Funky PC - aswMBR aborted its scan

[Healthy]

good idea, I'll keep TM open

Hadn't considered that, I'll give Lenovo a ring

logs below , I made a few edits of personal files for privacy

thanks

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
Ran by Joel (administrator) on DESKTOP-ADQFQBC (28-06-2018 20:15:10)
Running from C:\Users\Joel\Desktop
Loaded Profiles: Joel (Available Profiles: Joel)
Platform: Windows 10 Home Version 1803 17134.112 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki119742.inf_amd64_0fff39a8bf9a6255\igfxCUIService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki119742.inf_amd64_0fff39a8bf9a6255\IntelCpHDCPSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe
(Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BCA\pabeSvc64.exe
(Qualcomm Technologies Inc.) C:\Program Files (x86)\Qualcomm\drivers\QcomWlanSrvx64.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\MsMpEng.exe
(Lenovo) C:\Program Files\Lenovo\YMC\ymc.exe
() C:\ProgramData\Lenovo\PLHotkeyService\PLHotkeyService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki119742.inf_amd64_0fff39a8bf9a6255\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\NisSrv.exe
(Intel Corporation) C:\Program Files\Intel Corporation\Intel(R) Security Assist\isa.exe
(Intel Corporation) C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
(Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki119742.inf_amd64_0fff39a8bf9a6255\igfxEM.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo(beijing) Limited) C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(IrisTech) C:\Users\Joel\AppData\Local\Iris mini\iris-mini-dynamic.exe
() C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18381312 2017-04-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1484288 2017-04-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1484288 2017-04-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1484288 2017-04-05] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-25] (Logitech, Inc.)
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (Lenovo(beijing) Limited)
HKLM\...\Run: [DisplayLinkUI] => "C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe" -basicMode
HKLM\...\Run: [DAX2_APP] => C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [849920 2017-03-07] (Dolby Laboratories, Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-05-22] (Apple Inc.)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] ()
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1 [0 2018-06-14] ()
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1 [0 2018-06-14] ()
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Corporation)
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46281248 2018-05-30] ()
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\Run: [f.lux] => C:\Users\Joel\AppData\Local\FluxSoftware\Flux\flux.exe [1678840 2017-10-10] (f.lux Software LLC)
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\Run: [IrisMini] => C:\Users\Joel\AppData\Local\Iris mini\iris-mini-dynamic.exe [461312 2017-12-25] (IrisTech)
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-05-23] (Apple Inc.)
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\Run: [Spotify Web Helper] => C:\Users\Joel\AppData\Roaming\Spotify\SpotifyWebHelper.exe [781712 2018-06-27] (Spotify Ltd)
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [217088 2018-04-11] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{823506e2-4125-4c53-85d3-7576e43235da}: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{fc320ad6-efdc-46d6-8adc-ebcc9605230d}: [DhcpNameServer] 10.0.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-06-18] (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: vr9gjn7n.default
FF ProfilePath: C:\Users\Joel\AppData\Roaming\Mozilla\Firefox\Profiles\vr9gjn7n.default [2018-06-28]
FF Extension: (LastPass: Free Password Manager) - C:\Users\Joel\AppData\Roaming\Mozilla\Firefox\Profiles\vr9gjn7n.default\Extensions\support@lastpass.com.xpi [2018-06-28]
FF Extension: (Take Webpage Screenshots Entirely - FireShot) - C:\Users\Joel\AppData\Roaming\Mozilla\Firefox\Profiles\vr9gjn7n.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}.xpi [2018-05-15]
FF SearchPlugin: C:\Users\Joel\AppData\Roaming\Mozilla\Firefox\Profiles\vr9gjn7n.default\searchplugins\bing-lavasoft-ff59.xml [2018-04-06]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2017-09-18] [Legacy] [not signed]
FF Plugin-x32: @glance.net/GlanceClient -> C:\Program Files (x86)\GlanceGuest\npglance.dll [2018-01-24] (Glance Networks, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-04] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-10] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2801148805-3218214289-1038808527-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Joel\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2018-04-18] (Zoom Video Communications, Inc.)

Chrome:
=======
CHR DefaultSearchKeyword: Default -> lp
CHR Profile: C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default [2018-06-28]
CHR Extension: (Slides) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-15]
CHR Extension: (Docs) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-15]
CHR Extension: (Google Drive) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-12]
CHR Extension: (YouTube) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-12]
CHR Extension: (Intent.) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\dilalhbmodifkodcpfeohbcdndcdnhmc [2018-05-22]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2017-09-18]
CHR Extension: (Facebook Pixel Helper) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdgfkebogiimcoedlicjlajpkdmockpc [2018-06-07]
CHR Extension: (Sheets) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-15]
CHR Extension: (News Feed Eradicator for Facebook) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjcldmjmjhkklehbacihaiopjklihlgg [2017-11-17]
CHR Extension: (Google Docs Offline) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-14]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2018-06-22]
CHR Extension: (ActiveCampaign for Chrome) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilgclabmhgbhfoohngmjadlfmbagmlnf [2018-02-25]
CHR Extension: (BeLive Desktop) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcgoegpgdgklohplpnopagfbipaaddcl [2017-12-03]
CHR Extension: (Show Pixel Color) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkojbkpbbffiggegdjnkfkndffocgahl [2017-12-05]
CHR Extension: (StayFocusd) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\laankejkbhbdhmipfmgcngdelahlfoji [2018-06-26]
CHR Extension: (Take Webpage Screenshots Entirely - FireShot) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2018-02-20]
CHR Extension: (Screencastify - Screen Video Recorder) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmeijimgabbpbgpdklnllpncmdofkcpn [2018-06-07]
CHR Extension: (Video Speed Controller) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffaoalbilbmmfgbnbgppjihopabppdk [2018-04-04]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Gmail) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-09-12]
CHR Extension: (Chrome Media Router) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-13]
CHR Extension: (No Name) - C:\Users\Joel\Downloads\Sci-Hub\Sci-Hub [2018-06-25] [UpdateUrl: hxxps://sci-hub.tw/update] <==== ATTENTION
CHR HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESMService; C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe [3019024 2017-09-24] (Intel Corporation)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-04-27] (Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8654504 2018-06-12] (Microsoft Corporation)
R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [194048 2017-03-07] (Dolby Laboratories, Inc.)
R2 esifsvc; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2208888 2016-09-02] (Intel Corporation)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [71408 2018-05-16] (Lenovo Group Limited)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessLegacyCSLoader; C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe [173288 2016-11-17] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe [496872 2016-11-17] (Intel(R) Corporation)
R2 IntelBCAsvc; C:\Program Files\Intel\BCA\pabeSvc64.exe [3024632 2016-09-22] (Intel(R) Corporation)
S2 isaCHelperSvc; C:\Program Files\Intel Corporation\Intel(R) Security Assist\isaHelperService.exe [21768 2016-11-17] ()
R3 isaCSvc; C:\Program Files\Intel Corporation\Intel(R) Security Assist\isa.exe [305928 2016-11-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-08-30] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
R2 QcomWlanSrv; C:\Program Files (x86)\Qualcomm\drivers\QcomWlanSrvx64.exe [192512 2017-07-13] (Qualcomm Technologies Inc.) [File not signed]
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe [3925648 2018-06-26] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MsMpEng.exe [100080 2018-06-26] (Microsoft Corporation)
R2 ymc; C:\Program Files\Lenovo\YMC\ymc.exe [49032 2016-12-23] (Lenovo)
R2 YogaPLService; C:\ProgramData\Lenovo\PLHotkeyService\PLHotkeyService.exe [29112 2015-06-27] ()

