API tools faq
paste
Guest User

frst

a guest
Oct 12th, 2017
78
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 119.10 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-10-2017
  2. Ran by richh (administrator) on DESKTOP-7FD9RFA (12-10-2017 16:23:21)
  3. Running from C:\Users\richh\Downloads
  4. Loaded Profiles: richh (Available Profiles: richh)
  5. Platform: Windows 10 Pro Version 1703 170317-1834 (X64) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  15. (AMD) C:\Windows\System32\atiesrxx.exe
  16. (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0745f11ce6fc197c\igfxCUIService.exe
  17. (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
  18. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  19. (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  20. (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0745f11ce6fc197c\IntelCpHDCPSvc.exe
  21. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
  22. (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
  23. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  24. (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
  25. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
  26. (Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
  27. (CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
  28. (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
  29. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  30. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
  31. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  32. (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
  33. (Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
  34. (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
  35. (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
  36. (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
  37. (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
  38. (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
  39. () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
  40. (SpiceBrains) C:\Program Files (x86)\InstantEyedropper\InstantEyedropper.exe
  41. (Discord Inc.) C:\Users\richh\AppData\Local\Discord\app-0.0.298\Discord.exe
  42. (Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
  43. (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
  44. (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
  45. (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
  46. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  47. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
  48. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
  49. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
  50. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
  51. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
  52. (Discord Inc.) C:\Users\richh\AppData\Local\Discord\app-0.0.298\Discord.exe
  53. (Spotify Ltd) C:\Users\richh\AppData\Roaming\Spotify\Spotify.exe
  54. (Spotify Ltd) C:\Users\richh\AppData\Roaming\Spotify\Spotify.exe
  55. (Spotify Ltd) C:\Users\richh\AppData\Roaming\Spotify\Spotify.exe
  56. (Spotify Ltd) C:\Users\richh\AppData\Roaming\Spotify\SpotifyWebHelper.exe
  57. (Spotify Ltd) C:\Users\richh\AppData\Roaming\Spotify\Spotify.exe
  58. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  59. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
  60. (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
  61. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
  62. () C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
  63. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
  64. (Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
  65. (Discord Inc.) C:\Users\richh\AppData\Local\Discord\app-0.0.298\Discord.exe
  66. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
  67. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
  68. (Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
  69. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
  70. (Microsoft) C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\SkypeApp.exe
  71. () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\SkypeHost.exe
  72. (Microsoft Corporation) C:\Windows\splwow64.exe
  73. (Alexander Roshal) C:\Program Files\WinRAR\WinRAR.exe
  74. (Exodus Movement Inc) C:\Users\richh\AppData\Local\exodus\app-1.34.1\Exodus.exe
  75. (Exodus Movement Inc) C:\Users\richh\AppData\Local\exodus\app-1.34.1\Exodus.exe
  76. (Exodus Movement Inc) C:\Users\richh\AppData\Local\exodus\app-1.34.1\Exodus.exe
  77. (Exodus Movement Inc) C:\Users\richh\AppData\Local\exodus\app-1.34.1\Exodus.exe
  78. (Exodus Movement Inc) C:\Users\richh\AppData\Local\exodus\app-1.34.1\Exodus.exe
  79. (Exodus Movement Inc) C:\Users\richh\AppData\Local\exodus\app-1.34.1\Exodus.exe
  80. (Exodus Movement Inc) C:\Users\richh\AppData\Local\exodus\app-1.34.1\Exodus.exe
  81. () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
  82. () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
  83. () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
  84. () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
  85. () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
  86. () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
  87. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  88. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  89. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  90. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  91. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  92. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  93. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  94. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  95. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  96. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  97. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  98. (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
  99.  
  100. ==================== Registry (Whitelisted) ===========================
  101.  
  102. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  103.  
  104. HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
  105. HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
  106. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
  107. HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  108. HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-07-14] (Apple Inc.)
  109. HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] ()
  110. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
  111. HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-09-20] (Adobe Systems Incorporated)
  112. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3074336 2017-10-04] (Valve Corporation)
  113. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Run: [WallpaperEngine] => C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe [1257984 2017-07-11] ()
  114. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Run: [Spotify] => C:\Users\richh\AppData\Roaming\Spotify\Spotify.exe [20791408 2017-10-11] (Spotify Ltd)
  115. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Run: [instanteyedropper] => C:\Program Files (x86)\InstantEyedropper\InstantEyedropper.exe [966656 2016-12-19] (SpiceBrains)
  116. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1248848 2017-08-31] (CyberGhost S.A.)
