i tried the old thread but was closed

[rcb56]

i tried for two hours last night and got nowhere. today is not much better as this pc would not let me do anything. the mouse...mice are crazy, i've tried others and same thing. it wont copy/paste. my passwords the same, i've had to request 2 new here today and the second d'load tool crashed me a few minutes ago anf just getting back here was a struggle
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by ronny (administrator) on LAPTOP-7SS3QTOI (14-04-2019 09:32:46)
Running from C:\Users\ronny\Desktop
Loaded Profiles: ronny (Available Profiles: ronny)
Platform: Windows 10 Home Version 1809 17763.437 (X64) Language: English (United States)
Default browser: "C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe" "%1"
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_1a33d2f73651d989\igfxCUIService.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_1a33d2f73651d989\IntelCpHDCPSvc.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\jhi_service.exe
(Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1903.4-0\MsMpEng.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_1a33d2f73651d989\IntelCpHeciSvc.exe
(Logitech Inc -> Logitech Europe S.A.) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1903.4-0\NisSrv.exe
(Logitech Inc -> ) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\crashpad_handler.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_1a33d2f73651d989\igfxEM.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19031.57.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Program Files\WindowsApps\E0469640.LenovoUtility_3.0.50.0_x64__5grkq8ppsgwt4\VFS\ProgramFilesX64\Lenovo\LenovoUtility\utility.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.27.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Adobe Systems, Incorporated -> ) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Tweaking LLC -> Tweaking.com) C:\Program Files (x86)\Tweaking.com\Registry Backup\TweakingRegistryBackup.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe
(Maxthon Technology Co, Ltd. -> Maxthon International ltd.) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2177160 2019-03-02] (Logitech Inc -> Logitech, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2563344569-153408547-261685501-1001\...\Run: [Vivaldi Update Notifier] => C:\Users\ronny\AppData\Local\Vivaldi\Application\update_notifier.exe [1800776 2019-03-25] (Vivaldi Technologies AS -> Vivaldi Technologies AS)
HKLM\...\Drivers32: [vidc.i420] => C:\WINDOWS\system32\lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.)
HKLM\...\Drivers32: [MSVideo] => C:\WINDOWS\system32\vfwwdm32.dll [68096 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.)
Startup: C:\Users\ronny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk [2019-03-02]
ShortcutTarget: Logitech . Product Registration.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Logitech -> Leader Technologies/Logitech)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{157c1c20-07a9-48f0-96eb-08b0ba15705c}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3a3e94fa-5e9d-4423-87d2-7dde07d75df2}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{3c4437dd-9c7d-4241-a1ea-b136520b1063}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{b7a4ccd0-f88d-490b-949c-652a8e0776ce}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f72efe12-e812-47ec-be3d-9570b755c139}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2563344569-153408547-261685501-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-2563344569-153408547-261685501-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
SearchScopes: HKU\S-1-5-21-2563344569-153408547-261685501-1001 -> DefaultScope {1DE58705-3063-4F2A-835E-EB8A8011C103} URL =
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-03-18] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-03-18] (Oracle America, Inc. -> Oracle Corporation)

Edge:
======
Edge Session Restore: HKU\S-1-5-21-2563344569-153408547-261685501-1001 -> is enabled.

FireFox:
========
FF DefaultProfile: llfzwedj.default
FF ProfilePath: C:\Users\ronny\AppData\Roaming\Mozilla\Firefox\Profiles\llfzwedj.default [2019-04-14]
FF Homepage: Mozilla\Firefox\Profiles\llfzwedj.default -> hxxps://www.bing.com/?PC=JV01
FF Extension: (ETP Search Volume Study) - C:\Users\ronny\AppData\Roaming\Mozilla\Firefox\Profiles\llfzwedj.default\Extensions\etp-search-volume-study@shield.mozilla.org.xpi [2019-04-09]
FF Extension: (uBlock) - C:\Users\ronny\AppData\Roaming\Mozilla\Firefox\Profiles\llfzwedj.default\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2019-03-14]
FF Extension: (NoScript) - C:\Users\ronny\AppData\Roaming\Mozilla\Firefox\Profiles\llfzwedj.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2019-04-10]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_171.dll [2019-04-09] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_171.dll [2019-04-09] (Adobe Inc. -> )
FF Plugin-x32: @flyordie.com/GamesPlugin -> C:\Program Files (x86)\Flyordie Plugin\npfod.dll [2019-03-13] (Solware IT Ltd -> Solware)
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-03-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-03-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-03-25] (Adobe Inc. -> Adobe Systems Inc.)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\WINDOWS\System32\drivers\AdminService.exe [414696 2018-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [197120 2017-07-13] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [71336 2019-03-06] (Lenovo -> Lenovo Group Ltd.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\WINDOWS\System32\Intel\iCLS Client\lib\SocketHeciServer.exe [765112 2018-04-25] (Intel(R) Trust Services -> Intel(R) Corporation)
S2 Intel(R) TPM Provisioning Service; C:\WINDOWS\System32\Intel\iCLS Client\lib\TPMProvisioningService.exe [731832 2018-04-25] (Intel(R) Trust Services -> Intel(R) Corporation)
R2 jhi_service; C:\WINDOWS\System32\jhi_service.exe [576560 2018-05-23] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S2 MxService; C:\Program Files (x86)\Maxthon5\Bin\MxService.exe [176920 2019-03-13] (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4489352 2019-01-17] (Logitech Inc -> Logitech)
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [191440 2018-09-26] (Qualcomm Atheros -> Qualcomm Technologies Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [266080 2018-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor)
R2 SynTPEnhService; C:\WINDOWS\System32\SynTPEnhService.exe [352808 2018-04-12] (Synaptics Incorporated -> Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\NisSrv.exe [3856504 2019-04-08] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MsMpEng.exe [113992 2019-04-08] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 BtFilter; C:\WINDOWS\System32\drivers\btfilter.sys [65448 2018-01-08] (WDKTestCert aswbldsv,131431045756648395 -> Qualcomm)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 IntcAzAudAddService; C:\WINDOWS\system32\drivers\RTKVHD64.sys [6314848 2018-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [274416 2019-04-14] (Malwarebytes Corporation -> Malwarebytes)
R3 Qcamain10x64; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2358736 2018-09-26] (Qualcomm Atheros -> Qualcomm Atheros, Inc.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1026896 2018-01-25] (Realtek Semiconductor Corp. -> Realtek )
S3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3236320 2017-11-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [48168 2018-04-12] (Synaptics Incorporated -> Synaptics Incorporated)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 stdriver; C:\WINDOWS\system32\DRIVERS\stdriverx64.sys [34512 2019-04-13] (NCH Software -> )
R3 SynRMIHID; C:\WINDOWS\System32\drivers\SynRMIHID.sys [61480 2018-04-12] (Synaptics Incorporated -> Synaptics Incorporated)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [28272 2019-03-13] (Adlice -> )
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24576 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-04-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [343520 2019-04-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [68576 2019-04-08] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-14 09:32 - 2019-04-14 09:34 - 000017903 _____ C:\Users\ronny\Desktop\FRST.txt
2019-04-14 09:32 - 2019-04-14 09:32 - 000000000 ____D C:\FRST
2019-04-14 09:31 - 2019-04-14 09:31 - 002434048 _____ (Farbar) C:\Users\ronny\Desktop\FRST64.exe
2019-04-14 08:14 - 2019-04-14 08:14 - 000274416 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2019-04-14 01:52 - 2019-04-14 02:01 - 000007606 _____ C:\Users\ronny\AppData\Local\Resmon.ResmonCfg
2019-04-14 01:23 - 2019-04-14 01:23 - 000000000 ____D C:\RegBackup
2019-04-14 00:39 - 2019-04-14 00:39 - 005766144 _____ (Tweaking.com) C:\Users\ronny\Downloads\tweaking.com_registry_backup_setup.exe
2019-04-13 19:49 - 2019-04-13 19:51 - 001607420 _____ C:\WINDOWS\Minidump\041319-30453-01.dmp
2019-04-13 15:29 - 2019-04-13 19:49 - 665046802 _____ C:\WINDOWS\MEMORY.DMP
2019-04-13 15:29 - 2019-04-13 15:32 - 001379708 _____ C:\WINDOWS\Minidump\041319-37546-01.dmp
2019-04-13 00:38 - 2019-04-13 00:38 - 000814160 _____ (NCH Software) C:\Users\ronny\Desktop\soundtap-2-32-2014-07-28.exe
2019-04-10 17:56 - 2019-04-10 17:56 - 000000000 ____D C:\Users\ronny\AppData\Local\LenovoServiceBridge
2019-04-10 14:47 - 2019-04-13 00:47 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-04-09 23:38 - 2019-04-09 23:38 - 026810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 023440896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 020815360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 019025408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 012843520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 012139008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 008898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 007919104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 007877120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 006544824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 006071296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 005765120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 005436904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 005205448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 004660224 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 004527624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 003904512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 003690496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 003551112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 003496448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 003421696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 002346496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 002275896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001615872 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001590064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001506304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001467344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001459080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001458056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001370624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001297120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001294520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-04-09 23:38 - 2019-04-09 23:38 - 001249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001155072 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuuc.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001072424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000982528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000976896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000964096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000828728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000730112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000653040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000540448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000408528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000312632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000263600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\EduPrintProv.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2019-04-09 23:38 - 2019-04-09 23:38 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe
2019-04-09 23:38 - 2019-04-09 23:38 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll
2019-04-09 23:37 - 2019-04-09 23:38 - 000649064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 017513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 015223296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 009682744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 007645608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 006925824 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 004704272 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 004588536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 004304896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 003982848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 003657728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 003384832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 003377976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 002925880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 002871304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 002842624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 002777224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 002701304 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 002689024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 002627384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 002469376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 002438368 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 002189312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 002073960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 002042368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001994768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 001918464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001860096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001711104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001701888 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001697752 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-04-09 23:37 - 2019-04-09 23:37 - 001687552 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001674480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001671352 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001647632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001605120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001478968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001468952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 001395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001360184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 001342400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-04-09 23:37 - 2019-04-09 23:37 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001311232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001179680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 001145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001133568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2019-04-09 23:37 - 2019-04-09 23:37 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 001054200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 001035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000998712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000984888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000909840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000882176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2019-04-09 23:37 - 2019-04-09 23:37 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000855040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000821048 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000809784 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000807424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000737080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000730936 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000725928 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000620560 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000598544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000568632 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-04-09 23:37 - 2019-04-09 23:37 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000508208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000474928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2019-04-09 23:37 - 2019-04-09 23:37 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-04-09 23:37 - 2019-04-09 23:37 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000386360 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000343984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000322568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiCloudStore.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000257696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.CredentialProvider.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000159272 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000157496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000147496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000143880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000134456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000115360 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000097808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000071208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000039736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WppRecorder.sys
2019-04-09 23:37 - 2019-04-09 23:37 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2019-04-09 23:37 - 2019-04-09 23:37 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe
2019-04-09 23:37 - 2019-04-09 23:37 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 007687576 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 004991112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 003557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 003334496 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 002995712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 002720256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 002592816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 002022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 002017792 _____ C:\WINDOWS\system32\rdpnano.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 001892864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 001856000 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 001567232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 001496576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-04-09 23:36 - 2019-04-09 23:36 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 001191728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 001053192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 001044280 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-04-09 23:36 - 2019-04-09 23:36 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000982880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000974352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000865784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2019-04-09 23:36 - 2019-04-09 23:36 - 000799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000793832 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000761280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-04-09 23:36 - 2019-04-09 23:36 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000675096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000651792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 000651064 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-04-09 23:36 - 2019-04-09 23:36 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000604008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000513040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000506168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000485192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000421392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 000407504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000385024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000384312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000306488 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000300344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000283032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000255128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmBroker.exe
2019-04-09 23:36 - 2019-04-09 23:36 - 000234808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winquic.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winquic.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 000131384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-04-09 23:36 - 2019-04-09 23:36 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000098664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2019-04-09 23:36 - 2019-04-09 23:36 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-04-09 23:36 - 2019-04-09 23:36 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-04-09 23:36 - 2019-04-09 23:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-04-09 23:36 - 2019-04-09 23:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-04-09 23:36 - 2019-04-09 23:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-04-09 23:36 - 2019-04-09 23:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-04-09 23:36 - 2019-04-09 23:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-04-09 23:36 - 2019-04-09 23:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-04-09 23:36 - 2019-04-09 23:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-04-09 23:36 - 2019-04-09 23:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-04-09 12:32 - 2019-03-06 09:17 - 000205992 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.CoreTypes.dll
2019-04-09 12:32 - 2019-03-06 09:17 - 000130216 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.Utilities.dll
2019-04-09 12:32 - 2019-03-06 09:17 - 000097960 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.ImController.ImClient.dll
2019-04-09 12:32 - 2019-03-06 09:17 - 000043688 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.ImController.EventLogging.dll
2019-04-05 11:59 - 2019-04-13 19:50 - 000000000 ____D C:\Users\ronny\Desktop\sam1_files
2019-03-30 15:43 - 2019-03-30 15:43 - 000000000 ____D C:\Users\ronny\AppData\Local\Deployment
2019-03-30 15:43 - 2019-03-30 15:43 - 000000000 ____D C:\Users\ronny\AppData\Local\Apps\2.0
2019-03-30 15:43 - 2019-03-30 15:43 - 000000000 ____D C:\Program Files\Common Files\Adobe
2019-03-30 15:43 - 2019-03-30 15:43 - 000000000 ____D C:\Program Files\Adobe
2019-03-30 14:25 - 2019-03-30 14:25 - 000000000 ____D C:\Users\ronny\AppData\Roaming\Google
2019-03-30 14:23 - 2019-03-30 14:23 - 000000000 ____D C:\Users\ronny\.AndroidStudio3.3
2019-03-30 14:22 - 2019-03-30 14:25 - 000000000 ____D C:\Users\ronny\.android
2019-03-30 14:22 - 2019-03-30 14:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio
2019-03-30 14:16 - 2019-03-30 14:16 - 000000000 ____D C:\Program Files\Android
2019-03-30 12:38 - 2019-03-30 12:45 - 994630888 _____ (Google LLC) C:\Users\ronny\Downloads\android-studio-ide-182.5314842-windows.exe
2019-03-30 10:31 - 2019-03-30 10:31 - 000002392 _____ C:\Users\ronny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2019-03-30 10:31 - 2019-03-30 10:31 - 000002355 _____ C:\Users\ronny\Desktop\Vivaldi.lnk
2019-03-30 10:31 - 2019-03-30 10:31 - 000000000 ____D C:\Users\ronny\AppData\Local\Vivaldi
2019-03-28 23:40 - 2019-04-13 00:54 - 000001238 _____ C:\Users\Public\Desktop\SoundTap Streaming Audio Recorder.lnk
2019-03-28 04:51 - 2019-03-28 04:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iZotope
2019-03-28 04:50 - 2019-03-28 04:58 - 000000000 ____D C:\Program Files (x86)\iZotope
2019-03-28 04:50 - 2019-03-28 04:50 - 000000000 ____D C:\Program Files\Steinberg
2019-03-28 04:50 - 2019-03-28 04:50 - 000000000 ____D C:\Program Files\Common Files\VST3
2019-03-28 04:50 - 2019-03-28 04:50 - 000000000 ____D C:\Program Files\Common Files\Avid
2019-03-28 04:50 - 2019-03-28 04:50 - 000000000 ____D C:\Program Files (x86)\Steinberg
2019-03-25 13:19 - 2019-03-25 13:19 - 001827565 _____ C:\Users\ronny\Desktop\W912EE19Q0017_MVK_Lake_Degray_Amend__1 BID2revised.pdf
2019-03-25 12:51 - 2019-03-25 12:51 - 001916317 _____ C:\Users\ronny\Desktop\W912EE19Q0018_MVK_Lake_Greeson_Park_Attendant BID1revised.pdf
2019-03-25 09:52 - 2019-03-25 11:32 - 000921639 _____ C:\Users\ronny\Desktop\W912EE19Q0017_MVK_Lake_Degray_Amend__1 BID2.pdf
2019-03-25 09:32 - 2019-03-25 11:29 - 001094983 _____ C:\Users\ronny\Desktop\W912EE19Q0018_MVK_Lake_Greeson_Park_Attendant BID1.pdf
2019-03-25 09:03 - 2019-03-25 09:03 - 000000000 ____D C:\Users\ronny\AppData\LocalLow\Adobe
2019-03-25 09:02 - 2019-03-25 09:02 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-03-25 08:59 - 2019-04-10 09:01 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-03-25 08:59 - 2019-03-25 08:59 - 000002131 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2019-03-25 08:58 - 2019-03-25 08:58 - 000000000 ____D C:\Program Files (x86)\Adobe
2019-03-25 08:56 - 2019-03-25 09:04 - 000000000 ____D C:\ProgramData\Adobe
2019-03-24 17:25 - 2019-03-24 17:25 - 000000896 _____ C:\Users\ronny\Desktop\wpsetup - Shortcut.lnk
2019-03-24 17:02 - 2019-03-24 17:02 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixPad Multitrack Recording Software.lnk
2019-03-24 17:02 - 2019-03-24 17:02 - 000001220 _____ C:\Users\Public\Desktop\MixPad Multitrack Recording Software.lnk
2019-03-24 17:02 - 2019-03-24 17:02 - 000000000 ____D C:\Users\ronny\Documents\Mixpad Projects
2019-03-24 17:01 - 2019-03-24 17:01 - 000000000 ____D C:\ProgramData\NCH Swift Sound
2019-03-24 16:47 - 2019-03-24 16:48 - 000000000 ____D C:\Users\ronny\Documents\Sound recordings
2019-03-24 16:45 - 2019-03-24 17:26 - 000001198 _____ C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2019-03-24 15:03 - 2019-04-13 01:36 - 000000000 ____D C:\Users\ronny\Desktop\sound
2019-03-23 20:45 - 2019-03-23 20:50 - 000000000 ____D C:\Program Files (x86)\inPixio
2019-03-23 20:11 - 2019-03-23 20:20 - 018049536 _____ C:\Users\ronny\Desktop\Buy_American_Act.xls
2019-03-23 15:52 - 2019-03-23 15:52 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-03-23 15:52 - 2019-03-23 15:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-03-23 15:52 - 2019-03-23 15:52 - 000000000 ____D C:\Program Files\Malwarebytes
2019-03-23 15:52 - 2019-02-01 12:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2019-03-23 15:52 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2019-03-23 15:50 - 2019-03-23 15:51 - 062402408 _____ (Malwarebytes ) C:\Users\ronny\Desktop\mb3-setup-consumer-3.7.1.2839-1.0.563-1.0.9800.exe
2019-03-22 23:42 - 2019-03-22 23:42 - 000788381 _____ C:\Users\ronny\Downloads\ (1)
2019-03-22 23:42 - 2019-03-22 23:42 - 000788378 _____ C:\Users\ronny\Downloads\ (2)
2019-03-21 19:42 - 2019-03-21 19:42 - 000491258 _____ C:\Users\ronny\Desktop\W912EE19Q0017_MVK_Lake_Degray_Amend__1(1).pdf
2019-03-21 19:38 - 2019-03-21 19:38 - 000491258 _____ C:\Users\ronny\Desktop\W912EE19Q0017_MVK_Lake_Degray_Amend__1.pdf
2019-03-21 19:20 - 2017-03-05 21:07 - 004484010 _____ C:\Users\ronny\Desktop\DFK009-04 - Janiva Magness - You Were Never Mine.zip
2019-03-21 19:15 - 2019-03-21 19:23 - 000000000 ____D C:\Users\ronny\Documents\Sing Magic Songs
2019-03-21 19:06 - 2019-03-21 19:06 - 047566019 _____ C:\Users\ronny\Downloads\Sing-Magic-Setup.exe
2019-03-21 15:02 - 2019-03-23 20:12 - 000000000 ____D C:\Users\ronny\Desktop\toon
2019-03-21 14:29 - 2019-03-21 14:29 - 000631371 _____ C:\Users\ronny\Desktop\W912EE19Q0018_MVK_Lake_Greeson_Park_Attendant.pdf
2019-03-21 00:24 - 2019-03-21 00:24 - 000000751 _____ C:\DelFix.txt
2019-03-20 12:31 - 2019-03-20 12:31 - 000001292 _____ C:\Users\Public\Desktop\Media Player 10.lnk
2019-03-20 12:31 - 2019-03-20 12:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeTechno
2019-03-20 12:30 - 2019-03-21 15:00 - 000000000 ____D C:\Users\ronny\AppData\Roaming\MediaPlayer10
2019-03-20 12:30 - 2019-03-20 12:30 - 000000000 ____D C:\Program Files (x86)\CodeTechno
2019-03-20 12:27 - 2019-03-20 12:27 - 000000934 _____ C:\Users\ronny\Documents\settings.dat
2019-03-20 12:27 - 2019-03-20 12:27 - 000000060 _____ C:\Users\ronny\Documents\SingerPlaylist.spl
2019-03-20 12:27 - 2019-03-20 12:27 - 000000048 _____ C:\Users\ronny\Documents\Playlist.spl
2019-03-20 11:29 - 2019-03-20 11:29 - 000001009 _____ C:\Users\ronny\Documents\updates.dat
2019-03-18 17:57 - 2019-03-18 17:57 - 000000000 ____D C:\Users\ronny\AppData\Roaming\Sun
2019-03-18 17:56 - 2019-03-18 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-03-18 17:56 - 2019-03-18 17:55 - 000099192 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2019-03-18 17:54 - 2019-03-18 17:54 - 000000000 ____D C:\Program Files (x86)\Java
2019-03-17 14:31 - 2019-03-17 14:07 - 000008696 _____ C:\Users\ronny\Desktop\Untitled_backup.vpj
2019-03-17 14:07 - 2019-03-17 14:31 - 000013087 _____ C:\Users\ronny\Desktop\Untitled.vpj
2019-03-17 13:27 - 2019-03-17 14:10 - 000000000 ____D C:\Users\ronny\Documents\VideoPad Projects
2019-03-17 11:50 - 2019-03-17 11:50 - 000497855 _____ C:\Users\ronny\Desktop\photo.html
2019-03-17 11:34 - 2019-03-17 11:34 - 000001366 _____ C:\Users\Public\Desktop\NCH Suite.lnk
2019-03-17 11:34 - 2019-03-17 11:34 - 000001226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video Editor.lnk
2019-03-17 11:34 - 2019-03-17 11:34 - 000001214 _____ C:\Users\Public\Desktop\VideoPad Video Editor.lnk
2019-03-16 03:06 - 2019-04-05 09:18 - 000000000 ____D C:\Users\ronny\AppData\Local\CrashDumps