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [84200 2018-05-14] (DisplayLink Corp.)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [66624 2016-08-12] (Intel Corporation)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [350272 2016-08-12] (Intel Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-06-28] (Malwarebytes)
R3 Microsoft_Bluetooth_AvrcpTransport; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.AvrcpTransport.sys [46592 2018-04-11] (Microsoft Corporation)
R1 ndisrd; C:\WINDOWS\system32\DRIVERS\ndisrfl.sys [59792 2016-09-13] (Intel Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3150344 2016-10-24] (Realtek Semiconductor Corp.)
R3 rtux64w10; C:\WINDOWS\System32\drivers\rtux64w10.sys [348672 2018-04-11] (Realtek )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 usbaudio2; C:\WINDOWS\system32\DRIVERS\usbaudio2.sys [229888 2018-04-11] (Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46592 2018-06-26] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [340008 2018-06-26] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [59944 2018-06-26] (Microsoft Corporation)
R3 XSplit_Dummy; C:\WINDOWS\system32\drivers\xspltspk.sys [26200 2016-06-15] (SplitmediaLabs Limited)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-28 17:31 - 2018-06-28 17:31 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\45A2C25A.sys
2018-06-28 17:27 - 2018-06-28 17:43 - 000000000 ____D C:\Users\Joel\Desktop\mbar
2018-06-28 17:27 - 2018-06-28 17:43 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2018-06-28 17:27 - 2018-06-28 17:30 - 000192952 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2018-06-28 17:27 - 2018-06-28 17:27 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\5123C121.sys
2018-06-28 17:25 - 2018-06-28 17:26 - 014161479 _____ C:\Users\Joel\Desktop\mbar-1.10.3.1001-nr.exe
2018-06-28 15:22 - 2018-06-28 15:22 - 000000000 ___RD C:\Users\Joel\AppData\Roaming\Brother
2018-06-28 12:12 - 2018-06-28 12:12 - 000167923 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-28 11:02 - 2018-06-28 11:02 - 000141658 _____ C:\Users\Joel\Downloads\Account Agreement.pdf
2018-06-27 23:38 - 2018-06-27 23:38 - 000083975 _____ C:\Users\Joel\Downloads\ProviderReport_201806280235162285525431a1ce3.pdf
2018-06-27 23:37 - 2018-06-27 23:37 - 000062718 _____ C:\Users\Joel\Downloads\MemberReport_201806280235162285525431a1ce3.pdf
2018-06-27 19:35 - 2018-06-27 19:35 - 001627873 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-27 19:32 - 2018-06-27 19:32 - 008057236 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-27 13:28 - 2018-06-27 13:28 - 000245731 _____ C:\Users\Joel\Desktop\xx.pdf
2018-06-27 13:27 - 2018-06-27 13:27 - 038645351 _____ C:\Users\Joel\Downloads\Justin-Rebekah-Rhodes-GettingStartedwithChickens.pdf
2018-06-27 13:27 - 2018-06-27 13:27 - 001953303 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-27 13:27 - 2018-06-27 13:27 - 001595888 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-27 13:27 - 2018-06-27 13:27 - 000336107 _____ C:\Users\Joel\Downloads\Ryan-Sternagel-Ultimate-Healthy-Home-Checklist (1).pdf
2018-06-27 13:27 - 2018-06-27 13:27 - 000322207 _____ C:\Users\Joel\Downloads\Robyn-Openshaw-emf-action-plan (1).pdf
2018-06-27 13:27 - 2018-06-27 13:27 - 000216241 _____ C:\Users\Joel\Desktop\Razi_Berry.pdf
2018-06-27 13:27 - 2018-06-27 13:27 - 000195916 _____ C:\Users\Joel\Desktop\Robyn_Openshaw.pdf
2018-06-27 13:26 - 2018-06-27 13:28 - 142751603 _____ C:\Users\Joel\Downloads\MamaZ-KitchenMakeover.pdf
2018-06-27 13:26 - 2018-06-27 13:27 - 008174352 _____ C:\Users\Joel\Downloads\xxx.pdf
2018-06-27 13:26 - 2018-06-27 13:26 - 011664245 _____ C:\Users\Joel\Downloads\GreenMedInfo-Brain-Rejuvenation-Guide.pdf
2018-06-27 13:26 - 2018-06-27 13:26 - 001796105 _____ C:\Users\Joel\Downloads\Evan-Brand-Candida-From-A-Functional-Perspective-Slides.pdf
2018-06-27 13:26 - 2018-06-27 13:26 - 000875451 _____ C:\Users\Joel\Downloads\Tom-Obryan-A_SearchableQ-A_on_Toxicity.pdf
2018-06-27 13:26 - 2018-06-27 13:26 - 000792575 _____ C:\Users\Joel\Downloads\Chris-Wark-20-questions-for-your-oncologist.pdf
2018-06-27 13:26 - 2018-06-27 13:26 - 000155581 _____ C:\Users\Joel\Downloads\JonathanLandsman-VitaminToKillViruses.pdf
2018-06-27 12:21 - 2018-06-28 17:55 - 000000154 _____ C:\Users\Joel\Desktop\mware2.txt
2018-06-27 12:21 - 2018-06-27 12:21 - 000001311 _____ C:\Users\Joel\Desktop\mware.txt
2018-06-27 12:15 - 2018-06-28 14:25 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-06-27 12:15 - 2018-06-27 12:15 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-06-27 12:15 - 2018-06-27 12:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-06-27 12:15 - 2018-05-24 06:55 - 000152184 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2018-06-27 12:14 - 2018-06-27 12:14 - 000001020 _____ C:\Users\Joel\Desktop\scan_180627-120628.txt
2018-06-27 12:10 - 2018-06-27 12:11 - 072223136 _____ (Malwarebytes ) C:\Users\Joel\Desktop\mb3-setup-consumer-3.5.1.2522-1.0.374-1.0.5615.exe
2018-06-27 12:04 - 2018-06-27 12:04 - 000000000 ____D C:\ProgramData\Emsisoft
2018-06-27 12:01 - 2018-06-27 12:16 - 000000000 ____D C:\EEK
2018-06-27 11:58 - 2018-06-27 12:00 - 340148384 _____ C:\Users\Joel\Desktop\EmsisoftEmergencyKit.exe
2018-06-27 11:56 - 2018-06-27 11:56 - 000067805 _____ C:\Users\Joel\Downloads\Joel_05_16_18_.pdf
2018-06-27 10:10 - 2018-06-27 10:10 - 000094820 _____ C:\Users\Joel\Downloads\Statement_06_26_2018.PDF
2018-06-27 10:01 - 2018-06-27 10:01 - 000031910 _____ C:\Users\Joel\Desktop\rk_29C.tmp.txt
2018-06-27 09:36 - 2018-06-27 09:36 - 000028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2018-06-27 09:35 - 2018-06-27 10:05 - 000000000 ____D C:\ProgramData\RogueKiller
2018-06-27 09:35 - 2018-06-27 09:35 - 000000906 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2018-06-27 09:35 - 2018-06-27 09:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2018-06-27 09:35 - 2018-06-27 09:35 - 000000000 ____D C:\Program Files\RogueKiller
2018-06-27 09:34 - 2018-06-27 09:34 - 036688664 _____ (Adlice Software ) C:\Users\Joel\Desktop\RogueKiller_setup.exe
2018-06-27 09:33 - 2018-06-27 09:33 - 000003596 _____ C:\Users\Joel\Desktop\AdwCleaner[C00].txt
2018-06-27 09:30 - 2018-06-27 09:30 - 007395536 _____ (Malwarebytes) C:\Users\Joel\Desktop\adwcleaner_7.2.1.exe
2018-06-27 09:29 - 2018-06-27 09:31 - 000000000 ____D C:\AdwCleaner
2018-06-27 09:28 - 2018-06-27 09:29 - 007372496 _____ (Malwarebytes) C:\Users\Joel\Desktop\AdwCleaner.exe
2018-06-27 09:25 - 2018-06-27 09:26 - 000003215 _____ C:\Users\Joel\Desktop\Fixlog.txt
2018-06-26 21:44 - 2018-06-26 21:44 - 001339719 _____ C:\Users\Joel\Desktop\rootalyz-0.3.4.47.zip
2018-06-26 21:44 - 2018-06-26 21:44 - 000000000 ____D C:\Users\Joel\Desktop\rootalyz-0.3.4.47
2018-06-26 21:23 - 2018-06-27 18:37 - 000000000 ____D C:\WINDOWS\Minidump
2018-06-26 21:18 - 2018-06-26 21:18 - 005198336 _____ (AVAST Software) C:\Users\Joel\Desktop\aswMBR.exe
2018-06-26 21:14 - 2018-06-26 21:14 - 000045480 _____ C:\Users\Joel\Desktop\Addition.txt
2018-06-26 21:13 - 2018-06-28 20:15 - 000023508 _____ C:\Users\Joel\Desktop\FRST.txt
2018-06-26 21:13 - 2018-06-28 20:15 - 000000000 ____D C:\FRST
2018-06-26 21:10 - 2018-06-26 21:10 - 005766144 _____ (Tweaking.com) C:\Users\Joel\Downloads\tweaking.com_registry_backup_setup.exe
2018-06-26 21:10 - 2018-06-26 21:10 - 000017981 _____ C:\WINDOWS\Tweaking.com - Registry Backup Setup Log.txt
2018-06-26 21:10 - 2018-06-26 21:10 - 000002319 _____ C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2018-06-26 21:10 - 2018-06-26 21:10 - 000000207 _____ C:\WINDOWS\tweaking.com-regbackup-DESKTOP-ADQFQBC-Windows-10-Home-(64-bit).dat
2018-06-26 21:10 - 2018-06-26 21:10 - 000000000 ____D C:\RegBackup
2018-06-26 21:10 - 2018-06-26 21:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2018-06-26 21:10 - 2018-06-26 21:10 - 000000000 ____D C:\Program Files (x86)\Tweaking.com
2018-06-26 21:09 - 2018-06-26 21:09 - 002412544 _____ (Farbar) C:\Users\Joel\Desktop\FRST64.exe
2018-06-26 19:20 - 2018-06-26 19:20 - 000002344 _____ C:\Users\Joel\Desktop\Kindle.lnk
2018-06-26 11:28 - 2018-06-26 11:28 - 000112090 _____ C:\Users\Joel\Downloads\Wellbutrin - brustolim2006 -.pdf
2018-06-25 18:51 - 2018-06-25 18:51 - 000000000 ____D C:\Users\Joel\Downloads\xx
2018-06-25 18:48 - 2018-06-25 18:48 - 000139334 _____ C:\Users\Joel\Downloads\xx.zip
2018-06-25 13:57 - 2018-06-25 13:57 - 000004002 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-22 11:11 - 2018-06-22 11:11 - 005889880 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-22 11:11 - 2018-06-22 11:11 - 001109371 _____ C:\Users\Joel\Downloads\xx.zip
2018-06-22 11:11 - 2018-06-22 11:11 - 001064545 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-22 11:11 - 2018-06-22 11:11 - 000517581 _____ C:\Users\Joel\Downloads\questions_and_answers.pdf
2018-06-22 11:11 - 2018-06-22 11:11 - 000065777 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-20 19:14 - 2018-06-20 19:14 - 000000000 ____D C:\ProgramData\Packages
2018-06-20 13:47 - 2018-06-20 13:47 - 000343295 _____ C:\Users\Joel\Desktop\Association of Stress-Related Disorders With Subsequent 10.1001@jama.2018.7028.pdf
2018-06-18 16:15 - 2018-06-18 16:15 - 009348330 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-18 14:42 - 2018-06-18 14:42 - 000070572 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-18 14:41 - 2018-06-18 14:41 - 000224371 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-17 08:53 - 2018-06-17 08:53 - 002999307 _____ C:\Users\Joel\Downloads\xx.pdf
2018-06-15 16:12 - 2018-06-15 16:12 - 000088752 _____ C:\Users\Joel\Downloads\CCF06152018_00001.pdf
2018-06-15 16:12 - 2018-06-15 16:12 - 000088752 _____ C:\Users\Joel\Desktop\xx.pdf
2018-06-14 20:54 - 2018-06-14 20:54 - 037065264 _____ C:\Users\Joel\Downloads\xx.zip
2018-06-14 20:53 - 2018-06-14 20:53 - 037065264 _____ C:\Users\Joel\Downloads\xx.zip
2018-06-14 20:53 - 2018-06-14 20:53 - 002999307 _____ C:\Users\Joel\Desktop\xx.pdf
2018-06-14 16:09 - 2018-06-14 16:09 - 000000000 ____D C:\Users\Joel\AppData\Local\D3DSCache
2018-06-14 13:08 - 2018-06-14 13:08 - 000013305 _____ C:\Users\Joel\Downloads\claims.pdf
2018-06-14 13:08 - 2018-06-14 13:08 - 000013305 _____ C:\Users\Joel\Downloads\claims (1).pdf