  117. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Run: [Discord] => C:\Users\richh\AppData\Local\Discord\app-0.0.298\Discord.exe [57477112 2017-08-08] (Discord Inc.)
  118. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [5077792 2017-05-16] (Nota Inc.)
  119. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Run: [Spotify Web Helper] => C:\Users\richh\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-10-11] (Spotify Ltd)
  120. HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe [391040 2017-03-18] (Microsoft Corporation)
  121. HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe [391040 2017-03-18] (Microsoft Corporation)
  122.  
  123. ==================== Internet (Whitelisted) ====================
  124.  
  125. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  126.  
  127. Hosts: 127.0.0.1 api.rsbuddy.com
  128. Tcpip\Parameters: [DhcpNameServer] 208.180.42.68 208.180.42.100
  129. Tcpip\..\Interfaces\{1f50b45a-1acd-46c2-a73b-8404cad2149a}: [DhcpNameServer] 38.132.106.139 194.187.251.67 185.93.180.131
  130. Tcpip\..\Interfaces\{429eabc9-6d86-408b-b545-33f31f7ef898}: [DhcpNameServer] 172.20.10.1
  131. Tcpip\..\Interfaces\{833599af-4dc7-402d-b04d-0d494eda8cdf}: [DhcpNameServer] 208.180.42.68 208.180.42.100
  132.  
  133. Internet Explorer:
  134. ==================
  135. BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation)
  136. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-07-10] (Oracle Corporation)
  137. BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation)
  138. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-07-10] (Oracle Corporation)
  139. BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation)
  140. BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation)
  141. Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
  142. Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
  143. Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
  144. Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
  145.  
  146. FireFox:
  147. ========
  148. FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-07-10] (Oracle Corporation)
  149. FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-07-10] (Oracle Corporation)
  150. FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
  151. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-09-20] (Adobe Systems)
  152. FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
  153. FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-29] (Microsoft Corporation)
  154. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-29] (Microsoft Corporation)
  155. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-06] (NVIDIA Corporation)
  156. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-06] (NVIDIA Corporation)
  157. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-07-05] (Google Inc.)
  158. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-07-05] (Google Inc.)
  159. FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
  160. FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-09-20] (Adobe Systems)
  161. FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
  162.  
  163. Chrome:
  164. =======
  165. CHR Profile: C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default [2017-10-12]
  166. CHR Extension: (Slides) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
  167. CHR Extension: (Docs) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
  168. CHR Extension: (Google Drive) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-05]
  169. CHR Extension: (Flat Darkness HF Theme) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbdneajjpdiamjblmlmpbnbcpebkammj [2017-08-22]
  170. CHR Extension: (Dark Skin for Youtube™) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfeknfgchonpnofdjokchhdhdnddhglm [2017-08-31]
  171. CHR Extension: (YouTube) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-05]
  172. CHR Extension: (Adblock Plus) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-30]
  173. CHR Extension: (Sheets) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
  174. CHR Extension: (Google Docs Offline) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-06]
  175. CHR Extension: (SaferVPN - FREE VPN | Privacy & Unblock Sites) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\iamifmhbkeeccbjkaenolpghohlpnioi [2017-07-05]
  176. CHR Extension: (Grammarly for Chrome) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2017-10-06]
  177. CHR Extension: (Chrome Web Store Payments) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-23]
  178. CHR Extension: (Web Server for Chrome) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofhbbkphhbklhfoeikjpcbhemlocgigb [2017-09-30]
  179. CHR Extension: (Gmail) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-05]
  180. CHR Extension: (Chrome Media Router) - C:\Users\richh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-01]
  181.  
  182. ==================== Services (Whitelisted) ====================
  183.  
  184. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  185.  
  186. R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated)
  187. S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
  188. R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)
  189. R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
  190. R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7761608 2017-09-08] (Microsoft Corporation)
  191. S3 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [859304 2017-02-08] (FileZilla Project)
  192. R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation)
  193. S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation)
  194. R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-10-06] (NVIDIA Corporation)
  195. R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-09-19] (NVIDIA Corporation)
  196. S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-18] (Microsoft Corporation)
  197. R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2016-08-26] (Popcorn Time) [File not signed]
  198. R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
  199. R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation)
  200. R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [692680 2017-06-28] (Wacom Technology, Corp.)
  201.  
