{"version":"1.1","schema_version":"1.1.0","plugin_version":"1.1.2","url":"https://tutos-gameserver.fr/2020/05/01/vol-de-carte-de-credit-aide-a-la-suppression-des-virus-chevaux-de-troie-logiciels-espions-et-programmes-malveillants-monter-un-serveur-minecraft/","llm_html_url":"https://tutos-gameserver.fr/2020/05/01/vol-de-carte-de-credit-aide-a-la-suppression-des-virus-chevaux-de-troie-logiciels-espions-et-programmes-malveillants-monter-un-serveur-minecraft/llm","llm_json_url":"https://tutos-gameserver.fr/2020/05/01/vol-de-carte-de-credit-aide-a-la-suppression-des-virus-chevaux-de-troie-logiciels-espions-et-programmes-malveillants-monter-un-serveur-minecraft/llm.json","manifest_url":"https://tutos-gameserver.fr/llm-endpoints-manifest.json","language":"fr-FR","locale":"fr_FR","title":"Vol de carte de crédit – Aide à la suppression des virus, chevaux de Troie, logiciels espions et programmes malveillants\n\n – Monter un serveur MineCraft","site":{"name":"Tutos GameServer","url":"https://tutos-gameserver.fr/"},"author":{"id":1,"name":"Titanfall","url":"https://tutos-gameserver.fr/author/titanfall/"},"published_at":"2020-05-01T10:08:37+00:00","modified_at":"2020-05-01T10:08:37+00:00","word_count":16816,"reading_time_seconds":5045,"summary":"Je ne sais pas si le vol de carte de crédit est lié au malware ou au phishing, mais il y a eu plusieurs achats aujourd'hui non autorisés sur ma carte de crédit. Je n'ai pas perdu ma carte et je n'utilise vraiment ma carte que sur des sites autorisés, c'est comme la première fois […]","summary_points":["Je ne sais pas si le vol de carte de crédit est lié au malware ou au phishing, mais il y a eu plusieurs achats aujourd'hui non autorisés sur ma carte de crédit.","Je n'ai pas perdu ma carte et je n'utilise vraiment ma carte que sur des sites autorisés, c'est comme la première fois que je reçois sans que je comprenne vraiment pourquoi ni comment.","Ce qui est plus intéressant, c'est qu'ils ont utilisé mon crédit dans des magasins physiques du Maryland où je suis situé, mais je n'ai pas perdu ma carte de crédit, alors comment ont-ils réussi à l'utiliser dans des magasins sans carte ou même avec la pompe à essence?","Mais de toute façon, je fais cela pour vérifier s'il y a des logiciels malveillants sur mon processeur et peut-être que je trouverai plus de réponses et c'est bien que je le fasse aussi parce que moi et mes cousins ​​avons été sur des sites qui ne sont pas sûr dans le passé."],"topics":["Serveur minecraft"],"entities":[],"entities_metadata":[{"id":13,"name":"Serveur minecraft","slug":"serveur-minecraft","taxonomy":"category","count":2786,"url":"https://tutos-gameserver.fr/category/serveur-minecraft/"}],"tags":["Serveur minecraft"],"content_hash":"7e22100c49b4dd9c7e4c22bcad06a7cf","plain_text":"Je ne sais pas si le vol de carte de crédit est lié au malware ou au phishing, mais il y a eu plusieurs achats aujourd'hui non autorisés sur ma carte de crédit. Je n'ai pas perdu ma carte et je n'utilise vraiment ma carte que sur des sites autorisés, c'est comme la première fois que je reçois sans que je comprenne vraiment pourquoi ni comment. Ce qui est plus intéressant, c'est qu'ils ont utilisé mon crédit dans des magasins physiques du Maryland où je suis situé, mais je n'ai pas perdu ma carte de crédit, alors comment ont-ils réussi à l'utiliser dans des magasins sans carte ou même avec la pompe à essence?\n\nMais de toute façon, je fais cela pour vérifier s'il y a des logiciels malveillants sur mon processeur et peut-être que je trouverai plus de réponses et c'est bien que je le fasse aussi parce que moi et mes cousins ​​avons été sur des sites qui ne sont pas sûr dans le passé.\n\nJournal FRST:\n\nRésultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 22-04-2020\nCommandé par abang (administrateur) sur DESKTOP-VTQ0750 (ASUS All Series) (23-04-2020 18:25:30)\nExécution à partir de D: Desktop\nProfils chargés: abang (Profils disponibles: abang & user & sesay & ibang)\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal\n\n==================== Processus (sur liste blanche) =================\n\n(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)\n\n() [File not signed] C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe\n(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe\n(ASUSTeK Computer Inc. ->) [File not signed] C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe\n(ASUSTeK Computer Inc. ->) C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe\n(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe\n(DTS, Inc. -> DTS, Inc) C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware DeviceRedirectionCommon ftnlsv.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware ScannerRedirection ftscanmgrhv.exe\n(FabulaTech, LLP -> VMware) C: Program Files Common Files VMware SerialPortRedirection Client vmwsprrdpwks.exe\n(Le fichier est en cours d'utilisation) [File not signed ?] C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Produits de développement logiciel Intel® ->) C: Program Files Intel Driver Update Utility SUR SurSvc.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware MBAMService.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware mbamtray.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe Calculator.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.XboxGamingOverlay_5.120.4062.0_x64__8wekyb3d8bbwe GameBar.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.ZuneMusic_10.20022.11011.0_x64__8wekyb3d8bbwe Music.UI.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows ImmersiveControlPanel SystemSettings.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 MsMpEng.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 NisSrv.exe\n(NVIDIA Corporation -> Node.js) C: Program Files (x86) NVIDIA Corporation NvNode NVIDIA Web Helper.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvContainer nvcontainer.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA Share.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation ShadowPlay nvsphelper64.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jucheck.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jusched.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkNGUI64.exe\n(Scarlet.Crush Productions) [File not signed] C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) Common Files VMware USB vmware-usbarbitrator64.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe\n(Wondershare Technology Co., Ltd -> Wondershare) C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe\n\n==================== Registre (liste blanche) ===================\n\n(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)\n\nHKLM … Run: [AdobeGCInvoker-1.0] => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nHKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8483032 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM … Run: [RtHDVBg_DTS] => C: Program Files Realtek Audio HDA RAVBg64.exe [1393880 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [SunJavaUpdateSched] => C: Program Files (x86) Fichiers communs Java Java Update jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)\nHKLM-x32 … Exécuter: [Wondershare Helper Compact.exe] => C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co., Ltd -> Wondershare)\nHKU S-1-5-21-3055999371-879555700-2068610542-1001 … Run: [SmashLadder Dolphin Launcher] => C: Users abang AppData Local Programs smashladder-dolphin-launcher SmashLadder Dolphin Launcher.exe [67653120 2019-11-02] (Anther Sledge) [File not signed]\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.113 Installer chrmstp.exe [2020-04-21] (Google LLC -> Google LLC)\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage ScpToolkit Tray Notifications.lnk [2019-01-01]\nShortcutTarget: ScpToolkit Tray Notifications.lnk -> C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe (Scarlet.Crush Productions) [File not signed]\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage TP-LINK Wireless Configuration Utility.lnk [2018-05-11]\nShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe () [File not signed]\nGroupPolicy: Restriction? <==== ATTENTION\n\n==================== Tâches planifiées (liste blanche) ============\n\n(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)\n\nTâche: 06EFEDF1-7A16-4649-BB3B-8109A7E3A27D – System32 Tasks NvTmRep_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmRep.exe [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 0C04A11A-9B68-4A59-8AE2-81FEC4F684B1 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1741576 2016-03-17] (Logiciel Intel® -> Intel Corporation)\nTâche: 10F16CA9-0D75-4E08-8BB4-E4768551F318 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: 24C76DD3-A1CA-454E-B9E2-536CAE2B09EF – System32 Tasks Red Giant Link => C: Program [Argument = Files (x86)Red Giant LinkRed Giant Link.exe]\nTâche: 2CC605CE-6729-4C80-A5CD-F3B611FD7E1C – System32 Tasks Adobe Flash Player Updater => C: WINDOWS SysWoW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 3DC8E720-2002-4630-AB1C-86EA42BB5CAB – System32 Tasks Microsoft Windows Windows Defender Windows Defender Verification => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 420971E1-EDA3-467D-B70D-7D98608FCE40 – System32 Tasks updater => C: Program Files Nefarius Software Solutions ScpToolkit ScpUpdater.exe [464384 2016-01-10] (Solutions logicielles Nefarius) [File not signed]\nTâche: 48DE21F0-243D-41E8-9FEE-7FB0BDBCAD16 – System32 Tasks Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C: Program Files Bitdefender Agent WatchDog.exe\nTâche: 4BAA8084-3CDA-4287-AD83-6B0D6F9AEA9C – System32 Tasks NvProfileUpdaterDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 54C95A92-2879-4CEA-9BDD-5DC99DBB78FC – System32 Tasks AdobeGCInvoker-1.0 => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nTâche: 591A6C13-47E6-4DAA-9F87-EC4DF44DF3DA – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cleanup => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 6C107948-5039-4FAB-BEA0-B155B37DFE24 – System32 Tasks USER_ESRV_SVC_QUEENCREEK => "C: WINDOWS System32 Wscript.exe" // B // NoLogo "C: Program Files Intel SUR QUEENCREEK task.vbs "\nTâche: 76CA6106-FA92-4408-803D-4DF916374B54 – System32 Tasks AdobeAAMUpdater-1.0-MicrosoftAccount-abangur10426@students.pgcc.edu => C: Program Files (x86) Common Files Adobe OOBE PDApp UWA UpdaterStartupUtility.exe\nTâche: 7DBD39AF-150F-485A-847E-74A9AC31B769 – System32 Tasks NVIDIA GeForce Experience SelfUpdate_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA GeForce Experience.exe [1931064 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 83906FA5-24D1-4925-84C4-277C804D9A9E – System32 Tasks Adobe Flash Player PPAPI Notifier => C: WINDOWS SysWOW64 Macromed Flash FlashUtil32_32_0_0_363_pepper.exe [1454136 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 8DC800AC-09FF-4A00-871D-0350D0EB1555 – System32 Tasks NvProfileUpdaterOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUp64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 9763F846-397A-480C-8F20-3D4E42EE93FE – System32 Tasks Adobe Acrobat Update Task => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: 9FFECADB-B591-4E6A-ACB0-DB2EDA7CE390 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Scheduled Scan => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: BA23C37B-CE1C-4754-86B8-D949EE954A95 – System32 Tasks NvTmMon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmMon.exe [525104 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: BCE93CD1-8D9D-4405-A966-CFDA6247D350 – System32 Tasks NvNodeLauncher_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NvNode nvnodejs [969016 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: CB54D4D0-DA92-4389-995B-FE64BA5E0CBF – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: E08D6E8F-0488-41F3-91E1-4ED22B333DA2 – System32 Tasks NvDriverUpdateCheckDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvContainer nvc [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: EBF69801-5958-4547-9B2D-5BD49A5CFFD6 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cache Maintenance => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: FF901B38-47D0-48EF-8BC2-3A93BD853831 – System32 Tasks NvTmRepOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTm [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\n\n(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)\n\n==================== Internet (liste blanche) ====================\n\n(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)\n\nHôtes: 127.0.0.1 view-localhost # view localhost server\nTcpip Paramètres: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces 1a078130-89b1-47d0-b730-4f840d58f0e0: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces a09096a6-9f70-4e4b-97ba-0b8487bbab10: [DhcpNameServer] 192.168.0.1\n\nInternet Explorer:\n==================\nBHO-x32: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files (x86) Java jre1.8.0_201 bin ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nBHO-x32: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files (x86) Java jre1.8.0_201 bin jp2ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nDPF: HKLM-x32 414FB93D-DEDD-4FEF-AD7F-167992EBDB52 hxxps: //portal.ssl.imsweb.com/SNX/CSHELL/extender.cab\nHandler-x32: cdl – 3dd53d40-7b8b-11D0-b013-00aa0059ce02 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: fichier – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: ftp – 79eac9e3-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: gopher – 79eac9e4-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: http – 79eac9e2-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: https – 79eac9e5-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: local – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: mk – 79eac9e6-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFiltre: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Windows System32 urlmon.dll [2020-03-11] (Microsoft Windows -> Microsoft Corporation)\nFilter-x32: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: dégonfler – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: gzip – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: lzdhtml – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\n\nBord: \n======\nDownloadDir: D: Téléchargements\n\nFireFox:\n========\nFF DefaultProfile: tqnxf3yx.default\nFF ProfilePath: C: Users abang AppData Roaming Mozilla Firefox Profiles tqnxf3yx.default [2020-03-18]\nFF Plugin-x32: @ java.com / DTPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin dtplugin npDeployJava1.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ java.com / JavaPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin plugin2 npjp2.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: Adobe Reader -> C: Program Files (x86) Adobe Acrobat Reader DC Reader AIR nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/thinkorswim -> C: Program Files thinkorswim npthinkorswim.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/tossc -> C: Program Files thinkorswim nptossc.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)\n\nChrome: \n=======\nProfil CHR: C: Users abang AppData Local Google Chrome User Data Default [2020-04-23]\nCHR DownloadDir: D: Téléchargements\nNotifications CHR: Par défaut -> hxxps: //videoconverter.wondershare.com; hxxps: //www.facebook.com; hxxps: //www.livescience.com\nCHR StartupUrls: Par défaut -> "hxxps: //feedly.com/i/my", "hxxps: //www.koyfin.com/home"\nExtension CHR: (Google Drive) – C: Users abang AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2015-12-03]\nExtension CHR: (Lecture HLS native) – C: Users abang AppData Local Google Chrome User Data Default Extensions bfgdekjhniododjcobllghembkdpdkea [2017-10-21]\nExtension CHR: (YouTube) – C: Users abang AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-03]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users abang AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-06]\nExtension CHR: (Recherche Google) – C: Users abang AppData Local Google Chrome User Data Default Extensions coobgpohoikkiipiblmjeljniedjpjpf [2015-12-03]\nExtension CHR: (Portefeuille Bitdefender) – C: Users abang AppData Local Google Chrome User Data Default Extensions dhhejlifdlcgcmogbggeomfodgklfaem [2015-12-03]\nExtension CHR: (Paiements Chrome Web Store) – C: Users abang AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]\nExtension CHR: (Gmail) – C: Users abang AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-25]\nExtension CHR: (Chrome Media Router) – C: Users abang AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-21]\nProfil CHR: C: Users abang AppData Local Google Chrome User Data System Profile [2019-02-06]\nCHR HKLM-x32 … Chrome Extension: [dhhejlifdlcgcmogbggeomfodgklfaem]\nCHR HKLM-x32 … Chrome Extension: [efaidnbmnnnibpcajpcglclefindmkaj]\n\n==================== Services (liste blanche) ===================\n\n(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)\n\nR2 AGMService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe [3374160 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 AGSService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe [3103824 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 asComSvc; C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe [936728 2015-12-01] (ASUSTeK Computer Inc. ->)\nR2 AsSysCtrlService; C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe [1360016 2015-12-03] (ASUSTeK Computer Inc. ->) [File not signed]\nR2 client_service; C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe [442840 2020-03-30] (VMware, Inc. -> VMware, Inc.)\nR2 cpextender; C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe [367984 2019-09-19] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nR2 Ds3Service; C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe [389632 2016-01-10] (Le fichier est en cours d'utilisation) [File not signed ?]\nR2 DTSAudioSvc; C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe [240576 2015-12-03] (DTS, Inc. -> DTS, Inc)\nS3 ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 ftnlsv3hv; C: Program Files Fichiers communs VMware DeviceRedirectionCommon ftnlsv.exe [280176 2020-02-25] (FabulaTech, LLP ->)\nR2 ftscanmgrhv; C: Program Files Fichiers communs VMware ScannerRedirection ftscanmgrhv.exe [4369520 2020-02-27] (FabulaTech, LLP ->)\nR2 MBAMService; C: Program Files Malwarebytes Anti-Malware mbamservice.exe [6933272 2020-03-10] (Malwarebytes Inc -> Malwarebytes)\nR2 NvContainerLocalSystem; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvContainerNetworkService; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nService S4 PST; C: Program Files (x86) Motorola MotForwardDaemon ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]\nService S4 Razer Game Scanner; C: Program Files (x86) Razer Razer Services GSS GameScannerService.exe [189264 2016-09-24] (Razer USA Ltd. ->)\nR2 SystemUsageReportSvc_QUEENCREEK; C: Program Files Intel Driver Update Utility SUR SurSvc.exe [156928 2016-11-17] (Produits de développement logiciel Intel® ->)\nS3 USER_ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 vmwsprrdpwks; C: Program Files Fichiers communs VMware SerialPortRedirection Client vmwsprrdpwks.exe [459888 2020-02-20] (FabulaTech, LLP -> VMware)\nR3 WdNisSvc; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 NisSrv.exe [3294680 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nR2 WinDefend; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MsMpEng.exe [103168 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nS3 WsDrvInst; C: Program Files (x86) Wondershare Video Converter Ultimate Transfer DriverInstall.exe [107760 2019-09-26] (Wondershare Technology Co., Ltd -> Wondershare)\nR2 NVDisplay.ContainerLocalSystem; "C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C: ProgramData NVIDIA NVDisplay.ContainerLocalSystem.log" -l 3 -d "C: Fichiers programme NVIDIA Corporation Display.NvContainer plugins LocalSystem "-r -p 30000 \nR2 NvTelemetryContainer; "C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C: ProgramData NVIDIA NvTelemetryContainer.log" -l 3 -d "C: Program Files (x86) NVIDIA Corporation NvTelemetry plugins "-r\n\n===================== Pilotes (sur liste blanche) ===================\n\n(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)\n\nS3 AppleKmdfFilter; C: WINDOWS System32 drivers AppleKmdfFilter.sys [20640 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nS3 AppleLowerFilter; C: WINDOWS System32 drivers AppleLowerFilter.sys [35560 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nR1 AsIO; C: Windows SysWow64 drivers AsIO.sys [15232 2015-12-01] (ASUSTeK Computer Inc. ->)\nR3 athr; C: WINDOWS System32 drivers athw8x.sys [4233728 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-19] (Microsoft Corporation) [File not signed]\nR1 ESProtectionDriver; C: WINDOWS system32 drivers mbae64.sys [153312 2020-04-21] (Malwarebytes Corporation -> Malwarebytes)\nS3 libusbK; C: WINDOWS System32 drivers libusbK.sys [47200 2018-09-15] (Travis Lee Robinson -> hxxp: //libusb-win32.sourceforge.net)\nR2 MBAMChameleon; C: WINDOWS System32 Drivers MbamChameleon.sys [214496 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nS0 MbamElam; C: WINDOWS System32 DRIVERS MbamElam.sys [20936 2020-03-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)\nR3 MBAMFarflt; C: WINDOWS System32 DRIVERS farflt.sys [195432 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMProtection; C: WINDOWS system32 DRIVERS mbam.sys [73584 2020-04-23] (Malwarebytes Corporation -> Malwarebytes)\nR3 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [248968 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMWebProtection; C: WINDOWS system32 DRIVERS mwac.sys [124560 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 nvlddmkm; C: WINDOWS System32 DriverStore FileRepository nv_dispi.inf_amd64_db678424d2641c3d nvlddmkm.sys [22094728 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvStreamKms; C: Program Files NVIDIA Corporation NvStreamSrv NvStreamKms.sys [31024 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvad_WaveExtensible; C: WINDOWS system32 drivers nvvad64v.sys [59240 2017-12-14] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvhci; C: WINDOWS System32 drivers nvvhci.sys [57928 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 rzendpt; C: WINDOWS System32 drivers rzendpt.sys [50392 2015-08-13] (Razer Inc. -> Razer Inc)\nR2 rzpmgrk; C: WINDOWS system32 drivers rzpmgrk.sys [44144 2016-09-16] (Razer Inc. -> Razer, Inc.)\nR2 rzpnk; C: WINDOWS system32 drivers rzpnk.sys [137840 2016-10-08] (Razer Inc. -> Razer, Inc.)\nR3 ScpVBus; C: WINDOWS System32 drivers ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)\nS3 semav6msr64; C: WINDOWS system32 drivers semav6msr64.sys [21984 2016-10-18] (Signature de code Intel® externe ->)\nS3 sixaxis; C: WINDOWS System32 drivers sixaxis.sys [28424 2018-09-15] (Sony Computer Entertainment Inc. -> Sony Computer Entertainment Inc.)\nS3 usbrndis6; C: WINDOWS System32 drivers usb80236.sys [24576 2019-09-19] (Microsoft Windows -> Microsoft Corporation)\nR3 VNA; C: WINDOWS system32 DRIVERS vna.sys [161256 2016-08-30] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nS0 WdBoot; C: WINDOWS System32 drivers wd WdBoot.sys [45960 2020-03-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nR0 WdFilter; C: WINDOWS System32 drivers wd WdFilter.sys [391392 2020-03-24] (Microsoft Windows -> Microsoft Corporation)\nR3 WdNisDrv; C: WINDOWS System32 drivers wd WdNisDrv.sys [59104 2020-03-24] (Microsoft Windows -> Microsoft Corporation)\n\n==================== NetSvcs (liste blanche) ====================\n\n(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)\n\n==================== Un mois (créé) ===================\n\n(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)\n\n2020-04-21 12:30 – 2020-04-23 08:34 – 000073584 _____ (Malwarebytes) C: WINDOWS system32 Drivers mbam.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000195432 _____ (Malwarebytes) C: WINDOWS system32 Drivers farflt.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000124560 _____ (Malwarebytes) C: WINDOWS system32 Drivers mwac.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 022636544 _____ (Microsoft Corporation) C: WINDOWS system32 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 008013824 _____ (Microsoft Corporation) C: WINDOWS system32 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007756800 _____ (Microsoft Corporation) C: WINDOWS system32 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 006523048 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004611584 _____ (Microsoft Corporation) C: WINDOWS system32 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004538880 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 wininet.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800640 _____ (Microsoft Corporation) C: WINDOWS system32 WinSAT.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800128 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 win32kfull.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001665216 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 user32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001545216 _____ (Microsoft Corporation) C: WINDOWS system32 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001477112 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 dcomp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001458688 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 GdiPlus.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001413840 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 gdi32full.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001397576 _____ (Microsoft Corporation) C: WINDOWS system32 hvix64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001151816 _____ (Microsoft Corporation) C: WINDOWS system32 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001077064 _____ (Microsoft Corporation) C: WINDOWS system32 hvax64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001013000 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001008128 _____ (Microsoft Corporation) C: WINDOWS system32 StorSvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000983040 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmkvsrcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000868864 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 windowsperformancerecordercontrol.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000836608 _____ (Microsoft Corporation) C: WINDOWS system32 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000835584 _____ (Microsoft Corporation) C: WINDOWS system32 WorkfoldersControl.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000783480 _____ (Microsoft Corporation) C: WINDOWS system32 tcblaunch.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000775696 _____ (Microsoft Corporation) C: WINDOWS system32 securekernel.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000768528 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 winhttp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000701440 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Mirage.Internal.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000689152 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 CPFilters.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000686080 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000673464 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 fontdrvhost.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000668672 _____ (Microsoft Corporation) C: WINDOWS system32 wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000665088 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 netlogon.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000647680 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Internal.Management.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000555008 _____ (Microsoft Corporation) C: WINDOWS system32 appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-16 08:43 – 2020-04-16 08:44 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-16 08:43 – 2020-04-16 08:43 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-16 08:43 – 2020-04-16 08:43 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-16 08:35 – 2020-04-16 08:36 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-16 08:35 – 2020-04-16 08:36 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-07 10:56 – 2020-04-21 12:30 – 000248968 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbamswissarmy.sys\n2020-04-07 10:55 – 2020-04-07 10:55 – 000001411 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsVMware Horizon Client.lnk\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesVMware\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesThinPrint\n2020-04-07 10:55 – 2020-03-04 08:12 – 000083264 _____ (VMware, Inc.) C:WINDOWSsystem32Drivershcmon.sys\n\n==================== One month (modified) ==================\n\n(If an entry is included in the fixlist, the file/folder will be moved.)\n\n2020-04-23 18:25 – 2019-01-26 15:54 – 000000000 ____D C:FRST\n2020-04-23 18:14 – 2019-09-19 18:23 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-04-23 18:14 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-04-23 13:29 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32FxsTmp\n2020-04-23 13:29 – 2017-06-26 10:30 – 000000000 ____D C:UsersabangAppDataRoamingVMware\n2020-04-23 12:25 – 2017-06-05 20:31 – 000000000 ____D C:ProgramDataNVIDIA\n2020-04-23 12:22 – 2019-09-04 22:54 – 000000000 ____D C:UsersabangAppDataRoamingSmashLadder Dolphin Launcher\n2020-04-23 08:40 – 2019-09-19 18:37 – 000840852 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-04-23 08:40 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-04-23 08:37 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-04-23 08:34 – 2019-09-19 18:36 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-04-22 23:52 – 2015-12-03 23:22 – 000000000 ____D C:Program Files (x86)Steam\n2020-04-22 22:54 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataRoamingdiscord\n2020-04-22 01:37 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataRoamingSlack\n2020-04-22 00:25 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-04-21 19:55 – 2015-12-03 03:50 – 000002301 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-04-21 12:30 – 2020-03-10 22:27 – 000214496 _____ (Malwarebytes) C:WINDOWSsystem32DriversMbamChameleon.sys\n2020-04-21 12:30 – 2019-08-31 13:22 – 000153312 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbae64.sys\n2020-04-20 21:43 – 2019-11-07 03:48 – 000000000 ____D C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsSlack Technologies Inc\n2020-04-20 21:43 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataLocalslack\n2020-04-20 21:43 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataLocalSquirrelTemp\n2020-04-18 00:44 – 2019-09-19 18:27 – 000000000 ____D C:Usersabang\n2020-04-17 08:21 – 2019-09-19 18:23 – 000328360 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-16 23:03 – 2019-03-19 00:37 – 001572864 _____ C:WINDOWSsystem32configBBI\n2020-04-16 08:46 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp\n2020-04-16 08:43 – 2015-07-10 09:20 – 000410838 __RSH C:bootmgr\n2020-04-15 14:50 – 2019-09-19 18:36 – 000003378 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-3055999371-879555700-2068610542-1001\n2020-04-15 14:50 – 2019-09-19 18:27 – 000002363 _____ C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-04-15 14:50 – 2015-12-01 22:57 – 000000000 ___RD C:UsersabangOneDrive\n2020-04-14 16:52 – 2019-09-19 18:36 – 000004552 _____ C:WINDOWSsystem32TasksAdobe Flash Player PPAPI Notifier\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSysWOW64Macromed\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32Macromed\n2020-04-11 17:55 – 2016-03-29 00:15 – 000000000 ____D C:UsersabangAppDataLocalElevatedDiagnostics\n2020-04-07 10:55 – 2015-12-03 03:56 – 000000000 ____D C:ProgramDataPackage Cache\n2020-04-02 08:28 – 2015-12-03 03:56 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-03-28 20:11 – 2018-03-03 20:27 – 000000000 ____D C:UsersabangAppDataLocalPlaceholderTileLogoFolder\n2020-03-28 18:59 – 2017-12-01 11:11 – 000000000 ____D C:UsersabangAppDataLocalPackages\n2020-03-26 21:57 – 2018-09-07 17:28 – 000000000 ____D C:UsersabangAppDataLocalD3DSCache\n2020-03-24 23:33 – 2018-03-03 21:08 – 000000000 ____D C:WINDOWSsystem32Driverswd\n\n==================== Files in the root of some directories ========\n\n2019-12-15 15:48 – 2019-12-22 22:26 – 000026862 _____ () C:UsersabangAppDataLocaldump.log\n2018-09-27 17:51 – 2018-09-27 17:51 – 000000000 _____ () C:UsersabangAppDataLocaloobelibMkey.log\n2016-01-20 08:00 – 2017-07-06 12:02 – 000001832 _____ () C:UsersabangAppDataLocalSLC_abang.prx\n\n==================== SigCheck ============================\n\n(There is no automatic fix for files that do not pass verification.)\n\n==================== End of FRST.txt ========================\n\nAdditional log:\n\n\nAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 22-04-2020\nRan by abang (23-04-2020 18:26:33)\nRunning from D:Desktop\nWindows 10 Home Version 1903 18362.778 (X64) (2019-09-19 22:36:33)\nMode de démarrage: Normal\n==========================================================\n\n==================== Accounts: =============================\n\nabang (S-1-5-21-3055999371-879555700-2068610542-1001 – Administrator – Enabled) => C:Usersabang\nAdministrator (S-1-5-21-3055999371-879555700-2068610542-500 – Administrator – Disabled)\nakim9 (S-1-5-21-3055999371-879555700-2068610542-1006 – Limited – Disabled)\nDefaultAccount (S-1-5-21-3055999371-879555700-2068610542-503 – Limited – Disabled)\nGuest (S-1-5-21-3055999371-879555700-2068610542-501 – Limited – Disabled)\nibang (S-1-5-21-3055999371-879555700-2068610542-1007 – Limited – Enabled) => C:Usersibang\nsesay (S-1-5-21-3055999371-879555700-2068610542-1005 – Limited – Enabled) => C:Userssesay\nuser (S-1-5-21-3055999371-879555700-2068610542-1004 – Limited – Enabled) => C:Usersuser\nWDAGUtilityAccount (S-1-5-21-3055999371-879555700-2068610542-504 – Limited – Disabled)\n\n==================== Security Center ========================\n\n(If an entry is included in the fixlist, it will be removed.)\n\nAV: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\n\n==================== Installed Programs ======================\n\n(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)\n\n. . . (HKLM…DCAFF63A-A26F-4809-A00D-27AD6733ACB3) (Version: 2.1.28.3 – Intel) Hidden\n. . . (HKLM-x32…C7B0C705-9987-44A2-B495-4101DAEDBFE0) (Version: 2.6.2.4 – Intel) Hidden\n4K YouTube to MP3 3.8 (HKLM…2BD7492A-592E-4DAB-8BEC-68550950E32D) (Version: 3.8.3.3092 – Open Media LLC)\n7-Zip 15.14 (x64) (HKLM…7-Zip) (Version: 15.14 – Igor Pavlov)\nAdobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-1033-7B44-AC0F074E4100) (Version: 20.006.20042 – Adobe Systems Incorporated)\nAdobe Flash Player 32 PPAPI (HKLM-x32…Adobe Flash Player PPAPI) (Version: 32.0.0.363 – Adobe)\nASIO4ALL (HKLM-x32…ASIO4ALL) (Version: 2.14 – Michael Tippach)\nBattle.net (HKLM-x32…Battle.net) (Version:  – Blizzard Entertainment)\nCheck Point Deployment Shell (HKLM-x32…9ebead35-314b-4255-852b-bd8c9e3f2e56) (Version: 8.00.0000 – Check Point)\nCheck Point SSL Network Extender Service (HKLM-x32…392bb1dc-b04e-4f4e-866c-96748b20397e) (Version: 7.01.0000 – CheckPoint)\nDiablo III (HKLM-x32…Diablo III) (Version:  – Blizzard Entertainment)\nDiscord (HKUS-1-5-21-3055999371-879555700-2068610542-1001…Discord) (Version: 0.0.306 – Discord Inc.)\nDisplayDriverAnalyzer (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_DisplayDriverAnalyzer) (Version: 391.01 – NVIDIA Corporation) Hidden\nDolphin (HKLM-x32…Dolphin) (Version: 5.0 – Dolphin Team)\nFL Studio 20 (HKLM-x32…FL Studio 20) (Version:  – Image-Line)\nFL Studio ASIO (HKLM-x32…FL Studio ASIO) (Version:  – Image-Line)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.113 – Google LLC)\nAide à la mise à jour Google (HKLM-x32 … 60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Masqué\nIntel® C++ Redistributables on Intel® 64 (HKLM-x32…F70BCE36-25F2-4475-A918-6209B3D85BF3) (Version: 15.0.179 – Intel Corporation)\nIntel® Chipset Device Software (HKLM-x32…619e726e-d2b4-4e28-9568-c964fd81ee6c) (Version: 10.1.1.14 – Intel® Corporation) Hidden\nIntel® Network Connections 20.1.2019.0 (HKLM…PROSetDX) (Version: 20.1.2019.0 – Intel)\nIntel® Driver Update Utility (HKLM-x32…66307462-7d19-4f1a-af82-aa04b6017f05) (Version: 2.6.2.4 – Intel)\nJava 8 Update 201 (HKLM-x32…26A24AE4-039D-4CA4-87B4-2F32180201F0) (Version: 8.0.2010.9 – Oracle Corporation)\nJava SE Development Kit 8 Update 121 (64-bit) (HKLM…64A3A4F4-B792-11D6-A78A-00B0D0180121) (Version: 8.0.1210.13 – Oracle Corporation)\nMalwarebytes version 4.1.0.56 (HKLM…35065F43-4BB2-439A-BFF7-0F1014F2E0CD_is1) (Version: 4.1.0.56 – Malwarebytes)\nMicrosoft OneDrive (HKUS-1-5-21-3055999371-879555700-2068610542-1001…OneDriveSetup.exe) (Version: 19.232.1124.0012 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (HKLM-x32 … 7299052b-02a4-4627-81f2-1818da5d550d) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (x64) (HKLM … 071c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.4148 (HKLM … 4B6C7001-C7D6-3710-913E-5BC23FCE91E6) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM … 5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32 … 9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32 … 1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32 … 9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x64 redistribuable – 10.0.40219 (HKLM … 1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x86 redistribuable – 10.0.40219 (HKLM-x32 … F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32 … ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32 … 33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32 … f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 redistribuable (x86) – 12.0.40660 (HKLM-x32 … 61087a79-ac85-455c-934d-1fa22cc64f36) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x64) – 14.24.28127 (HKLM-x32…282975d8-55fe-4991-bbbb-06a72581ce58) (Version: 14.24.28127.4 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x86) – 14.24.28127 (HKLM-x32…e31cb1a4-76b5-46a5-a084-3fa419e82201) (Version: 14.24.28127.4 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nMozilla Firefox 73.0.1 (x64 en-US) (HKLM…Mozilla Firefox 73.0.1 (x64 en-US)) (Version: 73.0.1 – Mozilla)\nMozilla Maintenance Service (HKLM-x32…MozillaMaintenanceService) (Version: 73.0.1.7352 – Mozilla)\nMSXML 4.0 SP3 Parser (HKLM-x32…196467F1-C11F-4F76-858B-5812ADC83B94) (Version: 4.30.2100.0 – Microsoft Corporation)\nNVIDIA 3D Vision Controller Driver 390.41 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.NVIRUSB) (Version: 390.41 – NVIDIA Corporation)\nNVIDIA GeForce Experience 3.12.0.84 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.GFExperience) (Version: 3.12.0.84 – NVIDIA Corporation)\nNVIDIA Graphics Driver 432.00 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Driver) (Version: 432.00 – NVIDIA Corporation)\nNVIDIA HD Audio Driver 1.3.38.16 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_HDAudio.Driver) (Version: 1.3.38.16 – NVIDIA Corporation)\nNVIDIA PhysX System Software 9.17.0524 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.PhysX) (Version: 9.17.0524 – NVIDIA Corporation)\nOANDA Desktop (HKLM-x32…C97746B1-FE1D-41AA-B5CF-D0030986B919) (Version: 2.8.3 – OANDA)\nOpenOffice 4.1.6 (HKLM-x32…16E4FF6B-31E8-4037-B627-D87CF872E32B) (Version: 4.16.9790 – Apache Software Foundation)\nOverwatch (HKLM-x32…Overwatch) (Version:  – Blizzard Entertainment)\nPlayStation™Now (HKLM-x32…8F2673A5-9656-4BAA-80F0-F7EFCFF1A336) (Version: 11.0.0 – Sony Interactive Entertainment Network America LLC)\nRazer Synapse (HKLM-x32…D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6) (Version: 2.20.17.413 – Razer Inc.)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7525 – Realtek Semiconductor Corp.)\nRevo Uninstaller 2.0.6 (HKLM…A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97_is1) (Version: 2.0.6 – VS Revo Group, Ltd.)\nRockstar Games Social Club (HKLM-x32…Rockstar Games Social Club) (Version: 1.2.4.1 – Rockstar Games)\nScheduling Manager Gemini v 11.6.84 (HKLM-x32…5C84571D-2097-48B9-8A96-E9E6AD9C1409) (Version: 11.6.84 – Thoughtful Systems, Inc.)\nScheduling Manager Tutorial (HKLM-x32…3108FC9E-C022-4B35-91AA-A7F24B667E89) (Version: 1.1 – Thoughtful Systems, Inc.)\nScpToolkit (HKLM…AC052048-9828-45E3-872B-04CE30A3B58B) (Version: 1.6.238.16010 – Nefarius Software Solutions)\nSlack (HKUS-1-5-21-3055999371-879555700-2068610542-1001…slack) (Version: 4.4.2 – Slack Technologies Inc.)\nSmashLadder Dolphin Launcher 3.0.0 (HKUS-1-5-21-3055999371-879555700-2068610542-1001…f02b64e6-c9bc-5665-a1a7-43718fb1dbd0) (Version: 3.0.0 – Anther Sledge)\nSpeccy (HKLM…Speccy) (Version: 1.32 – Piriform)\nSteam (HKLM-x32 … Steam) (Version: 2.10.91.91 – Valve Corporation)\nthinkorswim (HKLM…9968-4488-2169-7623) (Version: desktop – thinkorswim, Inc)\nTP-LINK TL-WDN4800 Driver (HKLM-x32…70D605C7-C823-4750-BA72-BEB835713612) (Version: 1.3.1 – TP-LINK)\nTP-LINK Wireless Configuration Utility (HKLM-x32…319D91C6-3D44-436C-9F79-36C0D22372DC) (Version: 1.3.1 – TP-LINK)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…32DC821E-4A7D-4878-BEE8-337FA153D7F2) (Version: 2.63.0.0 – Microsoft Corporation) Hidden\nVMware Horizon Client (HKLM…73499771-35D2-4F4E-AC1B-8417816D6F6A) (Version: 5.4.2.11170 – VMware, Inc.) Hidden\nVMware Horizon Client (HKLM-x32…4cd5b1d3-b7c2-4949-9131-8f4b14b1cead) (Version: 5.4.2.11170 – VMware, Inc.)\nVMware Horizon HTML5 Multimedia Redirection Client (HKLM…E6EA3E80-74E7-431A-80C3-9CB0E4CECBDD) (Version: 7.12.0 – VMware, Inc.) Hidden\nVMware Horizon Media Engine 11.0.0.613 (64-bit) (HKLM…3747D742-8099-43C1-AEB5-EBC516D062A6) (Version: 11.0.0.613 – VMware, Inc.) Hidden\nVMware Horizon Media Redirection for Microsoft Teams (HKLM…B253D5D4-842E-4875-8B29-1C74BEE7DD98) (Version: 7.12.0 – VMware, Inc.) Hidden\nWindows Driver Package – Sony Computer Entertainment Inc. Wireless controller for PLAYSTATION®3 Driver Package (01/20/2012 1.4.0.0) (HKLM…D5410AE5FA467EF0F19558D5F60C991A79E11B51) (Version: 01/20/2012 1.4.0.0 – Sony Computer Entertainment Inc.)\nWondershare Helper Compact 2.5.3 (HKLM-x32…5363CE84-5F09-48A1-8B6C-6BB590FFEDF2_is1) (Version: 2.5.3 – Wondershare)\nWondershare UniConverter(Build 11.5.1.0) (HKLM-x32…UniConverter_is1) (Version: 11.5.1.0 – Wondershare Software)\n\nPackages:\n=========\nASUS Welcome -> C:Program FilesWindowsAppsB9ECED6F.ASUSWelcome_1.0.1.0_x64__qmba6cd70vzyy [2015-12-04] (ASUSTeK COMPUTER INC.)\nCandy Crush Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSaga_1.1740.2.0_x86__kgqvnymyfvs32 [2020-04-09] (king.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.166.400.0_x86__kgqvnymyfvs32 [2020-04-18] (king.com)\nDisney Magic Kingdoms -> C:Program FilesWindowsAppsA278AB0D.DisneyMagicKingdoms_5.0.0.8_x86__h6adky7gbf63m [2020-04-22] (Gameloft SE)\nDolby Access -> C:Program FilesWindowsAppsDolbyLaboratories.DolbyAccess_3.2.169.0_x64__rz1tebttyb220 [2020-04-18] (Dolby Laboratories)\nGame Controller Tester -> C:Program FilesWindowsApps11032Reconco.XboxControllerTester_1.5.5.0_x64__thvmwcgtjwwvy [2019-04-14] (Reconco) [MS Ad]\nHidden City: Hidden Object Adventure -> C:Program FilesWindowsApps828B5831.HiddenCityMysteryofShadows_1.34.3400.0_x86__ytsefhwckbdv6 [2020-03-26] (G5 Entertainment AB)\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-14] (HP Inc.)\nKeeper – Password Manager & Secure File Storage -> C:Program FilesWindowsAppsKeeperSecurityInc.Keeper_14.0.33.0_x64__kejf07qmg0jnm [2019-08-02] (Keeper Security Inc)\nMarch of Empires: War of Lords -> C:Program FilesWindowsAppsA278AB0D.MarchofEmpires_4.7.1.1_x86__h6adky7gbf63m [2020-04-14] (Gameloft SE)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.6.4030.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios) [MS Ad]\nMinecraft for Windows 10 -> C:Program FilesWindowsAppsMicrosoft.MinecraftUWP_1.14.6005.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios)\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nPhotos Add-on -> C:Program FilesWindowsAppsMicrosoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-03-28] (Microsoft Corporation)\nPhotos Media Engine Add-on -> C:Program FilesWindowsAppsMicrosoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-02-04] (Microsoft Corporation)\nRoyal Revolt 2 -> C:Program FilesWindowsAppsflaregamesGmbH.RoyalRevolt2_6.0.1.0_x86__g0q0z3kw54rap [2020-03-30] (flaregames GmbH)\nSO COOKBOOK -> C:Program FilesWindowsAppsBEWISE.CookBook_2.5.4.0_neutral__t7hzxgefr9jt2 [2015-12-08] (Slow Sense)\nSpotify Music -> C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0 [2020-04-09] (Spotify AB) [Startup Task]\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-08] (Twitter Inc.)\n\n==================== Custom CLSID (Whitelisted): ==============\n\n(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)\n\nShellIconOverlayIdentifiers: [ AccExtIco1] -> AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco2] -> 853B7E05-C47D-4985-909A-D0DC5C6D7303 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco3] -> 42D38F2E-98E9-4382-B546-E24E4D6D04BB => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers1: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [ANotepad++64] -> B298D29A-A6ED-11DE-BA8C-A68E55D89593 =>  -> No File\nContextMenuHandlers1: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers3: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers3: [4A7C4306-57E0-4C0C-83A9-78C1528F618C] -> 4A7C4306-57E0-4C0C-83A9-78C1528F618C =>  -> No File\nContextMenuHandlers4: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers4: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File\nContextMenuHandlers5: [NvCplDesktopContext] -> 3D1975AF-48C6-4f8e-A182-BE0E08FA86A9 => C:WINDOWSsystem32nvshext.dll [2019-10-02] (NVIDIA Corporation -> NVIDIA Corporation)\nContextMenuHandlers6: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers6: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers6: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers6: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers6: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File\n\n==================== Codecs (Whitelisted) ====================\n\n==================== Shortcuts & WMI ========================\n\n==================== Loaded Modules (Whitelisted) =============\n\n2019-12-02 01:47 – 2016-07-21 11:54 – 000137728 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSCreateVC.dll\n2019-12-02 01:47 – 2017-03-23 10:49 – 001506304 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactDAQExp.dll\n2018-05-11 21:41 – 2014-03-14 11:25 – 000194560 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityDC_WFF.dll\n2018-05-11 21:41 – 2014-03-14 11:16 – 001411072 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilitynicLan.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000139264 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000116224 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF_WPS_WIN7.DLL\n2014-05-02 07:55 – 2014-05-02 07:55 – 000185344 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpflac.dll\n2014-05-02 07:05 – 2014-05-02 07:05 – 000173056 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpmp3.dll\n2003-10-01 09:00 – 2003-10-01 09:00 – 000036864 _____ () [File not signed] C:Scheduling ManagerScheduling Manager TutorialDOCOBJ.DLL\n2020-02-15 15:16 – 2020-02-15 15:16 – 000315392 _____ () [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ReactiveSockets4d67f5e3fcf9a9fb6915af32e36d3ff3ReactiveSockets.ni.dll\n2017-06-05 20:30 – 2020-04-23 08:34 – 000040080 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:Program Files (x86)ASUSAXSP1.01.02PEbiosinterface32.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000356864 _____ (Benjamin Höglinger) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Libarius6a1218864657a0b993f06bfebc6bfe0bLibarius.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001546240 _____ (dbreeze.tiesky.com) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64DBreezee3f40e227965044407fde6d4240d659eDBreeze.ni.dll\n2014-05-02 12:52 – 2014-05-02 12:52 – 000599040 _____ (File is in use) [File not signed ?] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64irrKlang.NET4.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000760320 _____ (Galos) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64CSScriptLibrary4b1ecda5f4587754f0d52a2b982eb61bCSScriptLibrary.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000629760 _____ (Illusory Studios LLC) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64HidSharp72fa3c5d8ba66e19d993d6cb0206407cHidSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000284160 _____ (MadMilkman) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64MadMilkman.Inie99c055d152faf3df8df18bb42a6e59eMadMilkman.Ini.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000150528 _____ (michaelnoonan) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64WindowsInput1ff058a466362046321f245938c5bb0bWindowsInput.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 005551616 _____ (Mono development team) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Mono.CSharp6ed14716f51eebf189d3e7162b1b3177Mono.CSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 002821632 _____ (Newtonsoft) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Newtonsoft.Json18197a9d82f36cea0df95d6470495519Newtonsoft.Json.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000159744 _____ (Richard Deeming) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Trinet.Core.IO.Ntfsb2cd883b33635cb7885f236e80729d75Trinet.Core.IO.Ntfs.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000164352 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl.Shared3ce57d9974845341f18acb462c86fa25ScpControl.Shared.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001137664 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl2be4e9f6cc24f866952c48ea8ee4265bScpControl.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000978432 _____ (The Apache Software Foundation) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64log4net21c34351fbc282417539d1b820038ef7log4net.ni.dll\n2019-12-02 01:47 – 2017-03-23 10:52 – 000708608 _____ (Wondershare) [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSProducstInfo.dll\n\n==================== Alternate Data Streams (Whitelisted) ========\n\n==================== Safe Mode (Whitelisted) ==================\n\n(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)\n\nHKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service"\n\n==================== Association (Whitelisted) =================\n\n==================== Internet Explorer trusted/restricted ==========\n\n==================== Hosts content: =========================\n\n(If needed Hosts: directive could be included in the fixlist to reset Hosts.)\n\n2015-07-10 07:04 – 2017-12-28 14:35 – 000000876 _____ C:WINDOWSsystem32driversetchosts\n127.0.0.1 view-localhost # view localhost server\n\n==================== Other Areas ===========================\n\n(Currently there is no automatic fix for this section.)\n\nHKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)Common FilesOracleJavajavapath;%INTEL_DEV_REDIST%redistintel64compiler;C:ProgramDataOracleJavajavapath;C:Windowssystem32;C:Windows;C:WindowsSystem32Wbem;C:WindowsSystem32WindowsPowerShellv1.0;C:Program Files (x86)NVIDIA CorporationPhysXCommon;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;%SYSTEMROOT%System32OpenSSH\nHKUS-1-5-21-3055999371-879555700-2068610542-1001Control PanelDesktop\\Wallpaper -> C:UsersabangAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper\nDNS Servers: 192.168.0.1\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: RequireAdmin)\nWindows Firewall is enabled.\n\n==================== MSCONFIG/TASK MANAGER disabled items ==\n\n(If an entry is included in the fixlist, it will be removed.)\n\nMSCONFIGServices: asComSvc => 2\nMSCONFIGServices: AsSysCtrlService => 2\nMSCONFIGServices: cpextender => 2\nMSCONFIGServices: Ds3Service => 2\nMSCONFIGServices: DTSAudioSvc => 2\nMSCONFIGServices: GfExperienceService => 2\nMSCONFIGServices: gupdate => 3\nMSCONFIGServices: gupdatem => 3\nMSCONFIGServices: Intel® PROSet Monitoring Service => 2\nMSCONFIGServices: MBAMScheduler => 2\nMSCONFIGServices: MBAMService => 2\nMSCONFIGServices: MozillaMaintenance => 3\nMSCONFIGServices: NvNetworkService => 2\nMSCONFIGServices: NvStreamNetworkSvc => 3\nMSCONFIGServices: NvStreamSvc => 2\nMSCONFIGServices: nvsvc => 2\nMSCONFIGServices: ProductAgentService => 2\nMSCONFIGServices: Razer Game Scanner Service => 2\nMSCONFIGServices: Steam Client Service => 3\nMSCONFIGServices: Stereo Service => 2\n\n==================== FirewallRules (Whitelisted) ================\n\n(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)\n\nFirewallRules: [UDP Query User3A20CB0C-5972-4F0E-B28D-3E1D5EECAB8EC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [TCP Query User54030791-5486-48E0-8F99-3F8DD73AD12BC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [023F0A77-9576-4C1F-864A-75D1B5E79A7A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [67FD644B-FDAF-4D1D-8A5E-ECB4212E4B29] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A1DDAC8F-CF03-41EE-8357-92024344D205] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D9442DC5-1818-4FF2-A71E-05820984F49B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE7E363B-F54A-46B5-9442-FFB6626E281F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30C9114F-2B3F-4153-B664-BF1CD3BEC2B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4AD5CA7A-2172-4BF1-B153-DC32716E2497] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C23EAD57-7D13-4155-BB46-355B1C23776F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3B863970-095C-4C85-A118-1A392B135B1B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8D113EB2-E251-4B92-AEF0-D96E0B6B80B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E12A8E1A-517E-4B2F-A75D-062BE2C4F3FA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C06C18D1-088B-4201-8911-40AB9597CF34] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C2089B7F-D2CB-4269-B02A-C1B1B2B1887B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [09CA0E2E-1D40-425F-BD7B-C2E51E4C1F87] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FCDA81A-7C2D-43EE-8AF0-8B625999E1A1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0EA19E97-2D0D-4EBA-908D-02F251223DF8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9B0454C6-EEA8-4459-8BBC-9C93C08EDB2D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [87887A46-ABE3-421E-9E3D-65767F8620B9] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C68A5AB6-1862-4550-8EC9-E1C19DE8444F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [187C20C7-1EE7-42F1-A916-742B2AB6B4FC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B7EF0327-CD34-4A11-B23D-D223BEBA5978] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [2BF20755-F176-4E2C-8FF6-B971083800BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [15F4D836-0E42-429B-91BB-05D8C6AEC5C8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [425F7D42-AC12-4064-87FB-E4D611A2DC21] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [CAF42CB5-301A-4BA5-8E05-C31276646D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E67899C3-A328-4FA4-8C7B-A3B2BFD06D77] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FF6238D-0160-422F-9196-FABDDA4A56A3] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E78D7D0F-2F04-4182-96CA-013B656D1C95] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AC2C0466-2A72-4651-9C90-17C853D54D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [86360315-551D-4AA4-B952-EE9A6C584E82] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6A96FA0D-9B43-4316-849B-583F8C3BBE89] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E995C816-398B-413E-B22D-117100CC1ACC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AAFBC89F-D155-4F8A-8718-BAEA520D5BB5] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FC48A9E8-E688-4170-A16D-F817210C5C80] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C4D653A6-86C5-4CEB-93DC-3D9E2BEF010C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54E40053-0A90-4A11-B6BE-5F5ADDE987B0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EA745C69-727F-4201-B3E4-1471123DD72A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B0907127-B4C6-4C84-8D83-B969896E95AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41ADDA74-F50B-4CD4-8479-313C33196388] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D08D2994-3E16-49D6-AD02-C0DF7ECB1F09] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [217C826B-39CC-4240-85E1-433C8ADC2581] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A53A5F9B-D3C6-4E4D-AE16-17346EBE8919] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9071E769-ED0B-4656-9251-C12367C56F41] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [625D1BB1-FC20-4FCE-B671-54C7DD9340F2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [61B6EF3C-791D-4F83-A1B7-BFBF3621879C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [F99F2C07-DC34-44DA-B0BC-528FDFA41446] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AB4AB17F-4A79-463E-8961-5AC357FBCA47] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AFAE990F-0583-49E1-8258-3C7726FEC616] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [81E7AC73-1844-406C-A08B-A3364BF4C3AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E5635E24-CBC0-4F57-AFD6-F67FB96BA53B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [45F0B540-5C04-4785-9C90-87C20AE5477E] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4995CD7C-77E5-438B-849F-64DC6E1A1E86] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A777D5B6-1C0B-4566-826C-AEF75A6ACC55] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [99844AC6-7F2F-42E6-8A7C-D2BF828248DA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9BB186FE-7EF7-424C-AF36-BF61CFCEDA2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4F947C79-7C21-4375-B9BD-D1DBEA3FB28B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [01AC1E18-7FBD-485C-B0D0-187A8E242230] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FF1B140D-494B-45A8-B475-65516E09CBB8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3EB8A53C-3292-49F2-A673-B4F12E756547] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13CD5436-1EBD-4E89-ABD2-CAE09B30D6AA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FA0121A5-5411-45B3-9354-6A71CB03D931] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D84B311A-6A2E-4069-A9EF-659FCE546874] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [7476105C-6CB5-4B36-8AB4-7A8459F1E36B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [00560EE3-AC11-497D-8D86-C7424586FA15] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [31ACB8D4-72E5-471D-906B-DE67EC2F159B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [14E8B51C-D163-423C-988B-0D89DEF1F718] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41654C77-92F4-4858-8251-77C84AF0305B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B87075DD-027E-4F7D-B37C-59EA52C05BA7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8C1B7F41-C94D-4E9D-89D8-FDB4789756BC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6186AB12-D44A-41D0-A2FE-6B065EA9DDFD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E3129253-383E-435D-B0A2-C7137CB06A0B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30906E77-4729-41D3-9508-0CD6AFA301E8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [BCA51D18-2143-4B10-B7E5-A2E60493BA94] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13EAD58F-B7D3-405C-AFC3-A6F180CF1F85] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [5D3A5397-4ABE-44A1-AB76-2A0CF64BC8AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C7904CA0-48FC-4F6A-84DF-54E365F9A7F6] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8E0CA2B9-0A97-4ECD-A631-2ED098DF9051] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B35CB8CD-0CD1-4201-8E1C-025636FC066D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B1632180-5628-448A-A84A-F51769531562] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [ED615CA0-1786-4C7A-A128-4BD3EDA4C0FD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [233621B9-0C3B-4384-8C84-595062660AE2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE5DFA07-0791-4457-B0CD-08DCB1494A39] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0D39F94F-1588-42ED-A675-0BA8B547D6AB] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D513F9B4-676F-473D-B815-4FA1A41342C1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [11EBECD5-5DAB-454A-BF9B-A57DFCFFD5E7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54009A4C-F798-4CA4-9F75-8F4A9FCAD813] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4D5085D0-831B-4FAB-AA7F-4AC8133C7C2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [70C46E26-EB0E-4C8B-A905-36761929073B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9E32B534-F7B7-4A70-82D0-B5A774D60F4F] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [90A3BBEE-2788-4277-8EAD-3DC247BE70E8] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [UDP Query User20EC0AE9-A8BA-46F6-98EA-F155341A019BD:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [TCP Query User7C75CFD6-CC06-47D9-A584-E601D39F32D9D:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [26A62681-A444-4FBB-ADA2-FC1B05C6E1E1] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [07C3519E-95B7-4FBB-B7C7-0CE53DD7A0E0] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [F573858C-0F95-4B56-830C-3541830DB720] => (Allow) C:Program Files (x86)PlayStationNowunidater.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment)\nFirewallRules: [D730743C-DA46-4800-AF0D-5CB3C05AF8CD] => (Allow) C:UsersabangAppDataLocalGaikaiCrashReportsdumpupload.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> )\nFirewallRules: [9D9C777E-3E3C-4B2C-B289-A04E2CD768E7] => (Allow) C:Program Files (x86)PlayStationNowpsnowlauncher.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment Network America LLC)\nFirewallRules: [C77F9D37-04C2-4E4A-88AA-C204D34B2686] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [2A9C4941-E497-4758-A055-F943D1F33761] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [UDP Query UserA3822803-F5A0-4805-9255-68A3CEDB1402C:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [TCP Query UserD43AADF3-49D0-416F-B97D-B399D33C40EAC:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [87B69EB1-2C3A-4D0A-8028-A9FF92B3C1E3] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [09C1860A-23C2-4E12-8E3A-A38C6C98C101] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [5A00F446-668F-4543-A867-77E3BEDCD098] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50FB5DEF-ED25-460F-BB2E-A37F62D15222] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50B2A780-FC1E-4CEE-87F0-C5E166BCC312] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [7DC21C63-21CB-413E-BE20-ECC6B47C7C32] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [TCP Query UserF11A8ECF-8855-4F97-97CB-6AAEC76F87BEC:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCAE4AE65-0CDE-43CE-A92A-196F35E52E22C:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [CA98B275-2FE1-402D-A5F1-B87D8ADFBC55] => (Allow) C:Program Files (x86)CheckPointSSL Network Extenderslimsvc.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nFirewallRules: [TCP Query User2820BD35-2129-4E6D-A8DB-3C6CE798C6F6C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [UDP Query User86802B20-75B9-4F75-AE91-E496BD11D479C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [TCP Query User8438EA6D-3737-48D0-9F93-8F2D6D9A06ECC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [UDP Query UserE79F117B-B096-4DC4-B77B-8797F37D149CC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [791DCA37-8EC8-424B-BB95-ACE422DF014E] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [888D7D35-2B25-4AA8-96BF-F9F84EB9F526] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [TCP Query User5813B562-B455-4993-85C5-7FF442CB25C2C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCF888DB5-FD06-4A19-815C-C31FCB1D81B6C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [41F7857F-9E58-485F-818B-19AAABEAE453] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [5CA9388B-31A9-4924-ABCA-0DF73DA832A9] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A3E9FEC4-23DB-47D1-8375-38D89FBBF935] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [BCE97003-DF35-4195-9804-7A21CAFDA70A] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A6603C8D-0E63-4245-9387-91044ABFB38E] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [91CB3554-F187-403B-B8C2-E92E45365F06] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [10DA8387-874D-4AC3-8603-D51430C4F280] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [9899BB37-71DB-4746-A9D8-EEAE68F2FC44] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [TCP Query User4271D5BE-DFA1-4778-AC81-F31C050E15B2D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [UDP Query User4DA94064-2DD2-4124-AA18-E3D6E6D095EED:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6B1586A3-6621-4C6D-828E-83F0210E0F30] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [E253CF1C-2647-4974-951D-1949DDE011CE] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6E255D8D-8D8F-43E4-9FD2-D7CB1268F204] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [027F9085-2A91-4741-837C-18946ECA34F4] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [8032F437-4112-4C85-B8F2-39492CA0390C] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [DDE3D4D3-890E-4EF7-9652-852C1E2C5008] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AA702745-0AD1-40A7-BF74-2AB11513F5E3] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [423B78B2-149F-4C73-A4F9-744BE0ED21F0] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [45D3CDE1-4396-4D7B-8979-0673185923B2] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [553AF5AC-E66B-44B9-942D-8189E944F9AB] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [TCP Query User3AD38B14-73AD-4732-A86E-4165B8D48E9CC:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [UDP Query UserB7A1A6A6-3553-4885-B90C-A5CAC8C2D830C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [5F40B1B5-169B-43BF-BF4D-E24B40F6E437] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F79E4DA7-F39B-4B44-A311-EEA98A1AB989] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [1EE5B3A2-2230-4514-92CB-5CA09D8F28AE] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [81E2AFE3-8095-423A-B77D-BAA224E1C8C0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [838049CC-C7B9-426A-A8B2-384720480511] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8CA7AF4B-3191-45EB-8617-FAA13ADC3D67] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [9E45E785-6C4D-44C7-9A5C-FD29598D8F07] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [60A0B233-8C86-4B36-9B42-CDD1C488E267] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8140EE9A-095C-460A-8D74-442A788C741E] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F54C7FB7-06B7-490B-976F-E79A38E2BEB3] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [74A35425-19B9-43C7-9B72-451D83167B9D] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [FF858980-0824-4E4A-BF8A-5F7C46B4823B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F4A1204D-9E06-4C4D-A793-49EDF60A85C0] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [650EA6A1-093D-4F84-8563-097B8EB1359B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [E45143B8-6858-49A3-92AB-247474BDA0F7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F6F4DB44-A01B-4B0E-97CF-A6FFA216D3BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [B3BB5363-09A9-4886-965E-25E84AB6BD5C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [6F4D721B-02EE-4875-988E-ADC09C264700] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C36BAE82-63BF-4FAE-AB12-2338F9B7C86F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C1A48158-A53A-4B69-9EE0-00A7224ABE00] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [5FD89F7C-37D8-4F19-806D-7503FAF8707D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [4EAC8A2A-54AD-41D9-BB20-08240A92D596] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [18865BAC-5B8D-45C4-B0FB-4432AC5A6381] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [1083CE52-99BE-40A3-A064-711F5AAE1A00] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [433AD889-009F-4D2D-9034-6BC62CCE4A13] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [4DB082A3-6753-4ECA-856A-3D3D59213CE9] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [D2B0EF02-A882-4AB6-8ED1-7A35F3622D4E] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [5844E35C-079D-41CA-AE60-AA9E4551A040] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [806D6C41-EAD4-48DB-83C1-EC5BE80EEF37] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [F64CDFFF-36EB-4E54-A7DD-61B608771748] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [48AA320F-FDFA-4279-9BAC-D24AC659941B] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\n\n==================== Restore Points =========================\n\n20-04-2020 09:04:00 Scheduled Checkpoint\n\n==================== Faulty Device Manager Devices ============\n\n==================== Event log errors: ========================\n\nErreurs d'application:\n==================\nError: (04/23/2020 06:19:46 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (79684,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (04/23/2020 05:19:15 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (78176,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (04/23/2020 04:18:44 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77936,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (04/23/2020 03:18:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (76960,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (04/23/2020 01:45:40 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (8300,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (04/23/2020 01:21:01 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (7060,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (04/23/2020 12:45:10 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77084,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (04/23/2020 12:39:16 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (10932,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nErreurs système:\n=============\nError: (04/23/2020 08:34:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:51:57 PM on ‎4/‎22/‎2020 was unexpected.\n\nError: (04/23/2020 08:33:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.\n\nError: (04/22/2020 08:31:58 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:43:27 PM on ‎4/‎21/‎2020 was unexpected.\n\nError: (04/22/2020 08:31:52 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.\n\nError: (04/20/2020 08:38:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 1:30:02 AM on ‎4/‎20/‎2020 was unexpected.\n\nError: (04/20/2020 08:37:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.\n\nError: (04/18/2020 10:16:14 PM) (Source: volsnap) (EventID: 36) (User: )\nDescription: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.\n\nError: (04/18/2020 11:40:27 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 12:26:39 AM on ‎4/‎18/‎2020 was unexpected.\n\nWindows Defender:\n===================================\nDate: 2020-04-22 12:33:54.808\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 726051A0-B1B0-4589-BBE8-0B2FB1F09D40\nScan Type: Antimalware\nScan Parameters: Quick Scan\n\nDate: 2020-04-03 21:47:35.072\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 01A490FE-91B6-4450-B243-F9F1C6B0EDB2\nScan Type: Antimalware\nScan Parameters: Quick Scan\n\nDate: 2020-04-16 08:57:03.659\nLa description: \nWindows Defender Antivirus engine has been terminated due to an unexpected error.\nFailure Type: Crash\nException code: 0xc0000005\nResource: file:C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsImage-LineMore….lnk\n\nCodeIntegrity:\n===================================\n\nDate: 2020-04-16 08:57:18.396\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.\n\nDate: 2020-04-16 08:57:18.383\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.\n\nDate: 2020-04-16 08:57:15.838\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.\n\nDate: 2020-04-16 08:57:15.824\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.\n\nDate: 2020-04-16 08:57:15.808\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system.\n\nDate: 2020-04-16 08:57:15.795\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system.\n\nDate: 2020-04-16 08:57:15.306\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system.\n\nDate: 2020-04-16 08:57:15.274\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system.