Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 29-03-2020 Gestart door rita (Beheerder) op ERWIN (Packard Bell ENLE11BZ) (02-04-2020 11:23:43) Gestart vanaf C:\Users\rita\Desktop Geladen Profielen: rita (Beschikbare Profielen: rita & Gast) Platform: Windows 10 Home Versie 1909 18363.752 (X64) Taal: Nederlands (Nederland) Standaardbrowser: Edge Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.) (Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Advanced Micro Devices, Inc. -> ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Advanced Micro Devices, Inc.) [Bestand niet getekend] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidMonitorSvc.exe (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc. -> Dritek System INC.) C:\Windows\RfBtnSvc64.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe (Facebook, Inc. -> Facebook Inc.) C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> © 2015 Microsoft Corporation) C:\Users\rita\AppData\Local\Microsoft\BingSvc\BingSvc.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\FileCoAuth.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19081.28230.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12624.20368.0_x64__8wekyb3d8bbwe\HxOutlook.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12624.20368.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12003.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\usocoreworker.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\NisSrv.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Qualcomm Atheros -> Atheros) [Bestand niet getekend] C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe (Reason Software Company Inc. -> Reason Software Company Inc.) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe (Reason Software Company Inc. -> Reason Software Company Inc.) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0\Spotify.exe ==================== Register (gefilterd) =================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [706440 2015-09-28] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [309560 2020-03-22] (Apple Inc. -> Apple Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-02-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [76600 2020-03-21] (Apple Inc. -> Apple Inc.) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [6261248 2020-03-19] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646160 2019-12-11] (Oracle America, Inc. -> Oracle Corporation) HKLM-x32\...\Run: [TeamsMachineUninstallerLocalAppData] => C:\Users\rita\AppData\Local\Microsoft\Teams\Update.exe [2336912 2020-04-02] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKLM-x32\...\Run: [TeamsMachineUninstallerProgramData] => %ProgramData%\Microsoft\Teams\Update.exe --uninstall --msiUninstall --source=default HKU\S-1-5-21-455634102-3971962441-1493714179-1001\...\Run: [Facebook Update] => C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-10-19] (Facebook, Inc. -> Facebook Inc.) HKU\S-1-5-21-455634102-3971962441-1493714179-1001\...\Run: [HP Officejet 4620 series (NET)] => C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.) HKU\S-1-5-21-455634102-3971962441-1493714179-1001\...\Run: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe [1579368 2020-03-17] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-455634102-3971962441-1493714179-1001\...\Run: [BingSvc] => C:\Users\rita\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-455634102-3971962441-1493714179-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-03-22] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-455634102-3971962441-1493714179-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22245560 2020-03-19] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-455634102-3971962441-1493714179-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91584872 2020-03-12] (Skype Software Sarl -> Skype Technologies S.A.) HKU\S-1-5-21-455634102-3971962441-1493714179-1001\...\Policies\Explorer: [] HKU\S-1-5-21-455634102-3971962441-1493714179-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\DEAARD~1.SCR [10638336 2013-10-22] () [Bestand niet getekend] Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter" FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrictie <==== AANDACHT ==================== Geplande Taken (gefilterd) ============ (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {05C020B1-46CA-4BA7-80E2-89A72020DA66} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-455634102-3971962441-1493714179-1001Core => C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-10-19] (Facebook, Inc. -> Facebook Inc.) Task: {0DC0DAD2-F84F-429D-B085-411AE7CDE2D5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61} Task: {1B407A2D-AB73-46DF-B1E5-742A00622E5B} - System32\Tasks\{7E363E3F-BDFC-43DD-B474-8063D18A6AF8} => C:\WINDOWS\system32\pcalua.exe -a "C:\Users\rita\SkyDrive\Documenten\Education 2.5.4.9380\setup.exe" -d "C:\Users\rita\SkyDrive\Documenten\Education 2.5.4.9380" Task: {287EB61E-849D-44F1-BF41-56B2A8081F95} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1} Task: {2B033C1F-C2FC-4613-9997-7171D84F986F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6154584 2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Task: {2FB6E6E5-D882-4B7D-A0AA-34006B5F3421} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158544 2020-03-16] (Microsoft Corporation -> Microsoft Corporation) Task: {32ACD327-9160-43CE-A38E-ECED9E0D4D62} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA} Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe Task: {47238C0A-AE41-47E9-9C04-D88C26D800F6} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_28_0_0_137_pepper.exe [1332736 2018-01-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated) Task: {494BA159-6DDE-4B42-B5F7-754AC16BAE11} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646160 2019-12-11] (Oracle America, Inc. -> Oracle Corporation) Task: {4BE70922-CF3B-4EBD-A68B-5A444FC63DE8} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158544 2020-03-16] (Microsoft Corporation -> Microsoft Corporation) Task: {5567A2AB-C72E-496A-9057-130928656A87} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {567CDFCD-D4CA-412D-8F72-4C36B5B4661C} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [32256 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Task: {5A8EBA1B-45C1-4955-8351-8DB4C3836130} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {5B881B55-9289-4553-892B-1DFFCED40768} - System32\Tasks\{2522551F-65FB-4163-969D-21A79F1EE7AC} => "c:\windows\system32\launchwinapp.exe" hxxp://ui.skype.com/ui/0/7.7.64.103/nl/go/help.faq.installer?LastError=1618 Task: {5E2C0485-BA38-40E3-8712-F0BC744CF49D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-455634102-3971962441-1493714179-1001UA => C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-10-19] (Facebook, Inc. -> Facebook Inc.) Task: {67EBACFF-E126-4F7F-8CF7-22A49AE52FBA} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => C:\Program Files\rempl\remsh.exe Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Task: {6EAE309D-635B-4B16-9334-96AD9FD63AC5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24600440 2020-03-05] (Microsoft Corporation -> Microsoft Corporation) Task: {6FDFC4E5-03E9-4A02-8EC8-70FF6C202C54} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_330_Plugin.exe [1458232 2020-02-25] (Adobe Inc. -> Adobe) Task: {73157B7C-A0A9-4CAC-814D-DC898601CD19} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6154584 2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Task: {75D9C616-4257-42BC-BA55-E96FD1DA1809} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [121542864 2020-03-10] (Microsoft Windows -> Microsoft Corporation) Task: {7B857988-3067-4E13-8891-998F430972F7} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316} Task: {7F8CC220-EA29-42CA-A450-E5C1DFD40C95} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-02-25] (Adobe Inc. -> Adobe) Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE} Task: {8FBD9F28-45C4-411D-A324-2D755D9E3075} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-11] (Dropbox, Inc -> Dropbox, Inc.) Task: {9768ABD2-EB67-498E-A669-15A536AF817A} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969} Task: {979E233F-8401-4BDE-80A2-1AD0686EB2A2} - System32\Tasks\HPCustParticipation HP Officejet 4620 series => C:\Program Files\HP\HP Officejet 4620 series\Bin\HPCustPartic.exe [4119656 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.) Task: {9925C05F-39EA-412D-BB9C-80B949836062} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe Task: {AC777BBF-8F15-4C92-8887-D33F17AE7ACA} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2038568 2020-03-16] (Microsoft Corporation -> Microsoft Corporation) Task: {BD5B7706-67C5-4293-BFFD-E27F020F0A18} - System32\Tasks\HP-Online updateprogramma => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard) Task: {C388FFC3-7916-4AAB-8478-EF744770D6B6} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-03-19] (Piriform Software Ltd -> Piriform Software Ltd) Task: {C415FE0E-DDCB-44E0-A459-B9164B72424B} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E} Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371} Task: {D976D0A1-D641-4999-ACC8-80842506A540} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-11] (Dropbox, Inc -> Dropbox, Inc.) Task: {D9AE9519-6836-4BE4-A532-7C012DA00A34} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24600440 2020-03-05] (Microsoft Corporation -> Microsoft Corporation) Task: {EEF40106-AA35-4C99-83EE-6DFDB9469A66} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {F007DE84-6DE8-4FF0-B204-10DB58127E11} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {F0ACE753-18CB-4641-A740-2481347B32E7} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [2729320 2020-03-17] (Microsoft Corporation -> Microsoft Corporation) Task: {F28BBD72-BF27-4670-9FE7-7A0B3BB7BDF8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.) Task: {F4340BCB-9E1F-4F93-B8AA-992EB58278FA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18227896 2020-03-19] (Piriform Software Ltd -> Piriform Software Ltd) Task: {FF1805BB-CCFD-4A78-976D-1B2C40481F8D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems) (Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-455634102-3971962441-1493714179-1001Core.job => C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-455634102-3971962441-1493714179-1001UA.job => C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.) Hosts: Er is meer dan één item in Hosts. Zie Hosts deel van Addition.txt Tcpip\Parameters: [DhcpNameServer] 195.130.130.5 195.130.131.5 Tcpip\..\Interfaces\{a57513ea-3fa5-4418-8b52-f88f33c94c7a}: [DhcpNameServer] 10.104.7.160 10.123.172.17 Tcpip\..\Interfaces\{ccef640c-e12a-4f3e-9947-ec0eb061d6aa}: [DhcpNameServer] 195.130.130.5 195.130.131.5 Internet Explorer: ================== HKU\S-1-5-21-455634102-3971962441-1493714179-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SL5M&ocid=SL5MDHP&osmkt=nl-be HKU\S-1-5-21-455634102-3971962441-1493714179-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.com/ hxxp://www.kaagent.be/ SearchScopes: HKU\S-1-5-21-455634102-3971962441-1493714179-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms} BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-02-19] (Microsoft Corporation -> Microsoft Corporation) BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH -> Eyeo GmbH) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-02-19] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\ssv.dll [2020-01-17] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-01-17] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH -> Eyeo GmbH) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation) Edge: ====== DownloadDir: C:\Users\rita\Downloads Edge Notifications: HKU\S-1-5-21-455634102-3971962441-1493714179-1001 -> hxxps://www.facebook.com FireFox: ======== FF DefaultProfile: up9830xo.default-1452197924475-1555115266755 FF ProfilePath: C:\Users\rita\AppData\Roaming\Mozilla\Firefox\Profiles\up9830xo.default-1452197924475-1555115266755 [2020-04-02] FF Extension: (eID België) - C:\Users\rita\AppData\Roaming\Mozilla\Firefox\Profiles\up9830xo.default-1452197924475-1555115266755\Extensions\belgiumeid@eid.belgium.be.xpi [2019-04-13] FF Extension: (Avast SafePrice | Prijsvergelijking, aanbiedingen, waardebonnen) - C:\Users\rita\AppData\Roaming\Mozilla\Firefox\Profiles\up9830xo.default-1452197924475-1555115266755\Extensions\sp@avast.com.xpi [2019-02-08] FF Extension: (Avast Online Security) - C:\Users\rita\AppData\Roaming\Mozilla\Firefox\Profiles\up9830xo.default-1452197924475-1555115266755\Extensions\wrc@avast.com.xpi [2020-03-22] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_330.dll [2020-02-25] (Adobe Inc. -> ) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_330.dll [2020-02-25] (Adobe Inc. -> ) FF Plugin-x32: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-01-17] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-01-17] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-02-19] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\rita\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-02-04] (Visan Industries -> RocketLife, LLP) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-03-06] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-455634102-3971962441-1493714179-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\rita\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Software Sarl -> Skype Limited) FF Plugin HKU\S-1-5-21-455634102-3971962441-1493714179-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\rita\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-01-26] (Unity Technologies ApS -> Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Users\rita\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2014-10-13] Chrome: ======= CHR Profile: C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default [2020-03-31] CHR Extension: (Presentaties) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-03-13] CHR Extension: (Documenten) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-03-13] CHR Extension: (Google Drive) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-03-13] CHR Extension: (YouTube) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-03-13] CHR Extension: (Adobe Acrobat) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-03-30] CHR Extension: (Avast SafePrice | Prijsvergelijking, aanbiedingen, waardebonnen) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-06-01] CHR Extension: (Spreadsheets) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-03-13] CHR Extension: (Offline Documenten) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-12-19] CHR Extension: (Avast Online Security) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-06-01] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-12-19] CHR Extension: (Gmail) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-01] CHR Extension: (Chrome Media Router) - C:\Users\rita\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-06-01] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] ==================== Services (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [244736 2015-02-28] (Microsoft Windows Hardware Compatibility Publisher -> AMD) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-02-28] (Advanced Micro Devices, Inc.) [Bestand niet getekend] R2 ApHidMonitorService; C:\Program Files\Apoint2K\HidMonitorSvc.exe [104840 2015-09-28] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-03-12] (Apple Inc. -> Apple Inc.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11091224 2020-03-05] (Microsoft Corporation -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-11] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-11] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44552 2020-03-19] (Dropbox, Inc -> Dropbox, Inc.) S3 FileSyncHelper; C:\Program Files (x86)\Microsoft OneDrive\FileSyncHelper.exe [2141544 2020-03-17] (Microsoft Corporation -> Microsoft Corporation) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company -> Hewlett-Packard Company) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6933272 2020-03-22] (Malwarebytes Inc -> Malwarebytes) S3 OneDrive Updater Service; C:\Program Files (x86)\Microsoft OneDrive\OneDriveUpdaterService.exe [2498920 2020-03-17] (Microsoft Corporation -> Microsoft Corporation) R2 RfButtonDriverService; C:\WINDOWS\RfBtnSvc64.exe [93296 2020-02-07] (Dritek System Inc. -> Dritek System INC.) R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [297240 2018-04-13] (Reason Software Company Inc. -> Reason Software Company Inc.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\NisSrv.exe [3294680 2020-03-30] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MsMpEng.exe [103168 2020-03-30] (Microsoft Windows Publisher -> Microsoft Corporation) R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe [81536 2012-08-01] (Qualcomm Atheros -> Atheros) [Bestand niet getekend] ===================== Drivers (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [81000 2017-03-27] (Microsoft Windows Hardware Compatibility Publisher -> ) S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [20300800 2015-02-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [611328 2015-02-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2018-09-05] (AVAST Software s.r.o. -> The OpenVPN Project) R3 athr; C:\WINDOWS\System32\drivers\athw8x.sys [4233728 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.) S3 AtiDCM; C:\AMD\WU-CCC2\ccc2_install\Support64\atdcm64a.sys [28416 2014-03-13] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) S1 ccSet_NARA; C:\WINDOWS\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation -> Symantec Corporation) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R3 L1C; C:\WINDOWS\System32\drivers\L1C63x64.sys [121344 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Co., Ltd.) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [216544 2019-12-03] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-03-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-04-02] (Malwarebytes Inc -> Malwarebytes) R3 Ps2Kb2Hid; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [26736 2013-03-22] (Dritek System Inc. -> Dritek System Inc.) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) S3 ssudobex; C:\WINDOWS\system32\DRIVERS\ssudobex.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R3 usbfilter; C:\WINDOWS\system32\DRIVERS\usbfilter.sys [57000 2012-06-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-03-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [391392 2020-03-30] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [59104 2020-03-30] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een maand (aangemaakt) =================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2020-04-02 11:23 - 2020-04-02 11:30 - 000037426 _____ C:\Users\rita\Desktop\FRST.txt 2020-04-02 00:04 - 2020-04-02 00:04 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2020-04-01 20:54 - 2020-04-01 22:31 - 000000000 ____D C:\Users\rita\Downloads\Ich freue mich, Sie kennenzulernen 2020-04-01 20:53 - 2020-04-01 20:53 - 001625380 _____ C:\Users\rita\Downloads\Ich freue mich, Sie kennenzulernen.zip 2020-04-01 09:42 - 2020-04-01 09:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2020-04-01 09:39 - 2020-04-01 09:39 - 000001828 _____ C:\Users\Public\Desktop\iTunes.lnk 2020-04-01 09:39 - 2020-04-01 09:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2020-03-30 22:56 - 2020-04-02 11:28 - 000000000 ____D C:\FRST 2020-03-30 22:52 - 2020-03-30 22:53 - 002280448 _____ (Farbar) C:\Users\rita\Desktop\FRST64.exe 2020-03-30 15:21 - 2020-03-30 15:21 - 000000000 ____D C:\Users\rita\AppData\Local\SlimWare Utilities Inc 2020-03-30 14:32 - 2020-03-30 14:32 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2020-03-30 14:32 - 2020-03-30 14:32 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe 2020-03-30 14:32 - 2020-03-30 14:32 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll 2020-03-30 14:32 - 2020-03-30 14:32 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll 2020-03-30 14:31 - 2020-03-30 14:32 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 022636544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 018027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 001545216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2020-03-30 14:31 - 2020-03-30 14:31 - 001397560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-03-30 14:31 - 2020-03-30 14:31 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2020-03-30 14:31 - 2020-03-30 14:31 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-03-30 14:31 - 2020-03-30 14:31 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2020-03-30 14:31 - 2020-03-30 14:31 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2020-03-30 14:31 - 2020-03-30 14:31 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2020-03-30 14:31 - 2020-03-30 14:31 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2020-03-30 14:31 - 2020-03-30 14:31 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000093712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasacct.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2020-03-30 14:31 - 2020-03-30 14:31 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasacct.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\iaspolcy.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ias.