Élément de démarrage ldnews.exe de ldplayer, suis-je infecté? – Monter un serveur MineCraft

Author: Titanfall —

Short summary: D'accord. C'est parti: 3 Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 08-03-2020 Ran par Ethan (administrateur) sur ETHAN-PC (CyberPowerPC C Series) (17-03-2020 13:16:42) Exécution à partir de C: Users Ethan Desktop Profils chargés: Ethan (Profils disponibles: Ethan) Plateforme: Windows 10 Home Version 1909 18363.720 (X64) Langue: anglais (Royaume-Uni) Navigateur par défaut: […]

Quick overview

Site
Tutos GameServer
Canonical URL
https://tutos-gameserver.fr/2020/03/19/element-de-demarrage-ldnews-exe-de-ldplayer-suis-je-infecte-monter-un-serveur-minecraft/
LLM HTML version
https://tutos-gameserver.fr/2020/03/19/element-de-demarrage-ldnews-exe-de-ldplayer-suis-je-infecte-monter-un-serveur-minecraft/llm
LLM JSON version
https://tutos-gameserver.fr/2020/03/19/element-de-demarrage-ldnews-exe-de-ldplayer-suis-je-infecte-monter-un-serveur-minecraft/llm.json
Manifest
https://tutos-gameserver.fr/llm-endpoints-manifest.json
Estimated reading time
71 minutes (4224 seconds)
Word count
14079

Key points

Primary visual

Élément de démarrage ldnews.exe de ldplayer, suis-je infecté?

 – Monter un serveur MineCraft
Main illustration associated with the content.

Structured content

D'accord. C'est parti: 3

Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 08-03-2020 Ran par Ethan (administrateur) sur ETHAN-PC (CyberPowerPC C Series) (17-03-2020 13:16:42) Exécution à partir de C: Users Ethan Desktop Profils chargés: Ethan (Profils disponibles: Ethan) Plateforme: Windows 10 Home Version 1909 18363.720 (X64) Langue: anglais (Royaume-Uni) Navigateur par défaut: Chrome Mode de démarrage: Normal

==================== Processus (sur liste blanche) =================

(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)

(Adobe Systems Incorporated -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe (BullGuard Ltd -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardHelper.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BgGameMon.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuard.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardBackup.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardCore.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardFileScanner.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardFiltering.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardFirewall.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardScanner.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardSentry.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardSentryEye.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardTray.exe (BullGuard Ltd. -> BullGuard Ltd.) C: Program Files BullGuard Ltd BullGuard BullGuardUpdate.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe (Groupe des sous-systèmes et blocs IP intégrés Intel® -> Intel Corporation) C: Windows System32 DriverStore FileRepository dal.inf_amd64_31a8dbbf39dcdc3b jhi_service.exe (Kilonova LLC -> Skillbrains) C: Program Files (x86) Skillbrains lightshot 5.5.0.4 Lightshot.exe (Microsoft Corporation -> Microsoft Corporation) C: Program Files Fichiers communs Microsoft shared ClickToRun OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft SQL Server 90 Shared sqlwriter.exe (Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsAlarms_10.2001.434.0_x64__8wekyb3d8bbwe Time.exe (Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe Calculator.exe (Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsStore_12003.1001.1.0_x64__8wekyb3d8bbwe WinStore.App.exe (Microsoft Corporation) C: Program Files WindowsApps Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe YourPhoneServer YourPhoneServer.exe (Microsoft Corporation) C: Program Files WindowsApps Microsoft.ZuneVideo_10.20022.11011.0_x64__8wekyb3d8bbwe Video.UI.exe (Microsoft Windows -> Microsoft Corporation) C: Windows ImmersiveControlPanel SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe (Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe (Microsoft Windows -> Microsoft Corporation) C: Windows System32 InputMethod CHT ChtIME.exe (Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe (Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C: Windows System32 wlanext.exe (Microsoft Windows -> Microsoft Corporation) C: Windows SystemApps Microsoft.Windows.Cortana_cw5n1h2txyewy RemindersServer.exe (NVIDIA Corporation -> Node.js) C: Program Files (x86) NVIDIA Corporation NvNode NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NVIDIA GeForce Experience NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NVIDIA GeForce Experience NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NVIDIA GeForce Experience NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation ShadowPlay nvsphelper64.exe (OOO "XMAC" ->) C: Users Ethan AppData Roaming Honeygain Honeygain.exe (Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jusched.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVCpl64.exe (Valve -> Valve Corporation) C: Program Files (x86) Common Files Steam SteamService.exe (Valve -> Valve Corporation) D: Steam bin cef cef.win7x64 steamwebhelper.exe (Valve -> Valve Corporation) D: Steam bin cef cef.win7x64 steamwebhelper.exe (Valve -> Valve Corporation) D: Steam bin cef cef.win7x64 steamwebhelper.exe (Valve -> Valve Corporation) D: Steam bin cef cef.win7x64 steamwebhelper.exe (Valve -> Valve Corporation) D: Steam bin cef cef.win7x64 steamwebhelper.exe (Valve -> Valve Corporation) D: Steam bin cef cef.win7x64 steamwebhelper.exe (Valve -> Valve Corporation) D: Steam bin cef cef.win7x64 steamwebhelper.exe (Valve -> Valve Corporation) D: Steam Steam.exe

==================== Registre (liste blanche) ===================

(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RAVCpl64.exe [16696840 2016-09-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM … Run: [BullGuard] => C: Program Files BullGuard Ltd BullGuard BullGuardTray.exe [407400 2020-01-28] (BullGuard Ltd. -> BullGuard Ltd.) HKLM-x32 … Exécuter: [BgDelayStartup] => C: Program Files BullGuard Ltd BullGuard Files32 BgDelayStartup.exe [149864 2020-01-28] (BullGuard Ltd. -> BullGuard Ltd.) HKU S-1-5-21-3098961551-1457121151-1513463943-1003 … Run: [CCXProcess] => C: Program Files (x86) Adobe Adobe Creative Cloud Experience CCXProcess.exe [144008 2019-11-26] (Adobe Inc. -> Adobe Systems Incorporated) HKU S-1-5-21-3098961551-1457121151-1513463943-1003 … Run: [com.squirrel.slack.slack] => C: Users Ethan AppData Local slack slack.exe [306704 2020-02-16] (Slack Technologies, Inc. -> Slack Technologies Inc.) HKU S-1-5-21-3098961551-1457121151-1513463943-1003 … Run: [CCleaner Smart Cleaning] => D: ccleaner CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd) HKU S-1-5-21-3098961551-1457121151-1513463943-1003 … Run: [LDNews] => D: ldplayer ldnews.exe HKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 80.0.3987.132 Installer chrmstp.exe [2020-03-06] (Google LLC -> Google LLC) HKLM Software Microsoft Active Setup Installed Components: [9459C573-B17A-45AE-9F64-1857B5D58CEE] -> C: Program Files (x86) Microsoft Edge Application 80.0.361.66 Installer setup.exe [2020-03-05] (Microsoft Corporation -> Microsoft Corporation) Démarrage: C: Users Ethan AppData Roaming Microsoft Windows Start Menu Programs Startup HoneygainUpdater.lnk [2019-11-05] ShortcutTarget: HoneygainUpdater.lnk -> C: Users Ethan AppData Roaming Honeygain HoneygainUpdater.exe (OOO "XMAC" -> Honeygain) GroupPolicy: Restriction? <==== ATTENTION FF HKLM SOFTWARE Policies Mozilla Firefox: Restriction <==== ATTENTION CHR HKLM SOFTWARE Policies Google: Restriction <==== ATTENTION

==================== Tâches planifiées (liste blanche) ============

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

Tâche: 000D07B4-54A7-4BE3-8604-047B62010753 – System32 Tasks NvDriverUpdateCheckDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvContainer nvcontain.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: 0F0240C8-52E5-4C0D-A62E-34CFE8BAFA51 – System32 Tasks NvNodeLauncher_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NvNode nvnode.exe [653848 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: 15953EC9-7B68-40F8-9626-74812A63A375 – System32 Tasks MicrosoftEdgeUpdateTaskMachineUA => C: Program Files (x86) Microsoft EdgeUpdate MicrosoftEdgeUpdate.exe [223112 2020-01-30] (Microsoft Corporation -> Microsoft Corporation) Tâche: 293BDA68-4B2F-4F5E-89C6-CED3CB57C324 – System32 Tasks Adobe Flash Player NPAPI Notifier => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_344_Plugin.exe [1458232 2020-03-11] (Adobe Inc. -> Adobe) Tâche: 3BBCBDD0-6A6B-4BA2-978D-8A7A9D5C36D2 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [154920 2019-09-05] (Google Inc -> Google LLC) Tâche: 3FB710BE-7184-469E-9392-A2B737167EE3 – System32 Tasks Adobe Uninstaller => C: Program Files (x86) Adobe Adobe Creative Cloud ACC Creative Cloud.exe Tâche: 49518D46-1C67-4BBB-B632-72ACA0EFA4C1 – System32 Tasks Intel PTT EK Recertification => C: Windows System32 DriverStore FileRepository iclsclient.inf_amd64_7e148e9c120d86df lib IntelPTTEK [925152 2019-04-23] (Intel® Trust Services -> Intel® Corporation) Tâche: 515713BA-9E66-41CA-8EC0-0401996FF535 – System32 Tasks NvTmRep_CrashReport1_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvBackend NvT [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: 558CA7FB-A869-43ED-86F2-3A155196E5BE – System32 Tasks Minecraft Education Edition Automatic Updater => C: Program Files (x86) Microsoft Studios Minecraft Education Edition MinecraftEducationUpdater.exe [5813248 2020-02-03] (Microsoft Studios) [File not signed] Tâche: 57EDA838-412A-4A70-AC1F-753A61CFAE94 – System32 Tasks Microsoft Office Office ClickToRun Service Monitor => C: Program Files Common Files Microsoft Shared ClickToRun OfficeC2RClient.exe [24600440 2020-03-05] (Microsoft Corporation -> Microsoft Corporation) Tâche: 6B3E9F64-A514-4CF2-909D-634E923BF648 – System32 Tasks Microsoft Office Office Feature Updates => C: Program Files Microsoft Office root Office16 sdxhelper.exe [158544 2020-03-14] (Microsoft Corporation -> Microsoft Corporation) Tâche: 6B92DEC0-D283-49D8-8C30-57AE90550CB2 – System32 Tasks Minecarft Education Weekly Updater => C: Program Files (x86) Microsoft Studios Minecraft Education Edition MinecraftEducationUpdater.exe [5813248 2020-02-03] (Microsoft Studios) [File not signed] Tâche: 7DC6B4AE-E3E5-4BFF-AB93-9FCD643587A1 – System32 Tasks NvTmRep_CrashReport3_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvBackend.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: 7F98988B-DD39-4E83-A48E-41238036953F – Connexion aux mises à jour des fonctionnalités System32 Tasks Microsoft Office Office => C: Program Files Microsoft Office root Office16 sdxhelper.exe [158544 2020-03-14] (Microsoft Corporation -> Microsoft Corporation) Tâche: 811DB0EF-D72C-4363-9B16-ECA5547EF767 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-03-11] (Adobe Inc. -> Adobe) Tâche: 846E7C09-3059-4AE9-9904-D53A9A036C08 – System32 Tasks Microsoft Office Office Automatic Updates 2.0 => C: Program Files Common Files Microsoft Shared ClickToRun OfficeC2RClient.exe [24600440 2020-03-05] (Microsoft Corporation -> Microsoft Corporation) Tâche: 862BDEC7-7EF7-4166-8494-79878010BDDA – System32 Tasks NVIDIA GeForce Experience SelfUpdate_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NVIDIA GeForce Experience NV Experience.exe [3302880 2019-12-09] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: 88619AFB-6F28-464F-8F39-CCDC4A375790 – System32 Tasks NvProfileUpdaterOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUp [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: 8F2B6989-A8A7-4562-B849-B8E01EB019C9 – System32 Tasks CCleanerSkipUAC => D: ccleaner CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd) Tâche: 8FA552C3-4275-4BAB-B90A-051672E46DC1 – System32 Tasks Microsoft VisualStudio VSIX Auto Update 14 => D: visualkstdio2015 Common7 IDE VSIXAutoUpdate.exe [139448 2016-06-20] (Microsoft Corporation -> Microsoft Corporation) Tâche: 960DC1B4-3701-4B5C-A0EF-DA8AD218F927 – System32 Tasks Opera GX mise à jour automatique 1568899033 => C: Users Ethan AppData Local Programs Opera GX launcher.exe [1480216 2020-03-12] (Logiciel Opera AS -> Logiciel Opera) Tâche: AD301FF5-C850-4A8A-B921-CE7770BB5D9F – System32 Tasks AdobeGCInvoker-1.0 => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe Tâche: AE9937BE-03C8-41F2-B857-E6B93939556E – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [154920 2019-09-05] (Google Inc -> Google LLC) Tâche: B8852EB9-D3B6-4FF9-84C0-755A4CBDDBA2 – System32 Tasks update-sys => C: Program Files (x86) Skillbrains Updater Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: ) Tâche: BDAEE153-BD18-4A25-B553-8454D13166A4 – System32 Tasks NvProfileUpdaterDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: C1801056-9246-4C2F-A6CD-6FD5D49BB200 – System32 Tasks OneDrive Standalone Update Task-S-1-5-21-3098961551-1457121151-1513463943-500 => C: Users Ethan AppData Local Microsoft OneDrive OneDriveStandaloneUpdater.exe Tâche: C7071DB8-ACDE-485C-BED9-C817E6B4ED92 – System32 Tasks CCleaner Update => D: ccleaner CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd) Tâche: D9C20D45-F452-4B5F-959A-9B31348F67D0 – System32 Tasks NvBatteryBoostCheckOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Nvcontain.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: DA69D3BA-5736-42C3-B6EC-3E4A2D6A95A3 – System32 Tasks NvTmRep_CrashReport4_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvTend.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: EB0574E9-A7C7-40AF-A567-D5B9569690AB – System32 Tasks BlueStacksHelper => D: BluestacksInstall BlueStacks Client Helper BlueStacksHelper.exe [745480 2019-04-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.) Tâche: F5DFE7E1-3A2A-4AD5-AAF8-39ACB2AEEDAF – System32 Tasks BullGuard BullGuardUpdate2 => C: Program Files BullGuard Ltd BullGuard BullGuardUpdate2.exe [2975080 2020-01-28] (BullGuard Ltd. -> BullGuard Ltd.) Tâche: F9113AF1-C938-412C-81E6-D6316B2A785D – System32 Tasks MicrosoftEdgeUpdateTaskMachineCore => C: Program Files (x86) Microsoft EdgeUpdate MicrosoftEdgeUpdate.exe [223112 2020-01-30] (Microsoft Corporation -> Microsoft Corporation) Tâche: F96E9C71-0A1D-47B0-ACDC-E52644644FEF – System32 Tasks NvTmRep_CrashReport2_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvBackend NvBackend.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Tâche: FDDC676B-615C-40A2-A91B-C33AF1631017 – System32 Tasks update-S-1-5-21-3098961551-1457121151-1513463943-1003 => C: Program Files (x86) Skillbrains Updater Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: )

(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Tâche: C: Windows Tasks Intel PTT EK Recertification.job => C: Windows System32 DriverStore FileRepository iclsclient.inf_amd64_7e148e9c120d86df lib IntelPTTEKRecertification.exe Tâche: C: Windows Tasks update-S-1-5-21-3098961551-1457121151-1513463943-1003.job => C: Program Files (x86) Skillbrains Updater Updater.exe Tâche: C: Windows Tasks update-sys.job => C: Program Files (x86) Skillbrains Updater Updater.exe

==================== Internet (liste blanche) ====================

(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)

Winsock: Catalog9 15 C: Windows SysWOW64 vsocklib.dll [42376 2019-04-27] (VMware, Inc. -> VMware, Inc.) Winsock: Catalog9 16 C: Windows SysWOW64 vsocklib.dll [42376 2019-04-27] (VMware, Inc. -> VMware, Inc.) Winsock: Catalog9-x64 15 C: Windows system32 vsocklib.dll [46472 2019-04-27] (VMware, Inc. -> VMware, Inc.) Winsock: Catalog9-x64 16 C: Windows system32 vsocklib.dll [46472 2019-04-27] (VMware, Inc. -> VMware, Inc.) Tcpip .. Interfaces 13b563e5-5f56-469f-8e50-f44e15131286: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip .. Interfaces 3dcf9f21-00b2-46ba-91e1-889fe099cd35: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip .. Interfaces 7A2D9AC7-6096-46FF-B3AF-8BC70314D8AA: [NameServer] 185.123.227.250

