/2019 01:16:52 PM) (Source: PerfNet) (EventID: 2004) (User: )

Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

 

Error: (07/12/2019 01:16:52 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: The Open Procedure for service "Lsa" in DLL "C:\Windows\System32\Secur32.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

 

Error: (07/12/2019 01:16:52 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: The Open Procedure for service "ESENT" in DLL "C:\WINDOWS\system32\esentprf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

 

Error: (07/12/2019 01:16:52 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

 

Error: (07/12/2019 01:16:52 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: The Open Procedure for service ".NETFramework" in DLL "C:\WINDOWS\system32\mscoree.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

 

Error: (07/12/2019 01:00:10 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: The Open Procedure for service "WmiApRpl" in DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

 

 

System errors:

=============

Error: (07/12/2019 01:25:06 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 01:24:58 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EL88UDV)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user DESKTOP-EL88UDV\indre SID (S-1-5-21-1593158232-969496310-2340663774-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 01:21:36 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 01:20:47 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EL88UDV)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user DESKTOP-EL88UDV\indre SID (S-1-5-21-1593158232-969496310-2340663774-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 01:20:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 01:18:49 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EL88UDV)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user DESKTOP-EL88UDV\indre SID (S-1-5-21-1593158232-969496310-2340663774-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 01:16:59 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EL88UDV)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user DESKTOP-EL88UDV\indre SID (S-1-5-21-1593158232-969496310-2340663774-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 12:47:10 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EL88UDV)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user DESKTOP-EL88UDV\indre SID (S-1-5-21-1593158232-969496310-2340663774-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

 

CodeIntegrity:

===================================

 

Date: 2019-03-03 22:00:58.068

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShell.dll that did not meet the Microsoft signing level requirements.

 

Date: 2019-02-18 01:38:19.272

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShell.dll that did not meet the Microsoft signing level requirements.

 

==================== Memory info =========================== 

 

BIOS: Dell Inc. 1.8.6 12/12/2017

Motherboard: Dell Inc. 0X2MKR

Processor: Intel® Core™ i7-6700 CPU @ 3.40GHz

Percentage of memory in use: 64%

Total physical RAM: 8048.94 MB

Available physical RAM: 2831.43 MB

Total Virtual: 9840.94 MB

Available Virtual: 3721.21 MB

 

==================== Drives ================================

 

Drive c: (OS) (Fixed) (Total:224.73 GB) (Free:104.78 GB) NTFS

Drive e: (My Passport) (Fixed) (Total:1862.98 GB) (Free:1820.94 GB) NTFS

 

\\?\Volume{a8007518-d8a3-4a74-92ee-2363fddb05a7}\ (WINRETOOLS) (Fixed) (Total:0.44 GB) (Free:0.06 GB) NTFS

\\?\Volume{616afac5-ee60-493d-8f6b-5152f9f29468}\ (Image) (Fixed) (Total:12.69 GB) (Free:0.63 GB) NTFS

\\?\Volume{dbd7410f-196c-49b5-bb90-bbf877a175c2}\ (ESP) (Fixed) (Total:0.48 GB) (Free:0.44 GB) FAT32

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (Size: 238.5 GB) (Disk ID: 4FCEFFCB)

 

Partition: GPT.

 

========================================================

Disk: 1 (Size: 1863 GB) (Disk ID: 16F2A91F)

 

Partition: GPT.

 

==================== End of Addition.txt ============================

 

(3) The Speccy stuff is attached as requested.

******

> The Nero thing no longer pops up.
> I'm able to go into the WD drive and browse files, so it seems to be working properly.

> If there are any other fixes/tweaks you could recommend, I'd be grateful.

Thanks again so much; your help is so appreciated!!

Sincerely,

 

IndyBlue

 

[IndyBlue]

Sorry, I always screw up the attachments. The Speccy log is attached here.

 

IndyBlue

Attached Files

•  DESKTOP-EL88UDV 2.txt   165.67KB   173 downloads

[IndyBlue]

P.P.S. Interesting observation: I ran the deep, full Kaspersky scan on my system, and it took less than 40 minutes. It functioned normally and efficiently. When I had the Seagate external drive installed, the scans took over two DAYS, and were always hung up on the Seagate drive. I'm so glad that I went to Geeks to Go because I had no idea that the Seagate was screwed up. I look forward to your analysis of my system as it is now. No rush, of course! Thank you again for everything!

[RKinner]

Speccy likes the new drive.  You can uninstall Bitdefender Agent.  It gets left behind when you uninstall Bitdefender.  You have a few remnants of an Avast install.  We can remove them with a fixlist:

 

 

 

Download the attached fixlist.txt to the same location as FRST

 fixlist.txt   2.46KB   157 downloads

Run FRST and press Fix
A fix log will be generated please post that

Reboot if the fix doesn't reboot it for you

Run FRST again as before.  Make sure Addition.txt is checked and hit Scan.  Post both logs.

 

Did Nero go away with Seagate?

 

[IndyBlue]

Hi!

I did the following per your instructions:

 

(1) I uninstalled BitDefender Agent.

(2) I ran the FixList. Here is the log that was generated:

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 10-07-2019

Ran by indre (12-07-2019 18:50:15) Run:1

Running from C:\Users\indre\Desktop

Loaded Profiles: indre (Available Profiles: indre)

Boot Mode: Normal

==============================================

 

fixlist content:

*****************

Task: {AD7C3050-8C01-411A-AAEB-54D2522EE740} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2281944 2019-06-04] (AVAST Software s.r.o. -> AVAST Software)

Task: {D31AD53B-7549-49C2-8D4E-273E8786E8FC} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe

FF Extension: (Avast Online Security) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-06-05]

CHR Extension: (Avast Online Security) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-07-01]

2019-07-06 12:57 - 2016-09-11 22:04 - 000000000 ____D C:\ProgramData\AVAST Software

2019-07-04 12:01 - 2018-05-23 14:44 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File

C:\Program Files\AVAST Software

C:\Program Files\Common Files\avast software

CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"

Reboot:

 

 

 

 

 

 

*****************

 

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{AD7C3050-8C01-411A-AAEB-54D2522EE740}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AD7C3050-8C01-411A-AAEB-54D2522EE740}" => removed successfully

C:\WINDOWS\System32\Tasks\Avast Software\Overseer => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software\Overseer" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{D31AD53B-7549-49C2-8D4E-273E8786E8FC}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D31AD53B-7549-49C2-8D4E-273E8786E8FC}" => removed successfully

C:\WINDOWS\System32\Tasks\AVAST Software\Avast settings backup => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVAST Software\Avast settings backup" => removed successfully

C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] => moved successfully

CHR Extension: (Avast Online Security) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-07-01] => Error: No automatic fix found for this entry.

C:\ProgramData\AVAST Software => moved successfully

C:\WINDOWS\System32\Tasks\AVAST Software => moved successfully

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully

HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast => removed successfully

HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found

"C:\Program Files\AVAST Software" => not found

C:\Program Files\Common Files\avast software => moved successfully

 

========= FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" =========

 

Failed to clear log Intel-SST-CFD-HDA/IntelSST. The instance name passed was not recognized as valid by a WMI data provider.

Failed to clear log Microsoft-Windows-LiveId/Analytic. Access is denied.

Failed to clear log Microsoft-Windows-LiveId/Operational. Access is denied.

Failed to clear log Microsoft-Windows-USBVideo/Analytic. The instance name passed was not recognized as valid by a WMI data provider.

 

========= End of CMD: =========

 

 

 

The system needed a reboot.

 

==== End of Fixlog 18:50:52 ====

 

(3) The system automatically rebooted, as you said it would.

(4) Here's the FRST scan: 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-07-2019

Ran by indre (administrator) on DESKTOP-EL88UDV (Dell Inc. OptiPlex 7440 AIO) (12-07-2019 18:56:54)

Running from C:\Users\indre\Desktop

Loaded Profiles: indre (Available Profiles: indre)

Platform: Windows 10 Pro Version 1803 17134.885 (X64) Language: English (United States)

Default browser: Chrome

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

() [File not signed] C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe

() [File not signed] C:\Program Files (x86)\DELL\DELLOSD\MediaButtons.exe

() [File not signed] C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe

() [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.48.51.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe

() [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe

(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(CyberLink Corp. -> CyberLink) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\Power2Go8\CLMLSvc_P2G8.exe

(CyberLink Corp. -> CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Dell Inc -> CREDANT Technologies, Inc.) C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityFramework.Agent.exe

(Dell Inc -> CREDANT Technologies, Inc.) C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityFramework.UserProcess.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\Dell Data Protection\Client Security Framework\DCF.Loader.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe

(Dell Inc -> Dell, Inc.) C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityFramework.LocalServer.exe

(Dell Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe

(Dell Inc. -> Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe

(FabulaTech -> ) C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgr.exe

(FabulaTech -> ) C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe

(FabulaTech -> VMware) C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe

(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe

(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

(Intel Corporation -> Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe

(Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe

(Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel® Intel Network Drivers -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Intel® Intel Network Drivers -> Intel® Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\igfxCUIService.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\igfxEM.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\IntelCpHDCPSvc.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\IntelCpHeciSvc.exe

(Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Intel® Wireless Display -> Intel) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\avp.exe

(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\avpui.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Users\indre\AppData\Local\Microsoft\OneDrive\OneDrive.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.48.51.0_x64__kzf8qxf38zg5c\SkypeApp.exe

(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.48.51.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe

(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7033.2285\DSAPI.exe

(PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7033.2285\pcdrwi.exe

(Plex, Inc -> ) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe

(Plex, Inc -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe

(Plex, Inc -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe

(Plex, Inc -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe

(Plex, Inc -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe

(Plex, Inc -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(TEFINCOM S.A. -> ) C:\Program Files (x86)\NordVPN\nordvpn-service.exe

(TEFINCOM S.A. -> NordVPN) C:\Program Files (x86)\NordVPN\NordVPN.exe

(TEFINCOM S.A. -> The OpenVPN Project) C:\Program Files (x86)\NordVPN\Resources\Binaries\64bit\openvpn-nordvpn.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\vmware-view-usbd.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\wsnm\wsnm.exe

(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe

(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe

(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\Plugins\WD Backup\App\WDBackupService.exe

(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\WDAppManager.exe

(Western Digital Techologies -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8853248 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_MAXX6] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [322120 2016-04-29] (Intel® Rapid Storage Technology -> Intel Corporation)

HKLM\...\Run: [VMware Netlink 3 HV Install Utility] => C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnliu.exe [70080 2015-11-04] (FabulaTech -> )

HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [718256 2015-12-22] (Waves Inc -> Waves Audio Ltd.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-05-07] (Apple Inc. -> Apple Inc.)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe [1176208 2017-11-09] (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation)

HKLM-x32\...\Run: [WDDiscovery] => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe [81376496 2019-07-12] (Western Digital Technologies, Inc. -> Western Digital Corporation)

HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [21888 2019-01-02] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION

HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [Uploader] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [23081448 2019-04-04] (Plex, Inc -> Plex, Inc.)

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [NordVPN] => C:\Program Files (x86)\NordVPN\NordVPN.exe [2186704 2019-05-22] (TEFINCOM S.A. -> NordVPN)

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Run: [kpm.exe] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm.exe [584128 2019-02-08] (Kaspersky Lab -> AO Kaspersky Lab)

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1555952 2019-06-17] (Google LLC -> Google LLC)

HKU\S-1-5-18\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30796352 2018-10-24] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)

HKLM\...\Drivers32-x32: [vidc.pDAD] => prodad-codec.dll

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\75.0.3770.100\Installer\chrmstp.exe [2019-06-20] (Google LLC -> Google LLC)

FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {03DFFC2C-FC22-4010-99E9-4F38D03C4728} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [113200 2019-07-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {06D92E0E-08B8-441B-94A2-7B231EE6DCE1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26804232 2019-06-26] (Microsoft Corporation -> Microsoft Corporation)

Task: {08E2F16C-4C59-4C34-A03C-C83EEEDEBBDE} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-06-17] (Intel® Software Asset Manager -> Intel Corporation)

Task: {0C0614F0-18B6-495C-99F1-B61633EE7B2A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe

Task: {0EBA0793-94A7-49CE-AB2C-1FEF6BA70765} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26804232 2019-06-26] (Microsoft Corporation -> Microsoft Corporation)

Task: {0FE0644F-58F4-43E8-A63F-AA62CD169246} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION

Task: {1D566C7D-1CD5-4E77-826C-E0DF557F6BFA} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_223_Plugin.exe [1457208 2019-07-10] (Adobe Inc. -> Adobe)

Task: {1E20F289-46AA-4529-B808-962BFEF268A3} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)

Task: {1E4AE78B-2D84-403D-9CD3-0703770FF0B5} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [113200 2019-07-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {267B2E60-3693-45B1-B32D-E5AA4FA083F4} - System32\Tasks\WD Discovery Service Task indre => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [71408 2019-07-12] (Western Digital Technologies, Inc. -> )

Task: {27CEA27E-1BF2-4A16-B5AE-DCA79020DF0D} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-10-11] (Intel® Trust Services -> Intel® Corporation)

Task: {2BE02930-09E5-4DB5-86B2-C883307D310D} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_223_pepper.exe [1453112 2019-07-10] (Adobe Inc. -> Adobe)

Task: {39820E81-9B7D-411F-A870-C6BEBCB2BF30} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [1698000 2015-06-05] (Intel® Software -> Intel Corporation)

Task: {4DF09A94-B680-4D73-A2BA-B28905CCA70D} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [39920 2018-10-24] (Garmin International, Inc. -> )

Task: {52187049-A19C-4B23-AFFC-5089227DB2E9} - System32\Tasks\Seagate_Install_Launch => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Dashboard.exe

Task: {5EF9065E-7942-4205-9A7E-625FDF39B32F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136056 2019-01-02] (HP Inc. -> HP Inc.)