2018-06-13 08:33 - 2018-06-08 12:02 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-06-13 08:33 - 2018-06-08 02:29 - 007520000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-13 08:33 - 2018-06-08 02:13 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-06-13 08:33 - 2018-06-08 02:09 - 006569960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-13 08:33 - 2018-06-08 02:02 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-06-13 08:33 - 2018-05-20 12:43 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-06-13 08:33 - 2018-05-20 09:59 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-06-13 08:33 - 2018-05-20 04:52 - 007436632 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-06-13 08:33 - 2018-05-20 04:34 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-06-13 08:33 - 2018-05-20 04:30 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-06-13 08:32 - 2018-06-08 12:07 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-06-13 08:32 - 2018-06-08 12:05 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-06-13 08:32 - 2018-06-08 12:02 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-06-13 08:32 - 2018-06-08 12:02 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2018-06-13 08:32 - 2018-06-08 12:01 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-06-13 08:32 - 2018-06-08 12:01 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2018-06-13 08:32 - 2018-06-08 11:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-06-13 08:32 - 2018-06-08 11:47 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2018-06-13 08:32 - 2018-06-08 11:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-13 08:32 - 2018-06-08 11:45 - 012712448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-06-13 08:32 - 2018-06-08 11:45 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-13 08:32 - 2018-06-08 11:45 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2018-06-13 08:32 - 2018-06-08 11:45 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-13 08:32 - 2018-06-08 11:44 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-06-13 08:32 - 2018-06-08 11:44 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2018-06-13 08:32 - 2018-06-08 11:44 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-06-13 08:32 - 2018-06-08 11:44 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2018-06-13 08:32 - 2018-06-08 11:43 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2018-06-13 08:32 - 2018-06-08 11:43 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-13 08:32 - 2018-06-08 11:43 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2018-06-13 08:32 - 2018-06-08 11:43 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2018-06-13 08:32 - 2018-06-08 11:43 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2018-06-13 08:32 - 2018-06-08 11:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-13 08:32 - 2018-06-08 11:43 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-06-13 08:32 - 2018-06-08 11:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2018-06-13 08:32 - 2018-06-08 11:42 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-06-13 08:32 - 2018-06-08 11:42 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-06-13 08:32 - 2018-06-08 11:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-06-13 08:32 - 2018-06-08 11:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-06-13 08:32 - 2018-06-08 11:41 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-06-13 08:32 - 2018-06-08 11:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-06-13 08:32 - 2018-06-08 11:41 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-06-13 08:32 - 2018-06-08 11:41 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-06-13 08:32 - 2018-06-08 11:41 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-13 08:32 - 2018-06-08 11:41 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2018-06-13 08:32 - 2018-06-08 11:40 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2018-06-13 08:32 - 2018-06-08 10:04 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-06-13 08:32 - 2018-06-08 09:58 - 002206544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2018-06-13 08:32 - 2018-06-08 09:58 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2018-06-13 08:32 - 2018-06-08 09:51 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-06-13 08:32 - 2018-06-08 09:50 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2018-06-13 08:32 - 2018-06-08 09:48 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-06-13 08:32 - 2018-06-08 09:48 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-06-13 08:32 - 2018-06-08 09:47 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2018-06-13 08:32 - 2018-06-08 09:47 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-06-13 08:32 - 2018-06-08 09:47 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2018-06-13 08:32 - 2018-06-08 09:47 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2018-06-13 08:32 - 2018-06-08 09:47 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-06-13 08:32 - 2018-06-08 09:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2018-06-13 08:32 - 2018-06-08 09:46 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2018-06-13 08:32 - 2018-06-08 09:46 - 002016256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-06-13 08:32 - 2018-06-08 09:46 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-06-13 08:32 - 2018-06-08 09:45 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-06-13 08:32 - 2018-06-08 09:06 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-06-13 08:32 - 2018-06-08 09:05 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-13 08:32 - 2018-06-08 09:05 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-13 08:32 - 2018-06-08 07:00 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-13 08:32 - 2018-06-08 07:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-06-13 08:32 - 2018-06-08 03:38 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-06-13 08:32 - 2018-06-08 03:37 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-06-13 08:32 - 2018-06-08 03:35 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-06-13 08:32 - 2018-06-08 03:35 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-06-13 08:32 - 2018-06-08 03:34 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-06-13 08:32 - 2018-06-08 03:34 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-06-13 08:32 - 2018-06-08 03:31 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-06-13 08:32 - 2018-06-08 03:31 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-06-13 08:32 - 2018-06-08 03:31 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2018-06-13 08:32 - 2018-06-08 03:30 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-06-13 08:32 - 2018-06-08 02:34 - 001140576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-06-13 08:32 - 2018-06-08 02:34 - 000983016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-06-13 08:32 - 2018-06-08 02:33 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2018-06-13 08:32 - 2018-06-08 02:33 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-13 08:32 - 2018-06-08 02:33 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-13 08:32 - 2018-06-08 02:33 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-13 08:32 - 2018-06-08 02:31 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-06-13 08:32 - 2018-06-08 02:31 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-06-13 08:32 - 2018-06-08 02:31 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2018-06-13 08:32 - 2018-06-08 02:30 - 009148320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-06-13 08:32 - 2018-06-08 02:30 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-06-13 08:32 - 2018-06-08 02:30 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-13 08:32 - 2018-06-08 02:30 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-06-13 08:32 - 2018-06-08 02:30 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-06-13 08:32 - 2018-06-08 02:30 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-13 08:32 - 2018-06-08 02:30 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-06-13 08:32 - 2018-06-08 02:30 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-06-13 08:32 - 2018-06-08 02:30 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-06-13 08:32 - 2018-06-08 02:30 - 000567184 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-06-13 08:32 - 2018-06-08 02:30 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-06-13 08:32 - 2018-06-08 02:30 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-06-13 08:32 - 2018-06-08 02:30 - 000491328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-06-13 08:32 - 2018-06-08 02:30 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-06-13 08:32 - 2018-06-08 02:30 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-06-13 08:32 - 2018-06-08 02:30 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-06-13 08:32 - 2018-06-08 02:30 - 000134584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 006817384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 004403280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 002836384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-06-13 08:32 - 2018-06-08 02:29 - 002753048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-13 08:32 - 2018-06-08 02:29 - 002570712 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 002564984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 002422688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-06-13 08:32 - 2018-06-08 02:29 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001946328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001921952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2018-06-13 08:32 - 2018-06-08 02:29 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001611592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001457136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-06-13 08:32 - 2018-06-08 02:29 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001288816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001258288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-06-13 08:32 - 2018-06-08 02:29 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001150416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001148808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001112608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 001026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-06-13 08:32 - 2018-06-08 02:29 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2018-06-13 08:32 - 2018-06-08 02:29 - 000885880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000792992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-06-13 08:32 - 2018-06-08 02:29 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-06-13 08:32 - 2018-06-08 02:29 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000413824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000413088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-06-13 08:32 - 2018-06-08 02:29 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-06-13 08:32 - 2018-06-08 02:29 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000266656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-06-13 08:32 - 2018-06-08 02:29 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-13 08:32 - 2018-06-08 02:29 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2018-06-13 08:32 - 2018-06-08 02:12 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-06-13 08:32 - 2018-06-08 02:12 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-06-13 08:32 - 2018-06-08 02:11 - 001461744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-06-13 08:32 - 2018-06-08 02:11 - 000550616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-06-13 08:32 - 2018-06-08 02:10 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-06-13 08:32 - 2018-06-08 02:10 - 002331584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-06-13 08:32 - 2018-06-08 02:10 