Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02.01.2018
Ran by cbff3 (administrator) on BEAST (07-01-2018 11:04:46)
Running from C:\Users\cbff3\Desktop
Loaded Profiles: cbff3 (Available Profiles: cbff3)
Platform: Windows 10 Pro Version 1709 16299.125 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.31\aaHMSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\2.00.06\atkexComSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Trust.Zone VPN Project) C:\Program Files\Trust.Zone VPN Client\tzclient_x64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(TODO: <Company name>) C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe
() C:\Program Files (x86)\LightingService\1.00.16\AsRogAuraGpuDllServer.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
() C:\Program Files (x86)\ASUS\GPU TweakII\ASUSGPUFanServiceEx.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(TODO: <Company name>) C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Mad Catz) C:\Program Files\Mad Catz\X-55 Rhino\X55_Rhino_Profiler.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe
(Apple Inc.) C:\NATALIE\iTunes\iTunesHelper.exe
(Trust.Zone VPN Project) C:\Program Files\Trust.Zone VPN Client\tzclient_x64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\ArxApplets\Discord\logitechg_discord.exe
(Samsung Electronics Co. Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
() C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(Valve Corporation) E:\STEAM\Steam.exe
(Valve Corporation) E:\STEAM\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) E:\STEAM\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) E:\STEAM\bin\cef\cef.win7\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Windows\System32\Windows.WARP.JITService.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.13411.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17988216 2017-08-18] (Logitech Inc.)
HKLM\...\Run: [X-55 Rhino] => C:\Program Files\Mad Catz\X-55 Rhino\X55_Rhino_Profiler.exe [87040 2016-04-08] (Mad Catz)
HKLM\...\Run: [GoPro Tray App] => C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe [866224 2017-03-16] ()
HKLM\...\Run: [iTunesHelper] => C:\NATALIE\iTunes\iTunesHelper.exe [303928 2017-05-09] (Apple Inc.)
HKLM\...\Run: [Trust.Zone VPN Client UI Helper] => C:\Program Files\Trust.Zone VPN Client\tzclient_x64.exe [4617200 2017-08-11] (Trust.Zone VPN Project)
HKLM\...\Run: [Fences] => C:\Program Files (x86)\Stardock\Fences\Fences.exe [4357560 2017-06-13] (Stardock Corporation)
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596664 2017-08-30] (Razer Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-12] (Logitech Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKU\S-1-5-21-910515035-2020243001-2686619267-1001\...\Run: [Fences] => c:\program files (x86)\stardock\fences\Fences.exe [4357560 2017-06-13] (Stardock Corporation)
HKU\S-1-5-21-910515035-2020243001-2686619267-1001\...\MountPoints2: {52a3cbec-d254-11e7-94a0-6045cb62987e} - "D:\setup.exe" /AUTORUN
HKU\S-1-5-21-910515035-2020243001-2686619267-1001\...\MountPoints2: {6c98e04a-3c52-11e7-9422-806e6f6e6963} - "D:\setup.exe" /AUTORUN
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2017-11-12]
ShortcutTarget: Microsoft Office.lnk -> F:\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
Startup: C:\Users\cbff3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk [2017-05-25]
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\..\Interfaces\{661774bb-ef13-47f0-9e89-9ff7f2908b15}: [NameServer] 18.217.241.230
Tcpip\..\Interfaces\{661774bb-ef13-47f0-9e89-9ff7f2908b15}: [DhcpNameServer] 75.75.75.75 75.75.76.76