Task: {6D0AA64B-75B4-49CF-9C53-3BF5D9356A9D} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-06-17] (Intel® Software Asset Manager -> Intel Corporation)

Task: {82F39D33-C846-4F84-8898-8F68198ADD97} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\CyberLink Media Suite\Power2Go8\CLVDLauncher.exe [340440 2015-01-28] (CyberLink Corp. -> CyberLink Corp.)

Task: {8B3F29DA-404A-4CB9-8309-9D94ECAA8D3F} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\CyberLink Media Suite\Power2Go8\CLMLSvc_P2G8.exe [110008 2016-04-27] (CyberLink Corp. -> CyberLink)

Task: {8D960D58-2C65-4690-A008-63A3B9664FD6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [654712 2019-06-05] (HP Inc. -> HP Inc.)

Task: {A5585A2F-2224-44F3-B48A-C02AA6E9CD5D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-09-11] (Google Inc -> Google Inc.)

Task: {BE8068C1-2DB9-4BBE-9031-9E917FD77777} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1448296 2019-07-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {BEEC0D34-AA7B-4933-B79B-EE5F2DA284E3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-07-10] (Adobe Inc. -> Adobe)

Task: {C9DAB848-B95A-4118-8DAB-0AA8CAE862C4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Task: {DCF36F4E-53FF-403E-B92A-CAFE9380489C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)

Task: {DD6E66AE-D0AA-4C99-8D5F-5BA39CA6FC45} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1448296 2019-07-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {ECD51CA1-564E-49C6-A83B-0A4B7EC42B15} - System32\Tasks\WD Device Agent Task indre => C:\Users\indre\AppData\Roaming\WD Discovery\plugins\com.wdc.plugin.catalog\current\library\WD Device Agent.exe [724008 2019-06-18] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

Task: {F219FE43-71D7-4843-8134-11FF7BD69ACF} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistInstaller.exe [1512920 2019-05-24] (Dell Inc. -> Dell Inc.)

Task: {F266FDCC-EAB9-4691-867D-FA95BDE06352} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [791232 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

Task: {F932D694-A1C8-4A80-9BEA-DAAFEF0B6FE1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-09-11] (Google Inc -> Google Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 103.86.96.100 103.86.99.100

Tcpip\..\Interfaces\{28110dcb-4039-465c-840d-a703c58d8f0f}: [DhcpNameServer] 103.86.96.100 103.86.99.100

Tcpip\..\Interfaces\{6fbafdae-3f34-452d-bbc1-3182c4eed1fc}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{df5feca7-b365-4e54-a128-6afee4fc4200}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{eb569711-9ed4-49b4-a209-84f1068bb002}: [DhcpNameServer] 192.168.1.1

 

Internet Explorer:

==================

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE

SearchScopes: HKU\S-1-5-21-1593158232-969496310-2340663774-1001 -> DefaultScope {97FF47F7-FF6D-4CCE-B19F-284086150FBF} URL = 

SearchScopes: HKU\S-1-5-21-1593158232-969496310-2340663774-1001 -> {97FF47F7-FF6D-4CCE-B19F-284086150FBF} URL = 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-06-25] (Microsoft Corporation -> Microsoft Corporation)

BHO: No Name -> {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2}' -> No File

BHO: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

BHO: Kaspersky Password Manager -> {F710F7E5-A520-471D-989C-F653AC328FB2} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\x64\ie_engine.dll [2019-05-08] (Kaspersky Lab -> AO Kaspersky Lab)

BHO-x32: No Name -> {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2}' -> No File

BHO-x32: CutePDF Form Filler Helper -> {D41289F2-69C6-417B-897E-C653D677CBAF} -> C:\Program Files (x86)\Acro Software\CutePDF Filler Evaluation\CPFillerCoE.dll [2014-03-27] (Acro Software Inc. -> Acro Software Inc.)

BHO-x32: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

BHO-x32: Kaspersky Password Manager -> {F710F7E5-A520-471D-989C-F653AC328FB2} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\ie_engine.dll [2019-05-08] (Kaspersky Lab -> AO Kaspersky Lab)

Toolbar: HKLM - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

Toolbar: HKU\S-1-5-21-1593158232-969496310-2340663774-1001 -> Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\IEExt\ie_plugin.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} hxxps://meetny.webex.com/client/WBXclient-T30L10NSP6EP6-20000/webex/ieatgpc1.cab

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-02] (Microsoft Corporation -> Microsoft Corporation)

 

FireFox:

========

FF DefaultProfile: 1cu7vqt4.default-1534000050440

FF ProfilePath: C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440 [2019-07-11]

FF Homepage: Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440 -> hxxps://www.google.com/

FF Extension: (ETP Search Volume Study) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-06-26]

FF Extension: (Notifier for Gmail™) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-03-31]

FF Extension: (Honey) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-05-18]

FF Extension: (Kaspersky Password Manager) - C:\Users\indre\AppData\Roaming\Mozilla\Firefox\Profiles\1cu7vqt4.default-1534000050440\Extensions\[email protected] [2019-05-08] [UpdateUrl:hxxps://special.s.kaspersky-labs.com/firefox_extensions/kpm_win_add_on/update.json]

FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi

FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi [2019-07-06]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_223.dll [2019-07-10] (Adobe Inc. -> )

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_223.dll [2019-07-10] (Adobe Inc. -> )

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-06] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-14] (Google Inc -> Google LLC)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-14] (Google Inc -> Google LLC)

FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-05-02] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1593158232-969496310-2340663774-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\indre\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2018-04-06] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-07-07] <==== ATTENTION (Points to *.cfg file)

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-07-07] <==== ATTENTION

 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default [2019-07-12]

CHR Extension: (Slides) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]

CHR Extension: (Kaspersky Protection) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\amkpcclbbgegoafihnpgomddadjhcadd [2019-07-06]

CHR Extension: (Docs) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]

CHR Extension: (Google Drive) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-11]

CHR Extension: (YouTube) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-11]

CHR Extension: (Honey) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2019-07-11]

CHR Extension: (Notifier for Gmail™) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcjichoefijpinlfnjghokpkojhlhkgl [2019-03-25]

CHR Extension: (Kaspersky Password Manager) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhnkblpjbkfklfloegejegedcafpliaa [2019-07-12]

CHR Extension: (Adobe Acrobat) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-06-11]

CHR Extension: (Sheets) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]

CHR Extension: (Google Docs Offline) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-22]

CHR Extension: (Avast Online Security) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-07-01]

CHR Extension: (F.B.(FluffBusting)Purity) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmkinhboiljjkhaknpaeaicmdjhagpep [2019-07-06]

CHR Extension: (Chrome Web Store Payments) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]

CHR Extension: (Gmail) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-03-26]

CHR Extension: (Chrome Media Router) - C:\Users\indre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-06-20]

CHR Profile: C:\Users\indre\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-07-08]

CHR Profile: C:\Users\indre\AppData\Local\Google\Chrome\User Data\System Profile [2019-07-08]

CHR HKLM\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd

CHR HKU\S-1-5-21-1593158232-969496310-2340663774-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhnkblpjbkfklfloegejegedcafpliaa] - hxxps://chrome.google.com/webstore/detail/dhnkblpjbkfklfloegejegedcafpliaa

CHR HKLM-x32\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

 

==================== Services (Whitelisted) ====================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2019-04-29] (Apple Inc. -> Apple Inc.)

R2 AVP19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\avp.exe [619640 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11413600 2019-06-26] (Microsoft Corporation -> Microsoft Corporation)

S4 dcu-oobe; C:\Program Files (x86)\Dell\CommandUpdate\OobeService.exe [84408 2016-06-07] (Dell Inc. -> Dell Inc.)

R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [209392 2019-02-28] (Dell Inc -> Dell Inc.)

R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3363824 2019-02-28] (Dell Inc -> Dell Inc.)

R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [218096 2019-02-28] (Dell Inc -> Dell Inc.)

R2 Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7033.2285\DSAPI.exe [1050952 2019-06-02] (PC-Doctor, Inc. -> PC-Doctor, Inc.)

R2 Dell WMI Service; C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe [151552 2015-06-29] () [File not signed]

R2 DellMgmtAgent; C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityFramework.Agent.exe [22280 2016-07-13] (Dell Inc -> CREDANT Technologies, Inc.)

R2 DellMgmtLoader; C:\Program Files\Dell\Dell Data Protection\Client Security Framework\DCF.Loader.exe [35080 2016-07-13] (Dell Inc -> Dell Inc.)

R3 DellMgmtServer; C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityFramework.LocalServer.exe [52488 2016-07-13] (Dell Inc -> Dell, Inc.)

R2 ftnlsv3hv; C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe [233920 2015-11-04] (FabulaTech -> )

R2 ftscanmgr; C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgr.exe [6363792 2015-07-31] (FabulaTech -> )

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [356728 2019-06-12] (HP Inc. -> HP Inc.)

S3 iaStorAfsService; C:\WINDOWS\IAStorAfsService\iaStorAfsService.exe [2413752 2017-08-18] (Intel® Rapid Storage Technology -> Intel Corporation)

R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [190208 2016-10-15] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation)

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [742704 2017-10-11] (Intel® Trust Services -> Intel® Corporation)

S3 Intel® Security Assist; C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]

S2 Intel® TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [668472 2017-10-11] (Intel® Trust Services -> Intel® Corporation)

R3 Intel® WiDi SAM; C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-06-17] (Intel® Software Asset Manager -> Intel Corporation)

R2 IntelUSBoverIP; C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe [396992 2015-07-06] (Intel® Wireless Display -> Intel)

R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [213648 2017-11-09] (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation)

S3 klvssbridge64_19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\vssbridge64.exe [414352 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R2 kpm_launch_service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe [354008 2019-02-08] (Kaspersky Lab -> AO Kaspersky Lab)

R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [310880 2019-01-23] (Intel Corporation -> )

R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [217040 2019-05-22] (TEFINCOM S.A. -> )

R2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [1140200 2019-04-04] (Plex, Inc -> Plex, Inc.)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2015-09-02] (CyberLink Corp. -> CyberLink)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [310016 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5073792 2019-07-04] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [39896 2019-05-24] (Dell Inc. -> Dell Inc.)

S2 tcsd_win32.exe; C:\Program Files\Dell\Dell Data Protection\Drivers\TSS\bin\tcsd_win32.exe [1636352 2012-12-10] (Security Innovation, Inc.) [File not signed]

R2 vmware-view-usbd; C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\vmware-view-usbd.exe [1158984 2016-02-23] (VMware, Inc. -> VMware, Inc.)

R2 vmwsprrdpwks; C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe [261776 2015-05-08] (FabulaTech -> VMware)

R2 WavesSysSvc; C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe [613296 2015-12-22] (Waves Inc -> Waves Audio Ltd.)

S3 WD Backup Drive Helper; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{4AB831D3-8315-414C-8A7A-303105288D0B} [19360 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

S3 WD Backup Drive Helper; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{4AB831D3-8315-414C-8A7A-303105288D0B} [19360 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

S3 WD Backup Snapshot; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{302480DF-3AC5-4400-BE7B-DD77AF93B6DD} [19360 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

S3 WD Backup Snapshot; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{302480DF-3AC5-4400-BE7B-DD77AF93B6DD} [19360 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [524632 2018-03-26] (Western Digital Techologies -> Western Digital Technologies, Inc.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4413440 2019-03-14] (Microsoft Corporation -> Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [107160 2019-02-16] (Microsoft Corporation -> Microsoft Corporation)

R2 wsnm; C:\Program Files (x86)\VMware\VMware Horizon View Client\wsnm\wsnm.exe [541400 2016-03-25] (VMware, Inc. -> VMware, Inc.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [4107360 2019-01-23] (Intel Corporation -> Intel® Corporation)

 

===================== Drivers (Whitelisted) ======================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [243400 2018-01-27] (Kaspersky Lab -> AO Kaspersky Lab)

R3 DDDriver; C:\WINDOWS\system32\drivers\DDDriver64Dcsa.sys [40824 2019-02-27] (Microsoft Windows Hardware Compatibility Publisher -> Dell Inc.)