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-14 09:28 - 2018-09-15 02:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-04-14 09:20 - 2019-03-02 05:15 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-04-14 09:15 - 2019-03-02 05:34 - 000840848 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-04-14 09:15 - 2018-09-15 02:31 - 000000000 ____D C:\WINDOWS\INF
2019-04-14 08:35 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-04-14 08:20 - 2019-03-02 06:10 - 000004164 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{919E763D-944E-410C-BE5B-FE5211DD5A4F}
2019-04-14 08:16 - 2019-02-02 14:06 - 000000000 __SHD C:\Users\ronny\IntelGraphicsProfiles
2019-04-14 08:13 - 2019-03-02 06:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-04-14 01:06 - 2019-03-11 22:33 - 000035860 _____ C:\WINDOWS\Tweaking.com - Registry Backup Setup Log.txt
2019-04-14 01:00 - 2019-02-18 10:16 - 000000000 ____D C:\Users\ronny\AppData\LocalLow\Mozilla
2019-04-14 00:48 - 2019-03-11 22:34 - 000002315 _____ C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2019-04-13 19:49 - 2019-03-11 22:59 - 000000000 ____D C:\WINDOWS\Minidump
2019-04-13 15:30 - 2019-03-02 05:22 - 000000000 ____D C:\Users\ronny
2019-04-13 00:59 - 2019-03-02 06:10 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2019-04-13 00:54 - 2019-02-10 22:19 - 000034512 _____ C:\WINDOWS\system32\Drivers\stdriverx64.sys
2019-04-13 00:54 - 2019-02-10 22:19 - 000001250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTap Streaming Audio Recorder.lnk
2019-04-13 00:54 - 2019-02-10 22:19 - 000001167 _____ C:\Users\ronny\AppData\Roaming\trace_FilterInstaller.txt
2019-04-13 00:54 - 2019-02-10 22:19 - 000000000 _____ C:\Users\ronny\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2019-04-13 00:54 - 2018-09-15 01:09 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2019-04-13 00:47 - 2019-02-18 10:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-04-13 00:44 - 2019-02-10 22:19 - 000001167 _____ C:\Users\ronny\AppData\Roaming\trace_FilterInstaller.1.txt
2019-04-13 00:21 - 2019-02-18 10:16 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-04-12 22:41 - 2018-09-15 02:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-04-11 04:24 - 2019-02-07 01:08 - 002611200 _____ C:\Users\ronny\Documents\dwyco-backup-diff-f26998543478a9551774.sql
2019-04-11 04:16 - 2019-02-07 01:08 - 002505728 _____ C:\Users\ronny\Documents\dwyco-backup-diff-f26998543478a9551774.old.sql
2019-04-10 04:18 - 2019-03-02 05:15 - 000257824 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-04-10 04:14 - 2018-09-15 02:33 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-04-10 04:14 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-04-10 04:14 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-04-10 04:14 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-04-10 04:14 - 2018-09-15 01:09 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-04-10 00:29 - 2019-03-07 07:00 - 000004600 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-04-10 00:29 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-04-10 00:29 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-04-09 23:49 - 2019-02-20 02:04 - 000000000 ____D C:\Users\ronny\AppData\Local\Adobe
2019-04-09 23:48 - 2019-03-02 06:10 - 000004588 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
2019-04-09 23:44 - 2018-09-15 02:23 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-04-09 23:20 - 2019-03-13 04:17 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-04-09 23:20 - 2019-03-13 04:17 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-04-09 23:20 - 2019-02-01 23:41 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-04-09 23:16 - 2019-02-01 23:40 - 131129288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-04-09 16:25 - 2019-02-03 22:17 - 000000000 ____D C:\Users\Public\Logi
2019-04-08 16:30 - 2018-04-17 14:02 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-04-08 08:58 - 2019-02-01 23:15 - 000000000 ___RD C:\Users\ronny\OneDrive
2019-04-07 03:48 - 2019-02-02 14:02 - 000000000 ____D C:\Users\ronny\AppData\Local\ElevatedDiagnostics
2019-04-03 01:59 - 2019-02-01 23:09 - 000000000 ____D C:\Users\ronny\AppData\Local\Comms
2019-04-03 01:58 - 2019-02-02 14:06 - 000000000 ____D C:\Users\ronny\AppData\Local\Packages
2019-03-31 01:40 - 2019-03-12 10:37 - 000000000 ____D C:\Users\ronny\Downloads\pix
2019-03-30 15:43 - 2019-02-02 12:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2019-03-30 15:42 - 2019-02-01 23:30 - 000000000 ____D C:\Program Files\Logitech
2019-03-30 13:17 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-03-28 05:00 - 2018-10-09 09:54 - 000000000 ____D C:\ProgramData\Package Cache
2019-03-25 09:31 - 2019-02-02 10:05 - 000000000 ____D C:\ProgramData\Packages
2019-03-25 09:03 - 2019-02-02 14:06 - 000000000 ____D C:\Users\ronny\AppData\Roaming\Adobe
2019-03-24 20:45 - 2019-02-18 23:54 - 000000000 ____D C:\Users\ronny\AppData\Roaming\audacity
2019-03-24 17:26 - 2019-02-07 11:00 - 000001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2019-03-24 17:11 - 2019-02-03 22:01 - 000000000 ____D C:\Users\ronny\AppData\Local\PlaceholderTileLogoFolder
2019-03-24 17:02 - 2019-02-07 10:57 - 000000000 ____D C:\ProgramData\NCH Software
2019-03-24 17:02 - 2019-02-07 10:56 - 000000000 ____D C:\Program Files (x86)\NCH Software
2019-03-23 19:04 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-03-23 15:52 - 2019-02-02 13:09 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-03-23 15:52 - 2018-09-15 02:33 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-03-23 01:36 - 2019-02-07 01:08 - 003533824 _____ C:\Users\ronny\Documents\dwyco-backup-f26998543478a9551774.sql
2019-03-23 01:27 - 2019-02-01 23:25 - 000000000 ____D C:\Program Files\Common Files\LogiShrd
2019-03-17 11:34 - 2019-02-07 10:56 - 000000000 ____D C:\Users\ronny\AppData\Roaming\NCH Software
2019-03-16 23:48 - 2018-09-15 01:09 - 000000000 ____D C:\WINDOWS\servicing
2019-03-15 08:45 - 2019-02-02 00:15 - 000000000 ____D C:\Users\ronny\AppData\Local\D3DSCache