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2018-06-13 08:32 - 2018-06-08 02:10 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-06-13 08:32 - 2018-06-08 02:10 - 001397200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-06-13 08:32 - 2018-06-08 02:10 - 001011992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-06-13 08:32 - 2018-06-08 02:10 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-06-13 08:32 - 2018-06-08 02:10 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2018-06-13 08:32 - 2018-06-08 02:10 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 006527064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 004788512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 002535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 002242216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 001980872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 001805776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 001709720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 001380200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 001129648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 001020168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 000988136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 000770160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2018-06-13 08:32 - 2018-06-08 02:09 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2018-06-13 08:32 - 2018-06-08 02:04 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-06-13 08:32 - 2018-06-08 02:03 - 022005760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-06-13 08:32 - 2018-06-08 02:03 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-13 08:32 - 2018-06-08 02:03 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-13 08:32 - 2018-06-08 02:03 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-13 08:32 - 2018-06-08 02:03 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-06-13 08:32 - 2018-06-08 02:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-06-13 08:32 - 2018-06-08 02:02 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2018-06-13 08:32 - 2018-06-08 02:02 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-13 08:32 - 2018-06-08 02:01 - 004563456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-13 08:32 - 2018-06-08 02:01 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-06-13 08:32 - 2018-06-08 02:01 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-06-13 08:32 - 2018-06-08 02:01 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-06-13 08:32 - 2018-06-08 02:01 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2018-06-13 08:32 - 2018-06-08 02:01 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-13 08:32 - 2018-06-08 02:01 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-13 08:32 - 2018-06-08 02:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2018-06-13 08:32 - 2018-06-08 02:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidparse.sys
2018-06-13 08:32 - 2018-06-08 02:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-06-13 08:32 - 2018-06-08 02:00 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-06-13 08:32 - 2018-06-08 02:00 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-06-13 08:32 - 2018-06-08 02:00 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-06-13 08:32 - 2018-06-08 02:00 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-13 08:32 - 2018-06-08 02:00 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2018-06-13 08:32 - 2018-06-08 02:00 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-06-13 08:32 - 2018-06-08 02:00 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-06-13 08:32 - 2018-06-08 02:00 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-13 08:32 - 2018-06-08 02:00 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2018-06-13 08:32 - 2018-06-08 01:59 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-06-13 08:32 - 2018-06-08 01:59 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-06-13 08:32 - 2018-06-08 01:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-13 08:32 - 2018-06-08 01:59 - 001767936 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-06-13 08:32 - 2018-06-08 01:59 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-06-13 08:32 - 2018-06-08 01:59 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-06-13 08:32 - 2018-06-08 01:59 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-06-13 08:32 - 2018-06-08 01:59 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-06-13 08:32 - 2018-06-08 01:59 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2018-06-13 08:32 - 2018-06-08 01:59 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-13 08:32 - 2018-06-08 01:59 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-13 08:32 - 2018-06-08 01:58 - 007581696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-06-13 08:32 - 2018-06-08 01:58 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-06-13 08:32 - 2018-06-08 01:58 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2018-06-13 08:32 - 2018-06-08 01:58 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-13 08:32 - 2018-06-08 01:58 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-13 08:32 - 2018-06-08 01:58 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-06-13 08:32 - 2018-06-08 01:58 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-06-13 08:32 - 2018-06-08 01:58 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-13 08:32 - 2018-06-08 01:58 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-06-13 08:32 - 2018-06-08 01:58 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2018-06-13 08:32 - 2018-06-08 01:57 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-06-13 08:32 - 2018-06-08 01:57 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-13 08:32 - 2018-06-08 01:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-06-13 08:32 - 2018-06-08 01:57 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-06-13 08:32 - 2018-06-08 01:57 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-13 08:32 - 2018-06-08 01:57 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-06-13 08:32 - 2018-06-08 01:57 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-06-13 08:32 - 2018-06-08 01:57 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-13 08:32 - 2018-06-08 01:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 005780992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 004336128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 002902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 002900480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-13 08:32 - 2018-06-08 01:56 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 003441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-06-13 08:32 - 2018-06-08 01:55 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 001371648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 001033728 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2018-06-13 08:32 - 2018-06-08 01:55 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-06-13 08:32 - 2018-06-08 01:55 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2018-06-13 08:32 - 2018-06-08 01:54 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-06-13 08:32 - 2018-06-08 01:54 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2018-06-13 08:32 - 2018-06-08 01:53 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2018-06-13 08:32 - 2018-06-08 01:53 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-06-13 08:32 - 2018-06-08 01:53 - 001108992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-06-13 08:32 - 2018-06-08 01:53 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2018-06-13 08:32 - 2018-06-08 01:53 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-13 08:32 - 2018-06-08 01:53 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-06-13 08:32 - 2018-06-08 01:53 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 08:32 - 2018-06-08 01:53 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-06-13 08:32 - 2018-06-08 00:41 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-06-13 08:32 - 2018-06-06 11:57 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-13 08:32 - 2018-06-05 21:20 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-06-13 08:32 - 2018-06-01 16:24 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-13 08:32 - 2018-06-01 15:54 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-13 08:32 - 2018-05-24 20:24 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-06-13 08:32 - 2018-05-20 12:45 - 000308408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-06-13 08:32 - 2018-05-20 12:42 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-06-13 08:32 - 2018-05-20 12:42 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-06-13 08:32 - 2018-05-20 12:26 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2018-06-13 08:32 - 2018-05-20 12:23 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-06-13 08:32 - 2018-05-20 12:23 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2018-06-13 08:32 - 2018-05-20 12:23 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-06-13 08:32 - 2018-05-20 12:22 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-06-13 08:32 - 2018-05-20 12:22 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2018-06-13 08:32 - 2018-05-20 12:22 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-06-13 08:32 - 2018-05-20 12:22 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-06-13 08:32 - 2018-05-20 11:15 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-06-13 08:32 - 2018-05-20 11:14 - 020383712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-06-13 08:32 - 2018-05-20 11:14 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-06-13 08:32 - 2018-05-20 11:02 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2018-06-13 08:32 - 2018-05-20 11:00 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2018-06-13 08:32 - 2018-05-20 10:59 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-06-13 08:32 - 2018-05-20 10:59 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-06-13 08:32 - 2018-05-20 09:45 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-06-13 08:32 - 2018-05-20 09:39 - 000788480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-06-13 08:32 - 2018-05-20 09:35 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-06-13 08:32 - 2018-05-20 09:34 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2018-06-13 08:32 - 2018-05-20 07:54 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2018-06-13 08:32 - 2018-05-20 05:33 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-06-13 08:32 - 2018-05-20 04:53 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-06-13 08:32 - 2018-05-20 04:53 - 001947808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-06-13 08:32 - 2018-05-20 04:53 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2018-06-13 08:32 - 2018-05-20 04:53 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2018-06-13 08:32 - 2018-05-20 04:53 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2018-06-13 08:32 - 2018-05-20 04:53 