\n\n==================== Memory info =========================== \n\nBIOS: American Megatrends Inc. 2501 06/24/2015\nMotherboard: ASUSTeK COMPUTER INC. Z97-A-USB31\nProcessor: Intel® Core™ i5-4690K CPU @ 3.50GHz\nPercentage of memory in use: 54%\nTotal physical RAM: 8131.86 MB\nAvailable physical RAM: 3731.77 MB\nTotal Virtual: 9411.86 MB\nAvailable Virtual: 3785.61 MB\n\n==================== Drives ================================\n\nDrive c: () (Fixed) (Total:134.71 GB) (Free:30.03 GB) NTFS ==>[drive with boot components (obtained from BCD)]\nDrive d: (win) (Fixed) (Total:830.08 GB) (Free:461.4 GB) NTFS\n\n\\?Volume7e1de73d-0000-0000-0000-90ad21000000 () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS\n\n==================== MBR & Partition Table ====================\n\n==========================================================\nDisk: 0 (Size: 232.9 GB) (Disk ID: 7E1DE73D)\nPartition 1: (Active) – (Size=134.7 GB) – (Type=07 NTFS)\nPartition 2: (Not Active) – (Size=530 MB) – (Type=27)\nPartition 3: (Not Active) – (Size=14.9 GB) – (Type=82)\nPartition 4: (Not Active) – (Size=82.8 GB) – (Type=05)\n\n==========================================================\nDisk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: CC16B7FB)\nPartition 1: (Not Active) – (Size=931.5 GB) – (Type=05)\n\n==================== End of Addition.txt =======================\n\n\n\n\nClick to rate this post!\r\n \r\n [Total: 0 Average: 0]","paragraphs":["Je ne sais pas si le vol de carte de crédit est lié au malware ou au phishing, mais il y a eu plusieurs achats aujourd'hui non autorisés sur ma carte de crédit. Je n'ai pas perdu ma carte et je n'utilise vraiment ma carte que sur des sites autorisés, c'est comme la première fois que je reçois sans que je comprenne vraiment pourquoi ni comment. Ce qui est plus intéressant, c'est qu'ils ont utilisé mon crédit dans des magasins physiques du Maryland où je suis situé, mais je n'ai pas perdu ma carte de crédit, alors comment ont-ils réussi à l'utiliser dans des magasins sans carte ou même avec la pompe à essence?","Mais de toute façon, je fais cela pour vérifier s'il y a des logiciels malveillants sur mon processeur et peut-être que je trouverai plus de réponses et c'est bien que je le fasse aussi parce que moi et mes cousins ​​avons été sur des sites qui ne sont pas sûr dans le passé.","Journal FRST:","Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 22-04-2020\nCommandé par abang (administrateur) sur DESKTOP-VTQ0750 (ASUS All Series) (23-04-2020 18:25:30)\nExécution à partir de D: Desktop\nProfils chargés: abang (Profils disponibles: abang & user & sesay & ibang)\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal","==================== Processus (sur liste blanche) =================","(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)","() [File not signed] C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe\n(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe\n(ASUSTeK Computer Inc. ->) [File not signed] C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe\n(ASUSTeK Computer Inc. ->) C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe\n(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe\n(DTS, Inc. -> DTS, Inc) C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware DeviceRedirectionCommon ftnlsv.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware ScannerRedirection ftscanmgrhv.exe\n(FabulaTech, LLP -> VMware) C: Program Files Common Files VMware SerialPortRedirection Client vmwsprrdpwks.exe\n(Le fichier est en cours d'utilisation) [File not signed ?] C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Produits de développement logiciel Intel® ->) C: Program Files Intel Driver Update Utility SUR SurSvc.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware MBAMService.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware mbamtray.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe Calculator.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.XboxGamingOverlay_5.120.4062.0_x64__8wekyb3d8bbwe GameBar.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.ZuneMusic_10.20022.11011.0_x64__8wekyb3d8bbwe Music.UI.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows ImmersiveControlPanel SystemSettings.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 MsMpEng.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 NisSrv.exe\n(NVIDIA Corporation -> Node.js) C: Program Files (x86) NVIDIA Corporation NvNode NVIDIA Web Helper.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvContainer nvcontainer.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA Share.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation ShadowPlay nvsphelper64.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jucheck.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jusched.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkNGUI64.exe\n(Scarlet.Crush Productions) [File not signed] C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) Common Files VMware USB vmware-usbarbitrator64.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe\n(Wondershare Technology Co., Ltd -> Wondershare) C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe","==================== Registre (liste blanche) ===================","(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)","HKLM … Run: [AdobeGCInvoker-1.0] => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nHKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8483032 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM … Run: [RtHDVBg_DTS] => C: Program Files Realtek Audio HDA RAVBg64.exe [1393880 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [SunJavaUpdateSched] => C: Program Files (x86) Fichiers communs Java Java Update jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)\nHKLM-x32 … Exécuter: [Wondershare Helper Compact.exe] => C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co., Ltd -> Wondershare)\nHKU S-1-5-21-3055999371-879555700-2068610542-1001 … Run: [SmashLadder Dolphin Launcher] => C: Users abang AppData Local Programs smashladder-dolphin-launcher SmashLadder Dolphin Launcher.exe [67653120 2019-11-02] (Anther Sledge) [File not signed]\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.113 Installer chrmstp.exe [2020-04-21] (Google LLC -> Google LLC)\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage ScpToolkit Tray Notifications.lnk [2019-01-01]\nShortcutTarget: ScpToolkit Tray Notifications.lnk -> C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe (Scarlet.Crush Productions) [File not signed]\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage TP-LINK Wireless Configuration Utility.lnk [2018-05-11]\nShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe () [File not signed]\nGroupPolicy: Restriction? <==== ATTENTION","==================== Tâches planifiées (liste blanche) ============","(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","Tâche: 06EFEDF1-7A16-4649-BB3B-8109A7E3A27D – System32 Tasks NvTmRep_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmRep.exe [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 0C04A11A-9B68-4A59-8AE2-81FEC4F684B1 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1741576 2016-03-17] (Logiciel Intel® -> Intel Corporation)\nTâche: 10F16CA9-0D75-4E08-8BB4-E4768551F318 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: 24C76DD3-A1CA-454E-B9E2-536CAE2B09EF – System32 Tasks Red Giant Link => C: Program [Argument = Files (x86)Red Giant LinkRed Giant Link.exe]\nTâche: 2CC605CE-6729-4C80-A5CD-F3B611FD7E1C – System32 Tasks Adobe Flash Player Updater => C: WINDOWS SysWoW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 3DC8E720-2002-4630-AB1C-86EA42BB5CAB – System32 Tasks Microsoft Windows Windows Defender Windows Defender Verification => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 420971E1-EDA3-467D-B70D-7D98608FCE40 – System32 Tasks updater => C: Program Files Nefarius Software Solutions ScpToolkit ScpUpdater.exe [464384 2016-01-10] (Solutions logicielles Nefarius) [File not signed]\nTâche: 48DE21F0-243D-41E8-9FEE-7FB0BDBCAD16 – System32 Tasks Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C: Program Files Bitdefender Agent WatchDog.exe\nTâche: 4BAA8084-3CDA-4287-AD83-6B0D6F9AEA9C – System32 Tasks NvProfileUpdaterDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 54C95A92-2879-4CEA-9BDD-5DC99DBB78FC – System32 Tasks AdobeGCInvoker-1.0 => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nTâche: 591A6C13-47E6-4DAA-9F87-EC4DF44DF3DA – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cleanup => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 6C107948-5039-4FAB-BEA0-B155B37DFE24 – System32 Tasks USER_ESRV_SVC_QUEENCREEK => "C: WINDOWS System32 Wscript.exe" // B // NoLogo "C: Program Files Intel SUR QUEENCREEK task.vbs "\nTâche: 76CA6106-FA92-4408-803D-4DF916374B54 – System32 Tasks AdobeAAMUpdater-1.0-MicrosoftAccount-abangur10426@students.pgcc.edu => C: Program Files (x86) Common Files Adobe OOBE PDApp UWA UpdaterStartupUtility.exe\nTâche: 7DBD39AF-150F-485A-847E-74A9AC31B769 – System32 Tasks NVIDIA GeForce Experience SelfUpdate_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA GeForce Experience.exe [1931064 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 83906FA5-24D1-4925-84C4-277C804D9A9E – System32 Tasks Adobe Flash Player PPAPI Notifier => C: WINDOWS SysWOW64 Macromed Flash FlashUtil32_32_0_0_363_pepper.exe [1454136 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 8DC800AC-09FF-4A00-871D-0350D0EB1555 – System32 Tasks NvProfileUpdaterOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUp64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 9763F846-397A-480C-8F20-3D4E42EE93FE – System32 Tasks Adobe Acrobat Update Task => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: 9FFECADB-B591-4E6A-ACB0-DB2EDA7CE390 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Scheduled Scan => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: BA23C37B-CE1C-4754-86B8-D949EE954A95 – System32 Tasks NvTmMon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmMon.exe [525104 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: BCE93CD1-8D9D-4405-A966-CFDA6247D350 – System32 Tasks NvNodeLauncher_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NvNode nvnodejs [969016 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: CB54D4D0-DA92-4389-995B-FE64BA5E0CBF – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: E08D6E8F-0488-41F3-91E1-4ED22B333DA2 – System32 Tasks NvDriverUpdateCheckDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvContainer nvc [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: EBF69801-5958-4547-9B2D-5BD49A5CFFD6 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cache Maintenance => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: FF901B38-47D0-48EF-8BC2-3A93BD853831 – System32 Tasks NvTmRepOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTm [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)","(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)","==================== Internet (liste blanche) ====================","(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)","Hôtes: 127.0.0.1 view-localhost # view localhost server\nTcpip Paramètres: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces 1a078130-89b1-47d0-b730-4f840d58f0e0: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces a09096a6-9f70-4e4b-97ba-0b8487bbab10: [DhcpNameServer] 192.168.0.1","Internet Explorer:\n==================\nBHO-x32: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files (x86) Java jre1.8.0_201 bin ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nBHO-x32: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files (x86) Java jre1.8.0_201 bin jp2ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nDPF: HKLM-x32 414FB93D-DEDD-4FEF-AD7F-167992EBDB52 hxxps: //portal.ssl.imsweb.com/SNX/CSHELL/extender.cab\nHandler-x32: cdl – 3dd53d40-7b8b-11D0-b013-00aa0059ce02 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: fichier – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: ftp – 79eac9e3-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: gopher – 79eac9e4-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: http – 79eac9e2-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: https – 79eac9e5-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: local – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: mk – 79eac9e6-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFiltre: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Windows System32 urlmon.dll [2020-03-11] (Microsoft Windows -> Microsoft Corporation)\nFilter-x32: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: dégonfler – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: gzip – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: lzdhtml – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]","Bord: \n======\nDownloadDir: D: Téléchargements","FireFox:\n========\nFF DefaultProfile: tqnxf3yx.default\nFF ProfilePath: C: Users abang AppData Roaming Mozilla Firefox Profiles tqnxf3yx.default [2020-03-18]\nFF Plugin-x32: @ java.com / DTPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin dtplugin npDeployJava1.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ java.com / JavaPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin plugin2 npjp2.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: Adobe Reader -> C: Program Files (x86) Adobe Acrobat Reader DC Reader AIR nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/thinkorswim -> C: Program Files thinkorswim npthinkorswim.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/tossc -> C: Program Files thinkorswim nptossc.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)","Chrome: \n=======\nProfil CHR: C: Users abang AppData Local Google Chrome User Data Default [2020-04-23]\nCHR DownloadDir: D: Téléchargements\nNotifications CHR: Par défaut -> hxxps: //videoconverter.wondershare.com; hxxps: //www.facebook.com; hxxps: //www.livescience.com\nCHR StartupUrls: Par défaut -> "hxxps: //feedly.com/i/my", "hxxps: //www.koyfin.com/home"\nExtension CHR: (Google Drive) – C: Users abang AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2015-12-03]\nExtension CHR: (Lecture HLS native) – C: Users abang AppData Local Google Chrome User Data Default Extensions bfgdekjhniododjcobllghembkdpdkea [2017-10-21]\nExtension CHR: (YouTube) – C: Users abang AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-03]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users abang AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-06]\nExtension CHR: (Recherche Google) – C: Users abang AppData Local Google Chrome User Data Default Extensions coobgpohoikkiipiblmjeljniedjpjpf [2015-12-03]\nExtension CHR: (Portefeuille Bitdefender) – C: Users abang AppData Local Google Chrome User Data Default Extensions dhhejlifdlcgcmogbggeomfodgklfaem [2015-12-03]\nExtension CHR: (Paiements Chrome Web Store) – C: Users abang AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]\nExtension CHR: (Gmail) – C: Users abang AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-25]\nExtension CHR: (Chrome Media Router) – C: Users abang AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-21]\nProfil CHR: C: Users abang AppData Local Google Chrome User Data System Profile [2019-02-06]\nCHR HKLM-x32 … Chrome Extension: [dhhejlifdlcgcmogbggeomfodgklfaem]\nCHR HKLM-x32 … Chrome Extension: [efaidnbmnnnibpcajpcglclefindmkaj]","==================== Services (liste blanche) ===================","(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","R2 AGMService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe [3374160 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 AGSService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe [3103824 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 asComSvc; C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe [936728 2015-12-01] (ASUSTeK Computer Inc. ->)\nR2 AsSysCtrlService; C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe [1360016 2015-12-03] (ASUSTeK Computer Inc. ->) [File not signed]\nR2 client_service; C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe [442840 2020-03-30] (VMware, Inc. -> VMware, Inc.)\nR2 cpextender; C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe [367984 2019-09-19] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nR2 Ds3Service; C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe [389632 2016-01-10] (Le fichier est en cours d'utilisation) [File not signed ?]\nR2 DTSAudioSvc; C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe [240576 2015-12-03] (DTS, Inc. -> DTS, Inc)\nS3 ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 ftnlsv3hv; C: Program Files Fichiers communs VMware DeviceRedirectionCommon ftnlsv.exe [280176 2020-02-25] (FabulaTech, LLP ->)\nR2 ftscanmgrhv; C: Program Files Fichiers communs VMware ScannerRedirection ftscanmgrhv.exe [4369520 2020-02-27] (FabulaTech, LLP ->)\nR2 MBAMService; C: Program Files Malwarebytes Anti-Malware mbamservice.exe [6933272 2020-03-10] (Malwarebytes Inc -> Malwarebytes)\nR2 NvContainerLocalSystem; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvContainerNetworkService; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nService S4 PST; C: Program Files (x86) Motorola MotForwardDaemon ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]\nService S4 Razer Game Scanner; C: Program Files (x86) Razer Razer Services GSS GameScannerService.exe [189264 2016-09-24] (Razer USA Ltd. ->)\nR2 SystemUsageReportSvc_QUEENCREEK; C: Program Files Intel Driver Update Utility SUR SurSvc.exe [156928 2016-11-17] (Produits de développement logiciel Intel® ->)\nS3 USER_ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 vmwsprrdpwks; C: Program Files Fichiers communs VMware SerialPortRedirection Client vmwsprrdpwks.exe [459888 2020-02-20] (FabulaTech, LLP -> VMware)\nR3 WdNisSvc; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 NisSrv.exe [3294680 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nR2 WinDefend; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MsMpEng.exe [103168 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nS3 WsDrvInst; C: Program Files (x86) Wondershare Video Converter Ultimate Transfer DriverInstall.exe [107760 2019-09-26] (Wondershare Technology Co., Ltd -> Wondershare)\nR2 NVDisplay.ContainerLocalSystem; "C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C: ProgramData NVIDIA NVDisplay.ContainerLocalSystem.log" -l 3 -d "C: Fichiers programme NVIDIA Corporation Display.NvContainer plugins LocalSystem "-r -p 30000 \nR2 NvTelemetryContainer; "C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C: ProgramData NVIDIA NvTelemetryContainer.log" -l 3 -d "C: Program Files (x86) NVIDIA Corporation NvTelemetry plugins "-r","===================== Pilotes (sur liste blanche) ===================","(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","S3 AppleKmdfFilter; C: WINDOWS System32 drivers AppleKmdfFilter.sys [20640 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nS3 AppleLowerFilter; C: WINDOWS System32 drivers AppleLowerFilter.sys [35560 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nR1 AsIO; C: Windows SysWow64 drivers AsIO.sys [15232 2015-12-01] (ASUSTeK Computer Inc. ->)\nR3 athr; C: WINDOWS System32 drivers athw8x.sys [4233728 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-19] (Microsoft Corporation) [File not signed]\nR1 ESProtectionDriver; C: WINDOWS system32 drivers mbae64.sys [153312 2020-04-21] (Malwarebytes Corporation -> Malwarebytes)\nS3 libusbK; C: WINDOWS System32 drivers libusbK.sys [47200 2018-09-15] (Travis Lee Robinson -> hxxp: //libusb-win32.sourceforge.net)\nR2 MBAMChameleon; C: WINDOWS System32 Drivers MbamChameleon.sys [214496 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nS0 MbamElam; C: WINDOWS System32 DRIVERS MbamElam.sys [20936 2020-03-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)\nR3 MBAMFarflt; C: WINDOWS System32 DRIVERS farflt.sys [195432 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMProtection; C: WINDOWS system32 DRIVERS mbam.sys [73584 2020-04-23] (Malwarebytes Corporation -> Malwarebytes)\nR3 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [248968 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMWebProtection; C: WINDOWS system32 DRIVERS mwac.sys [124560 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 nvlddmkm; C: WINDOWS System32 DriverStore FileRepository nv_dispi.inf_amd64_db678424d2641c3d nvlddmkm.sys [22094728 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvStreamKms; C: Program Files NVIDIA Corporation NvStreamSrv NvStreamKms.sys [31024 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvad_WaveExtensible; C: WINDOWS system32 drivers nvvad64v.sys [59240 2017-12-14] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvhci; C: WINDOWS System32 drivers nvvhci.sys [57928 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 rzendpt; C: WINDOWS System32 drivers rzendpt.sys [50392 2015-08-13] (Razer Inc. -> Razer Inc)\nR2 rzpmgrk; C: WINDOWS system32 drivers rzpmgrk.sys [44144 2016-09-16] (Razer Inc. -> Razer, Inc.)\nR2 rzpnk; C: WINDOWS system32 drivers rzpnk.sys [137840 2016-10-08] (Razer Inc. -> Razer, Inc.)\nR3 ScpVBus; C: WINDOWS System32 drivers ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)\nS3 semav6msr64; C: WINDOWS system32 drivers semav6msr64.sys [21984 2016-10-18] (Signature de code Intel® externe ->)\nS3 sixaxis; C: WINDOWS System32 drivers sixaxis.sys [28424 2018-09-15] (Sony Computer Entertainment Inc. -> Sony Computer Entertainment Inc.)\nS3 usbrndis6; C: WINDOWS System32 drivers usb80236.sys [24576 2019-09-19] (Microsoft Windows -> Microsoft Corporation)\nR3 VNA; C: WINDOWS system32 DRIVERS vna.sys [161256 2016-08-30] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nS0 WdBoot; C: WINDOWS System32 drivers wd WdBoot.sys [45960 2020-03-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nR0 WdFilter; C: WINDOWS System32 drivers wd WdFilter.sys [391392 2020-03-24] (Microsoft Windows -> Microsoft Corporation)\nR3 WdNisDrv; C: WINDOWS System32 drivers wd WdNisDrv.sys [59104 2020-03-24] (Microsoft Windows -> Microsoft Corporation)","==================== NetSvcs (liste blanche) ====================","(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","==================== Un mois (créé) ===================","(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)","2020-04-21 12:30 – 2020-04-23 08:34 – 000073584 _____ (Malwarebytes) C: WINDOWS system32 Drivers mbam.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000195432 _____ (Malwarebytes) C: WINDOWS system32 Drivers farflt.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000124560 _____ (Malwarebytes) C: WINDOWS system32 Drivers mwac.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 022636544 _____ (Microsoft Corporation) C: WINDOWS system32 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 008013824 _____ (Microsoft Corporation) C: WINDOWS system32 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007756800 _____ (Microsoft Corporation) C: WINDOWS system32 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 006523048 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004611584 _____ (Microsoft Corporation) C: WINDOWS system32 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004538880 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 wininet.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800640 _____ (Microsoft Corporation) C: WINDOWS system32 WinSAT.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800128 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 win32kfull.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001665216 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 user32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001545216 _____ (Microsoft Corporation) C: WINDOWS system32 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001477112 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 dcomp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001458688 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 GdiPlus.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001413840 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 gdi32full.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001397576 _____ (Microsoft Corporation) C: WINDOWS system32 hvix64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001151816 _____ (Microsoft Corporation) C: WINDOWS system32 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001077064 _____ (Microsoft Corporation) C: WINDOWS system32 hvax64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001013000 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001008128 _____ (Microsoft Corporation) C: WINDOWS system32 StorSvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000983040 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmkvsrcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000868864 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 windowsperformancerecordercontrol.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000836608 _____ (Microsoft Corporation) C: WINDOWS system32 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000835584 _____ (Microsoft Corporation) C: WINDOWS system32 WorkfoldersControl.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000783480 _____ (Microsoft Corporation) C: WINDOWS system32 tcblaunch.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000775696 _____ (Microsoft Corporation) C: WINDOWS system32 securekernel.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000768528 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 winhttp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000701440 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Mirage.Internal.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000689152 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 CPFilters.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000686080 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000673464 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 fontdrvhost.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000668672 _____ (Microsoft Corporation) C: WINDOWS system32 wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000665088 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 netlogon.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000647680 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Internal.Management.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000555008 _____ (Microsoft Corporation) C: WINDOWS system32 appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-16 08:43 – 2020-04-16 08:44 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-16 08:43 – 2020-04-16 08:43 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-16 08:43 – 2020-04-16 08:43 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-16 08:35 – 2020-04-16 08:36 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-16 08:35 – 2020-04-16 08:36 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-07 10:56 – 2020-04-21 12:30 – 000248968 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbamswissarmy.sys\n2020-04-07 10:55 – 2020-04-07 10:55 – 000001411 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsVMware Horizon Client.lnk\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesVMware\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesThinPrint\n2020-04-07 10:55 – 2020-03-04 08:12 – 000083264 _____ (VMware, Inc.) C:WINDOWSsystem32Drivershcmon.sys","==================== One month (modified) ==================","(If an entry is included in the fixlist, the file/folder will be moved.)","2020-04-23 18:25 – 2019-01-26 15:54 – 000000000 ____D C:FRST\n2020-04-23 18:14 – 2019-09-19 18:23 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-04-23 18:14 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-04-23 13:29 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32FxsTmp\n2020-04-23 13:29 – 2017-06-26 10:30 – 000000000 ____D C:UsersabangAppDataRoamingVMware\n2020-04-23 12:25 – 2017-06-05 20:31 – 000000000 ____D C:ProgramDataNVIDIA\n2020-04-23 12:22 – 2019-09-04 22:54 – 000000000 ____D C:UsersabangAppDataRoamingSmashLadder Dolphin Launcher\n2020-04-23 08:40 – 2019-09-19 18:37 – 000840852 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-04-23 08:40 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-04-23 08:37 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-04-23 08:34 – 2019-09-19 18:36 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-04-22 23:52 – 2015-12-03 23:22 – 000000000 ____D C:Program Files (x86)Steam\n2020-04-22 22:54 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataRoamingdiscord\n2020-04-22 01:37 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataRoamingSlack\n2020-04-22 00:25 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-04-21 19:55 – 2015-12-03 03:50 – 000002301 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-04-21 12:30 – 2020-03-10 22:27 – 000214496 _____ (Malwarebytes) C:WINDOWSsystem32DriversMbamChameleon.sys\n2020-04-21 12:30 – 2019-08-31 13:22 – 000153312 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbae64.sys\n2020-04-20 21:43 – 2019-11-07 03:48 – 000000000 ____D C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsSlack Technologies Inc\n2020-04-20 21:43 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataLocalslack\n2020-04-20 21:43 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataLocalSquirrelTemp\n2020-04-18 00:44 – 2019-09-19 18:27 – 000000000 ____D C:Usersabang\n2020-04-17 08:21 – 2019-09-19 18:23 – 000328360 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-16 23:03 – 2019-03-19 00:37 – 001572864 _____ C:WINDOWSsystem32configBBI\n2020-04-16 08:46 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp\n2020-04-16 08:43 – 2015-07-10 09:20 – 000410838 __RSH C:bootmgr\n2020-04-15 14:50 – 2019-09-19 18:36 – 000003378 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-3055999371-879555700-2068610542-1001\n2020-04-15 14:50 – 2019-09-19 18:27 – 000002363 _____ C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-04-15 14:50 – 2015-12-01 22:57 – 000000000 ___RD C:UsersabangOneDrive\n2020-04-14 16:52 – 2019-09-19 18:36 – 000004552 _____ C:WINDOWSsystem32TasksAdobe Flash Player PPAPI Notifier\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSysWOW64Macromed\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32Macromed\n2020-04-11 17:55 – 2016-03-29 00:15 – 000000000 ____D C:UsersabangAppDataLocalElevatedDiagnostics\n2020-04-07 10:55 – 2015-12-03 03:56 – 000000000 ____D C:ProgramDataPackage Cache\n2020-04-02 08:28 – 2015-12-03 03:56 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-03-28 20:11 – 2018-03-03 20:27 – 000000000 ____D C:UsersabangAppDataLocalPlaceholderTileLogoFolder\n2020-03-28 18:59 – 2017-12-01 11:11 – 000000000 ____D C:UsersabangAppDataLocalPackages\n2020-03-26 21:57 – 2018-09-07 17:28 – 000000000 ____D C:UsersabangAppDataLocalD3DSCache\n2020-03-24 23:33 – 2018-03-03 21:08 – 000000000 ____D C:WINDOWSsystem32Driverswd","==================== Files in the root of some directories ========","2019-12-15 15:48 – 2019-12-22 22:26 – 000026862 _____ () C:UsersabangAppDataLocaldump.log\n2018-09-27 17:51 – 2018-09-27 17:51 – 000000000 _____ () C:UsersabangAppDataLocaloobelibMkey.log\n2016-01-20 08:00 – 2017-07-06 12:02 – 000001832 _____ () C:UsersabangAppDataLocalSLC_abang.prx","==================== SigCheck ============================","(There is no automatic fix for files that do not pass verification.)","==================== End of FRST.txt ========================","Additional log:","Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-04-2020\nRan by abang (23-04-2020 18:26:33)\nRunning from D:Desktop\nWindows 10 Home Version 1903 18362.778 (X64) (2019-09-19 22:36:33)\nMode de démarrage: Normal\n==========================================================","==================== Accounts: =============================","abang (S-1-5-21-3055999371-879555700-2068610542-1001 – Administrator – Enabled) => C:Usersabang\nAdministrator (S-1-5-21-3055999371-879555700-2068610542-500 – Administrator – Disabled)\nakim9 (S-1-5-21-3055999371-879555700-2068610542-1006 – Limited – Disabled)\nDefaultAccount (S-1-5-21-3055999371-879555700-2068610542-503 – Limited – Disabled)\nGuest (S-1-5-21-3055999371-879555700-2068610542-501 – Limited – Disabled)\nibang (S-1-5-21-3055999371-879555700-2068610542-1007 – Limited – Enabled) => C:Usersibang\nsesay (S-1-5-21-3055999371-879555700-2068610542-1005 – Limited – Enabled) => C:Userssesay\nuser (S-1-5-21-3055999371-879555700-2068610542-1004 – Limited – Enabled) => C:Usersuser\nWDAGUtilityAccount (S-1-5-21-3055999371-879555700-2068610542-504 – Limited – Disabled)","==================== Security Center ========================","(If an entry is included in the fixlist, it will be removed.)","AV: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46","==================== Installed Programs ======================","(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)",". . . (HKLM…DCAFF63A-A26F-4809-A00D-27AD6733ACB3) (Version: 2.1.28.3 – Intel) Hidden\n. . . (HKLM-x32…C7B0C705-9987-44A2-B495-4101DAEDBFE0) (Version: 2.6.2.4 – Intel) Hidden\n4K YouTube to MP3 3.8 (HKLM…2BD7492A-592E-4DAB-8BEC-68550950E32D) (Version: 3.8.3.3092 – Open Media LLC)\n7-Zip 15.14 (x64) (HKLM…7-Zip) (Version: 15.14 – Igor Pavlov)\nAdobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-1033-7B44-AC0F074E4100) (Version: 20.006.20042 – Adobe Systems Incorporated)\nAdobe Flash Player 32 PPAPI (HKLM-x32…Adobe Flash Player PPAPI) (Version: 32.0.0.363 – Adobe)\nASIO4ALL (HKLM-x32…ASIO4ALL) (Version: 2.14 – Michael Tippach)\nBattle.net (HKLM-x32…Battle.net) (Version:  – Blizzard Entertainment)\nCheck Point Deployment Shell (HKLM-x32…9ebead35-314b-4255-852b-bd8c9e3f2e56) (Version: 8.00.0000 – Check Point)\nCheck Point SSL Network Extender Service (HKLM-x32…392bb1dc-b04e-4f4e-866c-96748b20397e) (Version: 7.01.0000 – CheckPoint)\nDiablo III (HKLM-x32…Diablo III) (Version:  – Blizzard Entertainment)\nDiscord (HKUS-1-5-21-3055999371-879555700-2068610542-1001…Discord) (Version: 0.0.306 – Discord Inc.)\nDisplayDriverAnalyzer (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_DisplayDriverAnalyzer) (Version: 391.01 – NVIDIA Corporation) Hidden\nDolphin (HKLM-x32…Dolphin) (Version: 5.0 – Dolphin Team)\nFL Studio 20 (HKLM-x32…FL Studio 20) (Version:  – Image-Line)\nFL Studio ASIO (HKLM-x32…FL Studio ASIO) (Version:  – Image-Line)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.113 – Google LLC)\nAide à la mise à jour Google (HKLM-x32 … 60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Masqué\nIntel® C++ Redistributables on Intel® 64 (HKLM-x32…F70BCE36-25F2-4475-A918-6209B3D85BF3) (Version: 15.0.179 – Intel Corporation)\nIntel® Chipset Device Software (HKLM-x32…619e726e-d2b4-4e28-9568-c964fd81ee6c) (Version: 10.1.1.14 – Intel® Corporation) Hidden\nIntel® Network Connections 20.1.2019.0 (HKLM…PROSetDX) (Version: 20.1.2019.0 – Intel)\nIntel® Driver Update Utility (HKLM-x32…66307462-7d19-4f1a-af82-aa04b6017f05) (Version: 2.6.2.4 – Intel)\nJava 8 Update 201 (HKLM-x32…26A24AE4-039D-4CA4-87B4-2F32180201F0) (Version: 8.0.2010.9 – Oracle Corporation)\nJava SE Development Kit 8 Update 121 (64-bit) (HKLM…64A3A4F4-B792-11D6-A78A-00B0D0180121) (Version: 8.0.1210.13 – Oracle Corporation)\nMalwarebytes version 4.1.0.56 (HKLM…35065F43-4BB2-439A-BFF7-0F1014F2E0CD_is1) (Version: 4.1.0.56 – Malwarebytes)\nMicrosoft OneDrive (HKUS-1-5-21-3055999371-879555700-2068610542-1001…OneDriveSetup.exe) (Version: 19.232.1124.0012 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (HKLM-x32 … 7299052b-02a4-4627-81f2-1818da5d550d) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (x64) (HKLM … 071c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.4148 (HKLM … 4B6C7001-C7D6-3710-913E-5BC23FCE91E6) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM … 5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32 … 9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32 … 1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32 … 9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x64 redistribuable – 10.0.40219 (HKLM … 1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x86 redistribuable – 10.0.40219 (HKLM-x32 … F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32 … ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32 … 33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32 … f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 redistribuable (x86) – 12.0.40660 (HKLM-x32 … 61087a79-ac85-455c-934d-1fa22cc64f36) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x64) – 14.24.28127 (HKLM-x32…282975d8-55fe-4991-bbbb-06a72581ce58) (Version: 14.24.28127.4 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x86) – 14.24.28127 (HKLM-x32…e31cb1a4-76b5-46a5-a084-3fa419e82201) (Version: 14.24.28127.4 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nMozilla Firefox 73.0.1 (x64 en-US) (HKLM…Mozilla Firefox 73.0.1 (x64 en-US)) (Version: 73.0.1 – Mozilla)\nMozilla Maintenance Service (HKLM-x32…MozillaMaintenanceService) (Version: 73.0.1.7352 – Mozilla)\nMSXML 4.0 SP3 Parser (HKLM-x32…196467F1-C11F-4F76-858B-5812ADC83B94) (Version: 4.30.2100.0 – Microsoft Corporation)\nNVIDIA 3D Vision Controller Driver 390.41 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.NVIRUSB) (Version: 390.41 – NVIDIA Corporation)\nNVIDIA GeForce Experience 3.12.0.84 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.GFExperience) (Version: 3.12.0.84 – NVIDIA Corporation)\nNVIDIA Graphics Driver 432.00 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Driver) (Version: 432.00 – NVIDIA Corporation)\nNVIDIA HD Audio Driver 1.3.38.16 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_HDAudio.Driver) (Version: 1.3.38.16 – NVIDIA Corporation)\nNVIDIA PhysX System Software 9.17.0524 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.PhysX) (Version: 9.17.0524 – NVIDIA Corporation)\nOANDA Desktop (HKLM-x32…C97746B1-FE1D-41AA-B5CF-D0030986B919) (Version: 2.8.3 – OANDA)\nOpenOffice 4.1.6 (HKLM-x32…16E4FF6B-31E8-4037-B627-D87CF872E32B) (Version: 4.16.9790 – Apache Software Foundation)\nOverwatch (HKLM-x32…Overwatch) (Version:  – Blizzard Entertainment)\nPlayStation™Now (HKLM-x32…8F2673A5-9656-4BAA-80F0-F7EFCFF1A336) (Version: 11.0.0 – Sony Interactive Entertainment Network America LLC)\nRazer Synapse (HKLM-x32…D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6) (Version: 2.20.17.413 – Razer Inc.)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7525 – Realtek Semiconductor Corp.)\nRevo Uninstaller 2.0.6 (HKLM…A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97_is1) (Version: 2.0.6 – VS Revo Group, Ltd.)\nRockstar Games Social Club (HKLM-x32…Rockstar Games Social Club) (Version: 1.2.4.1 – Rockstar Games)\nScheduling Manager Gemini v 11.6.84 (HKLM-x32…5C84571D-2097-48B9-8A96-E9E6AD9C1409) (Version: 11.6.84 – Thoughtful Systems, Inc.)\nScheduling Manager Tutorial (HKLM-x32…3108FC9E-C022-4B35-91AA-A7F24B667E89) (Version: 1.1 – Thoughtful Systems, Inc.)\nScpToolkit (HKLM…AC052048-9828-45E3-872B-04CE30A3B58B) (Version: 1.6.238.16010 – Nefarius Software Solutions)\nSlack (HKUS-1-5-21-3055999371-879555700-2068610542-1001…slack) (Version: 4.4.2 – Slack Technologies Inc.)\nSmashLadder Dolphin Launcher 3.0.0 (HKUS-1-5-21-3055999371-879555700-2068610542-1001…f02b64e6-c9bc-5665-a1a7-43718fb1dbd0) (Version: 3.0.0 – Anther Sledge)\nSpeccy (HKLM…Speccy) (Version: 1.32 – Piriform)\nSteam (HKLM-x32 … Steam) (Version: 2.10.91.91 – Valve Corporation)\nthinkorswim (HKLM…9968-4488-2169-7623) (Version: desktop – thinkorswim, Inc)\nTP-LINK TL-WDN4800 Driver (HKLM-x32…70D605C7-C823-4750-BA72-BEB835713612) (Version: 1.3.1 – TP-LINK)\nTP-LINK Wireless Configuration Utility (HKLM-x32…319D91C6-3D44-436C-9F79-36C0D22372DC) (Version: 1.3.1 – TP-LINK)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…32DC821E-4A7D-4878-BEE8-337FA153D7F2) (Version: 2.63.0.0 – Microsoft Corporation) Hidden\nVMware Horizon Client (HKLM…73499771-35D2-4F4E-AC1B-8417816D6F6A) (Version: 5.4.2.11170 – VMware, Inc.) Hidden\nVMware Horizon Client (HKLM-x32…4cd5b1d3-b7c2-4949-9131-8f4b14b1cead) (Version: 5.4.2.11170 – VMware, Inc.)\nVMware Horizon HTML5 Multimedia Redirection Client (HKLM…E6EA3E80-74E7-431A-80C3-9CB0E4CECBDD) (Version: 7.12.0 – VMware, Inc.) Hidden\nVMware Horizon Media Engine 11.0.0.613 (64-bit) (HKLM…3747D742-8099-43C1-AEB5-EBC516D062A6) (Version: 11.0.0.613 – VMware, Inc.) Hidden\nVMware Horizon Media Redirection for Microsoft Teams (HKLM…B253D5D4-842E-4875-8B29-1C74BEE7DD98) (Version: 7.12.0 – VMware, Inc.) Hidden\nWindows Driver Package – Sony Computer Entertainment Inc. Wireless controller for PLAYSTATION®3 Driver Package (01/20/2012 1.4.0.0) (HKLM…D5410AE5FA467EF0F19558D5F60C991A79E11B51) (Version: 01/20/2012 1.4.0.0 – Sony Computer Entertainment Inc.)\nWondershare Helper Compact 2.5.3 (HKLM-x32…5363CE84-5F09-48A1-8B6C-6BB590FFEDF2_is1) (Version: 2.5.3 – Wondershare)\nWondershare UniConverter(Build 11.5.1.0) (HKLM-x32…UniConverter_is1) (Version: 11.5.1.0 – Wondershare Software)","Packages:\n=========\nASUS Welcome -> C:Program FilesWindowsAppsB9ECED6F.ASUSWelcome_1.0.1.0_x64__qmba6cd70vzyy [2015-12-04] (ASUSTeK COMPUTER INC.)\nCandy Crush Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSaga_1.1740.2.0_x86__kgqvnymyfvs32 [2020-04-09] (king.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.166.400.0_x86__kgqvnymyfvs32 [2020-04-18] (king.com)\nDisney Magic Kingdoms -> C:Program FilesWindowsAppsA278AB0D.DisneyMagicKingdoms_5.0.0.8_x86__h6adky7gbf63m [2020-04-22] (Gameloft SE)\nDolby Access -> C:Program FilesWindowsAppsDolbyLaboratories.DolbyAccess_3.2.169.0_x64__rz1tebttyb220 [2020-04-18] (Dolby Laboratories)\nGame Controller Tester -> C:Program FilesWindowsApps11032Reconco.XboxControllerTester_1.5.5.0_x64__thvmwcgtjwwvy [2019-04-14] (Reconco) [MS Ad]\nHidden City: Hidden Object Adventure -> C:Program FilesWindowsApps828B5831.HiddenCityMysteryofShadows_1.34.3400.0_x86__ytsefhwckbdv6 [2020-03-26] (G5 Entertainment AB)\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-14] (HP Inc.)\nKeeper – Password Manager & Secure File Storage -> C:Program FilesWindowsAppsKeeperSecurityInc.Keeper_14.0.33.0_x64__kejf07qmg0jnm [2019-08-02] (Keeper Security Inc)\nMarch of Empires: War of Lords -> C:Program FilesWindowsAppsA278AB0D.MarchofEmpires_4.7.1.1_x86__h6adky7gbf63m [2020-04-14] (Gameloft SE)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.6.4030.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios) [MS Ad]\nMinecraft for Windows 10 -> C:Program FilesWindowsAppsMicrosoft.MinecraftUWP_1.14.6005.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios)\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nPhotos Add-on -> C:Program FilesWindowsAppsMicrosoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-03-28] (Microsoft Corporation)\nPhotos Media Engine Add-on -> C:Program FilesWindowsAppsMicrosoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-02-04] (Microsoft Corporation)\nRoyal Revolt 2 -> C:Program FilesWindowsAppsflaregamesGmbH.RoyalRevolt2_6.0.1.0_x86__g0q0z3kw54rap [2020-03-30] (flaregames GmbH)\nSO COOKBOOK -> C:Program FilesWindowsAppsBEWISE.CookBook_2.5.4.0_neutral__t7hzxgefr9jt2 [2015-12-08] (Slow Sense)\nSpotify Music -> C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0 [2020-04-09] (Spotify AB) [Startup Task]\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-08] (Twitter Inc.)","==================== Custom CLSID (Whitelisted): ==============","(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","ShellIconOverlayIdentifiers: [ AccExtIco1] -> AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco2] -> 853B7E05-C47D-4985-909A-D0DC5C6D7303 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco3] -> 42D38F2E-98E9-4382-B546-E24E4D6D04BB => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers1: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [ANotepad++64] -> B298D29A-A6ED-11DE-BA8C-A68E55D89593 =>  -> No File\nContextMenuHandlers1: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers3: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers3: [4A7C4306-57E0-4C0C-83A9-78C1528F618C] -> 4A7C4306-57E0-4C0C-83A9-78C1528F618C =>  -> No File\nContextMenuHandlers4: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers4: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File\nContextMenuHandlers5: [NvCplDesktopContext] -> 3D1975AF-48C6-4f8e-A182-BE0E08FA86A9 => C:WINDOWSsystem32nvshext.dll [2019-10-02] (NVIDIA Corporation -> NVIDIA Corporation)\nContextMenuHandlers6: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers6: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers6: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers6: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers6: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File","==================== Codecs (Whitelisted) ====================","==================== Shortcuts & WMI ========================","==================== Loaded Modules (Whitelisted) =============","2019-12-02 01:47 – 2016-07-21 11:54 – 000137728 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSCreateVC.dll\n2019-12-02 01:47 – 2017-03-23 10:49 – 001506304 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactDAQExp.dll\n2018-05-11 21:41 – 2014-03-14 11:25 – 000194560 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityDC_WFF.dll\n2018-05-11 21:41 – 2014-03-14 11:16 – 001411072 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilitynicLan.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000139264 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000116224 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF_WPS_WIN7.DLL\n2014-05-02 07:55 – 2014-05-02 07:55 – 000185344 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpflac.dll\n2014-05-02 07:05 – 2014-05-02 07:05 – 000173056 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpmp3.dll\n2003-10-01 09:00 – 2003-10-01 09:00 – 000036864 _____ () [File not signed] C:Scheduling ManagerScheduling Manager TutorialDOCOBJ.DLL\n2020-02-15 15:16 – 2020-02-15 15:16 – 000315392 _____ () [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ReactiveSockets4d67f5e3fcf9a9fb6915af32e36d3ff3ReactiveSockets.ni.dll\n2017-06-05 20:30 – 2020-04-23 08:34 – 000040080 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:Program Files (x86)ASUSAXSP1.01.02PEbiosinterface32.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000356864 _____ (Benjamin Höglinger) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Libarius6a1218864657a0b993f06bfebc6bfe0bLibarius.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001546240 _____ (dbreeze.tiesky.com) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64DBreezee3f40e227965044407fde6d4240d659eDBreeze.ni.dll\n2014-05-02 12:52 – 2014-05-02 12:52 – 000599040 _____ (File is in use) [File not signed ?] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64irrKlang.NET4.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000760320 _____ (Galos) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64CSScriptLibrary4b1ecda5f4587754f0d52a2b982eb61bCSScriptLibrary.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000629760 _____ (Illusory Studios LLC) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64HidSharp72fa3c5d8ba66e19d993d6cb0206407cHidSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000284160 _____ (MadMilkman) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64MadMilkman.Inie99c055d152faf3df8df18bb42a6e59eMadMilkman.Ini.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000150528 _____ (michaelnoonan) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64WindowsInput1ff058a466362046321f245938c5bb0bWindowsInput.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 005551616 _____ (Mono development team) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Mono.CSharp6ed14716f51eebf189d3e7162b1b3177Mono.CSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 002821632 _____ (Newtonsoft) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Newtonsoft.Json18197a9d82f36cea0df95d6470495519Newtonsoft.Json.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000159744 _____ (Richard Deeming) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Trinet.Core.IO.Ntfsb2cd883b33635cb7885f236e80729d75Trinet.Core.IO.Ntfs.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000164352 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl.Shared3ce57d9974845341f18acb462c86fa25ScpControl.Shared.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001137664 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl2be4e9f6cc24f866952c48ea8ee4265bScpControl.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000978432 _____ (The Apache Software Foundation) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64log4net21c34351fbc282417539d1b820038ef7log4net.ni.dll\n2019-12-02 01:47 – 2017-03-23 10:52 – 000708608 _____ (Wondershare) [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSProducstInfo.dll","==================== Alternate Data Streams (Whitelisted) ========","==================== Safe Mode (Whitelisted) ==================","(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)","HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service"","==================== Association (Whitelisted) =================","==================== Internet Explorer trusted/restricted ==========","==================== Hosts content: =========================","(If needed Hosts: directive could be included in the fixlist to reset Hosts.)","2015-07-10 07:04 – 2017-12-28 14:35 – 000000876 _____ C:WINDOWSsystem32driversetchosts\n127.0.0.1 view-localhost # view localhost server","==================== Other Areas ===========================","(Currently there is no automatic fix for this section.)","HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)Common FilesOracleJavajavapath;%INTEL_DEV_REDIST%redistintel64compiler;C:ProgramDataOracleJavajavapath;C:Windowssystem32;C:Windows;C:WindowsSystem32Wbem;C:WindowsSystem32WindowsPowerShellv1.0;C:Program Files (x86)NVIDIA CorporationPhysXCommon;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;%SYSTEMROOT%System32OpenSSH\nHKUS-1-5-21-3055999371-879555700-2068610542-1001Control PanelDesktop\\Wallpaper -> C:UsersabangAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper\nDNS Servers: 192.168.0.1\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: RequireAdmin)\nWindows Firewall is enabled.","==================== MSCONFIG/TASK MANAGER disabled items ==","(If an entry is included in the fixlist, it will be removed.)","MSCONFIGServices: asComSvc => 2\nMSCONFIGServices: AsSysCtrlService => 2\nMSCONFIGServices: cpextender => 2\nMSCONFIGServices: Ds3Service => 2\nMSCONFIGServices: DTSAudioSvc => 2\nMSCONFIGServices: GfExperienceService => 2\nMSCONFIGServices: gupdate => 3\nMSCONFIGServices: gupdatem => 3\nMSCONFIGServices: Intel® PROSet Monitoring Service => 2\nMSCONFIGServices: MBAMScheduler => 2\nMSCONFIGServices: MBAMService => 2\nMSCONFIGServices: MozillaMaintenance => 3\nMSCONFIGServices: NvNetworkService => 2\nMSCONFIGServices: NvStreamNetworkSvc => 3\nMSCONFIGServices: NvStreamSvc => 2\nMSCONFIGServices: nvsvc => 2\nMSCONFIGServices: ProductAgentService => 2\nMSCONFIGServices: Razer Game Scanner Service => 2\nMSCONFIGServices: Steam Client Service => 3\nMSCONFIGServices: Stereo Service => 2","==================== FirewallRules (Whitelisted) ================","(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","FirewallRules: [UDP Query User3A20CB0C-5972-4F0E-B28D-3E1D5EECAB8EC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [TCP Query User54030791-5486-48E0-8F99-3F8DD73AD12BC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [023F0A77-9576-4C1F-864A-75D1B5E79A7A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [67FD644B-FDAF-4D1D-8A5E-ECB4212E4B29] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A1DDAC8F-CF03-41EE-8357-92024344D205] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D9442DC5-1818-4FF2-A71E-05820984F49B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE7E363B-F54A-46B5-9442-FFB6626E281F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30C9114F-2B3F-4153-B664-BF1CD3BEC2B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4AD5CA7A-2172-4BF1-B153-DC32716E2497] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C23EAD57-7D13-4155-BB46-355B1C23776F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3B863970-095C-4C85-A118-1A392B135B1B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8D113EB2-E251-4B92-AEF0-D96E0B6B80B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E12A8E1A-517E-4B2F-A75D-062BE2C4F3FA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C06C18D1-088B-4201-8911-40AB9597CF34] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C2089B7F-D2CB-4269-B02A-C1B1B2B1887B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [09CA0E2E-1D40-425F-BD7B-C2E51E4C1F87] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FCDA81A-7C2D-43EE-8AF0-8B625999E1A1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0EA19E97-2D0D-4EBA-908D-02F251223DF8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9B0454C6-EEA8-4459-8BBC-9C93C08EDB2D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [87887A46-ABE3-421E-9E3D-65767F8620B9] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C68A5AB6-1862-4550-8EC9-E1C19DE8444F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [187C20C7-1EE7-42F1-A916-742B2AB6B4FC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B7EF0327-CD34-4A11-B23D-D223BEBA5978] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [2BF20755-F176-4E2C-8FF6-B971083800BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [15F4D836-0E42-429B-91BB-05D8C6AEC5C8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [425F7D42-AC12-4064-87FB-E4D611A2DC21] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [CAF42CB5-301A-4BA5-8E05-C31276646D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E67899C3-A328-4FA4-8C7B-A3B2BFD06D77] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FF6238D-0160-422F-9196-FABDDA4A56A3] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E78D7D0F-2F04-4182-96CA-013B656D1C95] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AC2C0466-2A72-4651-9C90-17C853D54D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [86360315-551D-4AA4-B952-EE9A6C584E82] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6A96FA0D-9B43-4316-849B-583F8C3BBE89] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E995C816-398B-413E-B22D-117100CC1ACC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AAFBC89F-D155-4F8A-8718-BAEA520D5BB5] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FC48A9E8-E688-4170-A16D-F817210C5C80] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C4D653A6-86C5-4CEB-93DC-3D9E2BEF010C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54E40053-0A90-4A11-B6BE-5F5ADDE987B0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EA745C69-727F-4201-B3E4-1471123DD72A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B0907127-B4C6-4C84-8D83-B969896E95AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41ADDA74-F50B-4CD4-8479-313C33196388] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D08D2994-3E16-49D6-AD02-C0DF7ECB1F09] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [217C826B-39CC-4240-85E1-433C8ADC2581] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A53A5F9B-D3C6-4E4D-AE16-17346EBE8919] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9071E769-ED0B-4656-9251-C12367C56F41] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [625D1BB1-FC20-4FCE-B671-54C7DD9340F2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [61B6EF3C-791D-4F83-A1B7-BFBF3621879C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [F99F2C07-DC34-44DA-B0BC-528FDFA41446] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AB4AB17F-4A79-463E-8961-5AC357FBCA47] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AFAE990F-0583-49E1-8258-3C7726FEC616] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [81E7AC73-1844-406C-A08B-A3364BF4C3AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E5635E24-CBC0-4F57-AFD6-F67FB96BA53B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [45F0B540-5C04-4785-9C90-87C20AE5477E] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4995CD7C-77E5-438B-849F-64DC6E1A1E86] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A777D5B6-1C0B-4566-826C-AEF75A6ACC55] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [99844AC6-7F2F-42E6-8A7C-D2BF828248DA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9BB186FE-7EF7-424C-AF36-BF61CFCEDA2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4F947C79-7C21-4375-B9BD-D1DBEA3FB28B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [01AC1E18-7FBD-485C-B0D0-187A8E242230] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FF1B140D-494B-45A8-B475-65516E09CBB8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3EB8A53C-3292-49F2-A673-B4F12E756547] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13CD5436-1EBD-4E89-ABD2-CAE09B30D6AA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FA0121A5-5411-45B3-9354-6A71CB03D931] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D84B311A-6A2E-4069-A9EF-659FCE546874] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [7476105C-6CB5-4B36-8AB4-7A8459F1E36B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [00560EE3-AC11-497D-8D86-C7424586FA15] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [31ACB8D4-72E5-471D-906B-DE67EC2F159B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [14E8B51C-D163-423C-988B-0D89DEF1F718] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41654C77-92F4-4858-8251-77C84AF0305B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B87075DD-027E-4F7D-B37C-59EA52C05BA7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8C1B7F41-C94D-4E9D-89D8-FDB4789756BC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6186AB12-D44A-41D0-A2FE-6B065EA9DDFD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E3129253-383E-435D-B0A2-C7137CB06A0B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30906E77-4729-41D3-9508-0CD6AFA301E8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [BCA51D18-2143-4B10-B7E5-A2E60493BA94] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13EAD58F-B7D3-405C-AFC3-A6F180CF1F85] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [5D3A5397-4ABE-44A1-AB76-2A0CF64BC8AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C7904CA0-48FC-4F6A-84DF-54E365F9A7F6] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8E0CA2B9-0A97-4ECD-A631-2ED098DF9051] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B35CB8CD-0CD1-4201-8E1C-025636FC066D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B1632180-5628-448A-A84A-F51769531562] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [ED615CA0-1786-4C7A-A128-4BD3EDA4C0FD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [233621B9-0C3B-4384-8C84-595062660AE2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE5DFA07-0791-4457-B0CD-08DCB1494A39] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0D39F94F-1588-42ED-A675-0BA8B547D6AB] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D513F9B4-676F-473D-B815-4FA1A41342C1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [11EBECD5-5DAB-454A-BF9B-A57DFCFFD5E7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54009A4C-F798-4CA4-9F75-8F4A9FCAD813] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4D5085D0-831B-4FAB-AA7F-4AC8133C7C2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [70C46E26-EB0E-4C8B-A905-36761929073B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9E32B534-F7B7-4A70-82D0-B5A774D60F4F] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [90A3BBEE-2788-4277-8EAD-3DC247BE70E8] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [UDP Query User20EC0AE9-A8BA-46F6-98EA-F155341A019BD:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [TCP Query User7C75CFD6-CC06-47D9-A584-E601D39F32D9D:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [26A62681-A444-4FBB-ADA2-FC1B05C6E1E1] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [07C3519E-95B7-4FBB-B7C7-0CE53DD7A0E0] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [F573858C-0F95-4B56-830C-3541830DB720] => (Allow) C:Program Files (x86)PlayStationNowunidater.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment)\nFirewallRules: [D730743C-DA46-4800-AF0D-5CB3C05AF8CD] => (Allow) C:UsersabangAppDataLocalGaikaiCrashReportsdumpupload.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> )\nFirewallRules: [9D9C777E-3E3C-4B2C-B289-A04E2CD768E7] => (Allow) C:Program Files (x86)PlayStationNowpsnowlauncher.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment Network America LLC)\nFirewallRules: [C77F9D37-04C2-4E4A-88AA-C204D34B2686] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [2A9C4941-E497-4758-A055-F943D1F33761] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [UDP Query UserA3822803-F5A0-4805-9255-68A3CEDB1402C:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [TCP Query UserD43AADF3-49D0-416F-B97D-B399D33C40EAC:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [87B69EB1-2C3A-4D0A-8028-A9FF92B3C1E3] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [09C1860A-23C2-4E12-8E3A-A38C6C98C101] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [5A00F446-668F-4543-A867-77E3BEDCD098] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50FB5DEF-ED25-460F-BB2E-A37F62D15222] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50B2A780-FC1E-4CEE-87F0-C5E166BCC312] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [7DC21C63-21CB-413E-BE20-ECC6B47C7C32] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [TCP Query UserF11A8ECF-8855-4F97-97CB-6AAEC76F87BEC:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCAE4AE65-0CDE-43CE-A92A-196F35E52E22C:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [CA98B275-2FE1-402D-A5F1-B87D8ADFBC55] => (Allow) C:Program Files (x86)CheckPointSSL Network Extenderslimsvc.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nFirewallRules: [TCP Query User2820BD35-2129-4E6D-A8DB-3C6CE798C6F6C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [UDP Query User86802B20-75B9-4F75-AE91-E496BD11D479C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [TCP Query User8438EA6D-3737-48D0-9F93-8F2D6D9A06ECC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [UDP Query UserE79F117B-B096-4DC4-B77B-8797F37D149CC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [791DCA37-8EC8-424B-BB95-ACE422DF014E] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [888D7D35-2B25-4AA8-96BF-F9F84EB9F526] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [TCP Query User5813B562-B455-4993-85C5-7FF442CB25C2C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCF888DB5-FD06-4A19-815C-C31FCB1D81B6C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [41F7857F-9E58-485F-818B-19AAABEAE453] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [5CA9388B-31A9-4924-ABCA-0DF73DA832A9] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A3E9FEC4-23DB-47D1-8375-38D89FBBF935] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [BCE97003-DF35-4195-9804-7A21CAFDA70A] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A6603C8D-0E63-4245-9387-91044ABFB38E] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [91CB3554-F187-403B-B8C2-E92E45365F06] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [10DA8387-874D-4AC3-8603-D51430C4F280] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [9899BB37-71DB-4746-A9D8-EEAE68F2FC44] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [TCP Query User4271D5BE-DFA1-4778-AC81-F31C050E15B2D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [UDP Query User4DA94064-2DD2-4124-AA18-E3D6E6D095EED:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6B1586A3-6621-4C6D-828E-83F0210E0F30] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [E253CF1C-2647-4974-951D-1949DDE011CE] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6E255D8D-8D8F-43E4-9FD2-D7CB1268F204] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [027F9085-2A91-4741-837C-18946ECA34F4] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [8032F437-4112-4C85-B8F2-39492CA0390C] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [DDE3D4D3-890E-4EF7-9652-852C1E2C5008] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AA702745-0AD1-40A7-BF74-2AB11513F5E3] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [423B78B2-149F-4C73-A4F9-744BE0ED21F0] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [45D3CDE1-4396-4D7B-8979-0673185923B2] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [553AF5AC-E66B-44B9-942D-8189E944F9AB] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [TCP Query User3AD38B14-73AD-4732-A86E-4165B8D48E9CC:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [UDP Query UserB7A1A6A6-3553-4885-B90C-A5CAC8C2D830C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [5F40B1B5-169B-43BF-BF4D-E24B40F6E437] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F79E4DA7-F39B-4B44-A311-EEA98A1AB989] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [1EE5B3A2-2230-4514-92CB-5CA09D8F28AE] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [81E2AFE3-8095-423A-B77D-BAA224E1C8C0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [838049CC-C7B9-426A-A8B2-384720480511] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8CA7AF4B-3191-45EB-8617-FAA13ADC3D67] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [9E45E785-6C4D-44C7-9A5C-FD29598D8F07] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [60A0B233-8C86-4B36-9B42-CDD1C488E267] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8140EE9A-095C-460A-8D74-442A788C741E] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F54C7FB7-06B7-490B-976F-E79A38E2BEB3] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [74A35425-19B9-43C7-9B72-451D83167B9D] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [FF858980-0824-4E4A-BF8A-5F7C46B4823B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F4A1204D-9E06-4C4D-A793-49EDF60A85C0] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [650EA6A1-093D-4F84-8563-097B8EB1359B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [E45143B8-6858-49A3-92AB-247474BDA0F7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F6F4DB44-A01B-4B0E-97CF-A6FFA216D3BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [B3BB5363-09A9-4886-965E-25E84AB6BD5C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [6F4D721B-02EE-4875-988E-ADC09C264700] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C36BAE82-63BF-4FAE-AB12-2338F9B7C86F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C1A48158-A53A-4B69-9EE0-00A7224ABE00] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [5FD89F7C-37D8-4F19-806D-7503FAF8707D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [4EAC8A2A-54AD-41D9-BB20-08240A92D596] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [18865BAC-5B8D-45C4-B0FB-4432AC5A6381] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [1083CE52-99BE-40A3-A064-711F5AAE1A00] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [433AD889-009F-4D2D-9034-6BC62CCE4A13] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [4DB082A3-6753-4ECA-856A-3D3D59213CE9] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [D2B0EF02-A882-4AB6-8ED1-7A35F3622D4E] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [5844E35C-079D-41CA-AE60-AA9E4551A040] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [806D6C41-EAD4-48DB-83C1-EC5BE80EEF37] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [F64CDFFF-36EB-4E54-A7DD-61B608771748] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [48AA320F-FDFA-4279-9BAC-D24AC659941B] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)","==================== Restore Points =========================","20-04-2020 09:04:00 Scheduled Checkpoint","==================== Faulty Device Manager Devices ============","==================== Event log errors: ========================","Erreurs d'application:\n==================\nError: (04/23/2020 06:19:46 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (79684,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (04/23/2020 05:19:15 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (78176,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (04/23/2020 04:18:44 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77936,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (04/23/2020 03:18:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (76960,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (04/23/2020 01:45:40 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (8300,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (04/23/2020 01:21:01 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (7060,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (04/23/2020 12:45:10 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77084,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (04/23/2020 12:39:16 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (10932,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Erreurs système:\n=============\nError: (04/23/2020 08:34:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:51:57 PM on ‎4/‎22/‎2020 was unexpected.","Error: (04/23/2020 08:33:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.","Error: (04/22/2020 08:31:58 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:43:27 PM on ‎4/‎21/‎2020 was unexpected.","Error: (04/22/2020 08:31:52 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.","Error: (04/20/2020 08:38:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 1:30:02 AM on ‎4/‎20/‎2020 was unexpected.","Error: (04/20/2020 08:37:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.","Error: (04/18/2020 10:16:14 PM) (Source: volsnap) (EventID: 36) (User: )\nDescription: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.","Error: (04/18/2020 11:40:27 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 12:26:39 AM on ‎4/‎18/‎2020 was unexpected.","Windows Defender:\n===================================\nDate: 2020-04-22 12:33:54.808\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 726051A0-B1B0-4589-BBE8-0B2FB1F09D40\nScan Type: Antimalware\nScan Parameters: Quick Scan","Date: 2020-04-03 21:47:35.072\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 01A490FE-91B6-4450-B243-F9F1C6B0EDB2\nScan Type: Antimalware\nScan Parameters: Quick Scan","Date: 2020-04-16 08:57:03.659\nLa description: \nWindows Defender Antivirus engine has been terminated due to an unexpected error.\nFailure Type: Crash\nException code: 0xc0000005\nResource: file:C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsImage-LineMore….lnk","CodeIntegrity:\n===================================","Date: 2020-04-16 08:57:18.396\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.","Date: 2020-04-16 08:57:18.383\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.","Date: 2020-04-16 08:57:15.838\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.","Date: 2020-04-16 08:57:15.824\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.","Date: 2020-04-16 08:57:15.808\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system.","Date: 2020-04-16 08:57:15.795\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system.","Date: 2020-04-16 08:57:15.306\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system.","Date: 2020-04-16 08:57:15.274\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system.","==================== Memory info ===========================","BIOS: American Megatrends Inc. 2501 06/24/2015\nMotherboard: ASUSTeK COMPUTER INC. Z97-A-USB31\nProcessor: Intel® Core™ i5-4690K CPU @ 3.50GHz\nPercentage of memory in use: 54%\nTotal physical RAM: 8131.86 MB\nAvailable physical RAM: 3731.77 MB\nTotal Virtual: 9411.86 MB\nAvailable Virtual: 3785.61 MB","==================== Drives ================================","Drive c: () (Fixed) (Total:134.71 GB) (Free:30.03 GB) NTFS ==>[drive with boot components (obtained from BCD)]\nDrive d: (win) (Fixed) (Total:830.08 GB) (Free:461.4 GB) NTFS","\\?Volume7e1de73d-0000-0000-0000-90ad21000000 () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS","==================== MBR & Partition Table ====================","==========================================================\nDisk: 0 (Size: 232.9 GB) (Disk ID: 7E1DE73D)\nPartition 1: (Active) – (Size=134.7 GB) – (Type=07 NTFS)\nPartition 2: (Not Active) – (Size=530 MB) – (Type=27)\nPartition 3: (Not Active) – (Size=14.9 GB) – (Type=82)\nPartition 4: (Not Active) – (Size=82.8 GB) – (Type=05)","==========================================================\nDisk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: CC16B7FB)\nPartition 1: (Not Active) – (Size=931.5 GB) – (Type=05)","==================== End of Addition.txt =======================","Click to rate this post!\n \n [Total: 0 Average: 0]"],"content_blocks":[{"id":"text-1","type":"text","heading":"","plain_text":"Je ne sais pas si le vol de carte de crédit est lié au malware ou au phishing, mais il y a eu plusieurs achats aujourd'hui non autorisés sur ma carte de crédit. Je n'ai pas perdu ma carte et je n'utilise vraiment ma carte que sur des sites autorisés, c'est comme la première fois que je reçois sans que je comprenne vraiment pourquoi ni comment. Ce qui est plus intéressant, c'est qu'ils ont utilisé mon crédit dans des magasins physiques du Maryland où je suis situé, mais je n'ai pas perdu ma carte de crédit, alors comment ont-ils réussi à l'utiliser dans des magasins sans carte ou même avec la pompe à essence?","html":"