==================== Files in the root of some directories =======

2019-02-19 00:02 - 2011-12-26 04:34 - 000475648 _____ () C:\Program Files (x86)\lame.exe
2019-02-19 00:02 - 2011-12-26 04:34 - 000421888 _____ () C:\Program Files (x86)\lame_enc.dll
2019-02-19 00:02 - 2011-12-26 06:29 - 000001483 _____ () C:\Program Files (x86)\LICENSE.txt
2019-02-19 00:02 - 2019-02-19 00:02 - 000001019 _____ () C:\Program Files (x86)\unins000.dat
2019-02-19 00:02 - 2019-02-19 00:01 - 000715038 _____ () C:\Program Files (x86)\unins000.exe
2019-02-10 22:19 - 2019-04-13 00:44 - 000001167 _____ () C:\Users\ronny\AppData\Roaming\trace_FilterInstaller.1.txt
2019-02-10 22:19 - 2019-02-10 22:20 - 000001167 _____ () C:\Users\ronny\AppData\Roaming\trace_FilterInstaller.2.txt
2019-02-10 22:19 - 2019-04-13 00:54 - 000001167 _____ () C:\Users\ronny\AppData\Roaming\trace_FilterInstaller.txt
2019-02-10 22:19 - 2019-04-13 00:54 - 000000000 _____ () C:\Users\ronny\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2019-04-14 01:52 - 2019-04-14 02:01 - 000007606 _____ () C:\Users\ronny\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by ronny (14-04-2019 09:35:27)
Running from C:\Users\ronny\Desktop
Windows 10 Home Version 1809 17763.437 (X64) (2019-03-02 11:13:44)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2563344569-153408547-261685501-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2563344569-153408547-261685501-503 - Limited - Disabled)
Guest (S-1-5-21-2563344569-153408547-261685501-501 - Limited - Disabled)
ronny (S-1-5-21-2563344569-153408547-261685501-1001 - Administrator - Enabled) => C:\Users\ronny
WDAGUtilityAccount (S-1-5-21-2563344569-153408547-261685501-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.010.20099 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.171 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.171 - Adobe)
Android Studio (HKLM\...\Android Studio) (Version: 3.3 - Google LLC)
Audacity 2.3.0 (HKLM-x32\...\Audacity_is1) (Version: 2.3.0 - Audacity Team)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
Dolby Audio X2 Windows API SDK (HKLM\...\{F994125B-7BF5-4A38-A569-82833CEB24DC}) (Version: 0.8.4.83 - Dolby Laboratories, Inc.)
Dolby Audio X2 Windows APP (HKLM\...\{4A02DCED-C2B0-4DD3-87BD-7D8E68D6AF3C}) (Version: 0.8.6.75 - Dolby Laboratories, Inc.)
Dwyco CDC-X version 2.17 (HKU\S-1-5-21-2563344569-153408547-261685501-1001\...\Dwyco CDC-X_is1) (Version: 2.17 - Dwyco, Inc.)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{44ded3eb-1686-46a6-9770-fd79096c29f7}) (Version: 10.1.1.45 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1052 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.715.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{2b32b7d0-4f9f-47c8-adb7-807e6cb2fb75}) (Version: 1.47.715.0 - Intel Corporation) Hidden
Java 8 Update 201 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lenovo Service Bridge (HKU\S-1-5-21-2563344569-153408547-261685501-1001\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 4.0.6.7 - Lenovo)
Logitech Camera Settings (HKLM-x32\...\LogiUCDPP) (Version: 2.8.24.0 - Logitech Europe S.A.)
Logitech Options (HKLM\...\LogiOptions) (Version: 7.12.43 - Logitech)
Logitech Unifying Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Malwarebytes version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Media Player 10 (HKLM-x32\...\Media Player 10) (Version: 10.0.0 - CodeTechno)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
MixPad Multitrack Recording Software (HKLM-x32\...\MixPad) (Version: 5.36 - NCH Software)
Mozilla Firefox 49.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 49.0.1 (x86 en-US)) (Version: 49.0.1 - Mozilla)
Mozilla Firefox 66.0.3 (x64 en-US) (HKLM\...\Mozilla Firefox 66.0.3 (x64 en-US)) (Version: 66.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 66.0.3.7038 - Mozilla)
MX5 (HKLM-x32\...\Maxthon5) (Version: 5.2.7.1000 - Maxthon International Limited)
RecordPad Sound Recorder (HKLM-x32\...\Recordpad) (Version: 8.01 - NCH Software)
SoundTap Streaming Audio Recorder (HKLM-x32\...\SoundTap) (Version: 2.31 - NCH Software)
Switch Sound File Converter (HKLM-x32\...\Switch) (Version: 7.07 - NCH Software)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 3.5.3 - Tweaking.com)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{1FD817A6-63E1-4519-BFD4-228DABB7AB6B}) (Version: 2.55.0.0 - Microsoft Corporation)
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 7.03 - NCH Software)
Vivaldi (HKU\S-1-5-21-2563344569-153408547-261685501-1001\...\Vivaldi) (Version: 2.4.1488.35 - Vivaldi Technologies AS.)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 9.01 - NCH Software)
Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22589 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\ronny\AppData\Local\Microsoft\OneDrive\19.033.0218.0011\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\ronny\AppData\Local\Microsoft\OneDrive\19.033.0218.0011\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\ronny\AppData\Local\Microsoft\OneDrive\19.033.0218.0011\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 -> C:\Users\ronny\AppData\Local\Vivaldi\Application\2.4.1488.35\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_1a33d2f73651d989\igfxDTCM.dll [2018-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0303FC85-19E4-4A49-AFA4-CCFFF15FF8CC} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-2563344569-153408547-261685501-1001 => C:\Users\ronny\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {0ADF630D-EDBE-4DCC-A006-37EA17B9829E} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor)
Task: {19C50BE4-2339-4427-A530-669F122D488D} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\edb01cb6-ac56-424c-93cd-7bafaa0796ce => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (Lenovo -> Lenovo Group Ltd.)
Task: {1C0AD44A-50C4-4548-957C-8229DA347CCD} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_171_pepper.exe (Adobe Inc. -> Adobe)
Task: {2DC37D0C-EC74-45EE-9537-548B7E917E3C} - System32\Tasks\Maxthon5 Update => C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
Task: {318B57AE-5588-4035-81BE-BB34AD0B777B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {39C5AF49-49A9-472E-946C-1966F366B5F7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {3A2C7E04-E660-4AC9-BA87-34F23463BDFE} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\16cd9a68-4315-46b0-a7ee-00f7573353c6 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (Lenovo -> Lenovo Group Ltd.)
Task: {3B99BBFC-A865-42D0-BD65-6C30871250B4} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_171_Plugin.exe (Adobe Inc. -> Adobe)
Task: {4B9CB6F5-4257-4934-81C2-8AF43B970354} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {5EA95F1C-CD90-4E33-909E-31BE54A712D4} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\fbfe6ea8-434b-478b-b245-2780780f9918 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (Lenovo -> Lenovo Group Ltd.)
Task: {716B90CE-A416-4784-BA18-242EC524DABE} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {79AAFA2A-7394-412D-BAC0-CF9D559F64FA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {7F27BB45-BB75-40AC-9AF6-6EB02B96EDD2} - System32\Tasks\NCH Software\WavePadDowngrade => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe (NCH Software Pty Ltd -> NCH Software)
Task: {8ED2C411-7510-43C9-A180-9D84045CF0DC} - System32\Tasks\RtHDVBg_LENOVO_DOLBYDRAGON => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor)
Task: {90B07957-E1AB-4358-8847-49E45C7FE5D9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {972F90C9-6098-43C3-AF93-4F3D63A46AF0} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\ronny\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {BE77526C-BEAF-4E49-86F6-D04BC84A3FF2} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {C8CB119B-45DD-40AA-8460-12E0493DB950} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe (McAfee, Inc. -> McAfee, Inc.)
Task: {D8BC2351-5AC2-49A7-BE4E-A17B21659A15} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Inc. -> Adobe)
Task: {EBF36B46-CBDF-45A6-B321-60F118CB9CC3} - System32\Tasks\LenovoUtility Task => C:\Windows\explorer.exe lenovo-utility://
Task: {ED066DF5-E55B-4A40-B888-00144190843A} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe (Lenovo -> Lenovo Group Ltd.)
Task: {EF9273EA-7B42-496B-A43D-3BE85B0E650A} - System32\Tasks\RogueKiller Anti-Malware => C:\Users\ronny\Desktop\RogueKiller\RogueKiller64.exe
Task: {FA6D3E51-BDBD-490F-B0FD-8CECC50F7079} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\ronny\Favorites\NCH Software Download Site.lnk -> hxxp://www.nch.com.au/index.htm

==================== Loaded Modules (Whitelisted) ==============

2019-03-23 15:52 - 2019-03-13 09:22 - 000438272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5WinExtras.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 003084800 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Quick.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 005139968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Gui.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 004571648 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Widgets.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 002950144 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 002234880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Network.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 005010944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 001181184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\platforms\qwindows.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000124928 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\styles\qwindowsvistastyle.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qico.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000020992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qsvg.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000259584 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Svg.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick.2\qtquick2plugin.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000729088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000073216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000179712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Dialogs\dialogplugin.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Window.2\windowplugin.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQml\Models.2\modelsplugin.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000101888 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\PrivateWidgets\widgetsplugin.dll
2019-03-23 15:52 - 2019-03-13 09:22 - 000035328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\iconengines\qsvgicon.dll
2019-03-16 20:41 - 2018-08-12 20:29 - 001255424 _____ (Robert Simpson, et al.) [File not signed] C:\ProgramData\Lenovo\iMController\Plugins\GenericMessagingPlugin\x86\x86\SQLite.Interop.dll
2015-10-09 07:42 - 2003-01-26 15:41 - 000040960 _____ (vbAccelerator) [File not signed] C:\Program Files (x86)\Tweaking.com\Registry Backup\SSubTmr6.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-04-11 18:38 - 2018-04-11 18:36 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT
HKU\S-1-5-21-2563344569-153408547-261685501-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\ronny\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\20180626_061637.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "LogiOptions"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "LWS"
HKU\S-1-5-21-2563344569-153408547-261685501-1001\...\StartupApproved\StartupFolder: => "Logitech . Product Registration.lnk"
HKU\S-1-5-21-2563344569-153408547-261685501-1001\...\StartupApproved\Run: => "Vivaldi Update Notifier"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B6244532-8F31-485E-97AD-6131BC46AF7A}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{75E5CCD8-E30F-4E98-A71E-48F24F33F450}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{9AE87BEB-DDC6-42FF-AE2A-CA4C15DBA486}C:\users\ronny\documents\dwyco\cdc-x\cdcx.exe] => (Allow) C:\users\ronny\documents\dwyco\cdc-x\cdcx.exe (Dwyco, Inc. -> )
FirewallRules: [TCP Query User{5A17486F-38A5-4F75-A52C-D1418AC7BA32}C:\users\ronny\documents\dwyco\cdc-x\cdcx.exe] => (Allow) C:\users\ronny\documents\dwyco\cdc-x\cdcx.exe (Dwyco, Inc. -> )
FirewallRules: [UDP Query User{DFCB5FB7-1383-4289-964C-AB0E575FE84C}C:\users\ronny\onedrive\documents\dwyco\cdc-x\cdcx.exe] => (Allow) C:\users\ronny\onedrive\documents\dwyco\cdc-x\cdcx.exe (Dwyco, Inc. -> )
FirewallRules: [TCP Query User{DE83D8F0-4DC3-4615-BC7C-E1552D8B6BA3}C:\users\ronny\onedrive\documents\dwyco\cdc-x\cdcx.exe] => (Allow) C:\users\ronny\onedrive\documents\dwyco\cdc-x\cdcx.exe (Dwyco, Inc. -> )
FirewallRules: [{821AFEB3-FA53-4151-A52E-A5154C0CBEC4}] => (Allow) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
FirewallRules: [{689283AB-5F2B-4CD5-AC28-0C4DBF972BC8}] => (Allow) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
FirewallRules: [{9ED2A87C-9EC4-413C-AF33-32D93891E375}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe No File
FirewallRules: [{5A6D8FE2-0692-4E73-B43F-F3BD38CCD56F}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe No File
FirewallRules: [{68A18C2B-DA57-474E-87B7-4F1B95611589}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16010.9126.2116.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe No File
FirewallRules: [{03D4CD9D-7BF7-40AA-9D32-BC48A28656BE}] => (Allow) C:\Users\ronny\Desktop\FRST64.exe (Farbar) [File not signed]
FirewallRules: [{A02964A7-951A-4798-B79B-FB98726C7662}] => (Allow) C:\Users\ronny\Desktop\FRST64.exe (Farbar) [File not signed]
FirewallRules: [{2B9E177A-CE36-4995-A70B-EE0737B681F5}] => (Allow) C:\Users\ronny\Desktop\FRST64.exe (Farbar) [File not signed]
FirewallRules: [{C7D10C69-1C1C-4697-A7B8-E1224E49764F}] => (Allow) C:\Users\ronny\Desktop\FRST64.exe (Farbar) [File not signed]
FirewallRules: [{D109E7B9-2199-4AEC-A7C4-9A549326E1DE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5E13B8BB-86C2-4FEE-AC00-0746EE2A6CCE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{1E66B6DA-FEBF-436F-93BC-EE15608D34C2}] => (Allow) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
FirewallRules: [{1D76E7C0-3191-4169-A1A0-7A5D431D3796}] => (Allow) C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
FirewallRules: [{91042DF4-8691-4161-AD71-F57432CB3C5F}] => (Allow) C:\Users\ronny\AppData\Local\Vivaldi\Application\vivaldi.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
FirewallRules: [{F9BD5922-EC6C-4830-945F-9BD9F8CF2816}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{4BBC9C04-0CDB-4DA4-AB95-D269ACCE3F55}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.11425.20204.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

05-04-2019 10:19:43 Scheduled Checkpoint
09-04-2019 23:15:21 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/14/2019 08:33:05 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: LAPTOP-7SS3QTOI)
Description: Windows cannot load the extensible counter DLL "C:\WINDOWS\system32\sysmain.dll" (Win32 error code 126).