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-11-02] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-11-02] (Oracle Corporation)
Handler-x32: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files (x86)\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: f7sf802c.default
FF ProfilePath: C:\Users\cbff3\AppData\Roaming\Mozilla\Firefox\Profiles\f7sf802c.default [2018-01-07]
FF NewTab: Mozilla\Firefox\Profiles\f7sf802c.default -> about:newtab
FF Extension: (Disable JavaScript Shared Memory) - C:\Users\cbff3\AppData\Roaming\Mozilla\Firefox\Profiles\f7sf802c.default\features\{16166ca8-42bc-420e-acc2-189cfaaab4ed}\disable-js-shared-memory@mozilla.org.xpi [2018-01-05] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-13] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-13] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-11-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-11-02] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-15] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-15] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default [2018-01-07]
CHR Extension: (Slides) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-03]
CHR Extension: (Docs) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-03]
CHR Extension: (Google Drive) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-01]
CHR Extension: (YouTube) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-01]
CHR Extension: (Adobe Acrobat) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-11-09]
CHR Extension: (Sheets) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-03]
CHR Extension: (Google Docs Offline) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-01]
CHR Extension: (Gmail) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-01]
CHR Extension: (Chrome Media Router) - C:\Users\cbff3\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-01-07]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESMService; C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe [3019024 2017-09-24] (Intel Corporation)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\2.00.06\atkexComSvc.exe [411456 2017-08-08] (ASUSTeK Computer Inc.)
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.31\aaHMSvc.exe [975832 2017-01-24] (ASUSTeK Computer Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7002120 2017-12-19] ()
R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [37808 2017-03-16] ()
S2 LightingService; C:\Program Files (x86)\LightingService\1.00.16\LightingService.exe [1149912 2017-08-08] (ASUSTek Computer Inc.)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-08-18] (Logitech Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-15] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-15] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2134848 2017-12-13] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3014472 2017-12-13] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2017-06-14] ()
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2017-07-19] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2017-11-26] (Microsoft Corporation)
R2 TZVPNCLIENT; C:\Program Files\Trust.Zone VPN Client\tzclient_x64.exe [4617200 2017-08-11] (Trust.Zone VPN Project)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\NisSrv.exe [356176 2017-12-08] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MsMpEng.exe [105792 2017-12-08] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2016-04-01] ()
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77432 2017-12-09] ()
R3 GPUIO; C:\Program Files (x86)\ASUS\GPU TweakII\690b33e1-0462-4e84-9bea-c7552b45432a.sys [27120 2018-01-07] ()
R3 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [34064 2017-05-08] (ASUSTeK Computer Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-04-05] (Logitech Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [193968 2018-01-05] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [110016 2018-01-07] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [46008 2018-01-07] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2018-01-07] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [94144 2018-01-07] (Malwarebytes)
R1 MpKsl27c85202; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C0066395-A0E7-44FE-B067-067DCA914273}\MpKsl27c85202.sys [58120 2018-01-07] (Microsoft Corporation)
R3 Neo_VPN; C:\WINDOWS\System32\drivers\neo_vpn.sys [22784 2017-08-11] (Trust.Zone VPN Project)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d37ca5c2cde53609\nvlddmkm.sys [17028552 2017-12-18] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-11-15] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50624 2017-10-10] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-12-05] (NVIDIA Corporation)
S3 rzjstk; C:\WINDOWS\System32\drivers\rzjstk.sys [36568 2015-08-13] (Razer Inc)
S3 rzkeypadendpt; C:\WINDOWS\System32\drivers\rzkeypadendpt.sys [46280 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [45752 2017-07-19] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [139704 2017-08-19] (Razer, Inc.)
S3 Said2215; C:\WINDOWS\System32\drivers\Said2215.sys [35472 2016-04-11] (Saitek)
S3 Saida215; C:\WINDOWS\System32\drivers\Saida215.sys [35472 2016-04-11] (Saitek)
S3 SaiG2215; C:\WINDOWS\System32\drivers\SaiG2215.sys [191632 2016-04-11] (Saitek)
S3 SaiGa215; C:\WINDOWS\System32\drivers\SaiGa215.sys [191632 2016-04-11] (Saitek)
S3 SaiK2215; C:\WINDOWS\system32\DRIVERS\SaiK2215.sys [191632 2016-04-11] (Saitek)
S3 SaiKa215; C:\WINDOWS\system32\DRIVERS\SaiKa215.sys [191632 2016-04-11] (Saitek)
R3 SaiMini; C:\WINDOWS\System32\drivers\SaiMini.sys [33160 2016-04-11] (Saitek)
R3 SaiNtBus; C:\WINDOWS\system32\drivers\SaiBus.sys [60936 2016-04-11] (Saitek)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2017-12-08] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288848 2017-12-08] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2017-12-08] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-01-07 11:04 - 2018-01-07 11:04 - 000021630 _____ C:\Users\cbff3\Desktop\FRST.txt
2018-01-07 10:49 - 2018-01-07 10:49 - 000003660 _____ C:\Users\cbff3\Desktop\bookmarks-2018-01-07 FIREFOX.json
2018-01-07 10:46 - 2018-01-07 10:46 - 000120335 _____ C:\Users\cbff3\Desktop\Microsoft_Edge_‎01_‎07_‎2018.html
2018-01-07 09:08 - 2018-01-07 10:59 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-01-07 00:56 - 2018-01-07 11:04 - 000000000 ____D C:\Users\cbff3\Desktop\New folder
2018-01-07 00:30 - 2018-01-07 00:30 - 000000000 ____D C:\ProgramData\Emsisoft
2018-01-07 00:28 - 2018-01-07 00:32 - 000000000 ____D C:\EEK
2018-01-06 11:04 - 2018-01-06 11:25 - 000000000 ____D C:\ProgramData\RogueKiller
2018-01-06 11:04 - 2018-01-06 11:04 - 000028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2018-01-06 10:53 - 2018-01-06 10:55 - 000000000 ____D C:\AdwCleaner
2018-01-06 01:57 - 2018-01-06 01:57 - 000000085 _____ C:\WINDOWS\wininit.ini
2018-01-06 00:55 - 2018-01-06 00:55 - 000000946 _____ C:\Users\Public\Desktop\CPUID ROG CPU-Z.lnk
2018-01-06 00:55 - 2018-01-06 00:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2018-01-06 00:55 - 2018-01-06 00:55 - 000000000 ____D C:\Program Files\CPUID
2018-01-05 20:20 - 2018-01-05 20:20 - 000001327 _____ C:\Users\cbff3\Desktop\Spybot - Search & Destroy.lnk
2018-01-05 20:20 - 2018-01-05 20:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
2018-01-05 20:20 - 2018-01-05 20:20 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2018-01-05 20:09 - 2018-01-05 20:19 - 000216596 _____ C:\WINDOWS\ntbtlog.txt
2018-01-05 20:09 - 2018-01-05 20:09 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2018-01-05 20:02 - 2018-01-05 20:02 - 005198336 _____ (AVAST Software) C:\Users\cbff3\Downloads\aswMBR.exe
2018-01-05 12:58 - 2018-01-06 09:34 - 000000000 ____D C:\WINDOWS\Minidump
2018-01-05 12:48 - 2018-01-07 11:04 - 000000000 ____D C:\FRST
2018-01-05 12:43 - 2018-01-05 12:43 - 002393088 _____ (Farbar) C:\Users\cbff3\Desktop\FRST64.exe
2018-01-05 11:59 - 2018-01-05 11:59 - 000018111 _____ C:\WINDOWS\Tweaking.com - Registry Backup Setup Log.txt
2018-01-05 11:59 - 2018-01-05 11:59 - 000002308 _____ C:\Users\cbff3\Desktop\Tweaking.com - Registry Backup.lnk
2018-01-05 11:59 - 2018-01-05 11:59 - 000000207 _____ C:\WINDOWS\tweaking.com-regbackup-BEAST-Windows-10-Pro-(64-bit).dat
2018-01-05 11:59 - 2018-01-05 11:59 - 000000000 ____D C:\Users\cbff3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2018-01-05 11:59 - 2018-01-05 11:59 - 000000000 ____D C:\RegBackup
2018-01-05 11:59 - 2018-01-05 11:59 - 000000000 ____D C:\Program Files (x86)\Tweaking.com
2018-01-05 09:26 - 2018-01-05 09:26 - 005766144 _____ (Tweaking.com) C:\Users\cbff3\Desktop\tweaking.com_registry_backup_setup.exe
2018-01-05 08:26 - 2018-01-06 02:02 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2018-01-05 08:26 - 2018-01-06 01:57 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2018-01-05 08:26 - 2018-01-05 08:26 - 000000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2018-01-05 00:34 - 2018-01-07 09:08 - 000110016 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2018-01-05 00:34 - 2018-01-07 09:08 - 000046008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2018-01-05 00:34 - 2018-01-05 20:09 - 000193968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2018-01-05 00:33 - 2018-01-07 09:20 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2018-01-05 00:33 - 2018-01-07 09:08 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-01-05 00:33 - 2018-01-07 00:31 - 000000000 ____D C:\Users\cbff3\AppData\Roaming\input
2018-01-05 00:33 - 2018-01-05 00:33 - 001202160 _____ (Adobe Systems Incorporated) C:\Users\cbff3\AppData\Local\flashplugin.exe
2018-01-05 00:32 - 2018-01-05 08:08 - 000000000 ____D C:\Users\cbff3\AppData\Local\chromium
2018-01-05 00:32 - 2018-01-05 00:32 - 000000000 ____D C:\Users\cbff3\AppData\Local\Package Cache
2018-01-05 00:31 - 2018-01-05 08:08 - 000000000 ____D C:\Users\cbff3\AppData\Local\{43CA7596-6762-192E-0AFA-3CC62E92C05E}
2018-01-03 22:15 - 2018-01-03 23:42 - 000004326 _____ C:\Users\cbff3\Desktop\LYTHIUM DEPLOYMENT 2018 FACTIONS.txt
2018-01-02 23:27 - 2018-01-02 23:27 - 000002099 _____ C:\Users\cbff3\Desktop\Customize Fences.lnk
2018-01-02 23:26 - 2018-01-02 23:26 - 000000000 ____D C:\Users\cbff3\Downloads\Stardock
2018-01-02 23:26 - 2018-01-02 23:26 - 000000000 ____D C:\Users\cbff3\AppData\Roaming\Stardock
2018-01-02 23:26 - 2018-01-02 23:26 - 000000000 ____D C:\Users\cbff3\AppData\Local\Stardock
2018-01-02 23:26 - 2018-01-02 23:26 - 000000000 ____D C:\ProgramData\Stardock
2018-01-02 23:26 - 2018-01-02 23:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
2018-01-02 23:26 - 2018-01-02 23:26 - 000000000 ____D C:\Program Files (x86)\Stardock
2018-01-01 23:27 - 2018-01-01 23:27 - 000002206 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2018-01-01 23:26 - 2018-01-01 23:26 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-01-01 23:26 - 2017-12-15 15:47 - 000143960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2018-01-01 23:26 - 2017-09-13 16:20 - 000798008 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2018-01-01 23:26 - 2017-09-13 16:20 - 000490296 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2018-01-01 23:26 - 2017-09-13 16:19 - 000927544 _____ C:\WINDOWS\system32\vulkan-1.dll
2018-01-01 23:26 - 2017-09-13 16:19 - 000591160 _____ C:\WINDOWS\system32\vulkaninfo.exe
2018-01-01 23:25 - 2017-12-15 17:23 - 040237456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 036350960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 035157488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 029381936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 023267096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 019040512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 013867656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 013255032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 011781912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 010883744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 004202992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 003615032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 001990128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438871.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 001674736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438871.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 001331016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 001321448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 001135464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 001101104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 001044848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 001038496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000980880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000933360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000885680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000794392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000740144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000634224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000618744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000616240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000599536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2018-01-01 23:25 - 2017-12-15 17:23 - 000506864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2017-12-30 14:27 - 2017-12-30 14:27 - 000000000 ____D C:\Users\cbff3\AppData\LocalLow\CodeHorizon
2017-12-29 16:09 - 2017-12-29 16:09 - 000000000 ____D C:\Users\cbff3\AppData\LocalLow\Valve Software
2017-12-29 16:08 - 2017-12-29 16:08 - 000000202 _____ C:\Users\cbff3\Desktop\Steam 360 Video Player.url
2017-12-17 21:57 - 2017-12-17 21:57 - 000000037 _____ C:\Users\cbff3\Desktop\TEAMSPEAK3 IP ADDRESS.txt
2017-12-13 14:48 - 2017-12-07 23:52 - 000666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2017-12-13 14:48 - 2017-12-07 16:34 - 001925296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-12-13 14:48 - 2017-12-07 16:34 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-12-13 14:48 - 2017-12-07 16:34 - 000059800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2017-12-13 14:48 - 2017-12-07 16:31 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-12-13 14:48 - 2017-12-07 16:31 - 000779440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-12-13 14:48 - 2017-12-07 16:30 - 000166296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-12-13 14:48 - 2017-12-07 16:28 - 000710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-12-13 14:48 - 2017-12-07 16:28 - 000630752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2017-12-13 14:48 - 2017-12-07 16:27 - 004504456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-12-13 14:48 - 2017-12-07 16:27 - 003903784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-12-13 14:48 - 2017-12-07 16:27 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-12-13 14:48 - 2017-12-07 16:26 - 007385088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-12-13 14:48 - 2017-12-07 16:26 - 002709200 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-12-13 14:48 - 2017-12-07 16:26 - 000525208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2017-12-13 14:48 - 2017-12-07 16:25 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2017-12-13 14:48 - 2017-12-07 16:24 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2017-12-13 14:48 - 2017-12-07 16:24 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-12-13 14:48 - 2017-12-07 16:24 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-12-13 14:48 - 2017-12-07 16:23 - 005905752 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-12-13 14:48 - 2017-12-07 16:23 - 000677272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-12-13 14:48 - 2017-12-07 16:22 - 001003104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-12-13 14:48 - 2017-12-07 16:22 - 000979352 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-12-13 14:48 - 2017-12-07 16:22 - 000137544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-12-13 14:48 - 2017-12-07 16:22 - 000129432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2017-12-13 14:48 - 2017-12-07 16:21 - 007676296 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-12-13 14:48 - 2017-12-07 16:20 - 001170000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-12-13 14:48 - 2017-12-07 16:19 - 021352136 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-12-13 14:48 - 2017-12-07 16:16 - 001776272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-12-13 14:48 - 2017-12-07 16:16 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-12-13 14:48 - 2017-12-07 16:15 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-12-13 14:48 - 2017-12-07 16:15 - 000721592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-12-13 14:48 - 2017-12-07 16:14 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-12-13 14:48 - 2017-12-07 16:12 - 000401304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2017-12-13 14:48 - 2017-12-07 16:10 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-12-13 14:48 - 2017-12-07 15:58 - 000123512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-12-13 14:48 - 2017-12-07 15:57 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-12-13 14:48 - 2017-12-07 15:56 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-12-13 14:48 - 2017-12-07 15:55 - 001490328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-12-13 14:48 - 2017-12-07 15:55 - 000097144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-12-13 14:48 - 2017-12-07 15:39 - 006092664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-12-13 14:48 - 2017-12-07 15:37 - 001145104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-12-13 14:48 - 2017-12-07 15:36 - 000769096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2017-12-13 14:48 - 2017-12-07 15:34 - 003484840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-12-13 14:48 - 2017-12-07 15:34 - 002192112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-12-13 14:48 - 2017-12-07 15:33 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-12-13 14:48 - 2017-12-07 15:33 - 000592280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2017-12-13 14:48 - 2017-12-07 15:32 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-12-13 14:48 - 2017-12-07 15:31 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-12-13 14:48 - 2017-12-07 15:31 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-12-13 14:48 - 2017-12-07 15:31 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-12-13 14:48 - 2017-12-07 15:29 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KeyboardFilterShim.dll
2017-12-13 14:48 - 2017-12-07 15:23 - 006478528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-12-13 14:48 - 2017-12-07 15:22 - 025245696 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-12-13 14:48 - 2017-12-07 15:13 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-12-13 14:48 - 2017-12-07 15:13 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2017-12-13 14:48 - 2017-12-07 15:12 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2017-12-13 14:48 - 2017-12-07 15:12 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2017-12-13 14:48 - 2017-12-07 15:12 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2017-12-13 14:48 - 2017-12-07 15:11 - 003669504 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-12-13 14:48 - 2017-12-07 15:10 - 018916352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-12-13 14:48 - 2017-12-07 15:10 - 006466048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-12-13 14:48 - 2017-12-07 15:10 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2017-12-13 14:48 - 2017-12-07 15:10 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2017-12-13 14:48 - 2017-12-07 15:10 - 000250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-12-13 14:48 - 2017-12-07 15:10 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2017-12-13 14:48 - 2017-12-07 15:10 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-12-13 14:48 - 2017-12-07 15:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-12-13 14:48 - 2017-12-07 15:09 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2017-12-13 14:48 - 2017-12-07 15:09 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2017-12-13 14:48 - 2017-12-07 15:09 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2017-12-13 14:48 - 2017-12-07 15:09 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2017-12-13 14:48 - 2017-12-07 15:09 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2017-12-13 14:48 - 2017-12-07 15:08 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-12-13 14:48 - 2017-12-07 15:08 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2017-12-13 14:48 - 2017-12-07 15:08 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2017-12-13 14:48 - 2017-12-07 15:08 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-12-13 14:48 - 2017-12-07 15:08 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2017-12-13 14:48 - 2017-12-07 15:08 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-12-13 14:48 - 2017-12-07 15:07 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-12-13 14:48 - 2017-12-07 15:07 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2017-12-13 14:48 - 2017-12-07 15:07 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-13 14:48 - 2017-12-07 15:07 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-12-13 14:48 - 2017-12-07 15:07 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2017-12-13 14:48 - 2017-12-07 15:07 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-12-13 14:48 - 2017-12-07 15:07 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-12-13 14:48 - 2017-12-07 15:06 - 023652864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-12-13 14:48 - 2017-12-07 15:06 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2017-12-13 14:48 - 2017-12-07 15:06 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-12-13 14:48 - 2017-12-07 15:06 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2017-12-13 14:48 - 2017-12-07 15:06 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2017-12-13 14:48 - 2017-12-07 15:05 - 006037504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 001670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2017-12-13 14:48 - 2017-12-07 15:05 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2017-12-13 14:48 - 2017-12-07 15:05 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2017-12-13 14:48 - 2017-12-07 15:04 - 003678208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-12-13 14:48 - 2017-12-07 15:04 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2017-12-13 14:48 - 2017-12-07 15:04 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2017-12-13 14:48 - 2017-12-07 15:04 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-13 14:48 - 2017-12-07 15:03 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2017-12-13 14:48 - 2017-12-07 15:02 - 007545344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-12-13 14:48 - 2017-12-07 15:02 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-12-13 14:48 - 2017-12-07 15:02 - 002117632 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-12-13 14:48 - 2017-12-07 15:02 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-12-13 14:48 - 2017-12-07 15:02 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-12-13 14:48 - 2017-12-07 15:02 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2017-12-13 14:48 - 2017-12-07 15:01 - 008097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-12-13 14:48 - 2017-12-07 15:01 - 004592640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-12-13 14:48 - 2017-12-07 15:01 - 001980928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-12-13 14:48 - 2017-12-07 15:01 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-12-13 14:48 - 2017-12-07 15:01 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2017-12-13 14:48 - 2017-12-07 15:00 - 004740608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-12-13 14:48 - 2017-12-07 15:00 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-12-13 14:48 - 2017-12-07 15:00 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-12-13 14:48 - 2017-12-07 14:59 - 003121664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-12-13 14:48 - 2017-12-07 14:59 - 002105856 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-12-13 14:48 - 2017-12-07 14:59 - 001666048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-12-13 14:48 - 2017-12-07 14:59 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-12-13 14:48 - 2017-12-07 14:59 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-12-13 14:48 - 2017-12-07 14:58 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-12-13 14:48 - 2017-12-07 14:58 - 003211776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-12-13 14:48 - 2017-12-07 14:58 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-12-13 14:48 - 2017-12-07 14:58 - 001353728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-12-13 14:48 - 2017-12-07 14:58 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-12-13 14:48 - 2017-12-07 14:57 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-12-13 14:48 - 2017-12-07 14:57 - 001487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-12-13 14:48 - 2017-12-07 14:56 - 002666496 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-12-13 14:48 - 2017-12-07 14:56 - 001739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-12-13 14:48 - 2017-12-07 14:56 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-12-13 14:48 - 2017-12-07 14:54 - 002510336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-12-13 14:48 - 2017-12-07 14:54 - 001570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-12-13 14:48 - 2017-12-07 14:54 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-12-13 14:48 - 2017-11-26 13:35 - 017084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2017-12-13 14:48 - 2017-11-26 13:32 - 021754368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2017-12-13 14:48 - 2017-11-26 13:15 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-12-13 14:48 - 2017-11-26 09:43 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2017-12-13 14:48 - 2017-11-26 06:48 - 001200536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-12-13 14:48 - 2017-11-26 06:47 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-12-13 14:48 - 2017-11-26 06:45 - 001642520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2017-12-13 14:48 - 2017-11-26 06:45 - 000319352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-12-13 14:48 - 2017-11-26 06:45 - 000264040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-12-13 14:48 - 2017-11-26 06:45 - 000198888 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-12-13 14:48 - 2017-11-26 06:41 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-12-13 14:48 - 2017-11-26 06:38 - 001636376 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-12-13 14:48 - 2017-11-26 06:37 - 001277848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-12-13 14:48 - 2017-11-26 06:35 - 001090440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-12-13 14:48 - 2017-11-26 06:35 - 000924136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-12-13 14:48 - 2017-11-26 06:33 - 002395032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-12-13 14:48 - 2017-11-26 06:33 - 001208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-12-13 14:48 - 2017-11-26 06:33 - 000471960 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-12-13 14:48 - 2017-11-26 06:33 - 