  202. ===================== Drivers (Whitelisted) ======================
  203.  
  204. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  205.  
  206. S3 amdkmdag; C:\Windows\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys [36558208 2017-05-16] (Advanced Micro Devices, Inc.)
  207. S3 amdkmdap; C:\Windows\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys [528760 2017-05-16] (Advanced Micro Devices, Inc.)
  208. S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [110088 2016-12-12] (Advanced Micro Devices)
  209. R3 CMUSBDAC; C:\Windows\system32\DRIVERS\CMUSBDAC.sys [3792904 2016-11-30] (C-MEDIA)
  210. R1 MpKslfe5e66bf; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{EBEF9054-7C56-404F-9198-F34EA72834AC}\MpKslfe5e66bf.sys [58120 2017-10-12] (Microsoft Corporation)
  211. R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d0a31ff5946203b6\nvlddmkm.sys [16923064 2017-10-07] (NVIDIA Corporation)
  212. S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-09-19] (NVIDIA Corporation)
  213. R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation)
  214. R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57792 2017-10-06] (NVIDIA Corporation)
  215. R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
  216. S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
  217. S3 VBAudioVMVAIOMME; C:\Windows\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-09-12] (Windows (R) Win 7 DDK provider)
  218. R3 WacHidRouterPro; C:\Windows\System32\drivers\wachidrouter.sys [122512 2017-04-28] (Wacom Technology)
  219. S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
  220. R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
  221. R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
  222. S3 VBAudioVACMME; \SystemRoot\system32\DRIVERS\vbaudio_cable64_win7.sys [X]
  223.  
  224. ==================== NetSvcs (Whitelisted) ===================
  225.  
  226. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  227.  
  228.  
  229. ==================== One Month Created files and folders ========
  230.  
  231. (If an entry is included in the fixlist, the file/folder will be moved.)
  232.  
  233. 2017-10-12 16:23 - 2017-10-12 16:23 - 000000000 ____D C:\Users\richh\Downloads\FRST-OlderVersion
  234. 2017-10-12 16:06 - 2017-10-12 16:06 - 000000000 ____D C:\Windows\system32\appmgmt
  235. 2017-10-12 11:16 - 2017-10-12 16:04 - 000000000 ____D C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
  236. 2017-10-12 11:14 - 2017-10-12 11:15 - 051466376 _____ C:\Users\richh\Downloads\icq_rfrset_0d79ab80.exe
  237. 2017-10-12 11:13 - 2017-10-12 11:14 - 051466376 _____ C:\Users\richh\Downloads\icq.exe
  238. 2017-10-12 00:12 - 2017-10-12 00:12 - 001316678 _____ C:\Users\richh\Downloads\Unlimited custom EDU method www.ebookleaks.org.rar
  239. 2017-10-11 23:46 - 2017-10-11 23:47 - 001987457 _____ C:\Users\richh\Downloads\spotifym www.ebookleaks.org.rar
  240. 2017-10-11 21:44 - 2017-10-11 21:44 - 001401759 _____ C:\Users\richh\Downloads\Unlimited_custom_EDU_method_www.ebookleaks.org.pdf
  241. 2017-10-10 22:57 - 2017-10-10 22:57 - 000000000 ____D C:\Program Files (x86)\VulkanRT
  242. 2017-10-10 22:57 - 2017-10-06 07:52 - 000136312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
  243. 2017-10-10 22:57 - 2017-09-13 19:20 - 000798008 _____ C:\Windows\SysWOW64\vulkan-1.dll
  244. 2017-10-10 22:57 - 2017-09-13 19:20 - 000490296 _____ C:\Windows\SysWOW64\vulkaninfo.exe
  245. 2017-10-10 22:57 - 2017-09-13 19:19 - 000927544 _____ C:\Windows\system32\vulkan-1.dll
  246. 2017-10-10 22:57 - 2017-09-13 19:19 - 000591160 _____ C:\Windows\system32\vulkaninfo.exe
  247. 2017-10-10 22:53 - 2017-10-06 09:35 - 040237176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
  248. 2017-10-10 22:53 - 2017-10-06 09:35 - 035156600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
  249. 2017-10-10 22:53 - 2017-10-06 09:35 - 029262272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
  250. 2017-10-10 22:53 - 2017-10-06 09:35 - 019035160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
  251. 2017-10-10 22:53 - 2017-10-06 09:35 - 013863184 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
  252. 2017-10-10 22:53 - 2017-10-06 09:35 - 013251240 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
  253. 2017-10-10 22:53 - 2017-10-06 09:35 - 011777952 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
  254. 2017-10-10 22:53 - 2017-10-06 09:35 - 010880672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
  255. 2017-10-10 22:53 - 2017-10-06 09:35 - 004201408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
  256. 2017-10-10 22:53 - 2017-10-06 09:35 - 003614328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
  257. 2017-10-10 22:53 - 2017-10-06 09:35 - 001988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438792.dll
  258. 2017-10-10 22:53 - 2017-10-06 09:35 - 001606776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438792.dll
  259. 2017-10-10 22:53 - 2017-10-06 09:35 - 001331016 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