Error: (04/14/2019 08:33:05 AM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (04/14/2019 08:13:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AUDIODG.EXE, version: 10.0.17763.348, time stamp: 0xa0a39b52
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000000000000
Faulting process id: 0xadc
Faulting application start time: 0x01d4f2c3dd30b571
Faulting application path: C:\WINDOWS\system32\AUDIODG.EXE
Faulting module path: unknown
Report Id: 7370ac13-ba2a-4b49-8ab4-9be4e60cc1cd
Faulting package full name:
Faulting package-relative application ID:

Error: (04/14/2019 12:40:36 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program MicrosoftEdge.exe version 11.0.17763.437 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 3264

Start Time: 01d4f25e253b0545

Termination Time: 4294967295

Application Path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

Report Id: 24d2ec4b-456c-4b00-a346-81b4a6ef77b1

Faulting package full name: Microsoft.MicrosoftEdge_44.17763.1.0_neutral__8wekyb3d8bbwe

Faulting package-relative application ID: MicrosoftEdge

Hang type: Cross-process

Error: (04/14/2019 12:16:24 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Maxthon.exe version 5.2.7.1000 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 16e0

Start Time: 01d4f25c46d4710f

Termination Time: 2012

Application Path: C:\Program Files (x86)\Maxthon5\Bin\Maxthon.exe

Report Id: 1a40cb5d-dedd-48ce-8373-b67316e2f73b

Faulting package full name:

Faulting package-relative application ID:

Hang type: Unknown

Error: (04/13/2019 10:08:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program svchost.exe version 10.0.17763.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: ab0

Start Time: 01d4f25beaadb959

Termination Time: 4294967295

Application Path: C:\Windows\System32\svchost.exe

Report Id: 151d9c92-7cad-4c7e-bed3-45dda688e2a2

Faulting package full name:

Faulting package-relative application ID:

Hang type: Cross-process

Error: (04/13/2019 09:33:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AUDIODG.EXE, version: 10.0.17763.348, time stamp: 0xa0a39b52
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000000000000
Faulting process id: 0x1cdc
Faulting application start time: 0x01d4f26a77e75062
Faulting application path: C:\WINDOWS\system32\AUDIODG.EXE
Faulting module path: unknown
Report Id: 8d741ff7-749a-4641-b11c-cf2ff90b9daf
Faulting package full name:
Faulting package-relative application ID:

Error: (04/13/2019 09:23:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AUDIODG.EXE, version: 10.0.17763.348, time stamp: 0xa0a39b52
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000000000000
Faulting process id: 0x2f64
Faulting application start time: 0x01d4f26915671e64
Faulting application path: C:\WINDOWS\system32\AUDIODG.EXE
Faulting module path: unknown
Report Id: 892deaef-cb82-43f0-bfcb-e40bcd91f085
Faulting package full name:
Faulting package-relative application ID:


System errors:
=============
Error: (04/14/2019 08:16:49 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscDataProtection
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/14/2019 08:16:49 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.SecurityAppBroker
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/14/2019 08:16:49 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/14/2019 08:16:06 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/14/2019 08:16:06 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/14/2019 08:14:07 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The RasMan service depends on the SstpSvc service which failed to start because of the following error:
The operation completed successfully.

Error: (04/14/2019 12:37:53 AM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-7SS3QTOI)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LAPTOP-7SS3QTOI\ronny SID (S-1-5-21-2563344569-153408547-261685501-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/14/2019 12:37:25 AM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-7SS3QTOI)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LAPTOP-7SS3QTOI\ronny SID (S-1-5-21-2563344569-153408547-261685501-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.


Windows Defender:
===================================
Date: 2019-04-13 20:53:03.745
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {B1B3A98D-3501-465B-86D9-E68C2D0B8A07}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-13 20:47:36.555
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {AE610C0F-983C-458F-A81F-F121C310C8B3}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-13 20:00:18.122
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {4ED2C76C-D279-4F77-A8B3-0E10C2F45BFB}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-13 15:46:06.524
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {DDC2E9E4-ECF0-4506-A8AD-67B9CDD506EA}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-10 00:06:46.769
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {97AA6CFE-2426-444E-87AE-CDDE9C5119AD}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-13 15:40:36.922
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.291.1757.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15800.1
Error code: 0x8024402c
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

Date: 2019-04-10 04:29:16.197
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.291.1538.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15800.1
Error code: 0x8024402c
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

Date: 2019-03-23 15:16:13.552
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.291.110.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15800.1
Error code: 0x8024402c
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

Date: 2019-03-23 15:02:20.753
Description:
Windows Defender Antivirus has encountered an error trying to download and configure Windows Defender Offline.
Error code: 0x80070005
Error description: Access is denied.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3-8130U CPU @ 2.20GHz
Percentage of memory in use: 81%
Total physical RAM: 4005.22 MB
Available physical RAM: 725.31 MB
Total Virtual: 7717.22 MB
Available Virtual: 3491.76 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:930.27 GB) (Free:882.71 GB) NTFS

\\?\Volume{eae77724-da1d-47c7-8a1a-90516e452771}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.57 GB) NTFS
\\?\Volume{58b722d2-9514-4e02-a23f-e06dd61b5c39}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 346005D8)

Partition: GPT.

==================== End of Addition.txt ============================

[rcb56]

i should probably add that the new password that was automatically generated to me last night would only work this a.m. when i posted my scan results. then when i tried to run the second program it crashed and then started saying my password was bad after logging in just once.,

[Juliet]

Hard to say whats going on, nothing really shows in the FRST scan.

it did show some errors
Windows cannot load the extensible counter DLL "C:\WINDOWS\system32\sysmain.dll
Description: Faulting application name: AUDIODG.EXE
Description: The program MicrosoftEdge.exe version 11.0.17763.437 stopped interacting with Windows
Description: The program Maxthon.exe version 5.2.7.1000 stopped interacting with Windows


I can create a FRST script to also run sfc /scannow which can check for system errors. When running the script the computer will take extra time to boot and post normally.

Start Farbar Recovery Scan Tool with Administrator privileges
(Right click on the FRST icon and select Run as administrator)

highlight on the text below and select Copy.
beginning with Start:: and finishing with End::
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Highlight the entire content of the quote box below and select Copy.




Start::
CloseProcesses:
CreateRestorePoint:
SearchScopes: HKU\S-1-5-21-2563344569-153408547-261685501-1001 -> DefaultScope {1DE58705-3063-4F2A-835E-EB8A8011C103} URL =
FF Homepage: Mozilla\Firefox\Profiles\llfzwedj.default -> hxxps://www.bing.com/?PC=JV01
CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\ronny\AppData\Local\Microsoft\OneDrive\19.033.0218.0011\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\ronny\AppData\Local\Microsoft\OneDrive\19.033.0218.0011\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\ronny\AppData\Local\Microsoft\OneDrive\19.033.0218.0011\amd64\FileSyncShell64.dll => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
C:\Windows\Temp\*.*
CMD: sfc /scannow
CMD: findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt"
End::



Start FRST (FRST64) with Administrator privileges
Press the Fix button. FRST will process the lines copied above from the clipboard.
When finished, a log file Fixlog.txt will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.

[rcb56]

Hard to say whats going on, nothing really shows in the FRST scan.

it did show some errors
Windows cannot load the extensible counter DLL "C:\WINDOWS\system32\sysmain.dll
Description: Faulting application name: AUDIODG.EXE
Description: The program MicrosoftEdge.exe version 11.0.17763.437 stopped interacting with Windows
Description: The program Maxthon.exe version 5.2.7.1000 stopped interacting with Windows


I can create a FRST script to also run sfc /scannow which can check for system errors. When running the script the computer will take extra time to boot and post normally.

Start Farbar Recovery Scan Tool with Administrator privileges
(Right click on the FRST icon and select Run as administrator)

highlight on the text below and select Copy.
beginning with Start:: and finishing with End::
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Highlight the entire content of the quote box below and select Copy.





Start FRST (FRST64) with Administrator privileges
Press the Fix button. FRST will process the lines copied above from the clipboard.
When finished, a log file Fixlog.txt will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.

i guess the best way to describe the way this does is when I had a virus about 10-12 yrs. ago. eventually everything just froze up on that pc. the browsers, any of them has not been right by sticking, freezing. the mouse has failed big time and no c/p, no scroll, clicking on something is just that nothing happens. also two nights ago task mgr took about 5 min. to open and showed not responding when it did and cpu was at 100% and didn't move down any.
the scan has finished now...

Fix result of Farbar Recovery Scan Tool (x64) Version: 15.04.2019
Ran by ronny (15-04-2019 09:34:38) Run:1
Running from C:\Users\ronny\Desktop
Loaded Profiles: ronny (Available Profiles: ronny)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
SearchScopes: HKU\S-1-5-21-2563344569-153408547-261685501-1001 -> DefaultScope {1DE58705-3063-4F2A-835E-EB8A8011C103} URL =
FF Homepage: Mozilla\Firefox\Profiles\llfzwedj.default -> hxxps://www.bing.com/?PC=JV01
CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\ronny\AppData\Local\Microsoft\OneDrive\19.033.0218.0011\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\ronny\AppData\Local\Microsoft\OneDrive\19.033.0218.0011\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\ronny\AppData\Local\Microsoft\OneDrive\19.033.0218.0011\amd64\FileSyncShell64.dll => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
C:\Windows\Temp\*.*
CMD: sfc /scannow
CMD: findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt"

*****************

Processes closed successfully.
Restore point was successfully created.
"HKU\S-1-5-21-2563344569-153408547-261685501-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"Firefox homepage" => removed successfully
HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => removed successfully
HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => removed successfully
HKU\S-1-5-21-2563344569-153408547-261685501-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found

=========== "C:\Windows\Temp\*.*" ==========

C:\Windows\Temp\AdobeARM.log => moved successfully
C:\Windows\Temp\AdobeARM_NotLocked.log => moved successfully
C:\Windows\Temp\ArmUI.ini => moved successfully
Could not move "C:\Windows\Temp\FXSAPIDebugLogFile.txt" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\FXSTIFFDebugLogFile.txt" => Scheduled to move on reboot.
C:\Windows\Temp\InfInstallerLog._19-04-09_12-32-42-769.log => moved successfully
C:\Windows\Temp\InfInstallerLog._19-04-09_12-33-02-222.log => moved successfully
C:\Windows\Temp\InfInstallerLog._19-04-09_12-33-26-443.log => moved successfully
C:\Windows\Temp\MpCmdRun.log => moved successfully
C:\Windows\Temp\MpSigStub.log => moved successfully
C:\Windows\Temp\MX_LOG_10.log => moved successfully
C:\Windows\Temp\MX_LOG_13.log => moved successfully
C:\Windows\Temp\MX_LOG_14.log => moved successfully
Could not move "C:\Windows\Temp\RightSight.log" => Scheduled to move on reboot.
C:\Windows\Temp\WER2D0F.tmp.WERDataCollectionStatus.txt => moved successfully

========= End -> "C:\Windows\Temp\*.*" ========


========= sfc /scannow =========



Beginning system scan. This process will take some time.



Beginning verification phase of system scan.