Internet Explorer: ================== HKLM Software Microsoft Internet Explorer Main, Start Page = about: vide HKLM Software Wow6432Node Microsoft Internet Explorer Main, Start Page = about: vide HKLM Software Microsoft Internet Explorer Main, Search Page = HKLM Software Wow6432Node Microsoft Internet Explorer Main, Search Page = HKLM Software Microsoft Internet Explorer Main, Default_Page_URL = HKLM Software Wow6432Node Microsoft Internet Explorer Main, Default_Page_URL = HKLM Software Microsoft Internet Explorer Main, Default_Search_URL = HKLM Software Wow6432Node Microsoft Internet Explorer Main, Default_Search_URL = HKLM Software Microsoft Internet Explorer Main, Local Page = HKLM Software Wow6432Node Microsoft Internet Explorer Main, Local Page = HKU S-1-5-21-3098961551-1457121151-1513463943-1003 Software Microsoft Internet Explorer Main, page de démarrage = about: vide BHO-x32: Assistant de navigateur Skype Entreprise -> 31D09BA0-12F5-4CCE-BE8A-2923E76605DA -> C: Program Files Microsoft Office root VFS ProgramFilesX86 Microsoft Office Office16 OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation) Gestionnaire: mso-minsb-roaming.16 – 83C25742-A9F7-49FB-9138-434302C88D07 – C: Program Files Microsoft Office root Office16 MSOSB.DLL [2020-02-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 – 83C25742-A9F7-49FB-9138-434302C88D07 – C: Program Files Microsoft Office root VFS ProgramFilesX86 Microsoft Office Office16 MSOSB.DLL [2020-02-28] (Microsoft Corporation -> Microsoft Corporation) Gestionnaire: mso-minsb.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files Microsoft Office root Office16 MSOSB.DLL [2020-02-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files Microsoft Office root VFS ProgramFilesX86 Microsoft Office Office16 MSOSB.DLL [2020-02-28] (Microsoft Corporation -> Microsoft Corporation) Gestionnaire: osf-roaming.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files Microsoft Office root Office16 MSOSB.DLL [2020-02-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files Microsoft Office root VFS ProgramFilesX86 Microsoft Office Office16 MSOSB.DLL [2020-02-28] (Microsoft Corporation -> Microsoft Corporation) Gestionnaire: osf.16 – 5504BE45-A83B-4808-900A-3A5C36E7F77A – C: Program Files Microsoft Office root Office16 MSOSB.DLL [2020-02-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 – 5504BE45-A83B-4808-900A-3A5C36E7F77A – C: Program Files Microsoft Office root VFS ProgramFilesX86 Microsoft Office Office16 MSOSB.DLL [2020-02-28] (Microsoft Corporation -> Microsoft Corporation)

Bord: ====== DownloadDir: C: Users Ethan Downloads Edge DefaultProfile: Par défaut Profil Edge: C: Users Ethan AppData Local Microsoft Edge User Data Default [2020-03-16] Restauration de session Edge: par défaut -> est activé.

FireFox: ======== FF DefaultProfile: jvsv9n1c.default FF ProfilePath: C: Users Ethan AppData Roaming Mozilla Firefox Profiles fy11ipk5.default-1506365039325 [2020-03-03] Page d'accueil de FF: Mozilla Firefox Profiles fy11ipk5.default-1506365039325 -> hxxps: //www.malwarebytes.org/restorebrowser/ FF SearchPlugin: C: Users Ethan AppData Roaming Mozilla Firefox Profiles fy11ipk5.default-1506365039325 searchplugins bing-lavasoft-ff59.xml [2019-05-17] FF ProfilePath: C: Users Ethan AppData Roaming Mozilla Firefox Profiles s8z66y6v.default-1506364944276 [2020-03-03] Page d'accueil de FF: Mozilla Firefox Profiles s8z66y6v.default-1506364944276 -> hxxps: //www.malwarebytes.org/restorebrowser/ FF SearchPlugin: C: Users Ethan AppData Roaming Mozilla Firefox Profiles s8z66y6v.default-1506364944276 searchplugins bing-lavasoft-ff59.xml [2019-05-17] FF ProfilePath: C: Users Ethan AppData Roaming Mozilla Firefox Profiles jvsv9n1c.default [2020-03-17] Notifications FF: Mozilla Firefox Profiles jvsv9n1c.default -> hxxps: //www.freeads.co.uk; hxxps: //aternos.org; hxxps: //my.freeads.co.uk; hxxps: //top.gg Extension FF: (Grammaire pour Firefox) – C: Users Ethan AppData Roaming Mozilla Firefox Profiles jvsv9n1c.default Extensions 87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2020-02-11] Extension FF: (HTTPS Everywhere) – C: Users Ethan AppData Roaming Mozilla Firefox Profiles jvsv9n1c.default Extensions https-everywhere@eff.org.xpi [2019-11-13] Extension FF: (sélecteur et gestionnaire d'agent utilisateur) – C: Users Ethan AppData Roaming Mozilla Firefox Profiles jvsv9n1c.default Extensions a6c4a591-f1b2-4f03-b3ff-767e5bedf4e7 .xpi [2020-03-17] Extension FF: (Video DownloadHelper) – C: Users Ethan AppData Roaming Mozilla Firefox Profiles jvsv9n1c.default Extensions b9db16a4-6edc-47ec-a1f4-b86292ed211d .xpi [2019-07-08] Extension FF: (sans nom) – C: Users Ethan AppData Roaming Mozilla Firefox Profiles jvsv9n1c.default Extensions d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d .xpi [2020-02-12] FF SearchPlugin: C: Users Ethan AppData Roaming Mozilla Firefox Profiles jvsv9n1c.default searchplugins bing-lavasoft-ff59.xml [2019-05-17] FF HKLM-x32 … Firefox Extensions: [antiphishing@bullguard] – C: Program Files BullGuard Ltd BullGuard Files32 Antiphishing FF antiphishing @ bullguard => introuvable Plugin FF: @ adobe.com / FlashPlayer -> C: Windows system32 Macromed Flash NPSWF64_32_0_0_344.dll [2020-03-11] (Adobe Inc. ->) Plugin FF: @ microsoft.com / SharePoint, version = 14.0 -> C: Program Files Microsoft Office root Office16 NPSPWRAP.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation) Plugin FF: @ videolan.org / vlc, version = 3.0.8 -> C: Program Files VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin-x32: @ adobe.com / FlashPlayer -> C: Windows SysWOW64 Macromed Flash NPSWF32_32_0_0_344.dll [2020-03-11] (Adobe Inc. ->) FF Plugin-x32: @ Microsoft.com / NpCtrl, version = 1.0 -> C: Program Files (x86) Microsoft Silverlight 5.1.20513.0 npctrl.dll [2013-05-13] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @ microsoft.com / SharePoint, version = 14.0 -> C: Program Files Microsoft Office root VFS ProgramFilesX86 Microsoft Office Office16 NPSPWRAP.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

Chrome: ======= CHR DefaultProfile: Par défaut Profil CHR: C: Users Ethan AppData Local Google Chrome User Data Default [2020-03-17] Notifications CHR: Par défaut -> hxxps: //app.slack.com; hxxps: //aternos.org; hxxps: //otter.ai; hxxps: //www.infosecinstitute.com; hxxps: //www.playerup.com CHR NewTab: Par défaut -> Actif: "chrome-extension: //ojahbhfflnbaiddhnkgeccgopmedjjen/index.html" Extension CHR: (Google Translate) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions aapbdbdomjkkjkaonfhkkikfgjllcleb [2020-01-24] Extension CHR: (diapositives) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions aapocclcgogkmnckokdopfmhonfmgoek [2019-09-05] Extension CHR: (Clipboard History Pro: meilleur outil de productivité) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions ajiejmhbejpdgkkigpddefnjmgcbkenk [2020-02-14] Extension CHR: (Docs) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions aohghmighlieiainnegkcijnfilokake [2019-09-05] Extension CHR: (Google Drive) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2019-09-05] Extension CHR: (YouTube) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-09-05] Extension CHR: (Honey) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions bmnlcjabgnpnenekpadlanbbkooimhnj [2020-03-09] Extension CHR: (AutoDraw pour skribbl.io) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions bpnefockcbbpkbahgkkacjmebfheacjb [2020-03-12] Extension CHR: (Tampermonkey) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions dhdgffkkebhmkfjojejmpbldmpobfkfo [2020-03-12] Extension CHR: (User-Agent Switcher for Chrome) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions djflhoibgkdhkhhcedjiklpkjnoahfmg [2019-09-06] Extension CHR: (Mode sombre) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions dmghijelimhndkbmpgbldicpogfkceaj [2019-10-26] Extension CHR: (Sheets) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions felcaaldnbdncclmgdcncolpebgiejap [2019-09-05] Extension CHR: (HTTPS Partout) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions gcbommkclmclpchllfjekcdonpmejbdp [2020-03-17] Extension CHR: (Google Docs hors ligne) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-09] Extension CHR: (éclats bleus noirs) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions hgoflmajhinnohnhkfeggflmmppiilck [2019-09-05] Extension CHR: (Checker Plus pour Google Calendar ™) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions hkhggnncdpfibdhinjiegagmopldibha [2020-03-14] Extension CHR: (Mate Translate – traducteur, dictionnaire) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions ihmgiclibbndffejedjimfjmfoabpcke [2020-02-18] Extension CHR: (Skribbl.io Friend Finder) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions imcaejcbmcggkohbjbmhdmabbmleacoe [2020-03-14] Extension CHR: (WhatFont) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions jabopobgcpjmedljpbcaablpmlmfcogm [2019-09-05] Extension CHR: (Roblox +) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions jfbnmfgkohlfclfnplnlenbalpppohkm [2020-03-14] Extension CHR: (Grammaire pour Chrome) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions kbfnbcaeplbcioakkpcpgfkobkghlhen [2020-03-09] Extension CHR: (The Great Suspender) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions klbibkeccnjlkjkiokjodocebajanakg [2019-09-05] Extension CHR: (Fair AdBlocker) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions lgblnfidahcdcjddiepkckcfdhpknnjh [2020-03-11] Extension CHR: (BeTheTheOverlay) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions ljipkdpcjbmhkdjjmbbaggebcednbbme [2020-02-11] Extension CHR: (BrowserStack Local) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions mfiddfehmfdojjfdpfngagldgaaafcfo [2019-10-17] Extension CHR: (Google Maps) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions mnhkaebcjjhencmpkapnbdaogjamfbcj [2019-10-28] Extension CHR: (Faites une pause avec Eye Care Plus) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions nebkccpabcomjaallapnlbcnckhnfknd [2019-09-05] Extension CHR: (Paiements Chrome Web Store) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2019-10-03] Extension CHR: (Tabagotchi by Breather) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions ojahbhfflnbaiddhnkgeccgopmedjjen [2019-09-23] Extension CHR: (Gmail) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-09-05] Extension CHR: (Chrome Media Router) – C: Users Ethan AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-14] Extension CHR: (Krunker Skid) – D: stuff 05020202 Krunker Skid Krunker Skid [2020-02-05] Profil CHR: C: Users Ethan AppData Local Google Chrome User Data Guest Profile [2020-03-03] Profil CHR: C: Users Ethan AppData Local Google Chrome User Data System Profile [2020-03-03]

==================== Services (liste blanche) ===================

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

S4 AALSvc; C: AlphaAntiLeak AAL bin server AALSvc.exe [11430264 2020-02-16] (Constantin Schreiber ->) R2 AGSService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe [2704872 2018-09-10] (Adobe Systems Incorporated -> Adobe Systems, Incorporated) S4 BEService; C: Program Files (x86) Common Files BattlEye BEService.exe [8413472 2020-02-25] (BattlEye Innovations e.K. ->) R3 BsBackup; C: Program Files BullGuard Ltd BullGuard BullGuardBackup.exe [1607016 2020-03-02] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsFileScan; C: Program Files BullGuard Ltd BullGuard BullGuardFileScanner.exe [833896 2020-03-09] (BullGuard Ltd. -> BullGuard Ltd.) R3 BsHelper; C: Program Files BullGuard Ltd BullGuard BullGuardHelper.exe [390352 2019-11-13] (BullGuard Ltd -> BullGuard Ltd.) R2 BsMailProxy; C: Program Files BullGuard Ltd BullGuard BullGuardFiltering.exe [5200744 2020-03-09] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsMain; C: Program Files BullGuard Ltd BullGuard BullGuardCore.exe [2981736 2020-03-02] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsNet; C: Program Files BullGuard Ltd BullGuard BullGuardFirewall.exe [1202024 2020-03-09] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsScanner; C:Program FilesBullGuard LtdBullGuardBullGuardScanner.exe [395112 2020-03-09] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsSentry; C:Program FilesBullGuard LtdBullGuardBullGuardSentry.exe [770920 2020-03-09] (BullGuard Ltd. -> BullGuard Ltd.) R2 BsUpdate; C:Program FilesBullGuard LtdBullGuardBullGuardUpdate.exe [504680 2020-03-02] (BullGuard Ltd. -> BullGuard Ltd.) S4 cfbackd; C:Program FilesCleverFilesDisk Drillcfbackd.w32.exe [274432 2019-10-15] (CleverFiles) [File not signed] R2 ClickToRunSvc; C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe [11091224 2020-03-05] (Microsoft Corporation -> Microsoft Corporation) S4 EasyAntiCheat; C:Program Files (x86)EasyAntiCheatEasyAntiCheat.exe [803440 2019-10-08] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) S2 edgeupdate; C:Program Files (x86)MicrosoftEdgeUpdateMicrosoftEdgeUpdate.exe [223112 2020-01-30] (Microsoft Corporation -> Microsoft Corporation) S3 edgeupdatem; C:Program Files (x86)MicrosoftEdgeUpdateMicrosoftEdgeUpdate.exe [223112 2020-01-30] (Microsoft Corporation -> Microsoft Corporation) S4 Everything; D:EverythingEverything.exe [2240288 2019-02-04] (voidtools -> voidtools) S3 Intel® Capability Licensing Service TCP IP Interface; C:WindowsSystem32DriverStoreFileRepositoryiclsclient.inf_amd64_7e148e9c120d86dflibSocketHeciServer.exe [872416 2019-04-23] (Intel® Trust Services -> Intel® Corporation) S2 Intel® TPM Provisioning Service; C:WindowsSystem32DriverStoreFileRepositoryiclsclient.inf_amd64_7e148e9c120d86dflibTPMProvisioningService.exe [800224 2019-04-23] (Intel® Trust Services -> Intel® Corporation) R2 jhi_service; C:WindowsSystem32DriverStoreFileRepositorydal.inf_amd64_31a8dbbf39dcdc3bjhi_service.exe [647568 2019-04-30] (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) S4 ManyCam Service; C:ProgramDataManyCamServiceManyCamService.exe [544984 2016-03-31] (ManyCam -> Visicom Media Inc.) S3 MBAMService; C:Program FilesMalwarebytesAnti-MalwareMBAMService.exe [6933272 2020-03-16] (Malwarebytes Inc -> Malwarebytes) S3 MicrosoftEdgeElevationService; C:Program Files (x86)MicrosoftEdgeApplication80.0.361.66elevation_service.exe [1093512 2020-03-04] (Microsoft Corporation -> Microsoft Corporation) S3 Minecraft Education Updater; C:Program Files (x86)Microsoft StudiosMinecraft Education EditionMinecraftEducationUpdater.exe [5813248 2020-02-03] (Microsoft Studios) [File not signed] R2 NvContainerLocalSystem; C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvContainerNetworkService; C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) S4 Origin Client Service; E:originOriginClientService.exe [2495280 2020-03-05] (Electronic Arts, Inc. -> Electronic Arts) S2 Origin Web Helper Service; E:originOriginWebHelperService.exe [3445560 2020-03-05] (Electronic Arts, Inc. -> Electronic Arts) S4 Rockstar Service; D:rdr2LauncherRockstarService.exe [474256 2019-11-09] (Rockstar Games, Inc. -> Rockstar Games) S4 SbieSvc; C:Program FilesSandboxieSbieSvc.exe [328344 2019-12-17] (Invincea, Inc. -> Sandboxie Holdings, LLC) S3 VBoxSDS; D:VirtualboxVBoxSDS.exe [694016 2020-01-14] (Oracle Corporation -> Oracle Corporation) S4 VMAuthdService; D:VMWAREvmware-authd.exe [100784 2019-05-04] (VMware, Inc. -> VMware, Inc.) S3 VSStandardCollectorService140; D:visualkstdio2015Team ToolsDiagnosticsHubCollectorStandardCollector.Service.exe [108776 2016-09-06] (Microsoft Corporation -> Microsoft Corporation) S3 VSStandardCollectorService150; D:Program Files (x86)Microsoft Visual StudioSharedCommonDiagnosticsHub.Collection.ServiceStandardCollector.Service.exe [147392 2019-04-30] (Microsoft Corporation -> Microsoft Corporation) S3 WdNisSvc; C:ProgramDataMicrosoftWindows Defenderplatform4.18.1911.3-0NisSrv.exe [3206472 2019-12-10] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:ProgramDataMicrosoftWindows Defenderplatform4.18.1911.3-0MsMpEng.exe [103376 2019-12-10] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:Program FilesNVIDIA CorporationDisplay.NvContainerNVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:ProgramDataNVIDIANVDisplay.ContainerLocalSystem.log" -l 3 -d "C:Program FilesNVIDIA CorporationDisplay.NvContainerpluginsLocalSystem" -r -p 30000