  260. 2017-10-10 22:53 - 2017-10-06 09:35 - 001321448 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
  261. 2017-10-10 22:53 - 2017-10-06 09:35 - 001098688 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
  262. 2017-10-10 22:53 - 2017-10-06 09:35 - 001044664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
  263. 2017-10-10 22:53 - 2017-10-06 09:35 - 001038680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
  264. 2017-10-10 22:53 - 2017-10-06 09:35 - 001030264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
  265. 2017-10-10 22:53 - 2017-10-06 09:35 - 000981112 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
  266. 2017-10-10 22:53 - 2017-10-06 09:35 - 000932288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
  267. 2017-10-10 22:53 - 2017-10-06 09:35 - 000885496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
  268. 2017-10-10 22:53 - 2017-10-06 09:35 - 000794576 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
  269. 2017-10-10 22:53 - 2017-10-06 09:35 - 000739264 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
  270. 2017-10-10 22:53 - 2017-10-06 09:35 - 000632848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
  271. 2017-10-10 22:53 - 2017-10-06 09:35 - 000618928 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
  272. 2017-10-10 22:53 - 2017-10-06 09:35 - 000615544 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
  273. 2017-10-10 22:53 - 2017-10-06 09:35 - 000598648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
  274. 2017-10-10 22:53 - 2017-10-06 09:35 - 000505792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
  275. 2017-10-10 22:53 - 2017-10-06 09:35 - 000045496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
  276. 2017-10-10 22:53 - 2017-10-06 09:35 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
  277. 2017-10-10 22:53 - 2017-10-06 09:35 - 000000669 _____ C:\Windows\system32\nv-vk64.json
  278. 2017-10-10 16:38 - 2017-10-10 16:38 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigncf6c536ef8699fd7
  279. 2017-10-10 16:37 - 2017-10-10 16:37 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignef64cff47fdd83b9
  280. 2017-10-10 16:37 - 2017-10-10 16:37 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign94635743611f7cad
  281. 2017-10-10 16:37 - 2017-10-10 16:37 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign1b4037cc43ddcadc
  282. 2017-10-10 16:24 - 2017-10-10 16:24 - 126925120 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
  283. 2017-10-10 16:21 - 2017-09-29 22:29 - 000804784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
  284. 2017-10-10 16:21 - 2017-09-29 22:10 - 001839872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
  285. 2017-10-10 16:21 - 2017-09-29 22:10 - 000606072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
  286. 2017-10-10 16:21 - 2017-09-29 22:09 - 000787712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
  287. 2017-10-10 16:21 - 2017-09-29 22:05 - 000750488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
  288. 2017-10-10 16:21 - 2017-09-29 22:05 - 000559000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
  289. 2017-10-10 16:21 - 2017-09-29 22:04 - 004215184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
  290. 2017-10-10 16:21 - 2017-09-29 22:04 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
  291. 2017-10-10 16:21 - 2017-09-29 22:04 - 000438096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
  292. 2017-10-10 16:21 - 2017-09-29 22:04 - 000347544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  293. 2017-10-10 16:21 - 2017-09-29 22:04 - 000182680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
  294. 2017-10-10 16:21 - 2017-09-29 03:45 - 002953216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
  295. 2017-10-10 16:21 - 2017-09-29 03:43 - 002199552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
  296. 2017-10-10 16:21 - 2017-09-29 03:41 - 013844992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
  297. 2017-10-10 16:21 - 2017-09-29 03:39 - 000364032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
  298. 2017-10-10 16:21 - 2017-09-29 03:38 - 005721600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
  299. 2017-10-10 16:21 - 2017-09-29 03:38 - 002671616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
  300. 2017-10-10 16:21 - 2017-09-29 03:38 - 000308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
  301. 2017-10-10 16:21 - 2017-09-29 03:37 - 000038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerUI.dll
  302. 2017-10-10 16:21 - 2017-09-29 03:33 - 004559360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
  303. 2017-10-10 16:21 - 2017-09-29 03:33 - 001506816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
  304. 2017-10-10 16:21 - 2017-09-29 03:32 - 002782720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
  305. 2017-10-10 16:21 - 2017-09-29 03:29 - 000157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