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2018-06-13 08:32 - 2018-05-20 04:52 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-06-13 08:32 - 2018-05-20 04:52 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-06-13 08:32 - 2018-05-20 04:52 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-06-13 08:32 - 2018-05-20 04:52 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2018-06-13 08:32 - 2018-05-20 04:34 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2018-06-13 08:32 - 2018-05-20 04:33 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-06-13 08:32 - 2018-05-20 04:33 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2018-06-13 08:32 - 2018-05-20 04:32 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-06-13 08:32 - 2018-05-20 04:32 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-06-13 08:32 - 2018-05-20 04:32 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2018-06-13 08:32 - 2018-05-20 04:32 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-06-13 08:32 - 2018-05-20 04:32 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-06-13 08:32 - 2018-05-20 04:32 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2018-06-13 08:32 - 2018-05-20 04:31 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-06-13 08:32 - 2018-05-20 04:28 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-06-13 08:32 - 2018-05-20 04:28 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-06-13 08:32 - 2018-05-20 04:28 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-06-13 08:32 - 2018-05-20 04:27 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2018-06-13 08:32 - 2018-05-20 04:27 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-13 08:32 - 2018-05-20 04:26 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-06-13 08:32 - 2018-05-20 04:26 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-06-13 08:32 - 2018-05-20 04:26 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2018-06-13 08:32 - 2018-05-20 04:26 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-06-13 08:32 - 2018-05-20 04:26 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2018-06-13 08:32 - 2018-05-20 04:26 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-06-13 08:32 - 2018-05-20 04:26 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-06-13 08:32 - 2018-05-20 04:26 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll
2018-06-13 08:32 - 2018-05-20 04:25 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-06-13 08:32 - 2018-05-20 04:25 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2018-06-13 08:32 - 2018-05-20 04:24 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-06-13 08:32 - 2018-05-20 04:24 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-06-13 08:32 - 2018-05-20 04:24 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2018-06-13 08:32 - 2018-05-20 04:23 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-06-13 08:32 - 2018-05-20 04:23 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-06-13 08:32 - 2018-05-20 04:23 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-06-13 08:32 - 2018-05-20 04:23 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-06-13 08:32 - 2018-05-20 04:23 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-06-13 08:32 - 2018-05-20 04:21 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2018-06-13 08:32 - 2018-05-20 04:21 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-06-13 08:32 - 2018-05-20 04:21 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2018-06-13 08:32 - 2018-05-20 04:21 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-06-13 08:32 - 2018-05-20 04:21 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-06-13 08:32 - 2018-05-20 04:17 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-06-13 08:32 - 2018-05-20 04:16 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-06-13 08:32 - 2018-05-20 04:16 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2018-06-13 08:32 - 2018-05-20 04:16 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-13 08:32 - 2018-05-20 04:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-06-13 08:32 - 2018-05-20 04:15 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2018-06-13 08:32 - 2018-05-20 04:15 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll
2018-06-13 08:32 - 2018-05-20 04:14 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-06-13 08:32 - 2018-05-20 04:14 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2018-06-13 08:32 - 2018-05-20 04:13 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-06-13 08:32 - 2018-05-20 04:13 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2018-06-13 08:32 - 2018-05-20 04:12 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-06-13 08:32 - 2018-05-20 04:12 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-06-13 08:32 - 2018-05-20 04:11 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2018-06-13 08:32 - 2018-05-20 04:11 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2018-06-13 08:32 - 2018-05-20 01:26 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat
2018-06-13 08:32 - 2018-05-18 10:08 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2018-06-13 08:25 - 2018-06-13 08:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2018-06-07 14:39 - 2018-06-07 15:24 - 000000444 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2018-05-31 10:04 - 2018-05-31 10:04 - 001531713 _____ C:\Users\Joel\Downloads\anser 31-May-2018 09-58-14(1).pdf
2018-05-30 16:54 - 2018-05-30 16:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2018-05-30 16:54 - 2018-05-30 16:54 - 000000000 ____D C:\Program Files\iPod
2018-05-30 16:53 - 2018-05-30 16:54 - 000000000 ____D C:\Program Files\iTunes
2018-05-29 19:49 - 2018-05-29 19:49 - 002275103 _____ C:\Users\Joel\Desktop\BSA_INITIAL-INTAKE-FORM.pdf
2018-05-29 19:48 - 2018-05-29 19:48 - 000045933 _____ C:\Users\Joel\Desktop\BSA-Special-Request-Form.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-28 20:15 - 2018-05-22 10:31 - 000000000 ___HD C:\Users\Joel\Desktop\.tmp.drivedownload
2018-06-28 20:10 - 2018-04-11 16:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-06-28 19:49 - 2018-05-18 22:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-06-28 18:36 - 2017-09-13 06:36 - 000183339 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2018-06-28 18:30 - 2017-09-12 16:29 - 000000000 ___RD C:\Users\Joel\Google Drive
2018-06-28 18:29 - 2017-09-13 06:44 - 000000000 __SHD C:\Users\Joel\IntelGraphicsProfiles
2018-06-28 17:56 - 2018-05-18 22:56 - 000000000 ____D C:\Users\Joel
2018-06-28 17:27 - 2018-05-08 09:47 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-06-28 16:09 - 2018-05-18 23:00 - 000004166 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46760024-9275-4A4E-9504-B61A02918DFF}
2018-06-28 15:18 - 2017-09-14 20:55 - 000002096 _____ C:\Users\Joel\Downloads\xx.txt
2018-06-28 14:39 - 2017-10-11 09:02 - 000000000 ____D C:\Users\Joel\AppData\LocalLow\Mozilla
2018-06-28 14:32 - 2018-05-18 23:04 - 000838560 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-28 14:32 - 2018-04-11 16:36 - 000000000 ____D C:\WINDOWS\INF
2018-06-28 14:25 - 2018-05-18 23:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-06-28 14:25 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-28 10:58 - 2018-04-11 16:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-27 21:48 - 2018-05-22 10:10 - 000000000 ___HD C:\Users\Joel\Documents\.tmp.drivedownload
2018-06-27 12:24 - 2017-09-16 11:32 - 000000000 ____D C:\Users\Joel\Documents\My Kindle Content
2018-06-27 11:59 - 2017-12-20 21:17 - 000000000 ____D C:\Users\Joel\AppData\Local\Spotify
2018-06-27 10:40 - 2017-12-20 21:14 - 000000000 ____D C:\Users\Joel\AppData\Roaming\Spotify
2018-06-27 10:05 - 2018-04-11 14:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2018-06-27 10:00 - 2017-12-19 20:23 - 000000000 ____D C:\ProgramData\Lavasoft
2018-06-27 10:00 - 2017-12-19 20:23 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2018-06-27 09:57 - 2017-03-18 14:03 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2018-06-27 09:31 - 2017-12-19 20:23 - 000000000 ____D C:\Users\Joel\AppData\Roaming\Lavasoft
2018-06-27 09:31 - 2017-12-19 20:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2018-06-27 09:31 - 2017-09-29 06:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-06-26 22:01 - 2017-09-13 06:44 - 000000000 ____D C:\Users\Joel\AppData\Local\ConnectedDevicesPlatform
2018-06-26 21:23 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-06-26 19:19 - 2017-09-16 11:31 - 000000000 ____D C:\Users\Joel\AppData\Local\Amazon
2018-06-26 17:52 - 2018-02-25 20:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-06-26 15:00 - 2017-09-12 15:53 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-23 11:25 - 2018-05-18 23:00 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2801148805-3218214289-1038808527-1001
2018-06-23 11:25 - 2018-05-18 22:56 - 000002417 _____ C:\Users\Joel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-06-23 11:25 - 2017-09-13 06:46 - 000000000 ___RD C:\Users\Joel\OneDrive
2018-06-22 20:06 - 2017-11-13 19:28 - 000000000 ____D C:\Users\Joel\AppData\Local\Packages
2018-06-22 20:05 - 2018-01-31 21:20 - 000000000 ____D C:\Users\Joel\AppData\Local\PlaceholderTileLogoFolder
2018-06-20 13:06 - 2017-09-18 22:16 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2018-06-19 15:24 - 2017-10-29 12:10 - 000000000 ____D C:\Users\Joel\AppData\Roaming\MightyText
2018-06-18 10:24 - 2017-07-31 15:36 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-06-14 17:43 - 2017-10-11 09:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-06-14 17:43 - 2017-10-11 09:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-06-14 17:22 - 2018-05-03 18:24 - 000000000 ____D C:\Users\Joel\Desktop\1
2018-06-14 17:20 - 2017-10-11 09:02 - 000001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-06-14 12:03 - 2017-09-13 08:49 - 000000000 ____D C:\Users\Joel\Documents\Zoom
2018-06-13 09:49 - 2018-05-18 22:54 - 000403288 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-06-13 09:49 - 2018-04-12 02:19 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\system32\setup
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-06-13 09:49 - 2018-04-11 16:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-06-13 09:49 - 2018-04-11 14:04 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-06-13 09:49 - 2017-11-13 19:33 - 000000000 ___RD C:\Users\Joel\3D Objects
2018-06-13 09:49 - 2017-03-23 10:27 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-06-13 08:35 - 2017-09-14 06:33 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-06-13 08:34 - 2018-04-11 16:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-13 08:34 - 2017-10-10 18:38 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-13 08:34 - 2017-09-14 06:33 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-06-05 16:29 - 2018-04-11 16:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-05 16:29 - 2018-04-11 16:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-06-01 08:57 - 2017-09-12 16:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google