Verification 0% complete.
Verification 1% complete.
Verification 1% complete.
Verification 2% complete.
Verification 2% complete.
Verification 3% complete.
Verification 4% complete.
Verification 4% complete.
Verification 5% complete.
Verification 5% complete.
Verification 6% complete.
Verification 7% complete.
Verification 7% complete.
Verification 8% complete.
Verification 8% complete.
Verification 9% complete.
Verification 10% complete.
Verification 10% complete.
Verification 11% complete.
Verification 11% complete.
Verification 12% complete.
Verification 12% complete.
Verification 13% complete.
Verification 14% complete.
Verification 14% complete.
Verification 15% complete.
Verification 15% complete.
Verification 16% complete.
Verification 17% complete.
Verification 17% complete.
Verification 18% complete.
Verification 18% complete.
Verification 19% complete.
Verification 20% complete.
Verification 20% complete.
Verification 21% complete.
Verification 21% complete.
Verification 22% complete.
Verification 23% complete.
Verification 23% complete.
Verification 24% complete.
Verification 24% complete.
Verification 25% complete.
Verification 25% complete.
Verification 26% complete.
Verification 27% complete.
Verification 27% complete.
Verification 28% complete.
Verification 28% complete.
Verification 29% complete.
Verification 30% complete.
Verification 30% complete.
Verification 31% complete.
Verification 31% complete.
Verification 32% complete.
Verification 33% complete.
Verification 33% complete.
Verification 34% complete.
Verification 34% complete.
Verification 35% complete.
Verification 36% complete.
Verification 36% complete.
Verification 37% complete.
Verification 37% complete.
Verification 38% complete.
Verification 38% complete.
Verification 39% complete.
Verification 40% complete.
Verification 40% complete.
Verification 41% complete.
Verification 41% complete.
Verification 42% complete.
Verification 43% complete.
Verification 43% complete.
Verification 44% complete.
Verification 44% complete.
Verification 45% complete.
Verification 46% complete.
Verification 46% complete.
Verification 47% complete.
Verification 47% complete.
Verification 48% complete.
Verification 48% complete.
Verification 49% complete.
Verification 50% complete.
Verification 50% complete.
Verification 51% complete.
Verification 51% complete.
Verification 52% complete.
Verification 53% complete.
Verification 53% complete.
Verification 54% complete.
Verification 54% complete.
Verification 55% complete.
Verification 56% complete.
Verification 56% complete.
Verification 57% complete.
Verification 57% complete.
Verification 58% complete.
Verification 59% complete.
Verification 59% complete.
Verification 60% complete.
Verification 60% complete.
Verification 61% complete.
Verification 61% complete.
Verification 62% complete.
Verification 63% complete.
Verification 63% complete.
Verification 64% complete.
Verification 64% complete.
Verification 65% complete.
Verification 66% complete.
Verification 66% complete.
Verification 67% complete.
Verification 67% complete.
Verification 68% complete.
Verification 69% complete.
Verification 69% complete.
Verification 70% complete.
Verification 70% complete.
Verification 71% complete.
Verification 72% complete.
Verification 72% complete.
Verification 73% complete.
Verification 73% complete.
Verification 74% complete.
Verification 74% complete.
Verification 75% complete.
Verification 76% complete.
Verification 76% complete.
Verification 77% complete.
Verification 77% complete.
Verification 78% complete.
Verification 79% complete.
Verification 79% complete.
Verification 80% complete.
Verification 80% complete.
Verification 81% complete.
Verification 82% complete.
Verification 82% complete.
Verification 83% complete.
Verification 83% complete.
Verification 84% complete.
Verification 84% complete.
Verification 85% complete.
Verification 86% complete.
Verification 86% complete.
Verification 87% complete.
Verification 87% complete.
Verification 88% complete.
Verification 89% complete.
Verification 89% complete.
Verification 90% complete.
Verification 90% complete.
Verification 91% complete.
Verification 92% complete.
Verification 92% complete.
Verification 93% complete.
Verification 93% complete.
Verification 94% complete.
Verification 95% complete.
Verification 95% complete.
Verification 96% complete.
Verification 96% complete.
Verification 97% complete.
Verification 97% complete.
Verification 98% complete.
Verification 99% complete.
Verification 99% complete.
Verification 100% complete.


Windows Resource Protection found corrupt files and successfully repaired them.

For online repairs, details are included in the CBS log file located at

windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline

repairs, details are included in the log file provided by the /OFFLOGFILE flag.