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2020-03-30 14:31 - 2020-03-30 14:31 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 014818816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 009930552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-03-30 14:30 - 2020-03-30 14:30 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 006525424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 003799552 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 003753472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2020-03-30 14:30 - 2020-03-30 14:30 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-03-30 14:30 - 2020-03-30 14:30 - 002768440 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 002087168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001477112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2020-03-30 14:30 - 2020-03-30 14:30 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001245184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001243648 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 001055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000993280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000912896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000785920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000673704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000628408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000618296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000538160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000515600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000513576 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000487784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2020-03-30 14:30 - 2020-03-30 14:30 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2020-03-30 14:30 - 2020-03-30 14:30 - 000415760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2020-03-30 14:30 - 2020-03-30 14:30 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2020-03-30 14:30 - 2020-03-30 14:30 - 000277864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2020-03-30 14:30 - 2020-03-30 14:30 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000251704 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000178192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2020-03-30 14:30 - 2020-03-30 14:30 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000147696 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe 2020-03-30 14:30 - 2020-03-30 14:30 - 000123952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000089536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000066624 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000050544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe 2020-03-30 14:30 - 2020-03-30 14:30 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2020-03-30 14:30 - 2020-03-30 14:30 - 000033080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hwpolicy.sys 2020-03-30 14:30 - 2020-03-30 14:30 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprtPS.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe 2020-03-30 14:30 - 2020-03-30 14:30 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll 2020-03-30 14:30 - 2020-03-30 14:30 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 006168064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 004563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 003728384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-03-30 14:29 - 2020-03-30 14:29 - 003547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 002871608 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 001945600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-03-30 14:29 - 2020-03-30 14:29 - 001726264 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 001512832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 001427456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 001378528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 001261808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 001136128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 001011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000915192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000811320 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000759272 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000684560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000638480 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2020-03-30 14:29 - 2020-03-30 14:29 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000459688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000142544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000115120 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe 2020-03-30 14:29 - 2020-03-30 14:29 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll 2020-03-30 14:29 - 2020-03-30 14:29 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 007849216 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 003586872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-03-30 14:28 - 2020-03-30 14:28 - 003109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 001497600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 000874512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2020-03-30 14:28 - 2020-03-30 14:28 - 000524264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2020-03-30 14:28 - 2020-03-30 14:28 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 000231912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2020-03-30 14:28 - 2020-03-30 14:28 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2020-03-30 14:28 - 2020-03-30 14:28 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe 2020-03-30 14:28 - 2020-03-30 14:28 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll 2020-03-30 14:27 - 2020-03-30 14:28 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 017790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 003708928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 002143232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 002126144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 002114560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 001960448 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 001762816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 001413704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 001263856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2020-03-30 14:27 - 2020-03-30 14:27 - 001127424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 001071616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000879616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000637240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2020-03-30 14:27 - 2020-03-30 14:27 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2020-03-30 14:27 - 2020-03-30 14:27 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000416016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000297272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2020-03-30 14:27 - 2020-03-30 14:27 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe 2020-03-30 14:27 - 2020-03-30 14:27 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2020-03-30 14:27 - 2020-03-30 14:27 - 000193848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2020-03-30 14:27 - 2020-03-30 14:27 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2020-03-30 14:27 - 2020-03-30 14:27 - 000151352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys 2020-03-30 14:27 - 2020-03-30 14:27 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe 2020-03-30 14:27 - 2020-03-30 14:27 - 000059192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2020-03-30 14:27 - 2020-03-30 14:27 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcProxyStubs.dll 2020-03-30 14:27 - 2020-03-30 14:27 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys 2020-03-30 14:26 - 2020-03-30 14:27 - 000437560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2020-03-30 14:26 - 2020-03-30 14:26 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2020-03-30 14:26 - 2020-03-30 14:26 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\flpydisk.sys 2020-03-30 14:26 - 2020-03-30 14:26 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sfloppy.sys 2020-03-30 13:19 - 2020-03-30 13:19 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2020-03-30 12:45 - 2020-03-30 12:45 - 000000000 ____D C:\ProgramData\ssh 2020-03-30 12:25 - 2020-03-30 12:25 - 011607552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2020-03-30 12:25 - 2020-03-30 12:25 - 009711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2020-03-30 12:25 - 2020-03-30 12:25 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2020-03-30 12:25 - 2020-03-30 12:25 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2020-03-30 12:25 - 2020-03-30 12:25 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2020-03-30 12:25 - 2020-03-30 12:25 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2020-03-30 12:25 - 2020-03-30 12:25 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe 2020-03-30 12:24 - 2020-03-30 12:24 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 002315680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 001867816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 001555904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 001417976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 001108040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 000757632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2020-03-30 12:24 - 2020-03-30 12:24 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacEncoder.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 006285312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 005911040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 003819520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 003488768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 003243296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 002956688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2020-03-30 12:23 - 2020-03-30 12:23 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 002072664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 001770552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 001490640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 001282944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 001106944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbc32.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000571392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2020-03-30 12:23 - 2020-03-30 12:23 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2020-03-30 12:23 - 2020-03-30 12:23 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000363840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacEncoder.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2020-03-30 12:23 - 2020-03-30 12:23 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2020-03-30 12:23 - 2020-03-30 12:23 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe 2020-03-30 12:23 - 2020-03-30 12:23 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe 2020-03-30 12:23 - 2020-03-30 12:23 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe 2020-03-30 12:23 - 2020-03-30 12:23 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll 2020-03-30 12:23 - 2020-03-30 12:23 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 025900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 007755776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 004855808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 004580352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 004348408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2020-03-30 12:22 - 2020-03-30 12:22 - 002224952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 002180408 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 002031104 _____ C:\WINDOWS\system32\rdpnano.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001283600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2020-03-30 12:22 - 2020-03-30 12:22 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001218632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001088000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbc32.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2020-03-30 12:22 - 2020-03-30 12:22 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000432256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2020-03-30 12:22 - 2020-03-30 12:22 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000059221 _____ C:\WINDOWS\system32\srms.dat 2020-03-30 12:22 - 2020-03-30 12:22 - 000042296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2020-03-30 12:22 - 2020-03-30 12:22 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll 2020-03-30 12:22 - 2020-03-30 12:22 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin 2020-03-30 12:22 - 2020-03-30 12:22 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin 2020-03-30 12:21 - 2020-03-30 12:21 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 002259872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 001684992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 001413632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 001264128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 001190912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 001031680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 001020032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 001007672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000935040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000892696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000769552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000136328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Drivers\afunix.sys 2020-03-30 12:21 - 2020-03-30 12:21 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msauserext.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchTM.exe 2020-03-30 12:21 - 2020-03-30 12:21 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll 2020-03-30 12:21 - 2020-03-30 12:21 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2020-03-30 12:20 - 2020-03-30 12:20 - 006084344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 005112832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 005040640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 003971808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 002875904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 002773568 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 002740736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directml.