==================== Files in the root of some directories =======

2017-12-29 13:21 - 2018-05-22 07:10 - 000000146 _____ () C:\Users\Joel\AppData\Roaming\gamma_ramp.reg

Some files in TEMP:
====================
2018-06-27 09:36 - 2018-06-08 02:29 - 001946328 _____ (Microsoft Corporation) C:\Users\Joel\AppData\Local\Temp\dllnt_dump.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-18 22:54

==================== End of FRST.txt ============================



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018
Ran by Joel (28-06-2018 20:16:19)
Running from C:\Users\Joel\Desktop
Windows 10 Home Version 1803 17134.112 (X64) (2018-05-19 06:00:31)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2801148805-3218214289-1038808527-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2801148805-3218214289-1038808527-503 - Limited - Disabled)
Guest (S-1-5-21-2801148805-3218214289-1038808527-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2801148805-3218214289-1038808527-1003 - Limited - Enabled)
Joel (S-1-5-21-2801148805-3218214289-1038808527-1001 - Administrator - Enabled) => C:\Users\Joel
WDAGUtilityAccount (S-1-5-21-2801148805-3218214289-1038808527-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\uTorrent) (Version: 3.5.1.44332 - BitTorrent Inc.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated)
Amazon Kindle (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\Amazon Kindle) (Version: 1.24.2.51060 - Amazon)
Apple Application Support (32-bit) (HKLM-x32\...\{C56BA005-F02C-461B-ACA5-A0CE3E32578F}) (Version: 6.5 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{C8087B7C-8496-45BE-92FB-91D31EB73969}) (Version: 6.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{64695C4A-C68F-46B5-A734-50EBF124A68E}) (Version: 11.3.3.4 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Audacity 2.2.0 (HKLM-x32\...\Audacity_is1) (Version: 2.2.0 - Audacity Team)
Backup and Sync from Google (HKLM\...\{AEFBDB5B-899F-4AE6-B789-BA56A652A476}) (Version: 3.42.9858.3671 - Google, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-7840W (HKLM-x32\...\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform)
DisplayLink Graphics Driver (HKLM\...\{DD17769E-630F-4019-894C-ED01C24AF42F}) (Version: 8.4.3485.0 - DisplayLink Corp.)
Dolby Audio X2 Windows API SDK (HKLM\...\{82C288CC-A96D-43E3-9119-944DABF5DD61}) (Version: 0.8.0.74 - Dolby Laboratories, Inc.)
Dolby Audio X2 Windows APP (HKLM\...\{9207D68E-666A-49C7-A900-9F5B2FF289E4}) (Version: 0.8.0.71 - Dolby Laboratories, Inc.)
f.lux (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\Flux) (Version: - f.lux Software LLC)
Franz (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\Franz) (Version: 4.0.4 - Franz)
Geeks3D FurMark 1.19.1.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version: - Geeks3D)
GlanceGuest version 3.8.10.56 (HKLM-x32\...\{F5AC5408-CC29-47C0-AD53-1BBBF268B364}_is1) (Version: 3.8.10.56 - Glance Networks, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.99 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
iCloud (HKLM\...\{C8127F91-0244-4FF0-8014-0C432E15E09D}) (Version: 7.5.0.34 - Apple Inc.)
Intel(R) Chipset Device Software (HKLM-x32\...\{226be6c3-8e08-4d52-bd3a-d361008448c5}) (Version: 10.1.1.37 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1025 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{03f61afc-e875-46a0-8140-9becb776be12}) (Version: 5.1.13.208 - Intel Corporation)
Intel® Software Guard Extensions Platform Software (HKLM-x32\...\ARP_for_prd_SGX_1.8.106.40803) (Version: 1.8.106.40803 - Intel Corporation)
Iris mini - Software for eye protection (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\IrisTech Iris mini) (Version: "0.3.9" - "IrisTech")
iTunes (HKLM\...\{BE065D5C-5EB5-4F39-A112-32897C297935}) (Version: 12.7.5.9 - Apple Inc.)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lenovo Yoga Mode Control (HKLM\...\{3F2E25D6-49D3-45D5-A7BD-13F5D6F64171}_is1) (Version: 2.0.0.9 - Lenovo)
Logitech Camera Settings (HKLM-x32\...\LogiUCDPP) (Version: 1.1.87.0 - Logitech Europe S.A.)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Logitech Unifying Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech)
Malwarebytes version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.9330.2124 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\OneDriveSetup.exe) (Version: 18.091.0506.0007 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
MightyText (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\MightyText) (Version: 3.91.3 - MightyText)
Mozilla Firefox 60.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 60.0.2 (x86 en-US)) (Version: 60.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0.1 - Mozilla)
NAPS2 5.5.0 (HKLM-x32\...\NAPS2 (Not Another PDF Scanner 2)_is1) (Version: - Ben Olden-Cooligan)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 20.1.3 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.9330.2124 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.9330.2124 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.9330.2124 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.9330.2124 - Microsoft Corporation) Hidden
Qualcomm Atheros 11ac Wireless LAN Installer (HKLM-x32\...\{20CA507E-24AA-4741-87CF-CC1B250790B7}) (Version: 11.0.10442 - Qualcomm)
QuickBooks 3.5.1 (only current user) (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\05fb5a8b-5c9d-57ac-a4b7-ecf271235d3f) (Version: 3.5.1 - Intuit Inc.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
RogueKiller version 12.12.24.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.12.24.0 - Adlice Software)
Scrivener (HKLM-x32\...\Scrivener 1970) (Version: 1970 - Literature and Latte)
SharpKeys (HKLM-x32\...\{636E94DA-99C0-448F-A931-3DAD83B4975F}) (Version: 3.5.0000 - RandyRants.com)
Spotify (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\Spotify) (Version: 1.0.83.318.g6c07039d - Spotify AB)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 3.5.3 - Tweaking.com)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
VuePrint (HKLM-x32\...\VuePrint) (Version: - )
Web Companion (HKLM-x32\...\{454d009a-d466-4c87-a086-c45b6582ba80}) (Version: 4.2.1857.3498 - Lavasoft)
XSplit Broadcaster (HKLM-x32\...\{A7BA2EEB-8B51-4043-A75F-47C9587864C9}) (Version: 3.2.1711.2927 - SplitmediaLabs)
Zoom (HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\ZoomUMX) (Version: 4.1 - Zoom Video Communications, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2018-05-23] (Apple Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google)
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki119742.inf_amd64_0fff39a8bf9a6255\igfxDTCM.dll [2016-12-05] (Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {121309EC-2C69-4671-9566-DDBC12529AB3} - System32\Tasks\Microsoft\Windows\Registry\ESG_sch_task_copy_tmp_name
Task: {23CD05D2-6E58-4DE5-ADD4-D74C0A50E3B7} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {3C5D2DF6-8DEC-4DE5-B402-F0B9F85CFC81} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-06-12] (Microsoft Corporation)
Task: {41118DD1-5237-48C3-B744-81E44B31A243} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\940a6f78-ff18-4a65-8776-172f2be49412 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2018-05-16] (Lenovo Group Limited)
Task: {43EDC3FC-37E4-402B-ABB3-70AC052F70BA} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-06-18] (Microsoft Corporation)
Task: {4D64ED5D-8A27-492A-B0A9-7DA7FC3CD85E} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [2018-05-16] (Lenovo Group Limited)
Task: {5EE958A3-D372-4771-8B68-2D00CED9077C} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-06-18] (Microsoft Corporation)
Task: {621BF81F-BC5A-488D-9D3D-95948A41B1D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-12] (Google Inc.)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-11] ()
Task: {6FFDF5AF-1310-492E-9C28-60270CA099A3} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe
Task: {79407F1B-1525-4986-B9D4-0784F8AE9B6E} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-06-18] (Microsoft Corporation)
Task: {7E2A5F0C-F99F-4D31-81E4-AEA7791907A8} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\603a5fbe-841c-47bb-9bee-5a493ea9006c => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2018-05-16] (Lenovo Group Limited)
Task: {872FE84E-32ED-496C-BD22-238B4C383794} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-26] (Microsoft Corporation)
Task: {940628A4-0F2D-4DD8-897C-9246E8531A9A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-12] (Google Inc.)
Task: {9BBDBF72-AAB1-4A5A-A580-CE920FC2AE11} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-26] (Microsoft Corporation)
Task: {A02A5B9F-8521-4B96-96A9-C0609D5B3212} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2018-01-08] (Apple Inc.)
Task: {B307C55D-B9F4-4943-ACB0-43B0F3840749} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe [2018-06-18] (Microsoft Corporation)
Task: {BC51D99A-C032-4829-8E99-A4E3690FDD9E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-26] (Microsoft Corporation)
Task: {C11FD2A0-0E59-4847-A1E6-C8EF5C19CB04} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\4135b332-8733-4f33-814a-bf34879ec4b7 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2018-05-16] (Lenovo Group Limited)
Task: {C332E141-C990-498F-9AAD-9F7F518F02D7} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-07-26] (Intel(R) Corporation)
Task: {EF61913E-16CA-4F11-AAAD-D6C33D0F8ADF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-20] (Piriform Ltd)
Task: {F028EB08-84AD-4098-B5A7-FBB77EE31CED} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\0a63cf01-884b-4464-b97f-dbcd6f99a2c2 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2018-05-16] (Lenovo Group Limited)
Task: {F277A47C-9E54-45E0-8DC4-ECB585101F65} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-06-12] (Microsoft Corporation)
Task: {F50BD45F-8F54-4182-9A22-7454F4E23AB8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)
Task: {F8D06380-620C-4321-A299-49D092A413BD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-26] (Microsoft Corporation)
Task: {F900F248-CDAA-45B0-B878-928622239D2B} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => %windir%\system32\sc.exe START ImControllerService

