{"version":"1.1","schema_version":"1.1.0","plugin_version":"1.1.2","url":"https://tutos-gameserver.fr/2020/05/20/fell-for-phone-tech-support-scan-malware-possible-resoudre-les-problemes-dun-serveur-minecraft/","llm_html_url":"https://tutos-gameserver.fr/2020/05/20/fell-for-phone-tech-support-scan-malware-possible-resoudre-les-problemes-dun-serveur-minecraft/llm","llm_json_url":"https://tutos-gameserver.fr/2020/05/20/fell-for-phone-tech-support-scan-malware-possible-resoudre-les-problemes-dun-serveur-minecraft/llm.json","manifest_url":"https://tutos-gameserver.fr/llm-endpoints-manifest.json","language":"fr-FR","locale":"fr_FR","title":"Fell for phone tech support scan – malware possible\n\n – Resoudre les problemes d’un serveur MineCraft","site":{"name":"Tutos GameServer","url":"https://tutos-gameserver.fr/"},"author":{"id":1,"name":"Titanfall","url":"https://tutos-gameserver.fr/author/titanfall/"},"published_at":"2020-05-20T06:51:05+00:00","modified_at":"2020-05-20T06:51:05+00:00","word_count":13044,"reading_time_seconds":3914,"summary":"Un ami est tombé pour une arnaque téléphonique hier et leur a permis d'accéder à distance à son ordinateur et leur a donné 500 $. Vous voulez vérifier que rien ne se cache en arrière-plan. Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2020 Ran par phyli (administrateur) sur DESKTOP-GIRJ15B (HP 750-114) […]","summary_points":["Un ami est tombé pour une arnaque téléphonique hier et leur a permis d'accéder à distance à son ordinateur et leur a donné 500 $.","Vous voulez vérifier que rien ne se cache en arrière-plan.","Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2020\nRan par phyli (administrateur) sur DESKTOP-GIRJ15B (HP 750-114) (12-05-2020 20:54:26)\nExécution à partir de C: Users phyli Downloads\nProfils chargés: phyli\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal\n\n==================== Processus (liste blanche) =================\n\n(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé.","Le fichier ne sera pas déplacé.)\n\n(Apple Inc."],"topics":["Serveur minecraft"],"entities":[],"entities_metadata":[{"id":13,"name":"Serveur minecraft","slug":"serveur-minecraft","taxonomy":"category","count":2786,"url":"https://tutos-gameserver.fr/category/serveur-minecraft/"}],"tags":["Serveur minecraft"],"content_hash":"74eecc613de04d596230f9693ae03c80","plain_text":"Un ami est tombé pour une arnaque téléphonique hier et leur a permis d'accéder à distance à son ordinateur et leur a donné 500 $. Vous voulez vérifier que rien ne se cache en arrière-plan.\n\nRésultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2020\nRan par phyli (administrateur) sur DESKTOP-GIRJ15B (HP 750-114) (12-05-2020 20:54:26)\nExécution à partir de C: Users phyli Downloads\nProfils chargés: phyli\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal\n\n==================== Processus (liste blanche) =================\n\n(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)\n\n(Apple Inc. -> Apple Inc.) C: Program Files Bonjour mDNSResponder.exe\n(CyberLink Corp. ->) C: Program Files CyberLink Shared files RichVideo64.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler64.exe\n(Hewlett-Packard Company -> Hewlett-Packard Company) C: Program Files (x86) Hewlett-Packard Shared hpqwmiex.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin HPNetworkCommunicatorCom.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe\n(HP Inc. -> HP Inc.) C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe\n(HP Inc. -> HP Inc.) C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe\n(Intel CASE -> Intel Corporation) C: Program Files Intel Intel® Ready Mode Technology IRMTService.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components LMS LMS.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Fichiers communs Intel WirelessCommon RegSrvc.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin EvtEng.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin ZeroConfigService.exe\n(Société intel) [File not signed] C: Program Files (x86) Intel Intel® Security Assist isa.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxCUIService.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxEM.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHDCPSvc.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHeciSvc.exe\n(Solutions de connectivité sans fil Intel® -> Intel Corporation) C: Windows System32 ibtsiva.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows Microsoft.NET Framework64 v3.0 WPF PresentationFontCache.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows SystemApps Microsoft.MicrosoftEdge_8wekyb3d8bbwe MicrosoftEdge.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe WinStore.App.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 browser_broker.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeCP.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeSH.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 SecurityHealthHost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 wlanext.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkAudioService64.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe \n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Desktop.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_w32.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_x64.exe\n\n==================== Registre (liste blanche) ===================\n\n(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)\n\nHKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8790264 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [PowerDVD14Agent] => C: Program Files (x86) CyberLink PowerDVD14 PowerDVD14Agent.exe [795336 2015-10-01] (CyberLink Corp. -> CyberLink Corp.)\nHKLM-x32 … Exécuter: [HostManager] => C: Program Files (x86) Common Files AOL 1474834258 ee AOLSoftware.exe [41800 2010-03-08] (AOL Inc. -> AOL Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [CCleaner Monitoring] => C: Program Files CCleaner CCleaner64.exe [19645800 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [HP Officejet 5740 series (NET)] => C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe [3769248 2019-03-19] (HP Inc -> HP Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … MountPoints2: 31631547-282d-11ea-9d24-08d40c8c8d7b – "H: autorun.exe" \nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.138 Installer chrmstp.exe [2020-05-08] (Google LLC -> Google LLC)\nDémarrage: C: Users phyli AppData Roaming Microsoft Windows Start Menu Programs Startup AOL Desktop Launcher.lnk [2020-05-11]\nShortcutTarget: AOL Desktop Launcher.lnk -> C: Users phyli AppData Local AOLDesktop AolTrayApp.exe (AOL, Inc -> AOL Inc.)\n\n==================== Tâches planifiées (liste blanche) ============\n\n(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)\n\nTâche: 0338B702-2581-4FA4-91AE-848E0471747D – System32 Tasks Hewlett-Packard HP Active Health HP Active Health Scan (HPSA) => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPActiveHealth ActiveHealth.exe [25128 2017-11-20] (HP Inc. ->)\nTâche: 0BC2EE53-122D-4F08-B931-2D8EBC0B87C0 – System32 Tasks Norton 360 Norton 360 Autofix => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 19444715-C7A7-4B9E-ADC9-E9EAA4A336FB – System32 Tasks Microsoft Windows RemovalTools MRT_ERROR_HB => C: WINDOWS system32 MRT.exe [121542864 2020-03-11] (Microsoft Windows -> Microsoft Corporation) [File not signed]\nTâche: 1A92604C-9785-4B3F-BABF-B9344300A525 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_DeviceScan => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 23805DAC-C2B3-4B17-8267-1B13BCF64F3F – System32 Tasks HPCustParticipation HP Officejet série 5740 => C: Program Files HP HP Officejet série 5740 Bin HPCustPartic.exe [6437792 2019-03-19] (HP Inc -> HP Inc.)\nTâche: 26862040-7E37-4842-8060-616A847935D7 – Microsoft Windows UNP RunCampaignManager -> Aucun fichier <==== ATTENTION\nTâche: 2892222B-8961-44EA-A488-4EAF68E62FF6 ​​- System32 Tasks Hewlett-Packard HP Support Assistant PC Health Analysis => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 30798301-D556-4A67-A303-E078BAEEA94D – System32 Tasks HPCeeScheduleForphyli => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe [96568 2015-06-16] (Société Hewlett-Packard -> Hewlett-Packard)\nTâche: 3BF5FEFF-B156-442E-83A7-88538B7E0701 – System32 Tasks CCleanerSkipUAC => C: Program Files CCleaner CCleaner.exe [14679256 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 466881AC-5DFD-4836-B0D9-F7634D65DB29 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1698000 2015-06-05] (Logiciel Intel® -> Intel Corporation)\nTâche: 4A88543E-19C3-49EC-A150-14140125BD0D – System32 Tasks CCleaner Update => C: Program Files CCleaner CCUpdate.exe [619416 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 5359FDCE-AFC2-4D1D-A5B9-56F1617BF591 – System32 Tasks DropboxUpdateTaskMachineCore => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nTâche: 5E7E7438-1246-4277-9A2F-C6411DB6349C – System32 Tasks Hewlett-Packard HP Support Assistant Product Configurator => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources ProductConfig .EXE [320856 2020-04-23] (HP Inc. -> HP Inc.)\nTâche: 69EFEB71-23BC-4B1C-BE4F-7B71587FEDAB – System32 Tasks Norton 360 Norton 360 Error Processor => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 6CD0BF4F-6054-4830-9806-972847917DB9 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Assistant Quick Start => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 72D22111-0F52-45AE-8C72-7B54E7179787 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 7DBD3255-B12E-48C1-99D9-7E999C324195 – System32 Tasks Hewlett-Packard HP Support Assistant Critical Update Pending => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 8613B10A-F593-4051-B6D3-C1174FAB8609 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_TH6254X0JD => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 990D433C-DF44-4DE9-893D-0F707834FF54 – System32 Tasks Remediation AntimalwareMigrationTask => C: Program Files Common Files AV Norton 360 Upgrade.exe [2162704 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 9A8CA25D-1EE2-4A1C-BC11-133EB4DE03F3 – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: AEF5F555-14EA-4D89-BA5E-16BC63091F73 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: B3DBA422-AB32-4861-895F-EF36381A7F1D – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: BFBE589E-4AF0-44AC-90B7-FA7DB538250A – System32 Tasks DropboxOEM => C: Program Files (x86) Dropbox DropboxOEM DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc ->)\nTâche: C0665B30-D9E6-421F-9B25-37FF210D048A – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Gestionnaire d'actifs logiciels bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: C09D1165-9A84-48B3-88AA-EB9B83A7142E – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Report => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSFReport.exe [134008 2020-03-25] (HP Inc. -> HP Inc.)\nTâche: C0EC152F-0F52-4482-9B82-0859E05A899B – Analyseur d'erreur System32 Tasks Norton 360 Norton 360 => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: CA553F06-3C9D-4899-9117-B49C1C5FFF46 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: CEE140FD-BB4B-4A75-BEDF-5B0DC2E129AC – System32 Tasks Norton WSC Integration => C: Program Files Norton Security Engine 22.20.2.57 WSCStub.exe [645008 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: DA0C5F76-E8A2-4899-B9E2-1DEA8509D76A – System32 Tasks IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C: Program Files (x86) Intel Intel® Update Manager bin iumsvc .EXE\nTâche: E3CADEF5-B4B0-44FC-8B66-A0A6738B95FC – System32 Tasks DropboxUpdateTaskMachineUA => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\n\n(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)\n\nTâche: C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job => C: WINDOWS explorer.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineCore.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineUA.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks HPCeeScheduleForphyli.job => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe\n\n==================== Internet (liste blanche) ====================\n\n(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)\n\nTcpip .. Interfaces 686E1526-5487-4579-9D5C-7D997F0C562C: [NameServer] 10.255.0.0\nTcpip .. Interfaces 93fb8a86-3933-4476-8281-93ec070b093c: [DhcpNameServer] 192.168.1.1\nTcpip .. Interfaces aa2d2754-dc20-488c-91bb-6e946e6395e0: [DhcpNameServer] 192.168.1.1\n\nInternet Explorer:\n==================\nHKLM SOFTWARE Policies Microsoft Internet Explorer: restriction <==== ATTENTION\nHKLM Software Microsoft Internet Explorer Main, Page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKLM Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nSearchScopes: HKLM -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKLM-x32 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKU S-1-5-21-999762305-681959455-3457413626-1001 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nBHO: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: extension Evernote -> 92EF2EAD-A7CE-4424-B0DB-499CF856608E -> C: Program Files (x86) Evernote Evernote EvernoteIE.dll [2015-07-01] (EVERNOTE CORPORATION -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)\nBHO-x32: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)\nBarre d'outils: HKLM – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBarre d'outils: HKLM-x32 – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\n\nBord: \n======\nDownloadDir: C: Users phyli Downloads\nExtension de bord: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C: Program Files WindowsApps EyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11]\nExtension Edge: (AdGuard AdBlocker) -> EdgeExtension_AdguardAdguardAdBlocker_m055xr0c82818 => C: Program Files WindowsApps Adguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09]\n\nFireFox:\n========\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI ipt; version = 4.0.68 -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIIPT.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI Updater -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIUpdater.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ viewpoint.com / VMP -> C: Program Files (x86) Viewpoint Viewpoint Experience Technology npViewpoint.dll [2004-02-20] () [File not signed]\n\nChrome: \n=======\nCHR DefaultProfile: Par défaut\nProfil CHR: C: Users phyli AppData Local Google Chrome User Data Default [2020-05-12]\nCHR DefaultSearchURL: Par défaut -> hxxps: //s.aolcdn.com/webmail-static/webmail/180517.1559/aol/en-us/images/favicon.ico\nExtension CHR: (diapositives) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aapocclcgogkmnckokdopfmhonfmgoek [2018-01-12]\nExtension CHR: (Docs) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aohghmighlieiainnegkcijnfilokake [2018-01-12]\nExtension CHR: (Google Drive) – C: Users phyli AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2018-01-12]\nExtension CHR: (YouTube) – C: Users phyli AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-12]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users phyli AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-05-11]\nExtension CHR: (Sheets) – C: Users phyli AppData Local Google Chrome User Data Default Extensions felcaaldnbdncclmgdcncolpebgiejap [2018-01-12]\nExtension CHR: (Google Docs hors ligne) – C: Users phyli AppData Local Google Chrome User Data Default Extensions ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-11]\nExtension CHR: (Paiements Chrome Web Store) – C: Users phyli AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2020-04-15]\nExtension CHR: (Mon AOL) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pigepclndadjaebpijfcjeeefpjhcdca [2018-05-22]\nExtension CHR: (Gmail) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-17]\nExtension CHR: (Chrome Media Router) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-11]\n\n==================== Services (liste blanche) ===================\n\n(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)\n\nS2 dbupdate; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nS3 dbupdatem; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nR2 HPSupportSolutionsFrameworkService; C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe [378744 2020-03-31] (HP Inc. -> HP Inc.)\nR2 HPTouchpointAnalyticsService; C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe [332216 2017-11-23] (HP Inc. -> HP Inc.)\nR2 ibtsiva; C: WINDOWS System32 ibtsiva.exe [536864 2020-01-06] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nS3 Intel® Capability Licensing Service TCP IP Interface; C: Program Files Intel iCLS Client SocketHeciServer.exe [881152 2015-05-22] (Service Intel® Trusted Connect -> Intel® Corporation)\nR3 Intel® Security Assist; C: Program Files (x86) Intel Intel® Security Assist isa.exe [335872 2015-05-19] (Société intel) [File not signed]\nS3 Intel® WiDi SAM; C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nR2 IRMTService; c: Program Files Intel Intel® Ready Mode Technology IRMTService.exe [181520 2015-07-13] (Intel CASE -> Intel Corporation)\nS2 isaHelperSvc; C: Program Files (x86) Intel Intel® Security Assist isaHelperService.exe [7680 2015-05-19] () [File not signed]\nR2 jhi_service; C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe [207648 2015-10-16] (Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation)\nS3 MyWiFiDHCPDNS; C: Program Files Intel WiFi bin PanDhcpDns.exe [310880 2018-09-05] (Intel Corporation ->)\nR2 NortonSecurity; C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe [344760 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 nsWscSvc; C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe [1055960 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 RichVideo64; C: Program Files CyberLink Fichiers partagés RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. ->)\nR2 RtkAudioService; C: Program Files Realtek Audio HDA RtkAudioService64.exe [316152 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nR2 TeamViewer; C: Program Files (x86) TeamViewer TeamViewer_Service.exe [13252624 2020-04-23] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nS3 WdNisSvc; C: Program Files Windows Defender NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nS3 WinDefend; C: Program Files Windows Defender MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nR2 ZeroConfigService; C: Program Files Intel WiFi bin ZeroConfigService.exe [4059744 2018-09-05] (Intel Corporation -> Intel® Corporation)\nS4 WRSVC; Service "C: Program Files Webroot WRSA.exe" [X]\n\n===================== Pilotes (sur liste blanche) ===================\n\n(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)\n\nR1 BHDrvx64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions BASHDefs 20200511.006 BHDrvx64.sys [1952136 2020-05-11] (Symantec Corporation -> Symantec Corporation)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-17] (Microsoft Corporation) [File not signed]\nR1 ccSet_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 ccSetx64.sys [192376 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 eeCtrl; C: Program Files (x86) Common Files Symantec Shared EENGINE eeCtrl64.sys [516784 2019-10-08] (Symantec Corporation -> Symantec Corporation)\nU3 EraserUtilDrv11910; C: Program Files (x86) Common Files Symantec Shared EENGINE EraserUtilDrv11910.sys [154288 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 ibtusb; C: WINDOWS System32 DriverStore FileRepository ibtusb.inf_amd64_b45bba99c1e61776 ibtusb.sys [301560 2019-12-02] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR1 IDSVia64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions IPSDefs 20200512.061 IDSvia64.sys [1451016 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 IntelReadyModeDriver; C: WINDOWS System32 drivers IntelReadyModeDriver.sys [33512 2015-07-13] (Intel CASE -> Intel Corporation)\nR0 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [253880 2018-01-12] (Malwarebytes Corporation -> Malwarebytes)\nR3 Netwtw04; C: WINDOWS system32 DRIVERS Netwtw04.sys [8720384 2019-08-27] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR3 rt640x64; C: WINDOWS System32 drivers rt640x64.sys [886528 2015-06-03] (Realtek Semiconductor Corp -> Realtek)\nR3 RTSUER; C: WINDOWS system32 Drivers RtsUer.sys [402136 2015-05-27] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation)\nR3 SRTSP; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSP64.SYS [889520 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SRTSPX; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSPX64.SYS [50864 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR0 SymEFASI; C: WINDOWS System32 drivers NGCx64 1614020.039 SYMEFASI64.SYS [1964552 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS0 SymELAM; C: WINDOWS System32 drivers NGCx64 1614020.039 SymELAM.sys [25024 2020-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)\nR3 SymEvent; C: WINDOWS system32 Drivers SYMEVENT64x86.SYS [99848 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 SymEvnt; C: Program Files Norton Security NortonData 22.20.2.57 SymPlatform SymEvnt.sys [712368 2020-01-06] (Symantec Corporation -> Symantec Corporation)\nR1 SymIRON; C: WINDOWS System32 drivers NGCx64 1614020.039 Ironx64.SYS [316656 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SymNetS; C: WINDOWS System32 drivers NGCx64 1614020.039 symnets.sys [575280 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR3 wanatw; C: WINDOWS System32 drivers wanatw64.sys [24064 2006-11-29] (Éditeur de compatibilité matérielle Microsoft Windows -> America Online, Inc.)\nS3 WdBoot; C: WINDOWS system32 drivers WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nS3 WdFilter; C: WINDOWS system32 drivers WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nS3 WdNisDrv; C: WINDOWS System32 Drivers WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nR1 wpCtrlDrv_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 wpCtrlDrv.sys [1012120 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS4 WRBoot; System32 drivers WRBoot.sys [X]\nR4 WRkrn; System32 drivers WRkrn.sys [X]\n\n==================== NetSvcs (liste blanche) ====================\n\n(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)\n\n==================== Un mois (créé) ===================\n\n(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)\n\n2020-05-12 20:54 – 2020-05-12 20:55 – 000027915 _____ C: Users phyli Downloads FRST.txt\n2020-05-12 20:54 – 2020-05-12 20:55 – 000000000 ____D C: FRST\n2020-05-12 20:53 – 2020-05-12 20:53 – 002285568 _____ (Farbar) C: Users phyli Downloads FRST64.exe\n2020-05-12 20:22 – 2020-05-12 20:22 – 000000000 ____D C: WINDOWS system32 Tasks Remediation\n2020-05-12 18:10 – 2020-05-12 18:14 – 000000000 ____D C: WINDOWS system32 Tasks Norton 360\n2020-05-12 18:08 – 2020-05-12 18:08 – 000099848 _____ (Symantec Corporation) C: WINDOWS system32 Drivers SYMEVENT64x86.SYS\n2020-05-12 18:08 – 2020-05-12 18:08 – 000008616 _____ C: WINDOWS system32 Drivers SYMEVENT64x86.CAT\n2020-05-12 18:08 – 2020-05-12 18:08 – 000003376 _____ C: WINDOWS system32 Tasks Norton WSC Integration\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: Users Public Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: ProgramData Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000000000 ____D C: Program Files Fichiers communs Symantec Shared\n2020-05-12 18:07 – 2020-05-12 18:08 – 000000000 ___RD C: ProgramData Microsoft Windows Menu Démarrer Programmes Norton Security\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: WINDOWS system32 Drivers NGCx64\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: Program Files Norton Security\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: ProgramData NortonInstaller\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: Program Files (x86) NortonInstaller\n2020-05-12 18:04 – 2020-05-12 18:04 – 003666744 _____ (Symantec Corporation) C: Users phyli Downloads N360Downloader.exe\n2020-05-12 18:04 – 2020-05-12 18:04 – 000001379 _____ C: Users phyli Desktop Norton Installation Files.lnk\n2020-05-12 18:04 – 2020-05-12 18:04 – 000000000 ____D C: Users Public Downloads Norton\n2020-05-11 19:43 – 2020-05-11 19:46 – 000000000 ____D C: Users phyli AppData Local TeamViewer\n2020-05-11 18:23 – 2020-05-11 18:24 – 000000000 ____D C: NPE\n2020-05-11 18:23 – 2020-05-11 18:22 – 000120122 _____ C: WINDOWS ntbtlog.txt\n2020-05-11 18:21 – 2020-05-11 18:22 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (2) .exe\n2020-05-11 18:17 – 2020-05-11 18:24 – 000000214 _____ C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job\n2020-05-11 18:11 – 2020-05-12 18:10 – 000000000 ____D C: ProgramData Norton\n2020-05-11 18:11 – 2020-05-11 19:55 – 000000000 ____D C: Users phyli AppData Local NPE\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE.exe\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (1) .exe\n2020-05-11 17:52 – 2020-05-12 18:30 – 000000000 ____D C: Program Files (x86) TeamViewer\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001119 _____ C: ProgramData Microsoft Windows Start Menu Programs TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: Users Public Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: ProgramData Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000000000 ____D C: Users phyli AppData Roaming TeamViewer\n2020-05-11 17:49 – 2020-05-11 17:49 – 026709944 _____ (TeamViewer Germany GmbH) C: Users phyli Downloads TeamViewer_Setup.exe\n2020-05-11 15:32 – 2020-05-11 15:32 – 000000000 ____D C: Users phyli Documents 1-888-511-8605\n2020-05-11 15:28 – 2020-05-11 15:28 – 000290304 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 subinacl.exe\n2020-05-11 15:28 – 2020-05-11 15:28 – 000000000 ____D C: Program Files (x86) Adware Removal Tool by TSA\n2020-05-11 15:25 – 2020-05-11 15:26 – 000000000 ____D C: Users phyli AppData Local PlaceholderTileLogoFolder\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ C: Users phyli AppData Local Resmon.ResmonCfg\n2020-04-15 17:35 – 2020-04-15 17:35 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 001151816 _____ (Microsoft Corporation) C:WINDOWSsystem32mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001013000 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000983040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmkvsrcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Mirage.Internal.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000689152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CPFilters.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000686080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64jscript.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-15 17:35 – 2020-04-15 17:35 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 022636544 _____ (Microsoft Corporation) C:WINDOWSsystem32mshtml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 008013824 _____ (Microsoft Corporation) C:WINDOWSsystem32mstscax.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007756800 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakra.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006523048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004611584 _____ (Microsoft Corporation) C:WINDOWSsystem32msi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 004538880 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800640 _____ (Microsoft Corporation) C:WINDOWSsystem32WinSAT.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800128 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-15 17:34 – 2020-04-15 17:34 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001665216 _____ (Microsoft Corporation) C:WINDOWSSysWOW64user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001545216 _____ (Microsoft Corporation) C:WINDOWSsystem32mstsc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001477112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001458688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001397576 _____ (Microsoft Corporation) C:WINDOWSsystem32hvix64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001077064 _____ (Microsoft Corporation) C:WINDOWSsystem32hvax64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001008128 _____ (Microsoft Corporation) C:WINDOWSsystem32StorSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000868864 _____ (Microsoft Corporation) C:WINDOWSSysWOW64windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000836608 _____ (Microsoft Corporation) C:WINDOWSsystem32jscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000835584 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkfoldersControl.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000783480 _____ (Microsoft Corporation) C:WINDOWSsystem32tcblaunch.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000775696 _____ (Microsoft Corporation) C:WINDOWSsystem32securekernel.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000768528 _____ (Microsoft Corporation) C:WINDOWSSysWOW64winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673464 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000668672 _____ (Microsoft Corporation) C:WINDOWSsystem32wsecedit.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000665088 _____ (Microsoft Corporation) C:WINDOWSSysWOW64netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000647680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000555008 _____ (Microsoft Corporation) C:WINDOWSsystem32appwiz.cpl\n2020-04-15 17:34 – 2020-04-15 17:34 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-15 17:34 – 2020-04-15 17:34 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-15 17:21 – 2020-04-15 17:22 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-15 17:21 – 2020-04-15 17:22 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-15 15:45 – 2020-05-12 18:06 – 000000000 ____D C:ProgramDataWRCore\n\n==================== One month (modified) ==================\n\n(If an entry is included in the fixlist, the file/folder will be moved.)\n\n2020-05-12 20:22 – 2016-02-17 04:13 – 000000000 ____D C:Program FilesCommon FilesAV\n2020-05-12 20:16 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-05-12 20:05 – 2018-07-16 18:15 – 000000000 ____D C:UsersphyliAppDataLocalD3DSCache\n2020-05-12 18:40 – 2019-08-15 19:04 – 000003256 _____ C:WINDOWSsystem32TasksHPCeeScheduleForphyli\n2020-05-12 18:40 – 2019-06-17 18:01 – 000000364 _____ C:WINDOWSTasksHPCeeScheduleForphyli.job\n2020-05-12 18:09 – 2019-03-19 00:37 – 000032768 _____ C:WINDOWSsystem32configELAM\n2020-05-12 18:08 – 2019-03-19 00:52 – 000000000 ___HD C:WINDOWSELAMBKUP\n2020-05-12 18:07 – 2017-01-27 14:00 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocalLowwebroot\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocallptmp\n2020-05-12 18:01 – 2016-09-25 15:43 – 000000000 __SHD C:UsersphyliIntelGraphicsProfiles\n2020-05-12 10:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-05-12 10:10 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-05-11 19:48 – 2019-08-15 18:57 – 000935056 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-05-11 19:48 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-05-11 19:42 – 2019-08-15 19:04 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-05-11 19:42 – 2019-03-19 00:37 – 000524288 _____ C:WINDOWSsystem32configBBI\n2020-05-11 19:22 – 2019-08-15 18:45 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-05-11 18:17 – 2019-08-15 18:45 – 000276104 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-05-11 18:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32NDF\n2020-05-11 15:26 – 2018-03-16 00:06 – 000000000 ____D C:UsersphyliAppDataLocalPackages\n2020-05-11 14:53 – 2018-01-12 12:48 – 000000000 ____D C:UsersphyliAppDataLocalGoToAssist Remote Support Customer\n2020-05-11 12:06 – 2017-08-28 10:13 – 000002326 _____ C:UsersphyliDesktopAOL Desktop Gold.lnk\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsAOL Inc\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalAOLDesktop\n2020-05-11 12:05 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalSquirrelTemp\n2020-05-10 04:33 – 2019-08-15 19:04 – 000003376 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-999762305-681959455-3457413626-1001\n2020-05-10 04:33 – 2019-08-15 18:51 – 000002370 _____ C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-05-10 04:33 – 2016-09-25 15:46 – 000000000 ___RD C:UsersphyliOneDrive\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002308 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:UsersPublicDesktopGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:ProgramDataDesktopGoogle Chrome.lnk\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-15 17:38 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp\n\n==================== Files in the root of some directories ========\n\n2018-01-12 13:24 – 2018-01-12 13:24 – 018102328 _____ (Webroot Software, Inc.) C:Program Files (x86)Common Fileswruninstall.exe\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ () C:UsersphyliAppDataLocalResmon.ResmonCfg\n\n==================== SigCheck ============================\n\n(There is no automatic fix for files that do not pass verification.)\n\n==================== End of FRST.txt ========================'\n\n\nAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2020\nRan by phyli (12-05-2020 20:56:18)\nRunning from C:UsersphyliDownloads\nWindows 10 Home Version 1903 18362.778 (X64) (2019-08-15 23:04:54)\nBoot Mode: Normal\n==========================================================\n\n==================== Accounts: =============================\n\nAdministrator (S-1-5-21-999762305-681959455-3457413626-500 – Administrator – Disabled)\nDefaultAccount (S-1-5-21-999762305-681959455-3457413626-503 – Limited – Disabled)\ndefaultuser100001 (S-1-5-21-999762305-681959455-3457413626-1003 – Limited – Enabled)\nGuest (S-1-5-21-999762305-681959455-3457413626-501 – Limited – Disabled)\nphyli (S-1-5-21-999762305-681959455-3457413626-1001 – Administrator – Enabled) => C:Usersphyli\nWDAGUtilityAccount (S-1-5-21-999762305-681959455-3457413626-504 – Limited – Disabled)\n\n==================== Security Center ========================\n\n(If an entry is included in the fixlist, it will be removed.)\n\nAV: Norton 360 (Enabled – Up to date) 1122B19A-E671-38EC-8EAC-87048FD4528D\nAV: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAV: Webroot SecureAnywhere (Enabled – Up to date) DF901FA1-F926-253B-C464-B01C79DCAD48\nAS: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Webroot SecureAnywhere (Enabled – Up to date) 64F1FE45-DF1C-2AB5-FED4-8B6E025BE7F5\nFW: Norton 360 (Enabled) 291930BF-AC1E-39B4-A5F3-2E31710715F6\n\n==================== Installed Programs ======================\n\n(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)\n\nAOL Desktop Gold (HKUS-1-5-21-999762305-681959455-3457413626-1001…AOLDesktop) (Version: 11.0.2664 – Oath Inc.)\nAOL Uninstaller (Choose which Products to Remove) (HKLM-x32…AOL Uninstaller) (Version:  – AOL Inc.)\nBonjour (HKLM…6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D) (Version: 3.0.0.10 – Apple Inc.)\nCCleaner (HKLM…CCleaner) (Version: 5.38 – Piriform)\nCyberLink PhotoDirector (HKLM…5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.) Hidden\nCyberLink PhotoDirector (HKLM-x32…InstallShield_5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.)\nCyberLink Power Media Player 14 (HKLM-x32…32C8E300-BDB4-4398-92C2-E9B7D8A233DB) (Version: 14.0.2.5801 – CyberLink Corp.)\nCyberLink PowerDirector 12 (HKLM…E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.) Hidden\nCyberLink PowerDirector 12 (HKLM-x32…InstallShield_E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.)\nDropbox 25 GB (HKLM-x32…867A88D-764F-366E-9E21-130DA8B472C3) (Version: 3.1.18.0 – Dropbox, Inc.)\nDropbox Update Helper (HKLM-x32…99218A5-A723-43DC-8DB5-6173656A1E94) (Version: 1.3.295.1 – Dropbox, Inc.) Hidden\nEvernote v. 5.8.13 (HKLM-x32…A229420E-204B-11E5-B844-0050569584E9) (Version: 5.8.13.8152 – Evernote Corp.)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.138 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nHP Documentation (HKLM…HP_Documentation) (Version: 1.0.0.1 – HP)\nHP Dropbox Plugin (HKLM-x32…C54DEA1F-7A8D-410B-A675-04E0FB562CB0) (Version: 40.13.54.81239 – HP)\nHP Google Drive Plugin (HKLM-x32…533B4739-13DD-4AAB-9524-070B3F0CE6ED) (Version: 40.13.54.81239 – HP)\nHP Officejet 5740 series Basic Device Software (HKLM…8C417009-7889-42BC-8164-C74FFF358CE6) (Version: 40.13.1176.1978 – HP Inc.)\nHP Officejet 5740 series Help (HKLM-x32…F17D53C7-DCE8-469C-9690-CF8F5903519C) (Version: 34.0.0 – Hewlett Packard)\nHP Photo Creations (HKLM-x32…HP Photo Creations) (Version: 1.0.0.9572 – HP)\nHP Registration Service (HKLM…D1E8F2D7-7794-4245-B286-87ED86C1893C) (Version: 1.2.8318.5320 – Hewlett-Packard)\nHP Support Assistant (HKLM-x32…79C54A05-F146-4EA0-8A70-D4EFE6181E52) (Version: 8.8.24.33 – Hewlett-Packard Company)\nHP Support Information (HKLM-x32…76272057-98E0-4DC4-AAC3-10C546C47195) (Version: 14.00.0000 – Hewlett-Packard)\nHP Support Solutions Framework (HKLM-x32…55065080-504F-43BB-BE00-36B80D7D39A5) (Version: 12.15.14.3 – Hewlett-Packard Company)\nHP Touchpoint Analytics Client (HKLM…E5FB98E0-0784-44F0-8CEC-95CD4690C43F) (Version: 4.0.2.1439 – HP Inc.)\nHP Welcome (HKLM…HPWelcome) (Version: 1.0 – HP Inc.)\nI.R.I.S. OCR (HKLM-x32…11ED31EC-7EFA-4D56-B71D-E0214C8984CC) (Version: 12.3.7.0 – HP)\nIntel® Chipset Device Software (HKLM-x32…a2d9fda8-65eb-4c06-81ef-31e0a4daa335) (Version: 10.1.1.11 – Intel® Corporation) Hidden\nIntel® Management Engine Components (HKLM…1CEAC85D-2590-4760-800F-8DE5E91F3700) (Version: 11.0.0.1173 – Intel Corporation)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 25.20.100.6446 – Intel Corporation)\nIntel® Ready Mode Technology (HKLM…9F82AA39-BB14-4BD3-98EF-D4E9E3526B7D) (Version: 1.1.70.514 – Intel Corporation)\nIntel® WiDi (HKLM…5DD8D7E4-87F1-4134-AD28-4228FB1A03BA) (Version: 6.0.44.0 – Intel Corporation)\nIntel® WiDi Software Asset Manager (HKLM-x32…86905E62-645F-482E-A417-82C812ABD787) (Version: 1.1.383 – Intel Corporation) Hidden\nIntel® Wireless Bluetooth® (HKLM-x32…4DA9DC19-4E1D-4B10-A726-A5F2A1BC7265) (Version: 18.1.1546.2762 – Intel Corporation)\nIntel® PROSet/Wireless Software (HKLM-x32…f8c930bd-0a68-425f-8c11-87723d1e2c97) (Version: 20.90.0 – Intel Corporation)\nIntel® Security Assist (HKLM-x32…4B230374-6475-4A73-BA6E-41015E9C5013) (Version: 1.0.0.532 – Intel Corporation)\nMicrosoft Office (HKLM-x32…90150000-0138-0409-0000-0000000FF1CE) (Version: 15.0.4693.1005 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-999762305-681959455-3457413626-1001…OneDriveSetup.exe) (Version: 20.052.0311.0011 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…837b34e3-7c30-493c-8f6a-2b0f04e2912c) (Version: 8.0.59193 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.21005 (HKLM-x32…ce085a78-074e-4823-8dc1-8a721b94b76d) (Version: 12.0.21005.1 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nNorton 360 (HKLM-x32…NGC) (Version: 22.20.2.57 – Symantec Corporation)\nProduct Improvement Study for HP Officejet 5740 series (HKLM…D4B37902-C484-4AAC-B3B8-70C203C4FAB3) (Version: 40.13.1176.1978 – HP Inc.)\nRealtek Card Reader (HKLM-x32…5BC2B5AB-80DE-4E83-B8CF-426902051D0A) (Version: 10.0.10125.31214 – Realtek Semiconductor Corp.)\nRealtek Ethernet Controller Driver (HKLM-x32…8833FFB6-5B0C-4764-81AA-06DFEED9A476) (Version: 10.1.505.2015 – Realtek)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7673 – Realtek Semiconductor Corp.)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.5.3 – TeamViewer)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…16AD6161-2E47-4BF1-AA77-0946EFE93E08) (Version: 2.61.0.0 – Microsoft Corporation)\nUpdateAssistant (HKLM…E1D7CB46-BAE9-4D58-99C4-582332B1755A) (Version: 1.13.0.0 – Microsoft Corporation) Hidden\nViewpoint Media Player (HKLM-x32…ViewpointMediaPlayer) (Version:  – )\nVulkan Run Time Libraries 1.0.54.1 (HKLM…VulkanRT1.0.54.1) (Version: 1.0.54.1 – LunarG, Inc.) Hidden\nWindows 10 Update Assistant (HKLM-x32…D5C69738-B486-402E-85AC-2456D98A64E4) (Version: 1.4.9200.22395 – Microsoft Corporation)\nWindows Setup Remediations (x64) (KB4023057) (HKLM…5534e02f-0f5d-40dd-ba92-bea38d22384d.sdb) (Version:  – )\n\nPackages:\n=========\nAdblock Plus -> C:Program FilesWindowsAppsEyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11] (eyeo GmbH)\nAdGuard AdBlocker -> C:Program FilesWindowsAppsAdguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09] (Performix)\nAmazon -> C:Program FilesWindowsAppsAmazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2020-02-29] (Amazon.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.167.200.0_x86__kgqvnymyfvs32 [2020-05-06] (king.com)\nHearts Deluxe -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.HeartsDeluxe_6.6.26.0_x64__kx24dqmazqk8j [2020-01-25] (Random Salad Games LLC) [MS Ad]\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-15] (HP Inc.)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-02] (Microsoft Studios) [MS Ad]\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nNetflix -> C:Program FilesWindowsApps4DF9E0F8.Netflix_6.96.725.0_x64__mcm4njqhnhss8 [2020-04-10] (Netflix, Inc.)\nSimple Solitaire -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.SimpleSolitaire_6.18.78.0_x64__kx24dqmazqk8j [2020-03-03] (Random Salad Games LLC) [MS Ad]\nSnapfish -> C:Program FilesWindowsAppsAD2F1837.HPConnectedPhotopoweredbySnapfish_6.1.736.0_x86__v10z8vjag6ke6 [2018-08-05] (Snapfish)\nTripAdvisor Hotels Flights Restaurants -> C:Program FilesWindowsAppsTripAdvisorLLC.TripAdvisorHotelsFlightsRestaurants_1.5.10.0_x64__qj0v5chwq8f2g [2016-11-18] (TripAdvisor LLC)\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-09] (Twitter Inc.)\n\n==================== Custom CLSID (Whitelisted): ==============\n\n(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)\n\nShellIconOverlayIdentifiers: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers2: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 =>  -> No File\nContextMenuHandlers5: [igfxDTCM] -> 9B5F5829-A529-4B12-814A-E81BCB8D93FC => C:WINDOWSSystem32DriverStoreFileRepositoryki131064.inf_amd64_5d13f27a9a9843faigfxDTCM.dll [2019-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers6: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers6: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\n\n==================== Codecs (Whitelisted) ====================\n\n(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)\n\nHKLM…Drivers32: [vidc.i420] => C:WINDOWSsystem32lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.)\nHKLM…Drivers32: [vidc.i420] => C:WindowsSysWOW64lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.)\n\n==================== Shortcuts & WMI ========================\n\n(The entries could be listed to be restored or removed.)\n\nShortcutWithArgument: C:UsersphyliDesktopMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsChrome AppsMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:ProgramDataMicrosoftWindowsStart MenuProgramsPriceline.com.lnk -> C:Program Files (x86)Hewlett-PackardSharedWizLink.exe () -> hxxp://www.priceline.com/?refid=PLHBC6240OPQ&refclickid=square\n\n==================== Loaded Modules (Whitelisted) =============\n\n==================== Alternate Data Streams (Whitelisted) ========\n\n==================== Safe Mode (Whitelisted) ==================\n\n(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)\n\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521 => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521.SYS => ""="Driver"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkWRBoot => ""="Driver"\n\n==================== Association (Whitelisted) =================\n\n==================== Internet Explorer trusted/restricted ==========\n\n==================== Hosts content: =========================\n\n(If needed Hosts: directive could be included in the fixlist to reset Hosts.)\n\n2015-10-30 03:24 – 2015-10-30 03:21 – 000000824 ____N C:WINDOWSsystem32driversetchosts\n\n==================== Other Areas ===========================\n\n(Currently there is no automatic fix for this section.)\n\nHKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)InteliCLS Client;C:Program FilesInteliCLS Client;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program Files (x86)IntelIntel® Management Engine ComponentsDAL;C:Program FilesIntelIntel® Management Engine ComponentsDAL;C:Program Files (x86)IntelIntel® Management Engine ComponentsIPT;C:Program FilesIntelIntel® Management Engine ComponentsIPT;%SYSTEMROOT%System32OpenSSH;C:Program FilesIntelWiFibin;C:Program FilesCommon FilesIntelWirelessCommon\nHKUS-1-5-21-999762305-681959455-3457413626-1001Control PanelDesktop\\Wallpaper -> \nDNS Servers: 192.168.1.1 – 10.255.0.0\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: Warn)\nWindows Firewall is enabled.\n\n==================== MSCONFIG/TASK MANAGER disabled items ==\n\n(If an entry is included in the fixlist, it will be removed.)\n\nHKLM…StartupApprovedStartupFolder: => "Install LastPass IE RunOnce.lnk"\nHKLM…StartupApprovedRun: => "RTHDVCPL"\nHKLM…StartupApprovedRun32: => "PowerDVD14Agent"\nHKLM…StartupApprovedRun32: => "WRSVC"\nHKLM…StartupApprovedRun32: => "HostManager"\nHKLM…StartupApprovedRun32: => "SecurityHealth"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedStartupFolder: => "AOL Desktop Launcher.lnk"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "CCleaner Monitoring"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "OneDrive"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026amd64"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026"\n\n==================== FirewallRules (Whitelisted) ================\n\n(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)\n\nFirewallRules: [54640540-F97A-4412-900E-39472727094D] => (Allow) C:Program FilesIntelWiFibinPanDhcpDns.exe (Intel Corporation -> )\nFirewallRules: [8DC4717E-FCAF-469D-9E12-79DB0B253EF1] => (Allow) C:Program FilesCommon FilesMcAfeeMMSSHostMMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)\nFirewallRules: [791E7CF7-C352-4609-87FE-4C2E705A6E1F] => (Allow) C:Program Files (x86)Common FilesMcafeeMMSSHostMMSSHost.exe => No File\nFirewallRules: [AF62C409-25E2-4AEC-9DEC-12B069A10F79] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [F3B8345F-5967-46B5-BA4F-A598A14D09D3] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [FF87652F-D92F-4FD5-B8D2-DC22659AB369] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [29CAECA3-8459-490A-B734-D5D8B16E5BC5] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [3241FBCD-FFAC-4EE7-8F09-8A5105596348] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [1958B452-6813-4A87-A829-95800B9FDB77] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [E46AC436-D866-4D71-B2B9-ADE4A9339A1B] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [975C4FE9-8C93-4A39-AD4A-033BF7D371FD] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [A012B925-4D8A-4CA0-90E5-ECD661D3E083] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [DB6A911E-74F0-457F-BFF3-291FBD427D56] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9F2E22A7-C276-4028-875D-E9BE1FCE1F3D] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [71A37010-12B4-4407-B154-0F9980309A79] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [C733D88A-3187-4419-87C5-1A0EB1FDCCBB] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9A69636F-43A5-4523-ADC5-B05E7329E939] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [B745797E-820D-45A1-9096-B8F2E7D887CA] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVD CinemaPowerDVDCinema.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [8A476C2A-9A52-41E6-8608-EA62290278ED] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [F4ECB65E-59C8-477E-BA52-2A2020C15832] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD14Agent.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [76B1143C-70F8-452E-94C8-3CB3C4C595B6] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14KernelDMSCLMSServerPDVD14.exe (CyberLink Corp. -> CyberLink)\nFirewallRules: [903790A5-47BC-4DE7-B8EF-5FFA2A23BFF3] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [70D32C90-6419-457B-8B12-37EF83F7CB75] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [9027CB07-C9CF-4D46-8607-8A1AC3201DBF] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [3770051C-48E7-46F6-85CC-DCE51562BD14] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AB9F9C90-7C33-40D1-9DDF-CA8253003040] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [530F0275-912A-49A4-A418-E5014F38FF16] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxApplications.exe (HP Inc -> HP Inc.)\nFirewallRules: [4E862923-0E31-4D90-A8D4-BD42EF44D066] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinDigitalWizards.exe (HP Inc -> HP Inc.)\nFirewallRules: [6ACD8E74-027D-4580-8EE3-351AABAB3602] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinSendAFax.exe (HP Inc -> HP Inc.)\nFirewallRules: [61D83D5B-BCA4-4DDA-8B89-DF5986B5E587] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxPrinterUtility.exe (HP Inc -> HP Inc.)\nFirewallRules: [D83F6F84-CB01-4B1B-B74F-522E4ED00D68] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinDeviceSetup.exe (HP Inc -> HP Inc.)\nFirewallRules: [CBB4B686-C3E0-42EA-8BA8-FD001355A894] => (Allow) LPort=5357\nFirewallRules: [16643FC5-67E9-487C-B277-A99B9C0B0A91] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinHPNetworkCommunicatorCom.exe (HP Inc -> HP Inc.)\nFirewallRules: [38841FC4-2F6E-48B2-A565-A7D70AD5936C] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [4D96E522-6D29-4ED1-A56E-3DCF75D7A03E] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [E7F8679D-AFED-4B1A-9DCE-40715CC682D2] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [D06019FB-2384-4BB9-A71A-4CE2590E3755] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [170F4B69-67DF-4CB1-93D6-EC86EAE15F14] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\n\n==================== Restore Points =========================\n\n20-04-2020 17:12:46 Windows Update\n28-04-2020 15:32:48 Scheduled Checkpoint\n07-05-2020 12:26:10 Scheduled Checkpoint\n11-05-2020 15:24:27 tech\n\n==================== Faulty Device Manager Devices ============\n\n==================== Event log errors: ========================\n\nApplication errors:\n==================\nError: (05/12/2020 08:10:51 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (832,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (05/12/2020 06:19:26 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (11352,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0\n\nError: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0\n\nError: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0\n\nError: (05/12/2020 06:08:14 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6280,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (05/12/2020 10:17:45 AM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6160,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nError: (05/11/2020 08:06:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (3468,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.\n\nSystem errors:\n=============\nError: (05/11/2020 07:41:55 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server:\nWindows.Internal.CapabilityAccess.CapabilityAccess\n\nError: (05/11/2020 07:40:58 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC\n\nError: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030\n\nError: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030\n\nError: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030\n\nError: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030\n\nError: (05/11/2020 07:39:01 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC\n\nError: (05/11/2020 07:38:54 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC\n\nCodeIntegrity:\n===================================\n\nDate: 2020-05-12 18:10:41.976\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.\n\nDate: 2020-05-12 18:10:35.458\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.\n\nDate: 2020-05-12 18:10:35.390\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.\n\nDate: 2020-05-12 18:10:35.376\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.\n\nDate: 2020-05-12 18:10:34.197\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.\n\nDate: 2020-05-12 18:10:34.178\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.\n\nDate: 2020-05-12 18:10:32.348\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.\n\nDate: 2020-05-12 18:10:32.302\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.