000398744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2017-12-13 14:48 - 2017-11-26 06:32 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-12-13 14:48 - 2017-11-26 06:32 - 000082840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2017-12-13 14:48 - 2017-11-26 06:31 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-12-13 14:48 - 2017-11-26 06:30 - 001488792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-12-13 14:48 - 2017-11-26 06:29 - 003010720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-12-13 14:48 - 2017-11-26 06:29 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-12-13 14:48 - 2017-11-26 06:29 - 000891800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-12-13 14:48 - 2017-11-26 06:29 - 000840440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-12-13 14:48 - 2017-11-26 06:29 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-12-13 14:48 - 2017-11-26 06:29 - 000703536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-12-13 14:48 - 2017-11-26 06:29 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-12-13 14:48 - 2017-11-26 06:28 - 001259344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-12-13 14:48 - 2017-11-26 06:28 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2017-12-13 14:48 - 2017-11-26 06:28 - 000713624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-12-13 14:48 - 2017-11-26 06:28 - 000495000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-12-13 14:48 - 2017-11-26 06:28 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2017-12-13 14:48 - 2017-11-26 06:27 - 002446744 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-12-13 14:48 - 2017-11-26 06:27 - 002412168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-12-13 14:48 - 2017-11-26 06:27 - 001413760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-12-13 14:48 - 2017-11-26 06:27 - 000464408 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-12-13 14:48 - 2017-11-26 06:27 - 000230296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-12-13 14:48 - 2017-11-26 06:26 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-12-13 14:48 - 2017-11-26 06:26 - 000048112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-12-13 14:48 - 2017-11-26 06:25 - 000902416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-12-13 14:48 - 2017-11-26 06:23 - 001694224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-12-13 14:48 - 2017-11-26 06:23 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2017-12-13 14:48 - 2017-11-26 06:23 - 000754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2017-12-13 14:48 - 2017-11-26 06:22 - 000404888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 002220952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 001778584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 001628056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 001585376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 001420696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 000831384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 000819096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-12-13 14:48 - 2017-11-26 06:21 - 000813976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 000744856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 000669592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 000654048 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-12-13 14:48 - 2017-11-26 06:21 - 000645528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-12-13 14:48 - 2017-11-26 06:20 - 000615768 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-12-13 14:48 - 2017-11-26 06:20 - 000519152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-12-13 14:48 - 2017-11-26 05:57 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-12-13 14:48 - 2017-11-26 05:55 - 001289216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-12-13 14:48 - 2017-11-26 05:55 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2017-12-13 14:48 - 2017-11-26 05:55 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2017-12-13 14:48 - 2017-11-26 05:55 - 000211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-12-13 14:48 - 2017-11-26 05:55 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2017-12-13 14:48 - 2017-11-26 05:55 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2017-12-13 14:48 - 2017-11-26 05:54 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-12-13 14:48 - 2017-11-26 05:54 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-12-13 14:48 - 2017-11-26 05:48 - 012829696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-12-13 14:48 - 2017-11-26 05:47 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-12-13 14:48 - 2017-11-26 05:43 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-12-13 14:48 - 2017-11-26 05:36 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2017-12-13 14:48 - 2017-11-26 05:36 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-12-13 14:48 - 2017-11-26 05:36 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2017-12-13 14:48 - 2017-11-26 05:36 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2017-12-13 14:48 - 2017-11-26 05:35 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2017-12-13 14:48 - 2017-11-26 05:35 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2017-12-13 14:48 - 2017-11-26 05:34 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2017-12-13 14:48 - 2017-11-26 05:33 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2017-12-13 14:48 - 2017-11-26 05:31 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-12-13 14:48 - 2017-11-26 05:31 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-12-13 14:48 - 2017-11-26 05:31 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-12-13 14:48 - 2017-11-26 05:31 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2017-12-13 14:48 - 2017-11-26 05:29 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2017-12-13 14:48 - 2017-11-26 05:29 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-12-13 14:48 - 2017-11-26 05:29 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2017-12-13 14:48 - 2017-11-26 05:29 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2017-12-13 14:48 - 2017-11-26 05:28 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2017-12-13 14:48 - 2017-11-26 05:26 - 000830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2017-12-13 14:48 - 2017-11-26 05:26 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-12-13 14:48 - 2017-11-26 05:26 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-12-13 14:48 - 2017-11-26 05:25 - 001425408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-12-13 14:48 - 2017-11-26 05:25 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-12-13 14:48 - 2017-11-26 05:25 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-12-13 14:48 - 2017-11-26 05:25 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2017-12-13 14:48 - 2017-11-26 05:25 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-12-13 14:48 - 2017-11-26 05:23 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-12-13 14:48 - 2017-11-26 05:22 - 000720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-12-13 14:48 - 2017-11-26 05:19 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-12-13 14:48 - 2017-11-26 05:19 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-12-13 14:48 - 2017-11-26 05:19 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2017-12-13 14:48 - 2017-11-26 05:18 - 003186688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2017-12-13 14:48 - 2017-11-26 05:18 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-12-13 14:48 - 2017-11-26 05:18 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-12-13 14:48 - 2017-11-26 05:17 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-12-13 14:48 - 2017-11-26 05:17 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-12-13 14:48 - 2017-11-26 05:17 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-12-13 14:48 - 2017-11-26 05:08 - 017159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-12-13 14:48 - 2017-11-26 05:05 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-12-13 14:48 - 2017-11-26 05:04 - 003578368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-12-13 14:48 - 2017-11-26 05:04 - 002596352 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-12-13 14:48 - 2017-11-26 05:03 - 004772352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-12-13 14:48 - 2017-11-26 05:03 - 002783744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-12-13 14:48 - 2017-11-26 05:01 - 003163648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-12-13 14:48 - 2017-11-26 05:00 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-12-13 14:48 - 2017-11-26 04:59 - 004814848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-12-13 14:48 - 2017-11-26 04:59 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-12-13 14:48 - 2017-11-26 04:59 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-12-13 14:48 - 2017-11-26 04:58 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2017-12-13 14:48 - 2017-11-26 04:48 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2017-12-13 14:48 - 2017-11-26 04:48 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2017-12-13 14:48 - 2017-11-26 04:21 - 001474680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2017-12-13 14:48 - 2017-11-26 04:21 - 001432816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-12-13 14:48 - 2017-11-26 04:02 - 001124760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2017-12-13 14:48 - 2017-11-26 04:01 - 002339296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-12-13 14:48 - 2017-11-26 04:01 - 000791960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-12-13 14:48 - 2017-11-26 04:01 - 000746904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2017-12-13 14:48 - 2017-11-26 04:01 - 000590944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-12-13 14:48 - 2017-11-26 04:01 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-12-13 14:48 - 2017-11-26 04:01 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-12-13 14:48 - 2017-11-26 04:00 - 001990160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-12-13 14:48 - 2017-11-26 04:00 - 000353848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-12-13 14:48 - 2017-11-26 03:59 - 000703568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-12-13 14:48 - 2017-11-26 03:58 - 001148216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-12-13 14:48 - 2017-11-26 03:58 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2017-12-13 14:48 - 2017-11-26 03:57 - 001490840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2017-12-13 14:48 - 2017-11-26 03:51 - 001558856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-12-13 14:48 - 2017-11-26 03:51 - 000661664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2017-12-13 14:48 - 2017-11-26 03:41 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2017-12-13 14:48 - 2017-11-26 03:41 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-12-13 14:48 - 2017-11-26 03:41 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2017-12-13 14:48 - 2017-11-26 03:41 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2017-12-13 14:48 - 2017-11-26 03:41 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2017-12-13 14:48 - 2017-11-26 03:40 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2017-12-13 14:48 - 2017-11-26 03:38 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll
2017-12-13 14:48 - 2017-11-26 03:37 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-12-13 14:48 - 2017-11-26 03:36 - 013703168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-12-13 14:48 - 2017-11-26 03:36 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-12-13 14:48 - 2017-11-26 03:36 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2017-12-13 14:48 - 2017-11-26 03:36 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-12-13 14:48 - 2017-11-26 03:35 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2017-12-13 14:48 - 2017-11-26 03:35 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2017-12-13 14:48 - 2017-11-26 03:35 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-12-13 14:48 - 2017-11-26 03:35 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2017-12-13 14:48 - 2017-11-26 03:32 - 011923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-12-13 14:48 - 2017-11-26 03:31 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-12-13 14:48 - 2017-11-26 03:31 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2017-12-13 14:48 - 2017-11-26 03:30 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-12-13 14:48 - 2017-11-26 03:30 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2017-12-13 14:48 - 2017-11-26 03:29 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-12-13 14:48 - 2017-11-26 03:29 - 000823808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-12-13 14:48 - 2017-11-26 03:28 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-12-13 14:48 - 2017-11-26 03:24 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2017-12-13 14:48 - 2017-11-26 03:24 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
2017-12-13 14:48 - 2017-11-19 00:35 - 003331520 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-12-13 14:48 - 2017-11-18 19:20 - 002491112 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2017-12-11 11:57 - 2017-12-11 11:57 - 000002168 _____ C:\Users\Public\Desktop\Canon MP Navigator EX 4.1.lnk
2017-12-11 11:56 - 2017-12-11 11:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2017-12-11 11:56 - 2017-12-11 11:57 - 000000000 ____D C:\Program Files (x86)\Canon
2017-12-11 11:56 - 2017-12-11 11:56 - 000001849 _____ C:\Users\Public\Desktop\Canon My Printer.lnk
2017-12-11 11:56 - 2017-12-11 11:56 - 000000000 ____D C:\Program Files\Canon
2017-12-11 07:53 - 2017-12-11 07:53 - 000002735 _____ C:\Users\cbff3\Unigine_Valley_Benchmark_1.0_20171211_0752.html
2017-12-10 15:53 - 2017-12-10 15:53 - 000000000 ____D C:\Users\cbff3\Desktop\ARMA 3 STUFF
2017-12-08 19:44 - 2017-10-25 02:11 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2017-12-08 19:44 - 2017-10-25 01:57 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2017-12-08 19:44 - 2017-10-24 21:41 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2017-12-08 19:44 - 2017-10-24 21:40 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-12-08 19:44 - 2017-10-24 21:40 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2017-12-08 19:44 - 2017-10-24 21:39 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-12-08 19:44 - 2017-10-24 21:39 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-12-08 19:44 - 2017-10-24 21:37 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-12-08 19:44 - 2017-10-24 21:37 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-12-08 19:44 - 2017-10-24 21:32 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-12-08 19:44 - 2017-10-24 21:32 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-12-08 19:44 - 2017-10-24 21:31 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2017-12-08 19:44 - 2017-10-24 21:30 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-12-08 19:44 - 2017-10-24 21:30 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-12-08 19:44 - 2017-10-24 21:29 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-12-08 19:44 - 2017-10-24 21:29 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-12-08 19:44 - 2017-10-24 21:27 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-12-08 19:44 - 2017-10-24 21:27 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-12-08 19:44 - 2017-10-24 21:20 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-12-08 19:44 - 2017-10-24 20:52 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-12-08 19:44 - 2017-10-24 20:30 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-12-08 19:44 - 2017-10-24 20:28 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-12-08 19:44 - 2017-10-24 20:27 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-12-08 19:44 - 2017-10-24 20:27 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-12-08 19:44 - 2017-10-24 20:27 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-12-08 19:44 - 2017-10-24 20:22 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-12-08 19:44 - 2017-10-24 20:22 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-12-08 19:44 - 2017-10-24 20:19 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
2017-12-08 19:44 - 2017-10-24 20:18 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
2017-12-08 19:44 - 2017-10-24 20:18 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2017-12-08 19:44 - 2017-10-24 20:18 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2017-12-08 19:44 - 2017-10-24 20:18 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2017-12-08 19:44 - 2017-10-24 20:16 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2017-12-08 19:44 - 2017-10-24 20:16 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2017-12-08 19:44 - 2017-10-24 20:14 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2017-12-08 19:44 - 2017-10-24 20:13 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-12-08 19:44 - 2017-10-24 20:13 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-12-08 19:44 - 2017-10-24 20:11 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-12-08 19:44 - 2017-10-24 20:09 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-12-08 19:44 - 2017-10-24 20:08 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-12-08 19:44 - 2017-10-24 20:08 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-12-08 19:44 - 2017-10-24 20:08 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2017-12-08 19:44 - 2017-10-24 20:07 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2017-12-08 19:44 - 2017-10-24 20:05 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2017-12-08 19:44 - 2017-10-24 20:04 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-12-08 19:44 - 2017-10-24 20:04 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2017-12-08 19:44 - 2017-10-24 20:02 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-12-08 19:44 - 2017-10-24 20:01 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-12-08 19:44 - 2017-10-24 19:58 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-12-08 19:44 - 2017-10-24 19:54 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2017-12-08 19:44 - 2017-10-19 22:08 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-12-08 19:06 - 2017-12-08 19:06 - 000000000 ____D C:\Users\cbff3\AppData\Roaming\11bitstudios
2017-12-08 18:27 - 2017-12-08 18:27 - 000000202 _____ C:\Users\cbff3\Desktop\This War of Mine.url
2017-12-08 15:20 - 2017-12-15 17:23 - 001032688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2017-12-08 15:20 - 2017-12-05 14:17 - 001989944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438859.dll
2017-12-08 15:20 - 2017-12-05 14:17 - 001674736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438859.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-01-07 10:59 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\rescache
2018-01-07 10:59 - 2017-09-29 06:44 - 000000000 ____D C:\WINDOWS\INF
2018-01-07 10:49 - 2017-05-25 09:20 - 000000000 ____D C:\Users\cbff3\AppData\LocalLow\Mozilla
2018-01-07 09:15 - 2017-09-29 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-01-07 09:14 - 2017-11-02 06:15 - 001804332 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-01-07 09:14 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-01-07 09:09 - 2017-11-02 06:09 - 000003074 _____ C:\WINDOWS\System32\Tasks\GPU Tweak II
2018-01-07 09:09 - 2017-05-18 09:41 - 000000000 ____D C:\ProgramData\NVIDIA
2018-01-07 09:08 - 2017-11-02 06:05 - 000257664 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-01-07 09:08 - 2017-08-11 20:47 - 000000000 ____D C:\Program Files\Trust.Zone VPN Client
2018-01-07 09:07 - 2017-11-02 06:09 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-01-07 09:07 - 2017-09-29 01:45 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2018-01-07 09:06 - 2017-09-29 06:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-01-07 09:06 - 2017-09-29 06:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-01-07 09:06 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\TextInput
2018-01-07 09:06 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-01-07 09:06 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-01-07 09:06 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\system32\migwiz
2018-01-07 09:06 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-01-07 09:06 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\Provisioning
2018-01-07 09:06 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2018-01-07 09:06 - 2017-09-29 01:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-01-07 08:58 - 2017-05-18 10:31 - 000000000 ____D C:\Users\cbff3\AppData\Local\CrashDumps
2018-01-07 02:24 - 2017-08-09 10:22 - 000000000 ____D C:\Users\cbff3\AppData\Roaming\TS3Client
2018-01-07 00:35 - 2017-11-02 06:56 - 000000000 ___RD C:\Users\cbff3\3D Objects
2018-01-07 00:35 - 2017-05-18 09:40 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-01-06 11:20 - 2017-11-02 06:05 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-01-06 11:19 - 2017-03-18 14:03 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2018-01-06 10:36 - 2017-06-17 10:32 - 000000000 ____D C:\Users\cbff3\AppData\Local\Arma 3 Launcher
2018-01-06 09:52 - 2017-06-17 10:49 - 000000000 ____D C:\Users\cbff3\AppData\Local\Arma 3
2018-01-06 09:44 - 2017-09-29 06:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-01-06 09:44 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-01-05 20:08 - 2017-11-02 06:06 - 000000000 ____D C:\Users\cbff3
2018-01-05 12:41 - 2017-05-25 09:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-01-05 12:41 - 2017-05-25 09:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-01-05 08:46 - 2017-05-25 12:15 - 000000000 ____D C:\Program Files (x86)\Driver Support
2018-01-05 00:41 - 2017-05-25 09:20 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2018-01-05 00:33 - 2017-05-25 12:38 - 000000000 ____D C:\Users\cbff3\AppData\Local\Adobe
2018-01-04 13:40 - 2017-10-01 20:09 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-01-04 13:40 - 2017-10-01 20:09 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-01-01 23:27 - 2017-05-18 09:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-01-01 23:27 - 2017-05-18 09:41 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-01-01 23:26 - 2017-05-18 10:10 - 000000000 ____D C:\Users\cbff3\AppData\Local\NVIDIA
2017-12-31 00:33 - 2017-05-25 06:33 - 000001483 _____ C:\Users\cbff3\Desktop\PPW.txt
2017-12-19 17:08 - 2017-09-23 12:08 - 000000000 ____D C:\Users\cbff3\AppData\Roaming\vlc
2017-12-18 00:56 - 2017-08-06 17:11 - 000000000 ____D C:\Users\cbff3\AppData\Local\ElevatedDiagnostics
2017-12-17 23:02 - 2017-08-09 10:22 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-12-15 17:23 - 2017-09-21 23:24 - 004485376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2017-12-15 17:23 - 2017-09-21 23:24 - 003817584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2017-12-15 17:23 - 2017-09-21 23:24 - 000048442 _____ C:\WINDOWS\system32\nvinfo.pb
2017-12-15 16:15 - 2017-05-18 09:41 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-12-15 15:34 - 2017-05-18 09:41 - 005964688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-12-15 15:34 - 2017-05-18 09:41 - 002589168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-12-15 15:34 - 2017-05-18 09:41 - 001767408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-12-15 15:34 - 2017-05-18 09:41 - 000608056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-12-15 15:34 - 2017-05-18 09:41 - 000450544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-12-15 15:34 - 2017-05-18 09:41 - 000123704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-12-15 15:34 - 2017-05-18 09:41 - 000082928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-12-14 11:17 - 2017-05-18 09:41 - 007917671 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-12-13 23:24 - 2017-05-20 13:16 - 000000000 ____D C:\Users\cbff3\AppData\Roaming\Origin
2017-12-13 23:24 - 2017-05-20 13:16 - 000000000 ____D C:\ProgramData\Origin
2017-12-13 20:47 - 2017-05-21 21:19 - 000001419 _____ C:\Users\Public\Desktop\The Sims 4.lnk
2017-12-13 20:38 - 2017-05-20 13:16 - 000000000 ____D C:\Program Files (x86)\Origin
2017-12-13 19:00 - 2017-05-18 13:03 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-12-13 18:59 - 2017-10-11 06:54 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-13 18:59 - 2017-05-18 13:03 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-12-13 17:39 - 2017-09-29 07:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-12-13 17:39 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-12-13 17:39 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-12-13 17:39 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-12-13 17:39 - 2017-09-29 06:46 - 000000000 ____D C:\Program Files\Windows Defender
2017-12-13 17:39 - 2017-09-29 06:46 - 000000000 ____D C:\PerfLogs
2017-12-13 14:49 - 2017-09-29 06:42 - 001587200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-12-13 14:49 - 2017-09-29 06:41 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-12-13 14:49 - 2017-09-29 06:41 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2017-12-13 14:49 - 2017-09-29 06:41 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2017-12-13 14:47 - 2017-11-02 06:06 - 000000000 ____D C:\Users\cbff3\AppData\Local\Packages
2017-12-13 14:42 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-12-13 14:42 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-12-11 11:58 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-12-11 11:52 - 2017-05-18 09:40 - 000000000 ____D C:\Users\cbff3\AppData\Local\VirtualStore
2017-12-11 11:49 - 2017-09-29 06:46 - 000000000 __RSD C:\WINDOWS\media
2017-12-11 07:49 - 2017-09-23 09:53 - 001065984 _____ C:\Users\cbff3\AppData\Local\file__0.localstorage
2017-12-10 08:11 - 2017-08-08 19:57 - 000000022 _____ C:\WINDOWS\GPU-Z.INI
2017-12-09 07:55 - 2017-10-07 13:26 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-12-09 02:12 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-12-08 19:39 - 2017-11-02 06:09 - 000003356 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-910515035-2020243001-2686619267-1001
2017-12-08 19:39 - 2017-05-18 09:41 - 000002363 _____ C:\Users\cbff3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-12-08 19:39 - 2017-05-18 09:41 - 000000000 ___RD C:\Users\cbff3\OneDrive
2017-12-08 19:38 - 2017-05-18 09:41 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-12-08 15:51 - 2017-12-03 13:26 - 000000000 ____D C:\Users\cbff3\AppData\Roaming\Nugster
2017-12-08 15:10 - 2017-11-02 06:09 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 15:10 - 2017-11-02 06:09 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 15:10 - 2017-11-02 06:09 - 000003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 15:10 - 2017-11-02 06:09 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 15:10 - 2017-11-02 06:09 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 15:10 - 2017-11-02 06:09 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 15:10 - 2017-11-02 06:09 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 15:10 - 2017-11-02 06:09 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 15:10 - 2017-05-18 10:10 - 000001485 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-12-08 15:10 - 2017-05-18 09:41 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-12-08 14:28 - 2017-05-18 13:04 - 000545440 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