  306. 2017-10-10 16:21 - 2017-09-29 03:24 - 003377664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
  307. 2017-10-10 16:20 - 2017-09-30 01:52 - 001595152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
  308. 2017-10-10 16:20 - 2017-09-30 01:51 - 001458320 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
  309. 2017-10-10 16:20 - 2017-09-30 01:51 - 001147288 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
  310. 2017-10-10 16:20 - 2017-09-30 01:51 - 000661224 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
  311. 2017-10-10 16:20 - 2017-09-30 01:50 - 001346112 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
  312. 2017-10-10 16:20 - 2017-09-30 01:50 - 001068208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
  313. 2017-10-10 16:20 - 2017-09-30 01:50 - 001024920 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
  314. 2017-10-10 16:20 - 2017-09-30 01:49 - 001004136 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
  315. 2017-10-10 16:20 - 2017-09-30 01:49 - 000777400 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
  316. 2017-10-10 16:20 - 2017-09-30 01:49 - 000135576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  317. 2017-10-10 16:20 - 2017-09-30 01:48 - 008319384 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  318. 2017-10-10 16:20 - 2017-09-30 01:48 - 002399728 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
  319. 2017-10-10 16:20 - 2017-09-30 01:48 - 002327448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
  320. 2017-10-10 16:20 - 2017-09-30 01:48 - 000644696 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
  321. 2017-10-10 16:20 - 2017-09-30 01:47 - 002969880 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll
  322. 2017-10-10 16:20 - 2017-09-30 01:47 - 001194792 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
  323. 2017-10-10 16:20 - 2017-09-30 01:45 - 000511896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
  324. 2017-10-10 16:20 - 2017-09-30 01:44 - 000712600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
  325. 2017-10-10 16:20 - 2017-09-30 01:44 - 000181912 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  326. 2017-10-10 16:20 - 2017-09-30 01:43 - 007318888 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
  327. 2017-10-10 16:20 - 2017-09-30 01:43 - 002442136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
  328. 2017-10-10 16:20 - 2017-09-30 01:42 - 004848952 _____ (Microsoft Corporation) C:\Windows\explorer.exe
  329. 2017-10-10 16:20 - 2017-09-30 01:42 - 001506712 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
  330. 2017-10-10 16:20 - 2017-09-30 01:42 - 000820120 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
  331. 2017-10-10 16:20 - 2017-09-30 01:41 - 005477600 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
  332. 2017-10-10 16:20 - 2017-09-30 01:41 - 005304496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
  333. 2017-10-10 16:20 - 2017-09-30 01:41 - 002086808 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
  334. 2017-10-10 16:20 - 2017-09-30 01:41 - 000961944 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
  335. 2017-10-10 16:20 - 2017-09-30 01:41 - 000654976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
  336. 2017-10-10 16:20 - 2017-09-30 01:41 - 000651672 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
  337. 2017-10-10 16:20 - 2017-09-30 01:41 - 000259400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
  338. 2017-10-10 16:20 - 2017-09-30 01:41 - 000257432 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
  339. 2017-10-10 16:20 - 2017-09-30 01:41 - 000228248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
  340. 2017-10-10 16:20 - 2017-09-30 01:40 - 000849816 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
  341. 2017-10-10 16:20 - 2017-09-30 01:40 - 000724704 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
  342. 2017-10-10 16:20 - 2017-09-30 01:40 - 000701336 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
  343. 2017-10-10 16:20 - 2017-09-30 01:40 - 000558912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
  344. 2017-10-10 16:20 - 2017-09-30 01:40 - 000408984 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  345. 2017-10-10 16:20 - 2017-09-30 01:40 - 000336320 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
  346. 2017-10-10 16:20 - 2017-09-30 01:40 - 000184728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
  347. 2017-10-10 16:20 - 2017-09-30 01:40 - 000173976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
  348. 2017-10-10 16:20 - 2017-09-30 01:39 - 021351760 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
  349. 2017-10-10 16:20 - 2017-09-30 01:39 - 001694104 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
  350. 2017-10-10 16:20 - 2017-09-30 01:39 - 000203672 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
  351. 2017-10-10 16:20 - 2017-09-30 01:38 - 007910072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
  352. 2017-10-10 16:20 - 2017-09-30 01:38 - 002239136 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