\n\n==================== Memory info =========================== \n\nBIOS: AMI A0.13 12/21/2015\nMotherboard: HP 2B47\nProcessor: Intel® Core™ i5-6400 CPU @ 2.70GHz\nPercentage of memory in use: 39%\nTotal physical RAM: 12183.87 MB\nAvailable physical RAM: 7377.78 MB\nTotal Virtual: 14039.87 MB\nAvailable Virtual: 8974.65 MB\n\n==================== Drives ================================\n\nDrive c: (Windows) (Fixed) (Total:1849.94 GB) (Free:1785.56 GB) NTFS\nDrive d: (Recovery Image) (Fixed) (Total:11.64 GB) (Free:1.51 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive e: (OS) (Fixed) (Total:581.11 GB) (Free:399.92 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive f: (RECOVERY) (Fixed) (Total:15 GB) (Free:0.29 GB) NTFS\nDrive h: (Apria DVD Project June 2019) (CDROM) (Total:7.95 GB) (Free:0 GB) UDF\n\n\\?Volume43b2a7e8-a447-45e8-ac50-4bc30569771a (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.52 GB) NTFS\n\\?Volume832b0909-50d7-4b26-88e3-66a386fdb90d (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.27 GB) FAT32\n\n==================== MBR & Partition Table ====================\n\n==========================================================\nDisk: 0 (Size: 1863 GB) (Disk ID: 2BD6946D)\n\nPartition: GPT.\n\n==========================================================\nDisk: 1 (MBR Code: Windows 7 or Vista) (Size: 596.2 GB) (Disk ID: 90000000)\nPartition 1: (Not Active) – (Size=63 MB) – (Type=DE)\nPartition 2: (Not Active) – (Size=15 GB) – (Type=07 NTFS)\nPartition 3: (Active) – (Size=581.1 GB) – (Type=07 NTFS)\n\n==================== End of Addition.txt =======================\n\n\n\n\nClick to rate this post!\r\n \r\n [Total: 0 Average: 0]","paragraphs":["Un ami est tombé pour une arnaque téléphonique hier et leur a permis d'accéder à distance à son ordinateur et leur a donné 500 $. Vous voulez vérifier que rien ne se cache en arrière-plan.","Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2020\nRan par phyli (administrateur) sur DESKTOP-GIRJ15B (HP 750-114) (12-05-2020 20:54:26)\nExécution à partir de C: Users phyli Downloads\nProfils chargés: phyli\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal","==================== Processus (liste blanche) =================","(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)","(Apple Inc. -> Apple Inc.) C: Program Files Bonjour mDNSResponder.exe\n(CyberLink Corp. ->) C: Program Files CyberLink Shared files RichVideo64.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler64.exe\n(Hewlett-Packard Company -> Hewlett-Packard Company) C: Program Files (x86) Hewlett-Packard Shared hpqwmiex.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin HPNetworkCommunicatorCom.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe\n(HP Inc. -> HP Inc.) C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe\n(HP Inc. -> HP Inc.) C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe\n(Intel CASE -> Intel Corporation) C: Program Files Intel Intel® Ready Mode Technology IRMTService.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components LMS LMS.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Fichiers communs Intel WirelessCommon RegSrvc.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin EvtEng.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin ZeroConfigService.exe\n(Société intel) [File not signed] C: Program Files (x86) Intel Intel® Security Assist isa.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxCUIService.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxEM.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHDCPSvc.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHeciSvc.exe\n(Solutions de connectivité sans fil Intel® -> Intel Corporation) C: Windows System32 ibtsiva.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows Microsoft.NET Framework64 v3.0 WPF PresentationFontCache.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows SystemApps Microsoft.MicrosoftEdge_8wekyb3d8bbwe MicrosoftEdge.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe WinStore.App.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 browser_broker.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeCP.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeSH.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 SecurityHealthHost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 wlanext.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkAudioService64.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe \n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Desktop.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_w32.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_x64.exe","==================== Registre (liste blanche) ===================","(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)","HKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8790264 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [PowerDVD14Agent] => C: Program Files (x86) CyberLink PowerDVD14 PowerDVD14Agent.exe [795336 2015-10-01] (CyberLink Corp. -> CyberLink Corp.)\nHKLM-x32 … Exécuter: [HostManager] => C: Program Files (x86) Common Files AOL 1474834258 ee AOLSoftware.exe [41800 2010-03-08] (AOL Inc. -> AOL Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [CCleaner Monitoring] => C: Program Files CCleaner CCleaner64.exe [19645800 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [HP Officejet 5740 series (NET)] => C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe [3769248 2019-03-19] (HP Inc -> HP Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … MountPoints2: 31631547-282d-11ea-9d24-08d40c8c8d7b – "H: autorun.exe" \nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.138 Installer chrmstp.exe [2020-05-08] (Google LLC -> Google LLC)\nDémarrage: C: Users phyli AppData Roaming Microsoft Windows Start Menu Programs Startup AOL Desktop Launcher.lnk [2020-05-11]\nShortcutTarget: AOL Desktop Launcher.lnk -> C: Users phyli AppData Local AOLDesktop AolTrayApp.exe (AOL, Inc -> AOL Inc.)","==================== Tâches planifiées (liste blanche) ============","(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","Tâche: 0338B702-2581-4FA4-91AE-848E0471747D – System32 Tasks Hewlett-Packard HP Active Health HP Active Health Scan (HPSA) => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPActiveHealth ActiveHealth.exe [25128 2017-11-20] (HP Inc. ->)\nTâche: 0BC2EE53-122D-4F08-B931-2D8EBC0B87C0 – System32 Tasks Norton 360 Norton 360 Autofix => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 19444715-C7A7-4B9E-ADC9-E9EAA4A336FB – System32 Tasks Microsoft Windows RemovalTools MRT_ERROR_HB => C: WINDOWS system32 MRT.exe [121542864 2020-03-11] (Microsoft Windows -> Microsoft Corporation) [File not signed]\nTâche: 1A92604C-9785-4B3F-BABF-B9344300A525 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_DeviceScan => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 23805DAC-C2B3-4B17-8267-1B13BCF64F3F – System32 Tasks HPCustParticipation HP Officejet série 5740 => C: Program Files HP HP Officejet série 5740 Bin HPCustPartic.exe [6437792 2019-03-19] (HP Inc -> HP Inc.)\nTâche: 26862040-7E37-4842-8060-616A847935D7 – Microsoft Windows UNP RunCampaignManager -> Aucun fichier <==== ATTENTION\nTâche: 2892222B-8961-44EA-A488-4EAF68E62FF6 ​​- System32 Tasks Hewlett-Packard HP Support Assistant PC Health Analysis => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 30798301-D556-4A67-A303-E078BAEEA94D – System32 Tasks HPCeeScheduleForphyli => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe [96568 2015-06-16] (Société Hewlett-Packard -> Hewlett-Packard)\nTâche: 3BF5FEFF-B156-442E-83A7-88538B7E0701 – System32 Tasks CCleanerSkipUAC => C: Program Files CCleaner CCleaner.exe [14679256 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 466881AC-5DFD-4836-B0D9-F7634D65DB29 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1698000 2015-06-05] (Logiciel Intel® -> Intel Corporation)\nTâche: 4A88543E-19C3-49EC-A150-14140125BD0D – System32 Tasks CCleaner Update => C: Program Files CCleaner CCUpdate.exe [619416 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 5359FDCE-AFC2-4D1D-A5B9-56F1617BF591 – System32 Tasks DropboxUpdateTaskMachineCore => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nTâche: 5E7E7438-1246-4277-9A2F-C6411DB6349C – System32 Tasks Hewlett-Packard HP Support Assistant Product Configurator => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources ProductConfig .EXE [320856 2020-04-23] (HP Inc. -> HP Inc.)\nTâche: 69EFEB71-23BC-4B1C-BE4F-7B71587FEDAB – System32 Tasks Norton 360 Norton 360 Error Processor => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 6CD0BF4F-6054-4830-9806-972847917DB9 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Assistant Quick Start => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 72D22111-0F52-45AE-8C72-7B54E7179787 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 7DBD3255-B12E-48C1-99D9-7E999C324195 – System32 Tasks Hewlett-Packard HP Support Assistant Critical Update Pending => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 8613B10A-F593-4051-B6D3-C1174FAB8609 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_TH6254X0JD => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 990D433C-DF44-4DE9-893D-0F707834FF54 – System32 Tasks Remediation AntimalwareMigrationTask => C: Program Files Common Files AV Norton 360 Upgrade.exe [2162704 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 9A8CA25D-1EE2-4A1C-BC11-133EB4DE03F3 – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: AEF5F555-14EA-4D89-BA5E-16BC63091F73 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: B3DBA422-AB32-4861-895F-EF36381A7F1D – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: BFBE589E-4AF0-44AC-90B7-FA7DB538250A – System32 Tasks DropboxOEM => C: Program Files (x86) Dropbox DropboxOEM DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc ->)\nTâche: C0665B30-D9E6-421F-9B25-37FF210D048A – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Gestionnaire d'actifs logiciels bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: C09D1165-9A84-48B3-88AA-EB9B83A7142E – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Report => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSFReport.exe [134008 2020-03-25] (HP Inc. -> HP Inc.)\nTâche: C0EC152F-0F52-4482-9B82-0859E05A899B – Analyseur d'erreur System32 Tasks Norton 360 Norton 360 => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: CA553F06-3C9D-4899-9117-B49C1C5FFF46 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: CEE140FD-BB4B-4A75-BEDF-5B0DC2E129AC – System32 Tasks Norton WSC Integration => C: Program Files Norton Security Engine 22.20.2.57 WSCStub.exe [645008 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: DA0C5F76-E8A2-4899-B9E2-1DEA8509D76A – System32 Tasks IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C: Program Files (x86) Intel Intel® Update Manager bin iumsvc .EXE\nTâche: E3CADEF5-B4B0-44FC-8B66-A0A6738B95FC – System32 Tasks DropboxUpdateTaskMachineUA => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)","(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)","Tâche: C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job => C: WINDOWS explorer.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineCore.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineUA.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks HPCeeScheduleForphyli.job => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe","==================== Internet (liste blanche) ====================","(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)","Tcpip .. Interfaces 686E1526-5487-4579-9D5C-7D997F0C562C: [NameServer] 10.255.0.0\nTcpip .. Interfaces 93fb8a86-3933-4476-8281-93ec070b093c: [DhcpNameServer] 192.168.1.1\nTcpip .. Interfaces aa2d2754-dc20-488c-91bb-6e946e6395e0: [DhcpNameServer] 192.168.1.1","Internet Explorer:\n==================\nHKLM SOFTWARE Policies Microsoft Internet Explorer: restriction <==== ATTENTION\nHKLM Software Microsoft Internet Explorer Main, Page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKLM Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nSearchScopes: HKLM -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKLM-x32 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKU S-1-5-21-999762305-681959455-3457413626-1001 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nBHO: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: extension Evernote -> 92EF2EAD-A7CE-4424-B0DB-499CF856608E -> C: Program Files (x86) Evernote Evernote EvernoteIE.dll [2015-07-01] (EVERNOTE CORPORATION -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)\nBHO-x32: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)\nBarre d'outils: HKLM – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBarre d'outils: HKLM-x32 – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)","Bord: \n======\nDownloadDir: C: Users phyli Downloads\nExtension de bord: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C: Program Files WindowsApps EyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11]\nExtension Edge: (AdGuard AdBlocker) -> EdgeExtension_AdguardAdguardAdBlocker_m055xr0c82818 => C: Program Files WindowsApps Adguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09]","FireFox:\n========\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI ipt; version = 4.0.68 -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIIPT.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI Updater -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIUpdater.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ viewpoint.com / VMP -> C: Program Files (x86) Viewpoint Viewpoint Experience Technology npViewpoint.dll [2004-02-20] () [File not signed]","Chrome: \n=======\nCHR DefaultProfile: Par défaut\nProfil CHR: C: Users phyli AppData Local Google Chrome User Data Default [2020-05-12]\nCHR DefaultSearchURL: Par défaut -> hxxps: //s.aolcdn.com/webmail-static/webmail/180517.1559/aol/en-us/images/favicon.ico\nExtension CHR: (diapositives) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aapocclcgogkmnckokdopfmhonfmgoek [2018-01-12]\nExtension CHR: (Docs) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aohghmighlieiainnegkcijnfilokake [2018-01-12]\nExtension CHR: (Google Drive) – C: Users phyli AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2018-01-12]\nExtension CHR: (YouTube) – C: Users phyli AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-12]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users phyli AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-05-11]\nExtension CHR: (Sheets) – C: Users phyli AppData Local Google Chrome User Data Default Extensions felcaaldnbdncclmgdcncolpebgiejap [2018-01-12]\nExtension CHR: (Google Docs hors ligne) – C: Users phyli AppData Local Google Chrome User Data Default Extensions ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-11]\nExtension CHR: (Paiements Chrome Web Store) – C: Users phyli AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2020-04-15]\nExtension CHR: (Mon AOL) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pigepclndadjaebpijfcjeeefpjhcdca [2018-05-22]\nExtension CHR: (Gmail) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-17]\nExtension CHR: (Chrome Media Router) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-11]","==================== Services (liste blanche) ===================","(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","S2 dbupdate; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nS3 dbupdatem; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nR2 HPSupportSolutionsFrameworkService; C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe [378744 2020-03-31] (HP Inc. -> HP Inc.)\nR2 HPTouchpointAnalyticsService; C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe [332216 2017-11-23] (HP Inc. -> HP Inc.)\nR2 ibtsiva; C: WINDOWS System32 ibtsiva.exe [536864 2020-01-06] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nS3 Intel® Capability Licensing Service TCP IP Interface; C: Program Files Intel iCLS Client SocketHeciServer.exe [881152 2015-05-22] (Service Intel® Trusted Connect -> Intel® Corporation)\nR3 Intel® Security Assist; C: Program Files (x86) Intel Intel® Security Assist isa.exe [335872 2015-05-19] (Société intel) [File not signed]\nS3 Intel® WiDi SAM; C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nR2 IRMTService; c: Program Files Intel Intel® Ready Mode Technology IRMTService.exe [181520 2015-07-13] (Intel CASE -> Intel Corporation)\nS2 isaHelperSvc; C: Program Files (x86) Intel Intel® Security Assist isaHelperService.exe [7680 2015-05-19] () [File not signed]\nR2 jhi_service; C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe [207648 2015-10-16] (Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation)\nS3 MyWiFiDHCPDNS; C: Program Files Intel WiFi bin PanDhcpDns.exe [310880 2018-09-05] (Intel Corporation ->)\nR2 NortonSecurity; C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe [344760 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 nsWscSvc; C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe [1055960 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 RichVideo64; C: Program Files CyberLink Fichiers partagés RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. ->)\nR2 RtkAudioService; C: Program Files Realtek Audio HDA RtkAudioService64.exe [316152 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nR2 TeamViewer; C: Program Files (x86) TeamViewer TeamViewer_Service.exe [13252624 2020-04-23] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nS3 WdNisSvc; C: Program Files Windows Defender NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nS3 WinDefend; C: Program Files Windows Defender MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nR2 ZeroConfigService; C: Program Files Intel WiFi bin ZeroConfigService.exe [4059744 2018-09-05] (Intel Corporation -> Intel® Corporation)\nS4 WRSVC; Service "C: Program Files Webroot WRSA.exe" [X]","===================== Pilotes (sur liste blanche) ===================","(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","R1 BHDrvx64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions BASHDefs 20200511.006 BHDrvx64.sys [1952136 2020-05-11] (Symantec Corporation -> Symantec Corporation)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-17] (Microsoft Corporation) [File not signed]\nR1 ccSet_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 ccSetx64.sys [192376 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 eeCtrl; C: Program Files (x86) Common Files Symantec Shared EENGINE eeCtrl64.sys [516784 2019-10-08] (Symantec Corporation -> Symantec Corporation)\nU3 EraserUtilDrv11910; C: Program Files (x86) Common Files Symantec Shared EENGINE EraserUtilDrv11910.sys [154288 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 ibtusb; C: WINDOWS System32 DriverStore FileRepository ibtusb.inf_amd64_b45bba99c1e61776 ibtusb.sys [301560 2019-12-02] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR1 IDSVia64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions IPSDefs 20200512.061 IDSvia64.sys [1451016 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 IntelReadyModeDriver; C: WINDOWS System32 drivers IntelReadyModeDriver.sys [33512 2015-07-13] (Intel CASE -> Intel Corporation)\nR0 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [253880 2018-01-12] (Malwarebytes Corporation -> Malwarebytes)\nR3 Netwtw04; C: WINDOWS system32 DRIVERS Netwtw04.sys [8720384 2019-08-27] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR3 rt640x64; C: WINDOWS System32 drivers rt640x64.sys [886528 2015-06-03] (Realtek Semiconductor Corp -> Realtek)\nR3 RTSUER; C: WINDOWS system32 Drivers RtsUer.sys [402136 2015-05-27] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation)\nR3 SRTSP; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSP64.SYS [889520 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SRTSPX; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSPX64.SYS [50864 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR0 SymEFASI; C: WINDOWS System32 drivers NGCx64 1614020.039 SYMEFASI64.SYS [1964552 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS0 SymELAM; C: WINDOWS System32 drivers NGCx64 1614020.039 SymELAM.sys [25024 2020-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)\nR3 SymEvent; C: WINDOWS system32 Drivers SYMEVENT64x86.SYS [99848 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 SymEvnt; C: Program Files Norton Security NortonData 22.20.2.57 SymPlatform SymEvnt.sys [712368 2020-01-06] (Symantec Corporation -> Symantec Corporation)\nR1 SymIRON; C: WINDOWS System32 drivers NGCx64 1614020.039 Ironx64.SYS [316656 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SymNetS; C: WINDOWS System32 drivers NGCx64 1614020.039 symnets.sys [575280 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR3 wanatw; C: WINDOWS System32 drivers wanatw64.sys [24064 2006-11-29] (Éditeur de compatibilité matérielle Microsoft Windows -> America Online, Inc.)\nS3 WdBoot; C: WINDOWS system32 drivers WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nS3 WdFilter; C: WINDOWS system32 drivers WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nS3 WdNisDrv; C: WINDOWS System32 Drivers WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nR1 wpCtrlDrv_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 wpCtrlDrv.sys [1012120 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS4 WRBoot; System32 drivers WRBoot.sys [X]\nR4 WRkrn; System32 drivers WRkrn.sys [X]","==================== NetSvcs (liste blanche) ====================","(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","==================== Un mois (créé) ===================","(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)","2020-05-12 20:54 – 2020-05-12 20:55 – 000027915 _____ C: Users phyli Downloads FRST.txt\n2020-05-12 20:54 – 2020-05-12 20:55 – 000000000 ____D C: FRST\n2020-05-12 20:53 – 2020-05-12 20:53 – 002285568 _____ (Farbar) C: Users phyli Downloads FRST64.exe\n2020-05-12 20:22 – 2020-05-12 20:22 – 000000000 ____D C: WINDOWS system32 Tasks Remediation\n2020-05-12 18:10 – 2020-05-12 18:14 – 000000000 ____D C: WINDOWS system32 Tasks Norton 360\n2020-05-12 18:08 – 2020-05-12 18:08 – 000099848 _____ (Symantec Corporation) C: WINDOWS system32 Drivers SYMEVENT64x86.SYS\n2020-05-12 18:08 – 2020-05-12 18:08 – 000008616 _____ C: WINDOWS system32 Drivers SYMEVENT64x86.CAT\n2020-05-12 18:08 – 2020-05-12 18:08 – 000003376 _____ C: WINDOWS system32 Tasks Norton WSC Integration\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: Users Public Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: ProgramData Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000000000 ____D C: Program Files Fichiers communs Symantec Shared\n2020-05-12 18:07 – 2020-05-12 18:08 – 000000000 ___RD C: ProgramData Microsoft Windows Menu Démarrer Programmes Norton Security\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: WINDOWS system32 Drivers NGCx64\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: Program Files Norton Security\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: ProgramData NortonInstaller\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: Program Files (x86) NortonInstaller\n2020-05-12 18:04 – 2020-05-12 18:04 – 003666744 _____ (Symantec Corporation) C: Users phyli Downloads N360Downloader.exe\n2020-05-12 18:04 – 2020-05-12 18:04 – 000001379 _____ C: Users phyli Desktop Norton Installation Files.lnk\n2020-05-12 18:04 – 2020-05-12 18:04 – 000000000 ____D C: Users Public Downloads Norton\n2020-05-11 19:43 – 2020-05-11 19:46 – 000000000 ____D C: Users phyli AppData Local TeamViewer\n2020-05-11 18:23 – 2020-05-11 18:24 – 000000000 ____D C: NPE\n2020-05-11 18:23 – 2020-05-11 18:22 – 000120122 _____ C: WINDOWS ntbtlog.txt\n2020-05-11 18:21 – 2020-05-11 18:22 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (2) .exe\n2020-05-11 18:17 – 2020-05-11 18:24 – 000000214 _____ C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job\n2020-05-11 18:11 – 2020-05-12 18:10 – 000000000 ____D C: ProgramData Norton\n2020-05-11 18:11 – 2020-05-11 19:55 – 000000000 ____D C: Users phyli AppData Local NPE\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE.exe\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (1) .exe\n2020-05-11 17:52 – 2020-05-12 18:30 – 000000000 ____D C: Program Files (x86) TeamViewer\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001119 _____ C: ProgramData Microsoft Windows Start Menu Programs TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: Users Public Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: ProgramData Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000000000 ____D C: Users phyli AppData Roaming TeamViewer\n2020-05-11 17:49 – 2020-05-11 17:49 – 026709944 _____ (TeamViewer Germany GmbH) C: Users phyli Downloads TeamViewer_Setup.exe\n2020-05-11 15:32 – 2020-05-11 15:32 – 000000000 ____D C: Users phyli Documents 1-888-511-8605\n2020-05-11 15:28 – 2020-05-11 15:28 – 000290304 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 subinacl.exe\n2020-05-11 15:28 – 2020-05-11 15:28 – 000000000 ____D C: Program Files (x86) Adware Removal Tool by TSA\n2020-05-11 15:25 – 2020-05-11 15:26 – 000000000 ____D C: Users phyli AppData Local PlaceholderTileLogoFolder\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ C: Users phyli AppData Local Resmon.ResmonCfg\n2020-04-15 17:35 – 2020-04-15 17:35 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 001151816 _____ (Microsoft Corporation) C:WINDOWSsystem32mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001013000 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000983040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmkvsrcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Mirage.Internal.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000689152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CPFilters.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000686080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64jscript.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-15 17:35 – 2020-04-15 17:35 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 022636544 _____ (Microsoft Corporation) C:WINDOWSsystem32mshtml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 008013824 _____ (Microsoft Corporation) C:WINDOWSsystem32mstscax.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007756800 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakra.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006523048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004611584 _____ (Microsoft Corporation) C:WINDOWSsystem32msi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 004538880 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800640 _____ (Microsoft Corporation) C:WINDOWSsystem32WinSAT.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800128 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-15 17:34 – 2020-04-15 17:34 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001665216 _____ (Microsoft Corporation) C:WINDOWSSysWOW64user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001545216 _____ (Microsoft Corporation) C:WINDOWSsystem32mstsc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001477112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001458688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001397576 _____ (Microsoft Corporation) C:WINDOWSsystem32hvix64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001077064 _____ (Microsoft Corporation) C:WINDOWSsystem32hvax64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001008128 _____ (Microsoft Corporation) C:WINDOWSsystem32StorSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000868864 _____ (Microsoft Corporation) C:WINDOWSSysWOW64windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000836608 _____ (Microsoft Corporation) C:WINDOWSsystem32jscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000835584 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkfoldersControl.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000783480 _____ (Microsoft Corporation) C:WINDOWSsystem32tcblaunch.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000775696 _____ (Microsoft Corporation) C:WINDOWSsystem32securekernel.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000768528 _____ (Microsoft Corporation) C:WINDOWSSysWOW64winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673464 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000668672 _____ (Microsoft Corporation) C:WINDOWSsystem32wsecedit.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000665088 _____ (Microsoft Corporation) C:WINDOWSSysWOW64netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000647680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000555008 _____ (Microsoft Corporation) C:WINDOWSsystem32appwiz.cpl\n2020-04-15 17:34 – 2020-04-15 17:34 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-15 17:34 – 2020-04-15 17:34 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-15 17:21 – 2020-04-15 17:22 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-15 17:21 – 2020-04-15 17:22 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-15 15:45 – 2020-05-12 18:06 – 000000000 ____D C:ProgramDataWRCore","==================== One month (modified) ==================","(If an entry is included in the fixlist, the file/folder will be moved.)","2020-05-12 20:22 – 2016-02-17 04:13 – 000000000 ____D C:Program FilesCommon FilesAV\n2020-05-12 20:16 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-05-12 20:05 – 2018-07-16 18:15 – 000000000 ____D C:UsersphyliAppDataLocalD3DSCache\n2020-05-12 18:40 – 2019-08-15 19:04 – 000003256 _____ C:WINDOWSsystem32TasksHPCeeScheduleForphyli\n2020-05-12 18:40 – 2019-06-17 18:01 – 000000364 _____ C:WINDOWSTasksHPCeeScheduleForphyli.job\n2020-05-12 18:09 – 2019-03-19 00:37 – 000032768 _____ C:WINDOWSsystem32configELAM\n2020-05-12 18:08 – 2019-03-19 00:52 – 000000000 ___HD C:WINDOWSELAMBKUP\n2020-05-12 18:07 – 2017-01-27 14:00 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocalLowwebroot\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocallptmp\n2020-05-12 18:01 – 2016-09-25 15:43 – 000000000 __SHD C:UsersphyliIntelGraphicsProfiles\n2020-05-12 10:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-05-12 10:10 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-05-11 19:48 – 2019-08-15 18:57 – 000935056 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-05-11 19:48 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-05-11 19:42 – 2019-08-15 19:04 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-05-11 19:42 – 2019-03-19 00:37 – 000524288 _____ C:WINDOWSsystem32configBBI\n2020-05-11 19:22 – 2019-08-15 18:45 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-05-11 18:17 – 2019-08-15 18:45 – 000276104 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-05-11 18:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32NDF\n2020-05-11 15:26 – 2018-03-16 00:06 – 000000000 ____D C:UsersphyliAppDataLocalPackages\n2020-05-11 14:53 – 2018-01-12 12:48 – 000000000 ____D C:UsersphyliAppDataLocalGoToAssist Remote Support Customer\n2020-05-11 12:06 – 2017-08-28 10:13 – 000002326 _____ C:UsersphyliDesktopAOL Desktop Gold.lnk\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsAOL Inc\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalAOLDesktop\n2020-05-11 12:05 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalSquirrelTemp\n2020-05-10 04:33 – 2019-08-15 19:04 – 000003376 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-999762305-681959455-3457413626-1001\n2020-05-10 04:33 – 2019-08-15 18:51 – 000002370 _____ C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-05-10 04:33 – 2016-09-25 15:46 – 000000000 ___RD C:UsersphyliOneDrive\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002308 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:UsersPublicDesktopGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:ProgramDataDesktopGoogle Chrome.lnk\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-15 17:38 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp","==================== Files in the root of some directories ========","2018-01-12 13:24 – 2018-01-12 13:24 – 018102328 _____ (Webroot Software, Inc.) C:Program Files (x86)Common Fileswruninstall.exe\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ () C:UsersphyliAppDataLocalResmon.ResmonCfg","==================== SigCheck ============================","(There is no automatic fix for files that do not pass verification.)","==================== End of FRST.txt ========================'","Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2020\nRan by phyli (12-05-2020 20:56:18)\nRunning from C:UsersphyliDownloads\nWindows 10 Home Version 1903 18362.778 (X64) (2019-08-15 23:04:54)\nBoot Mode: Normal\n==========================================================","==================== Accounts: =============================","Administrator (S-1-5-21-999762305-681959455-3457413626-500 – Administrator – Disabled)\nDefaultAccount (S-1-5-21-999762305-681959455-3457413626-503 – Limited – Disabled)\ndefaultuser100001 (S-1-5-21-999762305-681959455-3457413626-1003 – Limited – Enabled)\nGuest (S-1-5-21-999762305-681959455-3457413626-501 – Limited – Disabled)\nphyli (S-1-5-21-999762305-681959455-3457413626-1001 – Administrator – Enabled) => C:Usersphyli\nWDAGUtilityAccount (S-1-5-21-999762305-681959455-3457413626-504 – Limited – Disabled)","==================== Security Center ========================","(If an entry is included in the fixlist, it will be removed.)","AV: Norton 360 (Enabled – Up to date) 1122B19A-E671-38EC-8EAC-87048FD4528D\nAV: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAV: Webroot SecureAnywhere (Enabled – Up to date) DF901FA1-F926-253B-C464-B01C79DCAD48\nAS: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Webroot SecureAnywhere (Enabled – Up to date) 64F1FE45-DF1C-2AB5-FED4-8B6E025BE7F5\nFW: Norton 360 (Enabled) 291930BF-AC1E-39B4-A5F3-2E31710715F6","==================== Installed Programs ======================","(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)","AOL Desktop Gold (HKUS-1-5-21-999762305-681959455-3457413626-1001…AOLDesktop) (Version: 11.0.2664 – Oath Inc.)\nAOL Uninstaller (Choose which Products to Remove) (HKLM-x32…AOL Uninstaller) (Version:  – AOL Inc.)\nBonjour (HKLM…6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D) (Version: 3.0.0.10 – Apple Inc.)\nCCleaner (HKLM…CCleaner) (Version: 5.38 – Piriform)\nCyberLink PhotoDirector (HKLM…5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.) Hidden\nCyberLink PhotoDirector (HKLM-x32…InstallShield_5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.)\nCyberLink Power Media Player 14 (HKLM-x32…32C8E300-BDB4-4398-92C2-E9B7D8A233DB) (Version: 14.0.2.5801 – CyberLink Corp.)\nCyberLink PowerDirector 12 (HKLM…E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.) Hidden\nCyberLink PowerDirector 12 (HKLM-x32…InstallShield_E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.)\nDropbox 25 GB (HKLM-x32…867A88D-764F-366E-9E21-130DA8B472C3) (Version: 3.1.18.0 – Dropbox, Inc.)\nDropbox Update Helper (HKLM-x32…99218A5-A723-43DC-8DB5-6173656A1E94) (Version: 1.3.295.1 – Dropbox, Inc.) Hidden\nEvernote v. 5.8.13 (HKLM-x32…A229420E-204B-11E5-B844-0050569584E9) (Version: 5.8.13.8152 – Evernote Corp.)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.138 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nHP Documentation (HKLM…HP_Documentation) (Version: 1.0.0.1 – HP)\nHP Dropbox Plugin (HKLM-x32…C54DEA1F-7A8D-410B-A675-04E0FB562CB0) (Version: 40.13.54.81239 – HP)\nHP Google Drive Plugin (HKLM-x32…533B4739-13DD-4AAB-9524-070B3F0CE6ED) (Version: 40.13.54.81239 – HP)\nHP Officejet 5740 series Basic Device Software (HKLM…8C417009-7889-42BC-8164-C74FFF358CE6) (Version: 40.13.1176.1978 – HP Inc.)\nHP Officejet 5740 series Help (HKLM-x32…F17D53C7-DCE8-469C-9690-CF8F5903519C) (Version: 34.0.0 – Hewlett Packard)\nHP Photo Creations (HKLM-x32…HP Photo Creations) (Version: 1.0.0.9572 – HP)\nHP Registration Service (HKLM…D1E8F2D7-7794-4245-B286-87ED86C1893C) (Version: 1.2.8318.5320 – Hewlett-Packard)\nHP Support Assistant (HKLM-x32…79C54A05-F146-4EA0-8A70-D4EFE6181E52) (Version: 8.8.24.33 – Hewlett-Packard Company)\nHP Support Information (HKLM-x32…76272057-98E0-4DC4-AAC3-10C546C47195) (Version: 14.00.0000 – Hewlett-Packard)\nHP Support Solutions Framework (HKLM-x32…55065080-504F-43BB-BE00-36B80D7D39A5) (Version: 12.15.14.3 – Hewlett-Packard Company)\nHP Touchpoint Analytics Client (HKLM…E5FB98E0-0784-44F0-8CEC-95CD4690C43F) (Version: 4.0.2.1439 – HP Inc.)\nHP Welcome (HKLM…HPWelcome) (Version: 1.0 – HP Inc.)\nI.R.I.S. OCR (HKLM-x32…11ED31EC-7EFA-4D56-B71D-E0214C8984CC) (Version: 12.3.7.0 – HP)\nIntel® Chipset Device Software (HKLM-x32…a2d9fda8-65eb-4c06-81ef-31e0a4daa335) (Version: 10.1.1.11 – Intel® Corporation) Hidden\nIntel® Management Engine Components (HKLM…1CEAC85D-2590-4760-800F-8DE5E91F3700) (Version: 11.0.0.1173 – Intel Corporation)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 25.20.100.6446 – Intel Corporation)\nIntel® Ready Mode Technology (HKLM…9F82AA39-BB14-4BD3-98EF-D4E9E3526B7D) (Version: 1.1.70.514 – Intel Corporation)\nIntel® WiDi (HKLM…5DD8D7E4-87F1-4134-AD28-4228FB1A03BA) (Version: 6.0.44.0 – Intel Corporation)\nIntel® WiDi Software Asset Manager (HKLM-x32…86905E62-645F-482E-A417-82C812ABD787) (Version: 1.1.383 – Intel Corporation) Hidden\nIntel® Wireless Bluetooth® (HKLM-x32…4DA9DC19-4E1D-4B10-A726-A5F2A1BC7265) (Version: 18.1.1546.2762 – Intel Corporation)\nIntel® PROSet/Wireless Software (HKLM-x32…f8c930bd-0a68-425f-8c11-87723d1e2c97) (Version: 20.90.0 – Intel Corporation)\nIntel® Security Assist (HKLM-x32…4B230374-6475-4A73-BA6E-41015E9C5013) (Version: 1.0.0.532 – Intel Corporation)\nMicrosoft Office (HKLM-x32…90150000-0138-0409-0000-0000000FF1CE) (Version: 15.0.4693.1005 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-999762305-681959455-3457413626-1001…OneDriveSetup.exe) (Version: 20.052.0311.0011 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…837b34e3-7c30-493c-8f6a-2b0f04e2912c) (Version: 8.0.59193 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.21005 (HKLM-x32…ce085a78-074e-4823-8dc1-8a721b94b76d) (Version: 12.0.21005.1 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nNorton 360 (HKLM-x32…NGC) (Version: 22.20.2.57 – Symantec Corporation)\nProduct Improvement Study for HP Officejet 5740 series (HKLM…D4B37902-C484-4AAC-B3B8-70C203C4FAB3) (Version: 40.13.1176.1978 – HP Inc.)\nRealtek Card Reader (HKLM-x32…5BC2B5AB-80DE-4E83-B8CF-426902051D0A) (Version: 10.0.10125.31214 – Realtek Semiconductor Corp.)\nRealtek Ethernet Controller Driver (HKLM-x32…8833FFB6-5B0C-4764-81AA-06DFEED9A476) (Version: 10.1.505.2015 – Realtek)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7673 – Realtek Semiconductor Corp.)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.5.3 – TeamViewer)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…16AD6161-2E47-4BF1-AA77-0946EFE93E08) (Version: 2.61.0.0 – Microsoft Corporation)\nUpdateAssistant (HKLM…E1D7CB46-BAE9-4D58-99C4-582332B1755A) (Version: 1.13.0.0 – Microsoft Corporation) Hidden\nViewpoint Media Player (HKLM-x32…ViewpointMediaPlayer) (Version:  – )\nVulkan Run Time Libraries 1.0.54.1 (HKLM…VulkanRT1.0.54.1) (Version: 1.0.54.1 – LunarG, Inc.) Hidden\nWindows 10 Update Assistant (HKLM-x32…D5C69738-B486-402E-85AC-2456D98A64E4) (Version: 1.4.9200.22395 – Microsoft Corporation)\nWindows Setup Remediations (x64) (KB4023057) (HKLM…5534e02f-0f5d-40dd-ba92-bea38d22384d.sdb) (Version:  – )","Packages:\n=========\nAdblock Plus -> C:Program FilesWindowsAppsEyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11] (eyeo GmbH)\nAdGuard AdBlocker -> C:Program FilesWindowsAppsAdguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09] (Performix)\nAmazon -> C:Program FilesWindowsAppsAmazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2020-02-29] (Amazon.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.167.200.0_x86__kgqvnymyfvs32 [2020-05-06] (king.com)\nHearts Deluxe -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.HeartsDeluxe_6.6.26.0_x64__kx24dqmazqk8j [2020-01-25] (Random Salad Games LLC) [MS Ad]\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-15] (HP Inc.)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-02] (Microsoft Studios) [MS Ad]\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nNetflix -> C:Program FilesWindowsApps4DF9E0F8.Netflix_6.96.725.0_x64__mcm4njqhnhss8 [2020-04-10] (Netflix, Inc.)\nSimple Solitaire -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.SimpleSolitaire_6.18.78.0_x64__kx24dqmazqk8j [2020-03-03] (Random Salad Games LLC) [MS Ad]\nSnapfish -> C:Program FilesWindowsAppsAD2F1837.HPConnectedPhotopoweredbySnapfish_6.1.736.0_x86__v10z8vjag6ke6 [2018-08-05] (Snapfish)\nTripAdvisor Hotels Flights Restaurants -> C:Program FilesWindowsAppsTripAdvisorLLC.TripAdvisorHotelsFlightsRestaurants_1.5.10.0_x64__qj0v5chwq8f2g [2016-11-18] (TripAdvisor LLC)\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-09] (Twitter Inc.)","==================== Custom CLSID (Whitelisted): ==============","(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","ShellIconOverlayIdentifiers: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers2: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 =>  -> No File\nContextMenuHandlers5: [igfxDTCM] -> 9B5F5829-A529-4B12-814A-E81BCB8D93FC => C:WINDOWSSystem32DriverStoreFileRepositoryki131064.inf_amd64_5d13f27a9a9843faigfxDTCM.dll [2019-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers6: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers6: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)","==================== Codecs (Whitelisted) ====================","(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)","HKLM…Drivers32: [vidc.i420] => C:WINDOWSsystem32lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.)\nHKLM…Drivers32: [vidc.i420] => C:WindowsSysWOW64lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.)","==================== Shortcuts & WMI ========================","(The entries could be listed to be restored or removed.)","ShortcutWithArgument: C:UsersphyliDesktopMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsChrome AppsMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:ProgramDataMicrosoftWindowsStart MenuProgramsPriceline.com.lnk -> C:Program Files (x86)Hewlett-PackardSharedWizLink.exe () -> hxxp://www.priceline.com/?refid=PLHBC6240OPQ&refclickid=square","==================== Loaded Modules (Whitelisted) =============","==================== Alternate Data Streams (Whitelisted) ========","==================== Safe Mode (Whitelisted) ==================","(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)","HKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521 => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521.SYS => ""="Driver"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkWRBoot => ""="Driver"","==================== Association (Whitelisted) =================","==================== Internet Explorer trusted/restricted ==========","==================== Hosts content: =========================","(If needed Hosts: directive could be included in the fixlist to reset Hosts.)","2015-10-30 03:24 – 2015-10-30 03:21 – 000000824 ____N C:WINDOWSsystem32driversetchosts","==================== Other Areas ===========================","(Currently there is no automatic fix for this section.)","HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)InteliCLS Client;C:Program FilesInteliCLS Client;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program Files (x86)IntelIntel® Management Engine ComponentsDAL;C:Program FilesIntelIntel® Management Engine ComponentsDAL;C:Program Files (x86)IntelIntel® Management Engine ComponentsIPT;C:Program FilesIntelIntel® Management Engine ComponentsIPT;%SYSTEMROOT%System32OpenSSH;C:Program FilesIntelWiFibin;C:Program FilesCommon FilesIntelWirelessCommon\nHKUS-1-5-21-999762305-681959455-3457413626-1001Control PanelDesktop\\Wallpaper -> \nDNS Servers: 192.168.1.1 – 10.255.0.0\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: Warn)\nWindows Firewall is enabled.","==================== MSCONFIG/TASK MANAGER disabled items ==","(If an entry is included in the fixlist, it will be removed.)","HKLM…StartupApprovedStartupFolder: => "Install LastPass IE RunOnce.lnk"\nHKLM…StartupApprovedRun: => "RTHDVCPL"\nHKLM…StartupApprovedRun32: => "PowerDVD14Agent"\nHKLM…StartupApprovedRun32: => "WRSVC"\nHKLM…StartupApprovedRun32: => "HostManager"\nHKLM…StartupApprovedRun32: => "SecurityHealth"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedStartupFolder: => "AOL Desktop Launcher.lnk"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "CCleaner Monitoring"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "OneDrive"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026amd64"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026"","==================== FirewallRules (Whitelisted) ================","(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","FirewallRules: [54640540-F97A-4412-900E-39472727094D] => (Allow) C:Program FilesIntelWiFibinPanDhcpDns.exe (Intel Corporation -> )\nFirewallRules: [8DC4717E-FCAF-469D-9E12-79DB0B253EF1] => (Allow) C:Program FilesCommon FilesMcAfeeMMSSHostMMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)\nFirewallRules: [791E7CF7-C352-4609-87FE-4C2E705A6E1F] => (Allow) C:Program Files (x86)Common FilesMcafeeMMSSHostMMSSHost.exe => No File\nFirewallRules: [AF62C409-25E2-4AEC-9DEC-12B069A10F79] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [F3B8345F-5967-46B5-BA4F-A598A14D09D3] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [FF87652F-D92F-4FD5-B8D2-DC22659AB369] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [29CAECA3-8459-490A-B734-D5D8B16E5BC5] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [3241FBCD-FFAC-4EE7-8F09-8A5105596348] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [1958B452-6813-4A87-A829-95800B9FDB77] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [E46AC436-D866-4D71-B2B9-ADE4A9339A1B] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [975C4FE9-8C93-4A39-AD4A-033BF7D371FD] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [A012B925-4D8A-4CA0-90E5-ECD661D3E083] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [DB6A911E-74F0-457F-BFF3-291FBD427D56] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9F2E22A7-C276-4028-875D-E9BE1FCE1F3D] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [71A37010-12B4-4407-B154-0F9980309A79] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [C733D88A-3187-4419-87C5-1A0EB1FDCCBB] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9A69636F-43A5-4523-ADC5-B05E7329E939] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [B745797E-820D-45A1-9096-B8F2E7D887CA] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVD CinemaPowerDVDCinema.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [8A476C2A-9A52-41E6-8608-EA62290278ED] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [F4ECB65E-59C8-477E-BA52-2A2020C15832] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD14Agent.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [76B1143C-70F8-452E-94C8-3CB3C4C595B6] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14KernelDMSCLMSServerPDVD14.exe (CyberLink Corp. -> CyberLink)\nFirewallRules: [903790A5-47BC-4DE7-B8EF-5FFA2A23BFF3] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [70D32C90-6419-457B-8B12-37EF83F7CB75] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [9027CB07-C9CF-4D46-8607-8A1AC3201DBF] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [3770051C-48E7-46F6-85CC-DCE51562BD14] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AB9F9C90-7C33-40D1-9DDF-CA8253003040] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [530F0275-912A-49A4-A418-E5014F38FF16] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxApplications.exe (HP Inc -> HP Inc.)\nFirewallRules: [4E862923-0E31-4D90-A8D4-BD42EF44D066] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinDigitalWizards.exe (HP Inc -> HP Inc.)\nFirewallRules: [6ACD8E74-027D-4580-8EE3-351AABAB3602] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinSendAFax.exe (HP Inc -> HP Inc.)\nFirewallRules: [61D83D5B-BCA4-4DDA-8B89-DF5986B5E587] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxPrinterUtility.exe (HP Inc -> HP Inc.)\nFirewallRules: [D83F6F84-CB01-4B1B-B74F-522E4ED00D68] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinDeviceSetup.exe (HP Inc -> HP Inc.)\nFirewallRules: [CBB4B686-C3E0-42EA-8BA8-FD001355A894] => (Allow) LPort=5357\nFirewallRules: [16643FC5-67E9-487C-B277-A99B9C0B0A91] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinHPNetworkCommunicatorCom.exe (HP Inc -> HP Inc.)\nFirewallRules: [38841FC4-2F6E-48B2-A565-A7D70AD5936C] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [4D96E522-6D29-4ED1-A56E-3DCF75D7A03E] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [E7F8679D-AFED-4B1A-9DCE-40715CC682D2] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [D06019FB-2384-4BB9-A71A-4CE2590E3755] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [170F4B69-67DF-4CB1-93D6-EC86EAE15F14] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)","==================== Restore Points =========================","20-04-2020 17:12:46 Windows Update\n28-04-2020 15:32:48 Scheduled Checkpoint\n07-05-2020 12:26:10 Scheduled Checkpoint\n11-05-2020 15:24:27 tech","==================== Faulty Device Manager Devices ============","==================== Event log errors: ========================","Application errors:\n==================\nError: (05/12/2020 08:10:51 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (832,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (05/12/2020 06:19:26 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (11352,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0","Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0","Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0","Error: (05/12/2020 06:08:14 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6280,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (05/12/2020 10:17:45 AM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6160,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","Error: (05/11/2020 08:06:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (3468,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","System errors:\n=============\nError: (05/11/2020 07:41:55 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server:\nWindows.Internal.CapabilityAccess.CapabilityAccess","Error: (05/11/2020 07:40:58 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC","Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030","Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030","Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030","Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030","Error: (05/11/2020 07:39:01 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC","Error: (05/11/2020 07:38:54 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC","CodeIntegrity:\n===================================","Date: 2020-05-12 18:10:41.976\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.","Date: 2020-05-12 18:10:35.458\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","Date: 2020-05-12 18:10:35.390\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","Date: 2020-05-12 18:10:35.376\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","Date: 2020-05-12 18:10:34.197\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","Date: 2020-05-12 18:10:34.178\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","Date: 2020-05-12 18:10:32.348\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.","Date: 2020-05-12 18:10:32.302\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.","==================== Memory info ===========================","BIOS: AMI A0.13 12/21/2015\nMotherboard: HP 2B47\nProcessor: Intel® Core™ i5-6400 CPU @ 2.70GHz\nPercentage of memory in use: 39%\nTotal physical RAM: 12183.87 MB\nAvailable physical RAM: 7377.78 MB\nTotal Virtual: 14039.87 MB\nAvailable Virtual: 8974.65 MB","==================== Drives ================================","Drive c: (Windows) (Fixed) (Total:1849.94 GB) (Free:1785.56 GB) NTFS\nDrive d: (Recovery Image) (Fixed) (Total:11.64 GB) (Free:1.51 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive e: (OS) (Fixed) (Total:581.11 GB) (Free:399.92 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive f: (RECOVERY) (Fixed) (Total:15 GB) (Free:0.29 GB) NTFS\nDrive h: (Apria DVD Project June 2019) (CDROM) (Total:7.95 GB) (Free:0 GB) UDF","\\?Volume43b2a7e8-a447-45e8-ac50-4bc30569771a (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.52 GB) NTFS\n\\?Volume832b0909-50d7-4b26-88e3-66a386fdb90d (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.27 GB) FAT32","==================== MBR & Partition Table ====================","==========================================================\nDisk: 0 (Size: 1863 GB) (Disk ID: 2BD6946D)","Partition: GPT.","==========================================================\nDisk: 1 (MBR Code: Windows 7 or Vista) (Size: 596.2 GB) (Disk ID: 90000000)\nPartition 1: (Not Active) – (Size=63 MB) – (Type=DE)\nPartition 2: (Not Active) – (Size=15 GB) – (Type=07 NTFS)\nPartition 3: (Active) – (Size=581.1 GB) – (Type=07 NTFS)","==================== End of Addition.txt =======================","Click to rate this post!\n \n [Total: 0 Average: 0]"],"content_blocks":[{"id":"text-1","type":"text","heading":"","plain_text":"Un ami est tombé pour une arnaque téléphonique hier et leur a permis d'accéder à distance à son ordinateur et leur a donné 500 $. Vous voulez vérifier que rien ne se cache en arrière-plan.","html":"