==================== Files in the root of some directories =======

2017-06-24 07:06 - 2017-06-24 23:04 - 000000195 _____ () C:\Users\cbff3\FlightBeam_Denver International - HD.reg
2017-05-22 23:24 - 2017-05-22 23:33 - 000000179 _____ () C:\Users\cbff3\FSDreamTeam_GSX.reg
2017-05-23 01:49 - 2017-06-23 21:35 - 000000181 _____ () C:\Users\cbff3\FSDreamTeam_XPOI.reg
2017-06-21 18:24 - 2017-06-22 11:25 - 000000199 _____ () C:\Users\cbff3\QualityWings_Ultimate 757 Collection.reg
2017-12-03 13:26 - 2017-12-03 13:26 - 000095085 _____ () C:\Users\cbff3\AppData\Roaming\DefaultAlbumArt.png
2017-12-03 13:26 - 2017-12-03 13:26 - 000165847 _____ () C:\Users\cbff3\AppData\Roaming\DefaultArtistArt.png
2017-12-03 13:26 - 2017-12-03 13:26 - 000164313 _____ () C:\Users\cbff3\AppData\Roaming\DefaultPlaylistArt.png
2017-12-03 13:26 - 2017-12-03 13:26 - 000095085 _____ () C:\Users\cbff3\AppData\Roaming\DefaultTrackArt.png
2017-11-05 08:59 - 2017-11-05 08:59 - 000000284 _____ () C:\Users\cbff3\AppData\Roaming\OpenSceneryX Installer.plist
2017-11-04 18:47 - 2017-11-10 16:38 - 000000065 _____ () C:\Users\cbff3\AppData\Roaming\WED.prefs
2017-09-23 09:53 - 2017-12-11 07:49 - 001065984 _____ () C:\Users\cbff3\AppData\Local\file__0.localstorage
2018-01-05 00:33 - 2018-01-05 00:33 - 001202160 _____ (Adobe Systems Incorporated) C:\Users\cbff3\AppData\Local\flashplugin.exe
2017-08-05 13:47 - 2017-11-06 00:04 - 000007597 _____ () C:\Users\cbff3\AppData\Local\Resmon.ResmonCfg
2017-08-12 05:26 - 2017-11-29 23:43 - 000000015 _____ () C:\Users\cbff3\AppData\Local\X-Plane_drm_11.prf
2017-08-12 05:25 - 2017-08-12 05:25 - 000000039 _____ () C:\Users\cbff3\AppData\Local\x-plane_install_11.txt

Some files in TEMP:
====================
2018-01-06 11:04 - 2017-10-24 21:37 - 001954048 _____ (Microsoft Corporation) C:\Users\cbff3\AppData\Local\Temp\dllnt_dump.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-12-29 18:48