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 002307584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 002021888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001985104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001729024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001688064 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001665416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001647072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001484600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 001097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2020-03-30 12:20 - 2020-03-30 12:20 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000776488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000748032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000734720 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000627216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000551824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000526848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000478792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2020-03-30 12:20 - 2020-03-30 12:20 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2020-03-30 12:20 - 2020-03-30 12:20 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000213984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys 2020-03-30 12:20 - 2020-03-30 12:20 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys 2020-03-30 12:20 - 2020-03-30 12:20 - 000133944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000120560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2020-03-30 12:20 - 2020-03-30 12:20 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GraphicsCapture.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000102760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profapi.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000068408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmRes.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000042336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afunix.sys 2020-03-30 12:20 - 2020-03-30 12:20 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msauserext.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe 2020-03-30 12:20 - 2020-03-30 12:20 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll 2020-03-30 12:20 - 2020-03-30 12:20 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2020-03-30 12:19 - 2020-03-30 12:19 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000929144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2020-03-30 12:19 - 2020-03-30 12:19 - 000898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2020-03-30 12:19 - 2020-03-30 12:19 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2020-03-30 12:19 - 2020-03-30 12:19 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2020-03-30 12:19 - 2020-03-30 12:19 - 000605896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2020-03-30 12:19 - 2020-03-30 12:19 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2020-03-30 12:19 - 2020-03-30 12:19 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000320312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2020-03-30 12:19 - 2020-03-30 12:19 - 000260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2020-03-30 12:19 - 2020-03-30 12:19 - 000165504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000164776 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\profapi.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000098104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys 2020-03-30 12:19 - 2020-03-30 12:19 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe 2020-03-30 12:19 - 2020-03-30 12:19 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2020-03-30 12:19 - 2020-03-30 12:19 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 006436352 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 003371720 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 002698040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2020-03-30 12:18 - 2020-03-30 12:18 - 001999952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001743888 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001396152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2020-03-30 12:18 - 2020-03-30 12:18 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001330952 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000983896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000877232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000796904 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000741392 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000636848 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2020-03-30 12:18 - 2020-03-30 12:18 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2020-03-30 12:18 - 2020-03-30 12:18 - 000353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000248064 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000234984 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000221200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2020-03-30 12:18 - 2020-03-30 12:18 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000120048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000089616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2020-03-30 12:18 - 2020-03-30 12:18 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2020-03-30 12:18 - 2020-03-30 12:18 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe 2020-03-30 12:18 - 2020-03-30 12:18 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 007905784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 004471296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 004048896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 003260928 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 002453504 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001972536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2020-03-30 12:17 - 2020-03-30 12:17 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001823232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001764336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001657120 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001609216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 001182448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 001071184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000945384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000642216 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000522384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000201744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2020-03-30 12:17 - 2020-03-30 12:17 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000146712 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\GraphicsCapture.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Taskbar.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2020-03-30 12:17 - 2020-03-30 12:17 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wci.