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AALProtect; C:AlphaAntiLeakAALbinserverAALProtect.sys [35984 2020-02-16] (OOO AMEKS -> ) R1 BdAgent; C:WindowsSystem32DRIVERSBdAgent.sys [175128 2020-01-21] (BullGuard LTD -> BullGuard Ltd.) S0 BdBoot; C:WindowsSystem32DRIVERSBdBoot.sys [29320 2019-09-05] (Microsoft Windows Early Launch Anti-malware Publisher -> BullGuard Ltd.) R0 BdNet; C:WindowsSystem32DRIVERSBdNet.sys [178760 2019-03-05] (BullGuard LTD -> BullGuard Ltd.) R0 BdSentry; C:WindowsSystem32DRIVERSBdSentry.sys [155456 2020-01-21] (BullGuard LTD -> BullGuard Ltd.) R1 BdSpy; C:WindowsSystem32DRIVERSBdSpy.sys [90912 2020-01-21] (BullGuard LTD -> BullGuard Ltd.) R2 BlueStacksDrv; C:Program FilesBlueStacksBstkDrv_bgp.sys [315976 2020-01-14] (Bluestack Systems, Inc -> Bluestack System Inc. ) S3 BthA2dp; C:WindowsSystem32driversBthA2dp.sys [231936 2019-09-13] (Microsoft Corporation) [File not signed] R1 dokan1; C:WindowsSystem32DRIVERSdokan1.sys [104312 2018-08-09] (D3L -> Dokan Project) R3 EuMusDesignVirtualAudioCableWdm; C:WindowsSystem32driversvrtaucbl.sys [216504 2020-02-18] (Muzychenko Evgenii Viktorovich, IP -> Eugene V. Muzychenko) R3 ibtusb; C:WindowsSystem32DriverStoreFileRepositoryibtusb.inf_amd64_5301d8407f31eee9ibtusb.sys [14391584 2019-04-24] (Intel® Wireless Connectivity Solutions -> Intel Corporation) R2 LdBoxDrv; C:Program Filesdnplayerext2LdBoxDrv.sys [312496 2020-03-16] (Microsoft Windows Hardware Compatibility Publisher -> Oracle Corporation) R3 ManyCam; C:Windowssystem32DRIVERSmcvidrv.sys [66952 2018-07-29] (ManyCam (VISICOM MÉDIA INC.) -> Visicom Media Inc.) S0 MbamElam; C:WindowsSystem32DRIVERSMbamElam.sys [20936 2020-03-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 mcaudrv_simple; C:Windowssystem32driversmcaudrv_x64.sys [35960 2014-12-29] (ManyCam -> Visicom Media Inc.) R3 Netwtw08; C:WindowsSystem32driversNetwtw08.sys [9117472 2019-05-30] (Intel® Wireless Connectivity Solutions -> Intel Corporation) R3 nvlddmkm; C:WindowsSystem32DriverStoreFileRepositorynv_dispi.inf_amd64_ce13a81bcfac4a48nvlddmkm.sys [23251968 2019-12-28] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvStreamKms; C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamKms.sys [30336 2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvad_WaveExtensible; C:Windowssystem32driversnvvad64v.sys [69840 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvhci; C:WindowsSystem32driversnvvhci.sys [75600 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation) R3 Phosgene; C:Windowssystem32DRIVERSPhosgene.sys [34136 2015-09-02] (ADORIASOFT LLC -> Adoriasoft LLC) R0 pwdrvio; C:WindowsSystem32pwdrvio.sys [19152 2019-05-29] (MiniTool Solution Ltd -> ) S3 pwdspio; C:Windowssystem32pwdspio.sys [12504 2019-05-29] (MiniTool Solution Ltd -> ) S3 SbieDrv; C:Program FilesSandboxieSbieDrv.sys [224488 2019-12-16] (Invincea, Inc. -> Sandboxie Holdings, LLC) R3 SensorsSimulatorDriver; C:WindowsSystem32driversWUDFRd.sys [297984 2019-03-19] (Microsoft Windows -> Microsoft Corporation) R3 tap0901; C:WindowsSystem32driverstap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project) R3 tapbullguardvpn; C:WindowsSystem32driverstapbullguardvpn.sys [45192 2019-09-10] (BullGuard LTD -> The OpenVPN Project) R3 Trufos; C:WindowsSystem32DRIVERSTrufos.sys [611728 2019-10-31] (Bitdefender SRL -> Bitdefender) R3 UcmCxUcsiNvppc; C:WindowsSystem32driversUcmCxUcsiNvppc.sys [715224 2019-08-16] (NVIDIA Corporation -> NVIDIA Corporation) R3 VBAudioVACMME; C:WindowsSystem32driversvbaudio_cable64_win7.sys [41192 2014-09-02] (Vincent Burel -> Windows ® Win 7 DDK provider) R3 VBoxNetAdp; C:Windowssystem32DRIVERSVBoxNetAdp6.sys [237368 2020-01-14] (Oracle Corporation -> Oracle Corporation) S3 VBoxUSB; C:WindowsSystem32DriversVBoxUSB.sys [175040 2019-10-11] (Oracle Corporation -> Oracle Corporation) R1 vmkbd3; C:Windowssystem32DRIVERSvmkbd.sys [52288 2019-05-04] (VMware, Inc. -> VMware, Inc.) R3 VOICEMOD_Driver; C:Windowssystem32driversvmdrv.sys [45408 2019-07-02] (Voicemod Sociedad Limitada -> Windows ® Win 7 DDK provider) R0 vsock; C:WindowsSystem32DRIVERSvsock.sys [92040 2019-04-27] (VMware, Inc. -> VMware, Inc.) S3 WdBoot; C:Windowssystem32driverswdWdBoot.sys [45664 2019-12-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:Windowssystem32driverswdWdFilter.sys [355760 2019-12-10] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:WindowsSystem32driverswdWdNisDrv.sys [54192 2019-12-10] (Microsoft Windows -> Microsoft Corporation) S1 amsdk; ??C:Windowssystem32driversamsdk.sys [X] S3 cpuz148; ??C:Windowstempcpuz148cpuz148_x64.sys [X] S3 VBAudioVMVAIOMME; SystemRootSystem32driversvbaudio_vmvaio64_win10.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-17 13:16 – 2020-03-17 13:17 – 000043547 _____ C:UsersEthanDesktopFRST.txt 2020-03-17 13:16 – 2020-03-17 13:17 – 000000000 ____D C:FRST 2020-03-17 13:16 – 2020-03-17 13:16 – 000000000 ____D C:UsersEthanDesktopFRST-OlderVersion 2020-03-17 13:15 – 2020-03-17 13:16 – 002279936 _____ (Farbar) C:UsersEthanDesktopFRST64.exe 2020-03-17 13:13 – 2020-03-17 13:14 – 023908282 _____ C:UsersEthanDownloadsy2mate.com – Dreams is a game that lets you make bootleg games_NQLQ0XGAJTs_240p.mp4 2020-03-17 13:08 – 2020-03-17 13:08 – 000027707 _____ C:UsersEthanDownloadsy2mate.com – Redstone… But only using Target Blocks_So2RlXZ9vkM.mp3 (1).srt 2020-03-17 13:06 – 2020-03-17 13:06 – 000020492 _____ C:UsersEthanDownloadsy2mate.com – Redstone… But only using Target Blocks_So2RlXZ9vkM.mp3.srt 2020-03-16 22:13 – 2020-03-16 22:13 – 000153312 _____ (Malwarebytes) C:Windowssystem32Driversmbae64.sys 2020-03-16 22:13 – 2020-03-16 22:13 – 000002021 _____ C:UsersPublicDesktopMalwarebytes.lnk 2020-03-16 22:13 – 2020-03-16 22:13 – 000002021 _____ C:ProgramDataDesktopMalwarebytes.lnk 2020-03-16 22:13 – 2020-03-16 22:13 – 000000000 ____D C:UsersEthanAppDataLocalmbamtray 2020-03-16 22:13 – 2020-03-16 22:13 – 000000000 ____D C:UsersEthanAppDataLocalmbam 2020-03-16 22:13 – 2020-03-16 22:13 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsMalwarebytes 2020-03-16 22:13 – 2020-03-16 22:13 – 000000000 ____D C:ProgramDataMalwarebytes 2020-03-16 22:13 – 2020-03-16 22:12 – 000020936 _____ (Malwarebytes) C:Windowssystem32DriversMbamElam.sys 2020-03-16 22:12 – 2020-03-16 22:12 – 000000000 ____D C:Program FilesMalwarebytes 2020-03-16 21:05 – 2020-03-16 21:05 – 000000000 ____D C:UsersEthanDocumentsMaestraSuite 2020-03-16 21:02 – 2020-03-16 21:06 – 000000000 ____D C:UsersEthanAppDataRoamingMaestra 2020-03-16 21:02 – 2020-03-16 21:02 – 000000000 ____D C:UsersEthanAppDataLocalmaestra-updater 2020-03-16 14:27 – 2020-03-16 14:27 – 000000068 _____ C:UsersEthanAppDataRoamingchangzhi_leidian.data 2020-03-16 14:27 – 2020-03-16 14:27 – 000000000 ____D C:UsersEthanDocumentsLDPlayer 2020-03-16 14:27 – 2020-03-16 14:27 – 000000000 ____D C:UsersEthanAppDataRoamingChangZhi 2020-03-16 14:27 – 2020-03-16 14:27 – 000000000 ____D C:UsersEthan.LdVirtualBox 2020-03-16 14:27 – 2020-03-16 14:27 – 000000000 ____D C:Program Filesdnplayerext2 2020-03-16 14:25 – 2020-03-16 14:51 – 000000000 ____D C:UsersEthanAppDataRoamingChangZhi2 2020-03-16 14:25 – 2020-03-16 14:25 – 000000000 ____D C:UsersEthanAppDataRoamingFusion_ld 2020-03-15 22:35 – 2020-03-15 22:39 – 000000295 _____ C:UsersEthand4ac4633ebd6440fa397b84f1bc94a3c.7z 2020-03-15 22:34 – 2020-03-15 22:35 – 000000000 ____D C:UsersEthanAppDataLocalNoxSrv 2020-03-15 22:34 – 2020-03-15 22:34 – 000000066 _____ C:UsersEthaninittk.ini 2020-03-15 22:34 – 2020-03-15 22:34 – 000000053 _____ C:UsersEthanuseruid.ini 2020-03-15 22:34 – 2020-03-15 22:34 – 000000045 _____ C:UsersEthannuuid.ini 2020-03-15 22:34 – 2020-03-15 22:34 – 000000041 _____ C:UsersEthaninst.ini 2020-03-15 22:34 – 2020-03-15 22:34 – 000000000 ____D C:UsersEthanNox_share 2020-03-15 22:34 – 2020-03-15 22:34 – 000000000 ____D C:UsersEthanAppDataLocalDBG 2020-03-15 22:33 – 2020-03-15 22:35 – 000000000 ____D C:UsersEthanvmlogs 2020-03-15 22:32 – 2020-03-15 22:39 – 000000000 ____D C:UsersEthanAppDataLocalNox 2020-03-15 19:22 – 2020-03-15 19:46 – 000000000 ____D C:Program FilesMozilla Firefox 2020-03-15 15:20 – 2020-03-15 15:20 – 025444352 _____ (Microsoft Corporation) C:Windowssystem32Hydrogen.dll 2020-03-15 15:20 – 2020-03-15 15:20 – 009930552 _____ (Microsoft Corporation) C:Windowssystem32ntoskrnl.exe 2020-03-15 15:20 – 2020-03-15 15:20 – 007604584 _____ (Microsoft Corporation) C:Windowssystem32Windows.Media.Protection.PlayReady.dll 2020-03-15 15:20 – 2020-03-15 15:20 – 006520776 _____ (Microsoft Corporation) C:WindowsSysWOW64Windows.Media.Protection.PlayReady.dll 2020-03-15 15:20 – 2020-03-15 15:20 – 004563416 _____ (Microsoft Corporation) C:Windowssystem32sppsvc.exe 2020-03-15 15:20 – 2020-03-15 15:20 – 001610240 _____ (Microsoft Corporation) C:Windowssystem32HologramCompositor.dll 2020-03-15 15:20 – 2020-03-15 15:20 – 001398584 _____ (Microsoft Corporation) C:Windowssystem32hvix64.exe 2020-03-15 15:20 – 2020-03-15 15:20 – 001077048 _____ (Microsoft Corporation) C:Windowssystem32hvax64.exe 2020-03-15 15:20 – 2020-03-15 15:20 – 000772096 _____ (Microsoft Corporation) C:Windowssystem32Driverssrv2.sys 2020-03-15 15:20 – 2020-03-15 15:20 – 000689152 _____ (Microsoft Corporation) C:WindowsSysWOW64CPFilters.dll 2020-03-15 15:20 – 2020-03-15 15:20 – 000561464 _____ (Microsoft Corporation) C:Windowssystem32Driversmrxsmb.sys 2020-03-15 13:36 – 2020-03-15 13:36 – 000002433 _____ C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramscemu-no-gyro.lnk 2020-03-15 13:36 – 2020-03-15 13:36 – 000002425 _____ C:UsersEthanDesktopcemu-no-gyro.lnk 2020-03-15 12:07 – 2020-03-15 13:51 – 000000000 ____D C:UsersEthanAppDataRoamingcemu-no-gyro 2020-03-15 12:07 – 2020-03-15 12:07 – 000000000 ____D C:UsersEthanAppDataLocalcemu-no-gyro-updater 2020-03-15 11:20 – 2020-03-15 15:25 – 000000971 _____ C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsWii U USB Helper.lnk 2020-03-15 11:20 – 2020-03-15 15:25 – 000000000 ____D C:UsersEthanAppDataRoamingUSB_HELPER 2020-03-15 11:20 – 2020-03-15 11:20 – 000000923 _____ C:UsersEthanDesktopWii U USB Helper.lnk 2020-03-15 11:20 – 2020-03-15 11:20 – 000000000 ____D C:UsersEthanAppDataLocalHikari06 2020-03-15 11:19 – 2020-03-15 11:19 – 000000000 ____D C:UsersEthanDesktopUSB Helper 2020-03-15 08:56 – 2020-03-15 08:56 – 000000753 _____ C:UsersEthanDesktopFolding@home.lnk 2020-03-15 08:56 – 2020-03-15 08:56 – 000000000 ____D C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsFAHClient 2020-03-14 22:34 – 2020-03-14 22:34 – 000000000 ____D C:UsersEthanAppDataRoamingTwitch Leecher 2020-03-14 22:28 – 2020-03-14 22:28 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsTwitch Leecher 2020-03-14 22:27 – 2020-03-15 10:16 – 000000000 ____D C:UsersEthanDesktopTwitch Leecher 2020-03-14 20:51 – 2020-03-14 20:53 – 000000000 ____D C:UsersEthanAppDataRoamingNofanity 2020-03-14 20:51 – 2020-03-14 20:51 – 000001876 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsNofanity.lnk 2020-03-14 20:51 – 2020-03-14 20:51 – 000001864 _____ C:UsersPublicDesktopNofanity.lnk 2020-03-14 20:51 – 2020-03-14 20:51 – 000001864 _____ C:ProgramDataDesktopNofanity.lnk 2020-03-14 20:51 – 2020-03-14 20:51 – 000000000 ____D C:ProgramDataNofanity 2020-03-14 20:51 – 2020-03-14 20:51 – 000000000 ____D C:Program FilesNofanity 2020-03-12 17:27 – 2020-03-12 17:27 – 000001289 _____ C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsMacroRecorder.lnk 2020-03-12 17:24 – 2020-03-12 17:33 – 000000000 ____D C:UsersEthanAppDataRoamingMacro Recorder 2020-03-12 17:24 – 2020-03-12 17:24 – 000000000 ____D C:UsersEthanDocumentsMacro Recorder 2020-03-12 17:06 – 2020-03-12 17:12 – 000000000 ____D C:UsersEthanAppDataRoamingTechnology Lighthouse 2020-03-12 17:06 – 2020-03-12 17:06 – 000000000 _____ C:UsersEthanAppDataRoamingADF8F0174DAB4265999B9336FFF72A2D.dat 2020-03-12 16:10 – 2020-03-12 16:10 – 000001265 _____ C:UsersPublicDesktopAuto Clicker by MurGee.com for Games.lnk 2020-03-12 16:10 – 2020-03-12 16:10 – 000001265 _____ C:ProgramDataDesktopAuto Clicker by MurGee.com for Games.lnk 2020-03-12 16:10 – 2020-03-12 16:10 – 000001225 _____ C:UsersPublicDesktopAuto Clicker by MurGee.com.lnk 2020-03-12 16:10 – 2020-03-12 16:10 – 000001225 _____ C:ProgramDataDesktopAuto Clicker by MurGee.com.lnk 2020-03-12 16:10 – 2020-03-12 16:10 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsAuto Clicker by MurGee.com 2020-03-12 16:10 – 2020-03-12 16:10 – 000000000 ____D C:Program Files (x86)Auto Clicker by MurGee.com 2020-03-12 13:19 – 2020-03-12 13:19 – 000000000 ____D C:UsersEthanAppDataLocalNBTExplorer 2020-03-11 19:11 – 2020-03-11 19:11 – 000129088 _____ (Oracle Corporation) C:Windowssystem32WindowsAccessBridge-64.dll 2020-03-11 19:11 – 2020-03-11 19:11 – 000000000 ____D C:UsersEthanAppDataRoamingSun 2020-03-11 19:11 – 2020-03-11 19:11 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsJava 2020-03-11 19:10 – 2020-03-11 19:11 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsJava Development Kit 2020-03-11 19:10 – 2020-03-11 19:10 – 000000000 ____D C:Program FilesJava 2020-03-11 15:50 – 2020-03-11 15:50 – 022635008 _____ (Microsoft Corporation) C:Windowssystem32mshtml.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 019850240 _____ (Microsoft Corporation) C:WindowsSysWOW64edgehtml.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 019812352 _____ (Microsoft Corporation) C:Windowssystem32HologramWorld.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 018027008 _____ (Microsoft Corporation) C:WindowsSysWOW64mshtml.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 011607552 _____ (Microsoft Corporation) C:Windowssystem32wmp.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 009711616 _____ (Microsoft Corporation) C:WindowsSysWOW64wmp.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 007905784 _____ (Microsoft Corporation) C:Windowssystem32windows.storage.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 007755776 _____ (Microsoft Corporation) C:Windowssystem32Chakra.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 007263992 _____ (Microsoft Corporation) C:Windowssystem32shell32.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 006084344 _____ (Microsoft Corporation) C:WindowsSysWOW64windows.storage.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 005911040 _____ (Microsoft Corporation) C:WindowsSysWOW64Chakra.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 005764664 _____ (Microsoft Corporation) C:WindowsSysWOW64shell32.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 004898144 _____ (Microsoft Corporation) C:Windowssystem32rtmpltfm.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 004855808 _____ (Microsoft Corporation) C:Windowssystem32jscript9.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 004580352 _____ (Microsoft Corporation) C:Windowssystem32msi.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 003860832 _____ (Microsoft Corporation) C:WindowsSysWOW64rtmpltfm.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 003819520 _____ (Microsoft Corporation) C:WindowsSysWOW64jscript9.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 003799552 _____ (Microsoft Corporation) C:Windowssystem32diagtrack.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 003728896 _____ (Microsoft Corporation) C:Windowssystem32win32kfull.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 003708928 _____ (Microsoft Corporation) C:Windowssystem32AppXDeploymentServer.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 003587896 _____ (Microsoft Corporation) C:Windowssystem32Driversdxgkrnl.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 003488768 _____ (Microsoft Corporation) C:WindowsSysWOW64msi.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 003263488 _____ (Microsoft Corporation) C:Windowssystem32tquery.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002956688 _____ (Microsoft Corporation) C:Windowssystem32mfmp4srcsnk.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002870272 _____ (Microsoft Corporation) C:Windowssystem32mssrch.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002800640 _____ (Microsoft Corporation) C:WindowsSysWOW64win32kfull.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 002768440 _____ (Microsoft Corporation) C:Windowssystem32KernelBase.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002715648 _____ (Microsoft Corporation) C:Windowssystem32win32kbase.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 002698040 _____ (Microsoft Corporation) C:Windowssystem32Driversntfs.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 002561536 _____ (Microsoft Corporation) C:WindowsSysWOW64tquery.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002494744 _____ (Microsoft Corporation) C:Windowssystem32msmpeg2vdec.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002305536 _____ (Microsoft Corporation) C:WindowsSysWOW64mssrch.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002289152 _____ (Microsoft Corporation) C:Windowssystem32AppXDeploymentExtensions.onecore.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002224952 _____ (Microsoft Corporation) C:Windowssystem32ResetEngine.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002180408 _____ (Microsoft Corporation) C:Windowssystem32workfolderssvc.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002087376 _____ (Microsoft Corporation) C:WindowsSysWOW64KernelBase.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002072664 _____ (Microsoft Corporation) C:Windowssystem32mfplat.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 002031104 _____ C:Windowssystem32rdpnano.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001999952 _____ (Microsoft Corporation) C:Windowssystem32ntdll.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001867816 _____ (Microsoft Corporation) C:WindowsSysWOW64mfmp4srcsnk.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001835128 _____ (Microsoft Corporation) C:Windowssystem32mfsrcsnk.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001835008 _____ (Microsoft Corporation) C:Windowssystem32enterprisecsps.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001770552 _____ (Microsoft Corporation) C:Windowssystem32winmde.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001764336 _____ (Microsoft Corporation) C:Windowssystem32WindowsCodecs.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001751040 _____ (Microsoft Corporation) C:Windowssystem32AppXDeploymentExtensions.desktop.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001697792 _____ (Microsoft Corporation) C:Windowssystem32GdiPlus.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001665416 _____ (Microsoft Corporation) C:WindowsSysWOW64user32.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001664896 _____ (Microsoft Corporation) C:WindowsSysWOW64ntdll.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001657120 _____ (Microsoft Corporation) C:Windowssystem32user32.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001647072 _____ (Microsoft Corporation) C:Windowssystem32gdi32full.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001581056 _____ (Microsoft Corporation) C:Windowssystem32qmgr.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001555904 _____ (Microsoft Corporation) C:WindowsSysWOW64mfplat.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001490640 _____ (Microsoft Corporation) C:Windowssystem32mfsvr.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001484600 _____ (Microsoft Corporation) C:WindowsSysWOW64WindowsCodecs.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001480192 _____ (Microsoft Corporation) C:Windowssystem32usocoreworker.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 001458688 _____ (Microsoft Corporation) C:WindowsSysWOW64GdiPlus.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001417976 _____ (Microsoft Corporation) C:WindowsSysWOW64mfsrcsnk.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001413632 _____ (Microsoft Corporation) C:WindowsSysWOW64gdi32full.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001354080 _____ (Microsoft Corporation) C:Windowssystem32rtmpal.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001284096 _____ (Microsoft Corporation) C:Windowssystem32werconcpl.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001282944 _____ (Microsoft Corporation) C:Windowssystem32mfreadwrite.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001214976 _____ (Microsoft Corporation) C:Windowssystem32reseteng.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001153024 _____ (Microsoft Corporation) C:Windowssystem32windowsperformancerecordercontrol.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001149712 _____ (Microsoft Corporation) C:Windowssystem32ApplyTrustOffline.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 001108040 _____ (Microsoft Corporation) C:WindowsSysWOW64mfsvr.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001098720 _____ (Microsoft Corporation) C:Windowssystem32DolbyDecMFT.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001097728 _____ (Microsoft Corporation) C:Windowssystem32Windows.UI.Immersive.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001091936 _____ (Microsoft Corporation) C:Windowssystem32rtmcodecs.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001088000 _____ (Microsoft Corporation) C:Windowssystem32MCRecvSrc.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001083904 _____ (Microsoft Corporation) C:Windowssystem32MusUpdateHandlers.