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2017-12-08 02:48 - 2017-12-08 02:48 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2018-05-15 18:58 - 2018-05-15 18:58 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-11-17 12:44 - 2016-11-17 12:44 - 000107752 _____ () C:\Program Files\Intel\Intel(R) Online Connect Access\libglog.dll
2016-11-17 12:44 - 2016-11-17 12:44 - 000412904 _____ () C:\Program Files\Intel\Intel(R) Online Connect Access\JsonCpp.dll
2017-07-31 15:45 - 2015-06-27 02:34 - 000029112 _____ () C:\ProgramData\Lenovo\PLHotkeyService\PLHotkeyService.exe
2018-06-27 12:15 - 2018-04-25 13:16 - 002297040 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-04-11 16:34 - 2018-04-11 16:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2016-11-17 13:13 - 2016-11-17 13:13 - 000206088 _____ () C:\Program Files\Intel Corporation\Intel(R) Security Assist\WinBioBridge.dll
2016-11-17 13:12 - 2016-11-17 13:12 - 000253672 _____ () C:\Program Files\Intel Corporation\Intel(R) Security Assist\CSLibWrapper.dll
2016-11-17 13:13 - 2016-11-17 13:13 - 001799944 _____ () C:\Program Files\Intel Corporation\Intel(R) Security Assist\BCAXInterface.dll
2016-11-17 13:13 - 2016-11-17 13:13 - 000043272 _____ () C:\Program Files\Intel Corporation\Intel(R) Security Assist\PaymentAppletDLL.DLL
2018-04-11 16:34 - 2018-04-11 16:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-11 16:34 - 2018-04-11 16:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-06-13 08:32 - 2018-06-08 01:56 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-06-26 15:00 - 2018-06-22 12:15 - 004608856 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libglesv2.dll
2018-06-26 15:00 - 2018-06-22 12:15 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libegl.dll
2018-05-30 11:03 - 2018-05-30 11:03 - 046281248 _____ () C:\Program Files\Google\Drive\googledrivesync.exe
2017-10-28 12:37 - 2012-09-25 11:26 - 001163264 _____ () C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
2018-06-28 18:29 - 2018-06-28 18:29 - 000113152 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\_ctypes.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000080896 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\bz2.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 001585152 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\_hashlib.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000128512 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32api.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000137728 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\pywintypes27.dll
2018-06-28 18:29 - 2018-06-28 18:29 - 000548864 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\pythoncom27.dll
2018-06-28 18:29 - 2018-06-28 18:29 - 000689664 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\unicodedata.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000438784 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32com.shell.shell.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 001489408 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\wx._core_.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 001007104 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\wx._gdi_.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 001039872 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\wx._windows_.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 001325056 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\wx._controls_.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000916992 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\wx._misc_.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 001084416 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\pysqlite2._sqlite.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000149504 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32file.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000136192 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32security.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000007680 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\hashobjs_ext.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000020992 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\thumbnails_ext.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000118784 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\usb_ext.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000047616 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\_socket.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 002224640 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\_ssl.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000014848 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\common.time34.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000023040 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32event.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000034304 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\windows.conditional.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000020480 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\windows.winwrap.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000110080 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\windows.volumes.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000223232 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32gui.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000173568 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\_elementtree.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000169472 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\pyexpat.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000048128 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32inet.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000103424 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\wx._html2.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000046080 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\_psutil_windows.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000633272 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\windows._cacheinvalidation.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000011776 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32crypt.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000301568 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\PIL._imaging.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000032256 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\_multiprocessing.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 005458944 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\cello.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000026112 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\_yappi.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000044032 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32process.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000027648 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32pipe.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000010752 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\select.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000029696 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32pdh.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000038400 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\windows.connectivity.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000073216 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\windows.device_monitor.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000020480 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32profile.pyd
2018-06-28 18:29 - 2018-06-28 18:29 - 000026624 _____ () C:\Users\Joel\AppData\Local\Temp\_MEI115522\win32ts.pyd
2018-06-26 21:28 - 2018-06-26 21:28 - 027126784 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-06-26 21:28 - 2018-06-26 21:28 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\SharedUI.dll
2018-06-26 21:28 - 2018-06-26 21:28 - 006735872 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 09:45 - 2017-09-26 09:46 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-06-26 21:28 - 2018-06-26 21:28 - 009360384 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\EntPlat.dll
2017-10-28 12:37 - 2009-02-27 16:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\localhost -> localhost

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-18 14:03 - 2017-03-18 14:01 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 10.0.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\StartupApproved\Run: => "f.lux"
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\StartupApproved\Run: => "Franz"
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\...\StartupApproved\Run: => "Spotify Web Helper"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{2B04D48C-3588-4290-A082-DADC44FDA5C4}] => (Allow) C:\Users\Joel\AppData\Roaming\Zoom\bin\Zoom.exe
FirewallRules: [{C7C4B037-9243-4EBA-B28A-CF3114C9CDB2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{630D6EFE-A070-4EFB-82B7-4532AF5535CD}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.cam.exe
FirewallRules: [{F0EDF80C-66E4-4E0C-8F6C-04C11AC0FFF3}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.Core.exe
FirewallRules: [{050FB37D-69F2-45AB-9438-85146F5ED15B}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.cam.exe
FirewallRules: [{7BA9C9B9-51ED-40A5-AD47-9F87401CBF64}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.Core.exe
FirewallRules: [{94AA04BB-1313-42C7-9E22-59523EE2B4F8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8D93FFEA-377C-4AD9-A7F8-2BA019B36964}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{EFE97A9C-14D1-4921-AE20-EBCAF611B102}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{33F6C294-FA96-4AAC-8811-C93AB805F40F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F137D848-ED2F-4501-8DEF-E2E62579D539}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
FirewallRules: [UDP Query User{A3E733C4-8093-4739-B985-2D9204C16C28}C:\users\joel\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\joel\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{FEAD0C43-675F-4FBC-84A0-B9B359B5BA6E}C:\users\joel\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\joel\appdata\roaming\spotify\spotify.exe
FirewallRules: [{99A86324-6062-4FBA-A352-E263F66F6DB2}] => (Allow) C:\Users\Joel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{46542A1E-9794-4A27-85C2-1295F4A0EF2D}] => (Allow) C:\Users\Joel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1C497908-86D4-4CCA-B77E-8CDF9CD0ED9F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{00B8A661-2F83-4DE5-A24E-1FA56049FCBF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{ED524E74-61B0-4343-888D-E07FEF7F9022}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{EA1E0A4F-2114-400F-A4B0-A53C7B3D909F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

13-06-2018 08:32:21 Windows Update
23-06-2018 15:43:31 Scheduled Checkpoint

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/28/2018 06:51:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "WmiApRpl" in DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (06/28/2018 06:51:23 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Windows cannot load the extensible counter DLL rdyboost. The first four bytes (DWORD) of the Data section contains the Windows error code.