  353. 2017-10-10 16:20 - 2017-09-30 01:38 - 001854872 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
  354. 2017-10-10 16:20 - 2017-09-30 01:37 - 002377112 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Uev.AppAgent.dll
  355. 2017-10-10 16:20 - 2017-09-30 01:37 - 002229144 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
  356. 2017-10-10 16:20 - 2017-09-30 01:37 - 001464728 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
  357. 2017-10-10 16:20 - 2017-09-30 01:36 - 002672024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
  358. 2017-10-10 16:20 - 2017-09-30 01:36 - 000855960 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
  359. 2017-10-10 16:20 - 2017-09-30 01:36 - 000675224 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
  360. 2017-10-10 16:20 - 2017-09-30 01:36 - 000057976 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  361. 2017-10-10 16:20 - 2017-09-29 22:29 - 001408536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
  362. 2017-10-10 16:20 - 2017-09-29 22:26 - 001333136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
  363. 2017-10-10 16:20 - 2017-09-29 22:26 - 001292872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
  364. 2017-10-10 16:20 - 2017-09-29 22:10 - 001150776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
  365. 2017-10-10 16:20 - 2017-09-29 22:10 - 000508344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
  366. 2017-10-10 16:20 - 2017-09-29 22:10 - 000480920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
  367. 2017-10-10 16:20 - 2017-09-29 22:09 - 002259760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll
  368. 2017-10-10 16:20 - 2017-09-29 22:06 - 004471368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
  369. 2017-10-10 16:20 - 2017-09-29 22:05 - 005827744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
  370. 2017-10-10 16:20 - 2017-09-29 22:05 - 002603744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
  371. 2017-10-10 16:20 - 2017-09-29 22:05 - 001266544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
  372. 2017-10-10 16:20 - 2017-09-29 22:04 - 000612120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
  373. 2017-10-10 16:20 - 2017-09-29 22:03 - 020373408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
  374. 2017-10-10 16:20 - 2017-09-29 22:03 - 006768288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
  375. 2017-10-10 16:20 - 2017-09-29 22:03 - 001439032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
  376. 2017-10-10 16:20 - 2017-09-29 22:02 - 001624096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft.Uev.AppAgent.dll
  377. 2017-10-10 16:20 - 2017-09-29 22:02 - 001517464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
  378. 2017-10-10 16:20 - 2017-09-29 22:02 - 000175512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
  379. 2017-10-10 16:20 - 2017-09-29 22:01 - 000124544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  380. 2017-10-10 16:20 - 2017-09-29 03:46 - 023678976 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
  381. 2017-10-10 16:20 - 2017-09-29 03:44 - 000133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
  382. 2017-10-10 16:20 - 2017-09-29 03:43 - 000142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll
  383. 2017-10-10 16:20 - 2017-09-29 03:43 - 000060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
  384. 2017-10-10 16:20 - 2017-09-29 03:42 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mgmtapi.dll
  385. 2017-10-10 16:20 - 2017-09-29 03:41 - 000110080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BitLockerCsp.dll
  386. 2017-10-10 16:20 - 2017-09-29 03:40 - 006728192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
  387. 2017-10-10 16:20 - 2017-09-29 03:40 - 000371200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
  388. 2017-10-10 16:20 - 2017-09-29 03:40 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
  389. 2017-10-10 16:20 - 2017-09-29 03:39 - 020511232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
  390. 2017-10-10 16:20 - 2017-09-29 03:39 - 011888640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  391. 2017-10-10 16:20 - 2017-09-29 03:38 - 001135616 ____R (The ICU Project) C:\Windows\SysWOW64\icuuc.dll
  392. 2017-10-10 16:20 - 2017-09-29 03:38 - 000498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft.Uev.Office2013CustomActions.dll
  393. 2017-10-10 16:20 - 2017-09-29 03:38 - 000471040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
  394. 2017-10-10 16:20 - 2017-09-29 03:38 - 000463360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
  395. 2017-10-10 16:20 - 2017-09-29 03:38 - 000370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
  396. 2017-10-10 16:20 - 2017-09-29 03:38 - 000229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll
  397. 2017-10-10 16:20 - 2017-09-29 03:37 - 000306688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