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 001032544 _____ (Microsoft Corporation) C:Windowssystem32ortcengine.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000980320 _____ (Microsoft Corporation) C:WindowsSysWOW64rtmpal.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000952416 _____ (Microsoft Corporation) C:WindowsSysWOW64DolbyDecMFT.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000921088 _____ (Microsoft Corporation) C:Windowssystem32Windows.Internal.Management.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000915296 _____ (Microsoft Corporation) C:WindowsSysWOW64rtmcodecs.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000908504 _____ (Microsoft Corporation) C:Windowssystem32AppXDeploymentClient.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000898048 _____ (Microsoft Corporation) C:Windowssystem32MdmDiagnostics.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000895488 _____ (Microsoft Corporation) C:WindowsSysWOW64Windows.UI.Immersive.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000883712 _____ (Microsoft Corporation) C:WindowsSysWOW64MCRecvSrc.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000877232 _____ (Microsoft Corporation) C:Windowssystem32wer.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000874296 _____ (Microsoft Corporation) C:Windowssystem32Driversdxgmms2.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 000868864 _____ (Microsoft Corporation) C:WindowsSysWOW64windowsperformancerecordercontrol.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000851968 _____ (Microsoft Corporation) C:Windowssystem32SearchIndexer.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000835584 _____ (Microsoft Corporation) C:Windowssystem32WorkfoldersControl.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000757632 _____ (Microsoft Corporation) C:WindowsSysWOW64mfreadwrite.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000734720 _____ (Microsoft Corporation) C:Windowssystem32lpksetup.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000732000 _____ (Microsoft Corporation) C:WindowsSysWOW64ortcengine.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000705536 _____ (Microsoft Corporation) C:Windowssystem32jscript9diag.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000701440 _____ (Microsoft Corporation) C:WindowsSysWOW64Windows.Mirage.Internal.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000680448 _____ (Microsoft Corporation) C:Windowssystem32vpnike.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000680184 _____ (Microsoft Corporation) C:WindowsSysWOW64wer.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000670720 _____ (Microsoft Corporation) C:WindowsSysWOW64SearchIndexer.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000669496 _____ (Microsoft Corporation) C:Windowssystem32computecore.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000668672 _____ (Microsoft Corporation) C:Windowssystem32wsecedit.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000668296 _____ (Microsoft Corporation) C:WindowsSysWOW64AppXDeploymentClient.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000646656 _____ (Microsoft Corporation) C:WindowsSysWOW64Windows.Internal.Management.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000636848 _____ (Microsoft Corporation) C:Windowssystem32sxs.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000613888 _____ (Microsoft Corporation) C:Windowssystem32netprofmsvc.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000605184 _____ (Microsoft Corporation) C:Windowssystem32MusNotification.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000595968 _____ (Microsoft Corporation) C:Windowssystem32vbscript.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000578560 _____ (Microsoft Corporation) C:Windowssystem32SppExtComObj.Exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000562176 _____ (Microsoft Corporation) C:WindowsSysWOW64jscript9diag.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000551824 _____ (Microsoft Corporation) C:WindowsSysWOW64sxs.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000550400 _____ (Microsoft Corporation) C:Windowssystem32win32k.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 000535552 _____ (Microsoft Corporation) C:Windowssystem32usosvc.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000532480 _____ (Microsoft Corporation) C:WindowsSysWOW64vbscript.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000525312 _____ (Microsoft Corporation) C:WindowsSysWOW64wsecedit.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000510768 _____ (Microsoft Corporation) C:Windowssystem32systemreset.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000459688 _____ (Microsoft Corporation) C:Windowssystem32MusNotifyIcon.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000455168 _____ (Microsoft Corporation) C:Windowssystem32upnphost.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000444416 _____ (Microsoft Corporation) C:Windowssystem32MSFlacDecoder.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000441144 _____ (Microsoft Corporation) C:Windowssystem32Driversdxgmms1.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 000401408 _____ (Microsoft Corporation) C:Windowssystem32SearchProtocolHost.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000392192 _____ (Microsoft Corporation) C:Windowssystem32Search.ProtocolHandler.MAPI2.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000380416 _____ (Microsoft Corporation) C:WindowsSysWOW64MSFlacDecoder.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000379904 _____ (Microsoft Corporation) C:Windowssystem32provengine.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000368128 _____ (Microsoft Corporation) C:Windowssystem32mssvp.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000338432 _____ (Microsoft Corporation) C:Windowssystem32AppxAllUserStore.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000336384 _____ (Microsoft Corporation) C:WindowsSysWOW64SearchProtocolHost.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000329216 _____ (Microsoft Corporation) C:Windowssystem32DiagnosticLogCSP.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000328192 _____ (Microsoft Corporation) C:WindowsSysWOW64upnphost.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000324096 _____ (Microsoft Corporation) C:WindowsSysWOW64win32k.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 000299520 _____ (Microsoft Corporation) C:WindowsSysWOW64mssvp.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000294400 _____ (Microsoft Corporation) C:Windowssystem32provops.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000287744 _____ (Microsoft Corporation) C:Windowssystem32MSFlacEncoder.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000283136 _____ (Microsoft Corporation) C:WindowsSysWOW64Search.ProtocolHandler.MAPI2.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000279040 _____ (Microsoft Corporation) C:WindowsSysWOW64AppxAllUserStore.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000277504 _____ (Microsoft Corporation) C:Windowssystem32scecli.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000271872 _____ (Microsoft Corporation) C:Windowssystem32provhandlers.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000265216 _____ (Microsoft Corporation) C:Windowssystem32cdd.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000262656 _____ (Microsoft Corporation) C:Windowssystem32netman.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000248064 _____ (Microsoft Corporation) C:Windowssystem32weretw.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000240640 _____ (Microsoft Corporation) C:Windowssystem32SearchFilterHost.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000239616 _____ (Microsoft Corporation) C:WindowsSysWOW64MSFlacEncoder.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000233472 _____ (Microsoft Corporation) C:Windowssystem32KnobsCore.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000232960 _____ (Microsoft Corporation) C:Windowssystem32provisioningcsp.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000227840 _____ (Microsoft Corporation) C:Windowssystem32IndexedDbLegacy.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000226816 _____ (Microsoft Corporation) C:Windowssystem32netprofm.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000225792 _____ (Microsoft Corporation) C:Windowssystem32WorkFoldersShell.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000221200 _____ (Microsoft Corporation) C:Windowssystem32wermgr.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000214016 _____ (Microsoft Corporation) C:WindowsSysWOW64scecli.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000211968 _____ (Microsoft Corporation) C:WindowsSysWOW64SearchFilterHost.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000206336 _____ (Microsoft Corporation) C:Windowssystem32Driversndiswan.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 000204800 _____ (Microsoft Corporation) C:Windowssystem32mssph.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000201728 _____ (Microsoft Corporation) C:Windowssystem32AppXApplicabilityBlob.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000199480 _____ (Microsoft Corporation) C:WindowsSysWOW64wermgr.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000193592 _____ (Microsoft Corporation) C:WindowsSysWOW64weretw.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000183808 _____ (Microsoft Corporation) C:Windowssystem32ResetEngOnline.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000175616 _____ (Microsoft Corporation) C:WindowsSysWOW64IndexedDbLegacy.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000165504 _____ (Microsoft Corporation) C:Windowssystem32dmcmnutils.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000160768 _____ (Microsoft Corporation) C:WindowsSysWOW64mssph.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000155136 _____ (Microsoft Corporation) C:Windowssystem32Chakradiag.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000148992 _____ (Microsoft Corporation) C:Windowssystem32MDMAppInstaller.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000147456 _____ (Microsoft Corporation) C:Windowssystem32mssprxy.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000146712 _____ (Microsoft Corporation) C:Windowssystem32profext.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000141824 _____ (Microsoft Corporation) C:Windowssystem32provpackageapidll.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000139776 _____ (Microsoft Corporation) C:Windowssystem32Chakrathunk.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000138752 _____ (Microsoft Corporation) C:Windowssystem32DeviceMetadataRetrievalClient.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000131896 _____ (Microsoft Corporation) C:Windowssystem32DTUHandler.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000130112 _____ (Microsoft Corporation) C:WindowsSysWOW64dmcmnutils.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000128512 _____ (Microsoft Corporation) C:Windowssystem32mssitlb.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000127064 _____ (Microsoft Corporation) C:Windowssystem32win32u.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000123904 _____ (Microsoft Corporation) C:Windowssystem32wercplsupport.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000120560 _____ (Microsoft Corporation) C:WindowsSysWOW64profext.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000120320 _____ (Microsoft Corporation) C:Windowssystem32KnobsCsp.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000117248 _____ (Microsoft Corporation) C:WindowsSysWOW64Chakradiag.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000114176 _____ (Microsoft Corporation) C:Windowssystem32Driversagilevpn.sys 2020-03-11 15:50 – 2020-03-11 15:50 – 000113152 _____ (Microsoft Corporation) C:WindowsSysWOW64mssitlb.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000112128 _____ (Microsoft Corporation) C:Windowssystem32AxInstSv.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000105984 _____ (Microsoft Corporation) C:Windowssystem32utcutil.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000105472 _____ (Microsoft Corporation) C:WindowsSysWOW64Chakrathunk.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000105472 _____ (Microsoft Corporation) C:Windowssystem32WorkFolders.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000102912 _____ (Microsoft Corporation) C:Windowssystem32NFCProvisioningPlugin.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000097792 _____ (Microsoft Corporation) C:Windowssystem32provdatastore.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000091136 _____ (Microsoft Corporation) C:Windowssystem32ProvPluginEng.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000089568 _____ (Microsoft Corporation) C:WindowsSysWOW64win32u.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000089088 _____ (Microsoft Corporation) C:Windowssystem32BarcodeProvisioningPlugin.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000084480 _____ (Microsoft Corporation) C:Windowssystem32provtool.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000084480 _____ (Microsoft Corporation) C:Windowssystem32enterpriseresourcemanager.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000078848 _____ (Microsoft Corporation) C:Windowssystem32ProvSysprep.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000077824 _____ (Microsoft Corporation) C:Windowssystem32CustomInstallExec.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000071680 _____ (Microsoft Corporation) C:Windowssystem32lpremove.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000068096 _____ (Microsoft Corporation) C:Windowssystem32udhisapi.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000066560 _____ (Microsoft Corporation) C:Windowssystem32RemovableMediaProvisioningPlugin.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000066048 _____ (Microsoft Corporation) C:WindowsSysWOW64enterpriseresourcemanager.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000060928 _____ (Microsoft Corporation) C:Windowssystem32mf3216.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000060416 _____ (Microsoft Corporation) C:WindowsSysWOW64mssprxy.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000060416 _____ (Microsoft Corporation) C:Windowssystem32msscntrs.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000060416 _____ (Microsoft Corporation) C:Windowssystem32AxInstUI.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000058368 _____ (Microsoft Corporation) C:WindowsSysWOW64udhisapi.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000056672 _____ (Microsoft Corporation) C:Windowssystem32rtmmvrortc.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000055376 _____ (Microsoft Corporation) C:WindowsSysWOW64rtmmvrortc.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000046080 _____ (Microsoft Corporation) C:WindowsSysWOW64msscntrs.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000045568 _____ (Microsoft Corporation) C:WindowsSysWOW64mf3216.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000045056 _____ (Microsoft Corporation) C:Windowssystem32npmproxy.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000044544 _____ (Microsoft Corporation) C:Windowssystem32werdiagcontroller.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000042296 _____ (Microsoft Corporation) C:Windowssystem32SysResetErr.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000040960 _____ (Microsoft Corporation) C:Windowssystem32upnpcont.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000038912 _____ (Microsoft Corporation) C:WindowsSysWOW64werdiagcontroller.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000036352 _____ (Microsoft Corporation) C:Windowssystem32sxstrace.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000035328 _____ (Microsoft Corporation) C:WindowsSysWOW64upnpcont.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000033792 _____ (Microsoft Corporation) C:Windowssystem32Windows.Management.Provisioning.ProxyStub.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000029696 _____ (Microsoft Corporation) C:WindowsSysWOW64sxstrace.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000029696 _____ (Microsoft Corporation) C:Windowssystem32nlmproxy.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000026112 _____ (Microsoft Corporation) C:WindowsSysWOW64msimsg.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000026112 _____ (Microsoft Corporation) C:Windowssystem32msimsg.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000019768 _____ (Microsoft Corporation) C:Windowssystem32ResetEngine.exe 2020-03-11 15:50 – 2020-03-11 15:50 – 000017408 _____ (Microsoft Corporation) C:Windowssystem32nlmsprep.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000016384 _____ (Microsoft Corporation) C:Windowssystem32MUILanguageCleanup.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000014336 _____ (Microsoft Corporation) C:Windowssystem32LangCleanupSysprepAction.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000010752 _____ (Microsoft Corporation) C:Windowssystem32DMAlertListener.ProxyStub.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000010240 _____ (Microsoft Corporation) C:Windowssystem32lpksetupproxyserv.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000008192 _____ (Microsoft Corporation) C:Windowssystem32msimg32.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000007680 _____ (Microsoft Corporation) C:WindowsSysWOW64DMAlertListener.ProxyStub.dll 2020-03-11 15:50 – 2020-03-11 15:50 – 000007168 _____ (Microsoft Corporation) C:WindowsSysWOW64msimg32.dll 2020-03-11 15:43 – 2020-02-11 04:48 – 000390656 _____ (Microsoft Corporation) C:WindowsSysWOW64poqexec.exe 2020-03-11 15:43 – 2020-02-11 04:37 – 000492544 _____ (Microsoft Corporation) C:Windowssystem32poqexec.exe 2020-03-10 19:12 – 2020-03-10 19:12 – 000000000 ____D C:UsersEthanAppDataLocalSkyrim Special Edition 2020-03-10 17:49 – 2020-03-10 17:49 – 000000668 _____ C:UsersEthanDocumentsideazz.txt 2020-03-10 14:03 – 2020-03-10 14:03 – 000000000 ____D C:UsersEthanAppDataRoamingRenPy 2020-03-10 13:55 – 2020-03-10 13:55 – 000000000 ____D C:UsersEthanAppDataLocalLowGampixi 2020-03-09 21:01 – 2020-03-16 12:25 – 000000000 ____D C:UsersEthanDesktop3546 2020-03-07 16:03 – 2020-03-07 16:03 – 000000202 _____ C:UsersEthanDesktopHacknet.url 2020-03-07 14:10 – 2020-03-07 14:10 – 000000138 _____ C:UsersEthanDesktopHot Brass ALPHA.url 2020-03-06 22:49 – 2020-03-06 22:49 – 000000000 ____D C:UsersEthanAppDataLocalLowSimulators Live 2020-03-06 22:37 – 2020-03-06 22:37 – 000000000 ____D C:UsersEthanAppDataLocalLowPyramidGames 2020-03-05 20:17 – 2020-03-05 23:08 – 000000976 _____ C:UsersEthanDesktopPC Building Simulator.lnk 2020-03-05 20:17 – 2020-03-05 20:17 – 000000000 ____D C:UsersEthanAppDataLocalLowThe Irregular Corp 2020-03-05 20:17 – 2020-03-05 20:17 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsPC Building Simulator NZXT Workshop 2020-03-05 17:12 – 2020-03-05 17:12 – 000000000 ____D C:UsersEthanAppDataLocalLowWalk with Kings 2020-03-05 16:37 – 2020-03-05 16:50 – 000000000 ____D C:UsersEthanAppDataLocalSuper_Hiking_League 2020-03-05 16:36 – 2020-03-05 16:36 – 000000000 ____D C:UsersEthanAppDataLocalLowSplashteam 2020-03-05 16:18 – 2020-03-05 16:19 – 000000000 ____D C:UsersEthanAppDataLocalUser Data 2020-03-05 16:18 – 2020-03-05 16:18 – 000000000 ____D C:UsersEthanAppDataLocalnwjs 2020-03-04 16:05 – 2020-03-04 16:05 – 000000000 ____D C:UsersEthanAppDataLocalLowAkamurasakiGames 2020-03-04 13:30 – 2020-03-04 13:30 – 000000000 ____D C:UsersEthanAppDataLocalBusSimulator18 2020-03-04 13:28 – 2020-03-04 13:28 – 000000000 ____D C:UsersEthanAppDataLocalLowGrynsoft 2020-03-03 22:12 – 2020-03-11 17:40 – 000004532 _____ C:Windowssystem32TasksAdobe Flash Player NPAPI Notifier 2020-03-03 22:12 – 2020-03-11 17:40 – 000004380 _____ C:Windowssystem32TasksAdobe Flash Player Updater 2020-03-01 19:25 – 2020-03-01 19:25 – 004825600 _____ (Microsoft Corporation) C:Windowssystem32d3d12SDKLayers.dll 2020-03-01 19:25 – 2020-03-01 19:25 – 003557888 _____ (Microsoft Corporation) C:WindowsSysWOW64d3d12SDKLayers.dll 2020-03-01 19:25 – 2020-03-01 19:25 – 000303616 _____ (Microsoft Corporation) C:Windowssystem32DirectML.Debug.dll 2020-03-01 19:25 – 2020-03-01 19:25 – 000214016 _____ (Microsoft Corporation) C:WindowsSysWOW64DirectML.Debug.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 025900544 _____ (Microsoft Corporation) C:Windowssystem32edgehtml.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 007259648 _____ (Microsoft Corporation) C:Windowssystem32ieframe.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 006436352 _____ (Microsoft Corporation) C:Windowssystem32twinui.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 006285312 _____ (Microsoft Corporation) C:WindowsSysWOW64ieframe.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 006168064 _____ (Microsoft Corporation) C:Windowssystem32twinui.pcshell.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 005112832 _____ (Microsoft Corporation) C:WindowsSysWOW64twinui.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 005040640 _____ (Microsoft Corporation) C:Windowssystem32wininet.