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02.01.2018
Ran by cbff3 (07-01-2018 11:05:06)
Running from C:\Users\cbff3\Desktop
Windows 10 Pro Version 1709 16299.125 (X64) (2017-11-02 13:11:23)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-910515035-2020243001-2686619267-500 - Administrator - Disabled)
cbff3 (S-1-5-21-910515035-2020243001-2686619267-1001 - Administrator - Enabled) => C:\Users\cbff3
DefaultAccount (S-1-5-21-910515035-2020243001-2686619267-503 - Limited - Disabled)
Guest (S-1-5-21-910515035-2020243001-2686619267-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-910515035-2020243001-2686619267-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Active Sky 2016 for FSX (HKLM-x32\...\{25567157-5441-4731-9703-46c506d029c7}_is1) (Version: 1.0.6255.27664 - HiFi Technologies, Inc.)
Active Sky Cloud Art SP1 (HKLM-x32\...\{07caf7e6-e5ca-445a-855d-635155519848}_is1) (Version: 1.0.6239.27110 - HiFi Technologies, Inc.)
Active Sky for P3Dv4 (HKLM-x32\...\{4cb690b0-f4e3-404c-babc-cc780cc6fcb1}_is1) (Version: 1.0.6497.22226 - HiFi Technologies, Inc.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe Flash Player 28 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 28.0.0.126 - Adobe Systems Incorporated)
Aero Commander 500S Shrike (HKLM-x32\...\Aero Commander 500S Shrikev1.2) (Version: v1.2 - Carenado)
Aerosoft's - Airbus A318-A319 - FSX STEAM Edition (HKLM-x32\...\Airbus A318-A319 - FSX STEAM Edition) (Version: 1.31 - Aerosoft)
Aerosoft's - Airbus A320-A321 - FSX STEAM Edition (HKLM-x32\...\Airbus A320-A321 - FSX STEAM Edition) (Version: 1.31 - Aerosoft)
aerosoft's - FlightSim Commander 9 (HKLM-x32\...\{F941AABE-E868-42D9-9F38-884250F7898A}) (Version: C: - aerosoft)
AirHauler 2 (HKLM-x32\...\{F60FBDCF-DEA7-406E-B68D-E8F5464CCD77}) (Version: 1.00.000 - Just Flight)
Apple Application Support (32-bit) (HKLM-x32\...\{E92BB800-BCC5-4C25-8102-AC2C3B7C7C1E}) (Version: 5.5 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{9C912B1E-06DD-43EF-BB2B-45CB2C88BAAE}) (Version: 5.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
ASConnect for P3Dv4 Installer (HKLM-x32\...\{dd86cb93-47a1-4936-95c1-fb1e25c393b8}_is1) (Version: 1.0.0.34 - HiFi Technologies, Inc.)
ASUS GPU Tweak (HKLM-x32\...\{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.8.3.0 - ASUSTek COMPUTER INC.) Hidden
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.8.3.0 - ASUSTek COMPUTER INC.)
ASUS GPU TweakII (HKLM-x32\...\{0075AAC2-EA9F-490E-83F7-5D5F81EB2A43}) (Version: 1.5.0.5 - ASUSTek COMPUTER INC.) Hidden
ASUS GPU TweakII (HKLM-x32\...\InstallShield_{0075AAC2-EA9F-490E-83F7-5D5F81EB2A43}) (Version: 1.5.0.5 - ASUSTek COMPUTER INC.)
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.031 - ASUSTek Computer Inc.)
AURA (HKLM-x32\...\{5899CD4F-8764-4303-A0D9-C60A62CFC24F}) (Version: 1.05.16 - ASUSTeK Computer Inc.)
BitTorrent (HKU\S-1-5-21-910515035-2020243001-2686619267-1001\...\BitTorrent) (Version: 7.10.0.43917 - BitTorrent Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
C337 Skymaster (HKLM-x32\...\C337 Skymasterver 2.1) (Version: ver 2.1 - Carenado)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
Canon MP Navigator EX 4.1 (HKLM-x32\...\MP Navigator EX 4.1) (Version: - )
Canon MX360 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX360_series) (Version: - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
ConBuilder (HKLM-x32\...\ConBuilder) (Version: 6.2.3.0 - ConBuilder)
CPUID ROG CPU-Z 1.82.2 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.82.2 - CPUID, Inc.)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
EVE Online (HKU\S-1-5-21-910515035-2020243001-2686619267-1001\...\{e83ffc45-d1da-4622-9455-c71bf37d146b}) (Version: 1.0.0 - CCP)
Freight Sound Package 1.0.7 (HKLM-x32\...\Freight Sound Package 1.0.7) (Version: 1.0.7 - Tigertrains.com)
FS2Crew: PMDG 777 (HKLM-x32\...\FS2Crew: PMDG 777) (Version: - )
FSCaptain Version 1.07.02 (HKU\S-1-5-21-910515035-2020243001-2686619267-1001\...\FSCaptain Version 1.07.02) (Version: - )
FSDreamTeam GSX FSX-SE (HKLM-x32\...\FSDreamTeam GSX FSX-SE_is1) (Version: 1.9.12 - VIRTUALI Sagl)
FSDreamTeam GSX version 2.0.0.1 (HKLM-x32\...\FSDreamTeam GSX_is1) (Version: 2.0.0.1 - VIRTUALI Sagl)
FSDreamTeam XPOI FSX-SE (HKLM-x32\...\FSDreamTeam XPOI FSX-SE_is1) (Version: 2.0.0 - VIRTUALI Sagl)
FSFlyingSchool Pro 2016 (HKLM-x32\...\FSFlyingSchool Pro 2016) (Version: - )
FSGenesis North America Terrain Mesh for FSX -- Eastern Rockies (HKLM-x32\...\North America Terrain Mesh for FSX -- Eastern Rockies2.0.0) (Version: 2.0.0 - FSGenesis)
FSGenesis North America Terrain Mesh for FSX -- Northeast (HKLM-x32\...\North America Terrain Mesh for FSX -- Northeast2.0.0) (Version: 2.0.0 - FSGenesis)
FSGenesis North America Terrain Mesh for FSX -- Plains (HKLM-x32\...\North America Terrain Mesh for FSX -- Plains2.0.0) (Version: 2.0.0 - FSGenesis)
FSGenesis North America Terrain Mesh for FSX -- Southeast (HKLM-x32\...\North America Terrain Mesh for FSX -- Southeast2.0.0) (Version: 2.0.0 - FSGenesis)
FSGenesis North America Terrain Mesh for FSX -- West Coast (HKLM-x32\...\North America Terrain Mesh for FSX -- West Coast2.0.0) (Version: 2.0.0 - FSGenesis)
FSGenesis North America Terrain Mesh for FSX -- Western Rockies (HKLM-x32\...\North America Terrain Mesh for FSX -- Western Rockies2.0.0) (Version: 2.0.0 - FSGenesis)
FSX Missions - A321 Lufthansa (HKLM-x32\...\FSX Missions - A321 Lufthansa) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.132 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{DE706580-82C7-4B1A-ABA4-EA48AC15B045}) (Version: 7.1.8.3036 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
GoPro Studio (HKLM-x32\...\{BE06FF1A-83A0-42F2-913E-6E405393145C}) (Version: 5.12.5383 - GoPro, Inc.) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4534 - Intel Corporation)
Intel® Software Guard Extensions Platform Software (HKLM-x32\...\ARP_for_prd_SGX_1.8.106.40803) (Version: 1.8.106.40803 - Intel Corporation)
iTunes (HKLM\...\{F0C7385A-9D20-45F3-8101-05D383885180}) (Version: 12.6.1.25 - Apple Inc.)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Kinect for Windows Speech Recognition Language Pack (en-AU) (HKLM-x32\...\{48CEC0A3-AE10-4EE3-AC62-76D3D58792E5}) (Version: 11.0.7400.336 - Microsoft Corporation)
Kinect for Windows Speech Recognition Language Pack (en-CA) (HKLM-x32\...\{9C5505DA-F9C1-46CB-9F8F-AC38F8EA518A}) (Version: 11.0.7400.336 - Microsoft Corporation)
Kinect for Windows Speech Recognition Language Pack (en-GB) (HKLM-x32\...\{A0186231-0A8B-455A-8A25-B64AABCC11A6}) (Version: 11.0.7400.336 - Microsoft Corporation)
Kinect for Windows Speech Recognition Language Pack (en-IE) (HKLM-x32\...\{998D5259-3BED-4710-98FF-D63387B5429E}) (Version: 11.0.7400.336 - Microsoft Corporation)
Kinect for Windows Speech Recognition Language Pack (en-NZ) (HKLM-x32\...\{07FC9CAD-FCEC-4186-BB83-EF7CCC9372BA}) (Version: 11.0.7400.336 - Microsoft Corporation)
Kinect for Windows Speech Recognition Language Pack (en-US) (HKLM-x32\...\{8AAA44BB-487E-4D01-AF76-484ACB90DBFE}) (Version: 11.0.7400.336 - Microsoft Corporation)
King Air B350i (HKLM-x32\...\King Air B350iver 1.0FSX) (Version: ver 1.0 - Carenado)
King Air B350i (HKLM-x32\...\King Air B350iver 1.0FSXSE) (Version: ver 1.0 - Carenado)
Logitech Gaming Software 8.96 (HKLM\...\Logitech Gaming Software) (Version: 8.96.81 - Logitech Inc.)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
MegaSceneryEarth Colorado 001 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 002 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 003 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 004 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 005 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 006 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 007 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 008 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 009 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 010 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 012 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 013 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 013 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 014 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 014 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 015 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 015 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 016 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 016 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 017 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 017 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 018 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 018 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 019 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 019 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 020 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 020 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 021 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 021 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 022 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 022 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 023 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 023 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 024 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 024 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 025 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 025 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 026 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 026 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 027 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 027 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 028 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 028 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 029 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 029 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 030 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 030 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 031 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 031 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 032 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 032 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 033 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 033 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 034 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 034 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado 035 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado 035 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Colorado Charts 2.0 (HKLM-x32\...\MegaSceneryEarth Colorado Charts 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 001 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 002 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 003 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 004 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 005 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 006 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 007 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 008 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 009 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 010 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 011 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 012 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 013 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 013 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 014 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 014 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 015 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 015 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 016 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 016 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 017 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 017 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 018 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 018 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 019 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 019 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 020 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 020 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 021 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 021 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 022 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 022 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 023 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 023 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 024 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 024 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 025 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 025 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 026 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 026 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 027 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 027 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 028 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 028 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 029 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 029 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 030 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 030 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Denver Ultra Res 031 2.0 (HKLM-x32\...\MegaSceneryEarth Denver Ultra Res 031 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 001 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 002 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 003 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 004 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 005 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 006 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 007 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 008 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 009 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 010 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 011 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Seattle Ultra Res 012 2.0 (HKLM-x32\...\MegaSceneryEarth Seattle Ultra Res 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 001 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 002 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 003 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 004 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 005 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 006 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 007 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 008 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 009 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 010 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 011 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 012 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 013 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 013 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 014 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 014 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 015 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 015 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 016 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 016 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 017 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 017 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 018 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 018 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 019 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 019 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 020 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 020 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 021 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 021 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 022 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 022 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 023 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 023 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 024 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 024 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 025 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 025 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 026 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 026 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 027 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 027 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 028 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 028 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 029 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 029 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington 030 2.0 (HKLM-x32\...\MegaSceneryEarth Washington 030 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Washington Charts 2.0 (HKLM-x32\...\MegaSceneryEarth Washington Charts 2.0) (Version: 2.0 - MegaSceneryEarth)
Microsoft Flight Simulator SimConnect Client v10.0.61259.0 (HKLM-x32\...\{D61CA184-3F6D-4A50-B2CC-7A18447D6A8D}) (Version: 10.0.61259.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.62615.0 (HKLM-x32\...\{33D89314-361A-4495-A1E1-0ACBCE08F78D}) (Version: 10.0.62615.0 - Microsoft Corporation)
Microsoft Office Access database engine 2007 (English) (HKLM-x32\...\{90120000-00D1-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1031 - Microsoft Corporation)
Microsoft Office XP Professional with FrontPage (HKLM-x32\...\{90280409-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.4330.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-910515035-2020243001-2686619267-1001\...\OneDriveSetup.exe) (Version: 17.3.7131.1115 - Microsoft Corporation)
Microsoft Server Speech Platform Runtime (x64) (HKLM\...\{3B433087-E62E-4BF5-97F9-4AF6E1C2409C}) (Version: 11.0.7400.345 - Microsoft Corporation)
Microsoft Server Speech Recognition Language - TELE (en-IN) (HKLM-x32\...\{3B06AC90-DE68-44A9-95EB-0A3C1AF1514F}) (Version: 11.0.7400.335 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2017 (HKLM-x32\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.10.30637.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mozilla Firefox 57.0.4 (x64 en-US) (HKLM\...\Mozilla Firefox 57.0.4 (x64 en-US)) (Version: 57.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.3 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.5.3 - Notepad++ Team)
nugster 1.1.232 (HKLM\...\nugster) (Version: 1.1.232 - Nugs, Inc.)
NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 388.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.71 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.11.0.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.11.0.73 - NVIDIA Corporation)
NVIDIA Graphics Driver 388.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.71 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Open Rails 1.2.3766 (HKLM-x32\...\{94E15E08-869D-4B69-B8D7-8C82075CB51C} ; Generat~67F3DAC8_is1) (Version: 1.2.3766 - Open Rails)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 10.5.8.11002 - Electronic Arts, Inc.)
OverlayEditor (HKLM-x32\...\OverlayEditor) (Version: 2.61 - Jonathan Harris <x-plane@marginal.org.uk>)
PdaNet+ for Android 4.19 (HKLM-x32\...\PdaNet_is1) (Version: - June Fabrics Technology Inc)
Pilatus PC12 (HKLM-x32\...\Pilatus PC12ver 2.0FSX) (Version: ver 2.0 - Carenado)
Pilatus PC12 (HKLM-x32\...\Pilatus PC12ver 2.0FSXSE) (Version: ver 2.0 - Carenado)
Pilot2ATC 2.3.1.1 (HKLM-x32\...\006FEBDD-2479-4D37-B27E-5BA37820DDB8_is1) (Version: 2.3.1.1 - Pilot2ATC)
PJP's JoyIDs (HKLM-x32\...\JoyIDs) (Version: - )
PMDG 737 6700 NGX Expansion FSX (HKLM-x32\...\{C7EE862A-D83D-4A9F-B746-CBDE39BD7001}) (Version: 1.10.6461 - PMDG Simulations, LLC.)
PMDG 737 8900 NGX Base Package FSX (HKLM-x32\...\{20708FD5-E94D-4097-A21E-E28564CDBC06}) (Version: 1.10.6461 - PMDG Simulations, LLC.)
PMDG 747-400/400F for FSX (HKLM-x32\...\{EDCEE320-0FB3-4197-9F86-8C1CCF2278FB}) (Version: 2.10.0040 - Precision Manuals Development Group)
PMDG 777-200LR/F Base Package FSX (HKLM-x32\...\{0F16340B-5B5B-4531-8D87-4952E3BCA6E6}) (Version: 1.10.6155 - PMDG Simulations, LLC.)
PMDG 777-300ER Expansion (HKLM-x32\...\{E65EFDE6-0864-40BA-8DDF-E31F736D9000}) (Version: 1.10.6036 - PMDG Simulations, LLC.)
Prepar3D v3 Academic (HKLM-x32\...\{ef7923e2-4857-4683-820d-a3994d88d709}) (Version: 3.0.10.14945 - Lockheed Martin)
Prepar3D v3 Academic Client (HKLM-x32\...\{213CD124-D688-436D-9BD8-FFB56DC830BE}) (Version: 3.0.10.14945 - Lockheed Martin)
Prepar3D v3 Content (HKLM-x32\...\{CE8E65FC-9BE3-438A-8449-BCD5E8ACC6BE}) (Version: 3.0.10.14945 - Lockheed Martin)
Prepar3D v3 Scenery (HKLM-x32\...\{3F2CF900-1437-4F93-9ABF-07B8B80E37DA}) (Version: 3.0.10.14945 - Lockheed Martin)
Prepar3D v4 Academic (HKLM-x32\...\{24334c8e-bce6-476c-bf15-aaaa4d69c877}) (Version: 4.0.28.21686 - Lockheed Martin)
Prepar3D v4 Academic Client (HKLM\...\{F4C0F17C-2CAD-4CC2-B8EA-63D59CF17070}) (Version: 4.0.28.21686 - Lockheed Martin)
Prepar3D v4 Content (HKLM\...\{87040041-993B-42AF-BEA0-6086FEB45184}) (Version: 4.0.28.21686 - Lockheed Martin)
Prepar3D v4 Scenery (HKLM\...\{C953A291-C0D5-414E-8211-778D5E53D73A}) (Version: 4.0.28.21686 - Lockheed Martin)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Python 2.7.9 (64-bit) (HKLM\...\{79F081BF-7454-43DB-BD8F-9EE596813233}) (Version: 2.7.9150 - Python Software Foundation)
Quik (HKLM\...\{DF7EE9CB-0369-44F3-9B91-BF05A2D4891D}) (Version: 0.1.5383 - GoPro, Inc.) Hidden
Quik (HKLM-x32\...\{b15a4fb5-7637-45ca-b230-33d94af786a7}) (Version: 2.3.0.5383 - GoPro, Inc.)
RAAS Professional by FS2Crew (LOCKED) (HKLM-x32\...\RAAS Professional by FS2Crew (LOCKED)) (Version: - )
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.21.00.830 - Razer Inc.)
Saitek ProFlight Fsx Plugin 7.0.50.1 (HKLM\...\{918582C7-0F0E-4FA1-A49C-65CA9864DDD8}) (Version: 7.0.50.1 - Saitek)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.0.0.790 - Samsung Electronics)
Shape Viewer (HKLM-x32\...\{88DA244E-4CEA-49E4-AD6A-301B65131E25}) (Version: 2.2.0.237 - )
SimObject Display Engine (HKLM-x32\...\{9B404F0F-1DB5-47F9-8F23-CC05AEF6D85A}) (Version: 1.5.2 - 12bPilot)
SoundMaxx (HKLM-x32\...\SoundMaxx 1.0) (Version: 1.0 - X-Aviation)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
Stardock Fences 3 (HKLM-x32\...\Stardock Fences 3) (Version: 3.05 - Stardock Software, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.4.2 - TeamSpeak Systems GmbH)
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.37.35.1010 - Electronic Arts Inc.)
Trust.Zone VPN Client (HKLM\...\trustzone_tztzclient) (Version: 1.00.1029 - Trust.Zone VPN Project)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 3.5.3 - Tweaking.com)
Ultimate Traffic (HKLM-x32\...\F1UT2) (Version: 2 - Flight One Software)
Ultimate Traffic 2 Power Pack (HKLM-x32\...\F1UT2PP) (Version: 2.02 - Flight One Software)
Unigine Valley Benchmark version 1.0 (HKLM-x32\...\Unigine Valley Benchmark_is1) (Version: 1.0 - Unigine Corp.)
VFW_Codec32 (HKLM-x32\...\{ECDB3455-70F4-4EE6-B89E-3B4C5E9FF592}) (Version: 0.1.160.0 - GoPro, Inc.) Hidden
VFW_Codec64 (HKLM\...\{AE4073DE-7596-4E3B-9DE3-18BE2C3EFAA6}) (Version: 0.1.160.0 - GoPro, Inc.) Hidden
Visual Studio 2008 Shell Integrated Mode Redistributable Package (HKLM-x32\...\{26458DFF-3EE7-31E9-9761-5565795CBEA4}) (Version: 9.0.21022 - Microsoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Voice Activated Commands (HKLM-x32\...\{205EB53F-624D-41B0-8212-BAFB261201A9}) (Version: 3.2.0 - DiverseWare)
vs_filehandler_amd64 (HKLM-x32\...\{15D591B0-7B40-4957-B6C0-EB7452B5AAB6}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{DC296244-0701-4EDE-9696-05B9C1D017B3}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{11230C85-1813-4BC3-9C24-E0B74B59653E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\...\{497A5ACE-DA03-4412-A110-910B2C450720}) (Version: 15.0.26424 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
X-55 Rhino (HKLM\...\{C71EF50A-8FFE-4886-97D2-705F33000FE1}) (Version: 7.0.55.13 - Mad Catz Inc)
xEnviro (HKU\S-1-5-21-910515035-2020243001-2686619267-1001\...\{d59ec0a0-fcf6-4c06-835e-34b7d3d64694}) (Version: 1.07 - Commercial Simulation Systems LLC)
XPFlightPlanner (uninstall) (HKLM-x32\...\XPFlightPlanner) (Version: - )
XSplit Gamecaster (HKLM-x32\...\{8915913F-E4AF-46C5-B4EF-3535D83BFFDE}) (Version: 2.5.1507.3018 - SplitmediaLabs)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2017-08-28] ()
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\ShellExt.dll [2017-09-29] (Microsoft Corporation)
ContextMenuHandlers1: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2017-06-13] (Stardock)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\ShellExt.dll [2017-09-29] (Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\ShellExt.dll [2017-09-29] (Microsoft Corporation)
ContextMenuHandlers4: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2017-06-13] (Stardock)
ContextMenuHandlers5: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2017-06-13] (Stardock)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-15] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2017-06-13] (Stardock)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {07EA2BAE-2582-47F2-9FAA-F58C6B8A03E8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-12-13] (Adobe Systems Incorporated)
Task: {1DC04335-2A7F-4931-92FD-2E7AE5CF388D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-11-15] (NVIDIA Corporation)
Task: {20B50F40-A0DA-4F6D-A828-6C0B71B3BCEF} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-11-15] (NVIDIA Corporation)
Task: {2712517E-097F-48CE-B5BA-0DB485E16DF2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-20] (Google Inc.)
Task: {28322364-B6EE-4E0C-BFA2-2F0CD852602E} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-05-18] ()
Task: {381C4AC3-EC49-4ACF-BB4D-775C90C42945} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-11-15] (NVIDIA Corporation)
Task: {4B9D8756-B1A0-4F5C-A2F5-41E18F7FFE72} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-08] (Microsoft Corporation)
Task: {4FA8CCFA-A2F4-42D4-A64B-571B848FD1FC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-20] (Google Inc.)
Task: {5534E9F6-6333-4FE2-9507-9730EB41EE2B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-08] (Microsoft Corporation)
Task: {67DBB62F-671E-4E27-A16A-3E2FA6845A79} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [2016-11-23] (Samsung Electronics Co. Ltd.)
Task: {67F73FC7-0A3A-41D3-82FD-1772F2549579} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-11-15] (NVIDIA Corporation)
Task: {7B67F1A2-AF3D-4DDF-BCFA-8F69AFFC03A0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-08] (Microsoft Corporation)
Task: {8B6F439D-FE74-4618-83E9-6B611415AB0F} - System32\Tasks\ASUS\AsRogAuraGpuDllServer => C:\Program Files (x86)\LightingService\1.00.16\AsRogAuraGpuDllServer.exe [2017-08-08] ()
Task: {AA61F723-37DC-43F0-9E67-D8826BC6024A} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-11-15] (NVIDIA Corporation)
Task: {B0D2C2C9-350E-4B42-85CC-517F61028709} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {C41ECE14-4E65-4A1A-B383-96849ADC8139} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-11-15] (NVIDIA Corporation)
Task: {D358D1D5-6AA6-4A86-88AA-59788EA29D18} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-08] (Microsoft Corporation)
Task: {DBC1ECCD-23ED-4EFF-BC57-270A924A1F91} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-11-15] (NVIDIA Corporation)
Task: {E38D5C57-DBB8-4BD1-A1E0-314A74CE4C57} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-11-15] (NVIDIA Corporation)
Task: {F7B99F01-4933-4376-94E0-D7DCFC964A15} - System32\Tasks\GPU Tweak II => C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe [2017-07-25] (TODO: <Company name>)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\cbff3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FSGenesis\FSGenesis BugTracker.lnk -> hxxp://www.fsgenesis.net/flyspra
Shortcut: C:\Users\cbff3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FSGenesis\FSGenesis Forums.lnk -> hxxp://www.fsgenesis.net/foru
Shortcut: C:\Users\cbff3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FSGenesis\FSGenesis Store.lnk -> hxxp://www.fsgenesis.co