Error: (06/28/2018 06:51:23 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (06/28/2018 06:51:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "MSDTC" in DLL "C:\WINDOWS\system32\msdtcuiu.DLL" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (06/28/2018 06:51:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "Lsa" in DLL "C:\Windows\System32\Secur32.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (06/28/2018 06:51:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "ESENT" in DLL "C:\WINDOWS\system32\esentprf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (06/28/2018 06:51:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (06/28/2018 06:29:16 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.112_none_fb3f961b30681c12.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.112_none_42ecccf244e44518.manifest.


System errors:
=============
Error: (06/28/2018 08:12:18 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-ADQFQBC)
Description: Unable to start a DCOM Server: LenovoCorporation.LenovoID_2.0.37.0_x86__4642shxvsv8s2!App.AppXer7ys06va0ca0qdyvkgk274j3p8crk1c.mca as Unavailable/Unavailable. The error:
"5"
Happened while starting this command:
"C:\WINDOWS\SysWOW64\backgroundTaskHost.exe" -ServerName:App.AppXxr2prr0eys4kmy1behe5nwrq8e78cmhm.mca

Error: (06/28/2018 08:12:15 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-ADQFQBC)
Description: Unable to start a DCOM Server: LenovoCorporation.LenovoID_2.0.37.0_x86__4642shxvsv8s2!App.AppXer7ys06va0ca0qdyvkgk274j3p8crk1c.mca as Unavailable/Unavailable. The error:
"5"
Happened while starting this command:
"C:\WINDOWS\SysWOW64\backgroundTaskHost.exe" -ServerName:App.AppXxr2prr0eys4kmy1behe5nwrq8e78cmhm.mca

Error: (06/28/2018 08:12:12 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-ADQFQBC)
Description: Unable to start a DCOM Server: LenovoCorporation.LenovoID_2.0.37.0_x86__4642shxvsv8s2!App.AppXer7ys06va0ca0qdyvkgk274j3p8crk1c.mca as Unavailable/Unavailable. The error:
"5"
Happened while starting this command:
"C:\WINDOWS\SysWOW64\backgroundTaskHost.exe" -ServerName:App.AppXxr2prr0eys4kmy1behe5nwrq8e78cmhm.mca

Error: (06/28/2018 08:12:08 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-ADQFQBC)
Description: Unable to start a DCOM Server: LenovoCorporation.LenovoID_2.0.37.0_x86__4642shxvsv8s2!App.AppXer7ys06va0ca0qdyvkgk274j3p8crk1c.mca as Unavailable/Unavailable. The error:
"5"
Happened while starting this command:
"C:\WINDOWS\SysWOW64\backgroundTaskHost.exe" -ServerName:App.AppXxr2prr0eys4kmy1behe5nwrq8e78cmhm.mca

Error: (06/28/2018 08:12:01 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-ADQFQBC)
Description: Unable to start a DCOM Server: LenovoCorporation.LenovoID_2.0.37.0_x86__4642shxvsv8s2!App.AppXer7ys06va0ca0qdyvkgk274j3p8crk1c.mca as Unavailable/Unavailable. The error:
"5"
Happened while starting this command:
"C:\WINDOWS\SysWOW64\backgroundTaskHost.exe" -ServerName:App.AppXxr2prr0eys4kmy1behe5nwrq8e78cmhm.mca

Error: (06/28/2018 08:11:58 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-ADQFQBC)
Description: Unable to start a DCOM Server: LenovoCorporation.LenovoID_2.0.37.0_x86__4642shxvsv8s2!App.AppXer7ys06va0ca0qdyvkgk274j3p8crk1c.mca as Unavailable/Unavailable. The error:
"5"
Happened while starting this command:
"C:\WINDOWS\SysWOW64\backgroundTaskHost.exe" -ServerName:App.AppXxr2prr0eys4kmy1behe5nwrq8e78cmhm.mca

Error: (06/28/2018 08:11:46 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-ADQFQBC)
Description: Unable to start a DCOM Server: LenovoCorporation.LenovoID_2.0.37.0_x86__4642shxvsv8s2!App.AppXer7ys06va0ca0qdyvkgk274j3p8crk1c.mca as Unavailable/Unavailable. The error:
"5"
Happened while starting this command:
"C:\WINDOWS\SysWOW64\backgroundTaskHost.exe" -ServerName:App.AppXxr2prr0eys4kmy1behe5nwrq8e78cmhm.mca

Error: (06/28/2018 08:11:40 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-ADQFQBC)
Description: Unable to start a DCOM Server: LenovoCorporation.LenovoID_2.0.37.0_x86__4642shxvsv8s2!App.AppXer7ys06va0ca0qdyvkgk274j3p8crk1c.mca as Unavailable/Unavailable. The error:
"5"
Happened while starting this command:
"C:\WINDOWS\SysWOW64\backgroundTaskHost.exe" -ServerName:App.AppXxr2prr0eys4kmy1behe5nwrq8e78cmhm.mca


Windows Defender:
===================================
Date: 2018-05-28 16:50:06.985
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.269.153.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.14901.4
Error code: 0x8024402c
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

CodeIntegrity:
===================================

Date: 2018-05-22 07:29:17.062
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-05-22 07:29:17.061
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-05-19 12:00:52.039
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-05-19 12:00:52.039
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-05-19 11:23:34.214
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-05-19 11:23:34.213
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-05-18 23:01:13.035
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2018-05-18 23:01:12.714
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
Percentage of memory in use: 41%
Total physical RAM: 16217.35 MB
Available physical RAM: 9539.05 MB
Total Virtual: 25945.35 MB
Available Virtual: 18841.2 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:927.62 GB) (Free:596.18 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:23.59 GB) NTFS

\\?\Volume{fa813b3c-2592-4df7-90f3-29d64dabeb23}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.58 GB) NTFS
\\?\Volume{16dcf164-79a9-412b-ba5d-93a25b541b29}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: 83301C22)

Partition: GPT.

==================== End of Addition.txt ============================

[Juliet]

Need you to uninstall

Web Companion (HKLM-x32\...\{454d009a-d466-4c87-a086-c45b6582ba80}) (Version: 4.2.1857.3498 - Lavasoft)

*************

Highlight the entire content of the quote box below and select Copy.

Start::
CloseProcesses:
CreateRestorePoint:
FF SearchPlugin: C:\Users\Joel\AppData\Roaming\Mozilla\Firefox\Profiles\vr9gjn7n.default\searchplugins\bing-lavasoft-ff59.xml [2018-04-06]
CHR Extension: (Chrome Media Router) - C:\Users\Joel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-13]
CHR Extension: (No Name) - C:\Users\Joel\Downloads\Sci-Hub\Sci-Hub [2018-06-25] [UpdateUrl: hxxps://sci-hub.tw/update] <==== ATTENTION
CHR HKU\S-1-5-21-2801148805-3218214289-1038808527-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
2018-06-27 09:36 - 2018-06-08 02:29 - 001946328 _____ (Microsoft Corporation) C:\Users\Joel\AppData\Local\Temp\dllnt_dump.dll
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Emptytemp:
Hosts:
End::

Start FRST (FRST64) with Administrator privileges
Press the Fix button. FRST will process the lines copied above from the clipboard.
When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.

********************

Let me know how the computer is behaving now

[Juliet]

Also, I think it would be a good idea to run this

https://www.tenforums.com/tutorials/...dows-10-a.html
Windows 10: Run SFC Command in Windows 10

[Juliet]

bump*****

[Juliet]

Glad we could help.
Since this issue appears resolved ... this Topic is closed.