Un ami est tombé pour une arnaque téléphonique hier et leur a permis d'accéder à distance à son ordinateur et leur a donné 500 $. Vous voulez vérifier que rien ne se cache en arrière-plan.

"},{"id":"text-2","type":"text","heading":"","plain_text":"Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2020\nRan par phyli (administrateur) sur DESKTOP-GIRJ15B (HP 750-114) (12-05-2020 20:54:26)\nExécution à partir de C: Users phyli Downloads\nProfils chargés: phyli\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal","html":"

Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2020\nRan par phyli (administrateur) sur DESKTOP-GIRJ15B (HP 750-114) (12-05-2020 20:54:26)\nExécution à partir de C: Users phyli Downloads\nProfils chargés: phyli\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal

"},{"id":"text-3","type":"text","heading":"","plain_text":"==================== Processus (liste blanche) =================","html":"

==================== Processus (liste blanche) =================

"},{"id":"text-4","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)","html":"

(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)

"},{"id":"text-5","type":"text","heading":"","plain_text":"(Apple Inc. -> Apple Inc.) C: Program Files Bonjour mDNSResponder.exe\n(CyberLink Corp. ->) C: Program Files CyberLink Shared files RichVideo64.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler64.exe\n(Hewlett-Packard Company -> Hewlett-Packard Company) C: Program Files (x86) Hewlett-Packard Shared hpqwmiex.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin HPNetworkCommunicatorCom.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe\n(HP Inc. -> HP Inc.) C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe\n(HP Inc. -> HP Inc.) C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe\n(Intel CASE -> Intel Corporation) C: Program Files Intel Intel® Ready Mode Technology IRMTService.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components LMS LMS.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Fichiers communs Intel WirelessCommon RegSrvc.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin EvtEng.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin ZeroConfigService.exe\n(Société intel) [File not signed] C: Program Files (x86) Intel Intel® Security Assist isa.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxCUIService.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxEM.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHDCPSvc.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHeciSvc.exe\n(Solutions de connectivité sans fil Intel® -> Intel Corporation) C: Windows System32 ibtsiva.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows Microsoft.NET Framework64 v3.0 WPF PresentationFontCache.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows SystemApps Microsoft.MicrosoftEdge_8wekyb3d8bbwe MicrosoftEdge.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe WinStore.App.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 browser_broker.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeCP.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeSH.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 SecurityHealthHost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 wlanext.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkAudioService64.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe \n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Desktop.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_w32.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_x64.exe","html":"

(Apple Inc. -> Apple Inc.) C: Program Files Bonjour mDNSResponder.exe\n(CyberLink Corp. ->) C: Program Files CyberLink Shared files RichVideo64.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler64.exe\n(Hewlett-Packard Company -> Hewlett-Packard Company) C: Program Files (x86) Hewlett-Packard Shared hpqwmiex.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin HPNetworkCommunicatorCom.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe\n(HP Inc. -> HP Inc.) C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe\n(HP Inc. -> HP Inc.) C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe\n(Intel CASE -> Intel Corporation) C: Program Files Intel Intel® Ready Mode Technology IRMTService.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components LMS LMS.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Fichiers communs Intel WirelessCommon RegSrvc.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin EvtEng.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin ZeroConfigService.exe\n(Société intel) [File not signed] C: Program Files (x86) Intel Intel® Security Assist isa.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxCUIService.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxEM.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHDCPSvc.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHeciSvc.exe\n(Solutions de connectivité sans fil Intel® -> Intel Corporation) C: Windows System32 ibtsiva.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows Microsoft.NET Framework64 v3.0 WPF PresentationFontCache.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows SystemApps Microsoft.MicrosoftEdge_8wekyb3d8bbwe MicrosoftEdge.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe WinStore.App.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 browser_broker.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeCP.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeSH.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 SecurityHealthHost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 wlanext.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkAudioService64.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe \n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Desktop.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_w32.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_x64.exe

"},{"id":"text-6","type":"text","heading":"","plain_text":"==================== Registre (liste blanche) ===================","html":"

==================== Registre (liste blanche) ===================

"},{"id":"text-7","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)","html":"

(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)

"},{"id":"text-8","type":"text","heading":"","plain_text":"HKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8790264 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [PowerDVD14Agent] => C: Program Files (x86) CyberLink PowerDVD14 PowerDVD14Agent.exe [795336 2015-10-01] (CyberLink Corp. -> CyberLink Corp.)\nHKLM-x32 … Exécuter: [HostManager] => C: Program Files (x86) Common Files AOL 1474834258 ee AOLSoftware.exe [41800 2010-03-08] (AOL Inc. -> AOL Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [CCleaner Monitoring] => C: Program Files CCleaner CCleaner64.exe [19645800 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [HP Officejet 5740 series (NET)] => C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe [3769248 2019-03-19] (HP Inc -> HP Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … MountPoints2: 31631547-282d-11ea-9d24-08d40c8c8d7b – "H: autorun.exe" \nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.138 Installer chrmstp.exe [2020-05-08] (Google LLC -> Google LLC)\nDémarrage: C: Users phyli AppData Roaming Microsoft Windows Start Menu Programs Startup AOL Desktop Launcher.lnk [2020-05-11]\nShortcutTarget: AOL Desktop Launcher.lnk -> C: Users phyli AppData Local AOLDesktop AolTrayApp.exe (AOL, Inc -> AOL Inc.)","html":"

HKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8790264 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [PowerDVD14Agent] => C: Program Files (x86) CyberLink PowerDVD14 PowerDVD14Agent.exe [795336 2015-10-01] (CyberLink Corp. -> CyberLink Corp.)\nHKLM-x32 … Exécuter: [HostManager] => C: Program Files (x86) Common Files AOL 1474834258 ee AOLSoftware.exe [41800 2010-03-08] (AOL Inc. -> AOL Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [CCleaner Monitoring] => C: Program Files CCleaner CCleaner64.exe [19645800 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [HP Officejet 5740 series (NET)] => C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe [3769248 2019-03-19] (HP Inc -> HP Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … MountPoints2: 31631547-282d-11ea-9d24-08d40c8c8d7b – "H: autorun.exe" \nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.138 Installer chrmstp.exe [2020-05-08] (Google LLC -> Google LLC)\nDémarrage: C: Users phyli AppData Roaming Microsoft Windows Start Menu Programs Startup AOL Desktop Launcher.lnk [2020-05-11]\nShortcutTarget: AOL Desktop Launcher.lnk -> C: Users phyli AppData Local AOLDesktop AolTrayApp.exe (AOL, Inc -> AOL Inc.)