Je ne sais pas si le vol de carte de crédit est lié au malware ou au phishing, mais il y a eu plusieurs achats aujourd'hui non autorisés sur ma carte de crédit. Je n'ai pas perdu ma carte et je n'utilise vraiment ma carte que sur des sites autorisés, c'est comme la première fois que je reçois sans que je comprenne vraiment pourquoi ni comment. Ce qui est plus intéressant, c'est qu'ils ont utilisé mon crédit dans des magasins physiques du Maryland où je suis situé, mais je n'ai pas perdu ma carte de crédit, alors comment ont-ils réussi à l'utiliser dans des magasins sans carte ou même avec la pompe à essence?

"},{"id":"text-2","type":"text","heading":"","plain_text":"Mais de toute façon, je fais cela pour vérifier s'il y a des logiciels malveillants sur mon processeur et peut-être que je trouverai plus de réponses et c'est bien que je le fasse aussi parce que moi et mes cousins ​​avons été sur des sites qui ne sont pas sûr dans le passé.","html":"

Mais de toute façon, je fais cela pour vérifier s'il y a des logiciels malveillants sur mon processeur et peut-être que je trouverai plus de réponses et c'est bien que je le fasse aussi parce que moi et mes cousins ​​avons été sur des sites qui ne sont pas sûr dans le passé.