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 004622280 _____ (Microsoft Corporation) C:Windowsexplorer.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 004538880 _____ (Microsoft Corporation) C:WindowsSysWOW64wininet.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 004471296 _____ (Microsoft Corporation) C:Windowssystem32InputService.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 004348408 _____ (Microsoft Corporation) C:Windowssystem32Windows.Mirage.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 004140544 _____ (Microsoft Corporation) C:Windowssystem32SystemSettingsThresholdAdminFlowUI.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 004129648 _____ (Microsoft Corporation) C:Windowssystem32mfcore.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 004048896 _____ (Microsoft Corporation) C:Windowssystem32SRH.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 003971808 _____ (Microsoft Corporation) C:WindowsSysWOW64explorer.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 003552768 _____ (Microsoft Corporation) C:Windowssystem32dwmcore.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 003371720 _____ (Microsoft Corporation) C:Windowssystem32combase.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 003260928 _____ (Microsoft Corporation) C:Windowssystem32esent.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 003243296 _____ (Microsoft Corporation) C:WindowsSysWOW64Windows.Mirage.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 003143168 _____ (Microsoft Corporation) C:Windowssystem32directml.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002986808 _____ (Microsoft Corporation) C:Windowssystem32Driverstcpip.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 002875904 _____ (Microsoft Corporation) C:WindowsSysWOW64esent.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002808832 _____ (Microsoft Corporation) C:Windowssystem32WsmSvc.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002773568 _____ (Microsoft Corporation) C:Windowssystem32iertutil.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002755584 _____ (Microsoft Corporation) C:WindowsSysWOW64mshtml.tlb 2020-03-01 19:24 – 2020-03-01 19:24 – 002755584 _____ (Microsoft Corporation) C:Windowssystem32mshtml.tlb 2020-03-01 19:24 – 2020-03-01 19:24 – 002740736 _____ (Microsoft Corporation) C:WindowsSysWOW64directml.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002584008 _____ (Microsoft Corporation) C:WindowsSysWOW64combase.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002522112 _____ (Microsoft Corporation) C:Windowssystem32UIAutomationCore.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002474496 _____ (Microsoft Corporation) C:Windowssystem32twinapi.appcore.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002453504 _____ (Microsoft Corporation) C:Windowssystem32InstallService.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002315680 _____ (Microsoft Corporation) C:WindowsSysWOW64msmpeg2vdec.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002307584 _____ (Microsoft Corporation) C:WindowsSysWOW64WsmSvc.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002259872 _____ (Microsoft Corporation) C:WindowsSysWOW64iertutil.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002157056 _____ (Microsoft Corporation) C:Windowssystem32wlidsvc.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 002021888 _____ (Microsoft Corporation) C:WindowsSysWOW64UIAutomationCore.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001985104 _____ (Microsoft Corporation) C:WindowsSysWOW64twinapi.appcore.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001972536 _____ (Microsoft Corporation) C:Windowssystem32Driversrefs.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 001885184 _____ (Microsoft Corporation) C:Windowssystem32FntCache.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001854976 _____ (Microsoft Corporation) C:Windowssystem32urlmon.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001823232 _____ (Microsoft Corporation) C:Windowssystem32Windows.Media.Speech.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001762304 _____ (Microsoft Corporation) C:Windowssystem32wwansvc.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001757304 _____ (Microsoft Corporation) C:Windowssystem32winload.efi 2020-03-01 19:24 – 2020-03-01 19:24 – 001743888 _____ (Microsoft Corporation) C:Windowssystem32sppobjs.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001729024 _____ (Microsoft Corporation) C:WindowsSysWOW64InstallService.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001688064 _____ (Microsoft Corporation) C:Windowssystem32XpsPrint.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001684992 _____ (Microsoft Corporation) C:WindowsSysWOW64urlmon.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001609216 _____ (Microsoft Corporation) C:Windowssystem32wpncore.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001540096 _____ (Microsoft Corporation) C:Windowssystem32rdpcorets.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001513040 _____ (Microsoft Corporation) C:Windowssystem32winload.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 001482040 _____ (Microsoft Corporation) C:Windowssystem32Driversndis.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 001481216 _____ (Microsoft Corporation) C:Windowssystem32rdpsharercom.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001428992 _____ (Microsoft Corporation) C:Windowssystem32Driversbthport.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 001412096 _____ (Microsoft Corporation) C:Windowssystem32SystemSettings.Handlers.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001396152 _____ (Microsoft Corporation) C:Windowssystem32ole32.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001394168 _____ (Microsoft Corporation) C:Windowssystem32WinTypes.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001366128 _____ (Microsoft Corporation) C:Windowssystem32winresume.efi 2020-03-01 19:24 – 2020-03-01 19:24 – 001319936 _____ (Microsoft Corporation) C:Windowssystem32webplatstorageserver.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001283600 _____ (Microsoft Corporation) C:Windowssystem32SecConfig.efi 2020-03-01 19:24 – 2020-03-01 19:24 – 001273856 _____ (Microsoft Corporation) C:Windowssystem32rdpcore.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001264128 _____ (Microsoft Corporation) C:WindowsSysWOW64Windows.Media.Speech.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001260544 _____ (Microsoft Corporation) C:WindowsSysWOW64rdpsharercom.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001260480 _____ (Microsoft Corporation) C:Windowssystem32msctf.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001218632 _____ (Microsoft Corporation) C:Windowssystem32ClipUp.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 001190912 _____ (Microsoft Corporation) C:Windowssystem32Microsoft.Graphics.Display.DisplayEnhancementService.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001182448 _____ (Microsoft Corporation) C:Windowssystem32winresume.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 001180160 _____ (Microsoft Corporation) C:Windowssystem32localspl.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001092096 _____ (Microsoft Corporation) C:Windowssystem32TpmCoreProvisioning.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001080832 _____ (Microsoft Corporation) C:WindowsSysWOW64rdpcore.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001071184 _____ (Microsoft Corporation) C:Windowssystem32Taskmgr.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 001057792 _____ (Microsoft Corporation) C:Windowssystem32wcmsvc.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001054376 _____ (Microsoft Corporation) C:WindowsSysWOW64msctf.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001031680 _____ (Microsoft Corporation) C:WindowsSysWOW64XpsPrint.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001027000 _____ (Microsoft Corporation) C:Windowssystem32ClipSVC.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001012792 _____ (Microsoft Corporation) C:WindowsSysWOW64mfmpeg2srcsnk.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001007672 _____ (Microsoft Corporation) C:WindowsSysWOW64ole32.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 001000960 _____ (Microsoft Corporation) C:Windowssystem32Windows.Mirage.Internal.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000988160 _____ (Microsoft Corporation) C:Windowssystem32refsutil.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000983896 _____ (Microsoft Corporation) C:Windowssystem32winhttp.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000974848 _____ (Microsoft Corporation) C:Windowssystem32uDWM.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000945384 _____ (Microsoft Corporation) C:Windowssystem32dxgi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000935040 _____ (Microsoft Corporation) C:WindowsSysWOW64Taskmgr.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000929144 _____ (Microsoft Corporation) C:Windowssystem32SecurityHealthService.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000923136 _____ (Microsoft Corporation) C:Windowssystem32EdgeManager.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000916480 _____ (Microsoft Corporation) C:Windowssystem32Windows.UI.Core.TextInput.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000914944 _____ (Microsoft Corporation) C:Windowssystem32Windows.Security.Authentication.OnlineId.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000892696 _____ (Microsoft Corporation) C:WindowsSysWOW64WinTypes.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000878080 _____ (Microsoft Corporation) C:Windowssystem32Windows.Management.Service.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000863232 _____ (Microsoft Corporation) C:Windowssystem32win32spl.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000845312 _____ (Microsoft Corporation) C:Windowssystem32winlogon.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000843776 _____ (Microsoft Corporation) C:WindowsSysWOW64webplatstorageserver.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000838144 _____ (Microsoft Corporation) C:Windowssystem32SettingsHandlers_Language.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000836608 _____ (Microsoft Corporation) C:WindowsSysWOW64TpmCoreProvisioning.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000833616 _____ (Microsoft Corporation) C:Windowssystem32pkeyhelper.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000814080 _____ (Microsoft Corporation) C:Windowssystem32comdlg32.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000802304 _____ (Microsoft Corporation) C:Windowssystem32bisrv.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000796904 _____ (Microsoft Corporation) C:Windowssystem32oleaut32.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000783480 _____ (Microsoft Corporation) C:Windowssystem32tcblaunch.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000782848 _____ (Microsoft Corporation) C:Windowssystem32wifinetworkmanager.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000776488 _____ (Microsoft Corporation) C:WindowsSysWOW64dxgi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000769552 _____ (Microsoft Corporation) C:WindowsSysWOW64winhttp.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000765440 _____ (Microsoft Corporation) C:Windowssystem32uReFS.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000749568 _____ (Microsoft Corporation) C:Windowssystem32ActivationManager.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000748032 _____ (Microsoft Corporation) C:WindowsSysWOW64Windows.Security.Authentication.OnlineId.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000741392 _____ (Microsoft Corporation) C:Windowssystem32LicensingWinRT.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000710144 _____ (Microsoft Corporation) C:Windowssystem32odbc32.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000691712 _____ (Microsoft Corporation) C:WindowsSysWOW64comdlg32.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000678912 _____ (Microsoft Corporation) C:Windowssystem32daxexec.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000667136 _____ (Microsoft Corporation) C:WindowsSysWOW64EdgeManager.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000661816 _____ (Microsoft Corporation) C:Windowssystem32Driversafd.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000654336 _____ (Microsoft Corporation) C:WindowsSysWOW64uReFS.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000649728 _____ (Microsoft Corporation) C:Windowssystem32wlidprov.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000642216 _____ (Microsoft Corporation) C:Windowssystem32TextInputFramework.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000638464 _____ (Microsoft Corporation) C:Windowssystem32MBMediaManager.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000637240 _____ (Microsoft Corporation) C:Windowssystem32Driversstorport.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000627216 _____ (Microsoft Corporation) C:WindowsSysWOW64LicensingWinRT.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000605896 _____ (Microsoft Corporation) C:Windowssystem32sechost.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000604160 _____ (Microsoft Corporation) C:WindowsSysWOW64odbc32.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000599552 _____ (Microsoft Corporation) C:WindowsSysWOW64ActivationManager.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000592896 _____ (Microsoft Corporation) C:WindowsSysWOW64oleaut32.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000568832 _____ (Microsoft Corporation) C:Windowssystem32wpnprv.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000568832 _____ (Microsoft Corporation) C:Windowssystem32Windows.Media.Speech.UXRes.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000562688 _____ (Microsoft Corporation) C:Windowssystem32iprtrmgr.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000540672 _____ (Microsoft Corporation) C:Windowssystem32winspool.drv 2020-03-01 19:24 – 2020-03-01 19:24 – 000531768 _____ (Microsoft Corporation) C:Windowssystem32DriversUSBXHCI.SYS 2020-03-01 19:24 – 2020-03-01 19:24 – 000526848 _____ (Microsoft Corporation) C:WindowsSysWOW64wlidprov.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000522384 _____ (Microsoft Corporation) C:Windowssystem32SystemSettingsAdminFlows.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000518656 _____ (Microsoft Corporation) C:Windowssystem32ncsi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000516096 _____ (Microsoft Corporation) C:WindowsSysWOW64iprtrmgr.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000500224 _____ (Microsoft Corporation) C:Windowssystem32mprdim.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000489984 _____ (Microsoft Corporation) C:Windowssystem32profsvc.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000478792 _____ (Microsoft Corporation) C:WindowsSysWOW64sechost.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000477496 _____ (Microsoft Corporation) C:Windowssystem32DriversFWPKCLNT.SYS 2020-03-01 19:24 – 2020-03-01 19:24 – 000469504 _____ (Microsoft Corporation) C:WindowsSysWOW64daxexec.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000460800 _____ (Microsoft Corporation) C:Windowssystem32slui.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000457216 _____ (Microsoft Corporation) C:Windowssystem32Driverscldflt.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000457016 _____ (Microsoft Corporation) C:Windowssystem32Driversrdbss.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000448000 _____ (Microsoft Corporation) C:Windowssystem32SettingsEnvironment.Desktop.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000443904 _____ (Microsoft Corporation) C:Windowssystem32edgeIso.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000435200 _____ (Microsoft Corporation) C:Windowssystem32wincorlib.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000433152 _____ (Microsoft Corporation) C:Windowssystem32MicrosoftAccountExtension.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000429880 _____ (Microsoft Corporation) C:Windowssystem32Driversvolsnap.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000415744 _____ (Microsoft Corporation) C:WindowsSysWOW64winspool.drv 2020-03-01 19:24 – 2020-03-01 19:24 – 000403456 _____ (Microsoft Corporation) C:WindowsSysWOW64mprdim.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000382976 _____ (Microsoft Corporation) C:Windowssystem32nlasvc.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000358912 _____ (Microsoft Corporation) C:Windowssystem32dusmsvc.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000355840 _____ (Microsoft Corporation) C:Windowssystem32XpsDocumentTargetPrint.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000355000 _____ (Microsoft Corporation) C:Windowssystem32Driversintelpep.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000353960 _____ (Microsoft Corporation) C:Windowssystem32sppwinob.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000337920 _____ (Microsoft Corporation) C:Windowssystem32DriversAcx01000.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000330240 _____ (Microsoft Corporation) C:Windowssystem32omadmclient.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000327680 _____ (Microsoft Corporation) C:WindowsSysWOW64edgeIso.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000320312 _____ (Microsoft Corporation) C:Windowssystem32SecurityHealthAgent.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000309248 _____ (Microsoft Corporation) C:Windowssystem32Driverssrvnet.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000308736 _____ (Microsoft Corporation) C:Windowssystem32msIso.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000307712 _____ (Microsoft Corporation) C:WindowsSysWOW64wincorlib.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000307712 _____ (Microsoft Corporation) C:Windowssystem32sppcomapi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000306696 _____ (Microsoft Corporation) C:Windowssystem32Driversusbvideo.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000291840 _____ (Microsoft Corporation) C:Windowssystem32Driversahcache.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000291328 _____ (Microsoft Corporation) C:Windowssystem32DeviceDirectoryClient.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000287232 _____ (Microsoft Corporation) C:WindowsSysWOW64sppcomapi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000285184 _____ (Microsoft Corporation) C:Windowssystem32WsmWmiPl.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000282112 _____ (Microsoft Corporation) C:Windowssystem32ngcpopkeysrv.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000273408 _____ (Microsoft Corporation) C:Windowssystem32MicrosoftAccountCloudAP.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000268288 _____ (Microsoft Corporation) C:Windowssystem32dot3svc.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000263168 _____ (Microsoft Corporation) C:Windowssystem32wpnservice.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000260920 _____ (Microsoft Corporation) C:Windowssystem32Driversmrxsmb20.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000259584 _____ (Microsoft Corporation) C:Windowssystem32wcmcsp.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000258048 _____ (Microsoft Corporation) C:Windowssystem32VPNv2CSP.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000251904 _____ (Microsoft Corporation) C:WindowsSysWOW64msIso.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000251392 _____ (Microsoft Corporation) C:WindowsSysWOW64XpsDocumentTargetPrint.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000250896 _____ (Microsoft Corporation) C:Windowssystem32Driverstpm.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000250880 _____ (Microsoft Corporation) C:Windowssystem32Driverswinnat.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000239104 _____ (Microsoft Corporation) C:Windowssystem32vdsbas.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000235520 _____ (Microsoft Corporation) C:WindowsSysWOW64WsmWmiPl.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000234984 _____ (Microsoft Corporation) C:Windowssystem32EditionUpgradeManagerObj.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000231936 _____ (Microsoft Corporation) C:Windowssystem32TetheringMgr.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000231936 _____ (Microsoft Corporation) C:Windowssystem32InstallServiceTasks.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000228864 _____ (Microsoft Corporation) C:Windowssystem32MicrosoftAccountTokenProvider.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000224056 _____ (Microsoft Corporation) C:Windowssystem32Driversintelppm.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000222520 _____ (Microsoft Corporation) C:Windowssystem32Driversataport.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000213984 _____ (Microsoft Corporation) C:WindowsSysWOW64EditionUpgradeManagerObj.