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll 2020-03-30 12:17 - 2020-03-30 12:17 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe 2020-03-30 12:17 - 2020-03-30 12:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll 2020-03-30 12:16 - 2020-03-30 12:17 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 003143168 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 002715648 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-03-30 12:16 - 2020-03-30 12:16 - 002522112 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 002474496 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 001581056 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 000914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 000802304 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2020-03-30 12:16 - 2020-03-30 12:16 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 004622280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 002808832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 002289152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 002157056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 001180160 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 001092096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000833616 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2020-03-30 12:15 - 2020-03-30 12:15 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000429880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2020-03-30 12:15 - 2020-03-30 12:15 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Acx01000.sys 2020-03-30 12:15 - 2020-03-30 12:15 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000180232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2020-03-30 12:15 - 2020-03-30 12:15 - 000174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000131896 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 000067112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000066336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlrmdr.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmRes.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAProfileNotificationHandler.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000048256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000029712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tbs.sys 2020-03-30 12:15 - 2020-03-30 12:15 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilotdiag.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpnotify.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe 2020-03-30 12:15 - 2020-03-30 12:15 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll 2020-03-30 12:15 - 2020-03-30 12:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUserRes.dll 2020-03-30 12:14 - 2020-03-30 12:14 - 001428992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2020-03-30 12:14 - 2020-03-30 12:14 - 000355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000306696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000250896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000224056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000222520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000208696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000183608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000141840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2020-03-30 12:14 - 2020-03-30 12:14 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000056632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciidex.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthMini.SYS 2020-03-30 12:14 - 2020-03-30 12:14 - 000030008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\atapi.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll 2020-03-30 12:14 - 2020-03-30 12:14 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000019984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelide.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000016912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciide.sys 2020-03-30 12:14 - 2020-03-30 12:14 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serscan.sys 2020-03-30 11:44 - 2020-03-30 11:44 - 005970768 _____ (AVAST Software) C:\Users\rita\Downloads\avastclear10r4.exe 2020-03-30 11:24 - 2020-03-30 11:24 - 011441568 _____ (AVAST Software) C:\Users\rita\Downloads\avastclear.exe 2020-03-27 17:43 - 2020-03-27 17:43 - 000002263 _____ C:\Users\rita\Documents\HD Tune 2.55 HD Utility.txt 2020-03-27 16:34 - 2020-03-27 16:34 - 000000000 ___HD C:\$SysReset 2020-03-26 17:59 - 2020-03-26 18:00 - 002931848 _____ (Crystal Dew World ) C:\Users\rita\Downloads\CrystalDiskMark6_0_2.exe 2020-03-26 17:57 - 2020-03-26 17:57 - 000642632 _____ (EFD Software ) C:\Users\rita\Downloads\hdtune_255.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000000000 ____D C:\Users\rita\Downloads\1.08.6.9 PHE-Designer HVAC LIGHT 2020-03-25 16:05 - 2020-03-25 16:05 - 002886947 _____ C:\Users\rita\Downloads\1.08.6.9 PHE-Designer HVAC LIGHT.zip 2020-03-24 00:18 - 2020-03-24 00:18 - 000000080 ___SH C:\bootTel.dat 2020-03-23 23:15 - 2020-03-23 23:17 - 000000000 ____D C:\$Windows.~BT 2020-03-23 22:19 - 2020-03-23 22:19 - 000284222 _____ C:\Users\rita\Downloads\kiss.MP4 2020-03-23 19:00 - 2020-03-23 19:00 - 000002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2020-03-23 15:10 - 2020-03-23 15:10 - 000002506 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype voor Bedrijven.lnk 2020-03-23 15:10 - 2020-03-23 15:10 - 000002484 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2020-03-23 15:10 - 2020-03-23 15:10 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2020-03-23 15:10 - 2020-03-23 15:10 - 000002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2020-03-23 15:10 - 2020-03-23 15:10 - 000002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2020-03-23 15:10 - 2020-03-23 15:10 - 000002417 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2020-03-23 15:10 - 2020-03-23 15:10 - 000002403 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2020-03-23 15:10 - 2020-03-23 15:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office-hulpprogramma's 2020-03-23 14:25 - 2020-03-23 14:25 - 005544224 _____ (Microsoft Corporation) C:\Users\rita\Downloads\Setup.Def.en-us_O365BusinessRetail_05751614-d07f-48e5-95fc-6bd9a01e7d14_TX_DB_Platform_def_b_32_.exe 2020-03-22 22:55 - 2020-03-22 22:55 - 000000000 ____D C:\RegBackup 2020-03-22 22:41 - 2020-03-22 22:41 - 038949480 _____ (Tweaking.com) C:\Users\rita\Downloads\tweaking.com_windows_repair_aio_setup.exe 2020-03-20 10:18 - 2020-03-20 10:18 - 000000000 ____D C:\Users\rita\AppData\Roaming\Microsoft Teams 2020-03-20 10:11 - 2020-04-02 09:14 - 000000000 ____D C:\Users\rita\AppData\Local\SquirrelTemp 2020-03-20 10:07 - 2020-03-20 10:10 - 099885304 _____ (Microsoft Corporation) C:\Users\rita\Downloads\Teams_windows_x64_s_8D7CCA5E80BB3DC-2-0_.exe 2020-03-20 08:58 - 2020-03-20 08:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2020-03-19 20:19 - 2020-03-19 20:19 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2020-03-19 20:19 - 2020-03-19 20:19 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2020-03-19 