S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [41208 2018-05-08] (Techporch Incorporated -> Dell Computer Corporation)

S3 iaStorAfs; C:\WINDOWS\System32\drivers\iaStorAfs.sys [70664 2017-08-18] (Intel® Rapid Storage Technology -> Intel Corporation)

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [732416 2016-10-15] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation)

R3 IntcAzAudAddService; C:\WINDOWS\system32\drivers\RTDVHD64.sys [2677504 2016-04-14] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)

R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [75600 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [125568 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [91472 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [29208 2017-03-30] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)

R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [236672 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 KLHK; C:\WINDOWS\System32\drivers\klhk.sys [1093248 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klids; C:\ProgramData\Kaspersky Lab\AVP19.0.0\Bases\klids.sys [197464 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1168000 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [58704 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [60536 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [60784 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [50304 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

S3 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [46416 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [48080 2018-02-12] (AnchorFree Inc -> The OpenVPN Project)

R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [245272 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [99152 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

S3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [302368 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [116104 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [198768 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [104576 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [184960 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [218240 2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

S3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2018-04-11] (Microsoft Windows -> Intel Corporation)

R3 Netwtw06; C:\WINDOWS\system32\DRIVERS\Netwtw06.sys [8833952 2019-01-28] (Intel® Wireless Connectivity Solutions -> Intel Corporation)

R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [779232 2016-08-04] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)

R0 SEDFilter; C:\WINDOWS\System32\DRIVERS\SEDFilter.sys [197808 2016-07-13] (Dell Inc -> Dell Inc.)

S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [13920 2016-09-11] (SlimWare Utilities Inc. -> )

R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2018-07-24] (TEFINCOM S.A. -> The OpenVPN Project)

R3 usb3Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [212056 2015-07-06] (Intel® Wireless Display -> Windows ® Win 7 DDK provider)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

R1 wdfsconnect2017; C:\WINDOWS\system32\drivers\wdfsconnect2017.sys [468112 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

R3 wdvpnpbus; C:\WINDOWS\System32\drivers\wdvpnpbus.sys [20624 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One month (created) ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2019-07-12 18:52 - 2019-07-12 18:52 - 000000000 ___HD C:\OneDriveTemp

2019-07-12 18:50 - 2019-07-12 18:50 - 000004156 ____C C:\Users\indre\Desktop\Fixlog.txt

2019-07-12 18:49 - 2019-07-12 18:49 - 000062468 _____ C:\ProgramData\agent.uninstall.1562971733.bdinstall.v2.bin

2019-07-12 18:49 - 2019-07-12 18:49 - 000002522 _____ C:\Users\indre\Downloads\fixlist.txt

2019-07-12 13:55 - 2019-07-12 13:56 - 000169646 ____C C:\Users\indre\Desktop\DESKTOP-EL88UDV 2.txt

2019-07-12 13:50 - 2019-07-12 13:50 - 000117516 ____C C:\Users\indre\Desktop\FRST 2.txt

2019-07-12 13:50 - 2019-07-12 13:50 - 000043949 ____C C:\Users\indre\Desktop\Addition 2.txt

2019-07-12 13:32 - 2019-07-12 13:32 - 000043946 ____C C:\Users\indre\Desktop\Addition.txt

2019-07-12 13:29 - 2019-07-12 13:28 - 002095104 ____C (Farbar) C:\Users\indre\Desktop\FRST64.exe

2019-07-12 13:28 - 2019-07-12 13:28 - 002095104 _____ (Farbar) C:\Users\indre\Downloads\FRST64 (3).exe

2019-07-12 13:27 - 2019-07-12 13:27 - 002095104 _____ (Farbar) C:\Users\indre\Downloads\FRST64 (2).exe

2019-07-12 12:53 - 2019-07-12 12:53 - 000003240 _____ C:\WINDOWS\System32\Tasks\WD Device Agent Task indre

2019-07-12 12:51 - 2019-07-12 12:53 - 000003236 _____ C:\WINDOWS\System32\Tasks\WD Discovery Service Task indre

2019-07-12 12:51 - 2019-07-12 12:51 - 000001301 _____ C:\Users\Public\Desktop\WD Discovery.lnk

2019-07-12 12:51 - 2019-07-12 12:51 - 000000000 ___DC C:\Users\indre\AppData\Roaming\WDDesktop

2019-07-12 12:50 - 2019-07-12 18:52 - 000000000 ___DC C:\Users\indre\AppData\Roaming\WD Discovery

2019-07-12 12:50 - 2019-07-12 18:52 - 000000000 ____D C:\Users\indre\.wdc

2019-07-12 12:50 - 2019-07-12 12:54 - 000000000 ____D C:\Program Files\WD Desktop App

2019-07-12 12:50 - 2017-11-21 12:03 - 000468112 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\Drivers\wdfsconnect2017.sys

2019-07-12 12:50 - 2017-11-21 12:03 - 000020624 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\Drivers\wdvpnpbus.sys

2019-07-12 12:50 - 2017-11-10 12:51 - 000223744 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\SysWOW64\wdfsconnectNetRdr2017.dll

2019-07-12 12:50 - 2017-11-10 12:51 - 000180224 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\wdfsconnectMntNtf2017.dll

2019-07-12 12:50 - 2017-11-10 12:51 - 000154112 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\SysWOW64\wdfsconnectMntNtf2017.dll

2019-07-12 12:50 - 2017-11-10 12:51 - 000118272 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\wdfsconnectNetRdr2017.dll

2019-07-12 12:50 - 2017-11-10 12:51 - 000002560 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\wdfsconnectevtmsg.dll

2019-07-12 12:16 - 2019-07-12 12:16 - 000001192 _____ C:\Users\Public\Desktop\WD Drive Utilities.lnk

2019-07-12 12:14 - 2019-07-12 13:23 - 000002228 _____ C:\Users\Public\Desktop\WD Backup.lnk

2019-07-12 12:14 - 2019-07-12 13:23 - 000000000 ____D C:\Program Files (x86)\Western Digital

2019-07-12 12:14 - 2019-07-12 12:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WD Discovery

2019-07-12 12:14 - 2019-07-12 12:14 - 000000000 ___DC C:\Users\indre\AppData\Roaming\Western Digital

2019-07-12 12:14 - 2019-07-12 12:14 - 000000000 ____D C:\ProgramData\Western Digital

2019-07-12 11:29 - 2019-07-12 11:29 - 005278464 _____ (Paramount Software UK Ltd) C:\Users\indre\Downloads\ReflectDLHF (1).exe

2019-07-12 11:25 - 2019-07-12 11:31 - 000000000 ____D C:\ProgramData\Macrium

2019-07-12 11:25 - 2019-07-12 11:25 - 000000000 ____D C:\Users\indre\Downloads\Macrium

2019-07-12 11:24 - 2019-07-12 11:25 - 005278464 _____ (Paramount Software UK Ltd) C:\Users\indre\Downloads\ReflectDLHF.exe

2019-07-11 12:12 - 2019-07-11 12:12 - 000000000 ___DC C:\Users\indre\Documents\Kaspersky Password Manager

2019-07-10 22:50 - 2019-07-10 22:50 - 000000000 ___DC C:\Users\indre\AppData\Local\Garmin

2019-07-10 07:50 - 2019-07-04 05:40 - 021390504 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2019-07-10 07:50 - 2019-07-04 05:40 - 001616840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2019-07-10 07:50 - 2019-07-04 05:21 - 008627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2019-07-10 07:50 - 2019-07-04 05:18 - 003614208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2019-07-10 07:50 - 2019-07-04 04:51 - 020384128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2019-07-10 07:50 - 2019-07-04 04:37 - 002882048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2019-07-10 07:50 - 2019-07-04 01:00 - 001035040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe

2019-07-10 07:50 - 2019-07-04 00:58 - 001219896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2019-07-10 07:50 - 2019-07-04 00:57 - 003292152 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2019-07-10 07:50 - 2019-07-04 00:57 - 001027384 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2019-07-10 07:50 - 2019-07-04 00:56 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2019-07-10 07:50 - 2019-07-04 00:56 - 007519896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2019-07-10 07:50 - 2019-07-04 00:56 - 007436536 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2019-07-10 07:50 - 2019-07-04 00:56 - 002810680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2019-07-10 07:50 - 2019-07-04 00:56 - 002571640 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2019-07-10 07:50 - 2019-07-04 00:42 - 006570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2019-07-10 07:50 - 2019-07-04 00:42 - 006044008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2019-07-10 07:50 - 2019-07-04 00:42 - 002479176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2019-07-10 07:50 - 2019-07-04 00:42 - 001980984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2019-07-10 07:50 - 2019-07-04 00:37 - 025857536 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2019-07-10 07:50 - 2019-07-04 00:33 - 022017536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2019-07-10 07:50 - 2019-07-04 00:29 - 022717440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2019-07-10 07:50 - 2019-07-04 00:26 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll

2019-07-10 07:50 - 2019-07-04 00:25 - 019372544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2019-07-10 07:50 - 2019-07-04 00:25 - 007589888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2019-07-10 07:50 - 2019-07-04 00:25 - 004861440 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2019-07-10 07:50 - 2019-07-04 00:25 - 003401216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2019-07-10 07:50 - 2019-07-04 00:23 - 001765888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2019-07-10 07:50 - 2019-07-04 00:22 - 003707904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2019-07-10 07:50 - 2019-07-04 00:21 - 005784064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2019-07-10 07:50 - 2019-07-04 00:21 - 003202560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2019-07-10 07:50 - 2019-07-04 00:21 - 002166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2019-07-10 07:50 - 2019-07-04 00:20 - 001156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2019-07-10 07:50 - 2019-06-13 08:12 - 002871848 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2019-07-10 07:50 - 2019-06-13 08:05 - 000810296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2019-07-10 07:50 - 2019-06-13 08:04 - 001721144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2019-07-10 07:50 - 2019-06-13 08:00 - 000464696 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2019-07-10 07:50 - 2019-06-13 07:59 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2019-07-10 07:50 - 2019-06-13 07:58 - 000637752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2019-07-10 07:50 - 2019-06-13 07:58 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll

2019-07-10 07:50 - 2019-06-13 07:56 - 000164152 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2019-07-10 07:50 - 2019-06-13 07:43 - 001427984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll

2019-07-10 07:50 - 2019-06-13 07:42 - 004038688 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2019-07-10 07:50 - 2019-06-13 07:42 - 002266936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll

2019-07-10 07:50 - 2019-06-13 07:18 - 006586880 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2019-07-10 07:50 - 2019-06-13 07:18 - 004847104 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2019-07-10 07:50 - 2019-06-13 07:17 - 012756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2019-07-10 07:50 - 2019-06-13 07:16 - 000767488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll

2019-07-10 07:50 - 2019-06-13 07:15 - 004718080 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2019-07-10 07:50 - 2019-06-13 07:14 - 000900096 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe

2019-07-10 07:50 - 2019-06-13 07:13 - 002920448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2019-07-10 07:50 - 2019-06-13 07:13 - 000951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll

2019-07-10 07:50 - 2019-06-13 06:11 - 001539896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll

2019-07-10 07:50 - 2019-06-13 06:05 - 003700160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2019-07-10 07:50 - 2019-06-13 05:55 - 005657088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2019-07-10 07:50 - 2019-06-13 05:54 - 011942912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2019-07-10 07:50 - 2019-06-13 05:50 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll

2019-07-10 07:50 - 2019-06-13 03:01 - 000513336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2019-07-10 07:50 - 2019-06-13 03:01 - 000511288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2019-07-10 07:50 - 2019-06-13 02:47 - 005625160 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2019-07-10 07:50 - 2019-06-13 02:45 - 002421560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2019-07-10 07:50 - 2019-06-13 02:44 - 002769688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2019-07-10 07:50 - 2019-06-13 02:44 - 000607112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll

2019-07-10 07:50 - 2019-06-13 02:14 - 003318784 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2019-07-10 07:50 - 2019-06-13 02:13 - 004771840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll

2019-07-10 07:50 - 2019-06-13 02:13 - 002370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2019-07-10 07:50 - 2019-06-13 02:10 - 002912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2019-07-10 07:50 - 2019-06-13 02:10 - 001400832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2019-07-10 07:50 - 2019-06-13 02:10 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2019-07-10 07:50 - 2019-06-13 02:09 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll

2019-07-10 07:50 - 2019-06-13 01:14 - 000415544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll

2019-07-10 07:50 - 2019-06-13 01:06 - 002256768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2019-07-10 07:50 - 2019-06-13 00:47 - 002899456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2019-07-10 07:49 - 2019-07-04 05:45 - 001786680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll

2019-07-10 07:49 - 2019-07-04 05:43 - 000094008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2019-07-10 07:49 - 2019-07-04 05:41 - 000304144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys

2019-07-10 07:49 - 2019-07-04 05:40 - 001631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2019-07-10 07:49 - 2019-07-04 05:40 - 000790416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2019-07-10 07:49 - 2019-07-04 05:22 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe

2019-07-10 07:49 - 2019-07-04 05:22 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll

2019-07-10 07:49 - 2019-07-04 05:20 - 001609216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2019-07-10 07:49 - 2019-07-04 05:19 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe

2019-07-10 07:49 - 2019-07-04 05:18 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2019-07-10 07:49 - 2019-07-04 04:56 - 001453416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2019-07-10 07:49 - 2019-07-04 04:54 - 000662352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2019-07-10 07:49 - 2019-07-04 04:41 - 007990784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2019-07-10 07:49 - 2019-07-04 04:36 - 001471488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2019-07-10 07:49 - 2019-07-04 00:58 - 001328440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2019-07-10 07:49 - 2019-07-04 00:58 - 000416312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll

2019-07-10 07:49 - 2019-07-04 00:58 - 000192824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys

2019-07-10 07:49 - 2019-07-04 00:57 - 000986128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2019-07-10 07:49 - 2019-07-04 00:57 - 000776784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000723728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000708696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2019-07-10 07:49 - 2019-07-04 00:57 - 000568104 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe

2019-07-10 07:49 - 2019-07-04 00:57 - 000362264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000209424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2019-07-10 07:49 - 2019-07-04 00:57 - 000194360 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000137656 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2019-07-10 07:49 - 2019-07-04 00:57 - 000091776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys

2019-07-10 07:49 - 2019-07-04 00:56 - 001566520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 001459120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2019-07-10 07:49 - 2019-07-04 00:56 - 001260776 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2019-07-10 07:49 - 2019-07-04 00:56 - 001141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2019-07-10 07:49 - 2019-07-04 00:56 - 000983936 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2019-07-10 07:49 - 2019-07-04 00:56 - 000767536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 000734952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2019-07-10 07:49 - 2019-07-04 00:56 - 000493752 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll

2019-07-10 07:49 - 2019-07-04 00:56 - 000115512 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll

2019-07-10 07:49 - 2019-07-04 00:43 - 000832016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2019-07-10 07:49 - 2019-07-04 00:43 - 000665440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2019-07-10 07:49 - 2019-07-04 00:43 - 000328696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll

2019-07-10 07:49 - 2019-07-04 00:43 - 000287376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll

2019-07-10 07:49 - 2019-07-04 00:43 - 000191800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2019-07-10 07:49 - 2019-07-04 00:42 - 001427768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll

2019-07-10 07:49 - 2019-07-04 00:42 - 000573808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2019-07-10 07:49 - 2019-07-04 00:42 - 000356312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2019-07-10 07:49 - 2019-07-04 00:42 - 000097272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll

2019-07-10 07:49 - 2019-07-04 00:41 - 000559328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2019-07-10 07:49 - 2019-07-04 00:26 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll

2019-07-10 07:49 - 2019-07-04 00:26 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2019-07-10 07:49 - 2019-07-04 00:25 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll

2019-07-10 07:49 - 2019-07-04 00:25 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll

2019-07-10 07:49 - 2019-07-04 00:24 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys

2019-07-10 07:49 - 2019-07-04 00:24 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2019-07-10 07:49 - 2019-07-04 00:24 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2019-07-10 07:49 - 2019-07-04 00:24 - 000153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll

2019-07-10 07:49 - 2019-07-04 00:23 - 001217536 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll

2019-07-10 07:49 - 2019-07-04 00:23 - 000786432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 002587648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 002176000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 001561088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 001175552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll

2019-07-10 07:49 - 2019-07-04 00:22 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 001920000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 001220608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll

2019-07-10 07:49 - 2019-07-04 00:21 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll

2019-07-10 07:49 - 2019-07-04 00:20 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2019-07-10 07:49 - 2019-07-04 00:20 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2019-07-10 07:49 - 2019-07-04 00:20 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll

2019-07-10 07:49 - 2019-07-04 00:19 - 000886272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2019-07-10 07:49 - 2019-07-04 00:19 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 002602496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 001076224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 000965632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 000953344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2019-07-10 07:49 - 2019-07-04 00:18 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll

2019-07-10 07:49 - 2019-07-04 00:17 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2019-07-10 07:49 - 2019-07-03 23:01 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim

2019-07-10 07:49 - 2019-06-21 04:50 - 000280584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys

2019-07-10 07:49 - 2019-06-13 08:15 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2019-07-10 07:49 - 2019-06-13 07:43 - 001048480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2019-07-10 07:49 - 2019-06-13 07:42 - 000652088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll

2019-07-10 07:49 - 2019-06-13 07:42 - 000566536 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe

2019-07-10 07:49 - 2019-06-13 07:41 - 001626936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll

2019-07-10 07:49 - 2019-06-13 07:41 - 000830264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll

2019-07-10 07:49 - 2019-06-13 07:41 - 000825144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll

2019-07-10 07:49 - 2019-06-13 07:41 - 000670008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll

2019-07-10 07:49 - 2019-06-13 07:40 - 000749880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll

2019-07-10 07:49 - 2019-06-13 07:40 - 000540984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll

2019-07-10 07:49 - 2019-06-13 07:40 - 000495416 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll

2019-07-10 07:49 - 2019-06-13 07:38 - 000766264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll

2019-07-10 07:49 - 2019-06-13 07:37 - 000101192 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe

2019-07-10 07:49 - 2019-06-13 07:36 - 000251000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2019-07-10 07:49 - 2019-06-13 07:36 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll

2019-07-10 07:49 - 2019-06-13 07:35 - 001376688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2019-07-10 07:49 - 2019-06-13 07:34 - 000146888 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe

2019-07-10 07:49 - 2019-06-13 07:17 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll

2019-07-10 07:49 - 2019-06-13 07:17 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll

2019-07-10 07:49 - 2019-06-13 07:17 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

2019-07-10 07:49 - 2019-06-13 07:17 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe

2019-07-10 07:49 - 2019-06-13 07:15 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe

2019-07-10 07:49 - 2019-06-13 07:14 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll

2019-07-10 07:49 - 2019-06-13 07:14 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll

2019-07-10 07:49 - 2019-06-13 07:14 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopSwitcherDataModel.dll

2019-07-10 07:49 - 2019-06-13 07:13 - 001339392 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll

2019-07-10 07:49 - 2019-06-13 07:13 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll

2019-07-10 07:49 - 2019-06-13 07:13 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll

2019-07-10 07:49 - 2019-06-13 07:12 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll

2019-07-10 07:49 - 2019-06-13 07:10 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll

2019-07-10 07:49 - 2019-06-13 06:07 - 001027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2019-07-10 07:49 - 2019-06-13 06:07 - 000660496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll

2019-07-10 07:49 - 2019-06-13 06:07 - 000221232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll

2019-07-10 07:49 - 2019-06-13 05:54 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll

2019-07-10 07:49 - 2019-06-13 05:53 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2019-07-10 07:49 - 2019-06-13 05:51 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll

2019-07-10 07:49 - 2019-06-13 05:49 - 002406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll

2019-07-10 07:49 - 2019-06-13 05:49 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll

2019-07-10 07:49 - 2019-06-13 03:48 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll

2019-07-10 07:49 - 2019-06-13 03:46 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll

2019-07-10 07:49 - 2019-06-13 03:01 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2019-07-10 07:49 - 2019-06-13 02:59 - 000785264 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll

2019-07-10 07:49 - 2019-06-13 02:47 - 001063224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2019-07-10 07:49 - 2019-06-13 02:46 - 001076536 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll

2019-07-10 07:49 - 2019-06-13 02:46 - 000510296 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2019-07-10 07:49 - 2019-06-13 02:46 - 000093984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 002546704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 001098272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 001033696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 000545808 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2019-07-10 07:49 - 2019-06-13 02:44 - 000130624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll

2019-07-10 07:49 - 2019-06-13 02:17 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll

2019-07-10 07:49 - 2019-06-13 02:16 - 001626112 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2019-07-10 07:49 - 2019-06-13 02:16 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2019-07-10 07:49 - 2019-06-13 02:15 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe

2019-07-10 07:49 - 2019-06-13 02:15 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2019-07-10 07:49 - 2019-06-13 02:15 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2019-07-10 07:49 - 2019-06-13 02:15 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll

2019-07-10 07:49 - 2019-06-13 02:15 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll

2019-07-10 07:49 - 2019-06-13 02:14 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll

2019-07-10 07:49 - 2019-06-13 02:14 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2019-07-10 07:49 - 2019-06-13 02:14 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll

2019-07-10 07:49 - 2019-06-13 02:13 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2019-07-10 07:49 - 2019-06-13 02:13 - 000322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2019-07-10 07:49 - 2019-06-13 02:13 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll

2019-07-10 07:49 - 2019-06-13 02:12 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2019-07-10 07:49 - 2019-06-13 02:11 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll

2019-07-10 07:49 - 2019-06-13 02:11 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll

2019-07-10 07:49 - 2019-06-13 02:11 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll

2019-07-10 07:49 - 2019-06-13 02:10 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll

2019-07-10 07:49 - 2019-06-13 02:10 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll

2019-07-10 07:49 - 2019-06-13 02:10 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll

2019-07-10 07:49 - 2019-06-13 02:10 - 000523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2019-07-10 07:49 - 2019-06-13 02:09 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2019-07-10 07:49 - 2019-06-13 02:09 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll

2019-07-10 07:49 - 2019-06-13 02:08 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll

2019-07-10 07:49 - 2019-06-13 01:08 - 000443632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll

2019-07-10 07:49 - 2019-06-13 01:07 - 000101192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll

2019-07-10 07:49 - 2019-06-13 01:07 - 000080744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll

2019-07-10 07:49 - 2019-06-13 01:06 - 001130776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2019-07-10 07:49 - 2019-06-13 01:06 - 000581600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll

2019-07-10 07:49 - 2019-06-13 00:49 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll

2019-07-10 07:49 - 2019-06-13 00:47 - 003554304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll

2019-07-10 07:49 - 2019-06-13 00:47 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2019-07-10 07:49 - 2019-06-13 00:46 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2019-07-10 07:49 - 2019-06-13 00:46 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll

2019-07-10 07:49 - 2019-06-13 00:46 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll

2019-07-10 07:49 - 2019-06-13 00:45 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2019-07-10 07:49 - 2019-06-13 00:45 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 001003008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 000582144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll

2019-07-10 07:49 - 2019-06-13 00:44 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2019-07-10 07:49 - 2019-06-13 00:43 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2019-07-10 07:49 - 2019-06-13 00:43 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll

2019-07-10 07:49 - 2019-06-13 00:43 - 000445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll

2019-07-09 13:11 - 2019-07-09 13:11 - 004730179 _____ C:\Users\indre\Downloads\Master Folder For Cleared Checks INDY (2).xlsx

2019-07-09 13:09 - 2019-07-09 13:09 - 008141856 _____ C:\Users\indre\Downloads\MASTER ALL CHECKS (4).xlsx

2019-07-08 13:49 - 2019-07-08 13:49 - 000000000 ___DC C:\Users\indre\Documents\ED stuff

2019-07-08 11:03 - 2019-07-08 11:04 - 000188559 ____C C:\Users\indre\Desktop\DESKTOP-EL88UDV.txt

2019-07-08 11:01 - 2019-07-08 11:01 - 000000839 _____ C:\Users\Public\Desktop\Speccy.lnk

2019-07-08 11:01 - 2019-07-08 11:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy

2019-07-08 11:01 - 2019-07-08 11:01 - 000000000 ____D C:\Program Files\Speccy

2019-07-08 10:59 - 2019-07-08 10:59 - 006889184 _____ (Piriform Ltd) C:\Users\indre\Downloads\spsetup132.exe

2019-07-08 10:59 - 2019-07-08 10:59 - 001309592 _____ (BraveSoftware Inc.) C:\Users\indre\Downloads\BraveBrowserSetup-TPF550.exe

2019-07-08 10:58 - 2019-07-08 10:58 - 000019118 ____C C:\Users\indre\Desktop\Tasklist 070819.txt

2019-07-08 10:56 - 2019-07-08 10:56 - 000019118 _____ C:\junk.txt

2019-07-08 10:54 - 2019-07-08 10:54 - 000026673 ____C C:\Users\indre\Desktop\Registry 070819.txt

2019-07-08 10:50 - 2019-07-08 10:50 - 002826520 _____ (Sysinternals - www.sysinternals.com) C:\Users\indre\Downloads\procexp (1).exe

2019-07-08 10:50 - 2019-07-08 10:50 - 000043192 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS

2019-07-08 10:49 - 2019-07-08 10:49 - 002826520 _____ (Sysinternals - www.sysinternals.com) C:\Users\indre\Downloads\procexp.exe

2019-07-08 10:47 - 2019-07-08 10:47 - 000023010 ____C C:\Users\indre\Desktop\VEW Application 070819.txt

2019-07-08 10:44 - 2019-07-08 10:44 - 000007664 ____C C:\Users\indre\Desktop\VEW Events 070819.txt

2019-07-08 10:43 - 2019-07-08 10:46 - 000023010 _____ C:\VEW.txt

2019-07-08 10:40 - 2019-07-08 10:40 - 000061440 _____ ( ) C:\Users\indre\Downloads\VEW.exe

2019-07-06 13:06 - 2019-07-06 13:06 - 000302368 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys

2019-07-06 13:04 - 2019-07-06 13:04 - 000001371 _____ C:\Users\Public\Desktop\Kaspersky Password Manager.lnk

2019-07-06 13:04 - 2019-07-06 13:04 - 000000000 ___DC C:\Users\indre\AppData\Local\Kaspersky Lab

2019-07-06 13:04 - 2019-07-06 13:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager

2019-07-06 13:00 - 2019-07-06 13:00 - 000245272 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys

2019-07-06 13:00 - 2019-07-06 13:00 - 000198768 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys

2019-07-06 13:00 - 2019-07-06 13:00 - 000116104 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys

2019-07-06 13:00 - 2019-07-06 13:00 - 000099152 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys

2019-07-06 13:00 - 2019-07-06 13:00 - 000003392 _____ C:\WINDOWS\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}

2019-07-06 13:00 - 2019-07-06 13:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection

2019-07-06 12:59 - 2019-07-12 18:54 - 000000000 ____D C:\ProgramData\Kaspersky Lab

2019-07-06 12:59 - 2019-07-06 13:17 - 000236672 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys

2019-07-06 12:59 - 2019-07-06 13:16 - 001168000 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys

2019-07-06 12:59 - 2019-07-06 13:16 - 001093248 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys

2019-07-06 12:59 - 2019-07-06 13:16 - 000152288 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\klhkum.dll

2019-07-06 12:59 - 2019-07-06 13:04 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab

2019-07-06 12:59 - 2019-07-06 12:59 - 000002210 _____ C:\Users\Public\Desktop\Safe Money.lnk

2019-07-06 12:59 - 2019-07-06 12:59 - 000002182 _____ C:\Users\Public\Desktop\Kaspersky Total Security.lnk

2019-07-06 12:59 - 2019-07-06 12:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security

2019-07-06 12:59 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll

2019-07-06 12:57 - 2019-07-06 12:56 - 000592616 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2019-07-06 12:54 - 2019-07-06 12:55 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files

2019-07-06 12:54 - 2019-07-06 12:54 - 002660224 _____ (Kaspersky Lab) C:\Users\indre\Downloads\startup_14445.exe

2019-07-06 10:01 - 2019-07-06 10:01 - 002420224 _____ (Farbar) C:\Users\indre\Downloads\FRST64 (1).exe

2019-07-06 10:00 - 2019-07-12 18:57 - 000047329 ____C C:\Users\indre\Desktop\FRST.txt

2019-07-06 09:58 - 2019-07-06 10:00 - 000039445 _____ C:\Users\indre\Downloads\Addition.txt

2019-07-06 09:55 - 2019-07-06 09:59 - 000079818 _____ C:\Users\indre\Downloads\FRST.txt

2019-07-06 09:54 - 2019-07-12 18:56 - 000000000 ____D C:\FRST

2019-07-06 09:53 - 2019-07-06 09:53 - 002420224 _____ (Farbar) C:\Users\indre\Downloads\FRST64.exe

2019-07-01 19:18 - 2019-07-01 19:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools

2019-06-29 23:56 - 2019-06-29 23:56 - 011069444 _____ C:\Users\indre\Downloads\thecourtshipofeddiesfather-1st (1).mpg

2019-06-29 23:55 - 2019-06-29 23:55 - 011069444 _____ C:\Users\indre\Downloads\thecourtshipofeddiesfather-1st.mpg

2019-06-29 11:29 - 2019-06-29 11:29 - 000074636 _____ C:\ProgramData\agent.update.1561822169.bdinstall.v2.bin

2019-06-27 20:31 - 2019-06-27 20:31 - 022709477 _____ C:\Users\indre\Downloads\20190627_202829_19399014677980 (1).mp4

2019-06-27 20:30 - 2019-06-27 20:30 - 022709477 _____ C:\Users\indre\Downloads\20190627_202829_19399014677980.mp4

2019-06-27 19:53 - 2019-06-27 19:53 - 000000054 ____C C:\Users\indre\Desktop\cryptic stacey 062719.txt

2019-06-24 00:13 - 2019-07-07 22:03 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2019-06-23 23:58 - 2019-06-23 23:58 - 000068279 _____ C:\Users\indre\Downloads\Iulo_Susan_References_2019.pdf

2019-06-23 14:04 - 2019-06-23 14:04 - 000128245 _____ C:\Users\indre\Downloads\Iulo_Susan_-_Resume_2019.pdf

2019-06-21 20:51 - 2019-06-21 20:51 - 000128344 _____ C:\Users\indre\Downloads\Iulo_Susan_-_resume_June_2019_FIRST DRAFT (2).pdf

2019-06-21 20:28 - 2019-06-21 20:28 - 000128344 _____ C:\Users\indre\Downloads\Iulo_Susan_-_resume_June_2019_FIRST DRAFT (1).pdf

2019-06-21 20:25 - 2019-06-21 20:25 - 000128344 _____ C:\Users\indre\Downloads\Iulo_Susan_-_resume_June_2019_FIRST DRAFT.pdf

2019-06-20 12:13 - 2019-06-20 12:13 - 000004919 _____ C:\Users\indre\Downloads\imp8A93.pdf

2019-06-20 12:13 - 2019-06-20 12:13 - 000004919 _____ C:\Users\indre\Downloads\imp8A93 (1).pdf

2019-06-18 21:05 - 2019-06-18 21:05 - 000039557 _____ C:\Users\indre\Downloads\Letters_2019_06_14_12_42_30_156.pdf

2019-06-18 02:30 - 2019-06-18 02:30 - 000363078 _____ C:\Users\indre\Downloads\Preprinted UPS label for Treasury to Farmingdale 010918.pdf

2019-06-17 14:37 - 2019-06-17 14:37 - 000350164 _____ C:\Users\indre\Downloads\Statement_062019_8810.pdf

2019-06-13 20:33 - 2019-06-13 20:33 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless

2019-06-13 20:32 - 2019-06-13 20:32 - 000000000 ____D C:\Program Files\Common Files\Intel

2019-06-13 18:57 - 2019-06-13 18:57 - 000042697 _____ C:\Users\indre\Downloads\Vet papers on baby panthers.pdf

2019-06-13 18:56 - 2019-06-13 18:56 - 000115738 _____ C:\Users\indre\Downloads\Indre adoption contract.pdf

2019-06-12 20:53 - 2019-06-07 06:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll

2019-06-12 20:53 - 2019-06-07 06:47 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll

2019-06-12 20:53 - 2019-06-07 06:41 - 004055552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2019-06-12 20:53 - 2019-06-07 06:40 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll

2019-06-12 20:53 - 2019-06-07 06:10 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll

2019-06-12 20:53 - 2019-06-07 06:04 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2019-06-12 20:53 - 2019-06-07 02:07 - 000707384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2019-06-12 20:53 - 2019-06-07 01:58 - 000422416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll

2019-06-12 20:53 - 2019-06-07 01:58 - 000076304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 001934808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2019-06-12 20:53 - 2019-06-07 01:57 - 001209696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2019-06-12 20:53 - 2019-06-07 01:57 - 000792888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 000594024 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2019-06-12 20:53 - 2019-06-07 01:57 - 000435000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2019-06-12 20:53 - 2019-06-07 01:57 - 000413720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2019-06-12 20:53 - 2019-06-07 01:57 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 000383504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 000170296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2019-06-12 20:53 - 2019-06-07 01:57 - 000148280 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll

2019-06-12 20:53 - 2019-06-07 01:47 - 000380432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2019-06-12 20:53 - 2019-06-07 01:46 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2019-06-12 20:53 - 2019-06-07 01:46 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2019-06-12 20:53 - 2019-06-07 01:46 - 000128792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll

2019-06-12 20:53 - 2019-06-07 01:24 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll

2019-06-12 20:53 - 2019-06-07 01:23 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2019-06-12 20:53 - 2019-06-07 01:23 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll

2019-06-12 20:53 - 2019-06-07 01:22 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll

2019-06-12 20:53 - 2019-06-07 01:22 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll

2019-06-12 20:53 - 2019-06-07 01:21 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2019-06-12 20:53 - 2019-06-07 01:21 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2019-06-12 20:53 - 2019-06-07 01:20 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll

2019-06-12 20:53 - 2019-06-07 01:20 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2019-06-12 20:53 - 2019-06-07 01:19 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2019-06-12 20:53 - 2019-06-07 01:19 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll

2019-06-12 20:53 - 2019-06-07 01:18 - 000686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2019-06-12 20:53 - 2019-06-07 01:17 - 000961024 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2019-06-12 20:53 - 2019-06-07 01:17 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2019-06-12 20:53 - 2019-06-07 01:16 - 001102336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2019-06-12 20:53 - 2019-06-07 01:16 - 000900096 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2019-06-12 20:53 - 2019-06-07 01:16 - 000478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll

2019-06-12 20:53 - 2019-05-18 18:12 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll

2019-06-12 20:53 - 2019-05-18 18:12 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll

2019-06-12 20:53 - 2019-05-18 18:12 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll

2019-06-12 20:53 - 2019-05-18 18:12 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll

2019-06-12 20:53 - 2019-05-17 08:44 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe

2019-06-12 20:53 - 2019-05-17 08:40 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL

2019-06-12 20:53 - 2019-05-17 08:25 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe

2019-06-12 20:53 - 2019-05-17 08:25 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsUpdateElevatedInstaller.exe

2019-06-12 20:53 - 2019-05-17 08:24 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll

2019-06-12 20:53 - 2019-05-17 08:23 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll

2019-06-12 20:53 - 2019-05-17 08:23 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll

2019-06-12 20:53 - 2019-05-17 08:23 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll

2019-06-12 20:53 - 2019-05-17 08:22 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2019-06-12 20:53 - 2019-05-17 08:22 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpui.dll

2019-06-12 20:53 - 2019-05-17 08:21 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2019-06-12 20:53 - 2019-05-17 08:20 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2019-06-12 20:53 - 2019-05-17 08:20 - 001970688 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll

2019-06-12 20:53 - 2019-05-17 08:20 - 000725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCacheProvider.dll

2019-06-12 20:53 - 2019-05-17 08:20 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSh.dll

2019-06-12 20:53 - 2019-05-17 08:20 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll

2019-06-12 20:53 - 2019-05-17 08:19 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2019-06-12 20:53 - 2019-05-17 08:07 - 002206424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL

2019-06-12 20:53 - 2019-05-17 07:58 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe

2019-06-12 20:53 - 2019-05-17 07:58 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll

2019-06-12 20:53 - 2019-05-17 07:56 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2019-06-12 20:53 - 2019-05-17 07:56 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpui.dll

2019-06-12 20:53 - 2019-05-17 07:55 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll

2019-06-12 20:53 - 2019-05-17 07:55 - 000668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2019-06-12 20:53 - 2019-05-17 07:55 - 000470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll

2019-06-12 20:53 - 2019-05-17 07:55 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDistSh.dll

2019-06-12 20:53 - 2019-05-17 07:54 - 002016768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2019-06-12 20:53 - 2019-05-17 07:54 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll

2019-06-12 20:53 - 2019-05-17 05:33 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll

2019-06-12 20:53 - 2019-05-17 04:52 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll

2019-06-12 20:53 - 2019-05-17 03:07 - 000105272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2019-06-12 20:53 - 2019-05-17 02:44 - 000829960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2019-06-12 20:53 - 2019-05-17 02:44 - 000550520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2019-06-12 20:53 - 2019-05-17 02:43 - 000297688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 004789944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 001989552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 001620264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 001380096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll

2019-06-12 20:53 - 2019-05-17 02:42 - 000125504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll

2019-06-12 20:53 - 2019-05-17 02:30 - 013878784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2019-06-12 20:53 - 2019-05-17 02:26 - 002969600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2019-06-12 20:53 - 2019-05-17 02:23 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe

2019-06-12 20:53 - 2019-05-17 02:23 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll

2019-06-12 20:53 - 2019-05-17 02:23 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2019-06-12 20:53 - 2019-05-17 02:22 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll

2019-06-12 20:53 - 2019-05-17 02:22 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll

2019-06-12 20:53 - 2019-05-17 02:21 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe

2019-06-12 20:53 - 2019-05-17 02:21 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll

2019-06-12 20:53 - 2019-05-17 02:20 - 000366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2019-06-12 20:53 - 2019-05-17 02:20 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 004515840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 001630720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll

2019-06-12 20:53 - 2019-05-17 02:19 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2019-06-12 20:53 - 2019-05-17 02:18 - 002796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2019-06-12 20:53 - 2019-05-17 02:18 - 001006592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2019-06-12 20:53 - 2019-05-17 02:08 - 000491200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2019-06-12 20:53 - 2019-05-17 02:08 - 000401328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 002467320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 001288712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 000930616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2019-06-12 20:53 - 2019-05-17 02:07 - 000275768 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2019-06-12 20:53 - 2019-05-17 02:07 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2019-06-12 20:53 - 2019-05-17 02:06 - 001943136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2019-06-12 20:53 - 2019-05-17 02:06 - 001784696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll

2019-06-12 20:53 - 2019-05-17 02:06 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll

2019-06-12 20:53 - 2019-05-17 02:06 - 000151888 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll

2019-06-12 20:53 - 2019-05-17 02:04 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2019-06-12 20:53 - 2019-05-17 02:00 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll

2019-06-12 20:53 - 2019-05-17 01:44 - 016597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2019-06-12 20:53 - 2019-05-17 01:38 - 004709376 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2019-06-12 20:53 - 2019-05-17 01:37 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll

2019-06-12 20:53 - 2019-05-17 01:37 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DuCsps.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys

2019-06-12 20:53 - 2019-05-17 01:36 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe

2019-06-12 20:53 - 2019-05-17 01:36 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2019-06-12 20:53 - 2019-05-17 01:36 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2019-06-12 20:53 - 2019-05-17 01:35 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe

2019-06-12 20:53 - 2019-05-17 01:34 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe

2019-06-12 20:53 - 2019-05-17 01:34 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll

2019-06-12 20:53 - 2019-05-17 01:34 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll

2019-06-12 20:53 - 2019-05-17 01:33 - 003091456 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2019-06-12 20:53 - 2019-05-17 01:33 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll

2019-06-12 20:53 - 2019-05-17 01:33 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2019-06-12 20:53 - 2019-05-17 01:33 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2019-06-12 20:53 - 2019-05-17 01:32 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll

2019-06-12 20:53 - 2019-05-17 01:32 - 000815104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 004937216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 003376640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 003293184 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 001805312 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 001383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 001211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 001027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 000620032 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2019-06-12 20:53 - 2019-05-17 01:31 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2019-06-12 20:53 - 2019-05-17 01:30 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2019-06-12 20:53 - 2019-05-17 01:30 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll

 

==================== One month (modified) ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2019-07-12 18:52 - 2018-04-11 19:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2019-07-12 18:52 - 2016-09-11 19:32 - 000000000 ___RD C:\Users\indre\OneDrive

2019-07-12 18:52 - 2016-09-11 19:30 - 000000000 __SHD C:\Users\indre\IntelGraphicsProfiles

2019-07-12 18:51 - 2018-06-09 20:55 - 000409520 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2019-07-12 18:51 - 2018-05-23 14:44 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2019-07-12 18:51 - 2018-04-11 17:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2019-07-12 18:43 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\AppReadiness

2019-07-12 15:34 - 2018-05-23 14:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2019-07-12 15:09 - 2018-05-23 14:44 - 000004166 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{71AF15CB-04B4-4B18-8047-5E35B9C7421E}

2019-07-12 13:38 - 2018-04-11 19:38 - 000000000 ___HD C:\Program Files\WindowsApps

2019-07-12 13:33 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\Registration

2019-07-12 13:23 - 2016-08-09 19:33 - 000000000 ____D C:\ProgramData\Package Cache

2019-07-12 12:50 - 2018-05-23 14:38 - 000000000 ____D C:\Users\indre

2019-07-12 12:50 - 2018-04-11 19:36 - 000000000 ____D C:\WINDOWS\INF

2019-07-12 12:10 - 2016-10-12 00:52 - 000000000 ___DC C:\Users\indre\AppData\Roaming\Seagate

2019-07-12 11:43 - 2018-04-11 19:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2019-07-12 11:43 - 2016-09-16 22:45 - 000000000 ____D C:\ProgramData\Malwarebytes

2019-07-11 11:16 - 2018-05-23 14:43 - 000840376 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2019-07-11 11:11 - 2017-11-15 23:45 - 000000000 ___RD C:\Users\indre\3D Objects

2019-07-11 11:11 - 2016-08-09 19:48 - 000000000 __RHD C:\Users\Public\AccountPictures

2019-07-11 04:09 - 2018-04-12 05:20 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\TextInput

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\oobe

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\appraiser

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\ShellComponents

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\Provisioning

2019-07-11 04:09 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\bcastdvr

2019-07-11 04:09 - 2018-04-11 17:04 - 000000000 ____D C:\WINDOWS\system32\Dism

2019-07-11 04:01 - 2016-11-18 22:39 - 000000000 ___DC C:\Users\indre\AppData\LocalLow\Mozilla

2019-07-10 08:13 - 2018-04-11 19:30 - 000000000 ____D C:\WINDOWS\CbsTemp

2019-07-10 07:49 - 2016-09-12 20:21 - 000000000 ____D C:\WINDOWS\system32\MRT

2019-07-10 07:36 - 2016-09-12 20:20 - 136618864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2019-07-10 02:37 - 2018-05-23 14:44 - 000004600 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier

2019-07-10 02:37 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2019-07-10 02:37 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\Macromed

2019-07-10 01:37 - 2018-05-23 14:44 - 000004588 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier

2019-07-10 01:37 - 2018-05-23 14:44 - 000004386 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2019-07-09 13:12 - 2017-11-15 23:37 - 000000000 ___DC C:\Users\indre\AppData\Local\Packages

2019-07-08 14:37 - 2016-09-18 09:35 - 000000000 ___DC C:\Users\indre\AppData\Local\CrashDumps

2019-07-08 13:50 - 2016-09-17 01:49 - 000000000 ___DC C:\Users\indre\Documents\Funny stuff

2019-07-08 13:43 - 2018-12-02 19:00 - 000000000 ___DC C:\Users\indre\Documents\Editing for Josh

2019-07-06 13:17 - 2019-02-13 14:10 - 000184960 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwtp.sys

2019-07-06 13:17 - 2019-02-13 14:10 - 000125568 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klbackupflt.sys

2019-07-06 13:17 - 2019-02-13 14:10 - 000091472 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kldisk.sys

2019-07-06 13:17 - 2018-02-24 05:17 - 000218240 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kneps.sys

2019-07-06 13:17 - 2018-02-17 02:50 - 000104576 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwfp.sys

2019-07-06 13:17 - 2018-01-15 05:13 - 000060536 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klkbdflt.sys

2019-07-06 13:16 - 2019-02-13 14:10 - 000075600 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klbackupdisk.sys

2019-07-06 13:16 - 2019-02-13 14:10 - 000046416 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klpnpflt.sys

2019-07-06 13:16 - 2018-02-12 04:17 - 000058704 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klim6.sys

2019-07-06 13:16 - 2017-12-11 11:49 - 000060784 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klmouflt.sys

2019-07-06 13:16 - 2017-05-30 18:51 - 000050304 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klpd.sys

2019-07-06 13:00 - 2017-02-04 10:05 - 000000000 ____D C:\Program Files\Common Files\AV

2019-07-06 12:59 - 2018-04-11 17:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2019-07-06 01:15 - 2018-06-20 22:44 - 000002365 ____C C:\Users\indre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2019-07-06 01:15 - 2018-05-23 14:44 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1593158232-969496310-2340663774-1001

2019-07-06 00:04 - 2016-09-17 01:09 - 000000000 ___DC C:\Users\indre\Documents\Letters

2019-07-04 12:01 - 2018-05-23 14:44 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2019-07-04 12:01 - 2018-05-23 14:44 - 000003346 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2019-07-04 12:01 - 2018-05-23 14:44 - 000003298 _____ C:\WINDOWS\System32\Tasks\Dell SupportAssistAgent AutoUpdate

2019-07-04 12:01 - 2018-05-23 14:44 - 000003122 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2019-07-04 12:01 - 2018-05-23 14:44 - 000003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification

2019-07-04 12:01 - 2018-05-23 14:44 - 000003042 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473

2019-07-04 12:01 - 2018-05-23 14:44 - 000003040 _____ C:\WINDOWS\System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec

2019-07-04 12:01 - 2018-05-23 14:44 - 000002806 _____ C:\WINDOWS\System32\Tasks\Seagate_Install_Launch

2019-07-04 12:01 - 2018-05-23 14:44 - 000002702 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask

2019-07-04 12:01 - 2018-05-23 14:44 - 000002674 _____ C:\WINDOWS\System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon

2019-07-04 12:01 - 2018-05-23 14:44 - 000002528 _____ C:\WINDOWS\System32\Tasks\CLVDLauncher

2019-07-04 12:01 - 2018-05-23 14:44 - 000002528 _____ C:\WINDOWS\System32\Tasks\CLMLSvc_P2G8

2019-07-04 12:01 - 2018-05-23 14:44 - 000002304 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_PushButton

2019-07-01 19:18 - 2019-05-14 13:15 - 000002495 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk

2019-07-01 19:18 - 2019-05-14 13:15 - 000002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk

2019-07-01 19:18 - 2019-05-14 13:15 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk

2019-07-01 19:18 - 2019-05-14 13:15 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk

2019-07-01 19:18 - 2019-05-14 13:15 - 000002437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk

2019-07-01 19:18 - 2016-08-09 19:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Office

2019-06-29 23:58 - 2017-10-14 21:56 - 000000000 ___DC C:\Users\indre\AppData\Roaming\vlc

2019-06-29 23:56 - 2017-10-14 21:56 - 000001141 _____ C:\Users\Public\Desktop\VLC media player.lnk

2019-06-28 08:30 - 2016-09-16 13:57 - 000000000 ___DC C:\Users\indre\AppData\Roaming\VMware

2019-06-27 18:32 - 2016-09-11 19:59 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2019-06-27 00:47 - 2017-07-15 20:02 - 000014706 ____C C:\Users\indre\Documents\Indy's Finances.xlsx

2019-06-26 22:10 - 2016-09-11 19:59 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2019-06-21 21:34 - 2016-09-17 01:09 - 000000000 ___DC C:\Users\indre\Documents\Resumes etc

2019-06-21 16:50 - 2016-09-17 01:09 - 000000000 ___DC C:\Users\indre\Documents\Recipes

2019-06-20 20:08 - 2016-09-11 19:57 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2019-06-20 20:08 - 2016-09-11 19:57 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2019-06-20 20:03 - 2018-11-16 12:19 - 000000000 ____D C:\Program Files\rempl

2019-06-20 08:58 - 2017-05-09 21:49 - 000000000 ____D C:\Program Files\UNP

2019-06-18 05:52 - 2016-09-17 01:38 - 000000000 ___DC C:\Users\indre\Documents\Akiko stuff

2019-06-13 20:33 - 2016-08-09 19:33 - 000000000 ____D C:\ProgramData\Intel

2019-06-13 20:33 - 2015-10-30 02:28 - 000000000 ____D C:\Users\Default.migrated

2019-06-13 20:32 - 2017-05-21 14:10 - 000000000 ____D C:\Program Files (x86)\Intel

2019-06-13 20:31 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData

2019-06-13 20:31 - 2017-05-21 14:10 - 000000000 ____D C:\Program Files\Intel

2019-06-13 18:45 - 2016-09-16 22:23 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2019-06-13 18:22 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\ShellExperiences

2019-06-13 18:22 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

 

==================== Files in the root of some directories ================

 

2018-11-19 21:23 - 2018-11-19 21:23 - 000000017 ____C () C:\Users\indre\AppData\Local\resmon.resmoncfg

 

==================== SigCheck ===============================

 

(There is no automatic fix for files that do not pass verification.)

 

==================== End of FRST.txt ============================

 

(5) Here's the Addition scan:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-07-2019

Ran by indre (12-07-2019 18:58:04)

Running from C:\Users\indre\Desktop

Windows 10 Pro Version 1803 17134.885 (X64) (2018-05-23 18:44:41)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-1593158232-969496310-2340663774-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-1593158232-969496310-2340663774-503 - Limited - Disabled)

Guest (S-1-5-21-1593158232-969496310-2340663774-501 - Limited - Disabled)

indre (S-1-5-21-1593158232-969496310-2340663774-1001 - Administrator - Enabled) => C:\Users\indre

WDAGUtilityAccount (S-1-5-21-1593158232-969496310-2340663774-504 - Limited - Disabled)

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Kaspersky Total Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}

AS: Kaspersky Total Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Kaspersky Total Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

Across Lite (HKLM-x32\...\{5F5C7350-9731-420F-97CC-8CAFEE7DA7A3}) (Version: 2.4.2451.1 - Literate Software)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.012.20035 - Adobe Systems Incorporated)

Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.223 - Adobe)

Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.223 - Adobe)

Angry Birds (HKLM-x32\...\{2F7D5734-056F-4A0A-A1C7-CA1AAE5BB1EB}) (Version: 1.6.3.1 - Rovio)

ANT Drivers Installer x64 (HKLM\...\{D559687A-60C5-4786-9429-C21EC195789D}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden

Apple Application Support (32-bit) (HKLM-x32\...\{C1BCFECF-6EC2-4750-9072-5E2489423F8F}) (Version: 7.5 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{B202C7F5-7DE3-4FBF-B259-E70E625F56FC}) (Version: 7.5 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{B5A46811-3612-4DA5-8A5A-E6DED5D7C523}) (Version: 12.2.1.12 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Cisco WebEx Meetings (HKLM-x32\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)

CmgMasterPrerequisites (HKLM\...\{EE34FA4E-715A-46FA-9CAF-06E26AE4217D}) (Version: 1.10.0.34 - Dell, Inc.) Hidden

CutePDF Form Filler 3.6 (Evaluation) (HKLM-x32\...\CutePDF Form Filler (Evaluation)_is1) (Version:  - Acro Software Inc.)

CyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 12 - CyberLink Corp.)

Dell Command | Update (HKLM-x32\...\{EC542D5D-B608-4145-A8F7-749C02BE6D94}) (Version: 2.2.0 - Dell Inc.)

Dell Data Protection | Client Security Framework (HKLM\...\{FAE38E46-ECB2-44EA-A52B-6955AA6B1B3A}) (Version: 8.10.0.39 - Dell, Inc.)