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000210744 _____ (Microsoft Corporation) C:Windowssystem32tcbloader.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000208696 _____ (Microsoft Corporation) C:Windowssystem32Driversprocessr.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000201744 _____ (Microsoft Corporation) C:Windowssystem32Driverswcifs.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000201528 _____ (Microsoft Corporation) C:Windowssystem32Driversamdppm.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000199992 _____ (Microsoft Corporation) C:Windowssystem32Driversamdk8.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000183608 _____ (Microsoft Corporation) C:Windowssystem32Driversusbccgp.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000182272 _____ (Microsoft Corporation) C:Windowssystem32appinfo.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000181248 _____ (Microsoft Corporation) C:Windowssystem32notepad.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000181248 _____ (Microsoft Corporation) C:Windowsnotepad.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000180232 _____ (Microsoft Corporation) C:Windowssystem32Driverspdc.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000179712 _____ (Microsoft Corporation) C:WindowsSysWOW64InstallServiceTasks.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000179712 _____ (Microsoft Corporation) C:Windowssystem32LanguageComponentsInstaller.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000179200 _____ (Microsoft Corporation) C:Windowssystem32rtm.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000177152 _____ (Microsoft Corporation) C:Windowssystem32EditionUpgradeHelper.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000174592 _____ (Microsoft Corporation) C:Windowssystem32WsmAuto.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000174392 _____ (Microsoft Corporation) C:Windowssystem32Driversstorahci.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000168448 _____ (Microsoft Corporation) C:WindowsSysWOW64EditionUpgradeHelper.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000166400 _____ (Microsoft Corporation) C:WindowsSysWOW64MicrosoftAccountTokenProvider.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000164776 _____ (Microsoft Corporation) C:Windowssystem32omadmapi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000161792 _____ (Microsoft Corporation) C:WindowsSysWOW64rtm.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000155136 _____ (Microsoft Corporation) C:WindowsSysWOW64notepad.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000151568 _____ (Microsoft Corporation) C:Windowssystem32Driversvmbus.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000146432 _____ (Microsoft Corporation) C:Windowssystem32DeviceUpdateAgent.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000144384 _____ (Microsoft Corporation) C:Windowssystem32GraphicsCapture.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000143872 _____ (Microsoft Corporation) C:WindowsSysWOW64WsmAuto.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000141840 _____ (Microsoft Corporation) C:Windowssystem32Driversstornvme.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000138752 _____ (Microsoft Corporation) C:Windowssystem32InputLocaleManager.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000138240 _____ (Microsoft Corporation) C:Windowssystem32TelephonyInteractiveUser.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000137216 _____ (Microsoft Corporation) C:Windowssystem32pnpclean.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000136328 _____ (Microsoft Corporation) C:WindowsSysWOW64omadmapi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000135168 _____ (Microsoft Corporation) C:Windowssystem32DriversNdisImPlatform.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000133944 _____ (Microsoft Corporation) C:Windowssystem32ImplatSetup.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000133256 _____ (Microsoft Corporation) C:Windowssystem32profapi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000128312 _____ (Microsoft Corporation) C:Windowssystem32wifitask.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000120048 _____ (Microsoft Corporation) C:Windowssystem32OpenWith.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000118784 _____ (Microsoft Corporation) C:Windowssystem32Windows.Internal.Taskbar.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000114688 _____ (Microsoft Corporation) C:Windowssystem32Drivershdaudbus.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000114688 _____ (Microsoft Corporation) C:Windowssystem32Driversbthenum.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000108032 _____ (Microsoft Corporation) C:Windowssystem32wwanprotdim.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000107832 _____ (Microsoft Corporation) C:Windowssystem32SecurityHealthProxyStub.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000107520 _____ (Microsoft Corporation) C:WindowsSysWOW64GraphicsCapture.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000105832 _____ (Microsoft Corporation) C:WindowsSysWOW64OpenWith.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000103936 _____ (Microsoft Corporation) C:Windowssystem32dot3msm.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000102760 _____ (Microsoft Corporation) C:WindowsSysWOW64profapi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000099328 _____ (Microsoft Corporation) C:Windowssystem32DriversBTHUSB.SYS 2020-03-01 19:24 – 2020-03-01 19:24 – 000098104 _____ (Microsoft Corporation) C:Windowssystem32Driverscrashdmp.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000097080 _____ (Microsoft Corporation) C:Windowssystem32rdpudd.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000093184 _____ (Microsoft Corporation) C:Windowssystem32nlaapi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000092672 _____ (Microsoft Corporation) C:Windowssystem32EnterpriseDesktopAppMgmtCSP.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000092160 _____ (Microsoft Corporation) C:Windowssystem32dot3api.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000089616 _____ (Microsoft Corporation) C:Windowssystem32DeviceReactivation.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000089088 _____ (Microsoft Corporation) C:Windowssystem32asycfilt.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000087552 _____ (Microsoft Corporation) C:WindowsSysWOW64dot3api.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000087040 _____ (Microsoft Corporation) C:WindowsSysWOW64dot3msm.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000087040 _____ (Microsoft Corporation) C:Windowssystem32EditBufferTestHook.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000084992 _____ (Microsoft Corporation) C:Windowssystem32WSManMigrationPlugin.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000076288 _____ (Microsoft Corporation) C:Windowssystem32autopilot.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000074752 _____ (Microsoft Corporation) C:WindowsSysWOW64asycfilt.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000070656 _____ (Microsoft Corporation) C:Windowssystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000069632 _____ (Microsoft Corporation) C:Windowssystem32Driversmonitor.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000068408 _____ (Microsoft Corporation) C:WindowsSysWOW64DeviceReactivation.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000067112 _____ (Microsoft Corporation) C:Windowssystem32WindowsManagementServiceWinRt.ProxyStub.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000066336 _____ (Microsoft Corporation) C:Windowssystem32wlrmdr.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000066048 _____ (Microsoft Corporation) C:WindowsSysWOW64WSManMigrationPlugin.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000065536 _____ (Microsoft Corporation) C:Windowssystem32iemigplugin.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000063488 _____ (Microsoft Corporation) C:WindowsSysWOW64iemigplugin.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000063288 _____ (Microsoft Corporation) C:Windowssystem32SecurityHealthHost.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000061952 _____ (Microsoft Corporation) C:WindowsSysWOW64WsmRes.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000061952 _____ (Microsoft Corporation) C:Windowssystem32WsmRes.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000056632 _____ (Microsoft Corporation) C:Windowssystem32Driverspciidex.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000054784 _____ (Microsoft Corporation) C:Windowssystem32MSAProfileNotificationHandler.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000052736 _____ (Microsoft Corporation) C:Windowssystem32jsproxy.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000048640 _____ (Microsoft Corporation) C:Windowssystem32dusmapi.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000048256 _____ (Microsoft Corporation) C:Windowssystem32tbs.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000046080 _____ (Microsoft Corporation) C:Windowssystem32wsmprovhost.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000045568 _____ (Microsoft Corporation) C:Windowssystem32cellulardatacapabilityhandler.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000045056 _____ (Microsoft Corporation) C:WindowsSysWOW64jsproxy.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000043520 _____ (Microsoft Corporation) C:Windowssystem32LaunchWinApp.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000043008 _____ (Microsoft Corporation) C:Windowssystem32WiredNetworkCSP.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000042336 _____ (Microsoft Corporation) C:WindowsSysWOW64tbs.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000041984 _____ (Microsoft Corporation) C:Windowssystem32WSManHTTPConfig.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000041472 _____ (Microsoft Corporation) C:Windowssystem32WordBreakers.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000040960 _____ (Microsoft Corporation) C:Windowssystem32Driversafunix.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000037888 _____ (Microsoft Corporation) C:Windowssystem32dusmtask.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000037376 _____ (Microsoft Corporation) C:WindowsSysWOW64wsmprovhost.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000036864 _____ (Microsoft Corporation) C:Windowssystem32DriversBthMini.SYS 2020-03-01 19:24 – 2020-03-01 19:24 – 000036352 _____ (Microsoft Corporation) C:WindowsSysWOW64WSManHTTPConfig.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000033280 _____ (Microsoft Corporation) C:WindowsSysWOW64LaunchWinApp.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000032256 _____ (Microsoft Corporation) C:Windowssystem32WsmAgent.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000032056 _____ (Microsoft Corporation) C:Windowssystem32Driversrdpvideominiport.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000031232 _____ (Microsoft Corporation) C:Windowssystem32FaxPrinterInstaller.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000030720 _____ (Microsoft Corporation) C:Windowssystem32DriversKNetPwrDepBroker.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000030008 _____ (Microsoft Corporation) C:Windowssystem32Driversatapi.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000029712 _____ (Microsoft Corporation) C:Windowssystem32Driverstbs.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000029696 _____ (Microsoft Corporation) C:WindowsSysWOW64Driversafunix.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000028936 _____ (Microsoft Corporation) C:Windowssystem32vmbuspipe.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000026112 _____ (Microsoft Corporation) C:WindowsSysWOW64WsmAgent.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000025600 _____ (Microsoft Corporation) C:Windowssystem32autopilotdiag.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000024064 _____ (Microsoft Corporation) C:Windowssystem32wci.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000023040 _____ (Microsoft Corporation) C:Windowssystem32msauserext.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000019984 _____ (Microsoft Corporation) C:Windowssystem32Driversintelide.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000019456 _____ (Microsoft Corporation) C:Windowssystem32mpnotify.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000018944 _____ (Microsoft Corporation) C:WindowsSysWOW64msauserext.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000016912 _____ (Microsoft Corporation) C:Windowssystem32Driverspciide.sys 2020-03-01 19:24 – 2020-03-01 19:24 – 000015872 _____ (Microsoft Corporation) C:Windowssystem32wsmplpxy.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000012288 _____ (Microsoft Corporation) C:Windowssystem32pacjsworker.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000011776 _____ (Microsoft Corporation) C:WindowsSysWOW64wsmplpxy.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000011776 _____ (Microsoft Corporation) C:Windowssystem32LaunchTM.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000011776 _____ (Microsoft Corporation) C:Windowssystem32iprtprio.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000010240 _____ (Microsoft Corporation) C:WindowsSysWOW64LaunchTM.exe 2020-03-01 19:24 – 2020-03-01 19:24 – 000009216 _____ (Microsoft Corporation) C:WindowsSysWOW64iprtprio.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000003584 _____ (Microsoft Corporation) C:WindowsSysWOW64TpmCertResources.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000003584 _____ (Microsoft Corporation) C:Windowssystem32TpmCertResources.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000002560 _____ (Microsoft Corporation) C:Windowssystem32tier2punctuations.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000002560 _____ (Microsoft Corporation) C:Windowssystem32TelephonyInteractiveUserRes.dll 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth9.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth8.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth7.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth6.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth5.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth4.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth3.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth2.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth12.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth11.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth10.bin 2020-03-01 19:24 – 2020-03-01 19:24 – 000000315 _____ C:Windowssystem32DrtmAuth1.bin 2020-02-28 17:27 – 2020-02-28 17:27 – 000000000 ____D C:Program Files (x86)Microsoft XNA 2020-02-28 15:35 – 2020-02-28 15:35 – 000002451 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsWord.lnk 2020-02-28 15:35 – 2020-02-28 15:35 – 000002450 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsPowerPoint.lnk 2020-02-28 15:35 – 2020-02-28 15:35 – 000002414 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsAccess.lnk 2020-02-28 15:35 – 2020-02-28 15:35 – 000002413 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsExcel.lnk 2020-02-28 15:35 – 2020-02-28 15:35 – 000002407 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsOutlook.lnk 2020-02-28 15:35 – 2020-02-28 15:35 – 000002401 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsPublisher.lnk 2020-02-28 15:35 – 2020-02-28 15:35 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsMicrosoft Office Tools 2020-02-25 19:51 – 2020-02-25 19:51 – 000000000 ___SH C:UsersPublicShared Files 2020-02-25 19:41 – 2020-02-25 19:41 – 000000269 _____ C:UsersEthanDesktopFortnite.url 2020-02-25 18:26 – 2020-02-25 18:26 – 000000126 _____ C:UsersEthanDocumentsPASSWORDS.txt 2020-02-22 00:35 – 2020-02-22 00:35 – 000339320 _____ C:UsersEthanDesktopcc_20200222_003516.reg 2020-02-22 00:30 – 2020-02-22 00:30 – 000003908 _____ C:Windowssystem32TasksCCleaner Update 2020-02-22 00:30 – 2020-02-22 00:30 – 000002846 _____ C:Windowssystem32TasksCCleanerSkipUAC 2020-02-22 00:30 – 2020-02-22 00:30 – 000000599 _____ C:UsersEthanDesktopCCleaner.lnk 2020-02-22 00:30 – 2020-02-22 00:30 – 000000000 ____D C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsCCleaner 2020-02-21 21:48 – 2020-02-21 21:48 – 000000000 ____D C:Program Files (x86)F-Secure 2020-02-21 21:45 – 2020-02-21 22:32 – 000000000 ____D C:ProgramDataF-Secure 2020-02-21 21:45 – 2020-02-21 21:52 – 000000000 ____D C:UsersEthanAppDataLocalF-Secure 2020-02-20 23:26 – 2020-02-20 23:34 – 000002508 _____ C:UsersEthanDocumentsNew Database.odb 2020-02-20 23:25 – 2020-02-20 23:25 – 000000000 ____D C:UsersEthanAppDataRoamingLibreOffice 2020-02-19 19:25 – 2020-02-26 01:27 – 000000000 ____D C:UsersEthan.ScreamingFrogSEOSpider 2020-02-19 19:25 – 2020-02-19 19:25 – 000000000 ____D C:UsersEthanAppDataRoaminguk.co.screamingfrog.seospider.k.b 2020-02-19 19:24 – 2020-02-19 19:24 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsScreaming Frog SEO Spider 2020-02-19 17:16 – 2020-02-20 01:56 – 000000000 ____D C:Program FilesAgent 2020-02-18 23:31 – 2020-02-18 23:32 – 000000000 ____D C:Program FilesVirtual Audio Cable 2020-02-18 23:31 – 2020-02-18 23:31 – 000216504 _____ (Eugene V. Muzychenko) C:Windowssystem32Driversvrtaucbl.sys 2020-02-18 23:31 – 2020-02-18 23:31 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsVirtual Audio Cable 2020-02-18 23:10 – 2020-02-18 23:10 – 001193161 _____ C:Windowsunins000.exe 2020-02-18 23:10 – 2020-02-18 23:10 – 000002817 _____ C:Windowsunins000.dat 2020-02-18 23:10 – 2020-02-18 23:10 – 000000000 ____D C:UsersEthanDocumentsHolotech 2020-02-18 23:10 – 2020-02-18 23:10 – 000000000 ____D C:Program Files (x86)Phosgene 2020-02-18 23:10 – 2015-09-02 07:28 – 000034136 _____ (Adoriasoft LLC) C:Windowssystem32DriversPhosgene.sys 2020-02-18 23:09 – 2020-02-18 23:09 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsXiph.Org 2020-02-18 23:09 – 2020-02-18 23:09 – 000000000 ____D C:ProgramDataIntel Telemetry 2020-02-18 23:08 – 2020-02-18 23:09 – 000000000 ____D C:ProgramDataIntel 2020-02-18 23:08 – 2020-02-18 23:08 – 000000000 ____D C:Program Files (x86)directx 2020-02-18 22:17 – 2020-02-18 22:17 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsWowza Media Systems 2020-02-18 20:56 – 2020-02-18 20:56 – 000000000 ____D C:UsersEthanAppDataLocalVisicom Media 2020-02-18 20:53 – 2020-02-19 23:02 – 000000000 ____D C:UsersEthanAppDataLocalManyCam 2020-02-18 20:51 – 2020-02-19 23:02 – 000000000 ____D C:UsersEthanAppDataRoamingManyCam 2020-02-18 20:51 – 2020-02-18 22:03 – 000000000 ____D C:ProgramDataManyCam 2020-02-18 20:51 – 2020-02-18 20:51 – 000001064 _____ C:UsersPublicDesktopManyCam.lnk 2020-02-18 20:51 – 2020-02-18 20:51 – 000001064 _____ C:ProgramDataDesktopManyCam.lnk 2020-02-18 20:51 – 2020-02-18 20:51 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsManyCam 2020-02-18 20:51 – 2020-02-18 20:51 – 000000000 ____D C:Program Files (x86)ManyCam 2020-02-18 20:37 – 2020-02-18 20:37 – 000000000 ____D C:UsersEthanAppDataLocalLowKISS 2020-02-18 20:05 – 2020-02-18 20:05 – 000000000 ____D C:UsersEthanAppDataLocalLowIVR 2020-02-18 20:04 – 2020-02-18 20:40 – 000000000 ____D C:UsersEthanDesktop111 2020-02-18 19:21 – 2020-02-18 19:21 – 000000000 ____D C:UsersEthanAppDataLocalLowplusplus 2020-02-18 19:21 – 2020-02-18 19:21 – 000000000 ____D C:UsersEthanAppDataLocalPLUSPLUS 2020-02-18 19:13 – 2020-02-18 19:13 – 000000000 ____D C:UsersEthanAppDataLocalLoweyeyokotta 2020-02-18 18:26 – 2020-02-18 18:26 – 000000000 ____D C:UsersEthanAppDataRoamingPLogs 2020-02-18 18:26 – 2020-02-18 18:26 – 000000000 ____D C:UsersEthanAppDataRoamingBaiduYunKernel 2020-02-18 18:26 – 2020-02-18 18:26 – 000000000 ____D C:UsersEthanAppDataRoamingBaiduYunGuanjia 2020-02-18 18:26 – 2020-02-18 18:26 – 000000000 ____D C:UsersEthanAppDataRoamingbaidu 2020-02-17 19:09 – 2020-02-17 19:09 – 000000000 ____D C:UsersEthanAppDataLocalRbx2Source 2020-02-16 20:29 – 2020-02-18 01:11 – 000000000 ____D C:UsersEthanAppDataRoamingSlack 2020-02-16 20:29 – 2020-02-16 20:29 – 000002201 _____ C:UsersEthanDesktopSlack.lnk 2020-02-16 20:29 – 2020-02-16 20:29 – 000000000 ____D C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsSlack Technologies Inc 2020-02-16 20:29 – 2020-02-16 20:29 – 000000000 ____D C:UsersEthanAppDataLocalslack 2020-02-16 20:02 – 2020-02-17 16:36 – 000000000 ____D C:AlphaAntiLeak 2020-02-16 20:01 – 2020-02-16 20:01 – 000000000 ____D C:UsersEthanAppDataLocalaalgui 2020-02-16 20:00 – 2020-02-16 20:02 – 000002262 _____ C:UsersEthanDesktopAAL.lnk 2020-02-16 20:00 – 2020-02-16 20:02 – 000000000 ____D C:UsersEthanAppDataRoamingaalgui 2020-02-16 20:00 – 2020-02-16 20:01 – 000000000 ____D C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsAlphaAntiLeak 2020-02-16 20:00 – 2020-02-16 20:00 – 000000000 ____D C:UsersEthanAppDataRoamingAlphaAntiLeak 2020-02-16 19:16 – 2020-02-16 19:16 – 000000000 ____D C:UsersEthanTwitch 2020-02-16 19:14 – 2020-03-11 19:21 – 000000000 ____D C:UsersEthanAppDataRoamingTwitch 2020-02-16 19:14 – 2020-02-16 19:14 – 000001109 _____ C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsTwitch.lnk 2020-02-16 19:14 – 2020-02-16 19:14 – 000000000 ____D C:ProgramDataTwitch