"},{"id":"text-9","type":"text","heading":"","plain_text":"==================== Tâches planifiées (liste blanche) ============","html":"

==================== Tâches planifiées (liste blanche) ============

"},{"id":"text-10","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

"},{"id":"text-11","type":"text","heading":"","plain_text":"Tâche: 0338B702-2581-4FA4-91AE-848E0471747D – System32 Tasks Hewlett-Packard HP Active Health HP Active Health Scan (HPSA) => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPActiveHealth ActiveHealth.exe [25128 2017-11-20] (HP Inc. ->)\nTâche: 0BC2EE53-122D-4F08-B931-2D8EBC0B87C0 – System32 Tasks Norton 360 Norton 360 Autofix => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 19444715-C7A7-4B9E-ADC9-E9EAA4A336FB – System32 Tasks Microsoft Windows RemovalTools MRT_ERROR_HB => C: WINDOWS system32 MRT.exe [121542864 2020-03-11] (Microsoft Windows -> Microsoft Corporation) [File not signed]\nTâche: 1A92604C-9785-4B3F-BABF-B9344300A525 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_DeviceScan => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 23805DAC-C2B3-4B17-8267-1B13BCF64F3F – System32 Tasks HPCustParticipation HP Officejet série 5740 => C: Program Files HP HP Officejet série 5740 Bin HPCustPartic.exe [6437792 2019-03-19] (HP Inc -> HP Inc.)\nTâche: 26862040-7E37-4842-8060-616A847935D7 – Microsoft Windows UNP RunCampaignManager -> Aucun fichier <==== ATTENTION\nTâche: 2892222B-8961-44EA-A488-4EAF68E62FF6 ​​- System32 Tasks Hewlett-Packard HP Support Assistant PC Health Analysis => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 30798301-D556-4A67-A303-E078BAEEA94D – System32 Tasks HPCeeScheduleForphyli => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe [96568 2015-06-16] (Société Hewlett-Packard -> Hewlett-Packard)\nTâche: 3BF5FEFF-B156-442E-83A7-88538B7E0701 – System32 Tasks CCleanerSkipUAC => C: Program Files CCleaner CCleaner.exe [14679256 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 466881AC-5DFD-4836-B0D9-F7634D65DB29 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1698000 2015-06-05] (Logiciel Intel® -> Intel Corporation)\nTâche: 4A88543E-19C3-49EC-A150-14140125BD0D – System32 Tasks CCleaner Update => C: Program Files CCleaner CCUpdate.exe [619416 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 5359FDCE-AFC2-4D1D-A5B9-56F1617BF591 – System32 Tasks DropboxUpdateTaskMachineCore => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nTâche: 5E7E7438-1246-4277-9A2F-C6411DB6349C – System32 Tasks Hewlett-Packard HP Support Assistant Product Configurator => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources ProductConfig .EXE [320856 2020-04-23] (HP Inc. -> HP Inc.)\nTâche: 69EFEB71-23BC-4B1C-BE4F-7B71587FEDAB – System32 Tasks Norton 360 Norton 360 Error Processor => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 6CD0BF4F-6054-4830-9806-972847917DB9 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Assistant Quick Start => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 72D22111-0F52-45AE-8C72-7B54E7179787 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 7DBD3255-B12E-48C1-99D9-7E999C324195 – System32 Tasks Hewlett-Packard HP Support Assistant Critical Update Pending => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 8613B10A-F593-4051-B6D3-C1174FAB8609 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_TH6254X0JD => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 990D433C-DF44-4DE9-893D-0F707834FF54 – System32 Tasks Remediation AntimalwareMigrationTask => C: Program Files Common Files AV Norton 360 Upgrade.exe [2162704 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 9A8CA25D-1EE2-4A1C-BC11-133EB4DE03F3 – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: AEF5F555-14EA-4D89-BA5E-16BC63091F73 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: B3DBA422-AB32-4861-895F-EF36381A7F1D – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: BFBE589E-4AF0-44AC-90B7-FA7DB538250A – System32 Tasks DropboxOEM => C: Program Files (x86) Dropbox DropboxOEM DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc ->)\nTâche: C0665B30-D9E6-421F-9B25-37FF210D048A – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Gestionnaire d'actifs logiciels bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: C09D1165-9A84-48B3-88AA-EB9B83A7142E – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Report => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSFReport.exe [134008 2020-03-25] (HP Inc. -> HP Inc.)\nTâche: C0EC152F-0F52-4482-9B82-0859E05A899B – Analyseur d'erreur System32 Tasks Norton 360 Norton 360 => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: CA553F06-3C9D-4899-9117-B49C1C5FFF46 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: CEE140FD-BB4B-4A75-BEDF-5B0DC2E129AC – System32 Tasks Norton WSC Integration => C: Program Files Norton Security Engine 22.20.2.57 WSCStub.exe [645008 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: DA0C5F76-E8A2-4899-B9E2-1DEA8509D76A – System32 Tasks IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C: Program Files (x86) Intel Intel® Update Manager bin iumsvc .EXE\nTâche: E3CADEF5-B4B0-44FC-8B66-A0A6738B95FC – System32 Tasks DropboxUpdateTaskMachineUA => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)","html":"

Tâche: 0338B702-2581-4FA4-91AE-848E0471747D – System32 Tasks Hewlett-Packard HP Active Health HP Active Health Scan (HPSA) => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPActiveHealth ActiveHealth.exe [25128 2017-11-20] (HP Inc. ->)\nTâche: 0BC2EE53-122D-4F08-B931-2D8EBC0B87C0 – System32 Tasks Norton 360 Norton 360 Autofix => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 19444715-C7A7-4B9E-ADC9-E9EAA4A336FB – System32 Tasks Microsoft Windows RemovalTools MRT_ERROR_HB => C: WINDOWS system32 MRT.exe [121542864 2020-03-11] (Microsoft Windows -> Microsoft Corporation) [File not signed]\nTâche: 1A92604C-9785-4B3F-BABF-B9344300A525 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_DeviceScan => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 23805DAC-C2B3-4B17-8267-1B13BCF64F3F – System32 Tasks HPCustParticipation HP Officejet série 5740 => C: Program Files HP HP Officejet série 5740 Bin HPCustPartic.exe [6437792 2019-03-19] (HP Inc -> HP Inc.)\nTâche: 26862040-7E37-4842-8060-616A847935D7 – Microsoft Windows UNP RunCampaignManager -> Aucun fichier <==== ATTENTION\nTâche: 2892222B-8961-44EA-A488-4EAF68E62FF6 ​​- System32 Tasks Hewlett-Packard HP Support Assistant PC Health Analysis => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 30798301-D556-4A67-A303-E078BAEEA94D – System32 Tasks HPCeeScheduleForphyli => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe [96568 2015-06-16] (Société Hewlett-Packard -> Hewlett-Packard)\nTâche: 3BF5FEFF-B156-442E-83A7-88538B7E0701 – System32 Tasks CCleanerSkipUAC => C: Program Files CCleaner CCleaner.exe [14679256 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 466881AC-5DFD-4836-B0D9-F7634D65DB29 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1698000 2015-06-05] (Logiciel Intel® -> Intel Corporation)\nTâche: 4A88543E-19C3-49EC-A150-14140125BD0D – System32 Tasks CCleaner Update => C: Program Files CCleaner CCUpdate.exe [619416 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 5359FDCE-AFC2-4D1D-A5B9-56F1617BF591 – System32 Tasks DropboxUpdateTaskMachineCore => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nTâche: 5E7E7438-1246-4277-9A2F-C6411DB6349C – System32 Tasks Hewlett-Packard HP Support Assistant Product Configurator => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources ProductConfig .EXE [320856 2020-04-23] (HP Inc. -> HP Inc.)\nTâche: 69EFEB71-23BC-4B1C-BE4F-7B71587FEDAB – System32 Tasks Norton 360 Norton 360 Error Processor => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 6CD0BF4F-6054-4830-9806-972847917DB9 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Assistant Quick Start => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 72D22111-0F52-45AE-8C72-7B54E7179787 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 7DBD3255-B12E-48C1-99D9-7E999C324195 – System32 Tasks Hewlett-Packard HP Support Assistant Critical Update Pending => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 8613B10A-F593-4051-B6D3-C1174FAB8609 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_TH6254X0JD => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 990D433C-DF44-4DE9-893D-0F707834FF54 – System32 Tasks Remediation AntimalwareMigrationTask => C: Program Files Common Files AV Norton 360 Upgrade.exe [2162704 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 9A8CA25D-1EE2-4A1C-BC11-133EB4DE03F3 – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: AEF5F555-14EA-4D89-BA5E-16BC63091F73 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: B3DBA422-AB32-4861-895F-EF36381A7F1D – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: BFBE589E-4AF0-44AC-90B7-FA7DB538250A – System32 Tasks DropboxOEM => C: Program Files (x86) Dropbox DropboxOEM DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc ->)\nTâche: C0665B30-D9E6-421F-9B25-37FF210D048A – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Gestionnaire d'actifs logiciels bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: C09D1165-9A84-48B3-88AA-EB9B83A7142E – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Report => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSFReport.exe [134008 2020-03-25] (HP Inc. -> HP Inc.)\nTâche: C0EC152F-0F52-4482-9B82-0859E05A899B – Analyseur d'erreur System32 Tasks Norton 360 Norton 360 => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: CA553F06-3C9D-4899-9117-B49C1C5FFF46 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: CEE140FD-BB4B-4A75-BEDF-5B0DC2E129AC – System32 Tasks Norton WSC Integration => C: Program Files Norton Security Engine 22.20.2.57 WSCStub.exe [645008 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: DA0C5F76-E8A2-4899-B9E2-1DEA8509D76A – System32 Tasks IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C: Program Files (x86) Intel Intel® Update Manager bin iumsvc .EXE\nTâche: E3CADEF5-B4B0-44FC-8B66-A0A6738B95FC – System32 Tasks DropboxUpdateTaskMachineUA => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)

"},{"id":"text-12","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)","html":"

(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

"},{"id":"text-13","type":"text","heading":"","plain_text":"Tâche: C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job => C: WINDOWS explorer.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineCore.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineUA.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks HPCeeScheduleForphyli.job => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe","html":"

Tâche: C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job => C: WINDOWS explorer.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineCore.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineUA.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks HPCeeScheduleForphyli.job => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe

"},{"id":"text-14","type":"text","heading":"","plain_text":"==================== Internet (liste blanche) ====================","html":"

==================== Internet (liste blanche) ====================

"},{"id":"text-15","type":"text","heading":"","plain_text":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)","html":"

(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)

"},{"id":"text-16","type":"text","heading":"","plain_text":"Tcpip .. Interfaces 686E1526-5487-4579-9D5C-7D997F0C562C: [NameServer] 10.255.0.0\nTcpip .. Interfaces 93fb8a86-3933-4476-8281-93ec070b093c: [DhcpNameServer] 192.168.1.1\nTcpip .. Interfaces aa2d2754-dc20-488c-91bb-6e946e6395e0: [DhcpNameServer] 192.168.1.1","html":"

Tcpip .. Interfaces 686E1526-5487-4579-9D5C-7D997F0C562C: [NameServer] 10.255.0.0\nTcpip .. Interfaces 93fb8a86-3933-4476-8281-93ec070b093c: [DhcpNameServer] 192.168.1.1\nTcpip .. Interfaces aa2d2754-dc20-488c-91bb-6e946e6395e0: [DhcpNameServer] 192.168.1.1

"},{"id":"text-17","type":"text","heading":"","plain_text":"Internet Explorer:\n==================\nHKLM SOFTWARE Policies Microsoft Internet Explorer: restriction <==== ATTENTION\nHKLM Software Microsoft Internet Explorer Main, Page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKLM Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nSearchScopes: HKLM -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKLM-x32 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKU S-1-5-21-999762305-681959455-3457413626-1001 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nBHO: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: extension Evernote -> 92EF2EAD-A7CE-4424-B0DB-499CF856608E -> C: Program Files (x86) Evernote Evernote EvernoteIE.dll [2015-07-01] (EVERNOTE CORPORATION -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)\nBHO-x32: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)\nBarre d'outils: HKLM – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBarre d'outils: HKLM-x32 – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)","html":"

Internet Explorer:\n==================\nHKLM SOFTWARE Policies Microsoft Internet Explorer: restriction <==== ATTENTION\nHKLM Software Microsoft Internet Explorer Main, Page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKLM Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nSearchScopes: HKLM -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKLM-x32 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKU S-1-5-21-999762305-681959455-3457413626-1001 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nBHO: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: extension Evernote -> 92EF2EAD-A7CE-4424-B0DB-499CF856608E -> C: Program Files (x86) Evernote Evernote EvernoteIE.dll [2015-07-01] (EVERNOTE CORPORATION -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)\nBHO-x32: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)\nBarre d'outils: HKLM – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBarre d'outils: HKLM-x32 – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)

"},{"id":"text-18","type":"text","heading":"","plain_text":"Bord: \n======\nDownloadDir: C: Users phyli Downloads\nExtension de bord: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C: Program Files WindowsApps EyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11]\nExtension Edge: (AdGuard AdBlocker) -> EdgeExtension_AdguardAdguardAdBlocker_m055xr0c82818 => C: Program Files WindowsApps Adguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09]","html":"

Bord: \n======\nDownloadDir: C: Users phyli Downloads\nExtension de bord: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C: Program Files WindowsApps EyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11]\nExtension Edge: (AdGuard AdBlocker) -> EdgeExtension_AdguardAdguardAdBlocker_m055xr0c82818 => C: Program Files WindowsApps Adguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09]

"},{"id":"text-19","type":"text","heading":"","plain_text":"FireFox:\n========\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI ipt; version = 4.0.68 -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIIPT.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI Updater -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIUpdater.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ viewpoint.com / VMP -> C: Program Files (x86) Viewpoint Viewpoint Experience Technology npViewpoint.dll [2004-02-20] () [File not signed]","html":"

FireFox:\n========\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI ipt; version = 4.0.68 -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIIPT.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI Updater -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIUpdater.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ viewpoint.com / VMP -> C: Program Files (x86) Viewpoint Viewpoint Experience Technology npViewpoint.dll [2004-02-20] () [File not signed]

"},{"id":"text-20","type":"text","heading":"","plain_text":"Chrome: \n=======\nCHR DefaultProfile: Par défaut\nProfil CHR: C: Users phyli AppData Local Google Chrome User Data Default [2020-05-12]\nCHR DefaultSearchURL: Par défaut -> hxxps: //s.aolcdn.com/webmail-static/webmail/180517.1559/aol/en-us/images/favicon.ico\nExtension CHR: (diapositives) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aapocclcgogkmnckokdopfmhonfmgoek [2018-01-12]\nExtension CHR: (Docs) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aohghmighlieiainnegkcijnfilokake [2018-01-12]\nExtension CHR: (Google Drive) – C: Users phyli AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2018-01-12]\nExtension CHR: (YouTube) – C: Users phyli AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-12]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users phyli AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-05-11]\nExtension CHR: (Sheets) – C: Users phyli AppData Local Google Chrome User Data Default Extensions felcaaldnbdncclmgdcncolpebgiejap [2018-01-12]\nExtension CHR: (Google Docs hors ligne) – C: Users phyli AppData Local Google Chrome User Data Default Extensions ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-11]\nExtension CHR: (Paiements Chrome Web Store) – C: Users phyli AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2020-04-15]\nExtension CHR: (Mon AOL) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pigepclndadjaebpijfcjeeefpjhcdca [2018-05-22]\nExtension CHR: (Gmail) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-17]\nExtension CHR: (Chrome Media Router) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-11]","html":"

Chrome: \n=======\nCHR DefaultProfile: Par défaut\nProfil CHR: C: Users phyli AppData Local Google Chrome User Data Default [2020-05-12]\nCHR DefaultSearchURL: Par défaut -> hxxps: //s.aolcdn.com/webmail-static/webmail/180517.1559/aol/en-us/images/favicon.ico\nExtension CHR: (diapositives) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aapocclcgogkmnckokdopfmhonfmgoek [2018-01-12]\nExtension CHR: (Docs) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aohghmighlieiainnegkcijnfilokake [2018-01-12]\nExtension CHR: (Google Drive) – C: Users phyli AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2018-01-12]\nExtension CHR: (YouTube) – C: Users phyli AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-12]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users phyli AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-05-11]\nExtension CHR: (Sheets) – C: Users phyli AppData Local Google Chrome User Data Default Extensions felcaaldnbdncclmgdcncolpebgiejap [2018-01-12]\nExtension CHR: (Google Docs hors ligne) – C: Users phyli AppData Local Google Chrome User Data Default Extensions ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-11]\nExtension CHR: (Paiements Chrome Web Store) – C: Users phyli AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2020-04-15]\nExtension CHR: (Mon AOL) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pigepclndadjaebpijfcjeeefpjhcdca [2018-05-22]\nExtension CHR: (Gmail) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-17]\nExtension CHR: (Chrome Media Router) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-11]

"},{"id":"text-21","type":"text","heading":"","plain_text":"==================== Services (liste blanche) ===================","html":"

==================== Services (liste blanche) ===================

"},{"id":"text-22","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

"},{"id":"text-23","type":"text","heading":"","plain_text":"S2 dbupdate; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nS3 dbupdatem; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nR2 HPSupportSolutionsFrameworkService; C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe [378744 2020-03-31] (HP Inc. -> HP Inc.)\nR2 HPTouchpointAnalyticsService; C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe [332216 2017-11-23] (HP Inc. -> HP Inc.)\nR2 ibtsiva; C: WINDOWS System32 ibtsiva.exe [536864 2020-01-06] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nS3 Intel® Capability Licensing Service TCP IP Interface; C: Program Files Intel iCLS Client SocketHeciServer.exe [881152 2015-05-22] (Service Intel® Trusted Connect -> Intel® Corporation)\nR3 Intel® Security Assist; C: Program Files (x86) Intel Intel® Security Assist isa.exe [335872 2015-05-19] (Société intel) [File not signed]\nS3 Intel® WiDi SAM; C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nR2 IRMTService; c: Program Files Intel Intel® Ready Mode Technology IRMTService.exe [181520 2015-07-13] (Intel CASE -> Intel Corporation)\nS2 isaHelperSvc; C: Program Files (x86) Intel Intel® Security Assist isaHelperService.exe [7680 2015-05-19] () [File not signed]\nR2 jhi_service; C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe [207648 2015-10-16] (Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation)\nS3 MyWiFiDHCPDNS; C: Program Files Intel WiFi bin PanDhcpDns.exe [310880 2018-09-05] (Intel Corporation ->)\nR2 NortonSecurity; C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe [344760 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 nsWscSvc; C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe [1055960 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 RichVideo64; C: Program Files CyberLink Fichiers partagés RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. ->)\nR2 RtkAudioService; C: Program Files Realtek Audio HDA RtkAudioService64.exe [316152 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nR2 TeamViewer; C: Program Files (x86) TeamViewer TeamViewer_Service.exe [13252624 2020-04-23] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nS3 WdNisSvc; C: Program Files Windows Defender NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nS3 WinDefend; C: Program Files Windows Defender MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nR2 ZeroConfigService; C: Program Files Intel WiFi bin ZeroConfigService.exe [4059744 2018-09-05] (Intel Corporation -> Intel® Corporation)\nS4 WRSVC; Service "C: Program Files Webroot WRSA.exe" [X]","html":"

S2 dbupdate; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nS3 dbupdatem; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nR2 HPSupportSolutionsFrameworkService; C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe [378744 2020-03-31] (HP Inc. -> HP Inc.)\nR2 HPTouchpointAnalyticsService; C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe [332216 2017-11-23] (HP Inc. -> HP Inc.)\nR2 ibtsiva; C: WINDOWS System32 ibtsiva.exe [536864 2020-01-06] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nS3 Intel® Capability Licensing Service TCP IP Interface; C: Program Files Intel iCLS Client SocketHeciServer.exe [881152 2015-05-22] (Service Intel® Trusted Connect -> Intel® Corporation)\nR3 Intel® Security Assist; C: Program Files (x86) Intel Intel® Security Assist isa.exe [335872 2015-05-19] (Société intel) [File not signed]\nS3 Intel® WiDi SAM; C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nR2 IRMTService; c: Program Files Intel Intel® Ready Mode Technology IRMTService.exe [181520 2015-07-13] (Intel CASE -> Intel Corporation)\nS2 isaHelperSvc; C: Program Files (x86) Intel Intel® Security Assist isaHelperService.exe [7680 2015-05-19] () [File not signed]\nR2 jhi_service; C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe [207648 2015-10-16] (Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation)\nS3 MyWiFiDHCPDNS; C: Program Files Intel WiFi bin PanDhcpDns.exe [310880 2018-09-05] (Intel Corporation ->)\nR2 NortonSecurity; C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe [344760 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 nsWscSvc; C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe [1055960 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 RichVideo64; C: Program Files CyberLink Fichiers partagés RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. ->)\nR2 RtkAudioService; C: Program Files Realtek Audio HDA RtkAudioService64.exe [316152 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nR2 TeamViewer; C: Program Files (x86) TeamViewer TeamViewer_Service.exe [13252624 2020-04-23] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nS3 WdNisSvc; C: Program Files Windows Defender NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nS3 WinDefend; C: Program Files Windows Defender MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nR2 ZeroConfigService; C: Program Files Intel WiFi bin ZeroConfigService.exe [4059744 2018-09-05] (Intel Corporation -> Intel® Corporation)\nS4 WRSVC; Service "C: Program Files Webroot WRSA.exe" [X]

"},{"id":"text-24","type":"text","heading":"","plain_text":"===================== Pilotes (sur liste blanche) ===================","html":"

===================== Pilotes (sur liste blanche) ===================

"},{"id":"text-25","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

"},{"id":"text-26","type":"text","heading":"","plain_text":"R1 BHDrvx64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions BASHDefs 20200511.006 BHDrvx64.sys [1952136 2020-05-11] (Symantec Corporation -> Symantec Corporation)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-17] (Microsoft Corporation) [File not signed]\nR1 ccSet_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 ccSetx64.sys [192376 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 eeCtrl; C: Program Files (x86) Common Files Symantec Shared EENGINE eeCtrl64.sys [516784 2019-10-08] (Symantec Corporation -> Symantec Corporation)\nU3 EraserUtilDrv11910; C: Program Files (x86) Common Files Symantec Shared EENGINE EraserUtilDrv11910.sys [154288 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 ibtusb; C: WINDOWS System32 DriverStore FileRepository ibtusb.inf_amd64_b45bba99c1e61776 ibtusb.sys [301560 2019-12-02] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR1 IDSVia64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions IPSDefs 20200512.061 IDSvia64.sys [1451016 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 IntelReadyModeDriver; C: WINDOWS System32 drivers IntelReadyModeDriver.sys [33512 2015-07-13] (Intel CASE -> Intel Corporation)\nR0 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [253880 2018-01-12] (Malwarebytes Corporation -> Malwarebytes)\nR3 Netwtw04; C: WINDOWS system32 DRIVERS Netwtw04.sys [8720384 2019-08-27] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR3 rt640x64; C: WINDOWS System32 drivers rt640x64.sys [886528 2015-06-03] (Realtek Semiconductor Corp -> Realtek)\nR3 RTSUER; C: WINDOWS system32 Drivers RtsUer.sys [402136 2015-05-27] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation)\nR3 SRTSP; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSP64.SYS [889520 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SRTSPX; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSPX64.SYS [50864 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR0 SymEFASI; C: WINDOWS System32 drivers NGCx64 1614020.039 SYMEFASI64.SYS [1964552 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS0 SymELAM; C: WINDOWS System32 drivers NGCx64 1614020.039 SymELAM.sys [25024 2020-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)\nR3 SymEvent; C: WINDOWS system32 Drivers SYMEVENT64x86.SYS [99848 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 SymEvnt; C: Program Files Norton Security NortonData 22.20.2.57 SymPlatform SymEvnt.sys [712368 2020-01-06] (Symantec Corporation -> Symantec Corporation)\nR1 SymIRON; C: WINDOWS System32 drivers NGCx64 1614020.039 Ironx64.SYS [316656 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SymNetS; C: WINDOWS System32 drivers NGCx64 1614020.039 symnets.sys [575280 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR3 wanatw; C: WINDOWS System32 drivers wanatw64.sys [24064 2006-11-29] (Éditeur de compatibilité matérielle Microsoft Windows -> America Online, Inc.)\nS3 WdBoot; C: WINDOWS system32 drivers WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nS3 WdFilter; C: WINDOWS system32 drivers WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nS3 WdNisDrv; C: WINDOWS System32 Drivers WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nR1 wpCtrlDrv_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 wpCtrlDrv.sys [1012120 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS4 WRBoot; System32 drivers WRBoot.sys [X]\nR4 WRkrn; System32 drivers WRkrn.sys [X]","html":"

R1 BHDrvx64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions BASHDefs 20200511.006 BHDrvx64.sys [1952136 2020-05-11] (Symantec Corporation -> Symantec Corporation)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-17] (Microsoft Corporation) [File not signed]\nR1 ccSet_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 ccSetx64.sys [192376 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 eeCtrl; C: Program Files (x86) Common Files Symantec Shared EENGINE eeCtrl64.sys [516784 2019-10-08] (Symantec Corporation -> Symantec Corporation)\nU3 EraserUtilDrv11910; C: Program Files (x86) Common Files Symantec Shared EENGINE EraserUtilDrv11910.sys [154288 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 ibtusb; C: WINDOWS System32 DriverStore FileRepository ibtusb.inf_amd64_b45bba99c1e61776 ibtusb.sys [301560 2019-12-02] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR1 IDSVia64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions IPSDefs 20200512.061 IDSvia64.sys [1451016 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 IntelReadyModeDriver; C: WINDOWS System32 drivers IntelReadyModeDriver.sys [33512 2015-07-13] (Intel CASE -> Intel Corporation)\nR0 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [253880 2018-01-12] (Malwarebytes Corporation -> Malwarebytes)\nR3 Netwtw04; C: WINDOWS system32 DRIVERS Netwtw04.sys [8720384 2019-08-27] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR3 rt640x64; C: WINDOWS System32 drivers rt640x64.sys [886528 2015-06-03] (Realtek Semiconductor Corp -> Realtek)\nR3 RTSUER; C: WINDOWS system32 Drivers RtsUer.sys [402136 2015-05-27] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation)\nR3 SRTSP; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSP64.SYS [889520 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SRTSPX; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSPX64.SYS [50864 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR0 SymEFASI; C: WINDOWS System32 drivers NGCx64 1614020.039 SYMEFASI64.SYS [1964552 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS0 SymELAM; C: WINDOWS System32 drivers NGCx64 1614020.039 SymELAM.sys [25024 2020-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)\nR3 SymEvent; C: WINDOWS system32 Drivers SYMEVENT64x86.SYS [99848 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 SymEvnt; C: Program Files Norton Security NortonData 22.20.2.57 SymPlatform SymEvnt.sys [712368 2020-01-06] (Symantec Corporation -> Symantec Corporation)\nR1 SymIRON; C: WINDOWS System32 drivers NGCx64 1614020.039 Ironx64.SYS [316656 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SymNetS; C: WINDOWS System32 drivers NGCx64 1614020.039 symnets.sys [575280 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR3 wanatw; C: WINDOWS System32 drivers wanatw64.sys [24064 2006-11-29] (Éditeur de compatibilité matérielle Microsoft Windows -> America Online, Inc.)\nS3 WdBoot; C: WINDOWS system32 drivers WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nS3 WdFilter; C: WINDOWS system32 drivers WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nS3 WdNisDrv; C: WINDOWS System32 Drivers WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nR1 wpCtrlDrv_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 wpCtrlDrv.sys [1012120 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS4 WRBoot; System32 drivers WRBoot.sys [X]\nR4 WRkrn; System32 drivers WRkrn.sys [X]

"},{"id":"text-27","type":"text","heading":"","plain_text":"==================== NetSvcs (liste blanche) ====================","html":"

==================== NetSvcs (liste blanche) ====================

"},{"id":"text-28","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)

"},{"id":"text-29","type":"text","heading":"","plain_text":"==================== Un mois (créé) ===================","html":"

==================== Un mois (créé) ===================

"},{"id":"text-30","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)","html":"

(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)