Dell Data Protection | Security Tools (HKLM-x32\...\{812AA6D3-5BEB-4577-88B1-00998B91AB41}) (Version: 1.10.0.34 - Dell, Inc.) Hidden

Dell Data Protection | Security Tools (HKLM-x32\...\InstallShield_{812AA6D3-5BEB-4577-88B1-00998B91AB41}) (Version: 1.10.0.34 - Dell, Inc.)

Dell Digital Delivery (HKLM-x32\...\{AB7F2792-2ED1-4C5C-9F28-680E5110BF72}) (Version: 3.1.1018.0 - Dell Products, LP)

Dell SupportAssist (HKLM\...\{806422F1-FC4E-4D7C-8855-05748AEFC031}) (Version: 3.2.2.119 - Dell Inc.)

DELLOSD (HKLM-x32\...\{BED3193A-897B-47F6-AEDC-45D147122957}) (Version: 1.0.0.0 - DELL)

Elevated Installer (HKLM-x32\...\{0BF90608-2F95-4C7C-9A85-E90E0CAF4FE9}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden

FileZilla Client 3.25.1 (HKLM-x32\...\FileZilla Client) (Version: 3.25.1 - Tim Kosse)

Garmin Express (HKLM-x32\...\{95D0EADA-5123-41C0-931A-F37946BC0E8E}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden

Garmin Express (HKLM-x32\...\{eab4691c-4022-41cd-8d39-c3097ba62d4b}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 75.0.3770.100 - Google LLC)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden

HP Support Solutions Framework (HKLM-x32\...\{2B5A1E68-6617-406D-B797-5DAB5B4630B8}) (Version: 12.11.24.11 - HP Inc.)

Intel® Chipset Device Software (HKLM-x32\...\{fb610cea-ba50-4d4b-a717-cf025419035c}) (Version: 10.1.1.13 - Intel® Corporation) Hidden

Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation)

Intel® Network Connections 20.3.300.1 (HKLM\...\PROSetDX) (Version: 20.3.300.1 - Intel)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 23.20.16.4973 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.9.1053 - Intel Corporation)

Intel® Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden

Intel® Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden

Intel® WiDi (HKLM\...\{C7CD6D54-26AF-4D93-B06F-D81ACE8624CB}) (Version: 6.0.40.0 - Intel Corporation)

Intel® WiDi Software Asset Manager (HKLM-x32\...\{5B5CD20C-29F0-4857-A4FA-A4F4C716B019}) (Version: 1.1.347 - Intel Corporation) Hidden

Intel® Wireless Bluetooth® (HKLM-x32\...\{5068B0F8-CE24-4B61-9C2F-301B411FFB9C}) (Version: 18.1.1611.3223 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{f430aa46-62c4-47a0-8a03-42e7fff664b7}) (Version: 20.120.0 - Intel Corporation)

Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)

iTunes (HKLM\...\{A8AF3EF8-5010-4A92-BCCA-90F62A7D62B8}) (Version: 12.9.5.7 - Apple Inc.)

Kaspersky Password Manager (HKLM-x32\...\{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611}) (Version: 9.0.2.767 - Kaspersky Lab) Hidden

Kaspersky Password Manager (HKLM-x32\...\InstallWIX_{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611}) (Version: 9.0.2.767 - Kaspersky Lab)

Kaspersky Secure Connection (HKLM-x32\...\{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden

Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab)

Kaspersky Total Security (HKLM-x32\...\{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden

Kaspersky Total Security (HKLM-x32\...\InstallWIX_{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab)

LaserJet 1020 series (HKLM-x32\...\HP-LaserJet 1020 series) (Version:  - )

Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.6.8006.3 - Waves Audio Ltd.) Hidden

Microsoft Office Famille et Petite Entreprise 2016 - fr-fr (HKLM\...\HomeBusinessRetail - fr-fr) (Version: 16.0.11727.20230 - Microsoft Corporation)

Microsoft Office Hogar y Empresas 2016 - es-es (HKLM\...\HomeBusinessRetail - es-es) (Version: 16.0.11727.20230 - Microsoft Corporation)

Microsoft Office Home and Business 2016 - en-us (HKLM\...\HomeBusinessRetail - en-us) (Version: 16.0.11727.20230 - Microsoft Corporation)

Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\OneDriveSetup.exe) (Version: 19.103.0527.0003 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)

Mozilla Firefox 67.0.4 (x64 en-US) (HKLM\...\Mozilla Firefox 67.0.4 (x64 en-US)) (Version: 67.0.4 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 66.0.3 - Mozilla)

NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)

NordVPN (HKLM-x32\...\{F4325B30-A8A0-4D09-B0DE-7CBB485A52D8}) (Version: 6.22.6 - NordVPN) Hidden

NordVPN (HKLM-x32\...\NordVPN 6.22.6) (Version: 6.22.6 - NordVPN)

NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0C0A-0000-0000000FF1CE}) (Version: 16.0.11727.20230 - Microsoft Corporation) Hidden

Plex Media Server (HKLM-x32\...\{72238E55-A877-4785-A5E9-0C35EAFB0746}) (Version: 1.15.876 - Plex, Inc.) Hidden

Plex Media Server (HKLM-x32\...\{9203fc01-57c0-4cc8-858d-92911b5142de}) (Version: 1.15.3.876 - Plex, Inc.)

Pretty Good Solitaire version 12.4.0 (HKLM-x32\...\Pretty Good Solitaire_is1) (Version: 12.4.0 - Goodsol Development Inc.)

proDAD Adorage 3.0 (HKLM-x32\...\proDAD-Adorage-3.0) (Version: 3.0.114.1 - proDAD GmbH)

Realtek Audio COM Components (HKLM-x32\...\{2355B503-9B11-4449-861D-1C1748B26320}) (Version: 1.0.2 - Realtek Semiconductor Corp.)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.21292 - Realtek Semiconductor Corp.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6105 - Realtek Semiconductor Corp.)

Security Innovation TSS (HKLM\...\{0C11FE22-53F2-4C9B-9E79-824B10D0976E}) (Version: 2.1.42 - Security Innovation) Hidden

Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)

Spotify (HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\Spotify) (Version: 1.0.96.181.gf6bc1b6b - Spotify AB)

Stopping Plex (HKLM-x32\...\{3C6D43CB-1211-4C3F-8F3C-2B4F90C5BB95}) (Version: 1.15.876 - Plex, Inc.) Hidden

TextPad 8 (HKLM\...\{861AB1C1-1967-4C4A-BF86-C255E2D2B8FD}) (Version: 8.0.2 - Helios)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F14FB68A-9188-4036-AD0D-D054BC9C9291}) (Version: 2.59.0.0 - Microsoft Corporation)

VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)

VMware Horizon Client (HKLM\...\{93CEC220-0D24-41C0-8647-BA1C62A3EE89}) (Version: 4.0.1.781 - VMware, Inc.)

Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0) (Version: 1.0.33.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0-2) (Version: 1.0.33.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.)

Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

WD Backup (HKLM-x32\...\{50C6CAE8-562E-440D-8616-E0514D41CC10}) (Version: 1.9.6941.25593 - Western Digital Technologies, Inc) Hidden

WD Backup (HKLM-x32\...\{6531bf4b-4bad-46a5-9562-766d0a858003}) (Version: 1.9.6941.25593 - Western Digital Technologies, Inc.)

WD Desktop App 2.1.0.245 (HKLM-x32\...\{d303f1fe-6729-4693-b2e1-51d13b450de5}) (Version: 2.1.0.245 - Western Digital Corporation) Hidden

WD Desktop App 2.1.0.245 (x64) (HKLM\...\{CA7F7232-526E-41BD-971A-47BE28C18516}) (Version: 2.1.0.245 - Western Digital Corporation) Hidden

WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 3.3.34 - Western Digital Technologies, Inc.)

WD Drive Utilities (HKLM-x32\...\{5ea95ccc-fc68-4182-88a9-e563ba3900ed}) (Version: 2.0.0.26 - Western Digital Technologies, Inc.)

WD Drive Utilities (HKLM-x32\...\{893C7059-0464-47FB-85A4-5E1ADDA56141}) (Version: 2.0.0.26 - Western Digital Technologies, Inc.) Hidden

WD SES Driver Setup (HKLM-x32\...\{924A274D-38B6-4930-8859-F3F51CFA8DDD}) (Version: 1.1.0.25 - Western Digital) Hidden

Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)

Windows Driver Package - Intel Corporation (iaStorA) HDC  (08/10/2017 15.7.5.1025) (HKLM\...\FF1B55CEF8D39B696D1F5DF141ACFA7A5D1F2743) (Version: 08/10/2017 15.7.5.1025 - Intel Corporation)

Windows Driver Package - Intel Corporation (iaStorA) SCSIAdapter  (08/10/2017 15.7.5.1025) (HKLM\...\6D773A6E21B2A480569157737F58E8FF7DC6608A) (Version: 08/10/2017 15.7.5.1025 - Intel Corporation)

Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)

Zoom (HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\ZoomUMX) (Version: 4.1 - Zoom Video Communications, Inc.)

 

Packages:

=========

CyberLink Media Suite Essentials -> C:\Program Files\WindowsApps\DB6EA5DB.CyberLinkMediaSuiteEssentials_1.0.10.0_x86__mcezb6ze687jp [2018-03-13] (CYBERLINK CORPORATION.)

Dell SupportAssist for PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.2.5.0_x64__htrsf667h5kn2 [2019-05-29] (Dell Inc)

Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2019-07-10] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2018-09-22] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-12] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-12] (Microsoft Corporation) [MS Ad]

Microsoft Jigsaw -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJigsaw_1.8.1812.301_x86__8wekyb3d8bbwe [2019-03-14] (Microsoft Studios) [MS Ad]

Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_3.9.4100.0_x64__8wekyb3d8bbwe [2019-04-18] (Microsoft Studios) [MS Ad]

Microsoft Minesweeper -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMinesweeper_2.7.4300.0_x86__8wekyb3d8bbwe [2019-02-18] (Microsoft Studios) [MS Ad]

Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.31.11723.0_x64__8wekyb3d8bbwe [2019-06-26] (Microsoft Corporation) [MS Ad]

Microsoft Phone -> C:\Program Files\WindowsApps\Microsoft.CommsPhone_3.43.20002.1000_x64__8wekyb3d8bbwe [2018-09-08] (Microsoft Corporation)

Microsoft Phone Companion -> C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1802.311.0_x64__8wekyb3d8bbwe [2018-02-12] (Microsoft Corporation)

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.6132.0_x64__8wekyb3d8bbwe [2019-06-17] (Microsoft Studios) [MS Ad]

MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.29.10701.0_x64__8wekyb3d8bbwe [2019-03-22] (Microsoft Corporation) [MS Ad]

MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.28.3242.0_x64__8wekyb3d8bbwe [2018-12-15] (Microsoft Corporation) [MS Ad]

MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe [2019-02-12] (Microsoft Corporation) [MS Ad]

PAC-MAN Battle -> C:\Program Files\WindowsApps\50867PocketKingGames.PAC-MANBattle_1.1.0.0_x64__m8bdd0rdw5vr0 [2018-12-15] (Pocket King Games) [MS Ad]

The Backgammon -> C:\Program Files\WindowsApps\6918E89D.TheBackgammon_1.2.0.0_x64__66n08swfvvka0 [2018-12-15] (UNBALANCE corp.) [MS Ad]

Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-08] (Twitter Inc.)

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

CustomCLSID: HKU\S-1-5-21-1593158232-969496310-2340663774-1001_Classes\CLSID\{5A9E21A2-851A-4BEB-B16F-DBBE7D648AF9}\InprocServer32 -> C:\Program Files\TextPad 8\System\ShellExt64.dll (Helios Software Solutions Ltd -> )

SSODL: WDFSMountNotificator-wdfsconnect2017 - {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2} - C:\WINDOWS\system32\wdfsconnectMntNtf2017.dll (Western Digital Technologies, Inc.) [File not signed]

SSODL-x32: WDFSMountNotificator-wdfsconnect2017 - {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2} - C:\WINDOWS\SysWOW64\wdfsconnectMntNtf2017.dll (Western Digital Technologies, Inc.) [File not signed]

ShellServiceObjects: Virtual Storage Mount Notification -> {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2} => C:\WINDOWS\system32\wdfsconnectMntNtf2017.dll [2017-11-10] (Western Digital Technologies, Inc.) [File not signed]

ShellServiceObjects-x32: Virtual Storage Mount Notification -> {5F3C2DA0-75C3-4F79-B70F-ADB47AD8D0E2} => C:\WINDOWS\SysWOW64\wdfsconnectMntNtf2017.dll [2017-11-10] (Western Digital Technologies, Inc.) [File not signed]

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay01] -> {4F8A325E-9DAF-44B8-A825-1A14DFA0FA78} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay02] -> {0176BDDE-B59A-4A1E-808B-CAD461415CCA} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay03] -> {B65909D1-57AF-41F5-AB94-BEB733F62B35} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay04] -> {C6C2397D-8238-4332-8935-86C39C7C165F} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay05] -> {E7B3BCF9-0386-4B5F-AE6A-91B9F1423973} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [  WDDesktopIconOverlay06] -> {564EA121-D9DA-485D-82C2-C2ED7BFCCEAD} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2016-04-27] (CyberLink Corp. -> Cyberlink)

ContextMenuHandlers1: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\ShellEx.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers1: [WDDesktopContextMenu] -> {4961b028-350a-3bb9-9d6c-079dc724e5f0} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2016-04-27] (CyberLink Corp. -> Cyberlink)

ContextMenuHandlers2: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\ShellEx.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers4: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\ShellEx.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers4: [WDDesktopContextMenu] -> {4961b028-350a-3bb9-9d6c-079dc724e5f0} => C:\Program Files\WD Desktop App\kda.DLL [2019-05-08] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c7337214025\igfxDTCM.dll [2018-03-22] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

ContextMenuHandlers6: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 19.0.0\x64\ShellEx.dll [2019-07-06] (Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers1_S-1-5-21-1593158232-969496310-2340663774-1001: [TextPad8] -> {5A9E21A2-851A-4BEB-B16F-DBBE7D648AF9} => C:\Program Files\TextPad 8\System\ShellExt64.dll [2016-02-28] (Helios Software Solutions Ltd -> )

 

==================== Shortcuts & WMI ========================

 

(The entries could be listed to be restored or removed.)