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-17 13:15 – 2019-09-05 14:41 – 000000000 ____D C:ProgramDataBullGuard 2020-03-17 13:06 – 2019-03-19 04:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft 2020-03-17 12:25 – 2019-09-04 20:00 – 000000000 ____D C:ProgramDataNVIDIA 2020-03-17 11:54 – 2019-09-05 14:55 – 000000000 ____D C:UsersEthanAppDataLocalD3DSCache 2020-03-17 11:38 – 2019-09-05 14:26 – 000000000 ____D C:UsersEthanAppDataLocalLowMozilla 2020-03-17 11:14 – 2019-06-24 17:08 – 000000000 ____D C:Windowssystem32SleepStudy 2020-03-17 08:27 – 2019-06-24 17:22 – 000896090 _____ C:Windowssystem32PerfStringBackup.INI 2020-03-17 08:27 – 2019-03-19 04:50 – 000000000 ____D C:WindowsINF 2020-03-17 08:21 – 2019-06-24 17:10 – 000000006 ____H C:WindowsTasksSA.DAT 2020-03-16 22:57 – 2019-03-19 04:37 – 000786432 _____ C:Windowssystem32configBBI 2020-03-16 22:35 – 2019-03-19 04:52 – 000000000 ____D C:WindowsAppReadiness 2020-03-16 22:19 – 2019-12-03 18:05 – 000000000 ____D C:Program FilesCheat Engine 7.0 2020-03-16 22:18 – 2020-02-01 20:06 – 000000000 ____D C:UsersEthanDesktopOqMineBot 2020-03-16 22:13 – 2019-03-19 04:52 – 000000000 ___HD C:WindowsELAMBKUP 2020-03-16 22:07 – 2019-09-05 15:03 – 000000000 ____D C:UsersEthanAppDataRoamingDiscord 2020-03-16 18:36 – 2019-09-05 15:01 – 000000000 ____D C:UsersEthanAppDataRoaming.minecraft 2020-03-16 14:27 – 2019-09-05 14:24 – 000000000 ____D C:UsersEthan 2020-03-15 22:35 – 2019-09-18 11:16 – 000000000 ____D C:UsersEthan.android 2020-03-15 22:33 – 2019-03-19 04:52 – 000000000 ____D C:WindowsRegistration 2020-03-15 21:09 – 2019-09-04 20:16 – 000000000 ____D C:Program Files (x86)Mozilla Maintenance Service 2020-03-15 21:08 – 2019-12-25 16:57 – 000000000 ____D C:UsersEthanAppDataRoamingvlc 2020-03-15 20:11 – 2019-09-06 14:01 – 000000000 ____D C:UsersEthanAppDataRoamingqBittorrent 2020-03-15 19:46 – 2019-09-04 20:16 – 000001005 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsFirefox.lnk 2020-03-15 15:22 – 2019-03-19 04:52 – 000000000 ____D C:WindowsShellExperiences 2020-03-15 15:22 – 2019-03-19 04:52 – 000000000 ____D C:Windowsbcastdvr 2020-03-15 15:21 – 2019-03-19 04:37 – 000000000 ____D C:WindowsCbsTemp 2020-03-15 15:20 – 2019-03-19 04:52 – 000000000 ___HD C:Program FilesWindowsApps 2020-03-15 15:17 – 2019-09-05 20:44 – 000000000 ____D C:UsersEthanAppDataLocalCrashDumps 2020-03-15 13:32 – 2019-09-05 14:26 – 000000000 ____D C:UsersEthanAppDataLocalPlaceholderTileLogoFolder 2020-03-15 13:32 – 2019-09-05 14:24 – 000000000 ____D C:UsersEthanAppDataLocalPackages 2020-03-14 23:04 – 2019-09-05 14:52 – 000000000 ____D C:UsersEthan.VirtualBox 2020-03-14 22:28 – 2019-09-05 14:31 – 000000000 ____D C:ProgramDataPackage Cache 2020-03-14 20:31 – 2019-09-05 14:52 – 000000000 ____D C:ProgramDataVirtualBox 2020-03-14 13:25 – 2019-06-24 18:43 – 000000000 ____D C:Program FilesMicrosoft Office 2020-03-14 13:25 – 2019-03-19 04:52 – 000000000 ____D C:Program FilesCommon Filesmicrosoft shared 2020-03-13 11:29 – 2019-09-19 13:17 – 000004176 _____ C:Windowssystem32TasksOpera GX scheduled Autoupdate 1568899033 2020-03-13 11:29 – 2019-09-19 13:17 – 000001432 _____ C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsOpera GX Browser .lnk 2020-03-12 15:58 – 2020-01-03 14:14 – 000001433 _____ C:UsersEthanDesktopRoblox Player.lnk 2020-03-12 15:58 – 2019-09-10 15:15 – 000001248 _____ C:UsersEthanDesktopRoblox Studio.lnk 2020-03-12 15:58 – 2019-09-10 15:15 – 000000000 ____D C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsRoblox 2020-03-12 14:08 – 2019-09-24 17:10 – 000000000 ____D C:UsersEthanAppDataLocal.IdentityService 2020-03-12 11:22 – 2019-11-19 12:41 – 000000023 _____ C:UsersEthanAppDataRoaming__ma-link.xml 2020-03-12 11:21 – 2019-10-10 13:44 – 000000069 _____ C:UsersEthanAppDataRoamingrew-5p.xml 2020-03-11 19:15 – 2019-11-06 20:54 – 000000000 ____D C:UsersEthan.p2 2020-03-11 18:51 – 2020-01-14 15:15 – 000000000 ____D C:UsersEthan.gradle 2020-03-11 18:06 – 2020-02-14 20:48 – 000000000 ____D C:UsersEthanAppDataRoamingBlockbench 2020-03-11 17:40 – 2019-03-19 04:52 – 000000000 ____D C:WindowsSysWOW64Macromed 2020-03-11 17:40 – 2019-03-19 04:52 – 000000000 ____D C:Windowssystem32Macromed 2020-03-11 15:57 – 2019-06-24 17:08 – 000545816 _____ C:Windowssystem32FNTCACHE.DAT 2020-03-11 15:57 – 2019-03-19 04:52 – 000000000 ___SD C:Windowssystem32DiagSvcs 2020-03-11 15:57 – 2019-03-19 04:52 – 000000000 ____D C:WindowsSysWOW64Dism 2020-03-11 15:57 – 2019-03-19 04:52 – 000000000 ____D C:WindowsSystemResources 2020-03-11 15:57 – 2019-03-19 04:52 – 000000000 ____D C:Windowssystem32SystemResetPlatform 2020-03-11 15:57 – 2019-03-19 04:52 – 000000000 ____D C:Windowssystem32Dism 2020-03-11 15:57 – 2019-03-19 04:37 – 000000000 ____D C:Windowsservicing 2020-03-11 15:56 – 2019-09-05 16:36 – 000000000 ____D C:Windowssystem32MRT 2020-03-11 15:52 – 2019-09-05 16:36 – 121542864 ____C (Microsoft Corporation) C:Windowssystem32MRT.exe 2020-03-11 12:59 – 2019-09-17 13:01 – 005604984 _____ () C:UsersEthanDesktopTechnic.exe 2020-03-10 22:22 – 2019-11-04 15:12 – 000000000 ____D C:Program FilesDiskGenius 2020-03-07 16:04 – 2019-10-23 11:09 – 000000000 ____D C:UsersEthanDocumentsMy Games 2020-03-07 16:03 – 2019-12-19 23:32 – 000000000 ____D C:UsersEthanAppDataRoamingWeMod 2020-03-07 16:03 – 2019-09-05 15:03 – 000000000 ____D C:UsersEthanAppDataLocalSquirrelTemp 2020-03-06 22:45 – 2019-12-03 17:50 – 000000000 ____D C:UsersEthanAppDataRoamingGoldberg SteamEmu Saves 2020-03-06 14:13 – 2019-09-05 15:01 – 000002301 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk 2020-03-06 14:13 – 2019-09-05 15:01 – 000002260 _____ C:UsersPublicDesktopGoogle Chrome.lnk 2020-03-06 14:13 – 2019-09-05 15:01 – 000002260 _____ C:ProgramDataDesktopGoogle Chrome.lnk 2020-03-05 23:01 – 2020-02-05 14:14 – 000000000 ____D C:UsersEthanAppDataLocalNPE 2020-03-05 22:48 – 2020-02-05 14:21 – 000000000 ____D C:NPE 2020-03-05 20:35 – 2019-10-20 11:41 – 000000000 ____D C:Program FilesRecuva 2020-03-05 17:17 – 2020-02-07 14:56 – 000000000 ____D C:WindowsSysWOW64directx 2020-03-05 16:30 – 2019-09-07 12:45 – 000000000 ____D C:UsersEthanAppDataRoamingOrigin 2020-03-05 16:30 – 2019-09-07 12:45 – 000000000 ____D C:UsersEthanAppDataLocalOrigin 2020-03-05 16:30 – 2019-09-07 12:45 – 000000000 ____D C:ProgramDataOrigin 2020-03-05 09:48 – 2020-01-30 11:07 – 000002421 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsMicrosoft Edge.lnk 2020-03-05 09:48 – 2020-01-30 11:07 – 000002259 _____ C:UsersPublicDesktopMicrosoft Edge.lnk 2020-03-05 09:48 – 2020-01-30 11:07 – 000002259 _____ C:ProgramDataDesktopMicrosoft Edge.lnk 2020-03-04 22:30 – 2019-12-31 17:49 – 000000000 ____D C:UsersEthanDesktopWeb 2020-03-03 22:12 – 2019-12-08 18:19 – 000000000 ____D C:UsersEthanAppDataLocalAdobe 2020-03-03 22:05 – 2019-09-10 11:36 – 000000000 ____D C:ProgramDataVMware 2020-03-03 19:34 – 2020-01-06 10:46 – 000000000 ____D C:UsersPublicDocumentsMy DAZ 3D Library 2020-03-03 19:34 – 2020-01-06 10:46 – 000000000 ____D C:ProgramDataDocumentsMy DAZ 3D Library 2020-03-03 16:16 – 2019-10-25 13:32 – 000000000 ____D C:UsersEthanDocumentsROBLOX 2020-03-02 20:08 – 2019-09-10 15:15 – 000000000 ____D C:UsersEthanAppDataLocalRoblox 2020-03-02 20:07 – 2019-09-10 15:15 – 000000254 _____ C:UsersEthanAppDataLocalLowrbxcsettings.rbx 2020-03-02 15:33 – 2020-02-06 21:44 – 000000000 ____D C:UsersEthanAppDataRoamingio.krunker.desktop 2020-03-01 21:07 – 2020-02-11 18:03 – 000000000 ____D C:UsersEthanAppDataRoamingvegas-capture 2020-03-01 20:52 – 2019-09-24 15:41 – 000000000 ____D C:UsersEthanAppDataRoamingobs-studio 2020-03-01 19:53 – 2019-03-19 04:52 – 000000000 ___RD C:WindowsImmersiveControlPanel 2020-03-01 19:53 – 2019-03-19 04:52 – 000000000 ____D C:WindowsSysWOW64setup 2020-03-01 19:53 – 2019-03-19 04:52 – 000000000 ____D C:Windowssystem32setup 2020-03-01 19:53 – 2019-03-19 04:52 – 000000000 ____D C:Windowssystem32oobe 2020-03-01 19:53 – 2019-03-19 04:52 – 000000000 ____D C:Program FilesWindows Defender 2020-02-28 15:29 – 2019-10-09 20:30 – 000000000 ____D C:UsersEthanAppDataRoaming.tlauncher 2020-02-28 12:35 – 2019-03-19 04:37 – 000032768 _____ C:Windowssystem32configELAM 2020-02-26 17:08 – 2019-09-05 15:03 – 000002237 _____ C:UsersEthanDesktopDiscord.lnk 2020-02-26 17:08 – 2019-09-05 15:03 – 000000000 ____D C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsDiscord Inc 2020-02-26 17:08 – 2019-09-05 15:03 – 000000000 ____D C:UsersEthanAppDataLocalDiscord 2020-02-26 16:00 – 2019-03-19 04:52 – 000000000 ____D C:Windowssystem32NDF 2020-02-26 15:42 – 2020-01-30 11:07 – 000003480 _____ C:Windowssystem32TasksMicrosoftEdgeUpdateTaskMachineUA 2020-02-26 15:42 – 2020-01-30 11:07 – 000003356 _____ C:Windowssystem32TasksMicrosoftEdgeUpdateTaskMachineCore 2020-02-25 19:51 – 2019-03-19 04:52 – 000000000 __SHD C:UsersPublicLibraries 2020-02-25 19:44 – 2019-09-05 16:53 – 000000000 ____D C:UsersEthanAppDataLocalUnrealEngine 2020-02-22 23:06 – 2020-01-05 21:30 – 000007118 _____ C:WindowsSandboxie.ini 2020-02-22 01:17 – 2020-01-06 10:39 – 000001967 _____ C:UsersEthanDesktopDAZ Install Manager (64-bit).lnk 2020-02-22 01:17 – 2020-01-06 10:39 – 000000000 ____D C:UsersEthanAppDataRoamingMicrosoftWindowsStart MenuProgramsDAZ 3D 2020-02-22 00:31 – 2020-01-05 20:41 – 000000000 ___HD C:temp 2020-02-22 00:31 – 2019-09-30 10:53 – 000000000 ____D C:UsersEthanAppDataRoamingBitTorrent 2020-02-22 00:31 – 2019-09-09 18:52 – 000000000 ____D C:UsersEthanAppDataRoamingFileZilla 2020-02-21 23:50 – 2020-01-15 22:20 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsRiot Games 2020-02-21 23:49 – 2019-12-14 17:35 – 000000000 ____D C:UsersEthanAppDataLocalNintendo 2020-02-21 21:46 – 2019-11-04 14:50 – 000297160 _____ C:WindowsZAM.krnl.trace 2020-02-21 21:46 – 2019-11-04 14:49 – 000000000 ____D C:UsersEthanAppDataLocalAMSDK 2020-02-18 23:15 – 2019-12-21 14:35 – 000000000 ____D C:UsersEthanDesktopSteamSand 2020-02-18 19:28 – 2019-09-24 19:43 – 000000000 ____D C:UsersEthanAppDataLocalElevatedDiagnostics 2020-02-18 19:14 – 2019-10-07 17:11 – 000000000 ____D C:UsersEthanAppDataLocalLowUnity 2020-02-18 18:12 – 2019-09-10 11:36 – 000000000 ____D C:UsersEthanAppDataLocalVMware 2020-02-18 18:06 – 2019-09-10 11:36 – 000000000 ____D C:UsersEthanAppDataRoamingVMware 2020-02-18 16:21 – 2019-09-05 14:24 – 000000000 ____D C:UsersEthanAppDataLocalVirtualStore 2020-02-17 01:32 – 2020-02-11 11:21 – 000000000 ____D C:UsersEthanintentlauncher