"},{"id":"text-3","type":"text","heading":"","plain_text":"Journal FRST:","html":"

Journal FRST:

"},{"id":"text-4","type":"text","heading":"","plain_text":"Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 22-04-2020\nCommandé par abang (administrateur) sur DESKTOP-VTQ0750 (ASUS All Series) (23-04-2020 18:25:30)\nExécution à partir de D: Desktop\nProfils chargés: abang (Profils disponibles: abang & user & sesay & ibang)\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal","html":"

Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 22-04-2020\nCommandé par abang (administrateur) sur DESKTOP-VTQ0750 (ASUS All Series) (23-04-2020 18:25:30)\nExécution à partir de D: Desktop\nProfils chargés: abang (Profils disponibles: abang & user & sesay & ibang)\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal

"},{"id":"text-5","type":"text","heading":"","plain_text":"==================== Processus (sur liste blanche) =================","html":"

==================== Processus (sur liste blanche) =================

"},{"id":"text-6","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)","html":"

(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)

"},{"id":"text-7","type":"text","heading":"","plain_text":"() [File not signed] C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe\n(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe\n(ASUSTeK Computer Inc. ->) [File not signed] C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe\n(ASUSTeK Computer Inc. ->) C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe\n(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe\n(DTS, Inc. -> DTS, Inc) C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware DeviceRedirectionCommon ftnlsv.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware ScannerRedirection ftscanmgrhv.exe\n(FabulaTech, LLP -> VMware) C: Program Files Common Files VMware SerialPortRedirection Client vmwsprrdpwks.exe\n(Le fichier est en cours d'utilisation) [File not signed ?] C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Produits de développement logiciel Intel® ->) C: Program Files Intel Driver Update Utility SUR SurSvc.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware MBAMService.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware mbamtray.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe Calculator.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.XboxGamingOverlay_5.120.4062.0_x64__8wekyb3d8bbwe GameBar.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.ZuneMusic_10.20022.11011.0_x64__8wekyb3d8bbwe Music.UI.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows ImmersiveControlPanel SystemSettings.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 MsMpEng.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 NisSrv.exe\n(NVIDIA Corporation -> Node.js) C: Program Files (x86) NVIDIA Corporation NvNode NVIDIA Web Helper.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvContainer nvcontainer.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA Share.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation ShadowPlay nvsphelper64.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jucheck.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jusched.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkNGUI64.exe\n(Scarlet.Crush Productions) [File not signed] C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) Common Files VMware USB vmware-usbarbitrator64.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe\n(Wondershare Technology Co., Ltd -> Wondershare) C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe","html":"

() [File not signed] C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe\n(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe\n(ASUSTeK Computer Inc. ->) [File not signed] C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe\n(ASUSTeK Computer Inc. ->) C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe\n(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe\n(DTS, Inc. -> DTS, Inc) C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware DeviceRedirectionCommon ftnlsv.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware ScannerRedirection ftscanmgrhv.exe\n(FabulaTech, LLP -> VMware) C: Program Files Common Files VMware SerialPortRedirection Client vmwsprrdpwks.exe\n(Le fichier est en cours d'utilisation) [File not signed ?] C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Produits de développement logiciel Intel® ->) C: Program Files Intel Driver Update Utility SUR SurSvc.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware MBAMService.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware mbamtray.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe Calculator.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.XboxGamingOverlay_5.120.4062.0_x64__8wekyb3d8bbwe GameBar.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.ZuneMusic_10.20022.11011.0_x64__8wekyb3d8bbwe Music.UI.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows ImmersiveControlPanel SystemSettings.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 MsMpEng.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 NisSrv.exe\n(NVIDIA Corporation -> Node.js) C: Program Files (x86) NVIDIA Corporation NvNode NVIDIA Web Helper.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvContainer nvcontainer.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA Share.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation ShadowPlay nvsphelper64.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jucheck.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jusched.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkNGUI64.exe\n(Scarlet.Crush Productions) [File not signed] C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) Common Files VMware USB vmware-usbarbitrator64.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe\n(Wondershare Technology Co., Ltd -> Wondershare) C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe

"},{"id":"text-8","type":"text","heading":"","plain_text":"==================== Registre (liste blanche) ===================","html":"

==================== Registre (liste blanche) ===================

"},{"id":"text-9","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)","html":"

(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)

"},{"id":"text-10","type":"text","heading":"","plain_text":"HKLM … Run: [AdobeGCInvoker-1.0] => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nHKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8483032 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM … Run: [RtHDVBg_DTS] => C: Program Files Realtek Audio HDA RAVBg64.exe [1393880 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [SunJavaUpdateSched] => C: Program Files (x86) Fichiers communs Java Java Update jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)\nHKLM-x32 … Exécuter: [Wondershare Helper Compact.exe] => C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co., Ltd -> Wondershare)\nHKU S-1-5-21-3055999371-879555700-2068610542-1001 … Run: [SmashLadder Dolphin Launcher] => C: Users abang AppData Local Programs smashladder-dolphin-launcher SmashLadder Dolphin Launcher.exe [67653120 2019-11-02] (Anther Sledge) [File not signed]\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.113 Installer chrmstp.exe [2020-04-21] (Google LLC -> Google LLC)\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage ScpToolkit Tray Notifications.lnk [2019-01-01]\nShortcutTarget: ScpToolkit Tray Notifications.lnk -> C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe (Scarlet.Crush Productions) [File not signed]\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage TP-LINK Wireless Configuration Utility.lnk [2018-05-11]\nShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe () [File not signed]\nGroupPolicy: Restriction? <==== ATTENTION","html":"

HKLM … Run: [AdobeGCInvoker-1.0] => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nHKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8483032 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM … Run: [RtHDVBg_DTS] => C: Program Files Realtek Audio HDA RAVBg64.exe [1393880 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [SunJavaUpdateSched] => C: Program Files (x86) Fichiers communs Java Java Update jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)\nHKLM-x32 … Exécuter: [Wondershare Helper Compact.exe] => C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co., Ltd -> Wondershare)\nHKU S-1-5-21-3055999371-879555700-2068610542-1001 … Run: [SmashLadder Dolphin Launcher] => C: Users abang AppData Local Programs smashladder-dolphin-launcher SmashLadder Dolphin Launcher.exe [67653120 2019-11-02] (Anther Sledge) [File not signed]\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.113 Installer chrmstp.exe [2020-04-21] (Google LLC -> Google LLC)\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage ScpToolkit Tray Notifications.lnk [2019-01-01]\nShortcutTarget: ScpToolkit Tray Notifications.lnk -> C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe (Scarlet.Crush Productions) [File not signed]\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage TP-LINK Wireless Configuration Utility.lnk [2018-05-11]\nShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe () [File not signed]\nGroupPolicy: Restriction? <==== ATTENTION

"},{"id":"text-11","type":"text","heading":"","plain_text":"==================== Tâches planifiées (liste blanche) ============","html":"

==================== Tâches planifiées (liste blanche) ============

"},{"id":"text-12","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

"},{"id":"text-13","type":"text","heading":"","plain_text":"Tâche: 06EFEDF1-7A16-4649-BB3B-8109A7E3A27D – System32 Tasks NvTmRep_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmRep.exe [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 0C04A11A-9B68-4A59-8AE2-81FEC4F684B1 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1741576 2016-03-17] (Logiciel Intel® -> Intel Corporation)\nTâche: 10F16CA9-0D75-4E08-8BB4-E4768551F318 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: 24C76DD3-A1CA-454E-B9E2-536CAE2B09EF – System32 Tasks Red Giant Link => C: Program [Argument = Files (x86)Red Giant LinkRed Giant Link.exe]\nTâche: 2CC605CE-6729-4C80-A5CD-F3B611FD7E1C – System32 Tasks Adobe Flash Player Updater => C: WINDOWS SysWoW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 3DC8E720-2002-4630-AB1C-86EA42BB5CAB – System32 Tasks Microsoft Windows Windows Defender Windows Defender Verification => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 420971E1-EDA3-467D-B70D-7D98608FCE40 – System32 Tasks updater => C: Program Files Nefarius Software Solutions ScpToolkit ScpUpdater.exe [464384 2016-01-10] (Solutions logicielles Nefarius) [File not signed]\nTâche: 48DE21F0-243D-41E8-9FEE-7FB0BDBCAD16 – System32 Tasks Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C: Program Files Bitdefender Agent WatchDog.exe\nTâche: 4BAA8084-3CDA-4287-AD83-6B0D6F9AEA9C – System32 Tasks NvProfileUpdaterDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 54C95A92-2879-4CEA-9BDD-5DC99DBB78FC – System32 Tasks AdobeGCInvoker-1.0 => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nTâche: 591A6C13-47E6-4DAA-9F87-EC4DF44DF3DA – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cleanup => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 6C107948-5039-4FAB-BEA0-B155B37DFE24 – System32 Tasks USER_ESRV_SVC_QUEENCREEK => "C: WINDOWS System32 Wscript.exe" // B // NoLogo "C: Program Files Intel SUR QUEENCREEK task.vbs "\nTâche: 76CA6106-FA92-4408-803D-4DF916374B54 – System32 Tasks AdobeAAMUpdater-1.0-MicrosoftAccount-abangur10426@students.pgcc.edu => C: Program Files (x86) Common Files Adobe OOBE PDApp UWA UpdaterStartupUtility.exe\nTâche: 7DBD39AF-150F-485A-847E-74A9AC31B769 – System32 Tasks NVIDIA GeForce Experience SelfUpdate_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA GeForce Experience.exe [1931064 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 83906FA5-24D1-4925-84C4-277C804D9A9E – System32 Tasks Adobe Flash Player PPAPI Notifier => C: WINDOWS SysWOW64 Macromed Flash FlashUtil32_32_0_0_363_pepper.exe [1454136 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 8DC800AC-09FF-4A00-871D-0350D0EB1555 – System32 Tasks NvProfileUpdaterOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUp64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 9763F846-397A-480C-8F20-3D4E42EE93FE – System32 Tasks Adobe Acrobat Update Task => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: 9FFECADB-B591-4E6A-ACB0-DB2EDA7CE390 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Scheduled Scan => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: BA23C37B-CE1C-4754-86B8-D949EE954A95 – System32 Tasks NvTmMon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmMon.exe [525104 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: BCE93CD1-8D9D-4405-A966-CFDA6247D350 – System32 Tasks NvNodeLauncher_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NvNode nvnodejs [969016 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: CB54D4D0-DA92-4389-995B-FE64BA5E0CBF – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: E08D6E8F-0488-41F3-91E1-4ED22B333DA2 – System32 Tasks NvDriverUpdateCheckDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvContainer nvc [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: EBF69801-5958-4547-9B2D-5BD49A5CFFD6 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cache Maintenance => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: FF901B38-47D0-48EF-8BC2-3A93BD853831 – System32 Tasks NvTmRepOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTm [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)","html":"

Tâche: 06EFEDF1-7A16-4649-BB3B-8109A7E3A27D – System32 Tasks NvTmRep_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmRep.exe [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 0C04A11A-9B68-4A59-8AE2-81FEC4F684B1 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1741576 2016-03-17] (Logiciel Intel® -> Intel Corporation)\nTâche: 10F16CA9-0D75-4E08-8BB4-E4768551F318 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: 24C76DD3-A1CA-454E-B9E2-536CAE2B09EF – System32 Tasks Red Giant Link => C: Program [Argument = Files (x86)Red Giant LinkRed Giant Link.exe]\nTâche: 2CC605CE-6729-4C80-A5CD-F3B611FD7E1C – System32 Tasks Adobe Flash Player Updater => C: WINDOWS SysWoW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 3DC8E720-2002-4630-AB1C-86EA42BB5CAB – System32 Tasks Microsoft Windows Windows Defender Windows Defender Verification => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 420971E1-EDA3-467D-B70D-7D98608FCE40 – System32 Tasks updater => C: Program Files Nefarius Software Solutions ScpToolkit ScpUpdater.exe [464384 2016-01-10] (Solutions logicielles Nefarius) [File not signed]\nTâche: 48DE21F0-243D-41E8-9FEE-7FB0BDBCAD16 – System32 Tasks Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C: Program Files Bitdefender Agent WatchDog.exe\nTâche: 4BAA8084-3CDA-4287-AD83-6B0D6F9AEA9C – System32 Tasks NvProfileUpdaterDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 54C95A92-2879-4CEA-9BDD-5DC99DBB78FC – System32 Tasks AdobeGCInvoker-1.0 => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nTâche: 591A6C13-47E6-4DAA-9F87-EC4DF44DF3DA – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cleanup => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 6C107948-5039-4FAB-BEA0-B155B37DFE24 – System32 Tasks USER_ESRV_SVC_QUEENCREEK => "C: WINDOWS System32 Wscript.exe" // B // NoLogo "C: Program Files Intel SUR QUEENCREEK task.vbs "\nTâche: 76CA6106-FA92-4408-803D-4DF916374B54 – System32 Tasks AdobeAAMUpdater-1.0-MicrosoftAccount-abangur10426@students.pgcc.edu => C: Program Files (x86) Common Files Adobe OOBE PDApp UWA UpdaterStartupUtility.exe\nTâche: 7DBD39AF-150F-485A-847E-74A9AC31B769 – System32 Tasks NVIDIA GeForce Experience SelfUpdate_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA GeForce Experience.exe [1931064 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 83906FA5-24D1-4925-84C4-277C804D9A9E – System32 Tasks Adobe Flash Player PPAPI Notifier => C: WINDOWS SysWOW64 Macromed Flash FlashUtil32_32_0_0_363_pepper.exe [1454136 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 8DC800AC-09FF-4A00-871D-0350D0EB1555 – System32 Tasks NvProfileUpdaterOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUp64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 9763F846-397A-480C-8F20-3D4E42EE93FE – System32 Tasks Adobe Acrobat Update Task => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: 9FFECADB-B591-4E6A-ACB0-DB2EDA7CE390 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Scheduled Scan => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: BA23C37B-CE1C-4754-86B8-D949EE954A95 – System32 Tasks NvTmMon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmMon.exe [525104 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: BCE93CD1-8D9D-4405-A966-CFDA6247D350 – System32 Tasks NvNodeLauncher_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NvNode nvnodejs [969016 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: CB54D4D0-DA92-4389-995B-FE64BA5E0CBF – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: E08D6E8F-0488-41F3-91E1-4ED22B333DA2 – System32 Tasks NvDriverUpdateCheckDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvContainer nvc [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: EBF69801-5958-4547-9B2D-5BD49A5CFFD6 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cache Maintenance => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: FF901B38-47D0-48EF-8BC2-3A93BD853831 – System32 Tasks NvTmRepOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTm [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)

"},{"id":"text-14","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)","html":"

(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

"},{"id":"text-15","type":"text","heading":"","plain_text":"==================== Internet (liste blanche) ====================","html":"

==================== Internet (liste blanche) ====================

"},{"id":"text-16","type":"text","heading":"","plain_text":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)","html":"

(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)

"},{"id":"text-17","type":"text","heading":"","plain_text":"Hôtes: 127.0.0.1 view-localhost # view localhost server\nTcpip Paramètres: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces 1a078130-89b1-47d0-b730-4f840d58f0e0: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces a09096a6-9f70-4e4b-97ba-0b8487bbab10: [DhcpNameServer] 192.168.0.1","html":"

Hôtes: 127.0.0.1 view-localhost # view localhost server\nTcpip Paramètres: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces 1a078130-89b1-47d0-b730-4f840d58f0e0: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces a09096a6-9f70-4e4b-97ba-0b8487bbab10: [DhcpNameServer] 192.168.0.1

"},{"id":"text-18","type":"text","heading":"","plain_text":"Internet Explorer:\n==================\nBHO-x32: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files (x86) Java jre1.8.0_201 bin ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nBHO-x32: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files (x86) Java jre1.8.0_201 bin jp2ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nDPF: HKLM-x32 414FB93D-DEDD-4FEF-AD7F-167992EBDB52 hxxps: //portal.ssl.imsweb.com/SNX/CSHELL/extender.cab\nHandler-x32: cdl – 3dd53d40-7b8b-11D0-b013-00aa0059ce02 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: fichier – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: ftp – 79eac9e3-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: gopher – 79eac9e4-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: http – 79eac9e2-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: https – 79eac9e5-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: local – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: mk – 79eac9e6-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFiltre: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Windows System32 urlmon.dll [2020-03-11] (Microsoft Windows -> Microsoft Corporation)\nFilter-x32: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: dégonfler – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: gzip – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: lzdhtml – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]","html":"

Internet Explorer:\n==================\nBHO-x32: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files (x86) Java jre1.8.0_201 bin ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nBHO-x32: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files (x86) Java jre1.8.0_201 bin jp2ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nDPF: HKLM-x32 414FB93D-DEDD-4FEF-AD7F-167992EBDB52 hxxps: //portal.ssl.imsweb.com/SNX/CSHELL/extender.cab\nHandler-x32: cdl – 3dd53d40-7b8b-11D0-b013-00aa0059ce02 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: fichier – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: ftp – 79eac9e3-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: gopher – 79eac9e4-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: http – 79eac9e2-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: https – 79eac9e5-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: local – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: mk – 79eac9e6-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFiltre: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Windows System32 urlmon.dll [2020-03-11] (Microsoft Windows -> Microsoft Corporation)\nFilter-x32: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: dégonfler – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: gzip – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: lzdhtml – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]

"},{"id":"text-19","type":"text","heading":"","plain_text":"Bord: \n======\nDownloadDir: D: Téléchargements","html":"

Bord: \n======\nDownloadDir: D: Téléchargements

"},{"id":"text-20","type":"text","heading":"","plain_text":"FireFox:\n========\nFF DefaultProfile: tqnxf3yx.default\nFF ProfilePath: C: Users abang AppData Roaming Mozilla Firefox Profiles tqnxf3yx.default [2020-03-18]\nFF Plugin-x32: @ java.com / DTPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin dtplugin npDeployJava1.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ java.com / JavaPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin plugin2 npjp2.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: Adobe Reader -> C: Program Files (x86) Adobe Acrobat Reader DC Reader AIR nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/thinkorswim -> C: Program Files thinkorswim npthinkorswim.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/tossc -> C: Program Files thinkorswim nptossc.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)","html":"

FireFox:\n========\nFF DefaultProfile: tqnxf3yx.default\nFF ProfilePath: C: Users abang AppData Roaming Mozilla Firefox Profiles tqnxf3yx.default [2020-03-18]\nFF Plugin-x32: @ java.com / DTPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin dtplugin npDeployJava1.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ java.com / JavaPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin plugin2 npjp2.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: Adobe Reader -> C: Program Files (x86) Adobe Acrobat Reader DC Reader AIR nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/thinkorswim -> C: Program Files thinkorswim npthinkorswim.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/tossc -> C: Program Files thinkorswim nptossc.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)

"},{"id":"text-21","type":"text","heading":"","plain_text":"Chrome: \n=======\nProfil CHR: C: Users abang AppData Local Google Chrome User Data Default [2020-04-23]\nCHR DownloadDir: D: Téléchargements\nNotifications CHR: Par défaut -> hxxps: //videoconverter.wondershare.com; hxxps: //www.facebook.com; hxxps: //www.livescience.com\nCHR StartupUrls: Par défaut -> "hxxps: //feedly.com/i/my", "hxxps: //www.koyfin.com/home"\nExtension CHR: (Google Drive) – C: Users abang AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2015-12-03]\nExtension CHR: (Lecture HLS native) – C: Users abang AppData Local Google Chrome User Data Default Extensions bfgdekjhniododjcobllghembkdpdkea [2017-10-21]\nExtension CHR: (YouTube) – C: Users abang AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-03]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users abang AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-06]\nExtension CHR: (Recherche Google) – C: Users abang AppData Local Google Chrome User Data Default Extensions coobgpohoikkiipiblmjeljniedjpjpf [2015-12-03]\nExtension CHR: (Portefeuille Bitdefender) – C: Users abang AppData Local Google Chrome User Data Default Extensions dhhejlifdlcgcmogbggeomfodgklfaem [2015-12-03]\nExtension CHR: (Paiements Chrome Web Store) – C: Users abang AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]\nExtension CHR: (Gmail) – C: Users abang AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-25]\nExtension CHR: (Chrome Media Router) – C: Users abang AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-21]\nProfil CHR: C: Users abang AppData Local Google Chrome User Data System Profile [2019-02-06]\nCHR HKLM-x32 … Chrome Extension: [dhhejlifdlcgcmogbggeomfodgklfaem]\nCHR HKLM-x32 … Chrome Extension: [efaidnbmnnnibpcajpcglclefindmkaj]","html":"

Chrome: \n=======\nProfil CHR: C: Users abang AppData Local Google Chrome User Data Default [2020-04-23]\nCHR DownloadDir: D: Téléchargements\nNotifications CHR: Par défaut -> hxxps: //videoconverter.wondershare.com; hxxps: //www.facebook.com; hxxps: //www.livescience.com\nCHR StartupUrls: Par défaut -> "hxxps: //feedly.com/i/my", "hxxps: //www.koyfin.com/home"\nExtension CHR: (Google Drive) – C: Users abang AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2015-12-03]\nExtension CHR: (Lecture HLS native) – C: Users abang AppData Local Google Chrome User Data Default Extensions bfgdekjhniododjcobllghembkdpdkea [2017-10-21]\nExtension CHR: (YouTube) – C: Users abang AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-03]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users abang AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-06]\nExtension CHR: (Recherche Google) – C: Users abang AppData Local Google Chrome User Data Default Extensions coobgpohoikkiipiblmjeljniedjpjpf [2015-12-03]\nExtension CHR: (Portefeuille Bitdefender) – C: Users abang AppData Local Google Chrome User Data Default Extensions dhhejlifdlcgcmogbggeomfodgklfaem [2015-12-03]\nExtension CHR: (Paiements Chrome Web Store) – C: Users abang AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]\nExtension CHR: (Gmail) – C: Users abang AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-25]\nExtension CHR: (Chrome Media Router) – C: Users abang AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-21]\nProfil CHR: C: Users abang AppData Local Google Chrome User Data System Profile [2019-02-06]\nCHR HKLM-x32 … Chrome Extension: [dhhejlifdlcgcmogbggeomfodgklfaem]\nCHR HKLM-x32 … Chrome Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

"},{"id":"text-22","type":"text","heading":"","plain_text":"==================== Services (liste blanche) ===================","html":"

==================== Services (liste blanche) ===================

"},{"id":"text-23","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

"},{"id":"text-24","type":"text","heading":"","plain_text":"R2 AGMService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe [3374160 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 AGSService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe [3103824 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 asComSvc; C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe [936728 2015-12-01] (ASUSTeK Computer Inc. ->)\nR2 AsSysCtrlService; C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe [1360016 2015-12-03] (ASUSTeK Computer Inc. ->) [File not signed]\nR2 client_service; C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe [442840 2020-03-30] (VMware, Inc. -> VMware, Inc.)\nR2 cpextender; C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe [367984 2019-09-19] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nR2 Ds3Service; C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe [389632 2016-01-10] (Le fichier est en cours d'utilisation) [File not signed ?]\nR2 DTSAudioSvc; C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe [240576 2015-12-03] (DTS, Inc. -> DTS, Inc)\nS3 ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 ftnlsv3hv; C: Program Files Fichiers communs VMware DeviceRedirectionCommon ftnlsv.exe [280176 2020-02-25] (FabulaTech, LLP ->)\nR2 ftscanmgrhv; C: Program Files Fichiers communs VMware ScannerRedirection ftscanmgrhv.exe [4369520 2020-02-27] (FabulaTech, LLP ->)\nR2 MBAMService; C: Program Files Malwarebytes Anti-Malware mbamservice.exe [6933272 2020-03-10] (Malwarebytes Inc -> Malwarebytes)\nR2 NvContainerLocalSystem; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvContainerNetworkService; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nService S4 PST; C: Program Files (x86) Motorola MotForwardDaemon ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]\nService S4 Razer Game Scanner; C: Program Files (x86) Razer Razer Services GSS GameScannerService.exe [189264 2016-09-24] (Razer USA Ltd. ->)\nR2 SystemUsageReportSvc_QUEENCREEK; C: Program Files Intel Driver Update Utility SUR SurSvc.exe [156928 2016-11-17] (Produits de développement logiciel Intel® ->)\nS3 USER_ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 vmwsprrdpwks; C: Program Files Fichiers communs VMware SerialPortRedirection Client vmwsprrdpwks.exe [459888 2020-02-20] (FabulaTech, LLP -> VMware)\nR3 WdNisSvc; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 NisSrv.exe [3294680 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nR2 WinDefend; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MsMpEng.exe [103168 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nS3 WsDrvInst; C: Program Files (x86) Wondershare Video Converter Ultimate Transfer DriverInstall.exe [107760 2019-09-26] (Wondershare Technology Co., Ltd -> Wondershare)\nR2 NVDisplay.ContainerLocalSystem; "C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C: ProgramData NVIDIA NVDisplay.ContainerLocalSystem.log" -l 3 -d "C: Fichiers programme NVIDIA Corporation Display.NvContainer plugins LocalSystem "-r -p 30000 \nR2 NvTelemetryContainer; "C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C: ProgramData NVIDIA NvTelemetryContainer.log" -l 3 -d "C: Program Files (x86) NVIDIA Corporation NvTelemetry plugins "-r","html":"

R2 AGMService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe [3374160 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 AGSService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe [3103824 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 asComSvc; C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe [936728 2015-12-01] (ASUSTeK Computer Inc. ->)\nR2 AsSysCtrlService; C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe [1360016 2015-12-03] (ASUSTeK Computer Inc. ->) [File not signed]\nR2 client_service; C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe [442840 2020-03-30] (VMware, Inc. -> VMware, Inc.)\nR2 cpextender; C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe [367984 2019-09-19] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nR2 Ds3Service; C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe [389632 2016-01-10] (Le fichier est en cours d'utilisation) [File not signed ?]\nR2 DTSAudioSvc; C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe [240576 2015-12-03] (DTS, Inc. -> DTS, Inc)\nS3 ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 ftnlsv3hv; C: Program Files Fichiers communs VMware DeviceRedirectionCommon ftnlsv.exe [280176 2020-02-25] (FabulaTech, LLP ->)\nR2 ftscanmgrhv; C: Program Files Fichiers communs VMware ScannerRedirection ftscanmgrhv.exe [4369520 2020-02-27] (FabulaTech, LLP ->)\nR2 MBAMService; C: Program Files Malwarebytes Anti-Malware mbamservice.exe [6933272 2020-03-10] (Malwarebytes Inc -> Malwarebytes)\nR2 NvContainerLocalSystem; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvContainerNetworkService; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nService S4 PST; C: Program Files (x86) Motorola MotForwardDaemon ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]\nService S4 Razer Game Scanner; C: Program Files (x86) Razer Razer Services GSS GameScannerService.exe [189264 2016-09-24] (Razer USA Ltd. ->)\nR2 SystemUsageReportSvc_QUEENCREEK; C: Program Files Intel Driver Update Utility SUR SurSvc.exe [156928 2016-11-17] (Produits de développement logiciel Intel® ->)\nS3 USER_ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 vmwsprrdpwks; C: Program Files Fichiers communs VMware SerialPortRedirection Client vmwsprrdpwks.exe [459888 2020-02-20] (FabulaTech, LLP -> VMware)\nR3 WdNisSvc; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 NisSrv.exe [3294680 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nR2 WinDefend; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MsMpEng.exe [103168 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nS3 WsDrvInst; C: Program Files (x86) Wondershare Video Converter Ultimate Transfer DriverInstall.exe [107760 2019-09-26] (Wondershare Technology Co., Ltd -> Wondershare)\nR2 NVDisplay.ContainerLocalSystem; "C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C: ProgramData NVIDIA NVDisplay.ContainerLocalSystem.log" -l 3 -d "C: Fichiers programme NVIDIA Corporation Display.NvContainer plugins LocalSystem "-r -p 30000 \nR2 NvTelemetryContainer; "C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C: ProgramData NVIDIA NvTelemetryContainer.log" -l 3 -d "C: Program Files (x86) NVIDIA Corporation NvTelemetry plugins "-r

"},{"id":"text-25","type":"text","heading":"","plain_text":"===================== Pilotes (sur liste blanche) ===================","html":"

===================== Pilotes (sur liste blanche) ===================

"},{"id":"text-26","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

"},{"id":"text-27","type":"text","heading":"","plain_text":"S3 AppleKmdfFilter; C: WINDOWS System32 drivers AppleKmdfFilter.sys [20640 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nS3 AppleLowerFilter; C: WINDOWS System32 drivers AppleLowerFilter.sys [35560 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nR1 AsIO; C: Windows SysWow64 drivers AsIO.sys [15232 2015-12-01] (ASUSTeK Computer Inc. ->)\nR3 athr; C: WINDOWS System32 drivers athw8x.sys [4233728 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-19] (Microsoft Corporation) [File not signed]\nR1 ESProtectionDriver; C: WINDOWS system32 drivers mbae64.sys [153312 2020-04-21] (Malwarebytes Corporation -> Malwarebytes)\nS3 libusbK; C: WINDOWS System32 drivers libusbK.sys [47200 2018-09-15] (Travis Lee Robinson -> hxxp: //libusb-win32.sourceforge.net)\nR2 MBAMChameleon; C: WINDOWS System32 Drivers MbamChameleon.sys [214496 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nS0 MbamElam; C: WINDOWS System32 DRIVERS MbamElam.sys [20936 2020-03-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)\nR3 MBAMFarflt; C: WINDOWS System32 DRIVERS farflt.sys [195432 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMProtection; C: WINDOWS system32 DRIVERS mbam.sys [73584 2020-04-23] (Malwarebytes Corporation -> Malwarebytes)\nR3 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [248968 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMWebProtection; C: WINDOWS system32 DRIVERS mwac.sys [124560 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 nvlddmkm; C: WINDOWS System32 DriverStore FileRepository nv_dispi.inf_amd64_db678424d2641c3d nvlddmkm.sys [22094728 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvStreamKms; C: Program Files NVIDIA Corporation NvStreamSrv NvStreamKms.sys [31024 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvad_WaveExtensible; C: WINDOWS system32 drivers nvvad64v.sys [59240 2017-12-14] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvhci; C: WINDOWS System32 drivers nvvhci.sys [57928 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 rzendpt; C: WINDOWS System32 drivers rzendpt.sys [50392 2015-08-13] (Razer Inc. -> Razer Inc)\nR2 rzpmgrk; C: WINDOWS system32 drivers rzpmgrk.sys [44144 2016-09-16] (Razer Inc. -> Razer, Inc.)\nR2 rzpnk; C: WINDOWS system32 drivers rzpnk.sys [137840 2016-10-08] (Razer Inc. -> Razer, Inc.)\nR3 ScpVBus; C: WINDOWS System32 drivers ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)\nS3 semav6msr64; C: WINDOWS system32 drivers semav6msr64.sys [21984 2016-10-18] (Signature de code Intel® externe ->)\nS3 sixaxis; C: WINDOWS System32 drivers sixaxis.sys [28424 2018-09-15] (Sony Computer Entertainment Inc. -> Sony Computer Entertainment Inc.)\nS3 usbrndis6; C: WINDOWS System32 drivers usb80236.sys [24576 2019-09-19] (Microsoft Windows -> Microsoft Corporation)\nR3 VNA; C: WINDOWS system32 DRIVERS vna.sys [161256 2016-08-30] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nS0 WdBoot; C: WINDOWS System32 drivers wd WdBoot.sys [45960 2020-03-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nR0 WdFilter; C: WINDOWS System32 drivers wd WdFilter.sys [391392 2020-03-24] (Microsoft Windows -> Microsoft Corporation)\nR3 WdNisDrv; C: WINDOWS System32 drivers wd WdNisDrv.sys [59104 2020-03-24] (Microsoft Windows -> Microsoft Corporation)","html":"

S3 AppleKmdfFilter; C: WINDOWS System32 drivers AppleKmdfFilter.sys [20640 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nS3 AppleLowerFilter; C: WINDOWS System32 drivers AppleLowerFilter.sys [35560 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nR1 AsIO; C: Windows SysWow64 drivers AsIO.sys [15232 2015-12-01] (ASUSTeK Computer Inc. ->)\nR3 athr; C: WINDOWS System32 drivers athw8x.sys [4233728 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-19] (Microsoft Corporation) [File not signed]\nR1 ESProtectionDriver; C: WINDOWS system32 drivers mbae64.sys [153312 2020-04-21] (Malwarebytes Corporation -> Malwarebytes)\nS3 libusbK; C: WINDOWS System32 drivers libusbK.sys [47200 2018-09-15] (Travis Lee Robinson -> hxxp: //libusb-win32.sourceforge.net)\nR2 MBAMChameleon; C: WINDOWS System32 Drivers MbamChameleon.sys [214496 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nS0 MbamElam; C: WINDOWS System32 DRIVERS MbamElam.sys [20936 2020-03-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)\nR3 MBAMFarflt; C: WINDOWS System32 DRIVERS farflt.sys [195432 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMProtection; C: WINDOWS system32 DRIVERS mbam.sys [73584 2020-04-23] (Malwarebytes Corporation -> Malwarebytes)\nR3 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [248968 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMWebProtection; C: WINDOWS system32 DRIVERS mwac.sys [124560 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 nvlddmkm; C: WINDOWS System32 DriverStore FileRepository nv_dispi.inf_amd64_db678424d2641c3d nvlddmkm.sys [22094728 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvStreamKms; C: Program Files NVIDIA Corporation NvStreamSrv NvStreamKms.sys [31024 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvad_WaveExtensible; C: WINDOWS system32 drivers nvvad64v.sys [59240 2017-12-14] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvhci; C: WINDOWS System32 drivers nvvhci.sys [57928 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 rzendpt; C: WINDOWS System32 drivers rzendpt.sys [50392 2015-08-13] (Razer Inc. -> Razer Inc)\nR2 rzpmgrk; C: WINDOWS system32 drivers rzpmgrk.sys [44144 2016-09-16] (Razer Inc. -> Razer, Inc.)\nR2 rzpnk; C: WINDOWS system32 drivers rzpnk.sys [137840 2016-10-08] (Razer Inc. -> Razer, Inc.)\nR3 ScpVBus; C: WINDOWS System32 drivers ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)\nS3 semav6msr64; C: WINDOWS system32 drivers semav6msr64.sys [21984 2016-10-18] (Signature de code Intel® externe ->)\nS3 sixaxis; C: WINDOWS System32 drivers sixaxis.sys [28424 2018-09-15] (Sony Computer Entertainment Inc. -> Sony Computer Entertainment Inc.)\nS3 usbrndis6; C: WINDOWS System32 drivers usb80236.sys [24576 2019-09-19] (Microsoft Windows -> Microsoft Corporation)\nR3 VNA; C: WINDOWS system32 DRIVERS vna.sys [161256 2016-08-30] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nS0 WdBoot; C: WINDOWS System32 drivers wd WdBoot.sys [45960 2020-03-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nR0 WdFilter; C: WINDOWS System32 drivers wd WdFilter.sys [391392 2020-03-24] (Microsoft Windows -> Microsoft Corporation)\nR3 WdNisDrv; C: WINDOWS System32 drivers wd WdNisDrv.sys [59104 2020-03-24] (Microsoft Windows -> Microsoft Corporation)

"},{"id":"text-28","type":"text","heading":"","plain_text":"==================== NetSvcs (liste blanche) ====================","html":"

==================== NetSvcs (liste blanche) ====================

"},{"id":"text-29","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

"},{"id":"text-30","type":"text","heading":"","plain_text":"==================== Un mois (créé) ===================","html":"

==================== Un mois (créé) ===================

"},{"id":"text-31","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)","html":"

(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)

"},{"id":"text-32","type":"text","heading":"","plain_text":"2020-04-21 12:30 – 2020-04-23 08:34 – 000073584 _____ (Malwarebytes) C: WINDOWS system32 Drivers mbam.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000195432 _____ (Malwarebytes) C: WINDOWS system32 Drivers farflt.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000124560 _____ (Malwarebytes) C: WINDOWS system32 Drivers mwac.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 022636544 _____ (Microsoft Corporation) C: WINDOWS system32 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 008013824 _____ (Microsoft Corporation) C: WINDOWS system32 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007756800 _____ (Microsoft Corporation) C: WINDOWS system32 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 006523048 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004611584 _____ (Microsoft Corporation) C: WINDOWS system32 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004538880 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 wininet.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800640 _____ (Microsoft Corporation) C: WINDOWS system32 WinSAT.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800128 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 win32kfull.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001665216 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 user32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001545216 _____ (Microsoft Corporation) C: WINDOWS system32 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001477112 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 dcomp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001458688 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 GdiPlus.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001413840 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 gdi32full.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001397576 _____ (Microsoft Corporation) C: WINDOWS system32 hvix64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001151816 _____ (Microsoft Corporation) C: WINDOWS system32 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001077064 _____ (Microsoft Corporation) C: WINDOWS system32 hvax64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001013000 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001008128 _____ (Microsoft Corporation) C: WINDOWS system32 StorSvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000983040 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmkvsrcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000868864 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 windowsperformancerecordercontrol.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000836608 _____ (Microsoft Corporation) C: WINDOWS system32 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000835584 _____ (Microsoft Corporation) C: WINDOWS system32 WorkfoldersControl.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000783480 _____ (Microsoft Corporation) C: WINDOWS system32 tcblaunch.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000775696 _____ (Microsoft Corporation) C: WINDOWS system32 securekernel.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000768528 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 winhttp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000701440 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Mirage.Internal.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000689152 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 CPFilters.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000686080 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000673464 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 fontdrvhost.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000668672 _____ (Microsoft Corporation) C: WINDOWS system32 wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000665088 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 netlogon.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000647680 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Internal.Management.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000555008 _____ (Microsoft Corporation) C: WINDOWS system32 appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-16 08:43 – 2020-04-16 08:44 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-16 08:43 – 2020-04-16 08:43 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-16 08:43 – 2020-04-16 08:43 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-16 08:35 – 2020-04-16 08:36 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-16 08:35 – 2020-04-16 08:36 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-07 10:56 – 2020-04-21 12:30 – 000248968 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbamswissarmy.sys\n2020-04-07 10:55 – 2020-04-07 10:55 – 000001411 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsVMware Horizon Client.lnk\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesVMware\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesThinPrint\n2020-04-07 10:55 – 2020-03-04 08:12 – 000083264 _____ (VMware, Inc.) C:WINDOWSsystem32Drivershcmon.sys","html":"

2020-04-21 12:30 – 2020-04-23 08:34 – 000073584 _____ (Malwarebytes) C: WINDOWS system32 Drivers mbam.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000195432 _____ (Malwarebytes) C: WINDOWS system32 Drivers farflt.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000124560 _____ (Malwarebytes) C: WINDOWS system32 Drivers mwac.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 022636544 _____ (Microsoft Corporation) C: WINDOWS system32 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 008013824 _____ (Microsoft Corporation) C: WINDOWS system32 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007756800 _____ (Microsoft Corporation) C: WINDOWS system32 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 006523048 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004611584 _____ (Microsoft Corporation) C: WINDOWS system32 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004538880 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 wininet.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800640 _____ (Microsoft Corporation) C: WINDOWS system32 WinSAT.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800128 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 win32kfull.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001665216 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 user32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001545216 _____ (Microsoft Corporation) C: WINDOWS system32 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001477112 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 dcomp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001458688 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 GdiPlus.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001413840 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 gdi32full.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001397576 _____ (Microsoft Corporation) C: WINDOWS system32 hvix64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001151816 _____ (Microsoft Corporation) C: WINDOWS system32 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001077064 _____ (Microsoft Corporation) C: WINDOWS system32 hvax64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001013000 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001008128 _____ (Microsoft Corporation) C: WINDOWS system32 StorSvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000983040 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmkvsrcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000868864 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 windowsperformancerecordercontrol.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000836608 _____ (Microsoft Corporation) C: WINDOWS system32 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000835584 _____ (Microsoft Corporation) C: WINDOWS system32 WorkfoldersControl.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000783480 _____ (Microsoft Corporation) C: WINDOWS system32 tcblaunch.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000775696 _____ (Microsoft Corporation) C: WINDOWS system32 securekernel.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000768528 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 winhttp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000701440 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Mirage.Internal.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000689152 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 CPFilters.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000686080 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000673464 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 fontdrvhost.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000668672 _____ (Microsoft Corporation) C: WINDOWS system32 wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000665088 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 netlogon.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000647680 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Internal.Management.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000555008 _____ (Microsoft Corporation) C: WINDOWS system32 appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-16 08:43 – 2020-04-16 08:44 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-16 08:43 – 2020-04-16 08:43 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-16 08:43 – 2020-04-16 08:43 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-16 08:35 – 2020-04-16 08:36 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-16 08:35 – 2020-04-16 08:36 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-07 10:56 – 2020-04-21 12:30 – 000248968 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbamswissarmy.sys\n2020-04-07 10:55 – 2020-04-07 10:55 – 000001411 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsVMware Horizon Client.lnk\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesVMware\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesThinPrint\n2020-04-07 10:55 – 2020-03-04 08:12 – 000083264 _____ (VMware, Inc.) C:WINDOWSsystem32Drivershcmon.sys

"},{"id":"text-33","type":"text","heading":"","plain_text":"==================== One month (modified) ==================","html":"

==================== One month (modified) ==================

"},{"id":"text-34","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, the file/folder will be moved.)","html":"

(If an entry is included in the fixlist, the file/folder will be moved.)