========= End of CMD: =========


========= findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt" =========

2019-04-15 09:35:52, Info CSI 00000006 [SR] Verifying 100 components
2019-04-15 09:35:52, Info CSI 00000007 [SR] Beginning Verify and Repair transaction
2019-04-15 09:35:56, Info CSI 0000006c [SR] Verify complete
2019-04-15 09:35:56, Info CSI 0000006d [SR] Verifying 100 components
2019-04-15 09:35:56, Info CSI 0000006e [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:00, Info CSI 000000d3 [SR] Verify complete
2019-04-15 09:36:00, Info CSI 000000d4 [SR] Verifying 100 components
2019-04-15 09:36:00, Info CSI 000000d5 [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:05, Info CSI 0000013a [SR] Verify complete
2019-04-15 09:36:05, Info CSI 0000013b [SR] Verifying 100 components
2019-04-15 09:36:05, Info CSI 0000013c [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:09, Info CSI 000001a2 [SR] Verify complete
2019-04-15 09:36:09, Info CSI 000001a3 [SR] Verifying 100 components
2019-04-15 09:36:09, Info CSI 000001a4 [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:12, Info CSI 00000209 [SR] Verify complete
2019-04-15 09:36:12, Info CSI 0000020a [SR] Verifying 100 components
2019-04-15 09:36:12, Info CSI 0000020b [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:15, Info CSI 00000270 [SR] Verify complete
2019-04-15 09:36:15, Info CSI 00000271 [SR] Verifying 100 components
2019-04-15 09:36:15, Info CSI 00000272 [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:18, Info CSI 000002d7 [SR] Verify complete
2019-04-15 09:36:18, Info CSI 000002d8 [SR] Verifying 100 components
2019-04-15 09:36:18, Info CSI 000002d9 [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:22, Info CSI 0000033e [SR] Verify complete
2019-04-15 09:36:22, Info CSI 0000033f [SR] Verifying 100 components
2019-04-15 09:36:22, Info CSI 00000340 [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:26, Info CSI 000003a5 [SR] Verify complete
2019-04-15 09:36:26, Info CSI 000003a6 [SR] Verifying 100 components
2019-04-15 09:36:26, Info CSI 000003a7 [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:30, Info CSI 0000040c [SR] Verify complete
2019-04-15 09:36:30, Info CSI 0000040d [SR] Verifying 100 components
2019-04-15 09:36:30, Info CSI 0000040e [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:34, Info CSI 00000476 [SR] Verify complete
2019-04-15 09:36:34, Info CSI 00000477 [SR] Verifying 100 components
2019-04-15 09:36:34, Info CSI 00000478 [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:37, Info CSI 000004dd [SR] Verify complete
2019-04-15 09:36:37, Info CSI 000004de [SR] Verifying 100 components
2019-04-15 09:36:37, Info CSI 000004df [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:41, Info CSI 00000544 [SR] Verify complete
2019-04-15 09:36:41, Info CSI 00000545 [SR] Verifying 100 components
2019-04-15 09:36:41, Info CSI 00000546 [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:45, Info CSI 000005ab [SR] Verify complete
2019-04-15 09:36:45, Info CSI 000005ac [SR] Verifying 100 components
2019-04-15 09:36:45, Info CSI 000005ad [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:50, Info CSI 00000612 [SR] Verify complete
2019-04-15 09:36:50, Info CSI 00000613 [SR] Verifying 100 components
2019-04-15 09:36:50, Info CSI 00000614 [SR] Beginning Verify and Repair transaction
2019-04-15 09:36:56, Info CSI 00000679 [SR] Verify complete
2019-04-15 09:36:56, Info CSI 0000067a [SR] Verifying 100 components
2019-04-15 09:36:56, Info CSI 0000067b [SR] Beginning Verify and Repair transaction
2019-04-15 09:37:03, Info CSI 000006e0 [SR] Verify complete
2019-04-15 09:37:03, Info CSI 000006e1 [SR] Verifying 100 components
2019-04-15 09:37:03, Info CSI 000006e2 [SR] Beginning Verify and Repair transaction
2019-04-15 09:37:10, Info CSI 00000748 [SR] Verify complete
2019-04-15 09:37:10, Info CSI 00000749 [SR] Verifying 100 components
2019-04-15 09:37:10, Info CSI 0000074a [SR] Beginning Verify and Repair transaction
2019-04-15 09:37:22, Info CSI 000007af [SR] Verify complete
2019-04-15 09:37:22, Info CSI 000007b0 [SR] Verifying 100 components
2019-04-15 09:37:22, Info CSI 000007b1 [SR] Beginning Verify and Repair transaction
2019-04-15 09:37:37, Info CSI 00000816 [SR] Verify complete
2019-04-15 09:37:37, Info CSI 00000817 [SR] Verifying 100 components
2019-04-15 09:37:37, Info CSI 00000818 [SR] Beginning Verify and Repair transaction
2019-04-15 09:37:45, Info CSI 0000087d [SR] Verify complete
2019-04-15 09:37:45, Info CSI 0000087e [SR] Verifying 100 components
2019-04-15 09:37:45, Info CSI 0000087f [SR] Beginning Verify and Repair transaction
2019-04-15 09:37:49, Info CSI 000008e5 [SR] Verify complete
2019-04-15 09:37:49, Info CSI 000008e6 [SR] Verifying 100 components
2019-04-15 09:37:49, Info CSI 000008e7 [SR] Beginning Verify and Repair transaction
2019-04-15 09:37:53, Info CSI 0000094c [SR] Verify complete
2019-04-15 09:37:53, Info CSI 0000094d [SR] Verifying 100 components
2019-04-15 09:37:53, Info CSI 0000094e [SR] Beginning Verify and Repair transaction
2019-04-15 09:37:57, Info CSI 000009b3 [SR] Verify complete
2019-04-15 09:37:57, Info CSI 000009b4 [SR] Verifying 100 components
2019-04-15 09:37:57, Info CSI 000009b5 [SR] Beginning Verify and Repair transaction
2019-04-15 09:38:04, Info CSI 00000a1d [SR] Verify complete
2019-04-15 09:38:04, Info CSI 00000a1e [SR] Verifying 100 components
2019-04-15 09:38:04, Info CSI 00000a1f [SR] Beginning Verify and Repair transaction
2019-04-15 09:38:08, Info CSI 00000a86 [SR] Verify complete
2019-04-15 09:38:08, Info CSI 00000a87 [SR] Verifying 100 components
2019-04-15 09:38:08, Info CSI 00000a88 [SR] Beginning Verify and Repair transaction
2019-04-15 09:38:13, Info CSI 00000aef [SR] Verify complete
2019-04-15 09:38:13, Info CSI 00000af0 [SR] Verifying 100 components
2019-04-15 09:38:13, Info CSI 00000af1 [SR] Beginning Verify and Repair transaction
2019-04-15 09:38:21, Info CSI 00000b5f [SR] Verify complete
2019-04-15 09:38:21, Info CSI 00000b60 [SR] Verifying 100 components
2019-04-15 09:38:21, Info CSI 00000b61 [SR] Beginning Verify and Repair transaction
2019-04-15 09:38:29, Info CSI 00000bd7 [SR] Verify complete
2019-04-15 09:38:29, Info CSI 00000bd8 [SR] Verifying 100 components
2019-04-15 09:38:29, Info CSI 00000bd9 [SR] Beginning Verify and Repair transaction
2019-04-15 09:38:36, Info CSI 00000c3e [SR] Verify complete
2019-04-15 09:38:36, Info CSI 00000c3f [SR] Verifying 100 components
2019-04-15 09:38:36, Info CSI 00000c40 [SR] Beginning Verify and Repair transaction
2019-04-15 09:38:44, Info CSI 00000ca5 [SR] Verify complete
2019-04-15 09:38:44, Info CSI 00000ca6 [SR] Verifying 100 components
2019-04-15 09:38:44, Info CSI 00000ca7 [SR] Beginning Verify and Repair transaction
2019-04-15 09:38:50, Info CSI 00000d10 [SR] Verify complete
2019-04-15 09:38:50, Info CSI 00000d11 [SR] Verifying 100 components
2019-04-15 09:38:50, Info CSI 00000d12 [SR] Beginning Verify and Repair transaction
2019-04-15 09:38:57, Info CSI 00000d77 [SR] Verify complete
2019-04-15 09:38:57, Info CSI 00000d78 [SR] Verifying 100 components
2019-04-15 09:38:57, Info CSI 00000d79 [SR] Beginning Verify and Repair transaction
2019-04-15 09:39:11, Info CSI 00000de2 [SR] Verify complete
2019-04-15 09:39:11, Info CSI 00000de3 [SR] Verifying 100 components
2019-04-15 09:39:11, Info CSI 00000de4 [SR] Beginning Verify and Repair transaction
2019-04-15 09:39:22, Info CSI 00000e4c [SR] Verify complete
2019-04-15 09:39:22, Info CSI 00000e4d [SR] Verifying 100 components
2019-04-15 09:39:22, Info CSI 00000e4e [SR] Beginning Verify and Repair transaction
2019-04-15 09:39:31, Info CSI 00000ef2 [SR] Verify complete
2019-04-15 09:39:31, Info CSI 00000ef3 [SR] Verifying 100 components
2019-04-15 09:39:31, Info CSI 00000ef4 [SR] Beginning Verify and Repair transaction
2019-04-15 09:39:40, Info CSI 00000fb5 [SR] Verify complete
2019-04-15 09:39:40, Info CSI 00000fb6 [SR] Verifying 100 components
2019-04-15 09:39:40, Info CSI 00000fb7 [SR] Beginning Verify and Repair transaction
2019-04-15 09:39:47, Info CSI 00001024 [SR] Verify complete
2019-04-15 09:39:47, Info CSI 00001025 [SR] Verifying 100 components
2019-04-15 09:39:47, Info CSI 00001026 [SR] Beginning Verify and Repair transaction
2019-04-15 09:39:54, Info CSI 00001093 [SR] Verify complete
2019-04-15 09:39:54, Info CSI 00001094 [SR] Verifying 100 components
2019-04-15 09:39:54, Info CSI 00001095 [SR] Beginning Verify and Repair transaction
2019-04-15 09:40:01, Info CSI 00001104 [SR] Verify complete
2019-04-15 09:40:01, Info CSI 00001105 [SR] Verifying 100 components
2019-04-15 09:40:01, Info CSI 00001106 [SR] Beginning Verify and Repair transaction
2019-04-15 09:40:07, Info CSI 0000117b [SR] Verify complete
2019-04-15 09:40:07, Info CSI 0000117c [SR] Verifying 100 components
2019-04-15 09:40:07, Info CSI 0000117d [SR] Beginning Verify and Repair transaction
2019-04-15 09:40:13, Info CSI 000011ec [SR] Verify complete
2019-04-15 09:40:13, Info CSI 000011ed [SR] Verifying 100 components
2019-04-15 09:40:13, Info CSI 000011ee [SR] Beginning Verify and Repair transaction
2019-04-15 09:40:20, Info CSI 00001253 [SR] Verify complete
2019-04-15 09:40:20, Info CSI 00001254 [SR] Verifying 100 components
2019-04-15 09:40:20, Info CSI 00001255 [SR] Beginning Verify and Repair transaction
2019-04-15 09:40:25, Info CSI 000012bc [SR] Verify complete
2019-04-15 09:40:25, Info CSI 000012bd [SR] Verifying 100 components
2019-04-15 09:40:25, Info CSI 000012be [SR] Beginning Verify and Repair transaction
2019-04-15 09:40:31, Info CSI 00001324 [SR] Verify complete
2019-04-15 09:40:31, Info CSI 00001325 [SR] Verifying 100 components
2019-04-15 09:40:31, Info CSI 00001326 [SR] Beginning Verify and Repair transaction
2019-04-15 09:40:38, Info CSI 00001394 [SR] Verify complete
2019-04-15 09:40:38, Info CSI 00001395 [SR] Verifying 100 components
2019-04-15 09:40:38, Info CSI 00001396 [SR] Beginning Verify and Repair transaction
2019-04-15 09:40:46, Info CSI 00001409 [SR] Verify complete
2019-04-15 09:40:46, Info CSI 0000140a [SR] Verifying 100 components
2019-04-15 09:40:46, Info CSI 0000140b [SR] Beginning Verify and Repair transaction
2019-04-15 09:40:58, Info CSI 0000149f [SR] Verify complete
2019-04-15 09:40:58, Info CSI 000014a0 [SR] Verifying 100 components
2019-04-15 09:40:58, Info CSI 000014a1 [SR] Beginning Verify and Repair transaction
2019-04-15 09:41:12, Info CSI 00001556 [SR] Verify complete
2019-04-15 09:41:12, Info CSI 00001557 [SR] Verifying 100 components
2019-04-15 09:41:12, Info CSI 00001558 [SR] Beginning Verify and Repair transaction
2019-04-15 09:41:17, Info CSI 000015bf [SR] Verify complete
2019-04-15 09:41:17, Info CSI 000015c0 [SR] Verifying 100 components
2019-04-15 09:41:17, Info CSI 000015c1 [SR] Beginning Verify and Repair transaction
2019-04-15 09:41:24, Info CSI 0000162a [SR] Verify complete
2019-04-15 09:41:24, Info CSI 0000162b [SR] Verifying 100 components
2019-04-15 09:41:24, Info CSI 0000162c [SR] Beginning Verify and Repair transaction
2019-04-15 09:41:36, Info CSI 000016bc [SR] Verify complete
2019-04-15 09:41:36, Info CSI 000016bd [SR] Verifying 100 components
2019-04-15 09:41:36, Info CSI 000016be [SR] Beginning Verify and Repair transaction
2019-04-15 09:41:40, Info CSI 00001724 [SR] Verify complete
2019-04-15 09:41:40, Info CSI 00001725 [SR] Verifying 100 components
2019-04-15 09:41:40, Info CSI 00001726 [SR] Beginning Verify and Repair transaction
2019-04-15 09:41:43, Info CSI 0000178b [SR] Verify complete
2019-04-15 09:41:43, Info CSI 0000178c [SR] Verifying 100 components
2019-04-15 09:41:43, Info CSI 0000178d [SR] Beginning Verify and Repair transaction
2019-04-15 09:41:49, Info CSI 00001801 [SR] Verify complete
2019-04-15 09:41:49, Info CSI 00001802 [SR] Verifying 100 components
2019-04-15 09:41:49, Info CSI 00001803 [SR] Beginning Verify and Repair transaction
2019-04-15 09:41:58, Info CSI 00001875 [SR] Verify complete
2019-04-15 09:41:58, Info CSI 00001876 [SR] Verifying 100 components
2019-04-15 09:41:58, Info CSI 00001877 [SR] Beginning Verify and Repair transaction
2019-04-15 09:42:07, Info CSI 000018ec [SR] Verify complete
2019-04-15 09:42:07, Info CSI 000018ed [SR] Verifying 100 components
2019-04-15 09:42:07, Info CSI 000018ee [SR] Beginning Verify and Repair transaction
2019-04-15 09:42:13, Info CSI 0000195b [SR] Verify complete
2019-04-15 09:42:13, Info CSI 0000195c [SR] Verifying 100 components
2019-04-15 09:42:13, Info CSI 0000195d [SR] Beginning Verify and Repair transaction
2019-04-15 09:42:19, Info CSI 000019c5 [SR] Verify complete
2019-04-15 09:42:19, Info CSI 000019c6 [SR] Verifying 100 components
2019-04-15 09:42:19, Info CSI 000019c7 [SR] Beginning Verify and Repair transaction
2019-04-15 09:42:27, Info CSI 00001a3c [SR] Verify complete
2019-04-15 09:42:27, Info CSI 00001a3d [SR] Verifying 100 components
2019-04-15 09:42:27, Info CSI 00001a3e [SR] Beginning Verify and Repair transaction
2019-04-15 09:42:37, Info CSI 00001ab6 [SR] Verify complete
2019-04-15 09:42:37, Info CSI 00001ab7 [SR] Verifying 100 components
2019-04-15 09:42:37, Info CSI 00001ab8 [SR] Beginning Verify and Repair transaction
2019-04-15 09:42:51, Info CSI 00001b2e [SR] Verify complete
2019-04-15 09:42:51, Info CSI 00001b2f [SR] Verifying 100 components
2019-04-15 09:42:51, Info CSI 00001b30 [SR] Beginning Verify and Repair transaction
2019-04-15 09:42:57, Info CSI 00001b9a [SR] Verify complete
2019-04-15 09:42:58, Info CSI 00001b9b [SR] Verifying 100 components
2019-04-15 09:42:58, Info CSI 00001b9c [SR] Beginning Verify and Repair transaction
2019-04-15 09:43:16, Info CSI 00001c35 [SR] Verify complete
2019-04-15 09:43:16, Info CSI 00001c36 [SR] Verifying 100 components
2019-04-15 09:43:16, Info CSI 00001c37 [SR] Beginning Verify and Repair transaction
2019-04-15 09:43:22, Info CSI 00001cb6 [SR] Verify complete
2019-04-15 09:43:22, Info CSI 00001cb7 [SR] Verifying 100 components
2019-04-15 09:43:22, Info CSI 00001cb8 [SR] Beginning Verify and Repair transaction
2019-04-15 09:43:28, Info CSI 00001d23 [SR] Verify complete
2019-04-15 09:43:28, Info CSI 00001d24 [SR] Verifying 100 components
2019-04-15 09:43:28, Info CSI 00001d25 [SR] Beginning Verify and Repair transaction
2019-04-15 09:43:37, Info CSI 00001d8d [SR] Verify complete
2019-04-15 09:43:37, Info CSI 00001d8e [SR] Verifying 100 components
2019-04-15 09:43:37, Info CSI 00001d8f [SR] Beginning Verify and Repair transaction
2019-04-15 09:43:45, Info CSI 00001e0d [SR] Verify complete
2019-04-15 09:43:45, Info CSI 00001e0e [SR] Verifying 100 components
2019-04-15 09:43:45, Info CSI 00001e0f [SR] Beginning Verify and Repair transaction
2019-04-15 09:43:52, Info CSI 00001e78 [SR] Verify complete
2019-04-15 09:43:53, Info CSI 00001e79 [SR] Verifying 100 components
2019-04-15 09:43:53, Info CSI 00001e7a [SR] Beginning Verify and Repair transaction
2019-04-15 09:43:59, Info CSI 00001ee4 [SR] Verify complete
2019-04-15 09:43:59, Info CSI 00001ee5 [SR] Verifying 100 components
2019-04-15 09:43:59, Info CSI 00001ee6 [SR] Beginning Verify and Repair transaction
2019-04-15 09:44:05, Info CSI 00001f52 [SR] Verify complete
2019-04-15 09:44:05, Info CSI 00001f53 [SR] Verifying 100 components
2019-04-15 09:44:05, Info CSI 00001f54 [SR] Beginning Verify and Repair transaction
2019-04-15 09:44:12, Info CSI 00001fc7 [SR] Verify complete
2019-04-15 09:44:12, Info CSI 00001fc8 [SR] Verifying 100 components
2019-04-15 09:44:12, Info CSI 00001fc9 [SR] Beginning Verify and Repair transaction
2019-04-15 09:44:20, Info CSI 00002034 [SR] Verify complete
2019-04-15 09:44:20, Info CSI 00002035 [SR] Verifying 100 components
2019-04-15 09:44:20, Info CSI 00002036 [SR] Beginning Verify and Repair transaction
2019-04-15 09:44:29, Info CSI 000020f5 [SR] Verify complete
2019-04-15 09:44:29, Info CSI 000020f6 [SR] Verifying 100 components
2019-04-15 09:44:29, Info CSI 000020f7 [SR] Beginning Verify and Repair transaction
2019-04-15 09:44:36, Info CSI 00002163 [SR] Verify complete
2019-04-15 09:44:36, Info CSI 00002164 [SR] Verifying 100 components
2019-04-15 09:44:36, Info CSI 00002165 [SR] Beginning Verify and Repair transaction
2019-04-15 09:44:40, Info CSI 000021ca [SR] Verify complete
2019-04-15 09:44:40, Info CSI 000021cb [SR] Verifying 100 components
2019-04-15 09:44:40, Info CSI 000021cc [SR] Beginning Verify and Repair transaction
2019-04-15 09:44:45, Info CSI 00002233 [SR] Verify complete
2019-04-15 09:44:46, Info CSI 00002234 [SR] Verifying 100 components
2019-04-15 09:44:46, Info CSI 00002235 [SR] Beginning Verify and Repair transaction
2019-04-15 09:44:52, Info CSI 000022a1 [SR] Verify complete
2019-04-15 09:44:52, Info CSI 000022a2 [SR] Verifying 100 components
2019-04-15 09:44:52, Info CSI 000022a3 [SR] Beginning Verify and Repair transaction
2019-04-15 09:44:58, Info CSI 0000230c [SR] Verify complete
2019-04-15 09:44:59, Info CSI 0000230d [SR] Verifying 100 components
2019-04-15 09:44:59, Info CSI 0000230e [SR] Beginning Verify and Repair transaction
2019-04-15 09:45:05, Info CSI 00002378 [SR] Verify complete
2019-04-15 09:45:05, Info CSI 00002379 [SR] Verifying 100 components
2019-04-15 09:45:05, Info CSI 0000237a [SR] Beginning Verify and Repair transaction
2019-04-15 09:45:11, Info CSI 000023e8 [SR] Verify complete
2019-04-15 09:45:11, Info CSI 000023e9 [SR] Verifying 100 components
2019-04-15 09:45:11, Info CSI 000023ea [SR] Beginning Verify and Repair transaction
2019-04-15 09:45:18, Info CSI 0000245c [SR] Verify complete
2019-04-15 09:45:18, Info CSI 0000245d [SR] Verifying 100 components
2019-04-15 09:45:18, Info CSI 0000245e [SR] Beginning Verify and Repair transaction
2019-04-15 09:45:25, Info CSI 000024c5 [SR] Verify complete
2019-04-15 09:45:25, Info CSI 000024c6 [SR] Verifying 100 components
2019-04-15 09:45:25, Info CSI 000024c7 [SR] Beginning Verify and Repair transaction
2019-04-15 09:45:36, Info CSI 0000253a [SR] Verify complete
2019-04-15 09:45:36, Info CSI 0000253b [SR] Verifying 100 components
2019-04-15 09:45:36, Info CSI 0000253c [SR] Beginning Verify and Repair transaction
2019-04-15 09:45:46, Info CSI 000025d8 [SR] Verify complete
2019-04-15 09:45:46, Info CSI 000025d9 [SR] Verifying 100 components
2019-04-15 09:45:46, Info CSI 000025da [SR] Beginning Verify and Repair transaction
2019-04-15 09:45:54, Info CSI 00002640 [SR] Verify complete