20:19 - 2020-03-19 20:19 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2020-03-19 20:19 - 2020-03-19 20:19 - 000044552 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2020-03-16 00:46 - 2020-02-11 06:48 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2020-03-16 00:46 - 2020-02-11 06:37 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2020-03-13 15:24 - 2020-03-25 12:36 - 000000000 ____D C:\Users\rita\Documents\mariya 2020-03-04 22:41 - 2020-03-04 22:41 - 000067623 _____ C:\Users\rita\Downloads\Bevestiging-contractaanvraag ==================== Een maand (gewijzigd) ================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2020-04-02 11:16 - 2016-11-19 16:57 - 000000000 ____D C:\Users\rita\AppData\LocalLow\Mozilla 2020-04-02 11:13 - 2019-07-06 01:03 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-04-02 09:52 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-04-02 09:05 - 2016-10-19 19:44 - 000000000 ____D C:\Users\rita\AppData\Local\CrashDumps 2020-04-02 08:58 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps 2020-04-02 08:58 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-04-02 07:02 - 2013-10-20 20:20 - 000000000 ___RD C:\Users\rita\SkyDrive 2020-04-02 00:03 - 2019-07-06 02:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-04-02 00:02 - 2019-03-19 06:37 - 001048576 _____ C:\WINDOWS\system32\config\BBI 2020-04-01 09:39 - 2015-02-07 14:24 - 000000000 ____D C:\Program Files\iTunes 2020-04-01 09:39 - 2015-02-07 14:24 - 000000000 ____D C:\Program Files\iPod 2020-04-01 09:10 - 2014-01-17 18:00 - 000000000 ____D C:\ProgramData\BrytonBridge 2020-04-01 09:10 - 2014-01-17 18:00 - 000000000 ____D C:\Program Files (x86)\BrytonBridge2 2020-03-31 19:53 - 2019-07-06 02:21 - 000004178 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{F7D9DAEC-2F1E-45EF-AB58-4774D849598F} 2020-03-31 19:49 - 2018-02-18 21:00 - 000000082 _____ C:\WINDOWS\SysWOW64\winsevr.dat 2020-03-31 16:49 - 2013-08-31 11:40 - 000000000 ____D C:\Program Files (x86)\Google 2020-03-31 16:36 - 2018-09-07 12:59 - 000001391 _____ C:\Users\Public\Desktop\Skype.lnk 2020-03-31 16:36 - 2018-09-07 12:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2020-03-31 13:05 - 2013-10-08 21:56 - 000000000 ____D C:\Users\rita\AppData\LocalLow\Temp 2020-03-30 22:29 - 2019-07-06 01:38 - 001771832 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-03-30 22:29 - 2019-03-19 14:33 - 000787394 _____ C:\WINDOWS\system32\perfh013.dat 2020-03-30 22:29 - 2019-03-19 14:33 - 000154388 _____ C:\WINDOWS\system32\perfc013.dat 2020-03-30 22:29 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF 2020-03-30 16:37 - 2019-08-28 18:06 - 000000000 ____D C:\WINDOWS\Minidump 2020-03-30 15:36 - 2018-02-17 06:59 - 000000000 ____D C:\Users\rita\AppData\Local\Packages 2020-03-30 15:16 - 2018-02-06 06:25 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2020-03-30 14:59 - 2019-07-06 01:03 - 000456520 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-03-30 14:54 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources 2020-03-30 14:54 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2020-03-30 14:54 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences 2020-03-30 14:54 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Provisioning 2020-03-30 14:54 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-03-30 14:48 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-03-30 12:58 - 2017-03-10 20:43 - 000000000 ___RD C:\Users\rita\3D Objects 2020-03-30 12:58 - 2013-09-01 02:07 - 000000000 __RHD C:\Users\Public\AccountPictures 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\UNP 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\setup 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe 2020-03-30 12:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Dism 2020-03-30 12:45 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\PrintDialog 2020-03-30 12:45 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2020-03-30 12:45 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Windows Defender 2020-03-30 12:45 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\servicing 2020-03-27 19:41 - 2019-07-06 01:16 - 000000000 ____D C:\Users\rita 2020-03-26 22:51 - 2019-09-29 21:47 - 000002728 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task 2020-03-26 22:51 - 2019-07-06 02:21 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2020-03-26 22:51 - 2019-07-06 02:21 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2020-03-26 22:51 - 2019-07-06 02:21 - 000002218 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC 2020-03-26 12:05 - 2016-07-16 11:42 - 000000875 _____ C:\Users\Public\Desktop\CCleaner.lnk 2020-03-25 13:39 - 2013-08-22 15:25 - 000002134 _____ C:\WINDOWS\system32\Drivers\etc\hosts_bak_647 2020-03-25 13:10 - 2013-08-22 15:25 - 000001306 _____ C:\WINDOWS\system32\Drivers\etc\hosts_bak_833 2020-03-25 12:36 - 2015-07-15 16:11 - 000000000 ____D C:\Users\rita\AppData\Local\CutePDF Writer 2020-03-24 12:39 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2020-03-24 10:50 - 2016-12-09 13:12 - 000000000 ____D C:\Program Files\Microsoft Office 2020-03-22 23:34 - 2019-07-06 05:47 - 000002033 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2020-03-22 23:32 - 2019-07-06 05:46 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2020-03-22 23:31 - 2019-07-06 05:47 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2020-03-20 14:45 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2020-03-20 11:23 - 2013-10-06 18:10 - 000000000 ____D C:\Users\rita\AppData\Local\ElevatedDiagnostics 2020-03-20 09:03 - 2016-10-11 20:46 - 000000000 ____D C:\Program Files (x86)\Dropbox 2020-03-18 21:28 - 2015-11-09 01:09 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2020-03-18 21:02 - 2018-09-10 20:41 - 000000000 ____D C:\Program Files (x86)\Microsoft OneDrive 2020-03-17 20:07 - 2019-09-29 21:47 - 000000000 ___RD C:\Users\Gast\OneDrive 2020-03-17 20:05 - 2019-09-29 21:46 - 000002188 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2020-03-16 22:31 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2020-03-12 22:57 - 2016-12-30 22:23 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2020-03-12 22:57 - 2013-09-26 23:09 - 000001017 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2020-03-11 20:17 - 2020-02-18 19:15 - 000000000 ____D C:\Program Files\Mozilla Firefox 2020-03-10 23:47 - 2013-09-01 05:49 - 000000000 ____D C:\WINDOWS\system32\MRT 2020-03-10 23:26 - 2013-09-01 05:49 - 121542864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Bestanden in de root van sommige mappen ======== 2017-10-15 21:40 - 2017-10-15 21:40 - 000000259 _____ () C:\ProgramData\fontcacheev1.dat 2017-04-13 10:52 - 2017-04-13 10:52 - 007639040 _____ () C:\Program Files (x86)\GUT9B6D.tmp 2013-09-05 10:12 - 2019-05-16 19:33 - 000038400 _____ () C:\Users\rita\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-07-10 16:41 - 2019-01-12 13:23 - 000007605 _____ () C:\Users\rita\AppData\Local\resmon.resmoncfg ==================== SigCheck ============================ (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) ==================== Einde van FRST.txt ========================