"},{"id":"text-35","type":"text","heading":"","plain_text":"2020-04-23 18:25 – 2019-01-26 15:54 – 000000000 ____D C:FRST\n2020-04-23 18:14 – 2019-09-19 18:23 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-04-23 18:14 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-04-23 13:29 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32FxsTmp\n2020-04-23 13:29 – 2017-06-26 10:30 – 000000000 ____D C:UsersabangAppDataRoamingVMware\n2020-04-23 12:25 – 2017-06-05 20:31 – 000000000 ____D C:ProgramDataNVIDIA\n2020-04-23 12:22 – 2019-09-04 22:54 – 000000000 ____D C:UsersabangAppDataRoamingSmashLadder Dolphin Launcher\n2020-04-23 08:40 – 2019-09-19 18:37 – 000840852 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-04-23 08:40 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-04-23 08:37 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-04-23 08:34 – 2019-09-19 18:36 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-04-22 23:52 – 2015-12-03 23:22 – 000000000 ____D C:Program Files (x86)Steam\n2020-04-22 22:54 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataRoamingdiscord\n2020-04-22 01:37 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataRoamingSlack\n2020-04-22 00:25 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-04-21 19:55 – 2015-12-03 03:50 – 000002301 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-04-21 12:30 – 2020-03-10 22:27 – 000214496 _____ (Malwarebytes) C:WINDOWSsystem32DriversMbamChameleon.sys\n2020-04-21 12:30 – 2019-08-31 13:22 – 000153312 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbae64.sys\n2020-04-20 21:43 – 2019-11-07 03:48 – 000000000 ____D C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsSlack Technologies Inc\n2020-04-20 21:43 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataLocalslack\n2020-04-20 21:43 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataLocalSquirrelTemp\n2020-04-18 00:44 – 2019-09-19 18:27 – 000000000 ____D C:Usersabang\n2020-04-17 08:21 – 2019-09-19 18:23 – 000328360 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-16 23:03 – 2019-03-19 00:37 – 001572864 _____ C:WINDOWSsystem32configBBI\n2020-04-16 08:46 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp\n2020-04-16 08:43 – 2015-07-10 09:20 – 000410838 __RSH C:bootmgr\n2020-04-15 14:50 – 2019-09-19 18:36 – 000003378 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-3055999371-879555700-2068610542-1001\n2020-04-15 14:50 – 2019-09-19 18:27 – 000002363 _____ C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-04-15 14:50 – 2015-12-01 22:57 – 000000000 ___RD C:UsersabangOneDrive\n2020-04-14 16:52 – 2019-09-19 18:36 – 000004552 _____ C:WINDOWSsystem32TasksAdobe Flash Player PPAPI Notifier\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSysWOW64Macromed\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32Macromed\n2020-04-11 17:55 – 2016-03-29 00:15 – 000000000 ____D C:UsersabangAppDataLocalElevatedDiagnostics\n2020-04-07 10:55 – 2015-12-03 03:56 – 000000000 ____D C:ProgramDataPackage Cache\n2020-04-02 08:28 – 2015-12-03 03:56 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-03-28 20:11 – 2018-03-03 20:27 – 000000000 ____D C:UsersabangAppDataLocalPlaceholderTileLogoFolder\n2020-03-28 18:59 – 2017-12-01 11:11 – 000000000 ____D C:UsersabangAppDataLocalPackages\n2020-03-26 21:57 – 2018-09-07 17:28 – 000000000 ____D C:UsersabangAppDataLocalD3DSCache\n2020-03-24 23:33 – 2018-03-03 21:08 – 000000000 ____D C:WINDOWSsystem32Driverswd","html":"

2020-04-23 18:25 – 2019-01-26 15:54 – 000000000 ____D C:FRST\n2020-04-23 18:14 – 2019-09-19 18:23 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-04-23 18:14 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-04-23 13:29 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32FxsTmp\n2020-04-23 13:29 – 2017-06-26 10:30 – 000000000 ____D C:UsersabangAppDataRoamingVMware\n2020-04-23 12:25 – 2017-06-05 20:31 – 000000000 ____D C:ProgramDataNVIDIA\n2020-04-23 12:22 – 2019-09-04 22:54 – 000000000 ____D C:UsersabangAppDataRoamingSmashLadder Dolphin Launcher\n2020-04-23 08:40 – 2019-09-19 18:37 – 000840852 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-04-23 08:40 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-04-23 08:37 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-04-23 08:34 – 2019-09-19 18:36 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-04-22 23:52 – 2015-12-03 23:22 – 000000000 ____D C:Program Files (x86)Steam\n2020-04-22 22:54 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataRoamingdiscord\n2020-04-22 01:37 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataRoamingSlack\n2020-04-22 00:25 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-04-21 19:55 – 2015-12-03 03:50 – 000002301 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-04-21 12:30 – 2020-03-10 22:27 – 000214496 _____ (Malwarebytes) C:WINDOWSsystem32DriversMbamChameleon.sys\n2020-04-21 12:30 – 2019-08-31 13:22 – 000153312 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbae64.sys\n2020-04-20 21:43 – 2019-11-07 03:48 – 000000000 ____D C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsSlack Technologies Inc\n2020-04-20 21:43 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataLocalslack\n2020-04-20 21:43 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataLocalSquirrelTemp\n2020-04-18 00:44 – 2019-09-19 18:27 – 000000000 ____D C:Usersabang\n2020-04-17 08:21 – 2019-09-19 18:23 – 000328360 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-16 23:03 – 2019-03-19 00:37 – 001572864 _____ C:WINDOWSsystem32configBBI\n2020-04-16 08:46 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp\n2020-04-16 08:43 – 2015-07-10 09:20 – 000410838 __RSH C:bootmgr\n2020-04-15 14:50 – 2019-09-19 18:36 – 000003378 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-3055999371-879555700-2068610542-1001\n2020-04-15 14:50 – 2019-09-19 18:27 – 000002363 _____ C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-04-15 14:50 – 2015-12-01 22:57 – 000000000 ___RD C:UsersabangOneDrive\n2020-04-14 16:52 – 2019-09-19 18:36 – 000004552 _____ C:WINDOWSsystem32TasksAdobe Flash Player PPAPI Notifier\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSysWOW64Macromed\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32Macromed\n2020-04-11 17:55 – 2016-03-29 00:15 – 000000000 ____D C:UsersabangAppDataLocalElevatedDiagnostics\n2020-04-07 10:55 – 2015-12-03 03:56 – 000000000 ____D C:ProgramDataPackage Cache\n2020-04-02 08:28 – 2015-12-03 03:56 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-03-28 20:11 – 2018-03-03 20:27 – 000000000 ____D C:UsersabangAppDataLocalPlaceholderTileLogoFolder\n2020-03-28 18:59 – 2017-12-01 11:11 – 000000000 ____D C:UsersabangAppDataLocalPackages\n2020-03-26 21:57 – 2018-09-07 17:28 – 000000000 ____D C:UsersabangAppDataLocalD3DSCache\n2020-03-24 23:33 – 2018-03-03 21:08 – 000000000 ____D C:WINDOWSsystem32Driverswd

"},{"id":"text-36","type":"text","heading":"","plain_text":"==================== Files in the root of some directories ========","html":"

==================== Files in the root of some directories ========

"},{"id":"text-37","type":"text","heading":"","plain_text":"2019-12-15 15:48 – 2019-12-22 22:26 – 000026862 _____ () C:UsersabangAppDataLocaldump.log\n2018-09-27 17:51 – 2018-09-27 17:51 – 000000000 _____ () C:UsersabangAppDataLocaloobelibMkey.log\n2016-01-20 08:00 – 2017-07-06 12:02 – 000001832 _____ () C:UsersabangAppDataLocalSLC_abang.prx","html":"

2019-12-15 15:48 – 2019-12-22 22:26 – 000026862 _____ () C:UsersabangAppDataLocaldump.log\n2018-09-27 17:51 – 2018-09-27 17:51 – 000000000 _____ () C:UsersabangAppDataLocaloobelibMkey.log\n2016-01-20 08:00 – 2017-07-06 12:02 – 000001832 _____ () C:UsersabangAppDataLocalSLC_abang.prx

"},{"id":"text-38","type":"text","heading":"","plain_text":"==================== SigCheck ============================","html":"

==================== SigCheck ============================

"},{"id":"text-39","type":"text","heading":"","plain_text":"(There is no automatic fix for files that do not pass verification.)","html":"

(There is no automatic fix for files that do not pass verification.)

"},{"id":"text-40","type":"text","heading":"","plain_text":"==================== End of FRST.txt ========================","html":"

==================== End of FRST.txt ========================

"},{"id":"text-41","type":"text","heading":"","plain_text":"Additional log:","html":"

Additional log:

"},{"id":"text-42","type":"text","heading":"","plain_text":"Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-04-2020\nRan by abang (23-04-2020 18:26:33)\nRunning from D:Desktop\nWindows 10 Home Version 1903 18362.778 (X64) (2019-09-19 22:36:33)\nMode de démarrage: Normal\n==========================================================","html":"

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-04-2020\nRan by abang (23-04-2020 18:26:33)\nRunning from D:Desktop\nWindows 10 Home Version 1903 18362.778 (X64) (2019-09-19 22:36:33)\nMode de démarrage: Normal\n==========================================================

"},{"id":"text-43","type":"text","heading":"","plain_text":"==================== Accounts: =============================","html":"

==================== Accounts: =============================

"},{"id":"text-44","type":"text","heading":"","plain_text":"abang (S-1-5-21-3055999371-879555700-2068610542-1001 – Administrator – Enabled) => C:Usersabang\nAdministrator (S-1-5-21-3055999371-879555700-2068610542-500 – Administrator – Disabled)\nakim9 (S-1-5-21-3055999371-879555700-2068610542-1006 – Limited – Disabled)\nDefaultAccount (S-1-5-21-3055999371-879555700-2068610542-503 – Limited – Disabled)\nGuest (S-1-5-21-3055999371-879555700-2068610542-501 – Limited – Disabled)\nibang (S-1-5-21-3055999371-879555700-2068610542-1007 – Limited – Enabled) => C:Usersibang\nsesay (S-1-5-21-3055999371-879555700-2068610542-1005 – Limited – Enabled) => C:Userssesay\nuser (S-1-5-21-3055999371-879555700-2068610542-1004 – Limited – Enabled) => C:Usersuser\nWDAGUtilityAccount (S-1-5-21-3055999371-879555700-2068610542-504 – Limited – Disabled)","html":"

abang (S-1-5-21-3055999371-879555700-2068610542-1001 – Administrator – Enabled) => C:Usersabang\nAdministrator (S-1-5-21-3055999371-879555700-2068610542-500 – Administrator – Disabled)\nakim9 (S-1-5-21-3055999371-879555700-2068610542-1006 – Limited – Disabled)\nDefaultAccount (S-1-5-21-3055999371-879555700-2068610542-503 – Limited – Disabled)\nGuest (S-1-5-21-3055999371-879555700-2068610542-501 – Limited – Disabled)\nibang (S-1-5-21-3055999371-879555700-2068610542-1007 – Limited – Enabled) => C:Usersibang\nsesay (S-1-5-21-3055999371-879555700-2068610542-1005 – Limited – Enabled) => C:Userssesay\nuser (S-1-5-21-3055999371-879555700-2068610542-1004 – Limited – Enabled) => C:Usersuser\nWDAGUtilityAccount (S-1-5-21-3055999371-879555700-2068610542-504 – Limited – Disabled)

"},{"id":"text-45","type":"text","heading":"","plain_text":"==================== Security Center ========================","html":"

==================== Security Center ========================

"},{"id":"text-46","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed.)","html":"

(If an entry is included in the fixlist, it will be removed.)

"},{"id":"text-47","type":"text","heading":"","plain_text":"AV: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46","html":"

AV: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46

"},{"id":"text-48","type":"text","heading":"","plain_text":"==================== Installed Programs ======================","html":"

==================== Installed Programs ======================

"},{"id":"text-49","type":"text","heading":"","plain_text":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)","html":"

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

"},{"id":"text-50","type":"text","heading":"","plain_text":". . . (HKLM…DCAFF63A-A26F-4809-A00D-27AD6733ACB3) (Version: 2.1.28.3 – Intel) Hidden\n. . . (HKLM-x32…C7B0C705-9987-44A2-B495-4101DAEDBFE0) (Version: 2.6.2.4 – Intel) Hidden\n4K YouTube to MP3 3.8 (HKLM…2BD7492A-592E-4DAB-8BEC-68550950E32D) (Version: 3.8.3.3092 – Open Media LLC)\n7-Zip 15.14 (x64) (HKLM…7-Zip) (Version: 15.14 – Igor Pavlov)\nAdobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-1033-7B44-AC0F074E4100) (Version: 20.006.20042 – Adobe Systems Incorporated)\nAdobe Flash Player 32 PPAPI (HKLM-x32…Adobe Flash Player PPAPI) (Version: 32.0.0.363 – Adobe)\nASIO4ALL (HKLM-x32…ASIO4ALL) (Version: 2.14 – Michael Tippach)\nBattle.net (HKLM-x32…Battle.net) (Version:  – Blizzard Entertainment)\nCheck Point Deployment Shell (HKLM-x32…9ebead35-314b-4255-852b-bd8c9e3f2e56) (Version: 8.00.0000 – Check Point)\nCheck Point SSL Network Extender Service (HKLM-x32…392bb1dc-b04e-4f4e-866c-96748b20397e) (Version: 7.01.0000 – CheckPoint)\nDiablo III (HKLM-x32…Diablo III) (Version:  – Blizzard Entertainment)\nDiscord (HKUS-1-5-21-3055999371-879555700-2068610542-1001…Discord) (Version: 0.0.306 – Discord Inc.)\nDisplayDriverAnalyzer (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_DisplayDriverAnalyzer) (Version: 391.01 – NVIDIA Corporation) Hidden\nDolphin (HKLM-x32…Dolphin) (Version: 5.0 – Dolphin Team)\nFL Studio 20 (HKLM-x32…FL Studio 20) (Version:  – Image-Line)\nFL Studio ASIO (HKLM-x32…FL Studio ASIO) (Version:  – Image-Line)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.113 – Google LLC)\nAide à la mise à jour Google (HKLM-x32 … 60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Masqué\nIntel® C++ Redistributables on Intel® 64 (HKLM-x32…F70BCE36-25F2-4475-A918-6209B3D85BF3) (Version: 15.0.179 – Intel Corporation)\nIntel® Chipset Device Software (HKLM-x32…619e726e-d2b4-4e28-9568-c964fd81ee6c) (Version: 10.1.1.14 – Intel® Corporation) Hidden\nIntel® Network Connections 20.1.2019.0 (HKLM…PROSetDX) (Version: 20.1.2019.0 – Intel)\nIntel® Driver Update Utility (HKLM-x32…66307462-7d19-4f1a-af82-aa04b6017f05) (Version: 2.6.2.4 – Intel)\nJava 8 Update 201 (HKLM-x32…26A24AE4-039D-4CA4-87B4-2F32180201F0) (Version: 8.0.2010.9 – Oracle Corporation)\nJava SE Development Kit 8 Update 121 (64-bit) (HKLM…64A3A4F4-B792-11D6-A78A-00B0D0180121) (Version: 8.0.1210.13 – Oracle Corporation)\nMalwarebytes version 4.1.0.56 (HKLM…35065F43-4BB2-439A-BFF7-0F1014F2E0CD_is1) (Version: 4.1.0.56 – Malwarebytes)\nMicrosoft OneDrive (HKUS-1-5-21-3055999371-879555700-2068610542-1001…OneDriveSetup.exe) (Version: 19.232.1124.0012 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (HKLM-x32 … 7299052b-02a4-4627-81f2-1818da5d550d) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (x64) (HKLM … 071c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.4148 (HKLM … 4B6C7001-C7D6-3710-913E-5BC23FCE91E6) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM … 5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32 … 9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32 … 1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32 … 9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x64 redistribuable – 10.0.40219 (HKLM … 1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x86 redistribuable – 10.0.40219 (HKLM-x32 … F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32 … ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32 … 33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32 … f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 redistribuable (x86) – 12.0.40660 (HKLM-x32 … 61087a79-ac85-455c-934d-1fa22cc64f36) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x64) – 14.24.28127 (HKLM-x32…282975d8-55fe-4991-bbbb-06a72581ce58) (Version: 14.24.28127.4 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x86) – 14.24.28127 (HKLM-x32…e31cb1a4-76b5-46a5-a084-3fa419e82201) (Version: 14.24.28127.4 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nMozilla Firefox 73.0.1 (x64 en-US) (HKLM…Mozilla Firefox 73.0.1 (x64 en-US)) (Version: 73.0.1 – Mozilla)\nMozilla Maintenance Service (HKLM-x32…MozillaMaintenanceService) (Version: 73.0.1.7352 – Mozilla)\nMSXML 4.0 SP3 Parser (HKLM-x32…196467F1-C11F-4F76-858B-5812ADC83B94) (Version: 4.30.2100.0 – Microsoft Corporation)\nNVIDIA 3D Vision Controller Driver 390.41 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.NVIRUSB) (Version: 390.41 – NVIDIA Corporation)\nNVIDIA GeForce Experience 3.12.0.84 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.GFExperience) (Version: 3.12.0.84 – NVIDIA Corporation)\nNVIDIA Graphics Driver 432.00 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Driver) (Version: 432.00 – NVIDIA Corporation)\nNVIDIA HD Audio Driver 1.3.38.16 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_HDAudio.Driver) (Version: 1.3.38.16 – NVIDIA Corporation)\nNVIDIA PhysX System Software 9.17.0524 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.PhysX) (Version: 9.17.0524 – NVIDIA Corporation)\nOANDA Desktop (HKLM-x32…C97746B1-FE1D-41AA-B5CF-D0030986B919) (Version: 2.8.3 – OANDA)\nOpenOffice 4.1.6 (HKLM-x32…16E4FF6B-31E8-4037-B627-D87CF872E32B) (Version: 4.16.9790 – Apache Software Foundation)\nOverwatch (HKLM-x32…Overwatch) (Version:  – Blizzard Entertainment)\nPlayStation™Now (HKLM-x32…8F2673A5-9656-4BAA-80F0-F7EFCFF1A336) (Version: 11.0.0 – Sony Interactive Entertainment Network America LLC)\nRazer Synapse (HKLM-x32…D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6) (Version: 2.20.17.413 – Razer Inc.)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7525 – Realtek Semiconductor Corp.)\nRevo Uninstaller 2.0.6 (HKLM…A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97_is1) (Version: 2.0.6 – VS Revo Group, Ltd.)\nRockstar Games Social Club (HKLM-x32…Rockstar Games Social Club) (Version: 1.2.4.1 – Rockstar Games)\nScheduling Manager Gemini v 11.6.84 (HKLM-x32…5C84571D-2097-48B9-8A96-E9E6AD9C1409) (Version: 11.6.84 – Thoughtful Systems, Inc.)\nScheduling Manager Tutorial (HKLM-x32…3108FC9E-C022-4B35-91AA-A7F24B667E89) (Version: 1.1 – Thoughtful Systems, Inc.)\nScpToolkit (HKLM…AC052048-9828-45E3-872B-04CE30A3B58B) (Version: 1.6.238.16010 – Nefarius Software Solutions)\nSlack (HKUS-1-5-21-3055999371-879555700-2068610542-1001…slack) (Version: 4.4.2 – Slack Technologies Inc.)\nSmashLadder Dolphin Launcher 3.0.0 (HKUS-1-5-21-3055999371-879555700-2068610542-1001…f02b64e6-c9bc-5665-a1a7-43718fb1dbd0) (Version: 3.0.0 – Anther Sledge)\nSpeccy (HKLM…Speccy) (Version: 1.32 – Piriform)\nSteam (HKLM-x32 … Steam) (Version: 2.10.91.91 – Valve Corporation)\nthinkorswim (HKLM…9968-4488-2169-7623) (Version: desktop – thinkorswim, Inc)\nTP-LINK TL-WDN4800 Driver (HKLM-x32…70D605C7-C823-4750-BA72-BEB835713612) (Version: 1.3.1 – TP-LINK)\nTP-LINK Wireless Configuration Utility (HKLM-x32…319D91C6-3D44-436C-9F79-36C0D22372DC) (Version: 1.3.1 – TP-LINK)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…32DC821E-4A7D-4878-BEE8-337FA153D7F2) (Version: 2.63.0.0 – Microsoft Corporation) Hidden\nVMware Horizon Client (HKLM…73499771-35D2-4F4E-AC1B-8417816D6F6A) (Version: 5.4.2.11170 – VMware, Inc.) Hidden\nVMware Horizon Client (HKLM-x32…4cd5b1d3-b7c2-4949-9131-8f4b14b1cead) (Version: 5.4.2.11170 – VMware, Inc.)\nVMware Horizon HTML5 Multimedia Redirection Client (HKLM…E6EA3E80-74E7-431A-80C3-9CB0E4CECBDD) (Version: 7.12.0 – VMware, Inc.) Hidden\nVMware Horizon Media Engine 11.0.0.613 (64-bit) (HKLM…3747D742-8099-43C1-AEB5-EBC516D062A6) (Version: 11.0.0.613 – VMware, Inc.) Hidden\nVMware Horizon Media Redirection for Microsoft Teams (HKLM…B253D5D4-842E-4875-8B29-1C74BEE7DD98) (Version: 7.12.0 – VMware, Inc.) Hidden\nWindows Driver Package – Sony Computer Entertainment Inc. Wireless controller for PLAYSTATION®3 Driver Package (01/20/2012 1.4.0.0) (HKLM…D5410AE5FA467EF0F19558D5F60C991A79E11B51) (Version: 01/20/2012 1.4.0.0 – Sony Computer Entertainment Inc.)\nWondershare Helper Compact 2.5.3 (HKLM-x32…5363CE84-5F09-48A1-8B6C-6BB590FFEDF2_is1) (Version: 2.5.3 – Wondershare)\nWondershare UniConverter(Build 11.5.1.0) (HKLM-x32…UniConverter_is1) (Version: 11.5.1.0 – Wondershare Software)","html":"

. . . (HKLM…DCAFF63A-A26F-4809-A00D-27AD6733ACB3) (Version: 2.1.28.3 – Intel) Hidden\n. . . (HKLM-x32…C7B0C705-9987-44A2-B495-4101DAEDBFE0) (Version: 2.6.2.4 – Intel) Hidden\n4K YouTube to MP3 3.8 (HKLM…2BD7492A-592E-4DAB-8BEC-68550950E32D) (Version: 3.8.3.3092 – Open Media LLC)\n7-Zip 15.14 (x64) (HKLM…7-Zip) (Version: 15.14 – Igor Pavlov)\nAdobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-1033-7B44-AC0F074E4100) (Version: 20.006.20042 – Adobe Systems Incorporated)\nAdobe Flash Player 32 PPAPI (HKLM-x32…Adobe Flash Player PPAPI) (Version: 32.0.0.363 – Adobe)\nASIO4ALL (HKLM-x32…ASIO4ALL) (Version: 2.14 – Michael Tippach)\nBattle.net (HKLM-x32…Battle.net) (Version:  – Blizzard Entertainment)\nCheck Point Deployment Shell (HKLM-x32…9ebead35-314b-4255-852b-bd8c9e3f2e56) (Version: 8.00.0000 – Check Point)\nCheck Point SSL Network Extender Service (HKLM-x32…392bb1dc-b04e-4f4e-866c-96748b20397e) (Version: 7.01.0000 – CheckPoint)\nDiablo III (HKLM-x32…Diablo III) (Version:  – Blizzard Entertainment)\nDiscord (HKUS-1-5-21-3055999371-879555700-2068610542-1001…Discord) (Version: 0.0.306 – Discord Inc.)\nDisplayDriverAnalyzer (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_DisplayDriverAnalyzer) (Version: 391.01 – NVIDIA Corporation) Hidden\nDolphin (HKLM-x32…Dolphin) (Version: 5.0 – Dolphin Team)\nFL Studio 20 (HKLM-x32…FL Studio 20) (Version:  – Image-Line)\nFL Studio ASIO (HKLM-x32…FL Studio ASIO) (Version:  – Image-Line)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.113 – Google LLC)\nAide à la mise à jour Google (HKLM-x32 … 60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Masqué\nIntel® C++ Redistributables on Intel® 64 (HKLM-x32…F70BCE36-25F2-4475-A918-6209B3D85BF3) (Version: 15.0.179 – Intel Corporation)\nIntel® Chipset Device Software (HKLM-x32…619e726e-d2b4-4e28-9568-c964fd81ee6c) (Version: 10.1.1.14 – Intel® Corporation) Hidden\nIntel® Network Connections 20.1.2019.0 (HKLM…PROSetDX) (Version: 20.1.2019.0 – Intel)\nIntel® Driver Update Utility (HKLM-x32…66307462-7d19-4f1a-af82-aa04b6017f05) (Version: 2.6.2.4 – Intel)\nJava 8 Update 201 (HKLM-x32…26A24AE4-039D-4CA4-87B4-2F32180201F0) (Version: 8.0.2010.9 – Oracle Corporation)\nJava SE Development Kit 8 Update 121 (64-bit) (HKLM…64A3A4F4-B792-11D6-A78A-00B0D0180121) (Version: 8.0.1210.13 – Oracle Corporation)\nMalwarebytes version 4.1.0.56 (HKLM…35065F43-4BB2-439A-BFF7-0F1014F2E0CD_is1) (Version: 4.1.0.56 – Malwarebytes)\nMicrosoft OneDrive (HKUS-1-5-21-3055999371-879555700-2068610542-1001…OneDriveSetup.exe) (Version: 19.232.1124.0012 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (HKLM-x32 … 7299052b-02a4-4627-81f2-1818da5d550d) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (x64) (HKLM … 071c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.4148 (HKLM … 4B6C7001-C7D6-3710-913E-5BC23FCE91E6) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM … 5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32 … 9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32 … 1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32 … 9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x64 redistribuable – 10.0.40219 (HKLM … 1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x86 redistribuable – 10.0.40219 (HKLM-x32 … F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32 … ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32 … 33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32 … f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 redistribuable (x86) – 12.0.40660 (HKLM-x32 … 61087a79-ac85-455c-934d-1fa22cc64f36) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x64) – 14.24.28127 (HKLM-x32…282975d8-55fe-4991-bbbb-06a72581ce58) (Version: 14.24.28127.4 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x86) – 14.24.28127 (HKLM-x32…e31cb1a4-76b5-46a5-a084-3fa419e82201) (Version: 14.24.28127.4 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nMozilla Firefox 73.0.1 (x64 en-US) (HKLM…Mozilla Firefox 73.0.1 (x64 en-US)) (Version: 73.0.1 – Mozilla)\nMozilla Maintenance Service (HKLM-x32…MozillaMaintenanceService) (Version: 73.0.1.7352 – Mozilla)\nMSXML 4.0 SP3 Parser (HKLM-x32…196467F1-C11F-4F76-858B-5812ADC83B94) (Version: 4.30.2100.0 – Microsoft Corporation)\nNVIDIA 3D Vision Controller Driver 390.41 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.NVIRUSB) (Version: 390.41 – NVIDIA Corporation)\nNVIDIA GeForce Experience 3.12.0.84 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.GFExperience) (Version: 3.12.0.84 – NVIDIA Corporation)\nNVIDIA Graphics Driver 432.00 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Driver) (Version: 432.00 – NVIDIA Corporation)\nNVIDIA HD Audio Driver 1.3.38.16 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_HDAudio.Driver) (Version: 1.3.38.16 – NVIDIA Corporation)\nNVIDIA PhysX System Software 9.17.0524 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.PhysX) (Version: 9.17.0524 – NVIDIA Corporation)\nOANDA Desktop (HKLM-x32…C97746B1-FE1D-41AA-B5CF-D0030986B919) (Version: 2.8.3 – OANDA)\nOpenOffice 4.1.6 (HKLM-x32…16E4FF6B-31E8-4037-B627-D87CF872E32B) (Version: 4.16.9790 – Apache Software Foundation)\nOverwatch (HKLM-x32…Overwatch) (Version:  – Blizzard Entertainment)\nPlayStation™Now (HKLM-x32…8F2673A5-9656-4BAA-80F0-F7EFCFF1A336) (Version: 11.0.0 – Sony Interactive Entertainment Network America LLC)\nRazer Synapse (HKLM-x32…D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6) (Version: 2.20.17.413 – Razer Inc.)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7525 – Realtek Semiconductor Corp.)\nRevo Uninstaller 2.0.6 (HKLM…A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97_is1) (Version: 2.0.6 – VS Revo Group, Ltd.)\nRockstar Games Social Club (HKLM-x32…Rockstar Games Social Club) (Version: 1.2.4.1 – Rockstar Games)\nScheduling Manager Gemini v 11.6.84 (HKLM-x32…5C84571D-2097-48B9-8A96-E9E6AD9C1409) (Version: 11.6.84 – Thoughtful Systems, Inc.)\nScheduling Manager Tutorial (HKLM-x32…3108FC9E-C022-4B35-91AA-A7F24B667E89) (Version: 1.1 – Thoughtful Systems, Inc.)\nScpToolkit (HKLM…AC052048-9828-45E3-872B-04CE30A3B58B) (Version: 1.6.238.16010 – Nefarius Software Solutions)\nSlack (HKUS-1-5-21-3055999371-879555700-2068610542-1001…slack) (Version: 4.4.2 – Slack Technologies Inc.)\nSmashLadder Dolphin Launcher 3.0.0 (HKUS-1-5-21-3055999371-879555700-2068610542-1001…f02b64e6-c9bc-5665-a1a7-43718fb1dbd0) (Version: 3.0.0 – Anther Sledge)\nSpeccy (HKLM…Speccy) (Version: 1.32 – Piriform)\nSteam (HKLM-x32 … Steam) (Version: 2.10.91.91 – Valve Corporation)\nthinkorswim (HKLM…9968-4488-2169-7623) (Version: desktop – thinkorswim, Inc)\nTP-LINK TL-WDN4800 Driver (HKLM-x32…70D605C7-C823-4750-BA72-BEB835713612) (Version: 1.3.1 – TP-LINK)\nTP-LINK Wireless Configuration Utility (HKLM-x32…319D91C6-3D44-436C-9F79-36C0D22372DC) (Version: 1.3.1 – TP-LINK)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…32DC821E-4A7D-4878-BEE8-337FA153D7F2) (Version: 2.63.0.0 – Microsoft Corporation) Hidden\nVMware Horizon Client (HKLM…73499771-35D2-4F4E-AC1B-8417816D6F6A) (Version: 5.4.2.11170 – VMware, Inc.) Hidden\nVMware Horizon Client (HKLM-x32…4cd5b1d3-b7c2-4949-9131-8f4b14b1cead) (Version: 5.4.2.11170 – VMware, Inc.)\nVMware Horizon HTML5 Multimedia Redirection Client (HKLM…E6EA3E80-74E7-431A-80C3-9CB0E4CECBDD) (Version: 7.12.0 – VMware, Inc.) Hidden\nVMware Horizon Media Engine 11.0.0.613 (64-bit) (HKLM…3747D742-8099-43C1-AEB5-EBC516D062A6) (Version: 11.0.0.613 – VMware, Inc.) Hidden\nVMware Horizon Media Redirection for Microsoft Teams (HKLM…B253D5D4-842E-4875-8B29-1C74BEE7DD98) (Version: 7.12.0 – VMware, Inc.) Hidden\nWindows Driver Package – Sony Computer Entertainment Inc. Wireless controller for PLAYSTATION®3 Driver Package (01/20/2012 1.4.0.0) (HKLM…D5410AE5FA467EF0F19558D5F60C991A79E11B51) (Version: 01/20/2012 1.4.0.0 – Sony Computer Entertainment Inc.)\nWondershare Helper Compact 2.5.3 (HKLM-x32…5363CE84-5F09-48A1-8B6C-6BB590FFEDF2_is1) (Version: 2.5.3 – Wondershare)\nWondershare UniConverter(Build 11.5.1.0) (HKLM-x32…UniConverter_is1) (Version: 11.5.1.0 – Wondershare Software)

"},{"id":"text-51","type":"text","heading":"","plain_text":"Packages:\n=========\nASUS Welcome -> C:Program FilesWindowsAppsB9ECED6F.ASUSWelcome_1.0.1.0_x64__qmba6cd70vzyy [2015-12-04] (ASUSTeK COMPUTER INC.)\nCandy Crush Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSaga_1.1740.2.0_x86__kgqvnymyfvs32 [2020-04-09] (king.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.166.400.0_x86__kgqvnymyfvs32 [2020-04-18] (king.com)\nDisney Magic Kingdoms -> C:Program FilesWindowsAppsA278AB0D.DisneyMagicKingdoms_5.0.0.8_x86__h6adky7gbf63m [2020-04-22] (Gameloft SE)\nDolby Access -> C:Program FilesWindowsAppsDolbyLaboratories.DolbyAccess_3.2.169.0_x64__rz1tebttyb220 [2020-04-18] (Dolby Laboratories)\nGame Controller Tester -> C:Program FilesWindowsApps11032Reconco.XboxControllerTester_1.5.5.0_x64__thvmwcgtjwwvy [2019-04-14] (Reconco) [MS Ad]\nHidden City: Hidden Object Adventure -> C:Program FilesWindowsApps828B5831.HiddenCityMysteryofShadows_1.34.3400.0_x86__ytsefhwckbdv6 [2020-03-26] (G5 Entertainment AB)\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-14] (HP Inc.)\nKeeper – Password Manager & Secure File Storage -> C:Program FilesWindowsAppsKeeperSecurityInc.Keeper_14.0.33.0_x64__kejf07qmg0jnm [2019-08-02] (Keeper Security Inc)\nMarch of Empires: War of Lords -> C:Program FilesWindowsAppsA278AB0D.MarchofEmpires_4.7.1.1_x86__h6adky7gbf63m [2020-04-14] (Gameloft SE)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.6.4030.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios) [MS Ad]\nMinecraft for Windows 10 -> C:Program FilesWindowsAppsMicrosoft.MinecraftUWP_1.14.6005.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios)\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nPhotos Add-on -> C:Program FilesWindowsAppsMicrosoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-03-28] (Microsoft Corporation)\nPhotos Media Engine Add-on -> C:Program FilesWindowsAppsMicrosoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-02-04] (Microsoft Corporation)\nRoyal Revolt 2 -> C:Program FilesWindowsAppsflaregamesGmbH.RoyalRevolt2_6.0.1.0_x86__g0q0z3kw54rap [2020-03-30] (flaregames GmbH)\nSO COOKBOOK -> C:Program FilesWindowsAppsBEWISE.CookBook_2.5.4.0_neutral__t7hzxgefr9jt2 [2015-12-08] (Slow Sense)\nSpotify Music -> C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0 [2020-04-09] (Spotify AB) [Startup Task]\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-08] (Twitter Inc.)","html":"

Packages:\n=========\nASUS Welcome -> C:Program FilesWindowsAppsB9ECED6F.ASUSWelcome_1.0.1.0_x64__qmba6cd70vzyy [2015-12-04] (ASUSTeK COMPUTER INC.)\nCandy Crush Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSaga_1.1740.2.0_x86__kgqvnymyfvs32 [2020-04-09] (king.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.166.400.0_x86__kgqvnymyfvs32 [2020-04-18] (king.com)\nDisney Magic Kingdoms -> C:Program FilesWindowsAppsA278AB0D.DisneyMagicKingdoms_5.0.0.8_x86__h6adky7gbf63m [2020-04-22] (Gameloft SE)\nDolby Access -> C:Program FilesWindowsAppsDolbyLaboratories.DolbyAccess_3.2.169.0_x64__rz1tebttyb220 [2020-04-18] (Dolby Laboratories)\nGame Controller Tester -> C:Program FilesWindowsApps11032Reconco.XboxControllerTester_1.5.5.0_x64__thvmwcgtjwwvy [2019-04-14] (Reconco) [MS Ad]\nHidden City: Hidden Object Adventure -> C:Program FilesWindowsApps828B5831.HiddenCityMysteryofShadows_1.34.3400.0_x86__ytsefhwckbdv6 [2020-03-26] (G5 Entertainment AB)\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-14] (HP Inc.)\nKeeper – Password Manager & Secure File Storage -> C:Program FilesWindowsAppsKeeperSecurityInc.Keeper_14.0.33.0_x64__kejf07qmg0jnm [2019-08-02] (Keeper Security Inc)\nMarch of Empires: War of Lords -> C:Program FilesWindowsAppsA278AB0D.MarchofEmpires_4.7.1.1_x86__h6adky7gbf63m [2020-04-14] (Gameloft SE)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.6.4030.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios) [MS Ad]\nMinecraft for Windows 10 -> C:Program FilesWindowsAppsMicrosoft.MinecraftUWP_1.14.6005.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios)\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nPhotos Add-on -> C:Program FilesWindowsAppsMicrosoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-03-28] (Microsoft Corporation)\nPhotos Media Engine Add-on -> C:Program FilesWindowsAppsMicrosoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-02-04] (Microsoft Corporation)\nRoyal Revolt 2 -> C:Program FilesWindowsAppsflaregamesGmbH.RoyalRevolt2_6.0.1.0_x86__g0q0z3kw54rap [2020-03-30] (flaregames GmbH)\nSO COOKBOOK -> C:Program FilesWindowsAppsBEWISE.CookBook_2.5.4.0_neutral__t7hzxgefr9jt2 [2015-12-08] (Slow Sense)\nSpotify Music -> C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0 [2020-04-09] (Spotify AB) [Startup Task]\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-08] (Twitter Inc.)