==================== Files in the root of some directories ========

2020-03-12 17:06 – 2020-03-12 17:06 – 000000000 _____ () C:UsersEthanAppDataRoamingADF8F0174DAB4265999B9336FFF72A2D.dat 2019-11-19 16:35 – 2019-11-20 18:31 – 000000018 _____ () C:UsersEthanAppDataRoamingapp-auth-token 2020-03-16 14:27 – 2020-03-16 14:27 – 000000068 _____ () C:UsersEthanAppDataRoamingchangzhi_leidian.data 2019-12-18 00:10 – 2020-01-19 18:25 – 000000787 _____ () C:UsersEthanAppDataRoamingjd-gui.cfg 2019-10-10 13:44 – 2019-10-10 13:44 – 000000024 _____ () C:UsersEthanAppDataRoaminglocalClientID_oqmb 2020-02-05 16:09 – 2020-02-05 16:13 – 000000054 _____ () C:UsersEthanAppDataRoamingPlants vs. Zombies user file editor.dat 2019-10-10 13:44 – 2020-03-12 11:21 – 000000069 _____ () C:UsersEthanAppDataRoamingrew-5p.xml 2019-11-21 18:55 – 2019-11-21 18:56 – 000601088 _____ () C:UsersEthanAppDataRoamingSharedSettings.ccs 2020-01-10 12:36 – 2020-01-10 12:36 – 000004643 _____ () C:UsersEthanAppDataRoamingVoiceMeeterDefault.xml 2019-11-19 16:43 – 2019-11-20 18:31 – 000000034 _____ () C:UsersEthanAppDataRoaming_mc_loc.txt 2019-11-19 12:41 – 2020-03-12 11:22 – 000000023 _____ () C:UsersEthanAppDataRoaming__ma-link.xml 2020-01-01 22:16 – 2020-01-01 22:25 – 000000120 _____ () C:UsersEthanAppDataLocalinjk.conf 2019-09-05 17:47 – 2019-09-05 17:47 – 000000000 ___SH () C:UsersEthanAppDataLocalLumaEmu 2019-12-11 09:25 – 2019-12-11 09:25 – 000000000 _____ () C:UsersEthanAppDataLocaloobelibMkey.log 2020-02-03 17:36 – 2020-02-03 17:39 – 000000128 _____ () C:UsersEthanAppDataLocalPUTTY.RND 2019-09-05 18:19 – 2019-09-05 18:19 – 000000003 _____ () C:UsersEthanAppDataLocalupdater.log 2019-09-05 18:19 – 2019-09-08 20:34 – 000000424 _____ () C:UsersEthanAppDataLocalUserProducts.xml 2020-02-07 22:50 – 2020-02-07 22:50 – 000000056 _____ () C:UsersEthanAppDataLocalX-Plane 11 Preferences.prf 2020-02-07 22:51 – 2020-02-07 22:51 – 000000037 _____ () C:UsersEthanAppDataLocalX-Plane Installer.prf

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Click to rate this post! [Total: 0 Average: 0]

Topics and keywords

Themes: Serveur minecraft

License & attribution

License: CC BY-ND 4.0.

Attribution required: yes.

Manifest: https://tutos-gameserver.fr/llm-endpoints-manifest.json

LLM Endpoints plugin version 1.1.2.