"},{"id":"text-31","type":"text","heading":"","plain_text":"2020-05-12 20:54 – 2020-05-12 20:55 – 000027915 _____ C: Users phyli Downloads FRST.txt\n2020-05-12 20:54 – 2020-05-12 20:55 – 000000000 ____D C: FRST\n2020-05-12 20:53 – 2020-05-12 20:53 – 002285568 _____ (Farbar) C: Users phyli Downloads FRST64.exe\n2020-05-12 20:22 – 2020-05-12 20:22 – 000000000 ____D C: WINDOWS system32 Tasks Remediation\n2020-05-12 18:10 – 2020-05-12 18:14 – 000000000 ____D C: WINDOWS system32 Tasks Norton 360\n2020-05-12 18:08 – 2020-05-12 18:08 – 000099848 _____ (Symantec Corporation) C: WINDOWS system32 Drivers SYMEVENT64x86.SYS\n2020-05-12 18:08 – 2020-05-12 18:08 – 000008616 _____ C: WINDOWS system32 Drivers SYMEVENT64x86.CAT\n2020-05-12 18:08 – 2020-05-12 18:08 – 000003376 _____ C: WINDOWS system32 Tasks Norton WSC Integration\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: Users Public Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: ProgramData Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000000000 ____D C: Program Files Fichiers communs Symantec Shared\n2020-05-12 18:07 – 2020-05-12 18:08 – 000000000 ___RD C: ProgramData Microsoft Windows Menu Démarrer Programmes Norton Security\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: WINDOWS system32 Drivers NGCx64\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: Program Files Norton Security\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: ProgramData NortonInstaller\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: Program Files (x86) NortonInstaller\n2020-05-12 18:04 – 2020-05-12 18:04 – 003666744 _____ (Symantec Corporation) C: Users phyli Downloads N360Downloader.exe\n2020-05-12 18:04 – 2020-05-12 18:04 – 000001379 _____ C: Users phyli Desktop Norton Installation Files.lnk\n2020-05-12 18:04 – 2020-05-12 18:04 – 000000000 ____D C: Users Public Downloads Norton\n2020-05-11 19:43 – 2020-05-11 19:46 – 000000000 ____D C: Users phyli AppData Local TeamViewer\n2020-05-11 18:23 – 2020-05-11 18:24 – 000000000 ____D C: NPE\n2020-05-11 18:23 – 2020-05-11 18:22 – 000120122 _____ C: WINDOWS ntbtlog.txt\n2020-05-11 18:21 – 2020-05-11 18:22 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (2) .exe\n2020-05-11 18:17 – 2020-05-11 18:24 – 000000214 _____ C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job\n2020-05-11 18:11 – 2020-05-12 18:10 – 000000000 ____D C: ProgramData Norton\n2020-05-11 18:11 – 2020-05-11 19:55 – 000000000 ____D C: Users phyli AppData Local NPE\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE.exe\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (1) .exe\n2020-05-11 17:52 – 2020-05-12 18:30 – 000000000 ____D C: Program Files (x86) TeamViewer\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001119 _____ C: ProgramData Microsoft Windows Start Menu Programs TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: Users Public Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: ProgramData Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000000000 ____D C: Users phyli AppData Roaming TeamViewer\n2020-05-11 17:49 – 2020-05-11 17:49 – 026709944 _____ (TeamViewer Germany GmbH) C: Users phyli Downloads TeamViewer_Setup.exe\n2020-05-11 15:32 – 2020-05-11 15:32 – 000000000 ____D C: Users phyli Documents 1-888-511-8605\n2020-05-11 15:28 – 2020-05-11 15:28 – 000290304 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 subinacl.exe\n2020-05-11 15:28 – 2020-05-11 15:28 – 000000000 ____D C: Program Files (x86) Adware Removal Tool by TSA\n2020-05-11 15:25 – 2020-05-11 15:26 – 000000000 ____D C: Users phyli AppData Local PlaceholderTileLogoFolder\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ C: Users phyli AppData Local Resmon.ResmonCfg\n2020-04-15 17:35 – 2020-04-15 17:35 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 001151816 _____ (Microsoft Corporation) C:WINDOWSsystem32mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001013000 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000983040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmkvsrcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Mirage.Internal.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000689152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CPFilters.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000686080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64jscript.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-15 17:35 – 2020-04-15 17:35 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 022636544 _____ (Microsoft Corporation) C:WINDOWSsystem32mshtml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 008013824 _____ (Microsoft Corporation) C:WINDOWSsystem32mstscax.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007756800 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakra.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006523048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004611584 _____ (Microsoft Corporation) C:WINDOWSsystem32msi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 004538880 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800640 _____ (Microsoft Corporation) C:WINDOWSsystem32WinSAT.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800128 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-15 17:34 – 2020-04-15 17:34 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001665216 _____ (Microsoft Corporation) C:WINDOWSSysWOW64user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001545216 _____ (Microsoft Corporation) C:WINDOWSsystem32mstsc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001477112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001458688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001397576 _____ (Microsoft Corporation) C:WINDOWSsystem32hvix64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001077064 _____ (Microsoft Corporation) C:WINDOWSsystem32hvax64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001008128 _____ (Microsoft Corporation) C:WINDOWSsystem32StorSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000868864 _____ (Microsoft Corporation) C:WINDOWSSysWOW64windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000836608 _____ (Microsoft Corporation) C:WINDOWSsystem32jscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000835584 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkfoldersControl.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000783480 _____ (Microsoft Corporation) C:WINDOWSsystem32tcblaunch.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000775696 _____ (Microsoft Corporation) C:WINDOWSsystem32securekernel.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000768528 _____ (Microsoft Corporation) C:WINDOWSSysWOW64winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673464 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000668672 _____ (Microsoft Corporation) C:WINDOWSsystem32wsecedit.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000665088 _____ (Microsoft Corporation) C:WINDOWSSysWOW64netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000647680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000555008 _____ (Microsoft Corporation) C:WINDOWSsystem32appwiz.cpl\n2020-04-15 17:34 – 2020-04-15 17:34 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-15 17:34 – 2020-04-15 17:34 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-15 17:21 – 2020-04-15 17:22 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-15 17:21 – 2020-04-15 17:22 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-15 15:45 – 2020-05-12 18:06 – 000000000 ____D C:ProgramDataWRCore","html":"

2020-05-12 20:54 – 2020-05-12 20:55 – 000027915 _____ C: Users phyli Downloads FRST.txt\n2020-05-12 20:54 – 2020-05-12 20:55 – 000000000 ____D C: FRST\n2020-05-12 20:53 – 2020-05-12 20:53 – 002285568 _____ (Farbar) C: Users phyli Downloads FRST64.exe\n2020-05-12 20:22 – 2020-05-12 20:22 – 000000000 ____D C: WINDOWS system32 Tasks Remediation\n2020-05-12 18:10 – 2020-05-12 18:14 – 000000000 ____D C: WINDOWS system32 Tasks Norton 360\n2020-05-12 18:08 – 2020-05-12 18:08 – 000099848 _____ (Symantec Corporation) C: WINDOWS system32 Drivers SYMEVENT64x86.SYS\n2020-05-12 18:08 – 2020-05-12 18:08 – 000008616 _____ C: WINDOWS system32 Drivers SYMEVENT64x86.CAT\n2020-05-12 18:08 – 2020-05-12 18:08 – 000003376 _____ C: WINDOWS system32 Tasks Norton WSC Integration\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: Users Public Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: ProgramData Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000000000 ____D C: Program Files Fichiers communs Symantec Shared\n2020-05-12 18:07 – 2020-05-12 18:08 – 000000000 ___RD C: ProgramData Microsoft Windows Menu Démarrer Programmes Norton Security\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: WINDOWS system32 Drivers NGCx64\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: Program Files Norton Security\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: ProgramData NortonInstaller\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: Program Files (x86) NortonInstaller\n2020-05-12 18:04 – 2020-05-12 18:04 – 003666744 _____ (Symantec Corporation) C: Users phyli Downloads N360Downloader.exe\n2020-05-12 18:04 – 2020-05-12 18:04 – 000001379 _____ C: Users phyli Desktop Norton Installation Files.lnk\n2020-05-12 18:04 – 2020-05-12 18:04 – 000000000 ____D C: Users Public Downloads Norton\n2020-05-11 19:43 – 2020-05-11 19:46 – 000000000 ____D C: Users phyli AppData Local TeamViewer\n2020-05-11 18:23 – 2020-05-11 18:24 – 000000000 ____D C: NPE\n2020-05-11 18:23 – 2020-05-11 18:22 – 000120122 _____ C: WINDOWS ntbtlog.txt\n2020-05-11 18:21 – 2020-05-11 18:22 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (2) .exe\n2020-05-11 18:17 – 2020-05-11 18:24 – 000000214 _____ C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job\n2020-05-11 18:11 – 2020-05-12 18:10 – 000000000 ____D C: ProgramData Norton\n2020-05-11 18:11 – 2020-05-11 19:55 – 000000000 ____D C: Users phyli AppData Local NPE\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE.exe\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (1) .exe\n2020-05-11 17:52 – 2020-05-12 18:30 – 000000000 ____D C: Program Files (x86) TeamViewer\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001119 _____ C: ProgramData Microsoft Windows Start Menu Programs TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: Users Public Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: ProgramData Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000000000 ____D C: Users phyli AppData Roaming TeamViewer\n2020-05-11 17:49 – 2020-05-11 17:49 – 026709944 _____ (TeamViewer Germany GmbH) C: Users phyli Downloads TeamViewer_Setup.exe\n2020-05-11 15:32 – 2020-05-11 15:32 – 000000000 ____D C: Users phyli Documents 1-888-511-8605\n2020-05-11 15:28 – 2020-05-11 15:28 – 000290304 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 subinacl.exe\n2020-05-11 15:28 – 2020-05-11 15:28 – 000000000 ____D C: Program Files (x86) Adware Removal Tool by TSA\n2020-05-11 15:25 – 2020-05-11 15:26 – 000000000 ____D C: Users phyli AppData Local PlaceholderTileLogoFolder\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ C: Users phyli AppData Local Resmon.ResmonCfg\n2020-04-15 17:35 – 2020-04-15 17:35 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 001151816 _____ (Microsoft Corporation) C:WINDOWSsystem32mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001013000 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000983040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmkvsrcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Mirage.Internal.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000689152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CPFilters.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000686080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64jscript.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-15 17:35 – 2020-04-15 17:35 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 022636544 _____ (Microsoft Corporation) C:WINDOWSsystem32mshtml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 008013824 _____ (Microsoft Corporation) C:WINDOWSsystem32mstscax.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007756800 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakra.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006523048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004611584 _____ (Microsoft Corporation) C:WINDOWSsystem32msi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 004538880 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800640 _____ (Microsoft Corporation) C:WINDOWSsystem32WinSAT.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800128 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-15 17:34 – 2020-04-15 17:34 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001665216 _____ (Microsoft Corporation) C:WINDOWSSysWOW64user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001545216 _____ (Microsoft Corporation) C:WINDOWSsystem32mstsc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001477112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001458688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001397576 _____ (Microsoft Corporation) C:WINDOWSsystem32hvix64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001077064 _____ (Microsoft Corporation) C:WINDOWSsystem32hvax64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001008128 _____ (Microsoft Corporation) C:WINDOWSsystem32StorSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000868864 _____ (Microsoft Corporation) C:WINDOWSSysWOW64windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000836608 _____ (Microsoft Corporation) C:WINDOWSsystem32jscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000835584 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkfoldersControl.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000783480 _____ (Microsoft Corporation) C:WINDOWSsystem32tcblaunch.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000775696 _____ (Microsoft Corporation) C:WINDOWSsystem32securekernel.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000768528 _____ (Microsoft Corporation) C:WINDOWSSysWOW64winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673464 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000668672 _____ (Microsoft Corporation) C:WINDOWSsystem32wsecedit.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000665088 _____ (Microsoft Corporation) C:WINDOWSSysWOW64netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000647680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000555008 _____ (Microsoft Corporation) C:WINDOWSsystem32appwiz.cpl\n2020-04-15 17:34 – 2020-04-15 17:34 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-15 17:34 – 2020-04-15 17:34 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-15 17:21 – 2020-04-15 17:22 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-15 17:21 – 2020-04-15 17:22 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-15 15:45 – 2020-05-12 18:06 – 000000000 ____D C:ProgramDataWRCore

"},{"id":"text-32","type":"text","heading":"","plain_text":"==================== One month (modified) ==================","html":"

==================== One month (modified) ==================

"},{"id":"text-33","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, the file/folder will be moved.)","html":"

(If an entry is included in the fixlist, the file/folder will be moved.)

"},{"id":"text-34","type":"text","heading":"","plain_text":"2020-05-12 20:22 – 2016-02-17 04:13 – 000000000 ____D C:Program FilesCommon FilesAV\n2020-05-12 20:16 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-05-12 20:05 – 2018-07-16 18:15 – 000000000 ____D C:UsersphyliAppDataLocalD3DSCache\n2020-05-12 18:40 – 2019-08-15 19:04 – 000003256 _____ C:WINDOWSsystem32TasksHPCeeScheduleForphyli\n2020-05-12 18:40 – 2019-06-17 18:01 – 000000364 _____ C:WINDOWSTasksHPCeeScheduleForphyli.job\n2020-05-12 18:09 – 2019-03-19 00:37 – 000032768 _____ C:WINDOWSsystem32configELAM\n2020-05-12 18:08 – 2019-03-19 00:52 – 000000000 ___HD C:WINDOWSELAMBKUP\n2020-05-12 18:07 – 2017-01-27 14:00 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocalLowwebroot\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocallptmp\n2020-05-12 18:01 – 2016-09-25 15:43 – 000000000 __SHD C:UsersphyliIntelGraphicsProfiles\n2020-05-12 10:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-05-12 10:10 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-05-11 19:48 – 2019-08-15 18:57 – 000935056 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-05-11 19:48 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-05-11 19:42 – 2019-08-15 19:04 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-05-11 19:42 – 2019-03-19 00:37 – 000524288 _____ C:WINDOWSsystem32configBBI\n2020-05-11 19:22 – 2019-08-15 18:45 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-05-11 18:17 – 2019-08-15 18:45 – 000276104 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-05-11 18:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32NDF\n2020-05-11 15:26 – 2018-03-16 00:06 – 000000000 ____D C:UsersphyliAppDataLocalPackages\n2020-05-11 14:53 – 2018-01-12 12:48 – 000000000 ____D C:UsersphyliAppDataLocalGoToAssist Remote Support Customer\n2020-05-11 12:06 – 2017-08-28 10:13 – 000002326 _____ C:UsersphyliDesktopAOL Desktop Gold.lnk\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsAOL Inc\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalAOLDesktop\n2020-05-11 12:05 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalSquirrelTemp\n2020-05-10 04:33 – 2019-08-15 19:04 – 000003376 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-999762305-681959455-3457413626-1001\n2020-05-10 04:33 – 2019-08-15 18:51 – 000002370 _____ C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-05-10 04:33 – 2016-09-25 15:46 – 000000000 ___RD C:UsersphyliOneDrive\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002308 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:UsersPublicDesktopGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:ProgramDataDesktopGoogle Chrome.lnk\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-15 17:38 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp","html":"

2020-05-12 20:22 – 2016-02-17 04:13 – 000000000 ____D C:Program FilesCommon FilesAV\n2020-05-12 20:16 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-05-12 20:05 – 2018-07-16 18:15 – 000000000 ____D C:UsersphyliAppDataLocalD3DSCache\n2020-05-12 18:40 – 2019-08-15 19:04 – 000003256 _____ C:WINDOWSsystem32TasksHPCeeScheduleForphyli\n2020-05-12 18:40 – 2019-06-17 18:01 – 000000364 _____ C:WINDOWSTasksHPCeeScheduleForphyli.job\n2020-05-12 18:09 – 2019-03-19 00:37 – 000032768 _____ C:WINDOWSsystem32configELAM\n2020-05-12 18:08 – 2019-03-19 00:52 – 000000000 ___HD C:WINDOWSELAMBKUP\n2020-05-12 18:07 – 2017-01-27 14:00 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocalLowwebroot\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocallptmp\n2020-05-12 18:01 – 2016-09-25 15:43 – 000000000 __SHD C:UsersphyliIntelGraphicsProfiles\n2020-05-12 10:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-05-12 10:10 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-05-11 19:48 – 2019-08-15 18:57 – 000935056 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-05-11 19:48 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-05-11 19:42 – 2019-08-15 19:04 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-05-11 19:42 – 2019-03-19 00:37 – 000524288 _____ C:WINDOWSsystem32configBBI\n2020-05-11 19:22 – 2019-08-15 18:45 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-05-11 18:17 – 2019-08-15 18:45 – 000276104 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-05-11 18:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32NDF\n2020-05-11 15:26 – 2018-03-16 00:06 – 000000000 ____D C:UsersphyliAppDataLocalPackages\n2020-05-11 14:53 – 2018-01-12 12:48 – 000000000 ____D C:UsersphyliAppDataLocalGoToAssist Remote Support Customer\n2020-05-11 12:06 – 2017-08-28 10:13 – 000002326 _____ C:UsersphyliDesktopAOL Desktop Gold.lnk\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsAOL Inc\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalAOLDesktop\n2020-05-11 12:05 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalSquirrelTemp\n2020-05-10 04:33 – 2019-08-15 19:04 – 000003376 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-999762305-681959455-3457413626-1001\n2020-05-10 04:33 – 2019-08-15 18:51 – 000002370 _____ C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-05-10 04:33 – 2016-09-25 15:46 – 000000000 ___RD C:UsersphyliOneDrive\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002308 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:UsersPublicDesktopGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:ProgramDataDesktopGoogle Chrome.lnk\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-15 17:38 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp

"},{"id":"text-35","type":"text","heading":"","plain_text":"==================== Files in the root of some directories ========","html":"

==================== Files in the root of some directories ========

"},{"id":"text-36","type":"text","heading":"","plain_text":"2018-01-12 13:24 – 2018-01-12 13:24 – 018102328 _____ (Webroot Software, Inc.) C:Program Files (x86)Common Fileswruninstall.exe\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ () C:UsersphyliAppDataLocalResmon.ResmonCfg","html":"

2018-01-12 13:24 – 2018-01-12 13:24 – 018102328 _____ (Webroot Software, Inc.) C:Program Files (x86)Common Fileswruninstall.exe\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ () C:UsersphyliAppDataLocalResmon.ResmonCfg

"},{"id":"text-37","type":"text","heading":"","plain_text":"==================== SigCheck ============================","html":"

==================== SigCheck ============================

"},{"id":"text-38","type":"text","heading":"","plain_text":"(There is no automatic fix for files that do not pass verification.)","html":"

(There is no automatic fix for files that do not pass verification.)

"},{"id":"text-39","type":"text","heading":"","plain_text":"==================== End of FRST.txt ========================'","html":"

==================== End of FRST.txt ========================'

"},{"id":"text-40","type":"text","heading":"","plain_text":"Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2020\nRan by phyli (12-05-2020 20:56:18)\nRunning from C:UsersphyliDownloads\nWindows 10 Home Version 1903 18362.778 (X64) (2019-08-15 23:04:54)\nBoot Mode: Normal\n==========================================================","html":"

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2020\nRan by phyli (12-05-2020 20:56:18)\nRunning from C:UsersphyliDownloads\nWindows 10 Home Version 1903 18362.778 (X64) (2019-08-15 23:04:54)\nBoot Mode: Normal\n==========================================================

"},{"id":"text-41","type":"text","heading":"","plain_text":"==================== Accounts: =============================","html":"

==================== Accounts: =============================

"},{"id":"text-42","type":"text","heading":"","plain_text":"Administrator (S-1-5-21-999762305-681959455-3457413626-500 – Administrator – Disabled)\nDefaultAccount (S-1-5-21-999762305-681959455-3457413626-503 – Limited – Disabled)\ndefaultuser100001 (S-1-5-21-999762305-681959455-3457413626-1003 – Limited – Enabled)\nGuest (S-1-5-21-999762305-681959455-3457413626-501 – Limited – Disabled)\nphyli (S-1-5-21-999762305-681959455-3457413626-1001 – Administrator – Enabled) => C:Usersphyli\nWDAGUtilityAccount (S-1-5-21-999762305-681959455-3457413626-504 – Limited – Disabled)","html":"

Administrator (S-1-5-21-999762305-681959455-3457413626-500 – Administrator – Disabled)\nDefaultAccount (S-1-5-21-999762305-681959455-3457413626-503 – Limited – Disabled)\ndefaultuser100001 (S-1-5-21-999762305-681959455-3457413626-1003 – Limited – Enabled)\nGuest (S-1-5-21-999762305-681959455-3457413626-501 – Limited – Disabled)\nphyli (S-1-5-21-999762305-681959455-3457413626-1001 – Administrator – Enabled) => C:Usersphyli\nWDAGUtilityAccount (S-1-5-21-999762305-681959455-3457413626-504 – Limited – Disabled)

"},{"id":"text-43","type":"text","heading":"","plain_text":"==================== Security Center ========================","html":"

==================== Security Center ========================

"},{"id":"text-44","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed.)","html":"

(If an entry is included in the fixlist, it will be removed.)

"},{"id":"text-45","type":"text","heading":"","plain_text":"AV: Norton 360 (Enabled – Up to date) 1122B19A-E671-38EC-8EAC-87048FD4528D\nAV: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAV: Webroot SecureAnywhere (Enabled – Up to date) DF901FA1-F926-253B-C464-B01C79DCAD48\nAS: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Webroot SecureAnywhere (Enabled – Up to date) 64F1FE45-DF1C-2AB5-FED4-8B6E025BE7F5\nFW: Norton 360 (Enabled) 291930BF-AC1E-39B4-A5F3-2E31710715F6","html":"

AV: Norton 360 (Enabled – Up to date) 1122B19A-E671-38EC-8EAC-87048FD4528D\nAV: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAV: Webroot SecureAnywhere (Enabled – Up to date) DF901FA1-F926-253B-C464-B01C79DCAD48\nAS: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Webroot SecureAnywhere (Enabled – Up to date) 64F1FE45-DF1C-2AB5-FED4-8B6E025BE7F5\nFW: Norton 360 (Enabled) 291930BF-AC1E-39B4-A5F3-2E31710715F6

"},{"id":"text-46","type":"text","heading":"","plain_text":"==================== Installed Programs ======================","html":"

==================== Installed Programs ======================

"},{"id":"text-47","type":"text","heading":"","plain_text":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)","html":"

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

"},{"id":"text-48","type":"text","heading":"","plain_text":"AOL Desktop Gold (HKUS-1-5-21-999762305-681959455-3457413626-1001…AOLDesktop) (Version: 11.0.2664 – Oath Inc.)\nAOL Uninstaller (Choose which Products to Remove) (HKLM-x32…AOL Uninstaller) (Version:  – AOL Inc.)\nBonjour (HKLM…6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D) (Version: 3.0.0.10 – Apple Inc.)\nCCleaner (HKLM…CCleaner) (Version: 5.38 – Piriform)\nCyberLink PhotoDirector (HKLM…5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.) Hidden\nCyberLink PhotoDirector (HKLM-x32…InstallShield_5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.)\nCyberLink Power Media Player 14 (HKLM-x32…32C8E300-BDB4-4398-92C2-E9B7D8A233DB) (Version: 14.0.2.5801 – CyberLink Corp.)\nCyberLink PowerDirector 12 (HKLM…E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.) Hidden\nCyberLink PowerDirector 12 (HKLM-x32…InstallShield_E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.)\nDropbox 25 GB (HKLM-x32…867A88D-764F-366E-9E21-130DA8B472C3) (Version: 3.1.18.0 – Dropbox, Inc.)\nDropbox Update Helper (HKLM-x32…99218A5-A723-43DC-8DB5-6173656A1E94) (Version: 1.3.295.1 – Dropbox, Inc.) Hidden\nEvernote v. 5.8.13 (HKLM-x32…A229420E-204B-11E5-B844-0050569584E9) (Version: 5.8.13.8152 – Evernote Corp.)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.138 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nHP Documentation (HKLM…HP_Documentation) (Version: 1.0.0.1 – HP)\nHP Dropbox Plugin (HKLM-x32…C54DEA1F-7A8D-410B-A675-04E0FB562CB0) (Version: 40.13.54.81239 – HP)\nHP Google Drive Plugin (HKLM-x32…533B4739-13DD-4AAB-9524-070B3F0CE6ED) (Version: 40.13.54.81239 – HP)\nHP Officejet 5740 series Basic Device Software (HKLM…8C417009-7889-42BC-8164-C74FFF358CE6) (Version: 40.13.1176.1978 – HP Inc.)\nHP Officejet 5740 series Help (HKLM-x32…F17D53C7-DCE8-469C-9690-CF8F5903519C) (Version: 34.0.0 – Hewlett Packard)\nHP Photo Creations (HKLM-x32…HP Photo Creations) (Version: 1.0.0.9572 – HP)\nHP Registration Service (HKLM…D1E8F2D7-7794-4245-B286-87ED86C1893C) (Version: 1.2.8318.5320 – Hewlett-Packard)\nHP Support Assistant (HKLM-x32…79C54A05-F146-4EA0-8A70-D4EFE6181E52) (Version: 8.8.24.33 – Hewlett-Packard Company)\nHP Support Information (HKLM-x32…76272057-98E0-4DC4-AAC3-10C546C47195) (Version: 14.00.0000 – Hewlett-Packard)\nHP Support Solutions Framework (HKLM-x32…55065080-504F-43BB-BE00-36B80D7D39A5) (Version: 12.15.14.3 – Hewlett-Packard Company)\nHP Touchpoint Analytics Client (HKLM…E5FB98E0-0784-44F0-8CEC-95CD4690C43F) (Version: 4.0.2.1439 – HP Inc.)\nHP Welcome (HKLM…HPWelcome) (Version: 1.0 – HP Inc.)\nI.R.I.S. OCR (HKLM-x32…11ED31EC-7EFA-4D56-B71D-E0214C8984CC) (Version: 12.3.7.0 – HP)\nIntel® Chipset Device Software (HKLM-x32…a2d9fda8-65eb-4c06-81ef-31e0a4daa335) (Version: 10.1.1.11 – Intel® Corporation) Hidden\nIntel® Management Engine Components (HKLM…1CEAC85D-2590-4760-800F-8DE5E91F3700) (Version: 11.0.0.1173 – Intel Corporation)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 25.20.100.6446 – Intel Corporation)\nIntel® Ready Mode Technology (HKLM…9F82AA39-BB14-4BD3-98EF-D4E9E3526B7D) (Version: 1.1.70.514 – Intel Corporation)\nIntel® WiDi (HKLM…5DD8D7E4-87F1-4134-AD28-4228FB1A03BA) (Version: 6.0.44.0 – Intel Corporation)\nIntel® WiDi Software Asset Manager (HKLM-x32…86905E62-645F-482E-A417-82C812ABD787) (Version: 1.1.383 – Intel Corporation) Hidden\nIntel® Wireless Bluetooth® (HKLM-x32…4DA9DC19-4E1D-4B10-A726-A5F2A1BC7265) (Version: 18.1.1546.2762 – Intel Corporation)\nIntel® PROSet/Wireless Software (HKLM-x32…f8c930bd-0a68-425f-8c11-87723d1e2c97) (Version: 20.90.0 – Intel Corporation)\nIntel® Security Assist (HKLM-x32…4B230374-6475-4A73-BA6E-41015E9C5013) (Version: 1.0.0.532 – Intel Corporation)\nMicrosoft Office (HKLM-x32…90150000-0138-0409-0000-0000000FF1CE) (Version: 15.0.4693.1005 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-999762305-681959455-3457413626-1001…OneDriveSetup.exe) (Version: 20.052.0311.0011 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…837b34e3-7c30-493c-8f6a-2b0f04e2912c) (Version: 8.0.59193 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.21005 (HKLM-x32…ce085a78-074e-4823-8dc1-8a721b94b76d) (Version: 12.0.21005.1 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nNorton 360 (HKLM-x32…NGC) (Version: 22.20.2.57 – Symantec Corporation)\nProduct Improvement Study for HP Officejet 5740 series (HKLM…D4B37902-C484-4AAC-B3B8-70C203C4FAB3) (Version: 40.13.1176.1978 – HP Inc.)\nRealtek Card Reader (HKLM-x32…5BC2B5AB-80DE-4E83-B8CF-426902051D0A) (Version: 10.0.10125.31214 – Realtek Semiconductor Corp.)\nRealtek Ethernet Controller Driver (HKLM-x32…8833FFB6-5B0C-4764-81AA-06DFEED9A476) (Version: 10.1.505.2015 – Realtek)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7673 – Realtek Semiconductor Corp.)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.5.3 – TeamViewer)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…16AD6161-2E47-4BF1-AA77-0946EFE93E08) (Version: 2.61.0.0 – Microsoft Corporation)\nUpdateAssistant (HKLM…E1D7CB46-BAE9-4D58-99C4-582332B1755A) (Version: 1.13.0.0 – Microsoft Corporation) Hidden\nViewpoint Media Player (HKLM-x32…ViewpointMediaPlayer) (Version:  – )\nVulkan Run Time Libraries 1.0.54.1 (HKLM…VulkanRT1.0.54.1) (Version: 1.0.54.1 – LunarG, Inc.) Hidden\nWindows 10 Update Assistant (HKLM-x32…D5C69738-B486-402E-85AC-2456D98A64E4) (Version: 1.4.9200.22395 – Microsoft Corporation)\nWindows Setup Remediations (x64) (KB4023057) (HKLM…5534e02f-0f5d-40dd-ba92-bea38d22384d.sdb) (Version:  – )","html":"

AOL Desktop Gold (HKUS-1-5-21-999762305-681959455-3457413626-1001…AOLDesktop) (Version: 11.0.2664 – Oath Inc.)\nAOL Uninstaller (Choose which Products to Remove) (HKLM-x32…AOL Uninstaller) (Version:  – AOL Inc.)\nBonjour (HKLM…6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D) (Version: 3.0.0.10 – Apple Inc.)\nCCleaner (HKLM…CCleaner) (Version: 5.38 – Piriform)\nCyberLink PhotoDirector (HKLM…5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.) Hidden\nCyberLink PhotoDirector (HKLM-x32…InstallShield_5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.)\nCyberLink Power Media Player 14 (HKLM-x32…32C8E300-BDB4-4398-92C2-E9B7D8A233DB) (Version: 14.0.2.5801 – CyberLink Corp.)\nCyberLink PowerDirector 12 (HKLM…E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.) Hidden\nCyberLink PowerDirector 12 (HKLM-x32…InstallShield_E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.)\nDropbox 25 GB (HKLM-x32…867A88D-764F-366E-9E21-130DA8B472C3) (Version: 3.1.18.0 – Dropbox, Inc.)\nDropbox Update Helper (HKLM-x32…99218A5-A723-43DC-8DB5-6173656A1E94) (Version: 1.3.295.1 – Dropbox, Inc.) Hidden\nEvernote v. 5.8.13 (HKLM-x32…A229420E-204B-11E5-B844-0050569584E9) (Version: 5.8.13.8152 – Evernote Corp.)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.138 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nHP Documentation (HKLM…HP_Documentation) (Version: 1.0.0.1 – HP)\nHP Dropbox Plugin (HKLM-x32…C54DEA1F-7A8D-410B-A675-04E0FB562CB0) (Version: 40.13.54.81239 – HP)\nHP Google Drive Plugin (HKLM-x32…533B4739-13DD-4AAB-9524-070B3F0CE6ED) (Version: 40.13.54.81239 – HP)\nHP Officejet 5740 series Basic Device Software (HKLM…8C417009-7889-42BC-8164-C74FFF358CE6) (Version: 40.13.1176.1978 – HP Inc.)\nHP Officejet 5740 series Help (HKLM-x32…F17D53C7-DCE8-469C-9690-CF8F5903519C) (Version: 34.0.0 – Hewlett Packard)\nHP Photo Creations (HKLM-x32…HP Photo Creations) (Version: 1.0.0.9572 – HP)\nHP Registration Service (HKLM…D1E8F2D7-7794-4245-B286-87ED86C1893C) (Version: 1.2.8318.5320 – Hewlett-Packard)\nHP Support Assistant (HKLM-x32…79C54A05-F146-4EA0-8A70-D4EFE6181E52) (Version: 8.8.24.33 – Hewlett-Packard Company)\nHP Support Information (HKLM-x32…76272057-98E0-4DC4-AAC3-10C546C47195) (Version: 14.00.0000 – Hewlett-Packard)\nHP Support Solutions Framework (HKLM-x32…55065080-504F-43BB-BE00-36B80D7D39A5) (Version: 12.15.14.3 – Hewlett-Packard Company)\nHP Touchpoint Analytics Client (HKLM…E5FB98E0-0784-44F0-8CEC-95CD4690C43F) (Version: 4.0.2.1439 – HP Inc.)\nHP Welcome (HKLM…HPWelcome) (Version: 1.0 – HP Inc.)\nI.R.I.S. OCR (HKLM-x32…11ED31EC-7EFA-4D56-B71D-E0214C8984CC) (Version: 12.3.7.0 – HP)\nIntel® Chipset Device Software (HKLM-x32…a2d9fda8-65eb-4c06-81ef-31e0a4daa335) (Version: 10.1.1.11 – Intel® Corporation) Hidden\nIntel® Management Engine Components (HKLM…1CEAC85D-2590-4760-800F-8DE5E91F3700) (Version: 11.0.0.1173 – Intel Corporation)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 25.20.100.6446 – Intel Corporation)\nIntel® Ready Mode Technology (HKLM…9F82AA39-BB14-4BD3-98EF-D4E9E3526B7D) (Version: 1.1.70.514 – Intel Corporation)\nIntel® WiDi (HKLM…5DD8D7E4-87F1-4134-AD28-4228FB1A03BA) (Version: 6.0.44.0 – Intel Corporation)\nIntel® WiDi Software Asset Manager (HKLM-x32…86905E62-645F-482E-A417-82C812ABD787) (Version: 1.1.383 – Intel Corporation) Hidden\nIntel® Wireless Bluetooth® (HKLM-x32…4DA9DC19-4E1D-4B10-A726-A5F2A1BC7265) (Version: 18.1.1546.2762 – Intel Corporation)\nIntel® PROSet/Wireless Software (HKLM-x32…f8c930bd-0a68-425f-8c11-87723d1e2c97) (Version: 20.90.0 – Intel Corporation)\nIntel® Security Assist (HKLM-x32…4B230374-6475-4A73-BA6E-41015E9C5013) (Version: 1.0.0.532 – Intel Corporation)\nMicrosoft Office (HKLM-x32…90150000-0138-0409-0000-0000000FF1CE) (Version: 15.0.4693.1005 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-999762305-681959455-3457413626-1001…OneDriveSetup.exe) (Version: 20.052.0311.0011 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…837b34e3-7c30-493c-8f6a-2b0f04e2912c) (Version: 8.0.59193 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.21005 (HKLM-x32…ce085a78-074e-4823-8dc1-8a721b94b76d) (Version: 12.0.21005.1 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nNorton 360 (HKLM-x32…NGC) (Version: 22.20.2.57 – Symantec Corporation)\nProduct Improvement Study for HP Officejet 5740 series (HKLM…D4B37902-C484-4AAC-B3B8-70C203C4FAB3) (Version: 40.13.1176.1978 – HP Inc.)\nRealtek Card Reader (HKLM-x32…5BC2B5AB-80DE-4E83-B8CF-426902051D0A) (Version: 10.0.10125.31214 – Realtek Semiconductor Corp.)\nRealtek Ethernet Controller Driver (HKLM-x32…8833FFB6-5B0C-4764-81AA-06DFEED9A476) (Version: 10.1.505.2015 – Realtek)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7673 – Realtek Semiconductor Corp.)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.5.3 – TeamViewer)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…16AD6161-2E47-4BF1-AA77-0946EFE93E08) (Version: 2.61.0.0 – Microsoft Corporation)\nUpdateAssistant (HKLM…E1D7CB46-BAE9-4D58-99C4-582332B1755A) (Version: 1.13.0.0 – Microsoft Corporation) Hidden\nViewpoint Media Player (HKLM-x32…ViewpointMediaPlayer) (Version:  – )\nVulkan Run Time Libraries 1.0.54.1 (HKLM…VulkanRT1.0.54.1) (Version: 1.0.54.1 – LunarG, Inc.) Hidden\nWindows 10 Update Assistant (HKLM-x32…D5C69738-B486-402E-85AC-2456D98A64E4) (Version: 1.4.9200.22395 – Microsoft Corporation)\nWindows Setup Remediations (x64) (KB4023057) (HKLM…5534e02f-0f5d-40dd-ba92-bea38d22384d.sdb) (Version:  – )