"},{"id":"text-52","type":"text","heading":"","plain_text":"==================== Custom CLSID (Whitelisted): ==============","html":"

==================== Custom CLSID (Whitelisted): ==============

"},{"id":"text-53","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

"},{"id":"text-54","type":"text","heading":"","plain_text":"ShellIconOverlayIdentifiers: [ AccExtIco1] -> AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco2] -> 853B7E05-C47D-4985-909A-D0DC5C6D7303 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco3] -> 42D38F2E-98E9-4382-B546-E24E4D6D04BB => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers1: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [ANotepad++64] -> B298D29A-A6ED-11DE-BA8C-A68E55D89593 =>  -> No File\nContextMenuHandlers1: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers3: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers3: [4A7C4306-57E0-4C0C-83A9-78C1528F618C] -> 4A7C4306-57E0-4C0C-83A9-78C1528F618C =>  -> No File\nContextMenuHandlers4: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers4: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File\nContextMenuHandlers5: [NvCplDesktopContext] -> 3D1975AF-48C6-4f8e-A182-BE0E08FA86A9 => C:WINDOWSsystem32nvshext.dll [2019-10-02] (NVIDIA Corporation -> NVIDIA Corporation)\nContextMenuHandlers6: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers6: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers6: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers6: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers6: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File","html":"

ShellIconOverlayIdentifiers: [ AccExtIco1] -> AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco2] -> 853B7E05-C47D-4985-909A-D0DC5C6D7303 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco3] -> 42D38F2E-98E9-4382-B546-E24E4D6D04BB => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers1: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [ANotepad++64] -> B298D29A-A6ED-11DE-BA8C-A68E55D89593 =>  -> No File\nContextMenuHandlers1: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers3: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers3: [4A7C4306-57E0-4C0C-83A9-78C1528F618C] -> 4A7C4306-57E0-4C0C-83A9-78C1528F618C =>  -> No File\nContextMenuHandlers4: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers4: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File\nContextMenuHandlers5: [NvCplDesktopContext] -> 3D1975AF-48C6-4f8e-A182-BE0E08FA86A9 => C:WINDOWSsystem32nvshext.dll [2019-10-02] (NVIDIA Corporation -> NVIDIA Corporation)\nContextMenuHandlers6: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers6: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers6: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers6: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers6: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File

"},{"id":"text-55","type":"text","heading":"","plain_text":"==================== Codecs (Whitelisted) ====================","html":"

==================== Codecs (Whitelisted) ====================

"},{"id":"text-56","type":"text","heading":"","plain_text":"==================== Shortcuts & WMI ========================","html":"

==================== Shortcuts & WMI ========================

"},{"id":"text-57","type":"text","heading":"","plain_text":"==================== Loaded Modules (Whitelisted) =============","html":"

==================== Loaded Modules (Whitelisted) =============

"},{"id":"text-58","type":"text","heading":"","plain_text":"2019-12-02 01:47 – 2016-07-21 11:54 – 000137728 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSCreateVC.dll\n2019-12-02 01:47 – 2017-03-23 10:49 – 001506304 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactDAQExp.dll\n2018-05-11 21:41 – 2014-03-14 11:25 – 000194560 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityDC_WFF.dll\n2018-05-11 21:41 – 2014-03-14 11:16 – 001411072 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilitynicLan.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000139264 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000116224 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF_WPS_WIN7.DLL\n2014-05-02 07:55 – 2014-05-02 07:55 – 000185344 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpflac.dll\n2014-05-02 07:05 – 2014-05-02 07:05 – 000173056 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpmp3.dll\n2003-10-01 09:00 – 2003-10-01 09:00 – 000036864 _____ () [File not signed] C:Scheduling ManagerScheduling Manager TutorialDOCOBJ.DLL\n2020-02-15 15:16 – 2020-02-15 15:16 – 000315392 _____ () [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ReactiveSockets4d67f5e3fcf9a9fb6915af32e36d3ff3ReactiveSockets.ni.dll\n2017-06-05 20:30 – 2020-04-23 08:34 – 000040080 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:Program Files (x86)ASUSAXSP1.01.02PEbiosinterface32.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000356864 _____ (Benjamin Höglinger) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Libarius6a1218864657a0b993f06bfebc6bfe0bLibarius.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001546240 _____ (dbreeze.tiesky.com) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64DBreezee3f40e227965044407fde6d4240d659eDBreeze.ni.dll\n2014-05-02 12:52 – 2014-05-02 12:52 – 000599040 _____ (File is in use) [File not signed ?] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64irrKlang.NET4.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000760320 _____ (Galos) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64CSScriptLibrary4b1ecda5f4587754f0d52a2b982eb61bCSScriptLibrary.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000629760 _____ (Illusory Studios LLC) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64HidSharp72fa3c5d8ba66e19d993d6cb0206407cHidSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000284160 _____ (MadMilkman) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64MadMilkman.Inie99c055d152faf3df8df18bb42a6e59eMadMilkman.Ini.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000150528 _____ (michaelnoonan) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64WindowsInput1ff058a466362046321f245938c5bb0bWindowsInput.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 005551616 _____ (Mono development team) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Mono.CSharp6ed14716f51eebf189d3e7162b1b3177Mono.CSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 002821632 _____ (Newtonsoft) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Newtonsoft.Json18197a9d82f36cea0df95d6470495519Newtonsoft.Json.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000159744 _____ (Richard Deeming) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Trinet.Core.IO.Ntfsb2cd883b33635cb7885f236e80729d75Trinet.Core.IO.Ntfs.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000164352 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl.Shared3ce57d9974845341f18acb462c86fa25ScpControl.Shared.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001137664 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl2be4e9f6cc24f866952c48ea8ee4265bScpControl.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000978432 _____ (The Apache Software Foundation) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64log4net21c34351fbc282417539d1b820038ef7log4net.ni.dll\n2019-12-02 01:47 – 2017-03-23 10:52 – 000708608 _____ (Wondershare) [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSProducstInfo.dll","html":"

2019-12-02 01:47 – 2016-07-21 11:54 – 000137728 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSCreateVC.dll\n2019-12-02 01:47 – 2017-03-23 10:49 – 001506304 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactDAQExp.dll\n2018-05-11 21:41 – 2014-03-14 11:25 – 000194560 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityDC_WFF.dll\n2018-05-11 21:41 – 2014-03-14 11:16 – 001411072 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilitynicLan.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000139264 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000116224 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF_WPS_WIN7.DLL\n2014-05-02 07:55 – 2014-05-02 07:55 – 000185344 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpflac.dll\n2014-05-02 07:05 – 2014-05-02 07:05 – 000173056 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpmp3.dll\n2003-10-01 09:00 – 2003-10-01 09:00 – 000036864 _____ () [File not signed] C:Scheduling ManagerScheduling Manager TutorialDOCOBJ.DLL\n2020-02-15 15:16 – 2020-02-15 15:16 – 000315392 _____ () [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ReactiveSockets4d67f5e3fcf9a9fb6915af32e36d3ff3ReactiveSockets.ni.dll\n2017-06-05 20:30 – 2020-04-23 08:34 – 000040080 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:Program Files (x86)ASUSAXSP1.01.02PEbiosinterface32.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000356864 _____ (Benjamin Höglinger) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Libarius6a1218864657a0b993f06bfebc6bfe0bLibarius.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001546240 _____ (dbreeze.tiesky.com) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64DBreezee3f40e227965044407fde6d4240d659eDBreeze.ni.dll\n2014-05-02 12:52 – 2014-05-02 12:52 – 000599040 _____ (File is in use) [File not signed ?] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64irrKlang.NET4.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000760320 _____ (Galos) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64CSScriptLibrary4b1ecda5f4587754f0d52a2b982eb61bCSScriptLibrary.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000629760 _____ (Illusory Studios LLC) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64HidSharp72fa3c5d8ba66e19d993d6cb0206407cHidSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000284160 _____ (MadMilkman) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64MadMilkman.Inie99c055d152faf3df8df18bb42a6e59eMadMilkman.Ini.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000150528 _____ (michaelnoonan) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64WindowsInput1ff058a466362046321f245938c5bb0bWindowsInput.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 005551616 _____ (Mono development team) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Mono.CSharp6ed14716f51eebf189d3e7162b1b3177Mono.CSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 002821632 _____ (Newtonsoft) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Newtonsoft.Json18197a9d82f36cea0df95d6470495519Newtonsoft.Json.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000159744 _____ (Richard Deeming) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Trinet.Core.IO.Ntfsb2cd883b33635cb7885f236e80729d75Trinet.Core.IO.Ntfs.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000164352 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl.Shared3ce57d9974845341f18acb462c86fa25ScpControl.Shared.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001137664 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl2be4e9f6cc24f866952c48ea8ee4265bScpControl.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000978432 _____ (The Apache Software Foundation) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64log4net21c34351fbc282417539d1b820038ef7log4net.ni.dll\n2019-12-02 01:47 – 2017-03-23 10:52 – 000708608 _____ (Wondershare) [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSProducstInfo.dll

"},{"id":"text-59","type":"text","heading":"","plain_text":"==================== Alternate Data Streams (Whitelisted) ========","html":"

==================== Alternate Data Streams (Whitelisted) ========

"},{"id":"text-60","type":"text","heading":"","plain_text":"==================== Safe Mode (Whitelisted) ==================","html":"

==================== Safe Mode (Whitelisted) ==================

"},{"id":"text-61","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)","html":"

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

"},{"id":"text-62","type":"text","heading":"","plain_text":"HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service"","html":"

HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service"

"},{"id":"text-63","type":"text","heading":"","plain_text":"==================== Association (Whitelisted) =================","html":"

==================== Association (Whitelisted) =================

"},{"id":"text-64","type":"text","heading":"","plain_text":"==================== Internet Explorer trusted/restricted ==========","html":"

==================== Internet Explorer trusted/restricted ==========

"},{"id":"text-65","type":"text","heading":"","plain_text":"==================== Hosts content: =========================","html":"

==================== Hosts content: =========================

"},{"id":"text-66","type":"text","heading":"","plain_text":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)","html":"

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

"},{"id":"text-67","type":"text","heading":"","plain_text":"2015-07-10 07:04 – 2017-12-28 14:35 – 000000876 _____ C:WINDOWSsystem32driversetchosts\n127.0.0.1 view-localhost # view localhost server","html":"

2015-07-10 07:04 – 2017-12-28 14:35 – 000000876 _____ C:WINDOWSsystem32driversetchosts\n127.0.0.1 view-localhost # view localhost server

"},{"id":"text-68","type":"text","heading":"","plain_text":"==================== Other Areas ===========================","html":"

==================== Other Areas ===========================

"},{"id":"text-69","type":"text","heading":"","plain_text":"(Currently there is no automatic fix for this section.)","html":"

(Currently there is no automatic fix for this section.)

"},{"id":"text-70","type":"text","heading":"","plain_text":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)Common FilesOracleJavajavapath;%INTEL_DEV_REDIST%redistintel64compiler;C:ProgramDataOracleJavajavapath;C:Windowssystem32;C:Windows;C:WindowsSystem32Wbem;C:WindowsSystem32WindowsPowerShellv1.0;C:Program Files (x86)NVIDIA CorporationPhysXCommon;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;%SYSTEMROOT%System32OpenSSH\nHKUS-1-5-21-3055999371-879555700-2068610542-1001Control PanelDesktop\\Wallpaper -> C:UsersabangAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper\nDNS Servers: 192.168.0.1\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: RequireAdmin)\nWindows Firewall is enabled.","html":"

HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)Common FilesOracleJavajavapath;%INTEL_DEV_REDIST%redistintel64compiler;C:ProgramDataOracleJavajavapath;C:Windowssystem32;C:Windows;C:WindowsSystem32Wbem;C:WindowsSystem32WindowsPowerShellv1.0;C:Program Files (x86)NVIDIA CorporationPhysXCommon;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;%SYSTEMROOT%System32OpenSSH\nHKUS-1-5-21-3055999371-879555700-2068610542-1001Control PanelDesktop\\Wallpaper -> C:UsersabangAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper\nDNS Servers: 192.168.0.1\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: RequireAdmin)\nWindows Firewall is enabled.

"},{"id":"text-71","type":"text","heading":"","plain_text":"==================== MSCONFIG/TASK MANAGER disabled items ==","html":"

==================== MSCONFIG/TASK MANAGER disabled items ==

"},{"id":"text-72","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed.)","html":"

(If an entry is included in the fixlist, it will be removed.)

"},{"id":"text-73","type":"text","heading":"","plain_text":"MSCONFIGServices: asComSvc => 2\nMSCONFIGServices: AsSysCtrlService => 2\nMSCONFIGServices: cpextender => 2\nMSCONFIGServices: Ds3Service => 2\nMSCONFIGServices: DTSAudioSvc => 2\nMSCONFIGServices: GfExperienceService => 2\nMSCONFIGServices: gupdate => 3\nMSCONFIGServices: gupdatem => 3\nMSCONFIGServices: Intel® PROSet Monitoring Service => 2\nMSCONFIGServices: MBAMScheduler => 2\nMSCONFIGServices: MBAMService => 2\nMSCONFIGServices: MozillaMaintenance => 3\nMSCONFIGServices: NvNetworkService => 2\nMSCONFIGServices: NvStreamNetworkSvc => 3\nMSCONFIGServices: NvStreamSvc => 2\nMSCONFIGServices: nvsvc => 2\nMSCONFIGServices: ProductAgentService => 2\nMSCONFIGServices: Razer Game Scanner Service => 2\nMSCONFIGServices: Steam Client Service => 3\nMSCONFIGServices: Stereo Service => 2","html":"

MSCONFIGServices: asComSvc => 2\nMSCONFIGServices: AsSysCtrlService => 2\nMSCONFIGServices: cpextender => 2\nMSCONFIGServices: Ds3Service => 2\nMSCONFIGServices: DTSAudioSvc => 2\nMSCONFIGServices: GfExperienceService => 2\nMSCONFIGServices: gupdate => 3\nMSCONFIGServices: gupdatem => 3\nMSCONFIGServices: Intel® PROSet Monitoring Service => 2\nMSCONFIGServices: MBAMScheduler => 2\nMSCONFIGServices: MBAMService => 2\nMSCONFIGServices: MozillaMaintenance => 3\nMSCONFIGServices: NvNetworkService => 2\nMSCONFIGServices: NvStreamNetworkSvc => 3\nMSCONFIGServices: NvStreamSvc => 2\nMSCONFIGServices: nvsvc => 2\nMSCONFIGServices: ProductAgentService => 2\nMSCONFIGServices: Razer Game Scanner Service => 2\nMSCONFIGServices: Steam Client Service => 3\nMSCONFIGServices: Stereo Service => 2

"},{"id":"text-74","type":"text","heading":"","plain_text":"==================== FirewallRules (Whitelisted) ================","html":"

==================== FirewallRules (Whitelisted) ================

"},{"id":"text-75","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

"},{"id":"text-76","type":"text","heading":"","plain_text":"FirewallRules: [UDP Query User3A20CB0C-5972-4F0E-B28D-3E1D5EECAB8EC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [TCP Query User54030791-5486-48E0-8F99-3F8DD73AD12BC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [023F0A77-9576-4C1F-864A-75D1B5E79A7A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [67FD644B-FDAF-4D1D-8A5E-ECB4212E4B29] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A1DDAC8F-CF03-41EE-8357-92024344D205] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D9442DC5-1818-4FF2-A71E-05820984F49B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE7E363B-F54A-46B5-9442-FFB6626E281F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30C9114F-2B3F-4153-B664-BF1CD3BEC2B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4AD5CA7A-2172-4BF1-B153-DC32716E2497] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C23EAD57-7D13-4155-BB46-355B1C23776F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3B863970-095C-4C85-A118-1A392B135B1B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8D113EB2-E251-4B92-AEF0-D96E0B6B80B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E12A8E1A-517E-4B2F-A75D-062BE2C4F3FA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C06C18D1-088B-4201-8911-40AB9597CF34] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C2089B7F-D2CB-4269-B02A-C1B1B2B1887B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [09CA0E2E-1D40-425F-BD7B-C2E51E4C1F87] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FCDA81A-7C2D-43EE-8AF0-8B625999E1A1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0EA19E97-2D0D-4EBA-908D-02F251223DF8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9B0454C6-EEA8-4459-8BBC-9C93C08EDB2D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [87887A46-ABE3-421E-9E3D-65767F8620B9] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C68A5AB6-1862-4550-8EC9-E1C19DE8444F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [187C20C7-1EE7-42F1-A916-742B2AB6B4FC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B7EF0327-CD34-4A11-B23D-D223BEBA5978] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [2BF20755-F176-4E2C-8FF6-B971083800BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [15F4D836-0E42-429B-91BB-05D8C6AEC5C8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [425F7D42-AC12-4064-87FB-E4D611A2DC21] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [CAF42CB5-301A-4BA5-8E05-C31276646D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E67899C3-A328-4FA4-8C7B-A3B2BFD06D77] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FF6238D-0160-422F-9196-FABDDA4A56A3] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E78D7D0F-2F04-4182-96CA-013B656D1C95] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AC2C0466-2A72-4651-9C90-17C853D54D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [86360315-551D-4AA4-B952-EE9A6C584E82] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6A96FA0D-9B43-4316-849B-583F8C3BBE89] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E995C816-398B-413E-B22D-117100CC1ACC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AAFBC89F-D155-4F8A-8718-BAEA520D5BB5] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FC48A9E8-E688-4170-A16D-F817210C5C80] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C4D653A6-86C5-4CEB-93DC-3D9E2BEF010C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54E40053-0A90-4A11-B6BE-5F5ADDE987B0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EA745C69-727F-4201-B3E4-1471123DD72A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B0907127-B4C6-4C84-8D83-B969896E95AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41ADDA74-F50B-4CD4-8479-313C33196388] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D08D2994-3E16-49D6-AD02-C0DF7ECB1F09] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [217C826B-39CC-4240-85E1-433C8ADC2581] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A53A5F9B-D3C6-4E4D-AE16-17346EBE8919] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9071E769-ED0B-4656-9251-C12367C56F41] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [625D1BB1-FC20-4FCE-B671-54C7DD9340F2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [61B6EF3C-791D-4F83-A1B7-BFBF3621879C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [F99F2C07-DC34-44DA-B0BC-528FDFA41446] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AB4AB17F-4A79-463E-8961-5AC357FBCA47] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AFAE990F-0583-49E1-8258-3C7726FEC616] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [81E7AC73-1844-406C-A08B-A3364BF4C3AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E5635E24-CBC0-4F57-AFD6-F67FB96BA53B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [45F0B540-5C04-4785-9C90-87C20AE5477E] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4995CD7C-77E5-438B-849F-64DC6E1A1E86] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A777D5B6-1C0B-4566-826C-AEF75A6ACC55] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [99844AC6-7F2F-42E6-8A7C-D2BF828248DA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9BB186FE-7EF7-424C-AF36-BF61CFCEDA2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4F947C79-7C21-4375-B9BD-D1DBEA3FB28B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [01AC1E18-7FBD-485C-B0D0-187A8E242230] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FF1B140D-494B-45A8-B475-65516E09CBB8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3EB8A53C-3292-49F2-A673-B4F12E756547] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13CD5436-1EBD-4E89-ABD2-CAE09B30D6AA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FA0121A5-5411-45B3-9354-6A71CB03D931] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D84B311A-6A2E-4069-A9EF-659FCE546874] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [7476105C-6CB5-4B36-8AB4-7A8459F1E36B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [00560EE3-AC11-497D-8D86-C7424586FA15] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [31ACB8D4-72E5-471D-906B-DE67EC2F159B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [14E8B51C-D163-423C-988B-0D89DEF1F718] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41654C77-92F4-4858-8251-77C84AF0305B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B87075DD-027E-4F7D-B37C-59EA52C05BA7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8C1B7F41-C94D-4E9D-89D8-FDB4789756BC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6186AB12-D44A-41D0-A2FE-6B065EA9DDFD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E3129253-383E-435D-B0A2-C7137CB06A0B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30906E77-4729-41D3-9508-0CD6AFA301E8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [BCA51D18-2143-4B10-B7E5-A2E60493BA94] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13EAD58F-B7D3-405C-AFC3-A6F180CF1F85] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [5D3A5397-4ABE-44A1-AB76-2A0CF64BC8AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C7904CA0-48FC-4F6A-84DF-54E365F9A7F6] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8E0CA2B9-0A97-4ECD-A631-2ED098DF9051] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B35CB8CD-0CD1-4201-8E1C-025636FC066D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B1632180-5628-448A-A84A-F51769531562] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [ED615CA0-1786-4C7A-A128-4BD3EDA4C0FD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [233621B9-0C3B-4384-8C84-595062660AE2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE5DFA07-0791-4457-B0CD-08DCB1494A39] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0D39F94F-1588-42ED-A675-0BA8B547D6AB] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D513F9B4-676F-473D-B815-4FA1A41342C1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [11EBECD5-5DAB-454A-BF9B-A57DFCFFD5E7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54009A4C-F798-4CA4-9F75-8F4A9FCAD813] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4D5085D0-831B-4FAB-AA7F-4AC8133C7C2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [70C46E26-EB0E-4C8B-A905-36761929073B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9E32B534-F7B7-4A70-82D0-B5A774D60F4F] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [90A3BBEE-2788-4277-8EAD-3DC247BE70E8] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [UDP Query User20EC0AE9-A8BA-46F6-98EA-F155341A019BD:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [TCP Query User7C75CFD6-CC06-47D9-A584-E601D39F32D9D:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [26A62681-A444-4FBB-ADA2-FC1B05C6E1E1] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [07C3519E-95B7-4FBB-B7C7-0CE53DD7A0E0] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [F573858C-0F95-4B56-830C-3541830DB720] => (Allow) C:Program Files (x86)PlayStationNowunidater.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment)\nFirewallRules: [D730743C-DA46-4800-AF0D-5CB3C05AF8CD] => (Allow) C:UsersabangAppDataLocalGaikaiCrashReportsdumpupload.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> )\nFirewallRules: [9D9C777E-3E3C-4B2C-B289-A04E2CD768E7] => (Allow) C:Program Files (x86)PlayStationNowpsnowlauncher.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment Network America LLC)\nFirewallRules: [C77F9D37-04C2-4E4A-88AA-C204D34B2686] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [2A9C4941-E497-4758-A055-F943D1F33761] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [UDP Query UserA3822803-F5A0-4805-9255-68A3CEDB1402C:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [TCP Query UserD43AADF3-49D0-416F-B97D-B399D33C40EAC:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [87B69EB1-2C3A-4D0A-8028-A9FF92B3C1E3] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [09C1860A-23C2-4E12-8E3A-A38C6C98C101] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [5A00F446-668F-4543-A867-77E3BEDCD098] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50FB5DEF-ED25-460F-BB2E-A37F62D15222] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50B2A780-FC1E-4CEE-87F0-C5E166BCC312] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [7DC21C63-21CB-413E-BE20-ECC6B47C7C32] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [TCP Query UserF11A8ECF-8855-4F97-97CB-6AAEC76F87BEC:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCAE4AE65-0CDE-43CE-A92A-196F35E52E22C:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [CA98B275-2FE1-402D-A5F1-B87D8ADFBC55] => (Allow) C:Program Files (x86)CheckPointSSL Network Extenderslimsvc.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nFirewallRules: [TCP Query User2820BD35-2129-4E6D-A8DB-3C6CE798C6F6C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [UDP Query User86802B20-75B9-4F75-AE91-E496BD11D479C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [TCP Query User8438EA6D-3737-48D0-9F93-8F2D6D9A06ECC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [UDP Query UserE79F117B-B096-4DC4-B77B-8797F37D149CC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [791DCA37-8EC8-424B-BB95-ACE422DF014E] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [888D7D35-2B25-4AA8-96BF-F9F84EB9F526] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [TCP Query User5813B562-B455-4993-85C5-7FF442CB25C2C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCF888DB5-FD06-4A19-815C-C31FCB1D81B6C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [41F7857F-9E58-485F-818B-19AAABEAE453] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [5CA9388B-31A9-4924-ABCA-0DF73DA832A9] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A3E9FEC4-23DB-47D1-8375-38D89FBBF935] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [BCE97003-DF35-4195-9804-7A21CAFDA70A] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A6603C8D-0E63-4245-9387-91044ABFB38E] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [91CB3554-F187-403B-B8C2-E92E45365F06] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [10DA8387-874D-4AC3-8603-D51430C4F280] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [9899BB37-71DB-4746-A9D8-EEAE68F2FC44] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [TCP Query User4271D5BE-DFA1-4778-AC81-F31C050E15B2D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [UDP Query User4DA94064-2DD2-4124-AA18-E3D6E6D095EED:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6B1586A3-6621-4C6D-828E-83F0210E0F30] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [E253CF1C-2647-4974-951D-1949DDE011CE] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6E255D8D-8D8F-43E4-9FD2-D7CB1268F204] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [027F9085-2A91-4741-837C-18946ECA34F4] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [8032F437-4112-4C85-B8F2-39492CA0390C] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [DDE3D4D3-890E-4EF7-9652-852C1E2C5008] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AA702745-0AD1-40A7-BF74-2AB11513F5E3] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [423B78B2-149F-4C73-A4F9-744BE0ED21F0] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [45D3CDE1-4396-4D7B-8979-0673185923B2] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [553AF5AC-E66B-44B9-942D-8189E944F9AB] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [TCP Query User3AD38B14-73AD-4732-A86E-4165B8D48E9CC:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [UDP Query UserB7A1A6A6-3553-4885-B90C-A5CAC8C2D830C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [5F40B1B5-169B-43BF-BF4D-E24B40F6E437] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F79E4DA7-F39B-4B44-A311-EEA98A1AB989] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [1EE5B3A2-2230-4514-92CB-5CA09D8F28AE] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [81E2AFE3-8095-423A-B77D-BAA224E1C8C0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [838049CC-C7B9-426A-A8B2-384720480511] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8CA7AF4B-3191-45EB-8617-FAA13ADC3D67] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [9E45E785-6C4D-44C7-9A5C-FD29598D8F07] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [60A0B233-8C86-4B36-9B42-CDD1C488E267] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8140EE9A-095C-460A-8D74-442A788C741E] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F54C7FB7-06B7-490B-976F-E79A38E2BEB3] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [74A35425-19B9-43C7-9B72-451D83167B9D] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [FF858980-0824-4E4A-BF8A-5F7C46B4823B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F4A1204D-9E06-4C4D-A793-49EDF60A85C0] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [650EA6A1-093D-4F84-8563-097B8EB1359B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [E45143B8-6858-49A3-92AB-247474BDA0F7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F6F4DB44-A01B-4B0E-97CF-A6FFA216D3BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [B3BB5363-09A9-4886-965E-25E84AB6BD5C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [6F4D721B-02EE-4875-988E-ADC09C264700] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C36BAE82-63BF-4FAE-AB12-2338F9B7C86F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C1A48158-A53A-4B69-9EE0-00A7224ABE00] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [5FD89F7C-37D8-4F19-806D-7503FAF8707D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [4EAC8A2A-54AD-41D9-BB20-08240A92D596] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [18865BAC-5B8D-45C4-B0FB-4432AC5A6381] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [1083CE52-99BE-40A3-A064-711F5AAE1A00] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [433AD889-009F-4D2D-9034-6BC62CCE4A13] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [4DB082A3-6753-4ECA-856A-3D3D59213CE9] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [D2B0EF02-A882-4AB6-8ED1-7A35F3622D4E] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [5844E35C-079D-41CA-AE60-AA9E4551A040] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [806D6C41-EAD4-48DB-83C1-EC5BE80EEF37] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [F64CDFFF-36EB-4E54-A7DD-61B608771748] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [48AA320F-FDFA-4279-9BAC-D24AC659941B] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)","html":"

FirewallRules: [UDP Query User3A20CB0C-5972-4F0E-B28D-3E1D5EECAB8EC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [TCP Query User54030791-5486-48E0-8F99-3F8DD73AD12BC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [023F0A77-9576-4C1F-864A-75D1B5E79A7A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [67FD644B-FDAF-4D1D-8A5E-ECB4212E4B29] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A1DDAC8F-CF03-41EE-8357-92024344D205] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D9442DC5-1818-4FF2-A71E-05820984F49B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE7E363B-F54A-46B5-9442-FFB6626E281F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30C9114F-2B3F-4153-B664-BF1CD3BEC2B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4AD5CA7A-2172-4BF1-B153-DC32716E2497] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C23EAD57-7D13-4155-BB46-355B1C23776F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3B863970-095C-4C85-A118-1A392B135B1B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8D113EB2-E251-4B92-AEF0-D96E0B6B80B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E12A8E1A-517E-4B2F-A75D-062BE2C4F3FA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C06C18D1-088B-4201-8911-40AB9597CF34] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C2089B7F-D2CB-4269-B02A-C1B1B2B1887B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [09CA0E2E-1D40-425F-BD7B-C2E51E4C1F87] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FCDA81A-7C2D-43EE-8AF0-8B625999E1A1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0EA19E97-2D0D-4EBA-908D-02F251223DF8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9B0454C6-EEA8-4459-8BBC-9C93C08EDB2D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [87887A46-ABE3-421E-9E3D-65767F8620B9] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C68A5AB6-1862-4550-8EC9-E1C19DE8444F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [187C20C7-1EE7-42F1-A916-742B2AB6B4FC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B7EF0327-CD34-4A11-B23D-D223BEBA5978] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [2BF20755-F176-4E2C-8FF6-B971083800BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [15F4D836-0E42-429B-91BB-05D8C6AEC5C8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [425F7D42-AC12-4064-87FB-E4D611A2DC21] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [CAF42CB5-301A-4BA5-8E05-C31276646D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E67899C3-A328-4FA4-8C7B-A3B2BFD06D77] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FF6238D-0160-422F-9196-FABDDA4A56A3] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E78D7D0F-2F04-4182-96CA-013B656D1C95] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AC2C0466-2A72-4651-9C90-17C853D54D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [86360315-551D-4AA4-B952-EE9A6C584E82] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6A96FA0D-9B43-4316-849B-583F8C3BBE89] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E995C816-398B-413E-B22D-117100CC1ACC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AAFBC89F-D155-4F8A-8718-BAEA520D5BB5] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FC48A9E8-E688-4170-A16D-F817210C5C80] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C4D653A6-86C5-4CEB-93DC-3D9E2BEF010C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54E40053-0A90-4A11-B6BE-5F5ADDE987B0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EA745C69-727F-4201-B3E4-1471123DD72A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B0907127-B4C6-4C84-8D83-B969896E95AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41ADDA74-F50B-4CD4-8479-313C33196388] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D08D2994-3E16-49D6-AD02-C0DF7ECB1F09] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [217C826B-39CC-4240-85E1-433C8ADC2581] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A53A5F9B-D3C6-4E4D-AE16-17346EBE8919] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9071E769-ED0B-4656-9251-C12367C56F41] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [625D1BB1-FC20-4FCE-B671-54C7DD9340F2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [61B6EF3C-791D-4F83-A1B7-BFBF3621879C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [F99F2C07-DC34-44DA-B0BC-528FDFA41446] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AB4AB17F-4A79-463E-8961-5AC357FBCA47] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AFAE990F-0583-49E1-8258-3C7726FEC616] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [81E7AC73-1844-406C-A08B-A3364BF4C3AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E5635E24-CBC0-4F57-AFD6-F67FB96BA53B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [45F0B540-5C04-4785-9C90-87C20AE5477E] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4995CD7C-77E5-438B-849F-64DC6E1A1E86] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A777D5B6-1C0B-4566-826C-AEF75A6ACC55] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [99844AC6-7F2F-42E6-8A7C-D2BF828248DA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9BB186FE-7EF7-424C-AF36-BF61CFCEDA2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4F947C79-7C21-4375-B9BD-D1DBEA3FB28B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [01AC1E18-7FBD-485C-B0D0-187A8E242230] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FF1B140D-494B-45A8-B475-65516E09CBB8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3EB8A53C-3292-49F2-A673-B4F12E756547] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13CD5436-1EBD-4E89-ABD2-CAE09B30D6AA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FA0121A5-5411-45B3-9354-6A71CB03D931] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D84B311A-6A2E-4069-A9EF-659FCE546874] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [7476105C-6CB5-4B36-8AB4-7A8459F1E36B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [00560EE3-AC11-497D-8D86-C7424586FA15] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [31ACB8D4-72E5-471D-906B-DE67EC2F159B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [14E8B51C-D163-423C-988B-0D89DEF1F718] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41654C77-92F4-4858-8251-77C84AF0305B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B87075DD-027E-4F7D-B37C-59EA52C05BA7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8C1B7F41-C94D-4E9D-89D8-FDB4789756BC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6186AB12-D44A-41D0-A2FE-6B065EA9DDFD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E3129253-383E-435D-B0A2-C7137CB06A0B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30906E77-4729-41D3-9508-0CD6AFA301E8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [BCA51D18-2143-4B10-B7E5-A2E60493BA94] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13EAD58F-B7D3-405C-AFC3-A6F180CF1F85] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [5D3A5397-4ABE-44A1-AB76-2A0CF64BC8AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C7904CA0-48FC-4F6A-84DF-54E365F9A7F6] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8E0CA2B9-0A97-4ECD-A631-2ED098DF9051] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B35CB8CD-0CD1-4201-8E1C-025636FC066D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B1632180-5628-448A-A84A-F51769531562] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [ED615CA0-1786-4C7A-A128-4BD3EDA4C0FD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [233621B9-0C3B-4384-8C84-595062660AE2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE5DFA07-0791-4457-B0CD-08DCB1494A39] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0D39F94F-1588-42ED-A675-0BA8B547D6AB] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D513F9B4-676F-473D-B815-4FA1A41342C1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [11EBECD5-5DAB-454A-BF9B-A57DFCFFD5E7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54009A4C-F798-4CA4-9F75-8F4A9FCAD813] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4D5085D0-831B-4FAB-AA7F-4AC8133C7C2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [70C46E26-EB0E-4C8B-A905-36761929073B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9E32B534-F7B7-4A70-82D0-B5A774D60F4F] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [90A3BBEE-2788-4277-8EAD-3DC247BE70E8] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [UDP Query User20EC0AE9-A8BA-46F6-98EA-F155341A019BD:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [TCP Query User7C75CFD6-CC06-47D9-A584-E601D39F32D9D:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [26A62681-A444-4FBB-ADA2-FC1B05C6E1E1] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [07C3519E-95B7-4FBB-B7C7-0CE53DD7A0E0] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [F573858C-0F95-4B56-830C-3541830DB720] => (Allow) C:Program Files (x86)PlayStationNowunidater.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment)\nFirewallRules: [D730743C-DA46-4800-AF0D-5CB3C05AF8CD] => (Allow) C:UsersabangAppDataLocalGaikaiCrashReportsdumpupload.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> )\nFirewallRules: [9D9C777E-3E3C-4B2C-B289-A04E2CD768E7] => (Allow) C:Program Files (x86)PlayStationNowpsnowlauncher.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment Network America LLC)\nFirewallRules: [C77F9D37-04C2-4E4A-88AA-C204D34B2686] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [2A9C4941-E497-4758-A055-F943D1F33761] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [UDP Query UserA3822803-F5A0-4805-9255-68A3CEDB1402C:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [TCP Query UserD43AADF3-49D0-416F-B97D-B399D33C40EAC:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [87B69EB1-2C3A-4D0A-8028-A9FF92B3C1E3] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [09C1860A-23C2-4E12-8E3A-A38C6C98C101] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [5A00F446-668F-4543-A867-77E3BEDCD098] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50FB5DEF-ED25-460F-BB2E-A37F62D15222] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50B2A780-FC1E-4CEE-87F0-C5E166BCC312] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [7DC21C63-21CB-413E-BE20-ECC6B47C7C32] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [TCP Query UserF11A8ECF-8855-4F97-97CB-6AAEC76F87BEC:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCAE4AE65-0CDE-43CE-A92A-196F35E52E22C:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [CA98B275-2FE1-402D-A5F1-B87D8ADFBC55] => (Allow) C:Program Files (x86)CheckPointSSL Network Extenderslimsvc.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nFirewallRules: [TCP Query User2820BD35-2129-4E6D-A8DB-3C6CE798C6F6C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [UDP Query User86802B20-75B9-4F75-AE91-E496BD11D479C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [TCP Query User8438EA6D-3737-48D0-9F93-8F2D6D9A06ECC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [UDP Query UserE79F117B-B096-4DC4-B77B-8797F37D149CC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [791DCA37-8EC8-424B-BB95-ACE422DF014E] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [888D7D35-2B25-4AA8-96BF-F9F84EB9F526] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [TCP Query User5813B562-B455-4993-85C5-7FF442CB25C2C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCF888DB5-FD06-4A19-815C-C31FCB1D81B6C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [41F7857F-9E58-485F-818B-19AAABEAE453] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [5CA9388B-31A9-4924-ABCA-0DF73DA832A9] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A3E9FEC4-23DB-47D1-8375-38D89FBBF935] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [BCE97003-DF35-4195-9804-7A21CAFDA70A] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A6603C8D-0E63-4245-9387-91044ABFB38E] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [91CB3554-F187-403B-B8C2-E92E45365F06] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [10DA8387-874D-4AC3-8603-D51430C4F280] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [9899BB37-71DB-4746-A9D8-EEAE68F2FC44] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [TCP Query User4271D5BE-DFA1-4778-AC81-F31C050E15B2D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [UDP Query User4DA94064-2DD2-4124-AA18-E3D6E6D095EED:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6B1586A3-6621-4C6D-828E-83F0210E0F30] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [E253CF1C-2647-4974-951D-1949DDE011CE] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6E255D8D-8D8F-43E4-9FD2-D7CB1268F204] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [027F9085-2A91-4741-837C-18946ECA34F4] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [8032F437-4112-4C85-B8F2-39492CA0390C] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [DDE3D4D3-890E-4EF7-9652-852C1E2C5008] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AA702745-0AD1-40A7-BF74-2AB11513F5E3] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [423B78B2-149F-4C73-A4F9-744BE0ED21F0] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [45D3CDE1-4396-4D7B-8979-0673185923B2] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [553AF5AC-E66B-44B9-942D-8189E944F9AB] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [TCP Query User3AD38B14-73AD-4732-A86E-4165B8D48E9CC:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [UDP Query UserB7A1A6A6-3553-4885-B90C-A5CAC8C2D830C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [5F40B1B5-169B-43BF-BF4D-E24B40F6E437] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F79E4DA7-F39B-4B44-A311-EEA98A1AB989] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [1EE5B3A2-2230-4514-92CB-5CA09D8F28AE] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [81E2AFE3-8095-423A-B77D-BAA224E1C8C0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [838049CC-C7B9-426A-A8B2-384720480511] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8CA7AF4B-3191-45EB-8617-FAA13ADC3D67] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [9E45E785-6C4D-44C7-9A5C-FD29598D8F07] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [60A0B233-8C86-4B36-9B42-CDD1C488E267] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8140EE9A-095C-460A-8D74-442A788C741E] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F54C7FB7-06B7-490B-976F-E79A38E2BEB3] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [74A35425-19B9-43C7-9B72-451D83167B9D] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [FF858980-0824-4E4A-BF8A-5F7C46B4823B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F4A1204D-9E06-4C4D-A793-49EDF60A85C0] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [650EA6A1-093D-4F84-8563-097B8EB1359B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [E45143B8-6858-49A3-92AB-247474BDA0F7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F6F4DB44-A01B-4B0E-97CF-A6FFA216D3BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [B3BB5363-09A9-4886-965E-25E84AB6BD5C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [6F4D721B-02EE-4875-988E-ADC09C264700] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C36BAE82-63BF-4FAE-AB12-2338F9B7C86F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C1A48158-A53A-4B69-9EE0-00A7224ABE00] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [5FD89F7C-37D8-4F19-806D-7503FAF8707D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [4EAC8A2A-54AD-41D9-BB20-08240A92D596] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [18865BAC-5B8D-45C4-B0FB-4432AC5A6381] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [1083CE52-99BE-40A3-A064-711F5AAE1A00] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [433AD889-009F-4D2D-9034-6BC62CCE4A13] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [4DB082A3-6753-4ECA-856A-3D3D59213CE9] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [D2B0EF02-A882-4AB6-8ED1-7A35F3622D4E] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [5844E35C-079D-41CA-AE60-AA9E4551A040] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [806D6C41-EAD4-48DB-83C1-EC5BE80EEF37] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [F64CDFFF-36EB-4E54-A7DD-61B608771748] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [48AA320F-FDFA-4279-9BAC-D24AC659941B] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)

"},{"id":"text-77","type":"text","heading":"","plain_text":"==================== Restore Points =========================","html":"

==================== Restore Points =========================

"},{"id":"text-78","type":"text","heading":"","plain_text":"20-04-2020 09:04:00 Scheduled Checkpoint","html":"

20-04-2020 09:04:00 Scheduled Checkpoint

"},{"id":"text-79","type":"text","heading":"","plain_text":"==================== Faulty Device Manager Devices ============","html":"

==================== Faulty Device Manager Devices ============

"},{"id":"text-80","type":"text","heading":"","plain_text":"==================== Event log errors: ========================","html":"

==================== Event log errors: ========================

"},{"id":"text-81","type":"text","heading":"","plain_text":"Erreurs d'application:\n==================\nError: (04/23/2020 06:19:46 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (79684,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Erreurs d'application:\n==================\nError: (04/23/2020 06:19:46 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (79684,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-82","type":"text","heading":"","plain_text":"Error: (04/23/2020 05:19:15 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (78176,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (04/23/2020 05:19:15 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (78176,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-83","type":"text","heading":"","plain_text":"Error: (04/23/2020 04:18:44 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77936,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (04/23/2020 04:18:44 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77936,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-84","type":"text","heading":"","plain_text":"Error: (04/23/2020 03:18:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (76960,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (04/23/2020 03:18:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (76960,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-85","type":"text","heading":"","plain_text":"Error: (04/23/2020 01:45:40 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (8300,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (04/23/2020 01:45:40 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (8300,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-86","type":"text","heading":"","plain_text":"Error: (04/23/2020 01:21:01 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (7060,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (04/23/2020 01:21:01 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (7060,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-87","type":"text","heading":"","plain_text":"Error: (04/23/2020 12:45:10 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77084,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (04/23/2020 12:45:10 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77084,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-88","type":"text","heading":"","plain_text":"Error: (04/23/2020 12:39:16 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (10932,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (04/23/2020 12:39:16 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (10932,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-89","type":"text","heading":"","plain_text":"Erreurs système:\n=============\nError: (04/23/2020 08:34:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:51:57 PM on ‎4/‎22/‎2020 was unexpected.","html":"

Erreurs système:\n=============\nError: (04/23/2020 08:34:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:51:57 PM on ‎4/‎22/‎2020 was unexpected.

"},{"id":"text-90","type":"text","heading":"","plain_text":"Error: (04/23/2020 08:33:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.","html":"

Error: (04/23/2020 08:33:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.

"},{"id":"text-91","type":"text","heading":"","plain_text":"Error: (04/22/2020 08:31:58 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:43:27 PM on ‎4/‎21/‎2020 was unexpected.","html":"

Error: (04/22/2020 08:31:58 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:43:27 PM on ‎4/‎21/‎2020 was unexpected.