2019-04-15 09:45:54, Info CSI 00002641 [SR] Verifying 100 components
2019-04-15 09:45:54, Info CSI 00002642 [SR] Beginning Verify and Repair transaction
2019-04-15 09:46:00, Info CSI 000026b4 [SR] Verify complete
2019-04-15 09:46:01, Info CSI 000026b5 [SR] Verifying 100 components
2019-04-15 09:46:01, Info CSI 000026b6 [SR] Beginning Verify and Repair transaction
2019-04-15 09:46:10, Info CSI 00002724 [SR] Verify complete
2019-04-15 09:46:10, Info CSI 00002725 [SR] Verifying 100 components
2019-04-15 09:46:10, Info CSI 00002726 [SR] Beginning Verify and Repair transaction
2019-04-15 09:46:16, Info CSI 00002792 [SR] Verify complete
2019-04-15 09:46:16, Info CSI 00002793 [SR] Verifying 100 components
2019-04-15 09:46:16, Info CSI 00002794 [SR] Beginning Verify and Repair transaction
2019-04-15 09:46:23, Info CSI 000027fb [SR] Verify complete
2019-04-15 09:46:23, Info CSI 000027fc [SR] Verifying 100 components
2019-04-15 09:46:23, Info CSI 000027fd [SR] Beginning Verify and Repair transaction
2019-04-15 09:46:33, Info CSI 0000286c [SR] Verify complete
2019-04-15 09:46:33, Info CSI 0000286d [SR] Verifying 100 components
2019-04-15 09:46:33, Info CSI 0000286e [SR] Beginning Verify and Repair transaction
2019-04-15 09:46:39, Info CSI 000028df [SR] Verify complete
2019-04-15 09:46:39, Info CSI 000028e0 [SR] Verifying 100 components
2019-04-15 09:46:39, Info CSI 000028e1 [SR] Beginning Verify and Repair transaction
2019-04-15 09:46:45, Info CSI 0000294a [SR] Verify complete
2019-04-15 09:46:45, Info CSI 0000294b [SR] Verifying 100 components
2019-04-15 09:46:45, Info CSI 0000294c [SR] Beginning Verify and Repair transaction
2019-04-15 09:46:52, Info CSI 000029b3 [SR] Verify complete
2019-04-15 09:46:52, Info CSI 000029b4 [SR] Verifying 100 components
2019-04-15 09:46:52, Info CSI 000029b5 [SR] Beginning Verify and Repair transaction
2019-04-15 09:46:57, Info CSI 00002a25 [SR] Verify complete
2019-04-15 09:46:57, Info CSI 00002a26 [SR] Verifying 100 components
2019-04-15 09:46:57, Info CSI 00002a27 [SR] Beginning Verify and Repair transaction
2019-04-15 09:47:03, Info CSI 00002a8d [SR] Verify complete
2019-04-15 09:47:03, Info CSI 00002a8e [SR] Verifying 100 components
2019-04-15 09:47:03, Info CSI 00002a8f [SR] Beginning Verify and Repair transaction
2019-04-15 09:47:09, Info CSI 00002af7 [SR] Verify complete
2019-04-15 09:47:09, Info CSI 00002af8 [SR] Verifying 100 components
2019-04-15 09:47:09, Info CSI 00002af9 [SR] Beginning Verify and Repair transaction
2019-04-15 09:47:17, Info CSI 00002b63 [SR] Verify complete
2019-04-15 09:47:17, Info CSI 00002b64 [SR] Verifying 100 components
2019-04-15 09:47:17, Info CSI 00002b65 [SR] Beginning Verify and Repair transaction
2019-04-15 09:47:33, Info CSI 00002bfe [SR] Verify complete
2019-04-15 09:47:33, Info CSI 00002bff [SR] Verifying 100 components
2019-04-15 09:47:33, Info CSI 00002c00 [SR] Beginning Verify and Repair transaction
2019-04-15 09:47:38, Info CSI 00002c67 [SR] Verify complete
2019-04-15 09:47:38, Info CSI 00002c68 [SR] Verifying 100 components
2019-04-15 09:47:38, Info CSI 00002c69 [SR] Beginning Verify and Repair transaction
2019-04-15 09:47:45, Info CSI 00002cd9 [SR] Verify complete
2019-04-15 09:47:45, Info CSI 00002cda [SR] Verifying 100 components
2019-04-15 09:47:45, Info CSI 00002cdb [SR] Beginning Verify and Repair transaction
2019-04-15 09:47:52, Info CSI 00002d40 [SR] Verify complete
2019-04-15 09:47:52, Info CSI 00002d41 [SR] Verifying 100 components
2019-04-15 09:47:52, Info CSI 00002d42 [SR] Beginning Verify and Repair transaction
2019-04-15 09:47:57, Info CSI 00002da7 [SR] Verify complete
2019-04-15 09:47:57, Info CSI 00002da8 [SR] Verifying 100 components
2019-04-15 09:47:57, Info CSI 00002da9 [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:03, Info CSI 00002e13 [SR] Verify complete
2019-04-15 09:48:03, Info CSI 00002e14 [SR] Verifying 100 components
2019-04-15 09:48:03, Info CSI 00002e15 [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:09, Info CSI 00002e7b [SR] Verify complete
2019-04-15 09:48:09, Info CSI 00002e7c [SR] Verifying 100 components
2019-04-15 09:48:09, Info CSI 00002e7d [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:13, Info CSI 00002ee3 [SR] Verify complete
2019-04-15 09:48:13, Info CSI 00002ee4 [SR] Verifying 100 components
2019-04-15 09:48:13, Info CSI 00002ee5 [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:16, Info CSI 00002f4a [SR] Verify complete
2019-04-15 09:48:16, Info CSI 00002f4b [SR] Verifying 100 components
2019-04-15 09:48:16, Info CSI 00002f4c [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:20, Info CSI 00002fb1 [SR] Verify complete
2019-04-15 09:48:20, Info CSI 00002fb2 [SR] Verifying 100 components
2019-04-15 09:48:20, Info CSI 00002fb3 [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:23, Info CSI 00003018 [SR] Verify complete
2019-04-15 09:48:23, Info CSI 00003019 [SR] Verifying 100 components
2019-04-15 09:48:23, Info CSI 0000301a [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:27, Info CSI 0000307f [SR] Verify complete
2019-04-15 09:48:27, Info CSI 00003080 [SR] Verifying 100 components
2019-04-15 09:48:27, Info CSI 00003081 [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:32, Info CSI 000030ea [SR] Verify complete
2019-04-15 09:48:32, Info CSI 000030eb [SR] Verifying 100 components
2019-04-15 09:48:32, Info CSI 000030ec [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:38, Info CSI 00003153 [SR] Verify complete
2019-04-15 09:48:38, Info CSI 00003154 [SR] Verifying 100 components
2019-04-15 09:48:38, Info CSI 00003155 [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:43, Info CSI 000031ba [SR] Verify complete
2019-04-15 09:48:43, Info CSI 000031bb [SR] Verifying 100 components
2019-04-15 09:48:43, Info CSI 000031bc [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:47, Info CSI 00003221 [SR] Verify complete
2019-04-15 09:48:47, Info CSI 00003222 [SR] Verifying 100 components
2019-04-15 09:48:47, Info CSI 00003223 [SR] Beginning Verify and Repair transaction
2019-04-15 09:48:53, Info CSI 0000328d [SR] Verify complete
2019-04-15 09:48:53, Info CSI 0000328e [SR] Verifying 100 components
2019-04-15 09:48:53, Info CSI 0000328f [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:00, Info CSI 000032f7 [SR] Verify complete
2019-04-15 09:49:00, Info CSI 000032f8 [SR] Verifying 100 components
2019-04-15 09:49:00, Info CSI 000032f9 [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:04, Info CSI 00003360 [SR] Verify complete
2019-04-15 09:49:04, Info CSI 00003361 [SR] Verifying 100 components
2019-04-15 09:49:04, Info CSI 00003362 [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:09, Info CSI 000033cd [SR] Verify complete
2019-04-15 09:49:09, Info CSI 000033ce [SR] Verifying 100 components
2019-04-15 09:49:09, Info CSI 000033cf [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:14, Info CSI 00003439 [SR] Verify complete
2019-04-15 09:49:14, Info CSI 0000343a [SR] Verifying 100 components
2019-04-15 09:49:14, Info CSI 0000343b [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:18, Info CSI 000034a0 [SR] Verify complete
2019-04-15 09:49:18, Info CSI 000034a1 [SR] Verifying 100 components
2019-04-15 09:49:18, Info CSI 000034a2 [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:21, Info CSI 00003507 [SR] Verify complete
2019-04-15 09:49:21, Info CSI 00003508 [SR] Verifying 100 components
2019-04-15 09:49:21, Info CSI 00003509 [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:25, Info CSI 0000356e [SR] Verify complete
2019-04-15 09:49:25, Info CSI 0000356f [SR] Verifying 100 components
2019-04-15 09:49:25, Info CSI 00003570 [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:29, Info CSI 000035d5 [SR] Verify complete
2019-04-15 09:49:29, Info CSI 000035d6 [SR] Verifying 100 components
2019-04-15 09:49:29, Info CSI 000035d7 [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:33, Info CSI 0000363c [SR] Verify complete
2019-04-15 09:49:33, Info CSI 0000363d [SR] Verifying 100 components
2019-04-15 09:49:33, Info CSI 0000363e [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:39, Info CSI 000036ac [SR] Verify complete
2019-04-15 09:49:39, Info CSI 000036ad [SR] Verifying 100 components
2019-04-15 09:49:39, Info CSI 000036ae [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:47, Info CSI 00003718 [SR] Verify complete
2019-04-15 09:49:47, Info CSI 00003719 [SR] Verifying 100 components
2019-04-15 09:49:47, Info CSI 0000371a [SR] Beginning Verify and Repair transaction
2019-04-15 09:49:52, Info CSI 00003781 [SR] Verify complete
2019-04-15 09:49:52, Info CSI 00003782 [SR] Verifying 100 components
2019-04-15 09:49:52, Info CSI 00003783 [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:00, Info CSI 000037f6 [SR] Verify complete
2019-04-15 09:50:00, Info CSI 000037f7 [SR] Verifying 100 components
2019-04-15 09:50:00, Info CSI 000037f8 [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:08, Info CSI 00003862 [SR] Verify complete
2019-04-15 09:50:08, Info CSI 00003863 [SR] Verifying 100 components
2019-04-15 09:50:08, Info CSI 00003864 [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:14, Info CSI 000038ce [SR] Verify complete
2019-04-15 09:50:14, Info CSI 000038cf [SR] Verifying 100 components
2019-04-15 09:50:14, Info CSI 000038d0 [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:20, Info CSI 0000393f [SR] Verify complete
2019-04-15 09:50:20, Info CSI 00003940 [SR] Verifying 100 components
2019-04-15 09:50:20, Info CSI 00003941 [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:27, Info CSI 000039a8 [SR] Verify complete
2019-04-15 09:50:28, Info CSI 000039a9 [SR] Verifying 100 components
2019-04-15 09:50:28, Info CSI 000039aa [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:36, Info CSI 00003a14 [SR] Verify complete
2019-04-15 09:50:36, Info CSI 00003a15 [SR] Verifying 100 components
2019-04-15 09:50:36, Info CSI 00003a16 [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:43, Info CSI 00003a92 [SR] Verify complete
2019-04-15 09:50:43, Info CSI 00003a93 [SR] Verifying 100 components
2019-04-15 09:50:43, Info CSI 00003a94 [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:50, Info CSI 00003b00 [SR] Verify complete
2019-04-15 09:50:50, Info CSI 00003b01 [SR] Verifying 100 components
2019-04-15 09:50:50, Info CSI 00003b02 [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:53, Info CSI 00003b67 [SR] Verify complete
2019-04-15 09:50:53, Info CSI 00003b68 [SR] Verifying 100 components
2019-04-15 09:50:53, Info CSI 00003b69 [SR] Beginning Verify and Repair transaction
2019-04-15 09:50:56, Info CSI 00003bce [SR] Verify complete
2019-04-15 09:50:56, Info CSI 00003bcf [SR] Verifying 100 components
2019-04-15 09:50:56, Info CSI 00003bd0 [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:04, Info CSI 00003c3e [SR] Verify complete
2019-04-15 09:51:04, Info CSI 00003c3f [SR] Verifying 100 components
2019-04-15 09:51:04, Info CSI 00003c40 [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:08, Info CSI 00003ca9 [SR] Verify complete
2019-04-15 09:51:09, Info CSI 00003caa [SR] Verifying 100 components
2019-04-15 09:51:09, Info CSI 00003cab [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:13, Info CSI 00003d11 [SR] Verify complete
2019-04-15 09:51:13, Info CSI 00003d12 [SR] Verifying 100 components
2019-04-15 09:51:13, Info CSI 00003d13 [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:20, Info CSI 00003d80 [SR] Verify complete
2019-04-15 09:51:21, Info CSI 00003d81 [SR] Verifying 100 components
2019-04-15 09:51:21, Info CSI 00003d82 [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:27, Info CSI 00003dee [SR] Verify complete
2019-04-15 09:51:27, Info CSI 00003def [SR] Verifying 100 components
2019-04-15 09:51:27, Info CSI 00003df0 [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:33, Info CSI 00003e5e [SR] Verify complete
2019-04-15 09:51:33, Info CSI 00003e5f [SR] Verifying 100 components
2019-04-15 09:51:33, Info CSI 00003e60 [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:38, Info CSI 00003e7a [SR] Repairing corrupted file \??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\\OneDrive.lnk from store
2019-04-15 09:51:40, Info CSI 00003ec7 [SR] Verify complete
2019-04-15 09:51:40, Info CSI 00003ec8 [SR] Verifying 100 components
2019-04-15 09:51:40, Info CSI 00003ec9 [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:45, Info CSI 00003f32 [SR] Verify complete
2019-04-15 09:51:45, Info CSI 00003f33 [SR] Verifying 100 components
2019-04-15 09:51:45, Info CSI 00003f34 [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:52, Info CSI 00003fe9 [SR] Verify complete
2019-04-15 09:51:52, Info CSI 00003fea [SR] Verifying 100 components
2019-04-15 09:51:52, Info CSI 00003feb [SR] Beginning Verify and Repair transaction
2019-04-15 09:51:58, Info CSI 00004054 [SR] Verify complete
2019-04-15 09:51:58, Info CSI 00004055 [SR] Verifying 100 components
2019-04-15 09:51:58, Info CSI 00004056 [SR] Beginning Verify and Repair transaction
2019-04-15 09:52:04, Info CSI 000040c2 [SR] Verify complete
2019-04-15 09:52:04, Info CSI 000040c3 [SR] Verifying 100 components
2019-04-15 09:52:04, Info CSI 000040c4 [SR] Beginning Verify and Repair transaction
2019-04-15 09:52:11, Info CSI 0000412d [SR] Verify complete
2019-04-15 09:52:11, Info CSI 0000412e [SR] Verifying 100 components
2019-04-15 09:52:11, Info CSI 0000412f [SR] Beginning Verify and Repair transaction
2019-04-15 09:52:18, Info CSI 000041a1 [SR] Verify complete
2019-04-15 09:52:18, Info CSI 000041a2 [SR] Verifying 100 components
2019-04-15 09:52:18, Info CSI 000041a3 [SR] Beginning Verify and Repair transaction
2019-04-15 09:52:26, Info CSI 0000420a [SR] Verify complete
2019-04-15 09:52:26, Info CSI 0000420b [SR] Verifying 100 components
2019-04-15 09:52:26, Info CSI 0000420c [SR] Beginning Verify and Repair transaction
2019-04-15 09:52:32, Info CSI 0000427f [SR] Verify complete
2019-04-15 09:52:32, Info CSI 00004280 [SR] Verifying 100 components
2019-04-15 09:52:32, Info CSI 00004281 [SR] Beginning Verify and Repair transaction
2019-04-15 09:52:40, Info CSI 000042eb [SR] Verify complete
2019-04-15 09:52:40, Info CSI 000042ec [SR] Verifying 100 components
2019-04-15 09:52:40, Info CSI 000042ed [SR] Beginning Verify and Repair transaction
2019-04-15 09:52:48, Info CSI 00004362 [SR] Verify complete
2019-04-15 09:52:48, Info CSI 00004363 [SR] Verifying 100 components
2019-04-15 09:52:48, Info CSI 00004364 [SR] Beginning Verify and Repair transaction
2019-04-15 09:52:54, Info CSI 000043cd [SR] Verify complete
2019-04-15 09:52:54, Info CSI 000043ce [SR] Verifying 100 components
2019-04-15 09:52:54, Info CSI 000043cf [SR] Beginning Verify and Repair transaction
2019-04-15 09:53:01, Info CSI 00004437 [SR] Verify complete
2019-04-15 09:53:01, Info CSI 00004438 [SR] Verifying 100 components
2019-04-15 09:53:01, Info CSI 00004439 [SR] Beginning Verify and Repair transaction
2019-04-15 09:53:15, Info CSI 000044e1 [SR] Verify complete
2019-04-15 09:53:15, Info CSI 000044e2 [SR] Verifying 100 components
2019-04-15 09:53:15, Info CSI 000044e3 [SR] Beginning Verify and Repair transaction
2019-04-15 09:53:21, Info CSI 00004548 [SR] Verify complete
2019-04-15 09:53:21, Info CSI 00004549 [SR] Verifying 100 components
2019-04-15 09:53:21, Info CSI 0000454a [SR] Beginning Verify and Repair transaction
2019-04-15 09:53:29, Info CSI 000045df [SR] Verify complete
2019-04-15 09:53:29, Info CSI 000045e0 [SR] Verifying 100 components
2019-04-15 09:53:29, Info CSI 000045e1 [SR] Beginning Verify and Repair transaction
2019-04-15 09:53:34, Info CSI 00004646 [SR] Verify complete
2019-04-15 09:53:34, Info CSI 00004647 [SR] Verifying 100 components
2019-04-15 09:53:34, Info CSI 00004648 [SR] Beginning Verify and Repair transaction
2019-04-15 09:53:44, Info CSI 000046ae [SR] Verify complete
2019-04-15 09:53:44, Info CSI 000046af [SR] Verifying 100 components
2019-04-15 09:53:44, Info CSI 000046b0 [SR] Beginning Verify and Repair transaction
2019-04-15 09:53:50, Info CSI 00004737 [SR] Verify complete
2019-04-15 09:53:51, Info CSI 00004738 [SR] Verifying 100 components
2019-04-15 09:53:51, Info CSI 00004739 [SR] Beginning Verify and Repair transaction
2019-04-15 09:53:58, Info CSI 000047a0 [SR] Verify complete
2019-04-15 09:53:58, Info CSI 000047a1 [SR] Verifying 100 components
2019-04-15 09:53:58, Info CSI 000047a2 [SR] Beginning Verify and Repair transaction
2019-04-15 09:54:05, Info CSI 00004807 [SR] Verify complete
2019-04-15 09:54:05, Info CSI 00004808 [SR] Verifying 100 components
2019-04-15 09:54:05, Info CSI 00004809 [SR] Beginning Verify and Repair transaction
2019-04-15 09:54:10, Info CSI 0000486e [SR] Verify complete
2019-04-15 09:54:10, Info CSI 0000486f [SR] Verifying 100 components
2019-04-15 09:54:10, Info CSI 00004870 [SR] Beginning Verify and Repair transaction
2019-04-15 09:54:17, Info CSI 000048d6 [SR] Verify complete
2019-04-15 09:54:17, Info CSI 000048d7 [SR] Verifying 100 components
2019-04-15 09:54:17, Info CSI 000048d8 [SR] Beginning Verify and Repair transaction
2019-04-15 09:54:21, Info CSI 0000493e [SR] Verify complete
2019-04-15 09:54:21, Info CSI 0000493f [SR] Verifying 100 components
2019-04-15 09:54:21, Info CSI 00004940 [SR] Beginning Verify and Repair transaction
2019-04-15 09:54:24, Info CSI 000049a5 [SR] Verify complete
2019-04-15 09:54:24, Info CSI 000049a6 [SR] Verifying 100 components
2019-04-15 09:54:24, Info CSI 000049a7 [SR] Beginning Verify and Repair transaction
2019-04-15 09:54:29, Info CSI 00004a0d [SR] Verify complete
2019-04-15 09:54:29, Info CSI 00004a0e [SR] Verifying 44 components
2019-04-15 09:54:29, Info CSI 00004a0f [SR] Beginning Verify and Repair transaction
2019-04-15 09:54:32, Info CSI 00004a3f [SR] Verify complete
2019-04-15 09:54:32, Info CSI 00004a40 [SR] Repairing 1 components
2019-04-15 09:54:32, Info CSI 00004a41 [SR] Beginning Verify and Repair transaction
2019-04-15 09:54:32, Info CSI 00004a42 [SR] Repairing corrupted file \??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\\OneDrive.lnk from store
2019-04-15 09:54:32, Info CSI 00004a45 [SR] Repair complete
2019-04-15 09:54:32, Info CSI 00004a46 [SR] Committing transaction
2019-04-15 09:54:33, Info CSI 00004a4b [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired

========= End of CMD: =========


Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 15-04-2019 10:07:24)

C:\Windows\Temp\FXSAPIDebugLogFile.txt => Is moved successfully
C:\Windows\Temp\FXSTIFFDebugLogFile.txt => Is moved successfully
C:\Windows\Temp\RightSight.log => Could not move

==== End of Fixlog 10:07:24 ====

[Juliet]

cpu was at 100%
One thing that would help is, when these things are slowed to a halt, open task manager, click on
'show processes from all users', locate the item thats pulling all the CPU? (Thats for windows 7 but you should be able to click on a tab at the top to show processes)

I know that many people have had some big problems with the last windows updates that went out.

Let's manually check for updates and see if thats hung up

Open Start – > Microsoft System Center -> Software Center.
Go to the Updates section menu (left menu)
Select View Available Updates in the Windows Update window. The system will automatically check if there's any update that need to be installed, and display the updates that can be installed onto your computer. ..
Click Install All (top right button)
After the updates have installed, restart the computer when prompted by the software.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

We can do a rootkit scan, but have a feeling it will come back clean.

Follow the instructions in the thread below. Make sure to download the MBAR version linked in it.

https://forums.malwarebytes.com/topic/198907-requested-resource-is-in-use-error-unable-to-start-malwarebytes/

If you manage to run a scan, delete everything it finds, and then copy/paste the content of the mbar-log-DATE-(TIME).txt log that is located in the MBAR folder here after.

[rcb56]

well my start menu doesn't have that and I searched my laptop for it and nothing. mine has like three items from Microsoft, store, news, and edge.

[rcb56]

ok the mbar scan just finished and said everything was ok no malware detected but there's no log of anything.

[Juliet]

If nothing was found then no log is OK

Try this
tap or click on the Start menu, followed by Settings. Once there, choose Update & security, followed by Windows Update on the left. Check for new Windows 10 updates by tapping or clicking on the Check for updates button

[rcb56]

ok I did that and also selected update history and all looked good but under the drivers tab one failed, an intel driver I clicked on but get this...http://sysdev.microsoft.com/support/default.aspx

[rcb56]

ok another failed the Microsoft safety scanner which I d'loaded manually

[Juliet]

A couple of things we can try.

Use system restore back to a date before things went crazy

https://www.windowscentral.com/how-use-system-restore-windows-10
Scroll down to => Using System Restore

~~~
We can gather information on your machine and then check the Intel drivers site to see if an update is there.
https://www.intel.com/content/www/us/en/support/detect.html

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

Open Malwarebytes Anti-Malware

Click the Dashboard tab, choose Scan, Threat Scan is checked and click Start Scan.
If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
Upon completion of the scan (or after the reboot), click the Reports tab.
Double-click the Scan Log.
At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

You can access the logs by going in the "Reports" tab, clicking on the latest "Scan" entry (the one with detections), then clicking on the "Export" button in the bottom-left corner and select "Copy to clipboard". After that, all you have to do is paste it here

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Emsisoft Emergency Kit - Fix Mode
Follow the instructions below to run a scan using the Emsisoft Emergency Kit.

Download the Emsisoft Emergency Kit (https://www.emsisoft.com/en/software/eek/download/) and execute it. From there, click on the Install button to extract the program in the EEK folder;
Once the extraction is complete, the EEK folder will open. Right-click on http://i.imgur.com/G0tu5D9.pngstart emergency kit scanner.exe and select http://i.imgur.com/Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
EEK will suggest that you run an online update before using the program. Click on Yes to launch it.
After the update, click on Malware Scan under 2. Scan and accept to let EEK detect PUPs (click on Yes).
Once the scan is complete, make sure that every item in the list is checked, and click on the Quarantine selected button;
If it asks you for a reboot to delete some items, click on Ok to reboot automatically;
After the restart, open EEK again (in the C:\EEK folder);
This time, click on Logs;
From there, go under the Quarantine Log tab, and click on the Export button;
Save the log on your desktop, then open it, and copy/paste its content in your next reply;

Please post these 2 logs when finished.

Also, tell me how the computer is now.

[rcb56]

Well I've got a problem here, system restore took longer it seems than normal. When it finished my PC was rebooting and it would open the Lenovo window showing diagnosing pc then it goes to the blue page with the frown face saying it was collecting error material. After repeating this about 5 times it now goes to automatic repair with options and I've selected continue to Windows but winds back up in the same place. I'm now there and am offered restart and advanced. Can you advise me on what to do please?

[rcb56]

whew! that was a scare! i had to post from my cell, i don't know what happened but restore ran for over two hours then crashed and windows wouldn't open. i started getting the repair page and used the easy options and nothing. i posted on my phone then saw i could restore again and did and it worked that time. bad news is the start up was horrendously slow as well as the route here to the forum. i'm gonna try these two scans and will be back later...

[rcb56]

ok juliet here are the 2 scan results. now the emisoft folder opened and i didn't look good at the files and first clicked the commandline scanner which scanned in abot 15 sec was done and it shows an infection! including screenshot of the deal

[rcb56]

oops!

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/17/19
Scan Time: 1:16 AM
Log File: 5e676556-60d8-11e9-b034-00f48ddc7000.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.563
Update Package Version: 1.0.10202
License: Expired

-System Information-
OS: Windows 10 (Build 17763.379)
CPU: x64
File System: NTFS
User: LAPTOP-7SS3QTOI\ronny

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 276903
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 4 min, 36 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Emsisoft Emergency Kit 2018.6.0.8742 stable [en-us]
OS: Windows 10 (Version 10.0, Build 17763, 64-bit Edition)

Forensics log

Date Component Action Details
4/17/2019 1:42:05 AM Scanner Scan finished Scanned 76660 objects and found nothing.
4/17/2019 1:30:49 AM User LAPTOP-7SS3QTOI\ronny Scan started Malware Scan
4/17/2019 1:29:54 AM User Update Downloaded and installed 41 files (5258 kb) (1 min. 6 sec.).
4/17/2019 1:28:49 AM Core Notification "Recommended Reading:There is no malware on my PC, so why does Google redirect me to dodgy websites?".
3/14/2019 1:24:25 AM Scanner Scan finished Scanned 75423 objects and found nothing.
3/14/2019 1:16:35 AM User LAPTOP-7SS3QTOI\ronny Scan started Malware Scan
3/14/2019 1:15:52 AM User LAPTOP-7SS3QTOI\ronny Setting modified "Detect PUPs" has been changed to "Enabled".
3/14/2019 1:14:42 AM User LAPTOP-7SS3QTOI\ronny Setting modified "Recommended readings & news" has been changed to "Enabled".
3/14/2019 1:14:40 AM User Update Downloaded and installed 16 files (1282 kb) (49 sec.).
3/14/2019 1:14:00 AM User LAPTOP-7SS3QTOI\ronny Setting modified "Recommended readings & news" has been changed to "Disabled".
3/14/2019 1:13:52 AM Core Notification "Recommended Reading:What is the difference between phishing, spear phishing and whaling attacks?".
3/14/2019 1:13:46 AM User Update Failed with error "Server returned error" (1 sec.).

[Juliet]

The emisoft screen shot didn't show the infection found but I do think it said it had found one?

I don't think the real trouble here is malware. I think the computer is sick with system/internal issues and I can't say what it is.
When I had you run sfc /scannow it found problems, found corrupt files and successfully repaired them, I wonder if it really did.

Is this an original Windows 10 or was it an earlier version of Windows updated to a 10?
I don't know if there is any significance to that question but if Microsoft threw out an update (this has happened many times) your machine can't handle that could be important.

I think it's time to send you to a tech forum (I'm a member there too) and allow the guys there to help you go over the computer and attempt to find some answers.
I'm kinda scared if we continue here things could go south quick.

https://forums.whatthetech.com/index.php?showforum=119
Register to the above site and post a new topic.

[rcb56]

ok juliet, thanks. yes it's the original win10 that was installed no upgrade. yes the screenshot i included of the commandlinescan, at the bottom shows infections found it's under the RESULT CODES at the very bottom but it doesn't say what or where. is it ok to say i was reffered to that site by safer networking?

[Juliet]

Of course use my name and you can also post the link to this topic if you wish since so much info is already visible here.