"},{"id":"text-49","type":"text","heading":"","plain_text":"Packages:\n=========\nAdblock Plus -> C:Program FilesWindowsAppsEyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11] (eyeo GmbH)\nAdGuard AdBlocker -> C:Program FilesWindowsAppsAdguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09] (Performix)\nAmazon -> C:Program FilesWindowsAppsAmazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2020-02-29] (Amazon.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.167.200.0_x86__kgqvnymyfvs32 [2020-05-06] (king.com)\nHearts Deluxe -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.HeartsDeluxe_6.6.26.0_x64__kx24dqmazqk8j [2020-01-25] (Random Salad Games LLC) [MS Ad]\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-15] (HP Inc.)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-02] (Microsoft Studios) [MS Ad]\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nNetflix -> C:Program FilesWindowsApps4DF9E0F8.Netflix_6.96.725.0_x64__mcm4njqhnhss8 [2020-04-10] (Netflix, Inc.)\nSimple Solitaire -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.SimpleSolitaire_6.18.78.0_x64__kx24dqmazqk8j [2020-03-03] (Random Salad Games LLC) [MS Ad]\nSnapfish -> C:Program FilesWindowsAppsAD2F1837.HPConnectedPhotopoweredbySnapfish_6.1.736.0_x86__v10z8vjag6ke6 [2018-08-05] (Snapfish)\nTripAdvisor Hotels Flights Restaurants -> C:Program FilesWindowsAppsTripAdvisorLLC.TripAdvisorHotelsFlightsRestaurants_1.5.10.0_x64__qj0v5chwq8f2g [2016-11-18] (TripAdvisor LLC)\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-09] (Twitter Inc.)","html":"

Packages:\n=========\nAdblock Plus -> C:Program FilesWindowsAppsEyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11] (eyeo GmbH)\nAdGuard AdBlocker -> C:Program FilesWindowsAppsAdguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09] (Performix)\nAmazon -> C:Program FilesWindowsAppsAmazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2020-02-29] (Amazon.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.167.200.0_x86__kgqvnymyfvs32 [2020-05-06] (king.com)\nHearts Deluxe -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.HeartsDeluxe_6.6.26.0_x64__kx24dqmazqk8j [2020-01-25] (Random Salad Games LLC) [MS Ad]\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-15] (HP Inc.)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-02] (Microsoft Studios) [MS Ad]\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nNetflix -> C:Program FilesWindowsApps4DF9E0F8.Netflix_6.96.725.0_x64__mcm4njqhnhss8 [2020-04-10] (Netflix, Inc.)\nSimple Solitaire -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.SimpleSolitaire_6.18.78.0_x64__kx24dqmazqk8j [2020-03-03] (Random Salad Games LLC) [MS Ad]\nSnapfish -> C:Program FilesWindowsAppsAD2F1837.HPConnectedPhotopoweredbySnapfish_6.1.736.0_x86__v10z8vjag6ke6 [2018-08-05] (Snapfish)\nTripAdvisor Hotels Flights Restaurants -> C:Program FilesWindowsAppsTripAdvisorLLC.TripAdvisorHotelsFlightsRestaurants_1.5.10.0_x64__qj0v5chwq8f2g [2016-11-18] (TripAdvisor LLC)\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-09] (Twitter Inc.)

"},{"id":"text-50","type":"text","heading":"","plain_text":"==================== Custom CLSID (Whitelisted): ==============","html":"

==================== Custom CLSID (Whitelisted): ==============

"},{"id":"text-51","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

"},{"id":"text-52","type":"text","heading":"","plain_text":"ShellIconOverlayIdentifiers: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers2: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 =>  -> No File\nContextMenuHandlers5: [igfxDTCM] -> 9B5F5829-A529-4B12-814A-E81BCB8D93FC => C:WINDOWSSystem32DriverStoreFileRepositoryki131064.inf_amd64_5d13f27a9a9843faigfxDTCM.dll [2019-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers6: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers6: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)","html":"

ShellIconOverlayIdentifiers: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers2: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 =>  -> No File\nContextMenuHandlers5: [igfxDTCM] -> 9B5F5829-A529-4B12-814A-E81BCB8D93FC => C:WINDOWSSystem32DriverStoreFileRepositoryki131064.inf_amd64_5d13f27a9a9843faigfxDTCM.dll [2019-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers6: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers6: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)

"},{"id":"text-53","type":"text","heading":"","plain_text":"==================== Codecs (Whitelisted) ====================","html":"

==================== Codecs (Whitelisted) ====================

"},{"id":"text-54","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)","html":"

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

"},{"id":"text-55","type":"text","heading":"","plain_text":"HKLM…Drivers32: [vidc.i420] => C:WINDOWSsystem32lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.)\nHKLM…Drivers32: [vidc.i420] => C:WindowsSysWOW64lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.)","html":"

HKLM…Drivers32: [vidc.i420] => C:WINDOWSsystem32lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.)\nHKLM…Drivers32: [vidc.i420] => C:WindowsSysWOW64lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.)

"},{"id":"text-56","type":"text","heading":"","plain_text":"==================== Shortcuts & WMI ========================","html":"

==================== Shortcuts & WMI ========================

"},{"id":"text-57","type":"text","heading":"","plain_text":"(The entries could be listed to be restored or removed.)","html":"

(The entries could be listed to be restored or removed.)

"},{"id":"text-58","type":"text","heading":"","plain_text":"ShortcutWithArgument: C:UsersphyliDesktopMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsChrome AppsMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:ProgramDataMicrosoftWindowsStart MenuProgramsPriceline.com.lnk -> C:Program Files (x86)Hewlett-PackardSharedWizLink.exe () -> hxxp://www.priceline.com/?refid=PLHBC6240OPQ&refclickid=square","html":"

ShortcutWithArgument: C:UsersphyliDesktopMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsChrome AppsMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:ProgramDataMicrosoftWindowsStart MenuProgramsPriceline.com.lnk -> C:Program Files (x86)Hewlett-PackardSharedWizLink.exe () -> hxxp://www.priceline.com/?refid=PLHBC6240OPQ&refclickid=square

"},{"id":"text-59","type":"text","heading":"","plain_text":"==================== Loaded Modules (Whitelisted) =============","html":"

==================== Loaded Modules (Whitelisted) =============

"},{"id":"text-60","type":"text","heading":"","plain_text":"==================== Alternate Data Streams (Whitelisted) ========","html":"

==================== Alternate Data Streams (Whitelisted) ========

"},{"id":"text-61","type":"text","heading":"","plain_text":"==================== Safe Mode (Whitelisted) ==================","html":"

==================== Safe Mode (Whitelisted) ==================

"},{"id":"text-62","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)","html":"

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

"},{"id":"text-63","type":"text","heading":"","plain_text":"HKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521 => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521.SYS => ""="Driver"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkWRBoot => ""="Driver"","html":"

HKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521 => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521.SYS => ""="Driver"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkWRBoot => ""="Driver"

"},{"id":"text-64","type":"text","heading":"","plain_text":"==================== Association (Whitelisted) =================","html":"

==================== Association (Whitelisted) =================

"},{"id":"text-65","type":"text","heading":"","plain_text":"==================== Internet Explorer trusted/restricted ==========","html":"

==================== Internet Explorer trusted/restricted ==========

"},{"id":"text-66","type":"text","heading":"","plain_text":"==================== Hosts content: =========================","html":"

==================== Hosts content: =========================

"},{"id":"text-67","type":"text","heading":"","plain_text":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)","html":"

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

"},{"id":"text-68","type":"text","heading":"","plain_text":"2015-10-30 03:24 – 2015-10-30 03:21 – 000000824 ____N C:WINDOWSsystem32driversetchosts","html":"

2015-10-30 03:24 – 2015-10-30 03:21 – 000000824 ____N C:WINDOWSsystem32driversetchosts

"},{"id":"text-69","type":"text","heading":"","plain_text":"==================== Other Areas ===========================","html":"

==================== Other Areas ===========================

"},{"id":"text-70","type":"text","heading":"","plain_text":"(Currently there is no automatic fix for this section.)","html":"

(Currently there is no automatic fix for this section.)

"},{"id":"text-71","type":"text","heading":"","plain_text":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)InteliCLS Client;C:Program FilesInteliCLS Client;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program Files (x86)IntelIntel® Management Engine ComponentsDAL;C:Program FilesIntelIntel® Management Engine ComponentsDAL;C:Program Files (x86)IntelIntel® Management Engine ComponentsIPT;C:Program FilesIntelIntel® Management Engine ComponentsIPT;%SYSTEMROOT%System32OpenSSH;C:Program FilesIntelWiFibin;C:Program FilesCommon FilesIntelWirelessCommon\nHKUS-1-5-21-999762305-681959455-3457413626-1001Control PanelDesktop\\Wallpaper -> \nDNS Servers: 192.168.1.1 – 10.255.0.0\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: Warn)\nWindows Firewall is enabled.","html":"

HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)InteliCLS Client;C:Program FilesInteliCLS Client;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program Files (x86)IntelIntel® Management Engine ComponentsDAL;C:Program FilesIntelIntel® Management Engine ComponentsDAL;C:Program Files (x86)IntelIntel® Management Engine ComponentsIPT;C:Program FilesIntelIntel® Management Engine ComponentsIPT;%SYSTEMROOT%System32OpenSSH;C:Program FilesIntelWiFibin;C:Program FilesCommon FilesIntelWirelessCommon\nHKUS-1-5-21-999762305-681959455-3457413626-1001Control PanelDesktop\\Wallpaper -> \nDNS Servers: 192.168.1.1 – 10.255.0.0\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: Warn)\nWindows Firewall is enabled.

"},{"id":"text-72","type":"text","heading":"","plain_text":"==================== MSCONFIG/TASK MANAGER disabled items ==","html":"

==================== MSCONFIG/TASK MANAGER disabled items ==

"},{"id":"text-73","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed.)","html":"

(If an entry is included in the fixlist, it will be removed.)

"},{"id":"text-74","type":"text","heading":"","plain_text":"HKLM…StartupApprovedStartupFolder: => "Install LastPass IE RunOnce.lnk"\nHKLM…StartupApprovedRun: => "RTHDVCPL"\nHKLM…StartupApprovedRun32: => "PowerDVD14Agent"\nHKLM…StartupApprovedRun32: => "WRSVC"\nHKLM…StartupApprovedRun32: => "HostManager"\nHKLM…StartupApprovedRun32: => "SecurityHealth"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedStartupFolder: => "AOL Desktop Launcher.lnk"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "CCleaner Monitoring"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "OneDrive"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026amd64"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026"","html":"

HKLM…StartupApprovedStartupFolder: => "Install LastPass IE RunOnce.lnk"\nHKLM…StartupApprovedRun: => "RTHDVCPL"\nHKLM…StartupApprovedRun32: => "PowerDVD14Agent"\nHKLM…StartupApprovedRun32: => "WRSVC"\nHKLM…StartupApprovedRun32: => "HostManager"\nHKLM…StartupApprovedRun32: => "SecurityHealth"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedStartupFolder: => "AOL Desktop Launcher.lnk"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "CCleaner Monitoring"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "OneDrive"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026amd64"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026"

"},{"id":"text-75","type":"text","heading":"","plain_text":"==================== FirewallRules (Whitelisted) ================","html":"

==================== FirewallRules (Whitelisted) ================

"},{"id":"text-76","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

"},{"id":"text-77","type":"text","heading":"","plain_text":"FirewallRules: [54640540-F97A-4412-900E-39472727094D] => (Allow) C:Program FilesIntelWiFibinPanDhcpDns.exe (Intel Corporation -> )\nFirewallRules: [8DC4717E-FCAF-469D-9E12-79DB0B253EF1] => (Allow) C:Program FilesCommon FilesMcAfeeMMSSHostMMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)\nFirewallRules: [791E7CF7-C352-4609-87FE-4C2E705A6E1F] => (Allow) C:Program Files (x86)Common FilesMcafeeMMSSHostMMSSHost.exe => No File\nFirewallRules: [AF62C409-25E2-4AEC-9DEC-12B069A10F79] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [F3B8345F-5967-46B5-BA4F-A598A14D09D3] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [FF87652F-D92F-4FD5-B8D2-DC22659AB369] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [29CAECA3-8459-490A-B734-D5D8B16E5BC5] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [3241FBCD-FFAC-4EE7-8F09-8A5105596348] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [1958B452-6813-4A87-A829-95800B9FDB77] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [E46AC436-D866-4D71-B2B9-ADE4A9339A1B] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [975C4FE9-8C93-4A39-AD4A-033BF7D371FD] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [A012B925-4D8A-4CA0-90E5-ECD661D3E083] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [DB6A911E-74F0-457F-BFF3-291FBD427D56] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9F2E22A7-C276-4028-875D-E9BE1FCE1F3D] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [71A37010-12B4-4407-B154-0F9980309A79] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [C733D88A-3187-4419-87C5-1A0EB1FDCCBB] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9A69636F-43A5-4523-ADC5-B05E7329E939] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [B745797E-820D-45A1-9096-B8F2E7D887CA] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVD CinemaPowerDVDCinema.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [8A476C2A-9A52-41E6-8608-EA62290278ED] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [F4ECB65E-59C8-477E-BA52-2A2020C15832] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD14Agent.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [76B1143C-70F8-452E-94C8-3CB3C4C595B6] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14KernelDMSCLMSServerPDVD14.exe (CyberLink Corp. -> CyberLink)\nFirewallRules: [903790A5-47BC-4DE7-B8EF-5FFA2A23BFF3] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [70D32C90-6419-457B-8B12-37EF83F7CB75] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [9027CB07-C9CF-4D46-8607-8A1AC3201DBF] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [3770051C-48E7-46F6-85CC-DCE51562BD14] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AB9F9C90-7C33-40D1-9DDF-CA8253003040] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [530F0275-912A-49A4-A418-E5014F38FF16] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxApplications.exe (HP Inc -> HP Inc.)\nFirewallRules: [4E862923-0E31-4D90-A8D4-BD42EF44D066] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinDigitalWizards.exe (HP Inc -> HP Inc.)\nFirewallRules: [6ACD8E74-027D-4580-8EE3-351AABAB3602] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinSendAFax.exe (HP Inc -> HP Inc.)\nFirewallRules: [61D83D5B-BCA4-4DDA-8B89-DF5986B5E587] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxPrinterUtility.exe (HP Inc -> HP Inc.)\nFirewallRules: [D83F6F84-CB01-4B1B-B74F-522E4ED00D68] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinDeviceSetup.exe (HP Inc -> HP Inc.)\nFirewallRules: [CBB4B686-C3E0-42EA-8BA8-FD001355A894] => (Allow) LPort=5357\nFirewallRules: [16643FC5-67E9-487C-B277-A99B9C0B0A91] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinHPNetworkCommunicatorCom.exe (HP Inc -> HP Inc.)\nFirewallRules: [38841FC4-2F6E-48B2-A565-A7D70AD5936C] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [4D96E522-6D29-4ED1-A56E-3DCF75D7A03E] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [E7F8679D-AFED-4B1A-9DCE-40715CC682D2] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [D06019FB-2384-4BB9-A71A-4CE2590E3755] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [170F4B69-67DF-4CB1-93D6-EC86EAE15F14] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)","html":"

FirewallRules: [54640540-F97A-4412-900E-39472727094D] => (Allow) C:Program FilesIntelWiFibinPanDhcpDns.exe (Intel Corporation -> )\nFirewallRules: [8DC4717E-FCAF-469D-9E12-79DB0B253EF1] => (Allow) C:Program FilesCommon FilesMcAfeeMMSSHostMMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)\nFirewallRules: [791E7CF7-C352-4609-87FE-4C2E705A6E1F] => (Allow) C:Program Files (x86)Common FilesMcafeeMMSSHostMMSSHost.exe => No File\nFirewallRules: [AF62C409-25E2-4AEC-9DEC-12B069A10F79] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [F3B8345F-5967-46B5-BA4F-A598A14D09D3] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [FF87652F-D92F-4FD5-B8D2-DC22659AB369] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [29CAECA3-8459-490A-B734-D5D8B16E5BC5] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [3241FBCD-FFAC-4EE7-8F09-8A5105596348] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [1958B452-6813-4A87-A829-95800B9FDB77] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [E46AC436-D866-4D71-B2B9-ADE4A9339A1B] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [975C4FE9-8C93-4A39-AD4A-033BF7D371FD] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [A012B925-4D8A-4CA0-90E5-ECD661D3E083] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [DB6A911E-74F0-457F-BFF3-291FBD427D56] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9F2E22A7-C276-4028-875D-E9BE1FCE1F3D] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [71A37010-12B4-4407-B154-0F9980309A79] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [C733D88A-3187-4419-87C5-1A0EB1FDCCBB] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9A69636F-43A5-4523-ADC5-B05E7329E939] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [B745797E-820D-45A1-9096-B8F2E7D887CA] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVD CinemaPowerDVDCinema.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [8A476C2A-9A52-41E6-8608-EA62290278ED] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [F4ECB65E-59C8-477E-BA52-2A2020C15832] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD14Agent.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [76B1143C-70F8-452E-94C8-3CB3C4C595B6] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14KernelDMSCLMSServerPDVD14.exe (CyberLink Corp. -> CyberLink)\nFirewallRules: [903790A5-47BC-4DE7-B8EF-5FFA2A23BFF3] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [70D32C90-6419-457B-8B12-37EF83F7CB75] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [9027CB07-C9CF-4D46-8607-8A1AC3201DBF] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [3770051C-48E7-46F6-85CC-DCE51562BD14] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AB9F9C90-7C33-40D1-9DDF-CA8253003040] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [530F0275-912A-49A4-A418-E5014F38FF16] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxApplications.exe (HP Inc -> HP Inc.)\nFirewallRules: [4E862923-0E31-4D90-A8D4-BD42EF44D066] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinDigitalWizards.exe (HP Inc -> HP Inc.)\nFirewallRules: [6ACD8E74-027D-4580-8EE3-351AABAB3602] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinSendAFax.exe (HP Inc -> HP Inc.)\nFirewallRules: [61D83D5B-BCA4-4DDA-8B89-DF5986B5E587] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxPrinterUtility.exe (HP Inc -> HP Inc.)\nFirewallRules: [D83F6F84-CB01-4B1B-B74F-522E4ED00D68] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinDeviceSetup.exe (HP Inc -> HP Inc.)\nFirewallRules: [CBB4B686-C3E0-42EA-8BA8-FD001355A894] => (Allow) LPort=5357\nFirewallRules: [16643FC5-67E9-487C-B277-A99B9C0B0A91] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinHPNetworkCommunicatorCom.exe (HP Inc -> HP Inc.)\nFirewallRules: [38841FC4-2F6E-48B2-A565-A7D70AD5936C] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [4D96E522-6D29-4ED1-A56E-3DCF75D7A03E] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [E7F8679D-AFED-4B1A-9DCE-40715CC682D2] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [D06019FB-2384-4BB9-A71A-4CE2590E3755] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [170F4B69-67DF-4CB1-93D6-EC86EAE15F14] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

"},{"id":"text-78","type":"text","heading":"","plain_text":"==================== Restore Points =========================","html":"

==================== Restore Points =========================

"},{"id":"text-79","type":"text","heading":"","plain_text":"20-04-2020 17:12:46 Windows Update\n28-04-2020 15:32:48 Scheduled Checkpoint\n07-05-2020 12:26:10 Scheduled Checkpoint\n11-05-2020 15:24:27 tech","html":"

20-04-2020 17:12:46 Windows Update\n28-04-2020 15:32:48 Scheduled Checkpoint\n07-05-2020 12:26:10 Scheduled Checkpoint\n11-05-2020 15:24:27 tech

"},{"id":"text-80","type":"text","heading":"","plain_text":"==================== Faulty Device Manager Devices ============","html":"

==================== Faulty Device Manager Devices ============

"},{"id":"text-81","type":"text","heading":"","plain_text":"==================== Event log errors: ========================","html":"

==================== Event log errors: ========================

"},{"id":"text-82","type":"text","heading":"","plain_text":"Application errors:\n==================\nError: (05/12/2020 08:10:51 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (832,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Application errors:\n==================\nError: (05/12/2020 08:10:51 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (832,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-83","type":"text","heading":"","plain_text":"Error: (05/12/2020 06:19:26 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (11352,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (05/12/2020 06:19:26 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (11352,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-84","type":"text","heading":"","plain_text":"Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0","html":"

Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0

"},{"id":"text-85","type":"text","heading":"","plain_text":"Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0","html":"

Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0

"},{"id":"text-86","type":"text","heading":"","plain_text":"Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0","html":"

Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0

"},{"id":"text-87","type":"text","heading":"","plain_text":"Error: (05/12/2020 06:08:14 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6280,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (05/12/2020 06:08:14 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6280,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-88","type":"text","heading":"","plain_text":"Error: (05/12/2020 10:17:45 AM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6160,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (05/12/2020 10:17:45 AM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6160,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-89","type":"text","heading":"","plain_text":"Error: (05/11/2020 08:06:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (3468,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.","html":"

Error: (05/11/2020 08:06:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (3468,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.

"},{"id":"text-90","type":"text","heading":"","plain_text":"System errors:\n=============\nError: (05/11/2020 07:41:55 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server:\nWindows.Internal.CapabilityAccess.CapabilityAccess","html":"

System errors:\n=============\nError: (05/11/2020 07:41:55 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server:\nWindows.Internal.CapabilityAccess.CapabilityAccess

"},{"id":"text-91","type":"text","heading":"","plain_text":"Error: (05/11/2020 07:40:58 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC","html":"

Error: (05/11/2020 07:40:58 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC

"},{"id":"text-92","type":"text","heading":"","plain_text":"Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030","html":"

Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030

"},{"id":"text-93","type":"text","heading":"","plain_text":"Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030","html":"

Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030

"},{"id":"text-94","type":"text","heading":"","plain_text":"Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030","html":"

Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030

"},{"id":"text-95","type":"text","heading":"","plain_text":"Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030","html":"

Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030

"},{"id":"text-96","type":"text","heading":"","plain_text":"Error: (05/11/2020 07:39:01 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC","html":"

Error: (05/11/2020 07:39:01 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC

"},{"id":"text-97","type":"text","heading":"","plain_text":"Error: (05/11/2020 07:38:54 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC","html":"

Error: (05/11/2020 07:38:54 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC

"},{"id":"text-98","type":"text","heading":"","plain_text":"CodeIntegrity:\n===================================","html":"

CodeIntegrity:\n===================================

"},{"id":"text-99","type":"text","heading":"","plain_text":"Date: 2020-05-12 18:10:41.976\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.","html":"

Date: 2020-05-12 18:10:41.976\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.

"},{"id":"text-100","type":"text","heading":"","plain_text":"Date: 2020-05-12 18:10:35.458\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","html":"

Date: 2020-05-12 18:10:35.458\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.

"},{"id":"text-101","type":"text","heading":"","plain_text":"Date: 2020-05-12 18:10:35.390\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","html":"

Date: 2020-05-12 18:10:35.390\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.

"},{"id":"text-102","type":"text","heading":"","plain_text":"Date: 2020-05-12 18:10:35.376\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","html":"

Date: 2020-05-12 18:10:35.376\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.

"},{"id":"text-103","type":"text","heading":"","plain_text":"Date: 2020-05-12 18:10:34.197\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","html":"

Date: 2020-05-12 18:10:34.197\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.

"},{"id":"text-104","type":"text","heading":"","plain_text":"Date: 2020-05-12 18:10:34.178\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.","html":"

Date: 2020-05-12 18:10:34.178\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements.

"},{"id":"text-105","type":"text","heading":"","plain_text":"Date: 2020-05-12 18:10:32.348\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.","html":"

Date: 2020-05-12 18:10:32.348\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.

"},{"id":"text-106","type":"text","heading":"","plain_text":"Date: 2020-05-12 18:10:32.302\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.","html":"

Date: 2020-05-12 18:10:32.302\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements.

"},{"id":"text-107","type":"text","heading":"","plain_text":"==================== Memory info ===========================","html":"

==================== Memory info ===========================

"},{"id":"text-108","type":"text","heading":"","plain_text":"BIOS: AMI A0.13 12/21/2015\nMotherboard: HP 2B47\nProcessor: Intel® Core™ i5-6400 CPU @ 2.70GHz\nPercentage of memory in use: 39%\nTotal physical RAM: 12183.87 MB\nAvailable physical RAM: 7377.78 MB\nTotal Virtual: 14039.87 MB\nAvailable Virtual: 8974.65 MB","html":"

BIOS: AMI A0.13 12/21/2015\nMotherboard: HP 2B47\nProcessor: Intel® Core™ i5-6400 CPU @ 2.70GHz\nPercentage of memory in use: 39%\nTotal physical RAM: 12183.87 MB\nAvailable physical RAM: 7377.78 MB\nTotal Virtual: 14039.87 MB\nAvailable Virtual: 8974.65 MB

"},{"id":"text-109","type":"text","heading":"","plain_text":"==================== Drives ================================","html":"

==================== Drives ================================

"},{"id":"text-110","type":"text","heading":"","plain_text":"Drive c: (Windows) (Fixed) (Total:1849.94 GB) (Free:1785.56 GB) NTFS\nDrive d: (Recovery Image) (Fixed) (Total:11.64 GB) (Free:1.51 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive e: (OS) (Fixed) (Total:581.11 GB) (Free:399.92 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive f: (RECOVERY) (Fixed) (Total:15 GB) (Free:0.29 GB) NTFS\nDrive h: (Apria DVD Project June 2019) (CDROM) (Total:7.95 GB) (Free:0 GB) UDF","html":"

Drive c: (Windows) (Fixed) (Total:1849.94 GB) (Free:1785.56 GB) NTFS\nDrive d: (Recovery Image) (Fixed) (Total:11.64 GB) (Free:1.51 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive e: (OS) (Fixed) (Total:581.11 GB) (Free:399.92 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive f: (RECOVERY) (Fixed) (Total:15 GB) (Free:0.29 GB) NTFS\nDrive h: (Apria DVD Project June 2019) (CDROM) (Total:7.95 GB) (Free:0 GB) UDF

"},{"id":"text-111","type":"text","heading":"","plain_text":"\\?Volume43b2a7e8-a447-45e8-ac50-4bc30569771a (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.52 GB) NTFS\n\\?Volume832b0909-50d7-4b26-88e3-66a386fdb90d (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.27 GB) FAT32","html":"

\\?Volume43b2a7e8-a447-45e8-ac50-4bc30569771a (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.52 GB) NTFS\n\\?Volume832b0909-50d7-4b26-88e3-66a386fdb90d (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.27 GB) FAT32

"},{"id":"text-112","type":"text","heading":"","plain_text":"==================== MBR & Partition Table ====================","html":"

==================== MBR & Partition Table ====================

"},{"id":"text-113","type":"text","heading":"","plain_text":"==========================================================\nDisk: 0 (Size: 1863 GB) (Disk ID: 2BD6946D)","html":"

==========================================================\nDisk: 0 (Size: 1863 GB) (Disk ID: 2BD6946D)

"},{"id":"text-114","type":"text","heading":"","plain_text":"Partition: GPT.","html":"

Partition: GPT.