 

 

==================== Loaded Modules (Whitelisted) ==============

 

2016-08-09 19:32 - 2015-06-29 20:13 - 000151552 _____ () [File not signed] C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe

2016-08-09 19:32 - 2015-06-29 20:09 - 000548864 _____ () [File not signed] C:\Program Files (x86)\DELL\DELLOSD\MediaButtons.exe

2015-05-19 12:11 - 2015-05-19 12:11 - 000007680 _____ () [File not signed] C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe

2018-07-24 08:50 - 2018-07-24 08:50 - 000217887 _____ () [File not signed] C:\Program Files (x86)\NordVPN\Resources\Binaries\64bit\liblzo2-2.dll

2018-07-24 08:50 - 2018-07-24 08:50 - 000119167 _____ () [File not signed] C:\Program Files (x86)\NordVPN\Resources\Binaries\64bit\libpkcs11-helper-1.dll

2019-01-21 07:55 - 2019-01-21 07:55 - 000251392 _____ () [File not signed] C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll

2018-07-24 08:50 - 2018-07-24 08:50 - 003028053 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\NordVPN\Resources\Binaries\64bit\libcrypto-1_1-x64.dll

2018-07-24 08:50 - 2018-07-24 08:50 - 000625540 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\NordVPN\Resources\Binaries\64bit\libssl-1_1-x64.dll

2016-03-25 23:50 - 2016-03-25 23:50 - 001491968 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\LIBEAY32.dll

2016-03-25 23:50 - 2016-03-25 23:50 - 000298496 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\SSLEAY32.dll

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

 

==================== Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost

IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com

IE trusted site: HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\localhost -> localhost

IE trusted site: HKU\S-1-5-21-1593158232-969496310-2340663774-1001\...\webcompanion.com -> hxxp://webcompanion.com

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2015-10-30 03:24 - 2019-01-10 23:55 - 000002507 _____ C:\WINDOWS\system32\drivers\etc\hosts

 

0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly

0.0.0.0 tracking.opencandy.com.s3.amazonaws.com

0.0.0.0 media.opencandy.com

0.0.0.0 cdn.opencandy.com

0.0.0.0 tracking.opencandy.com

0.0.0.0 api.opencandy.com

0.0.0.0 api.recommendedsw.com

0.0.0.0 rp.yefeneri2.com

0.0.0.0 os.yefeneri2.com

0.0.0.0 os2.yefeneri2.com

0.0.0.0 installer.betterinstaller.com

0.0.0.0 installer.filebulldog.com

0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net

0.0.0.0 inno.bisrv.com

0.0.0.0 nsis.bisrv.com

0.0.0.0 cdn.file2desktop.com

0.0.0.0 cdn.goateastcach.us

0.0.0.0 cdn.guttastatdk.us

0.0.0.0 cdn.inskinmedia.com

0.0.0.0 cdn.insta.oibundles2.com

0.0.0.0 cdn.insta.playbryte.com

0.0.0.0 cdn.llogetfastcach.us

0.0.0.0 cdn.montiera.com

0.0.0.0 cdn.msdwnld.com

0.0.0.0 cdn.mypcbackup.com

0.0.0.0 cdn.ppdownload.com

0.0.0.0 cdn.riceateastcach.us

0.0.0.0 cdn.shyapotato.us

0.0.0.0 cdn.solimba.com

0.0.0.0 cdn.tuto4pc.com

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Dell\Dell Data Protection\Drivers\TSS\bin\;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL;C:\Program Files\Intel\Intel® Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT;C:\Program Files\Intel\Intel® Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\

HKU\S-1-5-21-1593158232-969496310-2340663774-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\indre\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 103.86.96.100 - 103.86.99.100

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

If an entry is included in the fixlist, it will be removed.

 

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [{F26FF42A-FABC-4237-AF27-9A74BAD6E0C7}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [UDP Query User{B71B19F6-E012-4D87-BC64-170CDB9AE748}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [TCP Query User{FF6FAF1B-3C9B-4453-9D51-82A62172D810}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{6A551C3A-B926-43D8-9A75-06A3CEEB5AAF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{AD297B5D-2C9A-4E26-9193-5DEFE2B8D5DD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{6CC73312-41C6-4002-A0B0-4F73A84DBE2F}] => (Allow) LPort=8888

FirewallRules: [{277A97E1-8E11-4C68-985D-B7CC9AFC4A42}] => (Allow) LPort=8888

FirewallRules: [{B768845C-68FA-4F5D-8CB0-8915F5518FBE}] => (Allow) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe (Intel® Wireless Display -> Intel)

FirewallRules: [TCP Query User{3696DD75-4C0C-490B-A914-59C0D82CE209}C:\program files (x86)\vmware\vmware horizon view client\vmware-remotemks.exe] => (Allow) C:\program files (x86)\vmware\vmware horizon view client\vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [UDP Query User{881A5D70-E076-4553-AFB1-5DCEB88E106E}C:\program files (x86)\vmware\vmware horizon view client\vmware-remotemks.exe] => (Allow) C:\program files (x86)\vmware\vmware horizon view client\vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [TCP Query User{56C4283E-A791-4CBC-9F68-AC60C8E0C7B4}C:\users\indre\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\indre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [UDP Query User{1DC4DC8A-7F42-44CE-9FE4-78B806402CE0}C:\users\indre\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\indre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{3E499D19-4DBA-4DEF-8CF8-19DA405CDB89}] => (Block) C:\users\indre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{69A76876-400F-4C97-9AC9-188D74D4DEA6}] => (Block) C:\users\indre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{FE7FEA92-FE61-4E07-AB28-B07698433507}] => (Allow) LPort=8889

FirewallRules: [TCP Query User{5BEC10D3-14A2-4D91-86E2-3FF9AC49678E}C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe] => (Allow) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe No File

FirewallRules: [UDP Query User{DC37BDA6-DFD4-4AE9-A106-AF2D1149CAC6}C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe] => (Allow) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe No File

FirewallRules: [{2F7C3E13-8189-49BC-AD54-293606BAB75F}] => (Block) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe No File

FirewallRules: [{2A5D3459-4437-4C54-AAC4-9E96FEE61614}] => (Block) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe No File

FirewallRules: [{DED84BE3-3BD6-4E0D-A420-B30E49FC626F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{56381F91-7873-4CEA-8ABE-E10213107A2E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{835008C9-6A51-4365-AFEC-F24E67C44C2E}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc -> Plex, Inc.)

FirewallRules: [{B9F683A9-6869-4425-ACDF-4BBE734023A1}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc -> Python Software Foundation)

FirewallRules: [{73C29C77-9A88-433D-8F93-2CEF6E260A57}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc -> Plex, Inc.)

FirewallRules: [{FCB7161E-863C-4365-A934-94FC0E83A38E}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc -> )

FirewallRules: [{F52C8ACB-334D-404D-AC77-F60981439024}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{35F1740E-5C7F-48A0-9424-553F25A67238}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{4D93D1F7-7788-460E-AB49-CA919F927793}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )

FirewallRules: [{F29C6F66-709F-4614-A9A3-B60FCED2E26A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

 

==================== Restore Points =========================

 

20-06-2019 20:03:03 Windows Update

29-06-2019 20:49:28 Scheduled Checkpoint

10-07-2019 07:35:27 Windows Update

12-07-2019 11:29:53 Installed Macrium Reflect Free Edition

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (07/12/2019 06:54:12 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: IAStorDataMgrSvc.exe, version: 14.8.9.1053, time stamp: 0x5718affa

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xc0000005

Fault offset: 0x04e1efcd

Faulting process id: 0x40fc

Faulting application start time: 0x01d53904b6f86c23

Faulting application path: C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

Faulting module path: unknown

Report Id: 0d1e7d93-ab79-4603-8b5f-cff08156946e

Faulting package full name: 

Faulting package-relative application ID:

 

Error: (07/12/2019 06:54:11 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: IAStorDataMgrSvc.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.NullReferenceException

   at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()

   at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()

   at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

 

 

System errors:

=============

Error: (07/12/2019 06:54:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Intel® Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (07/12/2019 06:53:50 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 

Windows.SecurityCenter.WscBrokerManager

 and APPID 

Unavailable

 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 06:53:28 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 06:53:02 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EL88UDV)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 and APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 to the user DESKTOP-EL88UDV\indre SID (S-1-5-21-1593158232-969496310-2340663774-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 06:52:23 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-EL88UDV)

Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 

Windows.SecurityCenter.WscCloudBackupProvider

 and APPID 

Unavailable

 to the user DESKTOP-EL88UDV\indre SID (S-1-5-21-1593158232-969496310-2340663774-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 06:51:59 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 and APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Error: (07/12/2019 06:51:59 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 and APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

 

==================== Memory info =========================== 

 

BIOS: Dell Inc. 1.8.6 12/12/2017

Motherboard: Dell Inc. 0X2MKR

Processor: Intel® Core™ i7-6700 CPU @ 3.40GHz

Percentage of memory in use: 59%

Total physical RAM: 8048.94 MB

Available physical RAM: 3221.32 MB

Total Virtual: 9840.94 MB

Available Virtual: 4269.9 MB

 

==================== Drives ================================

 

Drive c: (OS) (Fixed) (Total:224.73 GB) (Free:100.43 GB) NTFS

Drive e: (My Passport) (Fixed) (Total:1862.98 GB) (Free:1820.94 GB) NTFS

 

\\?\Volume{a8007518-d8a3-4a74-92ee-2363fddb05a7}\ (WINRETOOLS) (Fixed) (Total:0.44 GB) (Free:0.06 GB) NTFS

\\?\Volume{616afac5-ee60-493d-8f6b-5152f9f29468}\ (Image) (Fixed) (Total:12.69 GB) (Free:0.63 GB) NTFS

\\?\Volume{dbd7410f-196c-49b5-bb90-bbf877a175c2}\ (ESP) (Fixed) (Total:0.48 GB) (Free:0.44 GB) FAT32

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (Size: 238.5 GB) (Disk ID: 4FCEFFCB)

 

Partition: GPT.

 

========================================================

Disk: 1 (Size: 1863 GB) (Disk ID: 16F2A91F)

 

Partition: GPT.

 

==================== End of Addition.txt ============================

 

(6) Yes, Nero went away after I uninstalled Seagate.

Let me know if there's anything else you need me to do! 

Thanks, as always!

[RKinner]

Application errors:

==================

Error: (07/12/2019 06:54:12 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: IAStorDataMgrSvc.exe, version: 14.8.9.1053, time stamp: 0x5718affa

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xc0000005

Fault offset: 0x04e1efcd

Faulting process id: 0x40fc

Faulting application start time: 0x01d53904b6f86c23

Faulting application path: C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

Faulting module path: unknown

Report Id: 0d1e7d93-ab79-4603-8b5f-cff08156946e

Faulting package full name: 

Faulting package-relative application ID:

 

Error: (07/12/2019 06:54:11 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: IAStorDataMgrSvc.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.NullReferenceException

   at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()

   at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()

   at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

 

 

System errors:

=============

Error: (07/12/2019 06:54:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Intel® Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).

 

 

 

 

See if you can install a newer version of Intel® Rapid Storage Technology

 

https://downloadcent...logy-Intel-RST-

 

IF the newest won't install then try the 14.8.16.1063

 

This is used by the CPU to talk to the hard drives so is sort of critical.

[IndyBlue]

Could you please give me step-by-step instructions? I went to the link, and I selected Windows 10, 64-bit, but then there were a host of options, and I had no idea what to choose. I'm not familiar with this technology. I'm happy to follow your instructions, but if you could provide some more guidance, I'd be so grateful! I'm terrified of doing the wrong thing.

 

Thanks in advance!!

[RKinner]

Let's do the 14.8.16.1063 since it's closest to what you have.

 

Click on:

 

https://downloadcent...logy-Intel-RST-

 

Then on Show More

 

Then click on the link for 14.8.16.1063

 

That will take you to:

 

https://downloadcent...r?product=55005

 

Click on SetupRST.exe

 

Accept

 

then Save the file.

 

Right click on the downloaded file and Run As Admin.