==================== Loaded Modules (Whitelisted) ==============

2017-09-29 06:41 - 2017-09-29 06:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-05-08 23:44 - 2017-05-08 23:44 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-05-08 23:44 - 2017-05-08 23:44 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-06-14 21:27 - 2017-06-14 21:27 - 000076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2017-07-19 15:09 - 2017-07-19 15:09 - 000189264 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2017-05-18 10:09 - 2017-11-15 18:41 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-10-07 13:26 - 2017-12-09 07:55 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-10-07 13:26 - 2017-12-09 07:55 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-06-13 13:33 - 2017-06-13 13:33 - 000062424 _____ () c:\program files (x86)\stardock\fences\SdCrashReporter64.dll
2010-01-09 19:17 - 2010-01-09 19:17 - 004254560 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 00:40 - 2010-01-21 00:40 - 008794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2017-08-08 20:13 - 2017-08-08 20:13 - 000247256 _____ () C:\Program Files (x86)\LightingService\1.00.16\AsRogAuraGpuDllServer.exe
2017-12-13 14:48 - 2017-11-26 05:23 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-12-13 14:48 - 2017-11-26 05:01 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-23 15:51 - 2017-03-23 15:51 - 001727488 _____ () C:\Program Files (x86)\ASUS\GPU TweakII\ASUSGPUFanServiceEx.exe
2015-03-06 17:07 - 2015-03-06 17:07 - 000908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2017-08-18 02:01 - 2017-08-18 02:01 - 001096824 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-06 17:07 - 2015-03-06 17:07 - 000060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2017-08-18 02:01 - 2017-08-18 02:01 - 000241784 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2017-03-16 16:15 - 2017-03-16 16:15 - 000866224 _____ () C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe
2017-05-09 02:05 - 2017-05-09 02:05 - 000092472 _____ () C:\NATALIE\iTunes\zlib1.dll
2017-05-09 02:05 - 2017-05-09 02:05 - 001354040 _____ () C:\NATALIE\iTunes\libxml2.dll
2017-05-25 21:10 - 2016-12-09 17:08 - 001029944 _____ () C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe
2012-09-12 23:38 - 2012-09-12 23:38 - 000264040 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2017-03-16 16:15 - 2017-03-16 16:15 - 000037808 _____ () C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
2017-09-29 06:41 - 2017-09-29 06:41 - 000030208 _____ () C:\WINDOWS\system32\Windows.WARP.JITService.exe
2017-12-08 14:14 - 2017-12-08 14:14 - 004698848 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-12-29 14:07 - 2017-12-29 14:07 - 026507776 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.13411.0_x64__8wekyb3d8bbwe\Video.UI.exe
2017-12-29 14:07 - 2017-12-29 14:07 - 008370176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.13411.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 07:35 - 2017-09-26 07:35 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.13411.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-12-08 19:44 - 2017-10-24 20:18 - 000975872 _____ () c:\windows\system32\FaceProcessor.dll
2017-12-08 19:44 - 2017-10-24 21:40 - 000269696 _____ () c:\windows\system32\FaceProcessorCore.dll
2017-09-29 06:41 - 2017-09-29 06:41 - 001357464 _____ () c:\windows\system32\FaceTrackerInternal.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 000477184 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-12-13 14:47 - 2017-12-13 14:47 - 058590720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-11-09 22:07 - 2017-11-09 22:07 - 000164864 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\VideoPlugin.dll
2017-10-01 19:25 - 2017-10-01 19:25 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2017-10-01 19:25 - 2017-10-01 19:25 - 000675328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\IPPNativePlugin.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 003727360 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 002270720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 016395264 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 003579904 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 003204096 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2017-09-21 18:07 - 2017-09-21 18:07 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 000043520 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 004038144 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.People.PeoplePicker.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 001367040 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-12-13 14:47 - 2017-12-13 14:47 - 000214528 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\SKU.dll
2017-08-08 20:13 - 2017-08-08 20:13 - 000081728 _____ () C:\Program Files (x86)\ASUS\AXSP\2.00.06\ATKEX.dll
2017-08-08 20:13 - 2018-01-07 09:08 - 000046888 _____ () C:\Program Files (x86)\ASUS\AXSP\2.00.06\PEbiosinterface32.dll
2017-05-18 10:09 - 2017-11-15 18:41 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-07-25 12:49 - 2017-07-25 12:49 - 000065536 _____ () C:\Program Files (x86)\ASUS\GPU TweakII\Exeio.dll
2017-07-06 14:33 - 2017-07-06 14:33 - 001753600 _____ () C:\Program Files (x86)\ASUS\GPU TweakII\Vender.dll
2017-08-08 20:14 - 2017-08-08 20:13 - 001746432 _____ () C:\Program Files (x86)\LightingService\1.00.16\Vender.dll
2017-05-18 10:10 - 2017-11-15 18:40 - 066906560 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2017-06-20 14:32 - 2017-06-20 14:32 - 000940032 _____ () C:\Program Files (x86)\ASUS\GPU TweakII\glkIo.dll
2017-08-05 08:13 - 2017-03-08 10:20 - 000669144 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.31\aaHMLib.dll
2017-12-08 19:39 - 2017-12-08 19:39 - 000102088 _____ () C:\Users\cbff3\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\UpdateRingSettings.dll
2017-01-16 04:40 - 2017-01-16 04:40 - 000143824 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 000341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 002144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 007955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 000028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 000127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2012-09-12 23:39 - 2012-09-12 23:39 - 000336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
2017-12-02 16:24 - 2017-11-28 22:09 - 000781088 _____ () E:\STEAM\SDL2.dll
2017-12-29 15:04 - 2017-12-20 17:20 - 002558752 _____ () E:\STEAM\video.dll
2017-05-18 11:32 - 2016-08-31 18:02 - 004969248 _____ () E:\STEAM\v8.dll
2017-11-07 19:05 - 2017-11-03 18:54 - 000351520 _____ () E:\STEAM\libavresample-3.dll
2017-11-07 19:05 - 2017-11-03 18:54 - 000695584 _____ () E:\STEAM\libavformat-57.dll
2017-11-07 19:05 - 2017-11-03 18:54 - 005137696 _____ () E:\STEAM\libavcodec-57.dll
2017-11-07 19:05 - 2017-11-03 18:54 - 000847136 _____ () E:\STEAM\libavutil-55.dll
2017-11-07 19:05 - 2017-11-03 18:54 - 000783648 _____ () E:\STEAM\libswscale-4.dll
2017-05-18 11:32 - 2016-08-31 18:02 - 001563936 _____ () E:\STEAM\icui18n.dll
2017-05-18 11:32 - 2016-08-31 18:02 - 001195296 _____ () E:\STEAM\icuuc.dll
2017-12-29 15:04 - 2017-12-20 17:20 - 000904992 _____ () E:\STEAM\bin\chromehtml.DLL
2017-05-18 11:32 - 2016-07-04 15:17 - 000266560 _____ () E:\STEAM\openvr_api.dll
2017-09-22 13:11 - 2017-09-06 19:04 - 000678400 _____ () E:\STEAM\bin\cef\cef.win7\SDL2.dll
2017-11-07 19:05 - 2017-10-30 21:44 - 071471904 _____ () E:\STEAM\bin\cef\cef.win7\libcef.dll
2017-05-18 11:32 - 2015-09-24 16:52 - 000119208 _____ () E:\STEAM\winh264.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mbamchameleon => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mbamchameleon => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-18 14:03 - 2017-05-25 13:17 - 000000826 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-910515035-2020243001-2686619267-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 18.217.241.230
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{4946BEF0-C00E-4C81-8FD0-72BF62389C54}F:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => (Allow) F:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [TCP Query User{ABD25141-3994-473D-8553-5C38CA7F3424}F:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => (Allow) F:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [{BC65D78A-634F-4C75-876B-5AC2483678AF}] => (Allow) F:\Steam\steamapps\common\F1 2017\F1_2017.exe
FirewallRules: [{3E3C2217-F839-4EA3-BFCF-A32FC9D82645}] => (Allow) F:\Steam\steamapps\common\F1 2017\F1_2017.exe
FirewallRules: [{104316B2-283E-4F19-8427-EC388B124983}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{8555EDF3-ABA7-4EE2-9018-C9E8A733E6CD}] => (Allow) F:\Steam\steamapps\common\911 Operator\CallEditor.exe
FirewallRules: [{4AC7B922-6721-4C3B-A11C-A47DE9BBD56B}] => (Allow) F:\Steam\steamapps\common\911 Operator\CallEditor.exe
FirewallRules: [{C13EF558-84EE-4052-805D-45214252DEAA}] => (Allow) F:\Steam\steamapps\common\Car Mechanic Simulator 2018\cms2018.exe
FirewallRules: [{D85C9D94-EFFA-4582-9E06-D4F169D95930}] => (Allow) F:\Steam\steamapps\common\Car Mechanic Simulator 2018\cms2018.exe
FirewallRules: [{3C10BD38-A937-4313-A1C4-22D014C3F718}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2C4F943B-FCF7-47B6-A008-8D0B21295F7A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2B7E243D-515D-4F26-BCA0-2BB559CA7DAD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{E12B80E8-2C3B-45E6-BF3B-771479689B94}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{557F69B8-4FE4-4963-B25F-01FA56D335D6}] => (Allow) F:\Steam\steamapps\common\X-Plane 11\Airfoil Maker.exe
FirewallRules: [{C0FC66FC-363C-4C8E-87FD-E9F9D4F095B2}] => (Allow) F:\Steam\steamapps\common\X-Plane 11\Airfoil Maker.exe
FirewallRules: [{28D983DF-10E3-4ADF-A484-C34CAB92FFF2}] => (Allow) F:\Steam\steamapps\common\X-Plane 11\Plane Maker.exe
FirewallRules: [{D86C0337-E508-41DD-9632-3796EEED5EEE}] => (Allow) F:\Steam\steamapps\common\X-Plane 11\Plane Maker.exe
FirewallRules: [{2D2573E4-C562-43CF-ACAC-37D78310C413}] => (Allow) F:\Steam\steamapps\common\X-Plane 11\X-Plane.exe
FirewallRules: [{C700579C-4648-4E33-BB8E-5BC84538EC04}] => (Allow) F:\Steam\steamapps\common\X-Plane 11\X-Plane.exe
FirewallRules: [{6891BAFF-8CDB-472E-9032-6E17AD7B787E}] => (Allow) C:\Program Files\Trust.Zone VPN Client\trustzone_x64.exe
FirewallRules: [{9591EE1A-A610-4835-A86B-803EC4E3BDFC}] => (Allow) C:\Program Files\Trust.Zone VPN Client\trustzone.exe
FirewallRules: [{550EB64F-1187-4C71-BF45-9006BE6DFA31}] => (Allow) C:\Program Files\Trust.Zone VPN Client\tzclient_x64.exe
FirewallRules: [{2230C3A5-6C3A-4F7B-84C0-1B56CA46A6A0}] => (Allow) C:\Program Files\Trust.Zone VPN Client\tzclient.exe
FirewallRules: [{2DA28430-3085-4E60-897A-1F89B2BB5472}] => (Allow) E:\STEAM\steamapps\common\Arma 3 Tools\Publisher\Publisher.exe
FirewallRules: [{96A42D80-41B2-4E5D-ACEA-0EA426A1C3F1}] => (Allow) E:\STEAM\steamapps\common\Arma 3 Tools\Publisher\Publisher.exe
FirewallRules: [{B5117EC0-E24E-477E-8C58-C23636D33243}] => (Allow) E:\STEAM\steamapps\common\Arma 3 Tools\AddonBuilder\AddonBuilder.exe
FirewallRules: [{5C17EFD6-C5F6-4051-BC8C-1508CB41F7B1}] => (Allow) E:\STEAM\steamapps\common\Arma 3 Tools\AddonBuilder\AddonBuilder.exe
FirewallRules: [{A36C8670-5BAD-41FB-A342-7776F9BFDDC4}] => (Allow) E:\STEAM\steamapps\common\Arma 3 Tools\starter.exe
FirewallRules: [{20EABC34-A7BA-4783-9624-647DA7587A80}] => (Allow) E:\STEAM\steamapps\common\Arma 3 Tools\starter.exe
FirewallRules: [{6656BB7F-DC35-44CA-A880-8489A1BAAF23}] => (Allow) E:\STEAM\steamapps\common\Arma 3 Tools\Arma3Tools.exe
FirewallRules: [{247F5CE7-E01C-47EC-B201-6B953C26B46A}] => (Allow) E:\STEAM\steamapps\common\Arma 3 Tools\Arma3Tools.exe
FirewallRules: [UDP Query User{34875941-B8A5-4DD4-9AF8-22A827F573BE}F:\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) F:\steam\steamapps\common\arma 3\arma3_x64.exe
FirewallRules: [TCP Query User{11E96A04-C687-41BA-92CC-1BEDFD3DE60C}F:\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) F:\steam\steamapps\common\arma 3\arma3_x64.exe
FirewallRules: [{5B233C51-E69D-47CD-8924-2A9ABD2F38C9}] => (Allow) C:\Users\cbff3\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{41855EDF-4270-4BC9-A720-702D9C7F235F}] => (Allow) C:\Users\cbff3\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{88A4BC04-878D-481F-8015-4D2BDBE05A5C}] => (Allow) C:\Users\cbff3\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{D2B77C3D-CE9E-44A2-BA41-7C8B7F61819A}] => (Allow) C:\Users\cbff3\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{4B31C95D-CCF7-4489-9A24-33594D6CD10D}] => (Allow) C:\Users\cbff3\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{C268A09C-245A-4901-9BCA-FC6AB20A5F73}] => (Allow) C:\Users\cbff3\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{E56B1B0D-19C6-4128-8C90-9CE89472C8A1}] => (Allow) E:\STEAM\steamapps\common\FSX\fsx.exe
FirewallRules: [{6B8A232F-5253-47AB-8550-C3F9D20060C8}] => (Allow) E:\STEAM\steamapps\common\FSX\fsx.exe
FirewallRules: [{C01F6162-EED4-478B-A06D-63614D4E2320}] => (Allow) F:\Steam\steamapps\common\EVGA PrecisionX\Skins\UxfTool.exe
FirewallRules: [{9DDF253C-511C-4CC6-809E-05363107EA83}] => (Allow) F:\Steam\steamapps\common\EVGA PrecisionX\Skins\UxfTool.exe
FirewallRules: [{0552E978-C19B-4C43-8E7A-49B2DC49E6F7}] => (Allow) F:\Steam\steamapps\common\EVGA PrecisionX\PrecisionX_x64.exe
FirewallRules: [{0D8F2814-06D5-4D94-A32A-75B286D73BD5}] => (Allow) F:\Steam\steamapps\common\EVGA PrecisionX\PrecisionX_x64.exe
FirewallRules: [{126B6028-07E5-4C56-B23C-47E00CFA1DA6}] => (Allow) F:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{EF3EF5DF-00C3-4175-B78C-5914B50AC05C}] => (Allow) F:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{35F3A068-963B-4CDC-9899-C32B8187E397}] => (Allow) F:\Steam\steamapps\common\Railroad Tycoon 2 Platinum\RT2_PLAT.EXE
FirewallRules: [{9B221711-0D8B-48F1-916C-088F02650057}] => (Allow) F:\Steam\steamapps\common\Railroad Tycoon 2 Platinum\RT2_PLAT.EXE
FirewallRules: [{64F0C6D1-AFC5-464B-AB0A-AD0AEBF8C930}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{CB027B70-9224-448E-B660-AD9F6D7B8C19}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{073D31C6-330F-4FBE-835D-DF960473750B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{3E90BCF0-0CA4-4CCA-BDF9-FF3C7BF877D8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{BB2F8BF6-57A1-4904-8DB3-31AEAFB6EAE3}] => (Allow) C:\NATALIE\iTunes\iTunes.exe