"},{"id":"text-115","type":"text","heading":"","plain_text":"==========================================================\nDisk: 1 (MBR Code: Windows 7 or Vista) (Size: 596.2 GB) (Disk ID: 90000000)\nPartition 1: (Not Active) – (Size=63 MB) – (Type=DE)\nPartition 2: (Not Active) – (Size=15 GB) – (Type=07 NTFS)\nPartition 3: (Active) – (Size=581.1 GB) – (Type=07 NTFS)","html":"

==========================================================\nDisk: 1 (MBR Code: Windows 7 or Vista) (Size: 596.2 GB) (Disk ID: 90000000)\nPartition 1: (Not Active) – (Size=63 MB) – (Type=DE)\nPartition 2: (Not Active) – (Size=15 GB) – (Type=07 NTFS)\nPartition 3: (Active) – (Size=581.1 GB) – (Type=07 NTFS)

"},{"id":"text-116","type":"text","heading":"","plain_text":"==================== End of Addition.txt =======================","html":"

==================== End of Addition.txt =======================

"},{"id":"text-117","type":"text","heading":"","plain_text":"Click to rate this post!\n \n [Total: 0 Average: 0]","html":"

Click to rate this post!\n \n [Total: 0 Average: 0]

"}],"sections":[{"id":"text-1","heading":"Text","content":"Un ami est tombé pour une arnaque téléphonique hier et leur a permis d'accéder à distance à son ordinateur et leur a donné 500 $. Vous voulez vérifier que rien ne se cache en arrière-plan."},{"id":"text-2","heading":"Text","content":"Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2020\nRan par phyli (administrateur) sur DESKTOP-GIRJ15B (HP 750-114) (12-05-2020 20:54:26)\nExécution à partir de C: Users phyli Downloads\nProfils chargés: phyli\nPlateforme: Windows 10 Home Version 1903 18362.778 (X64) Langue: anglais (États-Unis)\nNavigateur par défaut: Chrome\nMode de démarrage: Normal"},{"id":"text-3","heading":"Text","content":"==================== Processus (liste blanche) ================="},{"id":"text-4","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)"},{"id":"text-5","heading":"Text","content":"(Apple Inc. -> Apple Inc.) C: Program Files Bonjour mDNSResponder.exe\n(CyberLink Corp. ->) C: Program Files CyberLink Shared files RichVideo64.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler64.exe\n(Hewlett-Packard Company -> Hewlett-Packard Company) C: Program Files (x86) Hewlett-Packard Shared hpqwmiex.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin HPNetworkCommunicatorCom.exe\n(HP Inc -> HP Inc.) C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe\n(HP Inc. -> HP Inc.) C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe\n(HP Inc. -> HP Inc.) C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe\n(Intel CASE -> Intel Corporation) C: Program Files Intel Intel® Ready Mode Technology IRMTService.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe\n(Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components LMS LMS.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Fichiers communs Intel WirelessCommon RegSrvc.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin EvtEng.exe\n(Intel Corporation -> Intel® Corporation) C: Program Files Intel WiFi bin ZeroConfigService.exe\n(Société intel) [File not signed] C: Program Files (x86) Intel Intel® Security Assist isa.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxCUIService.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa igfxEM.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHDCPSvc.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 DriverStore FileRepository ki131064.inf_amd64_5d13f27a9a9843fa IntelCpHeciSvc.exe\n(Solutions de connectivité sans fil Intel® -> Intel Corporation) C: Windows System32 ibtsiva.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows Microsoft.NET Framework64 v3.0 WPF PresentationFontCache.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows SystemApps Microsoft.MicrosoftEdge_8wekyb3d8bbwe MicrosoftEdge.exe\n(Microsoft Corporation) C: Program Files WindowsApps Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe WinStore.App.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 browser_broker.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeCP.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeSH.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 SecurityHealthHost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 wlanext.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RAVBg64.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor) C: Program Files Realtek Audio HDA RtkAudioService64.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe \n(Symantec Corporation -> Symantec Corporation) C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Desktop.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_w32.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_x64.exe"},{"id":"text-6","heading":"Text","content":"==================== Registre (liste blanche) ==================="},{"id":"text-7","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)"},{"id":"text-8","heading":"Text","content":"HKLM … Run: [RTHDVCPL] => C: Program Files Realtek Audio HDA RtkNGUI64.exe [8790264 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nHKLM-x32 … Exécuter: [PowerDVD14Agent] => C: Program Files (x86) CyberLink PowerDVD14 PowerDVD14Agent.exe [795336 2015-10-01] (CyberLink Corp. -> CyberLink Corp.)\nHKLM-x32 … Exécuter: [HostManager] => C: Program Files (x86) Common Files AOL 1474834258 ee AOLSoftware.exe [41800 2010-03-08] (AOL Inc. -> AOL Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [CCleaner Monitoring] => C: Program Files CCleaner CCleaner64.exe [19645800 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … Run: [HP Officejet 5740 series (NET)] => C: Program Files HP HP Officejet série 5740 Bin ScanToPCActivationApp.exe [3769248 2019-03-19] (HP Inc -> HP Inc.)\nHKU S-1-5-21-999762305-681959455-3457413626-1001 … MountPoints2: 31631547-282d-11ea-9d24-08d40c8c8d7b – "H: autorun.exe" \nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.138 Installer chrmstp.exe [2020-05-08] (Google LLC -> Google LLC)\nDémarrage: C: Users phyli AppData Roaming Microsoft Windows Start Menu Programs Startup AOL Desktop Launcher.lnk [2020-05-11]\nShortcutTarget: AOL Desktop Launcher.lnk -> C: Users phyli AppData Local AOLDesktop AolTrayApp.exe (AOL, Inc -> AOL Inc.)"},{"id":"text-9","heading":"Text","content":"==================== Tâches planifiées (liste blanche) ============"},{"id":"text-10","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-11","heading":"Text","content":"Tâche: 0338B702-2581-4FA4-91AE-848E0471747D – System32 Tasks Hewlett-Packard HP Active Health HP Active Health Scan (HPSA) => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPActiveHealth ActiveHealth.exe [25128 2017-11-20] (HP Inc. ->)\nTâche: 0BC2EE53-122D-4F08-B931-2D8EBC0B87C0 – System32 Tasks Norton 360 Norton 360 Autofix => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 19444715-C7A7-4B9E-ADC9-E9EAA4A336FB – System32 Tasks Microsoft Windows RemovalTools MRT_ERROR_HB => C: WINDOWS system32 MRT.exe [121542864 2020-03-11] (Microsoft Windows -> Microsoft Corporation) [File not signed]\nTâche: 1A92604C-9785-4B3F-BABF-B9344300A525 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_DeviceScan => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 23805DAC-C2B3-4B17-8267-1B13BCF64F3F – System32 Tasks HPCustParticipation HP Officejet série 5740 => C: Program Files HP HP Officejet série 5740 Bin HPCustPartic.exe [6437792 2019-03-19] (HP Inc -> HP Inc.)\nTâche: 26862040-7E37-4842-8060-616A847935D7 – Microsoft Windows UNP RunCampaignManager -> Aucun fichier <==== ATTENTION\nTâche: 2892222B-8961-44EA-A488-4EAF68E62FF6 ​​- System32 Tasks Hewlett-Packard HP Support Assistant PC Health Analysis => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 30798301-D556-4A67-A303-E078BAEEA94D – System32 Tasks HPCeeScheduleForphyli => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe [96568 2015-06-16] (Société Hewlett-Packard -> Hewlett-Packard)\nTâche: 3BF5FEFF-B156-442E-83A7-88538B7E0701 – System32 Tasks CCleanerSkipUAC => C: Program Files CCleaner CCleaner.exe [14679256 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 466881AC-5DFD-4836-B0D9-F7634D65DB29 – System32 Tasks Intel Intel Telemetry 2 => C: Program Files Intel Telemetry 2.0 lrio.exe [1698000 2015-06-05] (Logiciel Intel® -> Intel Corporation)\nTâche: 4A88543E-19C3-49EC-A150-14140125BD0D – System32 Tasks CCleaner Update => C: Program Files CCleaner CCUpdate.exe [619416 2019-03-03] (Piriform Software Ltd -> Piriform Software Ltd)\nTâche: 5359FDCE-AFC2-4D1D-A5B9-56F1617BF591 – System32 Tasks DropboxUpdateTaskMachineCore => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nTâche: 5E7E7438-1246-4277-9A2F-C6411DB6349C – System32 Tasks Hewlett-Packard HP Support Assistant Product Configurator => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources ProductConfig .EXE [320856 2020-04-23] (HP Inc. -> HP Inc.)\nTâche: 69EFEB71-23BC-4B1C-BE4F-7B71587FEDAB – System32 Tasks Norton 360 Norton 360 Error Processor => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 6CD0BF4F-6054-4830-9806-972847917DB9 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Assistant Quick Start => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 72D22111-0F52-45AE-8C72-7B54E7179787 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 7DBD3255-B12E-48C1-99D9-7E999C324195 – System32 Tasks Hewlett-Packard HP Support Assistant Critical Update Pending => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 8613B10A-F593-4051-B6D3-C1174FAB8609 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_TH6254X0JD => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 990D433C-DF44-4DE9-893D-0F707834FF54 – System32 Tasks Remediation AntimalwareMigrationTask => C: Program Files Common Files AV Norton 360 Upgrade.exe [2162704 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: 9A8CA25D-1EE2-4A1C-BC11-133EB4DE03F3 – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: AEF5F555-14EA-4D89-BA5E-16BC63091F73 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: B3DBA422-AB32-4861-895F-EF36381A7F1D – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2018-01-12] (Google Inc -> Google Inc.)\nTâche: BFBE589E-4AF0-44AC-90B7-FA7DB538250A – System32 Tasks DropboxOEM => C: Program Files (x86) Dropbox DropboxOEM DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc ->)\nTâche: C0665B30-D9E6-421F-9B25-37FF210D048A – System32 Tasks IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C: Program Files (x86) Intel Corporation Intel WiDi Intel® Gestionnaire d'actifs logiciels bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nTâche: C09D1165-9A84-48B3-88AA-EB9B83A7142E – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Report => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSFReport.exe [134008 2020-03-25] (HP Inc. -> HP Inc.)\nTâche: C0EC152F-0F52-4482-9B82-0859E05A899B – Analyseur d'erreur System32 Tasks Norton 360 Norton 360 => C: Program Files Norton Security Engine 22.20.2.57 SymErr.exe [117056 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: CA553F06-3C9D-4899-9117-B49C1C5FFF46 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: CEE140FD-BB4B-4A75-BEDF-5B0DC2E129AC – System32 Tasks Norton WSC Integration => C: Program Files Norton Security Engine 22.20.2.57 WSCStub.exe [645008 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nTâche: DA0C5F76-E8A2-4899-B9E2-1DEA8509D76A – System32 Tasks IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C: Program Files (x86) Intel Intel® Update Manager bin iumsvc .EXE\nTâche: E3CADEF5-B4B0-44FC-8B66-A0A6738B95FC – System32 Tasks DropboxUpdateTaskMachineUA => C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)"},{"id":"text-12","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)"},{"id":"text-13","heading":"Text","content":"Tâche: C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job => C: WINDOWS explorer.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineCore.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks DropboxUpdateTaskMachineUA.job => C: Program Files (x86) Dropbox Update DropboxUpdate.exe\nTâche: C: WINDOWS Tasks HPCeeScheduleForphyli.job => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe"},{"id":"text-14","heading":"Text","content":"==================== Internet (liste blanche) ===================="},{"id":"text-15","heading":"Text","content":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)"},{"id":"text-16","heading":"Text","content":"Tcpip .. Interfaces 686E1526-5487-4579-9D5C-7D997F0C562C: [NameServer] 10.255.0.0\nTcpip .. Interfaces 93fb8a86-3933-4476-8281-93ec070b093c: [DhcpNameServer] 192.168.1.1\nTcpip .. Interfaces aa2d2754-dc20-488c-91bb-6e946e6395e0: [DhcpNameServer] 192.168.1.1"},{"id":"text-17","heading":"Text","content":"Internet Explorer:\n==================\nHKLM SOFTWARE Policies Microsoft Internet Explorer: restriction <==== ATTENTION\nHKLM Software Microsoft Internet Explorer Main, Page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKLM Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU .DEFAULT Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nHKU S-1-5-21-999762305-681959455-3457413626-1001 Software Microsoft Internet Explorer Main, Default_Page_URL = hxxp: //hp15-comm.msn.com/? Pc = HRTE\nSearchScopes: HKLM -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKLM-x32 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? Ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nSearchScopes: HKU S-1-5-21-999762305-681959455-3457413626-1001 -> 956A3832-1434-48B4-B7D0-393563D77BB0 URL = hxxp: //www.amazon.com/s/ref=azs_osd_iea? ie = UTF-8 & tag = hp-us1-vsb-20 & link% 5Fcode = qs & index = aps & field-keywords = searchTerms\nBHO: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: Norton Password Manager -> 602ADB0E-4AFF-4217-8AA1-95DAC4DFA408 -> C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBHO-x32: extension Evernote -> 92EF2EAD-A7CE-4424-B0DB-499CF856608E -> C: Program Files (x86) Evernote Evernote EvernoteIE.dll [2015-07-01] (EVERNOTE CORPORATION -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)\nBHO-x32: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)\nBarre d'outils: HKLM – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nBarre d'outils: HKLM-x32 – Norton Toolbar – 7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA – C: Program Files Norton Security Engine32 22.20.2.57 coIEPlg.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)"},{"id":"text-18","heading":"Text","content":"Bord: \n======\nDownloadDir: C: Users phyli Downloads\nExtension de bord: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C: Program Files WindowsApps EyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11]\nExtension Edge: (AdGuard AdBlocker) -> EdgeExtension_AdguardAdguardAdBlocker_m055xr0c82818 => C: Program Files WindowsApps Adguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09]"},{"id":"text-19","heading":"Text","content":"FireFox:\n========\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI ipt; version = 4.0.68 -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIIPT.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ intel-webapi.intel.com / Intel WebAPI Updater -> C: Program Files (x86) Intel Intel® Management Engine Components IPT npIntelWebAPIUpdater.dll [2015-08-25] (Logiciel Intel® Identity Protection Technology -> Intel Corporation)\nFF Plugin-x32: @ viewpoint.com / VMP -> C: Program Files (x86) Viewpoint Viewpoint Experience Technology npViewpoint.dll [2004-02-20] () [File not signed]"},{"id":"text-20","heading":"Text","content":"Chrome: \n=======\nCHR DefaultProfile: Par défaut\nProfil CHR: C: Users phyli AppData Local Google Chrome User Data Default [2020-05-12]\nCHR DefaultSearchURL: Par défaut -> hxxps: //s.aolcdn.com/webmail-static/webmail/180517.1559/aol/en-us/images/favicon.ico\nExtension CHR: (diapositives) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aapocclcgogkmnckokdopfmhonfmgoek [2018-01-12]\nExtension CHR: (Docs) – C: Users phyli AppData Local Google Chrome User Data Default Extensions aohghmighlieiainnegkcijnfilokake [2018-01-12]\nExtension CHR: (Google Drive) – C: Users phyli AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2018-01-12]\nExtension CHR: (YouTube) – C: Users phyli AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-12]\nExtension CHR: (Adblock Plus – bloqueur de publicités gratuit) – C: Users phyli AppData Local Google Chrome User Data Default Extensions cfhdojbkjhnklbpkdaibdccddilifddb [2020-05-11]\nExtension CHR: (Sheets) – C: Users phyli AppData Local Google Chrome User Data Default Extensions felcaaldnbdncclmgdcncolpebgiejap [2018-01-12]\nExtension CHR: (Google Docs hors ligne) – C: Users phyli AppData Local Google Chrome User Data Default Extensions ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-11]\nExtension CHR: (Paiements Chrome Web Store) – C: Users phyli AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2020-04-15]\nExtension CHR: (Mon AOL) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pigepclndadjaebpijfcjeeefpjhcdca [2018-05-22]\nExtension CHR: (Gmail) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-17]\nExtension CHR: (Chrome Media Router) – C: Users phyli AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-11]"},{"id":"text-21","heading":"Text","content":"==================== Services (liste blanche) ==================="},{"id":"text-22","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-23","heading":"Text","content":"S2 dbupdate; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nS3 dbupdatem; C: Program Files (x86) Dropbox Update DropboxUpdate.exe [143144 2016-11-14] (Dropbox, Inc -> Dropbox, Inc.)\nR2 HPSupportSolutionsFrameworkService; C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe [378744 2020-03-31] (HP Inc. -> HP Inc.)\nR2 HPTouchpointAnalyticsService; C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe [332216 2017-11-23] (HP Inc. -> HP Inc.)\nR2 ibtsiva; C: WINDOWS System32 ibtsiva.exe [536864 2020-01-06] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nS3 Intel® Capability Licensing Service TCP IP Interface; C: Program Files Intel iCLS Client SocketHeciServer.exe [881152 2015-05-22] (Service Intel® Trusted Connect -> Intel® Corporation)\nR3 Intel® Security Assist; C: Program Files (x86) Intel Intel® Security Assist isa.exe [335872 2015-05-19] (Société intel) [File not signed]\nS3 Intel® WiDi SAM; C: Program Files (x86) Intel Corporation Intel WiDi Intel® Software Asset Manager bin IntelSoftwareAssetManagerService.exe [19088 2015-06-24] (Intel® Software Asset Manager -> Intel Corporation)\nR2 IRMTService; c: Program Files Intel Intel® Ready Mode Technology IRMTService.exe [181520 2015-07-13] (Intel CASE -> Intel Corporation)\nS2 isaHelperSvc; C: Program Files (x86) Intel Intel® Security Assist isaHelperService.exe [7680 2015-05-19] () [File not signed]\nR2 jhi_service; C: Program Files (x86) Intel Intel® Management Engine Components DAL jhi_service.exe [207648 2015-10-16] (Intel Corporation – Groupe des sous-systèmes intégrés et blocs IP -> Intel Corporation)\nS3 MyWiFiDHCPDNS; C: Program Files Intel WiFi bin PanDhcpDns.exe [310880 2018-09-05] (Intel Corporation ->)\nR2 NortonSecurity; C: Program Files Norton Security Engine 22.20.2.57 NortonSecurity.exe [344760 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 nsWscSvc; C: Program Files Norton Security Engine 22.20.2.57 nsWscSvc.exe [1055960 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR2 RichVideo64; C: Program Files CyberLink Fichiers partagés RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. ->)\nR2 RtkAudioService; C: Program Files Realtek Audio HDA RtkAudioService64.exe [316152 2016-03-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)\nR2 TeamViewer; C: Program Files (x86) TeamViewer TeamViewer_Service.exe [13252624 2020-04-23] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nS3 WdNisSvc; C: Program Files Windows Defender NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nS3 WinDefend; C: Program Files Windows Defender MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)\nR2 ZeroConfigService; C: Program Files Intel WiFi bin ZeroConfigService.exe [4059744 2018-09-05] (Intel Corporation -> Intel® Corporation)\nS4 WRSVC; Service "C: Program Files Webroot WRSA.exe" [X]"},{"id":"text-24","heading":"Text","content":"===================== Pilotes (sur liste blanche) ==================="},{"id":"text-25","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-26","heading":"Text","content":"R1 BHDrvx64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions BASHDefs 20200511.006 BHDrvx64.sys [1952136 2020-05-11] (Symantec Corporation -> Symantec Corporation)\nS3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-17] (Microsoft Corporation) [File not signed]\nR1 ccSet_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 ccSetx64.sys [192376 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 eeCtrl; C: Program Files (x86) Common Files Symantec Shared EENGINE eeCtrl64.sys [516784 2019-10-08] (Symantec Corporation -> Symantec Corporation)\nU3 EraserUtilDrv11910; C: Program Files (x86) Common Files Symantec Shared EENGINE EraserUtilDrv11910.sys [154288 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 ibtusb; C: WINDOWS System32 DriverStore FileRepository ibtusb.inf_amd64_b45bba99c1e61776 ibtusb.sys [301560 2019-12-02] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR1 IDSVia64; C: Program Files Norton Security NortonData 22.20.2.57 Definitions IPSDefs 20200512.061 IDSvia64.sys [1451016 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 IntelReadyModeDriver; C: WINDOWS System32 drivers IntelReadyModeDriver.sys [33512 2015-07-13] (Intel CASE -> Intel Corporation)\nR0 MBAMSwissArmy; C: WINDOWS System32 Drivers mbamswissarmy.sys [253880 2018-01-12] (Malwarebytes Corporation -> Malwarebytes)\nR3 Netwtw04; C: WINDOWS system32 DRIVERS Netwtw04.sys [8720384 2019-08-27] (Solutions de connectivité sans fil Intel® -> Intel Corporation)\nR3 rt640x64; C: WINDOWS System32 drivers rt640x64.sys [886528 2015-06-03] (Realtek Semiconductor Corp -> Realtek)\nR3 RTSUER; C: WINDOWS system32 Drivers RtsUer.sys [402136 2015-05-27] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation)\nR3 SRTSP; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSP64.SYS [889520 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SRTSPX; C: WINDOWS System32 drivers NGCx64 1614020.039 SRTSPX64.SYS [50864 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR0 SymEFASI; C: WINDOWS System32 drivers NGCx64 1614020.039 SYMEFASI64.SYS [1964552 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS0 SymELAM; C: WINDOWS System32 drivers NGCx64 1614020.039 SymELAM.sys [25024 2020-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)\nR3 SymEvent; C: WINDOWS system32 Drivers SYMEVENT64x86.SYS [99848 2020-05-12] (Symantec Corporation -> Symantec Corporation)\nR3 SymEvnt; C: Program Files Norton Security NortonData 22.20.2.57 SymPlatform SymEvnt.sys [712368 2020-01-06] (Symantec Corporation -> Symantec Corporation)\nR1 SymIRON; C: WINDOWS System32 drivers NGCx64 1614020.039 Ironx64.SYS [316656 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR1 SymNetS; C: WINDOWS System32 drivers NGCx64 1614020.039 symnets.sys [575280 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nR3 wanatw; C: WINDOWS System32 drivers wanatw64.sys [24064 2006-11-29] (Éditeur de compatibilité matérielle Microsoft Windows -> America Online, Inc.)\nS3 WdBoot; C: WINDOWS system32 drivers WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)\nS3 WdFilter; C: WINDOWS system32 drivers WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nS3 WdNisDrv; C: WINDOWS System32 Drivers WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)\nR1 wpCtrlDrv_NGC; C: WINDOWS System32 drivers NGCx64 1614020.039 wpCtrlDrv.sys [1012120 2020-03-20] (Symantec Corporation -> Symantec Corporation)\nS4 WRBoot; System32 drivers WRBoot.sys [X]\nR4 WRkrn; System32 drivers WRkrn.sys [X]"},{"id":"text-27","heading":"Text","content":"==================== NetSvcs (liste blanche) ===================="},{"id":"text-28","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-29","heading":"Text","content":"==================== Un mois (créé) ==================="},{"id":"text-30","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)"},{"id":"text-31","heading":"Text","content":"2020-05-12 20:54 – 2020-05-12 20:55 – 000027915 _____ C: Users phyli Downloads FRST.txt\n2020-05-12 20:54 – 2020-05-12 20:55 – 000000000 ____D C: FRST\n2020-05-12 20:53 – 2020-05-12 20:53 – 002285568 _____ (Farbar) C: Users phyli Downloads FRST64.exe\n2020-05-12 20:22 – 2020-05-12 20:22 – 000000000 ____D C: WINDOWS system32 Tasks Remediation\n2020-05-12 18:10 – 2020-05-12 18:14 – 000000000 ____D C: WINDOWS system32 Tasks Norton 360\n2020-05-12 18:08 – 2020-05-12 18:08 – 000099848 _____ (Symantec Corporation) C: WINDOWS system32 Drivers SYMEVENT64x86.SYS\n2020-05-12 18:08 – 2020-05-12 18:08 – 000008616 _____ C: WINDOWS system32 Drivers SYMEVENT64x86.CAT\n2020-05-12 18:08 – 2020-05-12 18:08 – 000003376 _____ C: WINDOWS system32 Tasks Norton WSC Integration\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: Users Public Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000002306 _____ C: ProgramData Desktop Norton Security.lnk\n2020-05-12 18:08 – 2020-05-12 18:08 – 000000000 ____D C: Program Files Fichiers communs Symantec Shared\n2020-05-12 18:07 – 2020-05-12 18:08 – 000000000 ___RD C: ProgramData Microsoft Windows Menu Démarrer Programmes Norton Security\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: WINDOWS system32 Drivers NGCx64\n2020-05-12 18:07 – 2020-05-12 18:07 – 000000000 ____D C: Program Files Norton Security\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: ProgramData NortonInstaller\n2020-05-12 18:05 – 2020-05-12 18:05 – 000000000 ____D C: Program Files (x86) NortonInstaller\n2020-05-12 18:04 – 2020-05-12 18:04 – 003666744 _____ (Symantec Corporation) C: Users phyli Downloads N360Downloader.exe\n2020-05-12 18:04 – 2020-05-12 18:04 – 000001379 _____ C: Users phyli Desktop Norton Installation Files.lnk\n2020-05-12 18:04 – 2020-05-12 18:04 – 000000000 ____D C: Users Public Downloads Norton\n2020-05-11 19:43 – 2020-05-11 19:46 – 000000000 ____D C: Users phyli AppData Local TeamViewer\n2020-05-11 18:23 – 2020-05-11 18:24 – 000000000 ____D C: NPE\n2020-05-11 18:23 – 2020-05-11 18:22 – 000120122 _____ C: WINDOWS ntbtlog.txt\n2020-05-11 18:21 – 2020-05-11 18:22 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (2) .exe\n2020-05-11 18:17 – 2020-05-11 18:24 – 000000214 _____ C: WINDOWS Tasks CreateExplorerShellUnelevatedTask.job\n2020-05-11 18:11 – 2020-05-12 18:10 – 000000000 ____D C: ProgramData Norton\n2020-05-11 18:11 – 2020-05-11 19:55 – 000000000 ____D C: Users phyli AppData Local NPE\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE.exe\n2020-05-11 18:11 – 2020-05-11 18:11 – 009615808 _____ (NortonLifeLock Inc.) C: Users phyli Downloads NPE (1) .exe\n2020-05-11 17:52 – 2020-05-12 18:30 – 000000000 ____D C: Program Files (x86) TeamViewer\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001119 _____ C: ProgramData Microsoft Windows Start Menu Programs TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: Users Public Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000001107 _____ C: ProgramData Desktop TeamViewer.lnk\n2020-05-11 17:52 – 2020-05-11 17:52 – 000000000 ____D C: Users phyli AppData Roaming TeamViewer\n2020-05-11 17:49 – 2020-05-11 17:49 – 026709944 _____ (TeamViewer Germany GmbH) C: Users phyli Downloads TeamViewer_Setup.exe\n2020-05-11 15:32 – 2020-05-11 15:32 – 000000000 ____D C: Users phyli Documents 1-888-511-8605\n2020-05-11 15:28 – 2020-05-11 15:28 – 000290304 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 subinacl.exe\n2020-05-11 15:28 – 2020-05-11 15:28 – 000000000 ____D C: Program Files (x86) Adware Removal Tool by TSA\n2020-05-11 15:25 – 2020-05-11 15:26 – 000000000 ____D C: Users phyli AppData Local PlaceholderTileLogoFolder\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ C: Users phyli AppData Local Resmon.ResmonCfg\n2020-04-15 17:35 – 2020-04-15 17:35 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019850240 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 edgehtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 019812864 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 018027520 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 005910016 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Chakra.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 004129624 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 003512320 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002951832 _____ (Microsoft Corporation) C: WINDOWS system32 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 002180408 _____ (Microsoft Corporation) C: WINDOWS system32 workfolderssvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001870408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mfmp4srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001310720 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msjet40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 001151816 _____ (Microsoft Corporation) C:WINDOWSsystem32mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 001013000 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmpeg2srcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000983040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mfmkvsrcsnk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Mirage.Internal.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000689152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CPFilters.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000686080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64jscript.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000525312 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wsecedit.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl\n2020-04-15 17:35 – 2020-04-15 17:35 – 000444416 _____ (Microsoft Corporation) C:WINDOWSsystem32MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000420152 _____ (Microsoft Corporation) C:WINDOWSsystem32MSAudDecMFT.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000380416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MSFlacDecoder.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000353792 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msrd3x40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000341504 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msexcl40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000241152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msltus40.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000178176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumsvc.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.XamlHost.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000117248 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakrathunk.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000105472 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFolders.exe\n2020-04-15 17:35 – 2020-04-15 17:35 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000050688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64srumapi.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000026112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimsg.dll\n2020-04-15 17:35 – 2020-04-15 17:35 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 022636544 _____ (Microsoft Corporation) C:WINDOWSsystem32mshtml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 014818816 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Xaml.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 008013824 _____ (Microsoft Corporation) C:WINDOWSsystem32mstscax.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007756800 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakra.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006523048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Media.Protection.PlayReady.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 005040640 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004611584 _____ (Microsoft Corporation) C:WINDOWSsystem32msi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 004538880 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wininet.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003802624 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003753472 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_nt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003742544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64OneCoreUAPCommonProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003729408 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003587384 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800640 _____ (Microsoft Corporation) C:WINDOWSsystem32WinSAT.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 002800128 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32kfull.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002767928 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002717184 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kbase.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 002453504 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002131456 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 002086656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001999960 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001835008 _____ (Microsoft Corporation) C:WINDOWSsystem32enterprisecsps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001764336 _____ (Microsoft Corporation) C:WINDOWSsystem32WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi\n2020-04-15 17:34 – 2020-04-15 17:34 – 001729024 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001697792 _____ (Microsoft Corporation) C:WINDOWSsystem32GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001665216 _____ (Microsoft Corporation) C:WINDOWSSysWOW64user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001664896 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001656904 _____ (Microsoft Corporation) C:WINDOWSsystem32user32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001646048 _____ (Microsoft Corporation) C:WINDOWSsystem32gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001612800 _____ (Microsoft Corporation) C:WINDOWSsystem32wpncore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001603584 _____ (Microsoft Corporation) C:WINDOWSsystem32dosvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001587712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aadtb.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001545216 _____ (Microsoft Corporation) C:WINDOWSsystem32mstsc.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001484384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WindowsCodecs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001477112 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dcomp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001458688 _____ (Microsoft Corporation) C:WINDOWSSysWOW64GdiPlus.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64gdi32full.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001397576 _____ (Microsoft Corporation) C:WINDOWSsystem32hvix64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Wpc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001368576 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.Input.Inking.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001318912 _____ (Microsoft Corporation) C:WINDOWSsystem32wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001245184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBroker.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001153024 _____ (Microsoft Corporation) C:WINDOWSsystem32windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001081856 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Networking.Vpn.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001077064 _____ (Microsoft Corporation) C:WINDOWSsystem32hvax64.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001055376 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001009152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wpnapps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 001008128 _____ (Microsoft Corporation) C:WINDOWSsystem32StorSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000993280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TSWorkspace.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000982840 _____ (Microsoft Corporation) C:WINDOWSsystem32winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000980832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64webservices.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000923136 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000912896 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000892416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64MbaeApiPublic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.Service.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000874296 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000868864 _____ (Microsoft Corporation) C:WINDOWSSysWOW64windowsperformancerecordercontrol.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Security.Authentication.Web.Core.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000836608 _____ (Microsoft Corporation) C:WINDOWSsystem32jscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000835584 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkfoldersControl.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000822208 _____ (Microsoft Corporation) C:WINDOWSsystem32fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000785920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000783480 _____ (Microsoft Corporation) C:WINDOWSsystem32tcblaunch.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000775696 _____ (Microsoft Corporation) C:WINDOWSsystem32securekernel.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000772096 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssrv2.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000768528 _____ (Microsoft Corporation) C:WINDOWSSysWOW64winhttp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000729600 _____ (Microsoft Corporation) C:WINDOWSSysWOW64FlightSettings.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000673464 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontdrvhost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000668672 _____ (Microsoft Corporation) C:WINDOWSsystem32wsecedit.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000665088 _____ (Microsoft Corporation) C:WINDOWSSysWOW64netlogon.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000647680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Internal.Management.