Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 07-03-2020 Gestart door flami (Beheerder) op DESKTOP-TIJPHM2 (Acer Aspire TC-605) (08-03-2020 00:49:16) Gestart vanaf C:\Users\flami\Downloads Geladen Profielen: flami (Beschikbare Profielen: flami) Platform: Windows 10 Home Versie 1909 18363.657 (X64) Taal: Nederlands (Nederland) Standaardbrowser: FF Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.) (Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (BullGuard Ltd -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardHelper.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BgGameMon.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardCore.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFileScanner.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFiltering.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFirewall.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardSentry.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardSentryEye.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardTray.exe (BullGuard Ltd. -> BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe (Microsoft Windows -> ) C:\Windows\System32\OpenSSH\ssh-agent.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Open-Shell) [Bestand niet getekend] C:\Program Files\Open-Shell\StartMenu.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe ==================== Register (gefilterd) =================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [BullGuard] => C:\Program Files\BullGuard Ltd\BullGuard\BullGuardTray.exe [407400 2020-01-23] (BullGuard Ltd. -> BullGuard Ltd.) HKLM\...\Run: [Open-Shell Start Menu] => C:\Program Files\Open-Shell\StartMenu.exe [224768 2019-10-26] (Open-Shell) [Bestand niet getekend] HKLM\...\Policies\Explorer: [NoRecentDocsNetHood] 1 HKU\S-1-5-21-229794501-1121372831-532239594-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22256824 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd) GroupPolicy: Restrictie ? <==== AANDACHT FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrictie <==== AANDACHT CHR HKLM\SOFTWARE\Policies\Google: Restrictie <==== AANDACHT ==================== Geplande Taken (gefilterd) ============ (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {15A62A25-9DC5-49D0-A4B2-5E77417AC82D} - System32\Tasks\BullGuard\BullGuardUpdate2 => C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate2.exe [2975080 2020-01-23] (BullGuard Ltd. -> BullGuard Ltd.) Task: {235799BC-E753-4830-8581-BDD90DDB6DAC} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {260A458F-D4AC-4FCD-B39E-7F8A95FEEBEC} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133368 2019-10-24] (NVIDIA Corporation -> NVIDIA Corporation) Task: {2C3B734F-9A0B-4C2D-989E-8A55BE87FEE8} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133368 2019-10-24] (NVIDIA Corporation -> NVIDIA Corporation) Task: {2F312202-DF08-44EB-B761-7E761146D14D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301928 2019-10-25] (NVIDIA Corporation -> NVIDIA Corporation) Task: {41B3898B-592C-474C-8301-D0209B9AB431} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe Task: {4535017C-D929-4405-851A-F6BA6B23BB0B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantWakeupRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe Task: {4A0FC13D-5191-4531-BC85-2AC5EAFA52E3} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [913720 2019-10-24] (NVIDIA Corporation -> NVIDIA Corporation) Task: {571489F8-0D07-4EE8-BFB9-A25B5CBBC478} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18233016 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd) Task: {6F7C758F-6ACB-43E7-9DD4-D8B11A6BE085} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-09-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {72994D94-15CF-46CC-AE65-B9F84A394818} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-09-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {765BC70C-861D-43EE-A222-698342970985} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe Task: {7ED1B9EC-841A-4298-BF6E-EF939759DE70} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems) Task: {9A60F96B-DF6B-4701-9437-C7F1C9B24489} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd) Task: {A479D4FB-04EA-4E47-A3E5-999EBDABE8A2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-02-11] (Adobe Inc. -> Adobe) Task: {A658CC4C-FA03-40EC-AACB-15D2FF637C9C} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133368 2019-10-24] (NVIDIA Corporation -> NVIDIA Corporation) Task: {BD98DD37-1423-4295-AFC1-CBF0B5B40976} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_330_Plugin.exe [1458232 2020-02-11] (Adobe Inc. -> Adobe) Task: {D4772936-EDFE-4017-B950-C3B6E4326998} - System32\Tasks\ACC => C:\Program Files\DriverSetupUtility\FUB\FUB_Send.bat Task: {D72937D1-C89A-41F7-A0AF-54579FFACBA8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [654456 2019-10-24] (NVIDIA Corporation -> NVIDIA Corporation) Task: {E6A1F260-3A9D-43FC-9F85-B7405FF3C483} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [913720 2019-10-24] (NVIDIA Corporation -> NVIDIA Corporation) Task: {F0C9F115-8566-4725-8733-F33CF3C48C48} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133368 2019-10-24] (NVIDIA Corporation -> NVIDIA Corporation) (Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.) Hosts: Er is meer dan één item in Hosts. Zie Hosts deel van Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{c1743246-a690-496d-abf3-a23f7e39ddbd}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-229794501-1121372831-532239594-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP BHO: Geen Naam -> {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} -> Geen bestand BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer64.dll [2019-10-26] (Open-Shell) [Bestand niet getekend] BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Open-Shell\ClassicIEDLL_64.dll [2019-10-26] (Open-Shell) [Bestand niet getekend] BHO-x32: Geen Naam -> {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} -> Geen bestand BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer32.dll [2019-10-26] (Open-Shell) [Bestand niet getekend] BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Open-Shell\ClassicIEDLL_32.dll [2019-10-26] (Open-Shell) [Bestand niet getekend] Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer64.dll [2019-10-26] (Open-Shell) [Bestand niet getekend] Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer32.dll [2019-10-26] (Open-Shell) [Bestand niet getekend] FireFox: ======== FF DefaultProfile: 8maxltrb.default-1574339924015 FF ProfilePath: C:\Users\flami\AppData\Roaming\Mozilla\Firefox\Profiles\8maxltrb.default-1574339924015 [2020-03-08] FF Extension: (A powerful reverse image search tool, with support for various search engines, such as Google, Bing, Yandex, Baidu and TinEye.) - C:\Users\flami\AppData\Roaming\Mozilla\Firefox\Profiles\8maxltrb.default-1574339924015\Extensions\{2e5ff8c8-32fe-46d0-9fc8-6b8986621f3c}.xpi [2020-02-21] FF Extension: (Adblock Plus - gratis adblocker) - C:\Users\flami\AppData\Roaming\Mozilla\Firefox\Profiles\8maxltrb.default-1574339924015\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-02-12] FF HKLM-x32\...\Firefox\Extensions: [antiphishing@bullguard] - C:\Program Files\BullGuard Ltd\BullGuard\Files32\Antiphishing\FF\antiphishing@bullguard => niet gevonden FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_330.dll [2020-02-11] (Adobe Inc. -> ) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_330.dll [2020-02-11] (Adobe Inc. -> ) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-09-16] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Bestand niet getekend] FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-09-16] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Bestand niet getekend] FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-02-04] (Adobe Inc. -> Adobe Systems Inc.) ==================== Services (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) S3 BsBackup; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBackup.exe [1607016 2020-02-27] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsFileScan; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFileScanner.exe [833896 2020-03-04] (BullGuard Ltd. -> BullGuard Ltd.) R3 BsHelper; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardHelper.exe [390352 2019-11-07] (BullGuard Ltd -> BullGuard Ltd.) R2 BsMailProxy; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFiltering.exe [5200744 2020-03-04] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsMain; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardCore.exe [2981736 2020-02-27] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsNet; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFirewall.exe [1202024 2020-03-04] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsScanner; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe [395112 2020-03-04] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsSentry; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardSentry.exe [770920 2020-03-04] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsUpdate; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe [504680 2020-02-27] (BullGuard Ltd. -> BullGuard Ltd.) S3 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2019-07-24] (Mixbyte Inc -> Freemake) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-09-27] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-09-27] (NVIDIA Corporation -> NVIDIA Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 ===================== Drivers (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R3 athr; C:\WINDOWS\System32\drivers\athw8x.sys [4233728 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.) R1 BdAgent; C:\WINDOWS\System32\DRIVERS\BdAgent.sys [175128 2020-01-20] (BullGuard LTD -> BullGuard Ltd.) S0 BdBoot; C:\WINDOWS\System32\DRIVERS\BdBoot.sys [29320 2019-08-12] (Microsoft Windows Early Launch Anti-malware Publisher -> BullGuard Ltd.) R0 BdNet; C:\WINDOWS\System32\DRIVERS\BdNet.sys [178760 2019-03-05] (BullGuard LTD -> BullGuard Ltd.) R0 BdSentry; C:\WINDOWS\System32\DRIVERS\BdSentry.sys [155456 2020-01-20] (BullGuard LTD -> BullGuard Ltd.) R1 BdSpy; C:\WINDOWS\System32\DRIVERS\BdSpy.sys [90912 2020-01-20] (BullGuard LTD -> BullGuard Ltd.) R3 BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [610336 2016-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros) R3 int0800; C:\WINDOWS\System32\drivers\flashud.sys [51712 2015-05-07] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvae.inf_amd64_4f5630adbfb837bb\nvlddmkm.sys [15620208 2017-09-28] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-07-23] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69840 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [75600 2019-08-23] (NVIDIA Corporation -> NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-08-01] (Realtek Semiconductor Corp. -> Realtek ) R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [429568 2017-07-13] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation) S3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [45024 2018-04-09] (ExprsVPN LLC -> The OpenVPN Project) R3 Trufos; C:\WINDOWS\System32\DRIVERS\Trufos.sys [611728 2019-10-18] (Bitdefender SRL -> Bitdefender) S3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [200832 2017-11-22] (Oracle Corporation -> Oracle Corporation) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een maand (aangemaakt) =================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2020-03-08 00:48 - 2020-03-08 00:49 - 000023401 _____ C:\Users\flami\Downloads\Addition.txt 2020-03-08 00:44 - 2020-03-08 00:49 - 000018780 _____ C:\Users\flami\Downloads\FRST.txt 2020-03-08 00:44 - 2020-03-08 00:49 - 000000000 ____D C:\FRST 2020-03-08 00:43 - 2020-03-08 00:43 - 002279936 _____ (Farbar) C:\Users\flami\Downloads\FRST64.exe 2020-03-06 00:55 - 2020-03-06 00:55 - 000000000 ____D C:\Users\flami\Downloads\diegomaradona2019720pblurayx264ytsag-swedish-164343 2020-03-06 00:54 - 2020-03-06 00:54 - 000033602 _____ C:\Users\flami\Downloads\diegomaradona2019720pblurayx264ytsag-swedish-164343.zip 2020-03-01 04:57 - 2020-03-01 04:57 - 000000000 ____D C:\Users\flami\Downloads\[4240494]sash - orion 2020-02-28 01:36 - 2020-02-28 01:37 - 066033512 _____ C:\Users\flami\Downloads\[4240494]sash - orion.zip 2020-02-28 01:30 - 2020-02-28 01:30 - 000007694 _____ C:\Users\flami\Downloads\kjqhMGGOZPb_1Awt2Z9SJIw0glx9f1nf0W89Iry4qTkqazbNoIKjxEQyLHb8ZKTanMXbn2qwtE51k6mp-0454kP-1ABVj1G2erSZ6C.webp 2020-02-26 21:45 - 2020-02-26 21:45 - 000000000 ____D C:\Users\flami\Documents\old_status 2020-02-26 21:45 - 2020-02-26 21:45 - 000000000 ____D C:\Users\flami\Documents\66.0.3515.115 2020-02-21 09:47 - 2020-02-21 09:47 - 000000000 ____D C:\Users\flami\Documents\66.0.3515.103 2020-02-20 08:02 - 2020-02-21 05:59 - 000000000 ____D C:\Program Files\Mozilla Firefox 2020-02-16 20:15 - 2020-02-26 22:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2020-02-16 20:15 - 2020-02-26 22:35 - 000000000 ____D C:\Program Files (x86)\Avira 2020-02-16 02:48 - 2020-02-16 02:48 - 000000000 ____D C:\Users\flami\Downloads\USBDiskEjector1.3.0.6 2020-02-16 02:21 - 2020-02-16 02:21 - 000000000 ____D C:\Users\flami\AppData\Local\Apps\2.0 2020-02-14 15:37 - 2020-02-14 15:37 - 000000000 ____D C:\Users\flami\AppData\Local\D3DSCache 2020-02-14 02:24 - 2020-02-14 02:24 - 000028672 _____ C:\BCDbak 2020-02-14 02:21 - 2020-02-16 20:18 - 000000000 ____D C:\Users\flami\Downloads\BootSafe 2020-02-14 01:28 - 2020-02-16 20:18 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2020-02-12 16:00 - 2020-02-03 21:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2020-02-12 16:00 - 2020-02-03 21:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2020-02-12 15:58 - 2020-02-12 15:58 - 000000000 ____D C:\ProgramData\ssh 2020-02-12 15:51 - 2020-02-12 15:51 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2020-02-12 15:51 - 2020-02-12 15:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2020-02-12 15:51 - 2020-02-12 15:51 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2020-02-12 15:51 - 2020-02-12 15:51 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2020-02-12 15:51 - 2020-02-12 15:51 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2020-02-12 15:51 - 2020-02-12 15:51 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2020-02-12 15:51 - 2020-02-12 15:51 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000059221 _____ C:\WINDOWS\system32\srms.dat 2020-02-12 15:51 - 2020-02-12 15:51 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2020-02-12 15:51 - 2020-02-12 15:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll 2020-02-12 15:51 - 2020-02-12 15:51 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2020-02-12 15:51 - 2020-02-12 15:51 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-02-12 15:50 - 2020-02-12 15:50 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2020-02-12 15:50 - 2020-02-12 15:50 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2020-02-12 15:50 - 2020-02-12 15:50 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2020-02-12 15:50 - 2020-02-12 15:50 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2020-02-12 15:50 - 2020-02-12 15:50 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2020-02-12 15:50 - 2020-02-12 15:50 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll 2020-02-12 15:50 - 2020-02-12 15:50 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin 2020-02-12 15:50 - 2020-02-12 15:50 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2020-02-12 15:49 - 2020-02-12 15:49 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2020-02-12 15:49 - 2020-02-12 15:49 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2020-02-12 15:49 - 2020-02-12 15:49 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2020-02-12 15:49 - 2020-02-12 15:49 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2020-02-12 15:49 - 2020-02-12 15:49 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2020-02-12 15:49 - 2020-02-12 15:49 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2020-02-12 15:49 - 2020-02-12 15:49 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2020-02-12 15:49 - 2020-02-12 15:49 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2020-02-12 15:49 - 2020-02-12 15:49 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2020-02-12 15:49 - 2020-02-12 15:49 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2020-02-12 15:49 - 2020-02-12 15:49 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2020-02-12 15:49 - 2020-02-12 15:49 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll 2020-02-12 15:49 - 2020-02-12 15:49 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll 2020-02-12 15:40 - 2020-02-12 15:40 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2020-02-12 15:40 - 2020-02-12 15:40 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2020-02-12 00:50 - 2020-02-12 00:50 - 000000000 ____D C:\WINDOWS\pss 2020-02-11 13:32 - 2020-02-11 13:32 - 006350904 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe ==================== Een maand (gewijzigd) ================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2020-03-08 00:44 - 2019-11-21 14:08 - 000000000 ____D C:\ProgramData\BullGuard 2020-03-08 00:44 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF 2020-03-08 00:43 - 2019-11-21 19:21 - 000000000 ____D C:\Users\flami\AppData\Local\OpenShell 2020-03-08 00:36 - 2017-12-05 08:49 - 000000000 ____D C:\Users\flami\AppData\LocalLow\Mozilla 2020-03-08 00:35 - 2019-11-21 18:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-03-07 23:54 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps 2020-03-07 23:54 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-03-07 23:54 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-03-07 23:13 - 2019-11-26 14:45 - 000000000 ____D C:\Users\flami\AppData\Roaming\vlc 2020-03-07 22:13 - 2017-12-05 12:24 - 000000000 ____D C:\Users\flami\AppData\Local\transmission 2020-03-07 20:19 - 2017-12-05 07:37 - 000000000 ____D C:\ProgramData\NVIDIA 2020-03-07 20:10 - 2019-11-21 18:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-03-06 22:22 - 2019-03-19 05:37 - 000262144 _____ C:\WINDOWS\system32\config\BBI 2020-03-06 22:21 - 2019-11-21 19:21 - 000000000 ____D C:\ProgramData\OpenShell 2020-03-06 01:06 - 2017-12-05 09:02 - 000000000 ____D C:\Users\flami\AppData\Local\CrashDumps 2020-03-04 20:57 - 2019-12-02 21:39 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2020-03-01 04:58 - 2018-04-13 22:27 - 000000000 ____D C:\Users\flami\AppData\Local\Packages 2020-02-26 22:35 - 2020-02-05 23:46 - 000000000 ____D C:\ProgramData\Avira 2020-02-26 21:45 - 2020-01-13 17:02 - 000004531 _____ C:\Users\flami\Documents\installation_status.json 2020-02-26 21:45 - 2020-01-13 17:02 - 000000651 _____ C:\Users\flami\Documents\installer_prefs.json 2020-02-26 21:45 - 2020-01-13 17:02 - 000000057 _____ C:\Users\flami\Documents\pref_default_overrides 2020-02-26 21:45 - 2020-01-13 17:02 - 000000000 ____D C:\Users\flami\Documents\Assets 2020-02-24 19:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2020-02-24 11:21 - 2019-11-21 18:57 - 001771832 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-02-24 11:21 - 2019-03-19 13:33 - 000786140 _____ C:\WINDOWS\system32\perfh013.dat 2020-02-24 11:21 - 2019-03-19 13:33 - 000154170 _____ C:\WINDOWS\system32\perfc013.dat 2020-02-24 08:20 - 2020-01-13 17:02 - 001532952 _____ (Opera Software) C:\Users\flami\Documents\launcher.exe 2020-02-21 09:47 - 2020-01-29 23:21 - 000000651 _____ C:\Users\flami\Documents\installer_prefs.json.backup 2020-02-21 05:59 - 2017-12-05 08:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2020-02-20 14:05 - 2017-12-05 08:48 - 000000965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2020-02-18 22:47 - 2019-12-31 19:43 - 000000000 ____D C:\Users\flami\Downloads\[4234134]byhzibekitten - Scarlet Gem 2020-02-18 08:34 - 2020-01-13 17:02 - 001532952 _____ (Opera Software) C:\Users\flami\Documents\launcher.exe.1582749919.old 2020-02-17 13:08 - 2017-12-20 01:50 - 000000000 ____D C:\Users\flami\AppData\Local\ElevatedDiagnostics 2020-02-14 02:31 - 2017-12-05 07:31 - 000000000 __RHD C:\Users\Public\AccountPictures 2020-02-14 01:38 - 2020-02-06 18:49 - 000000000 ____D C:\Program Files\LockHunter 2020-02-13 20:37 - 2020-01-28 19:33 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2020-02-13 19:28 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2020-02-13 19:28 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-02-12 16:01 - 2018-04-13 22:42 - 000000000 ___RD C:\Users\flami\3D Objects 2020-02-12 16:00 - 2019-11-21 18:43 - 000257976 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\PrintDialog 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences 2020-02-12 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-02-12 15:58 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\servicing 2020-02-12 15:56 - 2017-12-05 10:40 - 000000000 ____D C:\WINDOWS\system32\MRT 2020-02-12 15:54 - 2017-12-05 10:38 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2020-02-12 15:50 - 2017-12-05 07:20 - 000410834 __RSH C:\bootmgr 2020-02-11 13:33 - 2019-11-21 22:34 - 000004656 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier 2020-02-11 13:32 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2020-02-11 13:32 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Macromed 2020-02-08 19:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\Registration ==================== Bestanden in de root van sommige mappen ======== 2019-11-21 20:06 - 2019-11-21 20:06 - 000000017 _____ () C:\Users\flami\AppData\Local\resmon.resmoncfg ==================== SigCheck ============================ (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) ==================== Einde van FRST.txt ========================