FirewallRules: [{3F96F521-EE54-4D79-8620-A11967368E44}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5AFE710B-B118-4597-ADA1-5A1A1C20EE44}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E0417BBB-D685-46A4-836D-BF85377A8682}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D1893942-D244-4037-A959-D5F05AA9B252}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{38C9365F-AF6E-4653-8C6F-F07280C8268F}] => (Allow) F:\Steam\steamapps\common\Farming Simulator 17\x86\FarmingSimulator2017Game.exe
FirewallRules: [{ABABEB4A-4EB8-4792-8463-6B4492F22C79}] => (Allow) F:\Steam\steamapps\common\Farming Simulator 17\x86\FarmingSimulator2017Game.exe
FirewallRules: [UDP Query User{CB9B75B4-25E2-42CD-9579-87B8C6D8BB07}F:\steam\steamapps\common\mxgp3 - the official motocross videogame\mxgp3\binaries\win64\mxgp3-win64-shipping.exe] => (Allow) F:\steam\steamapps\common\mxgp3 - the official motocross videogame\mxgp3\binaries\win64\mxgp3-win64-shipping.exe
FirewallRules: [TCP Query User{F5B3D2AC-BD1B-41B6-A495-3C896493DA18}F:\steam\steamapps\common\mxgp3 - the official motocross videogame\mxgp3\binaries\win64\mxgp3-win64-shipping.exe] => (Allow) F:\steam\steamapps\common\mxgp3 - the official motocross videogame\mxgp3\binaries\win64\mxgp3-win64-shipping.exe
FirewallRules: [{C866B4B3-AAD2-4175-A81F-E2406BC4C932}] => (Allow) F:\Steam\steamapps\common\MXGP3 - The Official Motocross Videogame\mxgp3.exe
FirewallRules: [{02C31DEA-4033-493E-8677-50B66DA84FA4}] => (Allow) F:\Steam\steamapps\common\MXGP3 - The Official Motocross Videogame\mxgp3.exe
FirewallRules: [{F50FA9AB-FCAD-4B97-BEFA-8A910B7CDCFB}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoProLauncher.exe
FirewallRules: [{B638E2B9-3226-4E5A-B553-F95D49A24374}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoProIDService.exe
FirewallRules: [{F7D273BE-3516-487A-9AC3-B6BF021FB61B}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoProMsgBus.exe
FirewallRules: [{40495A9D-857B-4B69-B92A-5833D858B04F}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoPro Quik.exe
FirewallRules: [UDP Query User{BB5C5E3C-C7A4-4622-97FC-476D6E73D021}E:\steam\steamapps\common\fsx\flight one software\ultimate traffic 2\ut2services.exe] => (Allow) E:\steam\steamapps\common\fsx\flight one software\ultimate traffic 2\ut2services.exe
FirewallRules: [TCP Query User{045C71F4-18D1-4A9F-AF15-FB399DEA7948}E:\steam\steamapps\common\fsx\flight one software\ultimate traffic 2\ut2services.exe] => (Allow) E:\steam\steamapps\common\fsx\flight one software\ultimate traffic 2\ut2services.exe
FirewallRules: [UDP Query User{A1FD8AD3-5447-419A-9391-59BC7AF3DD24}E:\fsxaddons\as16_fsx\as16.exe] => (Allow) E:\fsxaddons\as16_fsx\as16.exe
FirewallRules: [TCP Query User{8F682147-989B-48AF-8700-055610708488}E:\fsxaddons\as16_fsx\as16.exe] => (Allow) E:\fsxaddons\as16_fsx\as16.exe
FirewallRules: [{8E7F501F-AF22-4A47-B01D-9D058AB0FAF3}] => (Allow) F:\Steam\steamapps\common\RailWorks\RailWorks.exe
FirewallRules: [{DE5EC139-2A0D-4E42-B3E2-377A05565938}] => (Allow) F:\Steam\steamapps\common\RailWorks\RailWorks.exe
FirewallRules: [{10E7F74D-B3A7-4944-B0D4-81EDFAB12662}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D98FC446-A3C3-493B-8BC3-DD0B017D0CAD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4C041895-D733-4763-AD27-F67B14133BA4}] => (Allow) F:\Steam\steamapps\common\Democracy 3\Democracy3.exe
FirewallRules: [{63973750-ABFD-4F09-8510-8DE33D1BFADE}] => (Allow) F:\Steam\steamapps\common\Democracy 3\Democracy3.exe
FirewallRules: [{53A4641B-BB4D-4EF8-AF6F-590E9034808B}] => (Allow) F:\Steam\steamapps\common\Trainz A New Era\TANE.exe
FirewallRules: [{E72E44A6-35E4-4650-9E6A-FE188B40ABA6}] => (Allow) F:\Steam\steamapps\common\Trainz A New Era\TANE.exe
FirewallRules: [UDP Query User{391FF9B6-A1AC-43DB-BA73-A305DEF2F945}F:\supertrafficboard\trafficboardfrontend.exe] => (Allow) F:\supertrafficboard\trafficboardfrontend.exe
FirewallRules: [TCP Query User{60EA42C3-794C-40B6-9567-FBAAD239E8FC}F:\supertrafficboard\trafficboardfrontend.exe] => (Allow) F:\supertrafficboard\trafficboardfrontend.exe
FirewallRules: [{239D8D82-4CAE-467B-A40F-E9589F2E056E}] => (Allow) F:\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{0B2F3288-C17E-432C-98A8-3C11C1534B89}] => (Allow) F:\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{E896CA6F-D8B8-4BA3-AAFC-3C3123F9ECF3}] => (Allow) F:\Steam\steamapps\common\Empire Total War\Empire.exe
FirewallRules: [{D8BA1FAC-EDD2-4D10-89C4-233896DC46B2}] => (Allow) F:\Steam\steamapps\common\Empire Total War\Empire.exe
FirewallRules: [{0D58D48E-DB09-4F39-AFC8-05CB39AD9CAD}] => (Allow) F:\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [{1CCBA7DE-5611-437E-9C35-60D84CE06535}] => (Allow) F:\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [{111DDE3C-348D-49AB-B91A-F2F884D13741}] => (Allow) F:\Steam\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{A2E77D79-C859-42D4-AC2E-4D2DD6CB70C1}] => (Allow) F:\Steam\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{B98CE087-1A48-4883-86E2-03E3393B7459}] => (Allow) F:\Steam\steamapps\common\Company of Heroes Relaunch\RelicCOH.exe
FirewallRules: [{E5DF45D5-0293-42D7-9ED3-1151462629FB}] => (Allow) F:\Steam\steamapps\common\Company of Heroes Relaunch\RelicCOH.exe
FirewallRules: [{318330F5-ADBC-4403-A2A5-CE056A0A1D90}] => (Allow) F:\Steam\steamapps\common\Ultimate General Civil War\UGCWReporter.exe
FirewallRules: [{6F7E6409-F2E7-480D-A759-D43F9F716A2C}] => (Allow) F:\Steam\steamapps\common\Ultimate General Civil War\UGCWReporter.exe
FirewallRules: [{5DBCFB9C-5CE9-430B-BFF2-8812A09E023D}] => (Allow) F:\Steam\steamapps\common\Ultimate General Civil War\Ultimate General Civil War.exe
FirewallRules: [{356601DA-F8F3-4E59-9AAD-D3384F249F5C}] => (Allow) F:\Steam\steamapps\common\Ultimate General Civil War\Ultimate General Civil War.exe
FirewallRules: [{E7AA2340-CD70-4BD2-8128-CCF9F3B6CB5B}] => (Allow) F:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{C03AF456-268C-4EF9-9676-5B84A670E581}] => (Allow) F:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{4A654D92-FE2E-49D6-840B-9BEB43D1A5CA}] => (Allow) F:\Steam\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe
FirewallRules: [{31F1F0FF-7916-4E8C-90CB-6E68CF8E1FF5}] => (Allow) F:\Steam\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe
FirewallRules: [{2253255D-7351-4164-ADD6-F7A3A70BCA35}] => (Allow) F:\Steam\steamapps\common\911 Operator\911.exe
FirewallRules: [{6D5B0376-4F93-4EE4-85CE-CE12CE6C22CB}] => (Allow) F:\Steam\steamapps\common\911 Operator\911.exe
FirewallRules: [{996CC2B6-B88E-437F-9453-9955C1A6B498}] => (Allow) E:\STEAM\steamapps\common\Universe Sandbox\Universe Sandbox.exe
FirewallRules: [{E94CF459-7294-4974-B013-DDDCC6D5B327}] => (Allow) E:\STEAM\steamapps\common\Universe Sandbox\Universe Sandbox.exe
FirewallRules: [{324CA3FD-67C8-4C9F-A667-430722B220AE}] => (Allow) E:\STEAM\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{C7C62534-C388-42C3-B36A-CE4F5D0907BD}] => (Allow) E:\STEAM\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{03E7E3DF-D604-4507-B72C-DB97888BD437}] => (Allow) E:\STEAM\steamapps\common\Command Modern Air Naval Operations\GameMenu_CCoW\autorun.exe
FirewallRules: [{8379F3BF-551A-4EE2-A909-79F969BB1102}] => (Allow) E:\STEAM\steamapps\common\Command Modern Air Naval Operations\GameMenu_CCoW\autorun.exe
FirewallRules: [{886FC608-10E5-458B-8AB5-77BEAE36F602}] => (Allow) E:\STEAM\steamapps\common\Command Modern Air Naval Operations\GameMenu_CNI\autorun.exe
FirewallRules: [{ED449E29-E7C6-471F-9A70-472F1ADB95C1}] => (Allow) E:\STEAM\steamapps\common\Command Modern Air Naval Operations\GameMenu_CNI\autorun.exe
FirewallRules: [{F71E132E-1A98-4307-9920-7B705C67D184}] => (Allow) E:\STEAM\steamapps\common\Command Modern Air Naval Operations\GameMenu_CMANO\autorun.exe
FirewallRules: [{27AB4CCE-139F-4216-951B-694D8BE2BE73}] => (Allow) E:\STEAM\steamapps\common\Command Modern Air Naval Operations\GameMenu_CMANO\autorun.exe
FirewallRules: [UDP Query User{98767FB4-4E07-473C-985F-3140B6CB69CD}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{13ABCD6B-6C2F-4EC1-9F1D-6FFFBF2DBE5B}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{E7962386-D4C4-4102-8C1E-97B7BF606144}] => (Allow) E:\STEAM\steamapps\common\Sniper Elite 3\Launcher\Sniper3Launcher.exe
FirewallRules: [{868535FE-B21C-4FDF-BA28-B6A42ABC7173}] => (Allow) E:\STEAM\steamapps\common\Sniper Elite 3\Launcher\Sniper3Launcher.exe
FirewallRules: [{01E85810-F817-4385-AA18-C1AE136FB404}] => (Allow) E:\STEAM\steamapps\common\F1 2016\F1_2016.exe
FirewallRules: [{EB4056BA-A3C4-445F-AEAD-F744A839A3FB}] => (Allow) E:\STEAM\steamapps\common\F1 2016\F1_2016.exe
FirewallRules: [UDP Query User{375715F7-5C43-43F5-BCEB-26056A95B76F}E:\eve\sharedcache\tq\bin\exefile.exe] => (Allow) E:\eve\sharedcache\tq\bin\exefile.exe
FirewallRules: [TCP Query User{CC50225E-AFDC-4EB6-B3E8-79060FE78010}E:\eve\sharedcache\tq\bin\exefile.exe] => (Allow) E:\eve\sharedcache\tq\bin\exefile.exe
FirewallRules: [UDP Query User{6F77F304-7EF7-4504-A628-FF802E0C939E}E:\steam\steamapps\common\train sim world\windowsnoeditor\ts2prototype\binaries\win64\ts2prototype-win64-shipping.exe] => (Allow) E:\steam\steamapps\common\train sim world\windowsnoeditor\ts2prototype\binaries\win64\ts2prototype-win64-shipping.exe
FirewallRules: [TCP Query User{9CA814D0-5C9F-4177-B46B-996C4A766E1D}E:\steam\steamapps\common\train sim world\windowsnoeditor\ts2prototype\binaries\win64\ts2prototype-win64-shipping.exe] => (Allow) E:\steam\steamapps\common\train sim world\windowsnoeditor\ts2prototype\binaries\win64\ts2prototype-win64-shipping.exe
FirewallRules: [{545A1FAE-6C65-483B-873D-233FA636D549}] => (Allow) E:\STEAM\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{2DD99B94-CFB7-467F-B032-B26163E6C6E5}] => (Allow) E:\STEAM\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{D823CB36-19A7-4E87-8F42-E91BC2BBA02E}] => (Allow) E:\STEAM\Steam.exe
FirewallRules: [{DFDE6E52-CF3A-4ADF-805A-253C26C17A36}] => (Allow) E:\STEAM\Steam.exe
FirewallRules: [{EFABF3BD-EBE5-4205-8EA3-D657A53D1F5A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{605809C2-9489-46EF-B553-26EF6C417809}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{68BE2169-D880-4F27-A7B0-1D9FE665A320}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{7BA9A945-0BA4-4022-B703-72A45412E19C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{F2D1D994-0005-4E96-9803-B67E90EBE4C5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{6DCE5788-D291-40B5-A96A-2EE1CE103A95}] => (Allow) F:\Steam\steamapps\common\FSX\DLC\379542\REX 4 Texture Direct\rextexturedirect_se.exe
FirewallRules: [{E5C63F51-F067-4DE2-A238-4DEAAFD46859}] => (Allow) F:\Steam\steamapps\common\FSX\DLC\379542\REX 4 Texture Direct\rextexturedirect_se.exe
FirewallRules: [TCP Query User{F3DC299E-8CD8-4E30-9052-06142B640293}F:\lockheed martin\prepar3d v4\as_p3dv4\as_p3dv4.exe] => (Allow) F:\lockheed martin\prepar3d v4\as_p3dv4\as_p3dv4.exe
FirewallRules: [UDP Query User{4EB287BD-93D7-490A-9B18-EA10B4177C59}F:\lockheed martin\prepar3d v4\as_p3dv4\as_p3dv4.exe] => (Allow) F:\lockheed martin\prepar3d v4\as_p3dv4\as_p3dv4.exe
FirewallRules: [TCP Query User{F25BB3AB-2507-4109-82FE-511D085A5A3A}F:\xpwideclient\xpwideclient.exe] => (Allow) F:\xpwideclient\xpwideclient.exe
FirewallRules: [UDP Query User{85924B07-1080-40FE-A7A7-33999AAC7FFA}F:\xpwideclient\xpwideclient.exe] => (Allow) F:\xpwideclient\xpwideclient.exe
FirewallRules: [{82ECFC31-1218-4177-8AA8-1DA7C84643C7}] => (Allow) LPort=35699
FirewallRules: [{F91EC257-983F-4EC9-843B-23A55B3A8539}] => (Allow) F:\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{0E1BCA79-E5C3-4864-B181-7A64FDE1CAB8}] => (Allow) F:\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{4F65DFEF-5BCF-4E14-9912-7610EAEBB91A}] => (Allow) F:\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{5B2C5AFA-C76B-4A1E-95AB-3819A0A3ED26}] => (Allow) F:\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{92FD5AB2-3F74-4CF9-9B58-760B223C3A3D}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{9EDAFD4A-5C41-42DB-9C64-963DCC9BD8F7}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{3E464ACB-8479-4307-91D8-EA1F88FE5F0B}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{96B0A85D-161A-43AB-8FB5-811D0349649C}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{466A2103-7A1A-4D9C-A1AE-D10AEAD1419D}] => (Allow) F:\Steam\steamapps\common\America's Army\AAPG\Binaries\Win32\AAGame.exe
FirewallRules: [{589E0322-C50B-45EC-B6AE-FA96707A4DB5}] => (Allow) F:\Steam\steamapps\common\America's Army\AAPG\Binaries\Win32\AAGame.exe
FirewallRules: [{2CEF9A52-4B95-4B2A-AC3C-0128C7DFA627}] => (Allow) F:\Steam\steamapps\common\America's Army\AAPG\Binaries\Win32\AALauncher32.exe
FirewallRules: [{43DB88A3-53BA-4512-A1EE-FCEB63C63B6E}] => (Allow) F:\Steam\steamapps\common\America's Army\AAPG\Binaries\Win32\AALauncher32.exe
FirewallRules: [{5DC2BE69-CCDA-47D0-A71F-2C267FE854A2}] => (Allow) F:\Steam\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe
FirewallRules: [{BC32E635-18F3-446C-AF45-367917D0C9DE}] => (Allow) F:\Steam\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe
FirewallRules: [{B6DDFDA7-2ABA-49A3-A618-8E9F7DEE6EBA}] => (Allow) F:\Steam\steamapps\common\Steam360VideoPlayer\Steam360VideoPlayer.exe
FirewallRules: [{0853EE70-8686-4299-A731-94E5956767FE}] => (Allow) F:\Steam\steamapps\common\Steam360VideoPlayer\Steam360VideoPlayer.exe
FirewallRules: [{5CC10E6C-0518-475C-968F-594BA71C20E8}] => (Allow) F:\Steam\steamapps\common\Gold Rush The Game\GoldRushTheGame.exe
FirewallRules: [{CC273A91-6F4A-4622-A856-FD767D9409A1}] => (Allow) F:\Steam\steamapps\common\Gold Rush The Game\GoldRushTheGame.exe
FirewallRules: [{32EBB717-83B8-4B13-ADBA-18BD11DAACF9}] => (Allow) F:\Steam\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe
FirewallRules: [{43F66212-C7C3-47B8-AC38-EF7A79F07B7C}] => (Allow) F:\Steam\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe
FirewallRules: [{6D9C5B5A-6264-4993-ADB7-ACCB413301BB}] => (Allow) F:\Steam\steamapps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{48624848-80FE-4F57-8894-BEE3E953B7B9}] => (Allow) F:\Steam\steamapps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{E780C1CE-D05B-4D57-BCB4-3FD58C8E672B}] => (Allow) F:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{FDF8E10F-8B0E-4FBB-B953-475A65C811BA}] => (Allow) F:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{2E36F1E8-C071-447B-8F80-C9CFD55784CF}] => (Allow) F:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{75DE2C1B-AEBB-443F-8EBB-88D7923B077B}] => (Allow) F:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{00E489B0-1D23-4624-894D-3C825BFC6166}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