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000629760 _____ (Microsoft Corporation) C:WINDOWSsystem32ipnathlp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000628616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000595968 _____ (Microsoft Corporation) C:WINDOWSsystem32vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000561464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxsmb.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000555008 _____ (Microsoft Corporation) C:WINDOWSsystem32appwiz.cpl\n2020-04-15 17:34 – 2020-04-15 17:34 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000532480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64vbscript.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000510792 _____ (Microsoft Corporation) C:WINDOWSsystem32wow64win.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS\n2020-04-15 17:34 – 2020-04-15 17:34 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000408064 _____ (Microsoft Corporation) C:WINDOWSsystem32domgmt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Enumeration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355840 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicSvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000343552 _____ (Microsoft Corporation) C:WINDOWSsystem32wpr.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000339304 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000285184 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicCapsule.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000277504 _____ (Microsoft Corporation) C:WINDOWSsystem32scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268288 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3svc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000268008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Storage.ApplicationData.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231936 _____ (Microsoft Corporation) C:WINDOWSsystem32InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000225792 _____ (Microsoft Corporation) C:WINDOWSsystem32WorkFoldersShell.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214528 _____ (Microsoft Corporation) C:WINDOWSsystem32srumsvc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000214016 _____ (Microsoft Corporation) C:WINDOWSSysWOW64scecli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSSysWOW64InstallServiceTasks.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000179712 _____ (Microsoft Corporation) C:WINDOWSsystem32t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000158720 _____ (Microsoft Corporation) C:WINDOWSsystem32umpo.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000155136 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000139776 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakrathunk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000138752 _____ (Microsoft Corporation) C:WINDOWSSysWOW64t2embed.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000130560 _____ (Microsoft Corporation) C:WINDOWSsystem32StorageUsage.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000129024 _____ (Microsoft Corporation) C:WINDOWSsystem32UtcDecoderHost.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000127280 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000125952 _____ (Microsoft Corporation) C:WINDOWSsystem32fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000103936 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000099328 _____ (Microsoft Corporation) C:WINDOWSSysWOW64fontsub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000092160 _____ (Microsoft Corporation) C:WINDOWSsystem32dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000089088 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicAgent.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3api.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dot3msm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000063488 _____ (Microsoft Corporation) C:WINDOWSsystem32srumapi.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060928 _____ (Microsoft Corporation) C:WINDOWSsystem32mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000058880 _____ C:WINDOWSsystem32runexehelper.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000047000 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000046080 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mf3216.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.Xaml.Resources.Common.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32WiredNetworkCSP.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033792 _____ (Microsoft Corporation) C:WINDOWSsystem32sxssrv.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028672 _____ (Microsoft Corporation) C:WINDOWSsystem32WaaSMedicPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000026112 _____ (Microsoft Corporation) C:WINDOWSsystem32msimsg.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000017920 _____ (Microsoft Corporation) C:WINDOWSsystem32icsunattend.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.ps.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000014336 _____ (Microsoft Corporation) C:WINDOWSsystem32dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000012288 _____ (Microsoft Corporation) C:WINDOWSsystem32pacjsworker.exe\n2020-04-15 17:34 – 2020-04-15 17:34 – 000011776 _____ (Microsoft Corporation) C:WINDOWSSysWOW64dciman32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000008192 _____ (Microsoft Corporation) C:WINDOWSsystem32msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.ProxyStub.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000007168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msimg32.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000003072 _____ (Microsoft Corporation) C:WINDOWSsystem32lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000002560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64lpk.dll\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth9.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth8.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth7.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth6.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth5.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth4.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth3.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth2.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth12.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth11.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth10.bin\n2020-04-15 17:34 – 2020-04-15 17:34 – 000000315 _____ C:WINDOWSsystem32DrtmAuth1.bin\n2020-04-15 17:21 – 2020-04-15 17:22 – 000492544 _____ (Microsoft Corporation) C:WINDOWSsystem32poqexec.exe\n2020-04-15 17:21 – 2020-04-15 17:22 – 000390656 _____ (Microsoft Corporation) C:WINDOWSSysWOW64poqexec.exe\n2020-04-15 15:45 – 2020-05-12 18:06 – 000000000 ____D C:ProgramDataWRCore"},{"id":"text-32","heading":"Text","content":"==================== One month (modified) =================="},{"id":"text-33","heading":"Text","content":"(If an entry is included in the fixlist, the file/folder will be moved.)"},{"id":"text-34","heading":"Text","content":"2020-05-12 20:22 – 2016-02-17 04:13 – 000000000 ____D C:Program FilesCommon FilesAV\n2020-05-12 20:16 – 2019-03-19 00:52 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-05-12 20:05 – 2018-07-16 18:15 – 000000000 ____D C:UsersphyliAppDataLocalD3DSCache\n2020-05-12 18:40 – 2019-08-15 19:04 – 000003256 _____ C:WINDOWSsystem32TasksHPCeeScheduleForphyli\n2020-05-12 18:40 – 2019-06-17 18:01 – 000000364 _____ C:WINDOWSTasksHPCeeScheduleForphyli.job\n2020-05-12 18:09 – 2019-03-19 00:37 – 000032768 _____ C:WINDOWSsystem32configELAM\n2020-05-12 18:08 – 2019-03-19 00:52 – 000000000 ___HD C:WINDOWSELAMBKUP\n2020-05-12 18:07 – 2017-01-27 14:00 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocalLowwebroot\n2020-05-12 18:06 – 2018-01-12 13:24 – 000000000 ____D C:UsersphyliAppDataLocallptmp\n2020-05-12 18:01 – 2016-09-25 15:43 – 000000000 __SHD C:UsersphyliIntelGraphicsProfiles\n2020-05-12 10:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSAppReadiness\n2020-05-12 10:10 – 2019-03-19 00:52 – 000000000 ___HD C:Program FilesWindowsApps\n2020-05-11 19:48 – 2019-08-15 18:57 – 000935056 _____ C:WINDOWSsystem32PerfStringBackup.INI\n2020-05-11 19:48 – 2019-03-19 00:50 – 000000000 ____D C:WINDOWSINF\n2020-05-11 19:42 – 2019-08-15 19:04 – 000000006 ____H C:WINDOWSTasksSA.DAT\n2020-05-11 19:42 – 2019-03-19 00:37 – 000524288 _____ C:WINDOWSsystem32configBBI\n2020-05-11 19:22 – 2019-08-15 18:45 – 000000000 ____D C:WINDOWSsystem32SleepStudy\n2020-05-11 18:17 – 2019-08-15 18:45 – 000276104 _____ C:WINDOWSsystem32FNTCACHE.DAT\n2020-05-11 18:12 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32NDF\n2020-05-11 15:26 – 2018-03-16 00:06 – 000000000 ____D C:UsersphyliAppDataLocalPackages\n2020-05-11 14:53 – 2018-01-12 12:48 – 000000000 ____D C:UsersphyliAppDataLocalGoToAssist Remote Support Customer\n2020-05-11 12:06 – 2017-08-28 10:13 – 000002326 _____ C:UsersphyliDesktopAOL Desktop Gold.lnk\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsAOL Inc\n2020-05-11 12:06 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalAOLDesktop\n2020-05-11 12:05 – 2017-08-28 10:13 – 000000000 ____D C:UsersphyliAppDataLocalSquirrelTemp\n2020-05-10 04:33 – 2019-08-15 19:04 – 000003376 _____ C:WINDOWSsystem32TasksOneDrive Standalone Update Task-S-1-5-21-999762305-681959455-3457413626-1001\n2020-05-10 04:33 – 2019-08-15 18:51 – 000002370 _____ C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk\n2020-05-10 04:33 – 2016-09-25 15:46 – 000000000 ___RD C:UsersphyliOneDrive\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002308 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:UsersPublicDesktopGoogle Chrome.lnk\n2020-05-08 04:30 – 2018-01-12 13:28 – 000002267 _____ C:ProgramDataDesktopGoogle Chrome.lnk\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSSystemResources\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSsystem32migwiz\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSShellExperiences\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSProvisioning\n2020-04-15 23:43 – 2019-03-19 00:52 – 000000000 ____D C:WINDOWSbcastdvr\n2020-04-15 17:38 – 2019-03-19 00:37 – 000000000 ____D C:WINDOWSCbsTemp"},{"id":"text-35","heading":"Text","content":"==================== Files in the root of some directories ========"},{"id":"text-36","heading":"Text","content":"2018-01-12 13:24 – 2018-01-12 13:24 – 018102328 _____ (Webroot Software, Inc.) C:Program Files (x86)Common Fileswruninstall.exe\n2020-05-11 15:22 – 2020-05-11 15:22 – 000007601 _____ () C:UsersphyliAppDataLocalResmon.ResmonCfg"},{"id":"text-37","heading":"Text","content":"==================== SigCheck ============================"},{"id":"text-38","heading":"Text","content":"(There is no automatic fix for files that do not pass verification.)"},{"id":"text-39","heading":"Text","content":"==================== End of FRST.txt ========================'"},{"id":"text-40","heading":"Text","content":"Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2020\nRan by phyli (12-05-2020 20:56:18)\nRunning from C:UsersphyliDownloads\nWindows 10 Home Version 1903 18362.778 (X64) (2019-08-15 23:04:54)\nBoot Mode: Normal\n=========================================================="},{"id":"text-41","heading":"Text","content":"==================== Accounts: ============================="},{"id":"text-42","heading":"Text","content":"Administrator (S-1-5-21-999762305-681959455-3457413626-500 – Administrator – Disabled)\nDefaultAccount (S-1-5-21-999762305-681959455-3457413626-503 – Limited – Disabled)\ndefaultuser100001 (S-1-5-21-999762305-681959455-3457413626-1003 – Limited – Enabled)\nGuest (S-1-5-21-999762305-681959455-3457413626-501 – Limited – Disabled)\nphyli (S-1-5-21-999762305-681959455-3457413626-1001 – Administrator – Enabled) => C:Usersphyli\nWDAGUtilityAccount (S-1-5-21-999762305-681959455-3457413626-504 – Limited – Disabled)"},{"id":"text-43","heading":"Text","content":"==================== Security Center ========================"},{"id":"text-44","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed.)"},{"id":"text-45","heading":"Text","content":"AV: Norton 360 (Enabled – Up to date) 1122B19A-E671-38EC-8EAC-87048FD4528D\nAV: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAV: Webroot SecureAnywhere (Enabled – Up to date) DF901FA1-F926-253B-C464-B01C79DCAD48\nAS: Windows Defender (Disabled – Up to date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46\nAS: Webroot SecureAnywhere (Enabled – Up to date) 64F1FE45-DF1C-2AB5-FED4-8B6E025BE7F5\nFW: Norton 360 (Enabled) 291930BF-AC1E-39B4-A5F3-2E31710715F6"},{"id":"text-46","heading":"Text","content":"==================== Installed Programs ======================"},{"id":"text-47","heading":"Text","content":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)"},{"id":"text-48","heading":"Text","content":"AOL Desktop Gold (HKUS-1-5-21-999762305-681959455-3457413626-1001…AOLDesktop) (Version: 11.0.2664 – Oath Inc.)\nAOL Uninstaller (Choose which Products to Remove) (HKLM-x32…AOL Uninstaller) (Version:  – AOL Inc.)\nBonjour (HKLM…6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D) (Version: 3.0.0.10 – Apple Inc.)\nCCleaner (HKLM…CCleaner) (Version: 5.38 – Piriform)\nCyberLink PhotoDirector (HKLM…5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.) Hidden\nCyberLink PhotoDirector (HKLM-x32…InstallShield_5A454EC5-217A-42a5-8CE1-2DDEC4E70E01) (Version: 5.0.6.7006 – CyberLink Corp.)\nCyberLink Power Media Player 14 (HKLM-x32…32C8E300-BDB4-4398-92C2-E9B7D8A233DB) (Version: 14.0.2.5801 – CyberLink Corp.)\nCyberLink PowerDirector 12 (HKLM…E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.) Hidden\nCyberLink PowerDirector 12 (HKLM-x32…InstallShield_E1646825-D391-42A0-93AA-27FA810DA093) (Version: 12.0.5.4614 – CyberLink Corp.)\nDropbox 25 GB (HKLM-x32…867A88D-764F-366E-9E21-130DA8B472C3) (Version: 3.1.18.0 – Dropbox, Inc.)\nDropbox Update Helper (HKLM-x32…99218A5-A723-43DC-8DB5-6173656A1E94) (Version: 1.3.295.1 – Dropbox, Inc.) Hidden\nEvernote v. 5.8.13 (HKLM-x32…A229420E-204B-11E5-B844-0050569584E9) (Version: 5.8.13.8152 – Evernote Corp.)\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.138 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nHP Documentation (HKLM…HP_Documentation) (Version: 1.0.0.1 – HP)\nHP Dropbox Plugin (HKLM-x32…C54DEA1F-7A8D-410B-A675-04E0FB562CB0) (Version: 40.13.54.81239 – HP)\nHP Google Drive Plugin (HKLM-x32…533B4739-13DD-4AAB-9524-070B3F0CE6ED) (Version: 40.13.54.81239 – HP)\nHP Officejet 5740 series Basic Device Software (HKLM…8C417009-7889-42BC-8164-C74FFF358CE6) (Version: 40.13.1176.1978 – HP Inc.)\nHP Officejet 5740 series Help (HKLM-x32…F17D53C7-DCE8-469C-9690-CF8F5903519C) (Version: 34.0.0 – Hewlett Packard)\nHP Photo Creations (HKLM-x32…HP Photo Creations) (Version: 1.0.0.9572 – HP)\nHP Registration Service (HKLM…D1E8F2D7-7794-4245-B286-87ED86C1893C) (Version: 1.2.8318.5320 – Hewlett-Packard)\nHP Support Assistant (HKLM-x32…79C54A05-F146-4EA0-8A70-D4EFE6181E52) (Version: 8.8.24.33 – Hewlett-Packard Company)\nHP Support Information (HKLM-x32…76272057-98E0-4DC4-AAC3-10C546C47195) (Version: 14.00.0000 – Hewlett-Packard)\nHP Support Solutions Framework (HKLM-x32…55065080-504F-43BB-BE00-36B80D7D39A5) (Version: 12.15.14.3 – Hewlett-Packard Company)\nHP Touchpoint Analytics Client (HKLM…E5FB98E0-0784-44F0-8CEC-95CD4690C43F) (Version: 4.0.2.1439 – HP Inc.)\nHP Welcome (HKLM…HPWelcome) (Version: 1.0 – HP Inc.)\nI.R.I.S. OCR (HKLM-x32…11ED31EC-7EFA-4D56-B71D-E0214C8984CC) (Version: 12.3.7.0 – HP)\nIntel® Chipset Device Software (HKLM-x32…a2d9fda8-65eb-4c06-81ef-31e0a4daa335) (Version: 10.1.1.11 – Intel® Corporation) Hidden\nIntel® Management Engine Components (HKLM…1CEAC85D-2590-4760-800F-8DE5E91F3700) (Version: 11.0.0.1173 – Intel Corporation)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 25.20.100.6446 – Intel Corporation)\nIntel® Ready Mode Technology (HKLM…9F82AA39-BB14-4BD3-98EF-D4E9E3526B7D) (Version: 1.1.70.514 – Intel Corporation)\nIntel® WiDi (HKLM…5DD8D7E4-87F1-4134-AD28-4228FB1A03BA) (Version: 6.0.44.0 – Intel Corporation)\nIntel® WiDi Software Asset Manager (HKLM-x32…86905E62-645F-482E-A417-82C812ABD787) (Version: 1.1.383 – Intel Corporation) Hidden\nIntel® Wireless Bluetooth® (HKLM-x32…4DA9DC19-4E1D-4B10-A726-A5F2A1BC7265) (Version: 18.1.1546.2762 – Intel Corporation)\nIntel® PROSet/Wireless Software (HKLM-x32…f8c930bd-0a68-425f-8c11-87723d1e2c97) (Version: 20.90.0 – Intel Corporation)\nIntel® Security Assist (HKLM-x32…4B230374-6475-4A73-BA6E-41015E9C5013) (Version: 1.0.0.532 – Intel Corporation)\nMicrosoft Office (HKLM-x32…90150000-0138-0409-0000-0000000FF1CE) (Version: 15.0.4693.1005 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-999762305-681959455-3457413626-1001…OneDriveSetup.exe) (Version: 20.052.0311.0011 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…837b34e3-7c30-493c-8f6a-2b0f04e2912c) (Version: 8.0.59193 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010  x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.21005 (HKLM-x32…ce085a78-074e-4823-8dc1-8a721b94b76d) (Version: 12.0.21005.1 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nNorton 360 (HKLM-x32…NGC) (Version: 22.20.2.57 – Symantec Corporation)\nProduct Improvement Study for HP Officejet 5740 series (HKLM…D4B37902-C484-4AAC-B3B8-70C203C4FAB3) (Version: 40.13.1176.1978 – HP Inc.)\nRealtek Card Reader (HKLM-x32…5BC2B5AB-80DE-4E83-B8CF-426902051D0A) (Version: 10.0.10125.31214 – Realtek Semiconductor Corp.)\nRealtek Ethernet Controller Driver (HKLM-x32…8833FFB6-5B0C-4764-81AA-06DFEED9A476) (Version: 10.1.505.2015 – Realtek)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.7673 – Realtek Semiconductor Corp.)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.5.3 – TeamViewer)\nUpdate for Windows 10 for x64-based Systems (KB4023057) (HKLM…16AD6161-2E47-4BF1-AA77-0946EFE93E08) (Version: 2.61.0.0 – Microsoft Corporation)\nUpdateAssistant (HKLM…E1D7CB46-BAE9-4D58-99C4-582332B1755A) (Version: 1.13.0.0 – Microsoft Corporation) Hidden\nViewpoint Media Player (HKLM-x32…ViewpointMediaPlayer) (Version:  – )\nVulkan Run Time Libraries 1.0.54.1 (HKLM…VulkanRT1.0.54.1) (Version: 1.0.54.1 – LunarG, Inc.) Hidden\nWindows 10 Update Assistant (HKLM-x32…D5C69738-B486-402E-85AC-2456D98A64E4) (Version: 1.4.9200.22395 – Microsoft Corporation)\nWindows Setup Remediations (x64) (KB4023057) (HKLM…5534e02f-0f5d-40dd-ba92-bea38d22384d.sdb) (Version:  – )"},{"id":"text-49","heading":"Text","content":"Packages:\n=========\nAdblock Plus -> C:Program FilesWindowsAppsEyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-05-11] (eyeo GmbH)\nAdGuard AdBlocker -> C:Program FilesWindowsAppsAdguard.AdguardAdBlocker_3.3.8.0_neutral__m055xr0c82818 [2020-01-09] (Performix)\nAmazon -> C:Program FilesWindowsAppsAmazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2020-02-29] (Amazon.com)\nCandy Crush Soda Saga -> C:Program FilesWindowsAppsking.com.CandyCrushSodaSaga_1.167.200.0_x86__kgqvnymyfvs32 [2020-05-06] (king.com)\nHearts Deluxe -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.HeartsDeluxe_6.6.26.0_x64__kx24dqmazqk8j [2020-01-25] (Random Salad Games LLC) [MS Ad]\nHP Smart -> C:Program FilesWindowsAppsAD2F1837.HPPrinterControl_110.1.728.0_x64__v10z8vjag6ke6 [2020-04-15] (HP Inc.)\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-27] (Microsoft Corporation) [MS Ad]\nMicrosoft News -> C:Program FilesWindowsAppsMicrosoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMicrosoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-02] (Microsoft Studios) [MS Ad]\nMSN Money -> C:Program FilesWindowsAppsMicrosoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Sports -> C:Program FilesWindowsAppsMicrosoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nMSN Weather -> C:Program FilesWindowsAppsMicrosoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]\nNetflix -> C:Program FilesWindowsApps4DF9E0F8.Netflix_6.96.725.0_x64__mcm4njqhnhss8 [2020-04-10] (Netflix, Inc.)\nSimple Solitaire -> C:Program FilesWindowsApps26720RandomSaladGamesLLC.SimpleSolitaire_6.18.78.0_x64__kx24dqmazqk8j [2020-03-03] (Random Salad Games LLC) [MS Ad]\nSnapfish -> C:Program FilesWindowsAppsAD2F1837.HPConnectedPhotopoweredbySnapfish_6.1.736.0_x86__v10z8vjag6ke6 [2018-08-05] (Snapfish)\nTripAdvisor Hotels Flights Restaurants -> C:Program FilesWindowsAppsTripAdvisorLLC.TripAdvisorHotelsFlightsRestaurants_1.5.10.0_x64__qj0v5chwq8f2g [2016-11-18] (TripAdvisor LLC)\nTwitter -> C:Program FilesWindowsApps9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-09] (Twitter Inc.)"},{"id":"text-50","heading":"Text","content":"==================== Custom CLSID (Whitelisted): =============="},{"id":"text-51","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-52","heading":"Text","content":"ShellIconOverlayIdentifiers: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> 4433A54A-1AC8-432F-90FC-85F045CF383C => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayPending] -> F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> 476D0EA3-80F9-48B5-B70B-05E677C9C148 => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers1: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers2: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 =>  -> No File\nContextMenuHandlers5: [igfxDTCM] -> 9B5F5829-A529-4B12-814A-E81BCB8D93FC => C:WINDOWSSystem32DriverStoreFileRepositoryki131064.inf_amd64_5d13f27a9a9843faigfxDTCM.dll [2019-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers6: [BUContextMenu] -> F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB => C:Program FilesNorton SecurityEngine22.20.2.57buShell.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)\nContextMenuHandlers6: [Symantec.Norton.Antivirus.IEContextMenu] -> FAD61B3D-699D-49B2-BE16-7F82CB4C59CA => C:Program FilesNorton SecurityEngine22.20.2.57NavShExt.dll [2020-03-20] (Symantec Corporation -> Symantec Corporation)"},{"id":"text-53","heading":"Text","content":"==================== Codecs (Whitelisted) ===================="},{"id":"text-54","heading":"Text","content":"(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)"},{"id":"text-55","heading":"Text","content":"HKLM…Drivers32: [vidc.i420] => C:WINDOWSsystem32lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.)\nHKLM…Drivers32: [vidc.i420] => C:WindowsSysWOW64lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.)"},{"id":"text-56","heading":"Text","content":"==================== Shortcuts & WMI ========================"},{"id":"text-57","heading":"Text","content":"(The entries could be listed to be restored or removed.)"},{"id":"text-58","heading":"Text","content":"ShortcutWithArgument: C:UsersphyliDesktopMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:UsersphyliAppDataRoamingMicrosoftWindowsStart MenuProgramsChrome AppsMy AOL.lnk -> C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC) ->  –profile-directory=Default –app-id=pigepclndadjaebpijfcjeeefpjhcdca\nShortcutWithArgument: C:ProgramDataMicrosoftWindowsStart MenuProgramsPriceline.com.lnk -> C:Program Files (x86)Hewlett-PackardSharedWizLink.exe () -> hxxp://www.priceline.com/?refid=PLHBC6240OPQ&refclickid=square"},{"id":"text-59","heading":"Text","content":"==================== Loaded Modules (Whitelisted) ============="},{"id":"text-60","heading":"Text","content":"==================== Alternate Data Streams (Whitelisted) ========"},{"id":"text-61","heading":"Text","content":"==================== Safe Mode (Whitelisted) =================="},{"id":"text-62","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)"},{"id":"text-63","heading":"Text","content":"HKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521 => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkSMR521.SYS => ""="Driver"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkWRBoot => ""="Driver""},{"id":"text-64","heading":"Text","content":"==================== Association (Whitelisted) ================="},{"id":"text-65","heading":"Text","content":"==================== Internet Explorer trusted/restricted =========="},{"id":"text-66","heading":"Text","content":"==================== Hosts content: ========================="},{"id":"text-67","heading":"Text","content":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)"},{"id":"text-68","heading":"Text","content":"2015-10-30 03:24 – 2015-10-30 03:21 – 000000824 ____N C:WINDOWSsystem32driversetchosts"},{"id":"text-69","heading":"Text","content":"==================== Other Areas ==========================="},{"id":"text-70","heading":"Text","content":"(Currently there is no automatic fix for this section.)"},{"id":"text-71","heading":"Text","content":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)InteliCLS Client;C:Program FilesInteliCLS Client;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program Files (x86)IntelIntel® Management Engine ComponentsDAL;C:Program FilesIntelIntel® Management Engine ComponentsDAL;C:Program Files (x86)IntelIntel® Management Engine ComponentsIPT;C:Program FilesIntelIntel® Management Engine ComponentsIPT;%SYSTEMROOT%System32OpenSSH;C:Program FilesIntelWiFibin;C:Program FilesCommon FilesIntelWirelessCommon\nHKUS-1-5-21-999762305-681959455-3457413626-1001Control PanelDesktop\\Wallpaper -> \nDNS Servers: 192.168.1.1 – 10.255.0.0\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: Warn)\nWindows Firewall is enabled."},{"id":"text-72","heading":"Text","content":"==================== MSCONFIG/TASK MANAGER disabled items =="},{"id":"text-73","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed.)"},{"id":"text-74","heading":"Text","content":"HKLM…StartupApprovedStartupFolder: => "Install LastPass IE RunOnce.lnk"\nHKLM…StartupApprovedRun: => "RTHDVCPL"\nHKLM…StartupApprovedRun32: => "PowerDVD14Agent"\nHKLM…StartupApprovedRun32: => "WRSVC"\nHKLM…StartupApprovedRun32: => "HostManager"\nHKLM…StartupApprovedRun32: => "SecurityHealth"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedStartupFolder: => "AOL Desktop Launcher.lnk"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "CCleaner Monitoring"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "OneDrive"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026amd64"\nHKUS-1-5-21-999762305-681959455-3457413626-1001…StartupApprovedRun: => "Uninstall 17.3.7076.1026""},{"id":"text-75","heading":"Text","content":"==================== FirewallRules (Whitelisted) ================"},{"id":"text-76","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-77","heading":"Text","content":"FirewallRules: [54640540-F97A-4412-900E-39472727094D] => (Allow) C:Program FilesIntelWiFibinPanDhcpDns.exe (Intel Corporation -> )\nFirewallRules: [8DC4717E-FCAF-469D-9E12-79DB0B253EF1] => (Allow) C:Program FilesCommon FilesMcAfeeMMSSHostMMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)\nFirewallRules: [791E7CF7-C352-4609-87FE-4C2E705A6E1F] => (Allow) C:Program Files (x86)Common FilesMcafeeMMSSHostMMSSHost.exe => No File\nFirewallRules: [AF62C409-25E2-4AEC-9DEC-12B069A10F79] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [F3B8345F-5967-46B5-BA4F-A598A14D09D3] => (Allow) C:Program Files (x86)Common FilesAOLSystem Informationsinf.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [FF87652F-D92F-4FD5-B8D2-DC22659AB369] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [29CAECA3-8459-490A-B734-D5D8B16E5BC5] => (Allow) C:Program Files (x86)Common FilesAOLLoaderaolload.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [3241FBCD-FFAC-4EE7-8F09-8A5105596348] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [1958B452-6813-4A87-A829-95800B9FDB77] => (Allow) C:Program Files (x86)Common FilesAOLTopSpeed3.0aoltpsd3.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [E46AC436-D866-4D71-B2B9-ADE4A9339A1B] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [975C4FE9-8C93-4A39-AD4A-033BF7D371FD] => (Allow) C:Program Files (x86)AOL Desktop 9.8.2waol.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [A012B925-4D8A-4CA0-90E5-ECD661D3E083] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [DB6A911E-74F0-457F-BFF3-291FBD427D56] => (Allow) C:Program Files (x86)Common FilesAOL1474834258eeaolsoftware.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9F2E22A7-C276-4028-875D-E9BE1FCE1F3D] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [71A37010-12B4-4407-B154-0F9980309A79] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLacsd.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [C733D88A-3187-4419-87C5-1A0EB1FDCCBB] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [9A69636F-43A5-4523-ADC5-B05E7329E939] => (Allow) C:Program Files (x86)Common FilesAOLacsAOLDial.exe (AOL Inc. -> AOL Inc.)\nFirewallRules: [B745797E-820D-45A1-9096-B8F2E7D887CA] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVD CinemaPowerDVDCinema.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [8A476C2A-9A52-41E6-8608-EA62290278ED] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14MoviePowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [F4ECB65E-59C8-477E-BA52-2A2020C15832] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD14Agent.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [76B1143C-70F8-452E-94C8-3CB3C4C595B6] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14KernelDMSCLMSServerPDVD14.exe (CyberLink Corp. -> CyberLink)\nFirewallRules: [903790A5-47BC-4DE7-B8EF-5FFA2A23BFF3] => (Allow) C:Program Files (x86)CyberLinkPowerDVD14PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)\nFirewallRules: [70D32C90-6419-457B-8B12-37EF83F7CB75] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [9027CB07-C9CF-4D46-8607-8A1AC3201DBF] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [3770051C-48E7-46F6-85CC-DCE51562BD14] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [AB9F9C90-7C33-40D1-9DDF-CA8253003040] => (Allow) C:Program FilesBonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [530F0275-912A-49A4-A418-E5014F38FF16] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxApplications.exe (HP Inc -> HP Inc.)\nFirewallRules: [4E862923-0E31-4D90-A8D4-BD42EF44D066] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinDigitalWizards.exe (HP Inc -> HP Inc.)\nFirewallRules: [6ACD8E74-027D-4580-8EE3-351AABAB3602] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinSendAFax.exe (HP Inc -> HP Inc.)\nFirewallRules: [61D83D5B-BCA4-4DDA-8B89-DF5986B5E587] => (Allow) C:Program FilesHPHP Officejet 5740 seriesbinFaxPrinterUtility.exe (HP Inc -> HP Inc.)\nFirewallRules: [D83F6F84-CB01-4B1B-B74F-522E4ED00D68] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinDeviceSetup.exe (HP Inc -> HP Inc.)\nFirewallRules: [CBB4B686-C3E0-42EA-8BA8-FD001355A894] => (Allow) LPort=5357\nFirewallRules: [16643FC5-67E9-487C-B277-A99B9C0B0A91] => (Allow) C:Program FilesHPHP Officejet 5740 seriesBinHPNetworkCommunicatorCom.exe (HP Inc -> HP Inc.)\nFirewallRules: [38841FC4-2F6E-48B2-A565-A7D70AD5936C] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [4D96E522-6D29-4ED1-A56E-3DCF75D7A03E] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [E7F8679D-AFED-4B1A-9DCE-40715CC682D2] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [D06019FB-2384-4BB9-A71A-4CE2590E3755] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [170F4B69-67DF-4CB1-93D6-EC86EAE15F14] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)"},{"id":"text-78","heading":"Text","content":"==================== Restore Points ========================="},{"id":"text-79","heading":"Text","content":"20-04-2020 17:12:46 Windows Update\n28-04-2020 15:32:48 Scheduled Checkpoint\n07-05-2020 12:26:10 Scheduled Checkpoint\n11-05-2020 15:24:27 tech"},{"id":"text-80","heading":"Text","content":"==================== Faulty Device Manager Devices ============"},{"id":"text-81","heading":"Text","content":"==================== Event log errors: ========================"},{"id":"text-82","heading":"Text","content":"Application errors:\n==================\nError: (05/12/2020 08:10:51 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (832,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-83","heading":"Text","content":"Error: (05/12/2020 06:19:26 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (11352,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-84","heading":"Text","content":"Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0"},{"id":"text-85","heading":"Text","content":"Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0"},{"id":"text-86","heading":"Text","content":"Error: (05/12/2020 06:12:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)\nDescription: Skipping: Eap method DLL path validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0"},{"id":"text-87","heading":"Text","content":"Error: (05/12/2020 06:08:14 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6280,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-88","heading":"Text","content":"Error: (05/12/2020 10:17:45 AM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (6160,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-89","heading":"Text","content":"Error: (05/11/2020 08:06:19 PM) (Source: ESENT) (EventID: 455) (User: )\nDescription: svchost (3468,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log."},{"id":"text-90","heading":"Text","content":"System errors:\n=============\nError: (05/11/2020 07:41:55 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service camsvc with arguments "Unavailable" in order to run the server:\nWindows.Internal.CapabilityAccess.CapabilityAccess"},{"id":"text-91","heading":"Text","content":"Error: (05/11/2020 07:40:58 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC"},{"id":"text-92","heading":"Text","content":"Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030"},{"id":"text-93","heading":"Text","content":"Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030"},{"id":"text-94","heading":"Text","content":"Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030"},{"id":"text-95","heading":"Text","content":"Error: (05/11/2020 07:40:57 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:\n9E175B6D-F52A-11D8-B9A5-505054503030"},{"id":"text-96","heading":"Text","content":"Error: (05/11/2020 07:39:01 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC"},{"id":"text-97","heading":"Text","content":"Error: (05/11/2020 07:38:54 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-GIRJ15B)\nDescription: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:\nDD522ACC-F821-461A-A407-50B198B896DC"},{"id":"text-98","heading":"Text","content":"CodeIntegrity:\n==================================="},{"id":"text-99","heading":"Text","content":"Date: 2020-05-12 18:10:41.976\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements."},{"id":"text-100","heading":"Text","content":"Date: 2020-05-12 18:10:35.458\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements."},{"id":"text-101","heading":"Text","content":"Date: 2020-05-12 18:10:35.390\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements."},{"id":"text-102","heading":"Text","content":"Date: 2020-05-12 18:10:35.376\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMsMpEng.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements."},{"id":"text-103","heading":"Text","content":"Date: 2020-05-12 18:10:34.197\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements."},{"id":"text-104","heading":"Text","content":"Date: 2020-05-12 18:10:34.178\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3Program FilesWindows DefenderMpCmdRun.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Microsoft signing level requirements."},{"id":"text-105","heading":"Text","content":"Date: 2020-05-12 18:10:32.348\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements."},{"id":"text-106","heading":"Text","content":"Date: 2020-05-12 18:10:32.302\nLa description: \nCode Integrity determined that a process (DeviceHarddiskVolume3WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume3Program FilesNorton SecurityEngine22.20.2.57symamsi.dll that did not meet the Windows signing level requirements."},{"id":"text-107","heading":"Text","content":"==================== Memory info ==========================="},{"id":"text-108","heading":"Text","content":"BIOS: AMI A0.13 12/21/2015\nMotherboard: HP 2B47\nProcessor: Intel® Core™ i5-6400 CPU @ 2.70GHz\nPercentage of memory in use: 39%\nTotal physical RAM: 12183.87 MB\nAvailable physical RAM: 7377.78 MB\nTotal Virtual: 14039.87 MB\nAvailable Virtual: 8974.65 MB"},{"id":"text-109","heading":"Text","content":"==================== Drives ================================"},{"id":"text-110","heading":"Text","content":"Drive c: (Windows) (Fixed) (Total:1849.94 GB) (Free:1785.56 GB) NTFS\nDrive d: (Recovery Image) (Fixed) (Total:11.64 GB) (Free:1.51 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive e: (OS) (Fixed) (Total:581.11 GB) (Free:399.92 GB) NTFS ==>[system with boot components (obtained from drive)]\nDrive f: (RECOVERY) (Fixed) (Total:15 GB) (Free:0.29 GB) NTFS\nDrive h: (Apria DVD Project June 2019) (CDROM) (Total:7.95 GB) (Free:0 GB) UDF"},{"id":"text-111","heading":"Text","content":"\\?Volume43b2a7e8-a447-45e8-ac50-4bc30569771a (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.52 GB) NTFS\n\\?Volume832b0909-50d7-4b26-88e3-66a386fdb90d (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.27 GB) FAT32"},{"id":"text-112","heading":"Text","content":"==================== MBR & Partition Table ===================="},{"id":"text-113","heading":"Text","content":"==========================================================\nDisk: 0 (Size: 1863 GB) (Disk ID: 2BD6946D)"},{"id":"text-114","heading":"Text","content":"Partition: GPT."},{"id":"text-115","heading":"Text","content":"==========================================================\nDisk: 1 (MBR Code: Windows 7 or Vista) (Size: 596.2 GB) (Disk ID: 90000000)\nPartition 1: (Not Active) – (Size=63 MB) – (Type=DE)\nPartition 2: (Not Active) – (Size=15 GB) – (Type=07 NTFS)\nPartition 3: (Active) – (Size=581.1 GB) – (Type=07 NTFS)"},{"id":"text-116","heading":"Text","content":"==================== End of Addition.txt ======================="},{"id":"text-117","heading":"Text","content":"Click to rate this post!\n \n [Total: 0 Average: 0]"}],"media":{"primary_image":"https://tutos-gameserver.fr/wp-content/uploads/2020/03/1585419619_meta_image.png"},"relations":[{"rel":"canonical","href":"https://tutos-gameserver.fr/2020/05/20/fell-for-phone-tech-support-scan-malware-possible-resoudre-les-problemes-dun-serveur-minecraft/"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/05/20/fell-for-phone-tech-support-scan-malware-possible-resoudre-les-problemes-dun-serveur-minecraft/llm","type":"text/html"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/05/20/fell-for-phone-tech-support-scan-malware-possible-resoudre-les-problemes-dun-serveur-minecraft/llm.json","type":"application/json"},{"rel":"llm-manifest","href":"https://tutos-gameserver.fr/llm-endpoints-manifest.json","type":"application/json"}],"http_headers":{"X-LLM-Friendly":"1","X-LLM-Schema":"1.1.0","Content-Security-Policy":"default-src 'none'; img-src * data:; style-src 'unsafe-inline'"},"license":"CC BY-ND 4.0","attribution_required":true,"allow_cors":false}