"},{"id":"text-92","type":"text","heading":"","plain_text":"Error: (04/22/2020 08:31:52 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.","html":"

Error: (04/22/2020 08:31:52 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.

"},{"id":"text-93","type":"text","heading":"","plain_text":"Error: (04/20/2020 08:38:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 1:30:02 AM on ‎4/‎20/‎2020 was unexpected.","html":"

Error: (04/20/2020 08:38:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 1:30:02 AM on ‎4/‎20/‎2020 was unexpected.

"},{"id":"text-94","type":"text","heading":"","plain_text":"Error: (04/20/2020 08:37:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.","html":"

Error: (04/20/2020 08:37:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data.

"},{"id":"text-95","type":"text","heading":"","plain_text":"Error: (04/18/2020 10:16:14 PM) (Source: volsnap) (EventID: 36) (User: )\nDescription: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.","html":"

Error: (04/18/2020 10:16:14 PM) (Source: volsnap) (EventID: 36) (User: )\nDescription: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

"},{"id":"text-96","type":"text","heading":"","plain_text":"Error: (04/18/2020 11:40:27 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 12:26:39 AM on ‎4/‎18/‎2020 was unexpected.","html":"

Error: (04/18/2020 11:40:27 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 12:26:39 AM on ‎4/‎18/‎2020 was unexpected.

"},{"id":"text-97","type":"text","heading":"","plain_text":"Windows Defender:\n===================================\nDate: 2020-04-22 12:33:54.808\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 726051A0-B1B0-4589-BBE8-0B2FB1F09D40\nScan Type: Antimalware\nScan Parameters: Quick Scan","html":"

Windows Defender:\n===================================\nDate: 2020-04-22 12:33:54.808\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 726051A0-B1B0-4589-BBE8-0B2FB1F09D40\nScan Type: Antimalware\nScan Parameters: Quick Scan

"},{"id":"text-98","type":"text","heading":"","plain_text":"Date: 2020-04-03 21:47:35.072\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 01A490FE-91B6-4450-B243-F9F1C6B0EDB2\nScan Type: Antimalware\nScan Parameters: Quick Scan","html":"

Date: 2020-04-03 21:47:35.072\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 01A490FE-91B6-4450-B243-F9F1C6B0EDB2\nScan Type: Antimalware\nScan Parameters: Quick Scan

"},{"id":"text-99","type":"text","heading":"","plain_text":"Date: 2020-04-16 08:57:03.659\nLa description: \nWindows Defender Antivirus engine has been terminated due to an unexpected error.\nFailure Type: Crash\nException code: 0xc0000005\nResource: file:C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsImage-LineMore….lnk","html":"

Date: 2020-04-16 08:57:03.659\nLa description: \nWindows Defender Antivirus engine has been terminated due to an unexpected error.\nFailure Type: Crash\nException code: 0xc0000005\nResource: file:C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsImage-LineMore….lnk

"},{"id":"text-100","type":"text","heading":"","plain_text":"CodeIntegrity:\n===================================","html":"

CodeIntegrity:\n===================================

"},{"id":"text-101","type":"text","heading":"","plain_text":"Date: 2020-04-16 08:57:18.396\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.","html":"

Date: 2020-04-16 08:57:18.396\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.

"},{"id":"text-102","type":"text","heading":"","plain_text":"Date: 2020-04-16 08:57:18.383\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.","html":"

Date: 2020-04-16 08:57:18.383\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.

"},{"id":"text-103","type":"text","heading":"","plain_text":"Date: 2020-04-16 08:57:15.838\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.","html":"

Date: 2020-04-16 08:57:15.838\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.

"},{"id":"text-104","type":"text","heading":"","plain_text":"Date: 2020-04-16 08:57:15.824\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.","html":"

Date: 2020-04-16 08:57:15.824\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system.

"},{"id":"text-105","type":"text","heading":"","plain_text":"Date: 2020-04-16 08:57:15.808\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system.","html":"

Date: 2020-04-16 08:57:15.808\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system.

"},{"id":"text-106","type":"text","heading":"","plain_text":"Date: 2020-04-16 08:57:15.795\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system.","html":"

Date: 2020-04-16 08:57:15.795\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system.

"},{"id":"text-107","type":"text","heading":"","plain_text":"Date: 2020-04-16 08:57:15.306\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system.","html":"

Date: 2020-04-16 08:57:15.306\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system.

"},{"id":"text-108","type":"text","heading":"","plain_text":"Date: 2020-04-16 08:57:15.274\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system.","html":"

Date: 2020-04-16 08:57:15.274\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system.

"},{"id":"text-109","type":"text","heading":"","plain_text":"==================== Memory info ===========================","html":"

==================== Memory info ===========================

"},{"id":"text-110","type":"text","heading":"","plain_text":"BIOS: American Megatrends Inc. 2501 06/24/2015\nMotherboard: ASUSTeK COMPUTER INC. Z97-A-USB31\nProcessor: Intel® Core™ i5-4690K CPU @ 3.50GHz\nPercentage of memory in use: 54%\nTotal physical RAM: 8131.86 MB\nAvailable physical RAM: 3731.77 MB\nTotal Virtual: 9411.86 MB\nAvailable Virtual: 3785.61 MB","html":"

BIOS: American Megatrends Inc. 2501 06/24/2015\nMotherboard: ASUSTeK COMPUTER INC. Z97-A-USB31\nProcessor: Intel® Core™ i5-4690K CPU @ 3.50GHz\nPercentage of memory in use: 54%\nTotal physical RAM: 8131.86 MB\nAvailable physical RAM: 3731.77 MB\nTotal Virtual: 9411.86 MB\nAvailable Virtual: 3785.61 MB

"},{"id":"text-111","type":"text","heading":"","plain_text":"==================== Drives ================================","html":"

==================== Drives ================================

"},{"id":"text-112","type":"text","heading":"","plain_text":"Drive c: () (Fixed) (Total:134.71 GB) (Free:30.03 GB) NTFS ==>[drive with boot components (obtained from BCD)]\nDrive d: (win) (Fixed) (Total:830.08 GB) (Free:461.4 GB) NTFS","html":"

Drive c: () (Fixed) (Total:134.71 GB) (Free:30.03 GB) NTFS ==>[drive with boot components (obtained from BCD)]\nDrive d: (win) (Fixed) (Total:830.08 GB) (Free:461.4 GB) NTFS

"},{"id":"text-113","type":"text","heading":"","plain_text":"\\?Volume7e1de73d-0000-0000-0000-90ad21000000 () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS","html":"

\\?Volume7e1de73d-0000-0000-0000-90ad21000000 () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS

"},{"id":"text-114","type":"text","heading":"","plain_text":"==================== MBR & Partition Table ====================","html":"

==================== MBR & Partition Table ====================

"},{"id":"text-115","type":"text","heading":"","plain_text":"==========================================================\nDisk: 0 (Size: 232.9 GB) (Disk ID: 7E1DE73D)\nPartition 1: (Active) – (Size=134.7 GB) – (Type=07 NTFS)\nPartition 2: (Not Active) – (Size=530 MB) – (Type=27)\nPartition 3: (Not Active) – (Size=14.9 GB) – (Type=82)\nPartition 4: (Not Active) – (Size=82.8 GB) – (Type=05)","html":"

==========================================================\nDisk: 0 (Size: 232.9 GB) (Disk ID: 7E1DE73D)\nPartition 1: (Active) – (Size=134.7 GB) – (Type=07 NTFS)\nPartition 2: (Not Active) – (Size=530 MB) – (Type=27)\nPartition 3: (Not Active) – (Size=14.9 GB) – (Type=82)\nPartition 4: (Not Active) – (Size=82.8 GB) – (Type=05)

"},{"id":"text-116","type":"text","heading":"","plain_text":"==========================================================\nDisk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: CC16B7FB)\nPartition 1: (Not Active) – (Size=931.5 GB) – (Type=05)","html":"

==========================================================\nDisk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: CC16B7FB)\nPartition 1: (Not Active) – (Size=931.5 GB) – (Type=05)

"},{"id":"text-117","type":"text","heading":"","plain_text":"==================== End of Addition.txt =======================","html":"

==================== End of Addition.txt =======================

"},{"id":"text-118","type":"text","heading":"","plain_text":"Click to rate this post!\n \n [Total: 0 Average: 0]","html":"

Click to rate this post!\n \n [Total: 0 Average: 0]