29-12-2017 20:18:07 Scheduled Checkpoint
01-01-2018 17:42:23 Windows Modules Installer
06-01-2018 11:10:05 Windows Update
07-01-2018 09:05:08 Windows Modules Installer

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/07/2018 09:08:12 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: LightingService.exe, version: 0.0.0.0, time stamp: 0x5971cb05
Faulting module name: LightingService.exe, version: 0.0.0.0, time stamp: 0x5971cb05
Exception code: 0xc0000005
Fault offset: 0x00034ff9
Faulting process id: 0xc8c
Faulting application start time: 0x01d387d1b0ee6778
Faulting application path: C:\Program Files (x86)\LightingService\1.00.16\LightingService.exe
Faulting module path: C:\Program Files (x86)\LightingService\1.00.16\LightingService.exe
Report Id: c4b395f6-48ab-4712-b208-fb0e4d48acfd
Faulting package full name:
Faulting package-relative application ID:

Error: (01/07/2018 09:01:52 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: BEAST)
Description: Package windows.immersivecontrolpanel_10.0.1.1000_neutral_neutral_cw5n1h2txyewy+microsoft.windows.immersivecontrolpanel was terminated because it took too long to suspend.

Error: (01/07/2018 08:54:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: ASUSGPUFanServiceEx.exe, version: 0.0.0.0, time stamp: 0x58d38c91
Faulting module name: KERNELBASE.dll, version: 10.0.16299.15, time stamp: 0x2cd1ce3d
Exception code: 0x0eedfade
Fault offset: 0x001008b2
Faulting process id: 0xb90
Faulting application start time: 0x01d387cfc9bab575
Faulting application path: C:\Program Files (x86)\ASUS\GPU TweakII\ASUSGPUFanServiceEx.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: 3788cae0-95fd-4945-a1f5-5651c647e4ee
Faulting package full name:
Faulting package-relative application ID:

Error: (01/07/2018 08:51:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: ASUSGPUFanServiceEx.exe, version: 0.0.0.0, time stamp: 0x58d38c91
Faulting module name: KERNELBASE.dll, version: 10.0.16299.15, time stamp: 0x2cd1ce3d
Exception code: 0x0eedfade
Fault offset: 0x001008b2
Faulting process id: 0x418
Faulting application start time: 0x01d387cf6aabbc8c
Faulting application path: C:\Program Files (x86)\ASUS\GPU TweakII\ASUSGPUFanServiceEx.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: 180449c7-ac6e-4dee-9175-357edef9a316
Faulting package full name:
Faulting package-relative application ID:

Error: (01/07/2018 12:37:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: ASUSGPUFanServiceEx.exe, version: 0.0.0.0, time stamp: 0x58d38c91
Faulting module name: KERNELBASE.dll, version: 10.0.16299.15, time stamp: 0x2cd1ce3d
Exception code: 0x0eedfade
Fault offset: 0x001008b2
Faulting process id: 0x210c
Faulting application start time: 0x01d3878a617afbc1
Faulting application path: C:\Program Files (x86)\ASUS\GPU TweakII\ASUSGPUFanServiceEx.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: ba8546c2-0e1d-4313-bb97-203d3a08bd5d
Faulting package full name:
Faulting package-relative application ID:

Error: (01/07/2018 12:35:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 15 1.8.5.D.6.2.E.3.D.4.A.8.7.F.8.E.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR BEAST-2.local.

Error: (01/07/2018 12:35:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.0.0.28:5353 13 1.8.5.D.6.2.E.3.D.4.A.8.7.F.8.E.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR BEAST.local.

Error: (01/07/2018 12:35:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 15 3.A.0.F.A.2.0.7.5.7.A.1.A.6.C.2.E.5.8.7.2.0.1.4.2.8.2.0.1.0.6.2.ip6.arpa. PTR BEAST-2.local.

Error: (01/07/2018 12:35:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.0.0.28:5353 13 3.A.0.F.A.2.0.7.5.7.A.1.A.6.C.2.E.5.8.7.2.0.1.4.2.8.2.0.1.0.6.2.ip6.arpa. PTR BEAST.local.

Error: (01/07/2018 12:35:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 15 1.8.5.D.6.2.E.3.D.4.A.8.7.F.8.E.E.5.8.7.2.0.1.4.2.8.2.0.1.0.6.2.ip6.arpa. PTR BEAST-2.local.


System errors:
=============
Error: (01/07/2018 11:03:30 AM) (Source: DCOM) (EventID: 10016) (User: BEAST)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user BEAST\cbff3 SID (S-1-5-21-910515035-2020243001-2686619267-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/07/2018 10:49:46 AM) (Source: DCOM) (EventID: 10016) (User: BEAST)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user BEAST\cbff3 SID (S-1-5-21-910515035-2020243001-2686619267-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/07/2018 09:40:46 AM) (Source: DCOM) (EventID: 10016) (User: BEAST)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user BEAST\cbff3 SID (S-1-5-21-910515035-2020243001-2686619267-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/07/2018 09:08:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The LightingService service terminated unexpectedly. It has done this 1 time(s).

Error: (01/07/2018 09:07:53 AM) (Source: Application Popup) (EventID: 56) (User: )
Description: SCSI000000

Error: (01/07/2018 09:05:56 AM) (Source: DCOM) (EventID: 10010) (User: BEAST)
Description: The server {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} did not register with DCOM within the required timeout.

Error: (01/07/2018 02:24:36 AM) (Source: DCOM) (EventID: 10010) (User: BEAST)
Description: The server {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} did not register with DCOM within the required timeout.

Error: (01/07/2018 01:35:03 AM) (Source: Application Popup) (EventID: 56) (User: )
Description: SCSI000000

Error: (01/07/2018 12:35:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The LightingService service terminated unexpectedly. It has done this 1 time(s).

Error: (01/07/2018 12:33:01 AM) (Source: DCOM) (EventID: 10010) (User: BEAST)
Description: The server {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} did not register with DCOM within the required timeout.


CodeIntegrity:
===================================
Date: 2018-01-07 11:03:49.778
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume8\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-01-07 11:03:49.187
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume8\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-01-07 11:03:24.693
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume8\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-01-07 10:56:58.000
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume8\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-01-07 10:56:57.999
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume8\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-01-07 10:55:24.067
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume8\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-01-07 10:55:23.907
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume8\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-01-07 10:55:23.772
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume8\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-01-07 10:55:23.639
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume8\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-01-07 10:53:33.709
Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume8\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz
Percentage of memory in use: 15%
Total physical RAM: 32664.84 MB
Available physical RAM: 27704.08 MB
Total Virtual: 45976.84 MB
Available Virtual: 40307 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:231.86 GB) (Free:61.16 GB) NTFS
Drive d: (OffXPpro) (CDROM) (Total:0.61 GB) (Free:0 GB) CDFS
Drive e: (GAME SSD) (Fixed) (Total:465.63 GB) (Free:237.57 GB) NTFS
Drive f: (GAMING) (Fixed) (Total:3725.9 GB) (Free:2207.99 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 3726 GB) (Disk ID: 8CB69180)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 2 (Size: 232.9 GB) (Disk ID: 7E01656E)

Partition: GPT.

==================== End of Addition.txt ============================