"}],"sections":[{"id":"text-1","heading":"Text","content":"Je ne sais pas si le vol de carte de crédit est lié au malware ou au phishing, mais il y a eu plusieurs achats aujourd'hui non autorisés sur ma carte de crédit. Je n'ai pas perdu ma carte et je n'utilise vraiment ma carte que sur des sites autorisés, c'est comme la première fois que je reçois sans que je comprenne vraiment pourquoi ni comment. Ce qui est plus intéressant, c'est qu'ils ont utilisé mon crédit dans des magasins physiques du Maryland où je suis situé, mais je n'ai pas perdu ma carte de crédit, alors comment ont-ils réussi à l'utiliser dans des magasins sans carte ou même avec la pompe à essence?"},{"id":"text-2","heading":"Text","content":"Mais de toute façon, je fais cela pour vérifier s'il y a des logiciels malveillants sur mon processeur et peut-être que je trouverai plus de réponses et c'est bien que je le fasse aussi parce que moi et mes cousins ​​avons été sur des sites qui ne sont pas sûr dans le passé."},{"id":"text-3","heading":"Text","content":"Journal FRST:"},{"id":"text-4","heading":"Text","content":"Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 22-04-2020\nCommandé par abang (administrateur) sur DESKTOP-VTQ0750 (ASUS All Series) (23-04-2020 18:25:30)\nExécution à partir de D: Desktop\nProfils chargés: abang (Profils disponibles: abang & user & sesay & ibang)\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal"},{"id":"text-5","heading":"Text","content":"==================== Processus (sur liste blanche) ================="},{"id":"text-6","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)"},{"id":"text-7","heading":"Text","content":"() [File not signed] C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe\n(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe\n(Adobe Inc. -> Adobe Systems, Incorporated) C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe\n(ASUSTeK Computer Inc. ->) [File not signed] C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe\n(ASUSTeK Computer Inc. ->) C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe\n(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe\n(DTS, Inc. -> DTS, Inc) C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware DeviceRedirectionCommon ftnlsv.exe\n(FabulaTech, LLP ->) C: Program Files Common Files VMware ScannerRedirection ftscanmgrhv.exe\n(FabulaTech, LLP -> VMware) C: Program Files Common Files VMware SerialPortRedirection Client vmwsprrdpwks.exe\n(Le fichier est en cours d'utilisation) [File not signed ?] C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Produits de développement logiciel Intel® ->) C: Program Files Intel Driver Update Utility SUR SurSvc.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware MBAMService.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware mbamtray.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe Calculator.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.XboxGamingOverlay_5.120.4062.0_x64__8wekyb3d8bbwe GameBar.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.ZuneMusic_10.20022.11011.0_x64__8wekyb3d8bbwe Music.UI.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows ImmersiveControlPanel SystemSettings.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 MsMpEng.exe\n(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 NisSrv.exe\n(NVIDIA Corporation -> Node.js) C: Program Files (x86) NVIDIA Corporation NvNode NVIDIA Web Helper.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvContainer nvcontainer.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA Share.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation ShadowPlay nvsphelper64.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jucheck.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jusched.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkNGUI64.exe\n(Scarlet.Crush Productions) [File not signed] C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) Common Files VMware USB vmware-usbarbitrator64.exe\n(VMware, Inc. -> VMware, Inc.) C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe\n(Wondershare Technology Co., Ltd -> Wondershare) C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe"},{"id":"text-8","heading":"Text","content":"==================== Registre (liste blanche) ==================="},{"id":"text-9","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)"},{"id":"text-10","heading":"Text","content":"HKLM … Run: [AdobeGCInvoker-1.0] => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nHKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8483032 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM … Run: [RtHDVBg_DTS] => C: Program Files Realtek Audio HDA RAVBg64.exe [1393880 2015-12-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [SunJavaUpdateSched] => C: Program Files (x86) Fichiers communs Java Java Update jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)\nHKLM-x32 … Exécuter: [Wondershare Helper Compact.exe] => C: Program Files (x86) Fichiers communs Wondershare Wondershare Helper Compact WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co., Ltd -> Wondershare)\nHKU S-1-5-21-3055999371-879555700-2068610542-1001 … Run: [SmashLadder Dolphin Launcher] => C: Users abang AppData Local Programs smashladder-dolphin-launcher SmashLadder Dolphin Launcher.exe [67653120 2019-11-02] (Anther Sledge) [File not signed]\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.113 Installer chrmstp.exe [2020-04-21] (Google LLC -> Google LLC)\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage ScpToolkit Tray Notifications.lnk [2019-01-01]\nShortcutTarget: ScpToolkit Tray Notifications.lnk -> C: Program Files Nefarius Software Solutions ScpToolkit ScpTrayApp.exe (Scarlet.Crush Productions) [File not signed]\nDémarrage: C: ProgramData Microsoft Windows Menu Démarrer Programmes Démarrage TP-LINK Wireless Configuration Utility.lnk [2018-05-11]\nShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C: Program Files (x86) TP-LINK TP-LINK Wireless Configuration Utility TWCU.exe () [File not signed]\nGroupPolicy: Restriction? <==== ATTENTION"},{"id":"text-11","heading":"Text","content":"==================== Tâches planifiées (liste blanche) ============"},{"id":"text-12","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-13","heading":"Text","content":"Tâche: 06EFEDF1-7A16-4649-BB3B-8109A7E3A27D – System32 Tasks NvTmRep_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmRep.exe [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 0C04A11A-9B68-4A59-8AE2-81FEC4F684B1 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1741576 2016-03-17] (Logiciel Intel® -> Intel Corporation)\nTâche: 10F16CA9-0D75-4E08-8BB4-E4768551F318 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: 24C76DD3-A1CA-454E-B9E2-536CAE2B09EF – System32 Tasks Red Giant Link => C: Program [Argument = Files (x86)Red Giant LinkRed Giant Link.exe]\nTâche: 2CC605CE-6729-4C80-A5CD-F3B611FD7E1C – System32 Tasks Adobe Flash Player Updater => C: WINDOWS SysWoW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 3DC8E720-2002-4630-AB1C-86EA42BB5CAB – System32 Tasks Microsoft Windows Windows Defender Windows Defender Verification => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 420971E1-EDA3-467D-B70D-7D98608FCE40 – System32 Tasks updater => C: Program Files Nefarius Software Solutions ScpToolkit ScpUpdater.exe [464384 2016-01-10] (Solutions logicielles Nefarius) [File not signed]\nTâche: 48DE21F0-243D-41E8-9FEE-7FB0BDBCAD16 – System32 Tasks Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C: Program Files Bitdefender Agent WatchDog.exe\nTâche: 4BAA8084-3CDA-4287-AD83-6B0D6F9AEA9C – System32 Tasks NvProfileUpdaterDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 54C95A92-2879-4CEA-9BDD-5DC99DBB78FC – System32 Tasks AdobeGCInvoker-1.0 => C: Program Files (x86) Common Files Adobe AdobeGCClient AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nTâche: 591A6C13-47E6-4DAA-9F87-EC4DF44DF3DA – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cleanup => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun. EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: 6C107948-5039-4FAB-BEA0-B155B37DFE24 – System32 Tasks USER_ESRV_SVC_QUEENCREEK => "C: WINDOWS System32 Wscript.exe" // B // NoLogo "C: Program Files Intel SUR QUEENCREEK task.vbs "\nTâche: 76CA6106-FA92-4408-803D-4DF916374B54 – System32 Tasks AdobeAAMUpdater-1.0-MicrosoftAccount-abangur10426@students.pgcc.edu => C: Program Files (x86) Common Files Adobe OOBE PDApp UWA UpdaterStartupUtility.exe\nTâche: 7DBD39AF-150F-485A-847E-74A9AC31B769 – System32 Tasks NVIDIA GeForce Experience SelfUpdate_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA GeForce Experience.exe [1931064 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 83906FA5-24D1-4925-84C4-277C804D9A9E – System32 Tasks Adobe Flash Player PPAPI Notifier => C: WINDOWS SysWOW64 Macromed Flash FlashUtil32_32_0_0_363_pepper.exe [1454136 2020-04-14] (Adobe Inc. -> Adobe)\nTâche: 8DC800AC-09FF-4A00-871D-0350D0EB1555 – System32 Tasks NvProfileUpdaterOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUp64 [660792 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 9763F846-397A-480C-8F20-3D4E42EE93FE – System32 Tasks Adobe Acrobat Update Task => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: 9FFECADB-B591-4E6A-ACB0-DB2EDA7CE390 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Scheduled Scan => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: BA23C37B-CE1C-4754-86B8-D949EE954A95 – System32 Tasks NvTmMon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmMon.exe [525104 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: BCE93CD1-8D9D-4405-A966-CFDA6247D350 – System32 Tasks NvNodeLauncher_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NvNode nvnodejs [969016 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: CB54D4D0-DA92-4389-995B-FE64BA5E0CBF – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-12-03] (Google Inc -> Google Inc.)\nTâche: E08D6E8F-0488-41F3-91E1-4ED22B333DA2 – System32 Tasks NvDriverUpdateCheckDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvContainer nvc [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: EBF69801-5958-4547-9B2D-5BD49A5CFFD6 – System32 Tasks Microsoft Windows Windows Defender Windows Defender Cache Maintenance => C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MpCmdRun .EXE [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nTâche: FF901B38-47D0-48EF-8BC2-3A93BD853831 – System32 Tasks NvTmRepOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTm [746800 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)"},{"id":"text-14","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)"},{"id":"text-15","heading":"Text","content":"==================== Internet (liste blanche) ===================="},{"id":"text-16","heading":"Text","content":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)"},{"id":"text-17","heading":"Text","content":"Hôtes: 127.0.0.1 view-localhost # view localhost server\nTcpip Paramètres: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces 1a078130-89b1-47d0-b730-4f840d58f0e0: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces a09096a6-9f70-4e4b-97ba-0b8487bbab10: [DhcpNameServer] 192.168.0.1"},{"id":"text-18","heading":"Text","content":"Internet Explorer:\n==================\nBHO-x32: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files (x86) Java jre1.8.0_201 bin ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nBHO-x32: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files (x86) Java jre1.8.0_201 bin jp2ssv.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nDPF: HKLM-x32 414FB93D-DEDD-4FEF-AD7F-167992EBDB52 hxxps: //portal.ssl.imsweb.com/SNX/CSHELL/extender.cab\nHandler-x32: cdl – 3dd53d40-7b8b-11D0-b013-00aa0059ce02 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: fichier – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: ftp – 79eac9e3-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: gopher – 79eac9e4-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: http – 79eac9e2-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: https – 79eac9e5-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: local – 79eac9e7-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nHandler-x32: mk – 79eac9e6-baf9-11ce-8c82-00aa004ba90b – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFiltre: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Windows System32 urlmon.dll [2020-03-11] (Microsoft Windows -> Microsoft Corporation)\nFilter-x32: Gestionnaire d'installation de classe – 32B533BB-EDAE-11d0-BD5A-00AA00B92AF1 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: dégonfler – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: gzip – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]\nFilter-x32: lzdhtml – 8f6b0360-b80d-11d0-a9b3-006097942311 – C: Scheduling Manager Scheduling Manager Tutorial URLMON.DLL [2002-08-29] (Microsoft Corporation) [File not signed]"},{"id":"text-19","heading":"Text","content":"Bord: \n======\nDownloadDir: D: Téléchargements"},{"id":"text-20","heading":"Text","content":"FireFox:\n========\nFF DefaultProfile: tqnxf3yx.default\nFF ProfilePath: C: Users abang AppData Roaming Mozilla Firefox Profiles tqnxf3yx.default [2020-03-18]\nFF Plugin-x32: @ java.com / DTPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin dtplugin npDeployJava1.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ java.com / JavaPlugin, version = 11.201.2 -> C: Program Files (x86) Java jre1.8.0_201 bin plugin2 npjp2.dll [2019-02-01] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: Adobe Reader -> C: Program Files (x86) Adobe Acrobat Reader DC Reader AIR nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/thinkorswim -> C: Program Files thinkorswim npthinkorswim.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)\nPlugin FF HKU S-1-5-21-3055999371-879555700-2068610542-1001: tdameritrade.com/tossc -> C: Program Files thinkorswim nptossc.dll [2019-02-15] (TD Ameritrade -> TD Ameritrade)"},{"id":"text-21","heading":"Text","content":"Chrome: \n=======\nProfil CHR: C: Users abang AppData Local Google Chrome User Data Default [2020-04-23]\nCHR DownloadDir: D: Téléchargements\nNotifications CHR: Par défaut -> hxxps: //videoconverter.wondershare.com; hxxps: //www.facebook.com; hxxps: //www.livescience.com\nCHR StartupUrls: Par défaut -> "hxxps: //feedly.com/i/my", "hxxps: //www.koyfin.com/home"\nExtension CHR: (Google Drive) – C: Users abang AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2015-12-03]\nExtension CHR: (Lecture HLS native) – C: Users abang AppData Local Google Chrome User Data Default Extensions bfgdekjhniododjcobllghembkdpdkea [2017-10-21]\nExtension CHR: (YouTube) – C: Users abang AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-03]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users abang AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-06]\nExtension CHR: (Recherche Google) – C: Users abang AppData Local Google Chrome User Data Default Extensions coobgpohoikkiipiblmjeljniedjpjpf [2015-12-03]\nExtension CHR: (Portefeuille Bitdefender) – C: Users abang AppData Local Google Chrome User Data Default Extensions dhhejlifdlcgcmogbggeomfodgklfaem [2015-12-03]\nExtension CHR: (Paiements Chrome Web Store) – C: Users abang AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]\nExtension CHR: (Gmail) – C: Users abang AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-25]\nExtension CHR: (Chrome Media Router) – C: Users abang AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-21]\nProfil CHR: C: Users abang AppData Local Google Chrome User Data System Profile [2019-02-06]\nCHR HKLM-x32 … Chrome Extension: [dhhejlifdlcgcmogbggeomfodgklfaem]\nCHR HKLM-x32 … Chrome Extension: [efaidnbmnnnibpcajpcglclefindmkaj]"},{"id":"text-22","heading":"Text","content":"==================== Services (liste blanche) ==================="},{"id":"text-23","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-24","heading":"Text","content":"R2 AGMService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGMService.exe [3374160 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 AGSService; C: Program Files (x86) Common Files Adobe AdobeGCClient AGSService.exe [3103824 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)\nR2 asComSvc; C: Program Files (x86) ASUS AXSP 1.01.02 atkexComSvc.exe [936728 2015-12-01] (ASUSTeK Computer Inc. ->)\nR2 AsSysCtrlService; C: Program Files (x86) ASUS AsSysCtrlService 1.00.22 AsSysCtrlService.exe [1360016 2015-12-03] (ASUSTeK Computer Inc. ->) [File not signed]\nR2 client_service; C: Program Files (x86) VMware VMware Horizon View Client ClientService horizon_client_service.exe [442840 2020-03-30] (VMware, Inc. -> VMware, Inc.)\nR2 cpextender; C: Program Files (x86) CheckPoint SSL Network Extender slimsvc.exe [367984 2019-09-19] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nR2 Ds3Service; C: Program Files Nefarius Software Solutions ScpToolkit ScpService.exe [389632 2016-01-10] (Le fichier est en cours d'utilisation) [File not signed ?]\nR2 DTSAudioSvc; C: Program Files Realtek Audio HDA DTSU2PAuSrv64.exe [240576 2015-12-03] (DTS, Inc. -> DTS, Inc)\nS3 ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 ftnlsv3hv; C: Program Files Fichiers communs VMware DeviceRedirectionCommon ftnlsv.exe [280176 2020-02-25] (FabulaTech, LLP ->)\nR2 ftscanmgrhv; C: Program Files Fichiers communs VMware ScannerRedirection ftscanmgrhv.exe [4369520 2020-02-27] (FabulaTech, LLP ->)\nR2 MBAMService; C: Program Files Malwarebytes Anti-Malware mbamservice.exe [6933272 2020-03-10] (Malwarebytes Inc -> Malwarebytes)\nR2 NvContainerLocalSystem; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvContainerNetworkService; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nService S4 PST; C: Program Files (x86) Motorola MotForwardDaemon ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]\nService S4 Razer Game Scanner; C: Program Files (x86) Razer Razer Services GSS GameScannerService.exe [189264 2016-09-24] (Razer USA Ltd. ->)\nR2 SystemUsageReportSvc_QUEENCREEK; C: Program Files Intel Driver Update Utility SUR SurSvc.exe [156928 2016-11-17] (Produits de développement logiciel Intel® ->)\nS3 USER_ESRV_SVC_QUEENCREEK; C: Program Files Intel SUR QUEENCREEK esrv_svc.exe [805632 2016-11-17] (Produits de développement logiciel Intel® ->)\nR2 vmwsprrdpwks; C: Program Files Fichiers communs VMware SerialPortRedirection Client vmwsprrdpwks.exe [459888 2020-02-20] (FabulaTech, LLP -> VMware)\nR3 WdNisSvc; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 NisSrv.exe [3294680 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nR2 WinDefend; C: ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MsMpEng.exe [103168 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)\nS3 WsDrvInst; C: Program Files (x86) Wondershare Video Converter Ultimate Transfer DriverInstall.exe [107760 2019-09-26] (Wondershare Technology Co., Ltd -> Wondershare)\nR2 NVDisplay.ContainerLocalSystem; "C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C: ProgramData NVIDIA NVDisplay.ContainerLocalSystem.log" -l 3 -d "C: Fichiers programme NVIDIA Corporation Display.NvContainer plugins LocalSystem "-r -p 30000 \nR2 NvTelemetryContainer; "C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C: ProgramData NVIDIA NvTelemetryContainer.log" -l 3 -d "C: Program Files (x86) NVIDIA Corporation NvTelemetry plugins "-r"},{"id":"text-25","heading":"Text","content":"===================== Pilotes (sur liste blanche) ==================="},{"id":"text-26","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-27","heading":"Text","content":"S3 AppleKmdfFilter; C: WINDOWS System32 drivers AppleKmdfFilter.sys [20640 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nS3 AppleLowerFilter; C: WINDOWS System32 drivers AppleLowerFilter.sys [35560 2018-04-26] (Version WDKTestCert, 131474841775766162 -> Apple Inc.)\nR1 AsIO; C: Windows SysWow64 drivers AsIO.sys [15232 2015-12-01] (ASUSTeK Computer Inc. ->)\nR3 athr; C: WINDOWS System32 drivers athw8x.sys [4233728 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-19] (Microsoft Corporation) [File not signed]\nR1 ESProtectionDriver; C: WINDOWS system32 drivers mbae64.sys [153312 2020-04-21] (Malwarebytes Corporation -> Malwarebytes)\nS3 libusbK; C: WINDOWS System32 drivers libusbK.sys [47200 2018-09-15] (Travis Lee Robinson -> hxxp: //libusb-win32.sourceforge.net)\nR2 MBAMChameleon; C: WINDOWS System32 Drivers MbamChameleon.sys [214496 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nS0 MbamElam; C: WINDOWS System32 DRIVERS MbamElam.sys [20936 2020-03-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)\nR3 MBAMFarflt; C: WINDOWS System32 DRIVERS farflt.sys [195432 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMProtection; C: WINDOWS system32 DRIVERS mbam.sys [73584 2020-04-23] (Malwarebytes Corporation -> Malwarebytes)\nR3 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [248968 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMWebProtection; C: WINDOWS system32 DRIVERS mwac.sys [124560 2020-04-21] (Malwarebytes Inc -> Malwarebytes)\nR3 nvlddmkm; C: WINDOWS System32 DriverStore FileRepository nv_dispi.inf_amd64_db678424d2641c3d nvlddmkm.sys [22094728 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvStreamKms; C: Program Files NVIDIA Corporation NvStreamSrv NvStreamKms.sys [31024 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvad_WaveExtensible; C: WINDOWS system32 drivers nvvad64v.sys [59240 2017-12-14] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvhci; C: WINDOWS System32 drivers nvvhci.sys [57928 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 rzendpt; C: WINDOWS System32 drivers rzendpt.sys [50392 2015-08-13] (Razer Inc. -> Razer Inc)\nR2 rzpmgrk; C: WINDOWS system32 drivers rzpmgrk.sys [44144 2016-09-16] (Razer Inc. -> Razer, Inc.)\nR2 rzpnk; C: WINDOWS system32 drivers rzpnk.sys [137840 2016-10-08] (Razer Inc. -> Razer, Inc.)\nR3 ScpVBus; C: WINDOWS System32 drivers ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)\nS3 semav6msr64; C: WINDOWS system32 drivers semav6msr64.sys [21984 2016-10-18] (Signature de code Intel® externe ->)\nS3 sixaxis; C: WINDOWS System32 drivers sixaxis.sys [28424 2018-09-15] (Sony Computer Entertainment Inc. -> Sony Computer Entertainment Inc.)\nS3 usbrndis6; C: WINDOWS System32 drivers usb80236.sys [24576 2019-09-19] (Microsoft Windows -> Microsoft Corporation)\nR3 VNA; C: WINDOWS system32 DRIVERS vna.sys [161256 2016-08-30] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nS0 WdBoot; C: WINDOWS System32 drivers wd WdBoot.sys [45960 2020-03-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nR0 WdFilter; C: WINDOWS System32 drivers wd WdFilter.sys [391392 2020-03-24] (Microsoft Windows -> Microsoft Corporation)\nR3 WdNisDrv; C: WINDOWS System32 drivers wd WdNisDrv.sys [59104 2020-03-24] (Microsoft Windows -> Microsoft Corporation)"},{"id":"text-28","heading":"Text","content":"==================== NetSvcs (liste blanche) ===================="},{"id":"text-29","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-30","heading":"Text","content":"==================== Un mois (créé) ==================="},{"id":"text-31","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)"},{"id":"text-32","heading":"Text","content":"2020-04-21 12:30 – 2020-04-23 08:34 – 000073584 _____ (Malwarebytes) C: WINDOWS system32 Drivers mbam.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000195432 _____ (Malwarebytes) C: WINDOWS system32 Drivers farflt.sys\n2020-04-21 12:30 – 2020-04-21 12:30 – 000124560 _____ (Malwarebytes) C: WINDOWS system32 Drivers mwac.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 022636544 _____ (Microsoft Corporation) C: WINDOWS system32 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 008013824 _____ (Microsoft Corporation) C: WINDOWS system32 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007756800 _____ (Microsoft Corporation) C: WINDOWS system32 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 006523048 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004611584 _____ (Microsoft Corporation) C: WINDOWS system32 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004538880 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 wininet.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800640 _____ (Microsoft Corporation) C: WINDOWS system32 WinSAT.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 002800128 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 win32kfull.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001665216 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 user32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001545216 _____ (Microsoft Corporation) C: WINDOWS system32 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001477112 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 dcomp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001458688 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 GdiPlus.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001413840 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 gdi32full.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001397576 _____ (Microsoft Corporation) C: WINDOWS system32 hvix64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001151816 _____ (Microsoft Corporation) C: WINDOWS system32 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001077064 _____ (Microsoft Corporation) C: WINDOWS system32 hvax64.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 001013000 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmpeg2srcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 001008128 _____ (Microsoft Corporation) C: WINDOWS system32 StorSvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000983040 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmkvsrcsnk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000868864 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 windowsperformancerecordercontrol.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000836608 _____ (Microsoft Corporation) C: WINDOWS system32 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000835584 _____ (Microsoft Corporation) C: WINDOWS system32 WorkfoldersControl.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000783480 _____ (Microsoft Corporation) C: WINDOWS system32 tcblaunch.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000775696 _____ (Microsoft Corporation) C: WINDOWS system32 securekernel.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000768528 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 winhttp.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000701440 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Mirage.Internal.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000689152 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 CPFilters.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000686080 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 jscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000673464 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 fontdrvhost.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000668672 _____ (Microsoft Corporation) C: WINDOWS system32 wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000665088 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 netlogon.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000647680 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Internal.Management.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000555008 _____ (Microsoft Corporation) C: WINDOWS system32 appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-16 08:44 – 2020-04-16 08:44 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-16 08:44 – 2020-04-16 08:44 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-16 08:44 – 2020-04-16 08:44 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-16 08:44 – 2020-04-16 08:44 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-16 08:43 – 2020-04-16 08:44 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-16 08:43 – 2020-04-16 08:43 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-16 08:43 – 2020-04-16 08:43 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-16 08:43 – 2020-04-16 08:43 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-16 08:43 – 2020-04-16 08:43 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-16 08:35 – 2020-04-16 08:36 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-16 08:35 – 2020-04-16 08:36 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-07 10:56 – 2020-04-21 12:30 – 000248968 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbamswissarmy.sys\n2020-04-07 10:55 – 2020-04-07 10:55 – 000001411 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsVMware Horizon Client.lnk\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesVMware\n2020-04-07 10:55 – 2020-04-07 10:55 – 000000000 ____D C:Program FilesCommon FilesThinPrint\n2020-04-07 10:55 – 2020-03-04 08:12 – 000083264 _____ (VMware, Inc.) C:WINDOWSsystem32Drivershcmon.sys"},{"id":"text-33","heading":"Text","content":"==================== One month (modified) =================="},{"id":"text-34","heading":"Text","content":"(If an entry is included in the fixlist, the file/folder will be moved.)"},{"id":"text-35","heading":"Text","content":"2020-04-23 18:25 – 2019-01-26 15:54 – 000000000 ____D C:FRST\n2020-04-23 18:14 – 2019-09-19 18:23 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-04-23 18:14 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-04-23 13:29 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32FxsTmp\n2020-04-23 13:29 – 2017-06-26 10:30 – 000000000 ____D C:UsersabangAppDataRoamingVMware\n2020-04-23 12:25 – 2017-06-05 20:31 – 000000000 ____D C:ProgramDataNVIDIA\n2020-04-23 12:22 – 2019-09-04 22:54 – 000000000 ____D C:UsersabangAppDataRoamingSmashLadder Dolphin Launcher\n2020-04-23 08:40 – 2019-09-19 18:37 – 000840852 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-04-23 08:40 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-04-23 08:37 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-04-23 08:34 – 2019-09-19 18:36 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-04-22 23:52 – 2015-12-03 23:22 – 000000000 ____D C:Program Files (x86)Steam\n2020-04-22 22:54 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataRoamingdiscord\n2020-04-22 01:37 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataRoamingSlack\n2020-04-22 00:25 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-04-21 19:55 – 2015-12-03 03:50 – 000002301 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-04-21 12:30 – 2020-03-10 22:27 – 000214496 _____ (Malwarebytes) C:WINDOWSsystem32DriversMbamChameleon.sys\n2020-04-21 12:30 – 2019-08-31 13:22 – 000153312 _____ (Malwarebytes) C:WINDOWSsystem32Driversmbae64.sys\n2020-04-20 21:43 – 2019-11-07 03:48 – 000000000 ____D C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsSlack Technologies Inc\n2020-04-20 21:43 – 2017-12-28 11:58 – 000000000 ____D C:UsersabangAppDataLocalslack\n2020-04-20 21:43 – 2016-09-07 01:23 – 000000000 ____D C:UsersabangAppDataLocalSquirrelTemp\n2020-04-18 00:44 – 2019-09-19 18:27 – 000000000 ____D C:Usersabang\n2020-04-17 08:21 – 2019-09-19 18:23 – 000328360 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-16 23:03 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-16 23:03 – 2019-03-19 00:37 – 001572864 _____ C:WINDOWSsystem32configBBI\n2020-04-16 08:46 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp\n2020-04-16 08:43 – 2015-07-10 09:20 – 000410838 __RSH C:bootmgr\n2020-04-15 14:50 – 2019-09-19 18:36 – 000003378 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-3055999371-879555700-2068610542-1001\n2020-04-15 14:50 – 2019-09-19 18:27 – 000002363 _____ C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-04-15 14:50 – 2015-12-01 22:57 – 000000000 ___RD C:UsersabangOneDrive\n2020-04-14 16:52 – 2019-09-19 18:36 – 000004552 _____ C:WINDOWSsystem32TasksAdobe Flash Player PPAPI Notifier\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSysWOW64Macromed\n2020-04-14 16:52 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32Macromed\n2020-04-11 17:55 – 2016-03-29 00:15 – 000000000 ____D C:UsersabangAppDataLocalElevatedDiagnostics\n2020-04-07 10:55 – 2015-12-03 03:56 – 000000000 ____D C:ProgramDataPackage Cache\n2020-04-02 08:28 – 2015-12-03 03:56 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-03-28 20:11 – 2018-03-03 20:27 – 000000000 ____D C:UsersabangAppDataLocalPlaceholderTileLogoFolder\n2020-03-28 18:59 – 2017-12-01 11:11 – 000000000 ____D C:UsersabangAppDataLocalPackages\n2020-03-26 21:57 – 2018-09-07 17:28 – 000000000 ____D C:UsersabangAppDataLocalD3DSCache\n2020-03-24 23:33 – 2018-03-03 21:08 – 000000000 ____D C:WINDOWSsystem32Driverswd"},{"id":"text-36","heading":"Text","content":"==================== Files in the root of some directories ========"},{"id":"text-37","heading":"Text","content":"2019-12-15 15:48 – 2019-12-22 22:26 – 000026862 _____ () C:UsersabangAppDataLocaldump.log\n2018-09-27 17:51 – 2018-09-27 17:51 – 000000000 _____ () C:UsersabangAppDataLocaloobelibMkey.log\n2016-01-20 08:00 – 2017-07-06 12:02 – 000001832 _____ () C:UsersabangAppDataLocalSLC_abang.prx"},{"id":"text-38","heading":"Text","content":"==================== SigCheck ============================"},{"id":"text-39","heading":"Text","content":"(There is no automatic fix for files that do not pass verification.)"},{"id":"text-40","heading":"Text","content":"==================== End of FRST.txt ========================"},{"id":"text-41","heading":"Text","content":"Additional log:"},{"id":"text-42","heading":"Text","content":"Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-04-2020\nRan by abang (23-04-2020 18:26:33)\nRunning from D:Desktop\nWindows 10 Home Version 1903 18362.778 (X64) (2019-09-19 22:36:33)\nMode de démarrage: Normal\n=========================================================="},{"id":"text-43","heading":"Text","content":"==================== Accounts: ============================="},{"id":"text-44","heading":"Text","content":"abang (S-1-5-21-3055999371-879555700-2068610542-1001 – Administrator – Enabled) => C:Usersabang\nAdministrator (S-1-5-21-3055999371-879555700-2068610542-500 – Administrator – Disabled)\nakim9 (S-1-5-21-3055999371-879555700-2068610542-1006 – Limited – Disabled)\nDefaultAccount (S-1-5-21-3055999371-879555700-2068610542-503 – Limited – Disabled)\nGuest (S-1-5-21-3055999371-879555700-2068610542-501 – Limited – Disabled)\nibang (S-1-5-21-3055999371-879555700-2068610542-1007 – Limited – Enabled) => C:Usersibang\nsesay (S-1-5-21-3055999371-879555700-2068610542-1005 – Limited – Enabled) => C:Userssesay\nuser (S-1-5-21-3055999371-879555700-2068610542-1004 – Limited – Enabled) => C:Usersuser\nWDAGUtilityAccount (S-1-5-21-3055999371-879555700-2068610542-504 – Limited – Disabled)"},{"id":"text-45","heading":"Text","content":"==================== Security Center ========================"},{"id":"text-46","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed.)"},{"id":"text-47","heading":"Text","content":"AV: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Windows Defender (Enabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46"},{"id":"text-48","heading":"Text","content":"==================== Installed Programs ======================"},{"id":"text-49","heading":"Text","content":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)"},{"id":"text-50","heading":"Text","content":". . . (HKLM…DCAFF63A-A26F-4809-A00D-27AD6733ACB3) (Version: 2.1.28.3 – Intel) Hidden\n. . . (HKLM-x32…C7B0C705-9987-44A2-B495-4101DAEDBFE0) (Version: 2.6.2.4 – Intel) Hidden\n4K YouTube to MP3 3.8 (HKLM…2BD7492A-592E-4DAB-8BEC-68550950E32D) (Version: 3.8.3.3092 – Open Media LLC)\n7-Zip 15.14 (x64) (HKLM…7-Zip) (Version: 15.14 – Igor Pavlov)\nAdobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-1033-7B44-AC0F074E4100) (Version: 20.006.20042 – Adobe Systems Incorporated)\nAdobe Flash Player 32 PPAPI (HKLM-x32…Adobe Flash Player PPAPI) (Version: 32.0.0.363 – Adobe)\nASIO4ALL (HKLM-x32…ASIO4ALL) (Version: 2.14 – Michael Tippach)\nBattle.net (HKLM-x32…Battle.net) (Version:  – Blizzard Entertainment)\nCheck Point Deployment Shell (HKLM-x32…9ebead35-314b-4255-852b-bd8c9e3f2e56) (Version: 8.00.0000 – Check Point)\nCheck Point SSL Network Extender Service (HKLM-x32…392bb1dc-b04e-4f4e-866c-96748b20397e) (Version: 7.01.0000 – CheckPoint)\nDiablo III (HKLM-x32…Diablo III) (Version:  – Blizzard Entertainment)\nDiscord (HKUS-1-5-21-3055999371-879555700-2068610542-1001…Discord) (Version: 0.0.306 – Discord Inc.)\nDisplayDriverAnalyzer (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_DisplayDriverAnalyzer) (Version: 391.01 – NVIDIA Corporation) Hidden\nDolphin (HKLM-x32…Dolphin) (Version: 5.0 – Dolphin Team)\nFL Studio 20 (HKLM-x32…FL Studio 20) (Version:  – Image-Line)\nFL Studio ASIO (HKLM-x32…FL Studio ASIO) (Version:  – Image-Line)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.113 – Google LLC)\nAide à la mise à jour Google (HKLM-x32 … 60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Masqué\nIntel® C++ Redistributables on Intel® 64 (HKLM-x32…F70BCE36-25F2-4475-A918-6209B3D85BF3) (Version: 15.0.179 – Intel Corporation)\nIntel® Chipset Device Software (HKLM-x32…619e726e-d2b4-4e28-9568-c964fd81ee6c) (Version: 10.1.1.14 – Intel® Corporation) Hidden\nIntel® Network Connections 20.1.2019.0 (HKLM…PROSetDX) (Version: 20.1.2019.0 – Intel)\nIntel® Driver Update Utility (HKLM-x32…66307462-7d19-4f1a-af82-aa04b6017f05) (Version: 2.6.2.4 – Intel)\nJava 8 Update 201 (HKLM-x32…26A24AE4-039D-4CA4-87B4-2F32180201F0) (Version: 8.0.2010.9 – Oracle Corporation)\nJava SE Development Kit 8 Update 121 (64-bit) (HKLM…64A3A4F4-B792-11D6-A78A-00B0D0180121) (Version: 8.0.1210.13 – Oracle Corporation)\nMalwarebytes version 4.1.0.56 (HKLM…35065F43-4BB2-439A-BFF7-0F1014F2E0CD_is1) (Version: 4.1.0.56 – Malwarebytes)\nMicrosoft OneDrive (HKUS-1-5-21-3055999371-879555700-2068610542-1001…OneDriveSetup.exe) (Version: 19.232.1124.0012 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (HKLM-x32 … 7299052b-02a4-4627-81f2-1818da5d550d) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2005 redistribuable (x64) (HKLM … 071c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.4148 (HKLM … 4B6C7001-C7D6-3710-913E-5BC23FCE91E6) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM … 5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32 … 9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32 … 1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C ++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32 … 9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x64 redistribuable – 10.0.40219 (HKLM … 1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2010 x86 redistribuable – 10.0.40219 (HKLM-x32 … F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32 … ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32 … 33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32 … f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C ++ 2013 redistribuable (x86) – 12.0.40660 (HKLM-x32 … 61087a79-ac85-455c-934d-1fa22cc64f36) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x64) – 14.24.28127 (HKLM-x32…282975d8-55fe-4991-bbbb-06a72581ce58) (Version: 14.24.28127.4 – Microsoft Corporation)\nMicrosoft Visual C++ 2015-2019 Redistributable (x86) – 14.24.28127 (HKLM-x32…e31cb1a4-76b5-46a5-a084-3fa419e82201) (Version: 14.24.28127.4 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nMozilla Firefox 73.0.1 (x64 en-US) (HKLM…Mozilla Firefox 73.0.1 (x64 en-US)) (Version: 73.0.1 – Mozilla)\nMozilla Maintenance Service (HKLM-x32…MozillaMaintenanceService) (Version: 73.0.1.7352 – Mozilla)\nMSXML 4.0 SP3 Parser (HKLM-x32…196467F1-C11F-4F76-858B-5812ADC83B94) (Version: 4.30.2100.0 – Microsoft Corporation)\nNVIDIA 3D Vision Controller Driver 390.41 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.NVIRUSB) (Version: 390.41 – NVIDIA Corporation)\nNVIDIA GeForce Experience 3.12.0.84 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.GFExperience) (Version: 3.12.0.84 – NVIDIA Corporation)\nNVIDIA Graphics Driver 432.00 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Driver) (Version: 432.00 – NVIDIA Corporation)\nNVIDIA HD Audio Driver 1.3.38.16 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_HDAudio.Driver) (Version: 1.3.38.16 – NVIDIA Corporation)\nNVIDIA PhysX System Software 9.17.0524 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.PhysX) (Version: 9.17.0524 – NVIDIA Corporation)\nOANDA Desktop (HKLM-x32…C97746B1-FE1D-41AA-B5CF-D0030986B919) (Version: 2.8.3 – OANDA)\nOpenOffice 4.1.6 (HKLM-x32…16E4FF6B-31E8-4037-B627-D87CF872E32B) (Version: 4.16.9790 – Apache Software Foundation)\nOverwatch (HKLM-x32…Overwatch) (Version:  – Blizzard Entertainment)\nPlayStation™Now (HKLM-x32…8F2673A5-9656-4BAA-80F0-F7EFCFF1A336) (Version: 11.0.0 – Sony Interactive Entertainment Network America LLC)\nRazer Synapse (HKLM-x32…D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6) (Version: 2.20.17.413 – Razer Inc.)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7525 – Realtek Semiconductor Corp.)\nRevo Uninstaller 2.0.6 (HKLM…A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97_is1) (Version: 2.0.6 – VS Revo Group, Ltd.)\nRockstar Games Social Club (HKLM-x32…Rockstar Games Social Club) (Version: 1.2.4.1 – Rockstar Games)\nScheduling Manager Gemini v 11.6.84 (HKLM-x32…5C84571D-2097-48B9-8A96-E9E6AD9C1409) (Version: 11.6.84 – Thoughtful Systems, Inc.)\nScheduling Manager Tutorial (HKLM-x32…3108FC9E-C022-4B35-91AA-A7F24B667E89) (Version: 1.1 – Thoughtful Systems, Inc.)\nScpToolkit (HKLM…AC052048-9828-45E3-872B-04CE30A3B58B) (Version: 1.6.238.16010 – Nefarius Software Solutions)\nSlack (HKUS-1-5-21-3055999371-879555700-2068610542-1001…slack) (Version: 4.4.2 – Slack Technologies Inc.)\nSmashLadder Dolphin Launcher 3.0.0 (HKUS-1-5-21-3055999371-879555700-2068610542-1001…f02b64e6-c9bc-5665-a1a7-43718fb1dbd0) (Version: 3.0.0 – Anther Sledge)\nSpeccy (HKLM…Speccy) (Version: 1.32 – Piriform)\nSteam (HKLM-x32 … Steam) (Version: 2.10.91.91 – Valve Corporation)\nthinkorswim (HKLM…9968-4488-2169-7623) (Version: desktop – thinkorswim, Inc)\nTP-LINK TL-WDN4800 Driver (HKLM-x32…70D605C7-C823-4750-BA72-BEB835713612) (Version: 1.3.1 – TP-LINK)\nTP-LINK Wireless Configuration Utility (HKLM-x32…319D91C6-3D44-436C-9F79-36C0D22372DC) (Version: 1.3.1 – TP-LINK)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…32DC821E-4A7D-4878-BEE8-337FA153D7F2) (Version: 2.63.0.0 – Microsoft Corporation) Hidden\nVMware Horizon Client (HKLM…73499771-35D2-4F4E-AC1B-8417816D6F6A) (Version: 5.4.2.11170 – VMware, Inc.) Hidden\nVMware Horizon Client (HKLM-x32…4cd5b1d3-b7c2-4949-9131-8f4b14b1cead) (Version: 5.4.2.11170 – VMware, Inc.)\nVMware Horizon HTML5 Multimedia Redirection Client (HKLM…E6EA3E80-74E7-431A-80C3-9CB0E4CECBDD) (Version: 7.12.0 – VMware, Inc.) Hidden\nVMware Horizon Media Engine 11.0.0.613 (64-bit) (HKLM…3747D742-8099-43C1-AEB5-EBC516D062A6) (Version: 11.0.0.613 – VMware, Inc.) Hidden\nVMware Horizon Media Redirection for Microsoft Teams (HKLM…B253D5D4-842E-4875-8B29-1C74BEE7DD98) (Version: 7.12.0 – VMware, Inc.) Hidden\nWindows Driver Package – Sony Computer Entertainment Inc. Wireless controller for PLAYSTATION®3 Driver Package (01/20/2012 1.4.0.0) (HKLM…D5410AE5FA467EF0F19558D5F60C991A79E11B51) (Version: 01/20/2012 1.4.0.0 – Sony Computer Entertainment Inc.)\nWondershare Helper Compact 2.5.3 (HKLM-x32…5363CE84-5F09-48A1-8B6C-6BB590FFEDF2_is1) (Version: 2.5.3 – Wondershare)\nWondershare UniConverter(Build 11.5.1.0) (HKLM-x32…UniConverter_is1) (Version: 11.5.1.0 – Wondershare Software)"},{"id":"text-51","heading":"Text","content":"Packages:\n=========\nASUS Welcome -> C:Program FilesWindowsAppsB9ECED6F.ASUSWelcome_1.0.1.0_x64__qmba6cd70vzyy [2015-12-04] (ASUSTeK COMPUTER INC.)\nCandy Crush Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSaga_1.1740.2.0_x86__kgqvnymyfvs32 [2020-04-09] (king.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.166.400.0_x86__kgqvnymyfvs32 [2020-04-18] (king.com)\nDisney Magic Kingdoms -> C:Program FilesWindowsAppsA278AB0D.DisneyMagicKingdoms_5.0.0.8_x86__h6adky7gbf63m [2020-04-22] (Gameloft SE)\nDolby Access -> C:Program FilesWindowsAppsDolbyLaboratories.DolbyAccess_3.2.169.0_x64__rz1tebttyb220 [2020-04-18] (Dolby Laboratories)\nGame Controller Tester -> C:Program FilesWindowsApps11032Reconco.XboxControllerTester_1.5.5.0_x64__thvmwcgtjwwvy [2019-04-14] (Reconco) [MS Ad]\nHidden City: Hidden Object Adventure -> C:Program FilesWindowsApps828B5831.HiddenCityMysteryofShadows_1.34.3400.0_x86__ytsefhwckbdv6 [2020-03-26] (G5 Entertainment AB)\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-14] (HP Inc.)\nKeeper – Password Manager & Secure File Storage -> C:Program FilesWindowsAppsKeeperSecurityInc.Keeper_14.0.33.0_x64__kejf07qmg0jnm [2019-08-02] (Keeper Security Inc)\nMarch of Empires: War of Lords -> C:Program FilesWindowsAppsA278AB0D.MarchofEmpires_4.7.1.1_x86__h6adky7gbf63m [2020-04-14] (Gameloft SE)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.6.4030.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios) [MS Ad]\nMinecraft for Windows 10 -> C:Program FilesWindowsAppsMicrosoft.MinecraftUWP_1.14.6005.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios)\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nPhotos Add-on -> C:Program FilesWindowsAppsMicrosoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-03-28] (Microsoft Corporation)\nPhotos Media Engine Add-on -> C:Program FilesWindowsAppsMicrosoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-02-04] (Microsoft Corporation)\nRoyal Revolt 2 -> C:Program FilesWindowsAppsflaregamesGmbH.RoyalRevolt2_6.0.1.0_x86__g0q0z3kw54rap [2020-03-30] (flaregames GmbH)\nSO COOKBOOK -> C:Program FilesWindowsAppsBEWISE.CookBook_2.5.4.0_neutral__t7hzxgefr9jt2 [2015-12-08] (Slow Sense)\nSpotify Music -> C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0 [2020-04-09] (Spotify AB) [Startup Task]\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-08] (Twitter Inc.)"},{"id":"text-52","heading":"Text","content":"==================== Custom CLSID (Whitelisted): =============="},{"id":"text-53","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-54","heading":"Text","content":"ShellIconOverlayIdentifiers: [ AccExtIco1] -> AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco2] -> 853B7E05-C47D-4985-909A-D0DC5C6D7303 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nShellIconOverlayIdentifiers: [ AccExtIco3] -> 42D38F2E-98E9-4382-B546-E24E4D6D04BB => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers1: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers1: [ANotepad++64] -> B298D29A-A6ED-11DE-BA8C-A68E55D89593 =>  -> No File\nContextMenuHandlers1: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers3: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers3: [4A7C4306-57E0-4C0C-83A9-78C1528F618C] -> 4A7C4306-57E0-4C0C-83A9-78C1528F618C =>  -> No File\nContextMenuHandlers4: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers4: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File\nContextMenuHandlers5: [NvCplDesktopContext] -> 3D1975AF-48C6-4f8e-A182-BE0E08FA86A9 => C:WINDOWSsystem32nvshext.dll [2019-10-02] (NVIDIA Corporation -> NVIDIA Corporation)\nContextMenuHandlers6: [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2015-12-31] (Igor Pavlov) [File not signed]\nContextMenuHandlers6: [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )\nContextMenuHandlers6: [BriefcaseMenu] -> 85BBD920-42A0-1069-A2E4-08002B30309D =>  -> No File\nContextMenuHandlers6: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers6: [Offline Files] -> 474C98EE-CF3D-41f5-80E3-4AAB0AB04301 =>  -> No File"},{"id":"text-55","heading":"Text","content":"==================== Codecs (Whitelisted) ===================="},{"id":"text-56","heading":"Text","content":"==================== Shortcuts & WMI ========================"},{"id":"text-57","heading":"Text","content":"==================== Loaded Modules (Whitelisted) ============="},{"id":"text-58","heading":"Text","content":"2019-12-02 01:47 – 2016-07-21 11:54 – 000137728 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSCreateVC.dll\n2019-12-02 01:47 – 2017-03-23 10:49 – 001506304 _____ () [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactDAQExp.dll\n2018-05-11 21:41 – 2014-03-14 11:25 – 000194560 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityDC_WFF.dll\n2018-05-11 21:41 – 2014-03-14 11:16 – 001411072 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilitynicLan.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000139264 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF.dll\n2018-05-11 21:41 – 2014-03-14 11:28 – 000116224 _____ () [File not signed] C:Program Files (x86)TP-LINKTP-LINK Wireless Configuration UtilityWJWFWJWF_WPS_WIN7.DLL\n2014-05-02 07:55 – 2014-05-02 07:55 – 000185344 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpflac.dll\n2014-05-02 07:05 – 2014-05-02 07:05 – 000173056 _____ () [File not signed] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64ikpmp3.dll\n2003-10-01 09:00 – 2003-10-01 09:00 – 000036864 _____ () [File not signed] C:Scheduling ManagerScheduling Manager TutorialDOCOBJ.DLL\n2020-02-15 15:16 – 2020-02-15 15:16 – 000315392 _____ () [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ReactiveSockets4d67f5e3fcf9a9fb6915af32e36d3ff3ReactiveSockets.ni.dll\n2017-06-05 20:30 – 2020-04-23 08:34 – 000040080 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:Program Files (x86)ASUSAXSP1.01.02PEbiosinterface32.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000356864 _____ (Benjamin Höglinger) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Libarius6a1218864657a0b993f06bfebc6bfe0bLibarius.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001546240 _____ (dbreeze.tiesky.com) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64DBreezee3f40e227965044407fde6d4240d659eDBreeze.ni.dll\n2014-05-02 12:52 – 2014-05-02 12:52 – 000599040 _____ (File is in use) [File not signed ?] C:Program FilesNefarius Software SolutionsScpToolkitirrKlangamd64irrKlang.NET4.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000760320 _____ (Galos) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64CSScriptLibrary4b1ecda5f4587754f0d52a2b982eb61bCSScriptLibrary.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000629760 _____ (Illusory Studios LLC) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64HidSharp72fa3c5d8ba66e19d993d6cb0206407cHidSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000284160 _____ (MadMilkman) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64MadMilkman.Inie99c055d152faf3df8df18bb42a6e59eMadMilkman.Ini.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000150528 _____ (michaelnoonan) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64WindowsInput1ff058a466362046321f245938c5bb0bWindowsInput.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 005551616 _____ (Mono development team) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Mono.CSharp6ed14716f51eebf189d3e7162b1b3177Mono.CSharp.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 002821632 _____ (Newtonsoft) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Newtonsoft.Json18197a9d82f36cea0df95d6470495519Newtonsoft.Json.ni.dll\n2020-02-15 15:16 – 2020-02-15 15:16 – 000159744 _____ (Richard Deeming) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64Trinet.Core.IO.Ntfsb2cd883b33635cb7885f236e80729d75Trinet.Core.IO.Ntfs.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000164352 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl.Shared3ce57d9974845341f18acb462c86fa25ScpControl.Shared.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 001137664 _____ (Scarlet.Crush Productions) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64ScpControl2be4e9f6cc24f866952c48ea8ee4265bScpControl.ni.dll\n2020-02-15 15:15 – 2020-02-15 15:15 – 000978432 _____ (The Apache Software Foundation) [File not signed] C:WINDOWSassemblyNativeImages_v4.0.30319_64log4net21c34351fbc282417539d1b820038ef7log4net.ni.dll\n2019-12-02 01:47 – 2017-03-23 10:52 – 000708608 _____ (Wondershare) [File not signed] C:Program Files (x86)Common FilesWondershareWondershare Helper CompactCBSProducstInfo.dll"},{"id":"text-59","heading":"Text","content":"==================== Alternate Data Streams (Whitelisted) ========"},{"id":"text-60","heading":"Text","content":"==================== Safe Mode (Whitelisted) =================="},{"id":"text-61","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)"},{"id":"text-62","heading":"Text","content":"HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service""},{"id":"text-63","heading":"Text","content":"==================== Association (Whitelisted) ================="},{"id":"text-64","heading":"Text","content":"==================== Internet Explorer trusted/restricted =========="},{"id":"text-65","heading":"Text","content":"==================== Hosts content: ========================="},{"id":"text-66","heading":"Text","content":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)"},{"id":"text-67","heading":"Text","content":"2015-07-10 07:04 – 2017-12-28 14:35 – 000000876 _____ C:WINDOWSsystem32driversetchosts\n127.0.0.1 view-localhost # view localhost server"},{"id":"text-68","heading":"Text","content":"==================== Other Areas ==========================="},{"id":"text-69","heading":"Text","content":"(Currently there is no automatic fix for this section.)"},{"id":"text-70","heading":"Text","content":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)Common FilesOracleJavajavapath;%INTEL_DEV_REDIST%redistintel64compiler;C:ProgramDataOracleJavajavapath;C:Windowssystem32;C:Windows;C:WindowsSystem32Wbem;C:WindowsSystem32WindowsPowerShellv1.0;C:Program Files (x86)NVIDIA CorporationPhysXCommon;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;%SYSTEMROOT%System32OpenSSH\nHKUS-1-5-21-3055999371-879555700-2068610542-1001Control PanelDesktop\\Wallpaper -> C:UsersabangAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper\nDNS Servers: 192.168.0.1\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: RequireAdmin)\nWindows Firewall is enabled."},{"id":"text-71","heading":"Text","content":"==================== MSCONFIG/TASK MANAGER disabled items =="},{"id":"text-72","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed.)"},{"id":"text-73","heading":"Text","content":"MSCONFIGServices: asComSvc => 2\nMSCONFIGServices: AsSysCtrlService => 2\nMSCONFIGServices: cpextender => 2\nMSCONFIGServices: Ds3Service => 2\nMSCONFIGServices: DTSAudioSvc => 2\nMSCONFIGServices: GfExperienceService => 2\nMSCONFIGServices: gupdate => 3\nMSCONFIGServices: gupdatem => 3\nMSCONFIGServices: Intel® PROSet Monitoring Service => 2\nMSCONFIGServices: MBAMScheduler => 2\nMSCONFIGServices: MBAMService => 2\nMSCONFIGServices: MozillaMaintenance => 3\nMSCONFIGServices: NvNetworkService => 2\nMSCONFIGServices: NvStreamNetworkSvc => 3\nMSCONFIGServices: NvStreamSvc => 2\nMSCONFIGServices: nvsvc => 2\nMSCONFIGServices: ProductAgentService => 2\nMSCONFIGServices: Razer Game Scanner Service => 2\nMSCONFIGServices: Steam Client Service => 3\nMSCONFIGServices: Stereo Service => 2"},{"id":"text-74","heading":"Text","content":"==================== FirewallRules (Whitelisted) ================"},{"id":"text-75","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-76","heading":"Text","content":"FirewallRules: [UDP Query User3A20CB0C-5972-4F0E-B28D-3E1D5EECAB8EC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [TCP Query User54030791-5486-48E0-8F99-3F8DD73AD12BC:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe] => (Allow) C:usersabangappdatalocalprogramssmashladder-dolphin-launchersmashladder dolphin launcher.exe (Anther Sledge) [File not signed]\nFirewallRules: [023F0A77-9576-4C1F-864A-75D1B5E79A7A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [67FD644B-FDAF-4D1D-8A5E-ECB4212E4B29] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A1DDAC8F-CF03-41EE-8357-92024344D205] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D9442DC5-1818-4FF2-A71E-05820984F49B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE7E363B-F54A-46B5-9442-FFB6626E281F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30C9114F-2B3F-4153-B664-BF1CD3BEC2B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4AD5CA7A-2172-4BF1-B153-DC32716E2497] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C23EAD57-7D13-4155-BB46-355B1C23776F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3B863970-095C-4C85-A118-1A392B135B1B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8D113EB2-E251-4B92-AEF0-D96E0B6B80B2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E12A8E1A-517E-4B2F-A75D-062BE2C4F3FA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C06C18D1-088B-4201-8911-40AB9597CF34] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C2089B7F-D2CB-4269-B02A-C1B1B2B1887B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [09CA0E2E-1D40-425F-BD7B-C2E51E4C1F87] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FCDA81A-7C2D-43EE-8AF0-8B625999E1A1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0EA19E97-2D0D-4EBA-908D-02F251223DF8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9B0454C6-EEA8-4459-8BBC-9C93C08EDB2D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [87887A46-ABE3-421E-9E3D-65767F8620B9] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C68A5AB6-1862-4550-8EC9-E1C19DE8444F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [187C20C7-1EE7-42F1-A916-742B2AB6B4FC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B7EF0327-CD34-4A11-B23D-D223BEBA5978] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [2BF20755-F176-4E2C-8FF6-B971083800BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [15F4D836-0E42-429B-91BB-05D8C6AEC5C8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [425F7D42-AC12-4064-87FB-E4D611A2DC21] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.451.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [CAF42CB5-301A-4BA5-8E05-C31276646D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E67899C3-A328-4FA4-8C7B-A3B2BFD06D77] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6FF6238D-0160-422F-9196-FABDDA4A56A3] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E78D7D0F-2F04-4182-96CA-013B656D1C95] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AC2C0466-2A72-4651-9C90-17C853D54D06] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [86360315-551D-4AA4-B952-EE9A6C584E82] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6A96FA0D-9B43-4316-849B-583F8C3BBE89] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E995C816-398B-413E-B22D-117100CC1ACC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AAFBC89F-D155-4F8A-8718-BAEA520D5BB5] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FC48A9E8-E688-4170-A16D-F817210C5C80] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C4D653A6-86C5-4CEB-93DC-3D9E2BEF010C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54E40053-0A90-4A11-B6BE-5F5ADDE987B0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EA745C69-727F-4201-B3E4-1471123DD72A] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B0907127-B4C6-4C84-8D83-B969896E95AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41ADDA74-F50B-4CD4-8479-313C33196388] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D08D2994-3E16-49D6-AD02-C0DF7ECB1F09] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [217C826B-39CC-4240-85E1-433C8ADC2581] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A53A5F9B-D3C6-4E4D-AE16-17346EBE8919] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9071E769-ED0B-4656-9251-C12367C56F41] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [625D1BB1-FC20-4FCE-B671-54C7DD9340F2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [61B6EF3C-791D-4F83-A1B7-BFBF3621879C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [F99F2C07-DC34-44DA-B0BC-528FDFA41446] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AB4AB17F-4A79-463E-8961-5AC357FBCA47] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [AFAE990F-0583-49E1-8258-3C7726FEC616] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [81E7AC73-1844-406C-A08B-A3364BF4C3AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E5635E24-CBC0-4F57-AFD6-F67FB96BA53B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [45F0B540-5C04-4785-9C90-87C20AE5477E] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4995CD7C-77E5-438B-849F-64DC6E1A1E86] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [A777D5B6-1C0B-4566-826C-AEF75A6ACC55] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [99844AC6-7F2F-42E6-8A7C-D2BF828248DA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9BB186FE-7EF7-424C-AF36-BF61CFCEDA2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4F947C79-7C21-4375-B9BD-D1DBEA3FB28B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [01AC1E18-7FBD-485C-B0D0-187A8E242230] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FF1B140D-494B-45A8-B475-65516E09CBB8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [3EB8A53C-3292-49F2-A673-B4F12E756547] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13CD5436-1EBD-4E89-ABD2-CAE09B30D6AA] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [FA0121A5-5411-45B3-9354-6A71CB03D931] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D84B311A-6A2E-4069-A9EF-659FCE546874] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [7476105C-6CB5-4B36-8AB4-7A8459F1E36B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [00560EE3-AC11-497D-8D86-C7424586FA15] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [31ACB8D4-72E5-471D-906B-DE67EC2F159B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [14E8B51C-D163-423C-988B-0D89DEF1F718] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [41654C77-92F4-4858-8251-77C84AF0305B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B87075DD-027E-4F7D-B37C-59EA52C05BA7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8C1B7F41-C94D-4E9D-89D8-FDB4789756BC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [6186AB12-D44A-41D0-A2FE-6B065EA9DDFD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [E3129253-383E-435D-B0A2-C7137CB06A0B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [30906E77-4729-41D3-9508-0CD6AFA301E8] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.112.449.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [BCA51D18-2143-4B10-B7E5-A2E60493BA94] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [13EAD58F-B7D3-405C-AFC3-A6F180CF1F85] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [5D3A5397-4ABE-44A1-AB76-2A0CF64BC8AD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [C7904CA0-48FC-4F6A-84DF-54E365F9A7F6] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [8E0CA2B9-0A97-4ECD-A631-2ED098DF9051] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B35CB8CD-0CD1-4201-8E1C-025636FC066D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [B1632180-5628-448A-A84A-F51769531562] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [ED615CA0-1786-4C7A-A128-4BD3EDA4C0FD] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [233621B9-0C3B-4384-8C84-595062660AE2] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [EE5DFA07-0791-4457-B0CD-08DCB1494A39] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [0D39F94F-1588-42ED-A675-0BA8B547D6AB] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [D513F9B4-676F-473D-B815-4FA1A41342C1] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [11EBECD5-5DAB-454A-BF9B-A57DFCFFD5E7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [54009A4C-F798-4CA4-9F75-8F4A9FCAD813] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [4D5085D0-831B-4FAB-AA7F-4AC8133C7C2C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [70C46E26-EB0E-4C8B-A905-36761929073B] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.109.383.0_x86__zpdnekdrzrea0Spotify.exe No File\nFirewallRules: [9E32B534-F7B7-4A70-82D0-B5A774D60F4F] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [90A3BBEE-2788-4277-8EAD-3DC247BE70E8] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [UDP Query User20EC0AE9-A8BA-46F6-98EA-F155341A019BD:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [TCP Query User7C75CFD6-CC06-47D9-A584-E601D39F32D9D:steamsteamappscommongrand theft auto vgta5.exe] => (Allow) D:steamsteamappscommongrand theft auto vgta5.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [26A62681-A444-4FBB-ADA2-FC1B05C6E1E1] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [07C3519E-95B7-4FBB-B7C7-0CE53DD7A0E0] => (Allow) D:SteamsteamappscommonGrand Theft Auto VGTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [F573858C-0F95-4B56-830C-3541830DB720] => (Allow) C:Program Files (x86)PlayStationNowunidater.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment)\nFirewallRules: [D730743C-DA46-4800-AF0D-5CB3C05AF8CD] => (Allow) C:UsersabangAppDataLocalGaikaiCrashReportsdumpupload.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> )\nFirewallRules: [9D9C777E-3E3C-4B2C-B289-A04E2CD768E7] => (Allow) C:Program Files (x86)PlayStationNowpsnowlauncher.exe (SONY INTERACTIVE ENTERTAINMENT NETWORK AMERICA LLC -> Sony Interactive Entertainment Network America LLC)\nFirewallRules: [C77F9D37-04C2-4E4A-88AA-C204D34B2686] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [2A9C4941-E497-4758-A055-F943D1F33761] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [UDP Query UserA3822803-F5A0-4805-9255-68A3CEDB1402C:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [TCP Query UserD43AADF3-49D0-416F-B97D-B399D33C40EAC:program files (x86)diablo iiix64diablo iii64.exe] => (Block) C:program files (x86)diablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [87B69EB1-2C3A-4D0A-8028-A9FF92B3C1E3] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [09C1860A-23C2-4E12-8E3A-A38C6C98C101] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [5A00F446-668F-4543-A867-77E3BEDCD098] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50FB5DEF-ED25-460F-BB2E-A37F62D15222] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [50B2A780-FC1E-4CEE-87F0-C5E166BCC312] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [7DC21C63-21CB-413E-BE20-ECC6B47C7C32] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [TCP Query UserF11A8ECF-8855-4F97-97CB-6AAEC76F87BEC:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCAE4AE65-0CDE-43CE-A92A-196F35E52E22C:program files (x86)diablo iiidiablo iii.exe] => (Allow) C:program files (x86)diablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [CA98B275-2FE1-402D-A5F1-B87D8ADFBC55] => (Allow) C:Program Files (x86)CheckPointSSL Network Extenderslimsvc.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies)\nFirewallRules: [TCP Query User2820BD35-2129-4E6D-A8DB-3C6CE798C6F6C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [UDP Query User86802B20-75B9-4F75-AE91-E496BD11D479C:program files (x86)internet exploreriexplore.exe] => (Allow) C:program files (x86)internet exploreriexplore.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [TCP Query User8438EA6D-3737-48D0-9F93-8F2D6D9A06ECC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [UDP Query UserE79F117B-B096-4DC4-B77B-8797F37D149CC:programdataoraclejavajavapath_target_520493000java.exe] => (Block) C:programdataoraclejavajavapath_target_520493000java.exe\nFirewallRules: [791DCA37-8EC8-424B-BB95-ACE422DF014E] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [888D7D35-2B25-4AA8-96BF-F9F84EB9F526] => (Allow) D:SteamsteamappscommonMGS_TPPmgsvtpp.exe (Konami Digital Entertainment) [File not signed]\nFirewallRules: [TCP Query User5813B562-B455-4993-85C5-7FF442CB25C2C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserCF888DB5-FD06-4A19-815C-C31FCB1D81B6C:program files (x86)overwatchoverwatch.exe] => (Allow) C:program files (x86)overwatchoverwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [41F7857F-9E58-485F-818B-19AAABEAE453] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [5CA9388B-31A9-4924-ABCA-0DF73DA832A9] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A3E9FEC4-23DB-47D1-8375-38D89FBBF935] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [BCE97003-DF35-4195-9804-7A21CAFDA70A] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [A6603C8D-0E63-4245-9387-91044ABFB38E] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [91CB3554-F187-403B-B8C2-E92E45365F06] => (Allow) D:SteamsteamappscommonGrand Theft Auto VPlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)\nFirewallRules: [10DA8387-874D-4AC3-8603-D51430C4F280] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [9899BB37-71DB-4746-A9D8-EEAE68F2FC44] => (Allow) D:SteamsteamappscommonDRAGON BALL Z KAKAROTAT.exe (Epic Games, Inc.) [File not signed]\nFirewallRules: [TCP Query User4271D5BE-DFA1-4778-AC81-F31C050E15B2D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [UDP Query User4DA94064-2DD2-4124-AA18-E3D6E6D095EED:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe] => (Allow) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6B1586A3-6621-4C6D-828E-83F0210E0F30] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [E253CF1C-2647-4974-951D-1949DDE011CE] => (Block) D:steamsteamappscommondragon ball z kakarotatbinarieswin64at-win64-shipping.exe (BANDAI NAMCO Entertainment Inc.) [File not signed]\nFirewallRules: [6E255D8D-8D8F-43E4-9FD2-D7CB1268F204] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [027F9085-2A91-4741-837C-18946ECA34F4] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [8032F437-4112-4C85-B8F2-39492CA0390C] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [DDE3D4D3-890E-4EF7-9652-852C1E2C5008] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AA702745-0AD1-40A7-BF74-2AB11513F5E3] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [423B78B2-149F-4C73-A4F9-744BE0ED21F0] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [45D3CDE1-4396-4D7B-8979-0673185923B2] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [553AF5AC-E66B-44B9-942D-8189E944F9AB] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [TCP Query User3AD38B14-73AD-4732-A86E-4165B8D48E9CC:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [UDP Query UserB7A1A6A6-3553-4885-B90C-A5CAC8C2D830C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe] => (Allow) C:usersabangappdataroamingsmashladder dolphin launcherdolphin_downloadsproject slippi (r18)20fm-v5.9-slippi-r18-windolphin.exe () [File not signed]\nFirewallRules: [5F40B1B5-169B-43BF-BF4D-E24B40F6E437] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F79E4DA7-F39B-4B44-A311-EEA98A1AB989] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [1EE5B3A2-2230-4514-92CB-5CA09D8F28AE] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [81E2AFE3-8095-423A-B77D-BAA224E1C8C0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [838049CC-C7B9-426A-A8B2-384720480511] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8CA7AF4B-3191-45EB-8617-FAA13ADC3D67] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [9E45E785-6C4D-44C7-9A5C-FD29598D8F07] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [60A0B233-8C86-4B36-9B42-CDD1C488E267] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.129.592.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [8140EE9A-095C-460A-8D74-442A788C741E] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F54C7FB7-06B7-490B-976F-E79A38E2BEB3] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [74A35425-19B9-43C7-9B72-451D83167B9D] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [FF858980-0824-4E4A-BF8A-5F7C46B4823B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [F4A1204D-9E06-4C4D-A793-49EDF60A85C0] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [650EA6A1-093D-4F84-8563-097B8EB1359B] => (Allow) C:Program Files (x86)VMwareVMware Horizon View Clientx64vmware-remotemks.exe (VMware, Inc. -> VMware, Inc.)\nFirewallRules: [E45143B8-6858-49A3-92AB-247474BDA0F7] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [F6F4DB44-A01B-4B0E-97CF-A6FFA216D3BF] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [B3BB5363-09A9-4886-965E-25E84AB6BD5C] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [6F4D721B-02EE-4875-988E-ADC09C264700] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C36BAE82-63BF-4FAE-AB12-2338F9B7C86F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [C1A48158-A53A-4B69-9EE0-00A7224ABE00] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [5FD89F7C-37D8-4F19-806D-7503FAF8707D] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [4EAC8A2A-54AD-41D9-BB20-08240A92D596] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [18865BAC-5B8D-45C4-B0FB-4432AC5A6381] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [1083CE52-99BE-40A3-A064-711F5AAE1A00] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [433AD889-009F-4D2D-9034-6BC62CCE4A13] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [4DB082A3-6753-4ECA-856A-3D3D59213CE9] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [D2B0EF02-A882-4AB6-8ED1-7A35F3622D4E] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaiTunes.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [5844E35C-079D-41CA-AE60-AA9E4551A040] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [806D6C41-EAD4-48DB-83C1-EC5BE80EEF37] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [F64CDFFF-36EB-4E54-A7DD-61B608771748] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [48AA320F-FDFA-4279-9BAC-D24AC659941B] => (Allow) C:Program FilesWindowsAppsAppleInc.iTunes_12106.2.48003.0_x64__nzyj5cx40ttqaAMDS64AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)"},{"id":"text-77","heading":"Text","content":"==================== Restore Points ========================="},{"id":"text-78","heading":"Text","content":"20-04-2020 09:04:00 Scheduled Checkpoint"},{"id":"text-79","heading":"Text","content":"==================== Faulty Device Manager Devices ============"},{"id":"text-80","heading":"Text","content":"==================== Event log errors: ========================"},{"id":"text-81","heading":"Text","content":"Erreurs d'application:\n==================\nError: (04/23/2020 06:19:46 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (79684,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-82","heading":"Text","content":"Error: (04/23/2020 05:19:15 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (78176,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-83","heading":"Text","content":"Error: (04/23/2020 04:18:44 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77936,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-84","heading":"Text","content":"Error: (04/23/2020 03:18:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (76960,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-85","heading":"Text","content":"Error: (04/23/2020 01:45:40 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (8300,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-86","heading":"Text","content":"Error: (04/23/2020 01:21:01 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (7060,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-87","heading":"Text","content":"Error: (04/23/2020 12:45:10 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (77084,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-88","heading":"Text","content":"Error: (04/23/2020 12:39:16 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (10932,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-89","heading":"Text","content":"Erreurs système:\n=============\nError: (04/23/2020 08:34:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:51:57 PM on ‎4/‎22/‎2020 was unexpected."},{"id":"text-90","heading":"Text","content":"Error: (04/23/2020 08:33:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data."},{"id":"text-91","heading":"Text","content":"Error: (04/22/2020 08:31:58 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 11:43:27 PM on ‎4/‎21/‎2020 was unexpected."},{"id":"text-92","heading":"Text","content":"Error: (04/22/2020 08:31:52 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data."},{"id":"text-93","heading":"Text","content":"Error: (04/20/2020 08:38:05 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 1:30:02 AM on ‎4/‎20/‎2020 was unexpected."},{"id":"text-94","heading":"Text","content":"Error: (04/20/2020 08:37:59 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)\nDescription: 3221225684A fatal error occurred processing the restoration data."},{"id":"text-95","heading":"Text","content":"Error: (04/18/2020 10:16:14 PM) (Source: volsnap) (EventID: 36) (User: )\nDescription: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit."},{"id":"text-96","heading":"Text","content":"Error: (04/18/2020 11:40:27 AM) (Source: EventLog) (EventID: 6008) (User: )\nDescription: The previous system shutdown at 12:26:39 AM on ‎4/‎18/‎2020 was unexpected."},{"id":"text-97","heading":"Text","content":"Windows Defender:\n===================================\nDate: 2020-04-22 12:33:54.808\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 726051A0-B1B0-4589-BBE8-0B2FB1F09D40\nScan Type: Antimalware\nScan Parameters: Quick Scan"},{"id":"text-98","heading":"Text","content":"Date: 2020-04-03 21:47:35.072\nLa description: \nWindows Defender Antivirus scan has been stopped before completion.\nScan ID: 01A490FE-91B6-4450-B243-F9F1C6B0EDB2\nScan Type: Antimalware\nScan Parameters: Quick Scan"},{"id":"text-99","heading":"Text","content":"Date: 2020-04-16 08:57:03.659\nLa description: \nWindows Defender Antivirus engine has been terminated due to an unexpected error.\nFailure Type: Crash\nException code: 0xc0000005\nResource: file:C:UsersabangAppDataRoamingMicrosoftWindowsStart MenuProgramsImage-LineMore….lnk"},{"id":"text-100","heading":"Text","content":"CodeIntegrity:\n==================================="},{"id":"text-101","heading":"Text","content":"Date: 2020-04-16 08:57:18.396\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system."},{"id":"text-102","heading":"Text","content":"Date: 2020-04-16 08:57:18.383\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system."},{"id":"text-103","heading":"Text","content":"Date: 2020-04-16 08:57:15.838\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system."},{"id":"text-104","heading":"Text","content":"Date: 2020-04-16 08:57:15.824\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32FlightSettings.dll because the set of per-page image hashes could not be found on the system."},{"id":"text-105","heading":"Text","content":"Date: 2020-04-16 08:57:15.808\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system."},{"id":"text-106","heading":"Text","content":"Date: 2020-04-16 08:57:15.795\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32dsreg.dll because the set of per-page image hashes could not be found on the system."},{"id":"text-107","heading":"Text","content":"Date: 2020-04-16 08:57:15.306\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system."},{"id":"text-108","heading":"Text","content":"Date: 2020-04-16 08:57:15.274\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume1WindowsSystem32aepic.dll because the set of per-page image hashes could not be found on the system."},{"id":"text-109","heading":"Text","content":"==================== Memory info ==========================="},{"id":"text-110","heading":"Text","content":"BIOS: American Megatrends Inc. 2501 06/24/2015\nMotherboard: ASUSTeK COMPUTER INC. Z97-A-USB31\nProcessor: Intel® Core™ i5-4690K CPU @ 3.50GHz\nPercentage of memory in use: 54%\nTotal physical RAM: 8131.86 MB\nAvailable physical RAM: 3731.77 MB\nTotal Virtual: 9411.86 MB\nAvailable Virtual: 3785.61 MB"},{"id":"text-111","heading":"Text","content":"==================== Drives ================================"},{"id":"text-112","heading":"Text","content":"Drive c: () (Fixed) (Total:134.71 GB) (Free:30.03 GB) NTFS ==>[drive with boot components (obtained from BCD)]\nDrive d: (win) (Fixed) (Total:830.08 GB) (Free:461.4 GB) NTFS"},{"id":"text-113","heading":"Text","content":"\\?Volume7e1de73d-0000-0000-0000-90ad21000000 () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS"},{"id":"text-114","heading":"Text","content":"==================== MBR & Partition Table ===================="},{"id":"text-115","heading":"Text","content":"==========================================================\nDisk: 0 (Size: 232.9 GB) (Disk ID: 7E1DE73D)\nPartition 1: (Active) – (Size=134.7 GB) – (Type=07 NTFS)\nPartition 2: (Not Active) – (Size=530 MB) – (Type=27)\nPartition 3: (Not Active) – (Size=14.9 GB) – (Type=82)\nPartition 4: (Not Active) – (Size=82.8 GB) – (Type=05)"},{"id":"text-116","heading":"Text","content":"==========================================================\nDisk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: CC16B7FB)\nPartition 1: (Not Active) – (Size=931.5 GB) – (Type=05)"},{"id":"text-117","heading":"Text","content":"==================== End of Addition.txt ======================="},{"id":"text-118","heading":"Text","content":"Click to rate this post!\n \n [Total: 0 Average: 0]"}],"media":{"primary_image":"https://tutos-gameserver.fr/wp-content/uploads/2020/03/1585419619_meta_image.png"},"relations":[{"rel":"canonical","href":"https://tutos-gameserver.fr/2020/05/01/vol-de-carte-de-credit-aide-a-la-suppression-des-virus-chevaux-de-troie-logiciels-espions-et-programmes-malveillants-monter-un-serveur-minecraft/"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/05/01/vol-de-carte-de-credit-aide-a-la-suppression-des-virus-chevaux-de-troie-logiciels-espions-et-programmes-malveillants-monter-un-serveur-minecraft/llm","type":"text/html"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/05/01/vol-de-carte-de-credit-aide-a-la-suppression-des-virus-chevaux-de-troie-logiciels-espions-et-programmes-malveillants-monter-un-serveur-minecraft/llm.json","type":"application/json"},{"rel":"llm-manifest","href":"https://tutos-gameserver.fr/llm-endpoints-manifest.json","type":"application/json"}],"http_headers":{"X-LLM-Friendly":"1","X-LLM-Schema":"1.1.0","Content-Security-Policy":"default-src 'none'; img-src * data:; style-src 'unsafe-inline'"},"license":"CC BY-ND 4.0","attribution_required":true,"allow_cors":false}