  398. 2017-10-10 16:20 - 2017-09-29 03:36 - 019337216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  399. 2017-10-10 16:20 - 2017-09-29 03:36 - 000590336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll
  400. 2017-10-10 16:20 - 2017-09-29 03:35 - 003654656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  401. 2017-10-10 16:20 - 2017-09-29 03:34 - 017370624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
  402. 2017-10-10 16:20 - 2017-09-29 03:34 - 006255616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
  403. 2017-10-10 16:20 - 2017-09-29 03:34 - 003669504 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
  404. 2017-10-10 16:20 - 2017-09-29 03:34 - 002859520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  405. 2017-10-10 16:20 - 2017-09-29 03:34 - 000798720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
  406. 2017-10-10 16:20 - 2017-09-29 03:34 - 000787456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
  407. 2017-10-10 16:20 - 2017-09-29 03:34 - 000434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
  408. 2017-10-10 16:20 - 2017-09-29 03:33 - 007598080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
  409. 2017-10-10 16:20 - 2017-09-29 03:33 - 000658944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  410. 2017-10-10 16:20 - 2017-09-29 03:32 - 002340864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
  411. 2017-10-10 16:20 - 2017-09-29 03:32 - 002199552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
  412. 2017-10-10 16:20 - 2017-09-29 03:32 - 001627136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  413. 2017-10-10 16:20 - 2017-09-29 03:32 - 001244160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
  414. 2017-10-10 16:20 - 2017-09-29 03:32 - 000209920 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll
  415. 2017-10-10 16:20 - 2017-09-29 03:32 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
  416. 2017-10-10 16:20 - 2017-09-29 03:32 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
  417. 2017-10-10 16:20 - 2017-09-29 03:32 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
  418. 2017-10-10 16:20 - 2017-09-29 03:32 - 000029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  419. 2017-10-10 16:20 - 2017-09-29 03:32 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\mgmtapi.dll
  420. 2017-10-10 16:20 - 2017-09-29 03:31 - 003107328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
  421. 2017-10-10 16:20 - 2017-09-29 03:31 - 000306176 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
  422. 2017-10-10 16:20 - 2017-09-29 03:31 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
  423. 2017-10-10 16:20 - 2017-09-29 03:31 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
  424. 2017-10-10 16:20 - 2017-09-29 03:31 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
  425. 2017-10-10 16:20 - 2017-09-29 03:30 - 023686144 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  426. 2017-10-10 16:20 - 2017-09-29 03:30 - 007931392 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
  427. 2017-10-10 16:20 - 2017-09-29 03:30 - 000529408 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
  428. 2017-10-10 16:20 - 2017-09-29 03:30 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
  429. 2017-10-10 16:20 - 2017-09-29 03:30 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
  430. 2017-10-10 16:20 - 2017-09-29 03:29 - 008333312 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
  431. 2017-10-10 16:20 - 2017-09-29 03:29 - 001460736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
  432. 2017-10-10 16:20 - 2017-09-29 03:29 - 001318912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
  433. 2017-10-10 16:20 - 2017-09-29 03:29 - 000724992 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
  434. 2017-10-10 16:20 - 2017-09-29 03:29 - 000461824 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
  435. 2017-10-10 16:20 - 2017-09-29 03:29 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
  436. 2017-10-10 16:20 - 2017-09-29 03:29 - 000304640 _____ (Microsoft Corporation) C:\Windows\system32\dusmsvc.dll
  437. 2017-10-10 16:20 - 2017-09-29 03:29 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
  438. 2017-10-10 16:20 - 2017-09-29 03:29 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
  439. 2017-10-10 16:20 - 2017-09-29 03:28 - 000699904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
  440. 2017-10-10 16:20 - 2017-09-29 03:28 - 000681472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
  441. 2017-10-10 16:20 - 2017-09-29 03:28 - 000556032 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
  442. 2017-10-10 16:20 - 2017-09-29 03:28 - 000527360 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
  443. 2017-10-10 16:20 - 2017-09-29 03:28 - 000473088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
  444. 2017-10-10 16:20 - 2017-09-29 03:28 - 000458752 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
  445. 2017-10-10 16:20 - 2017-09-29 03:28 - 000297984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
  446. 2017-10-10 16:20 - 2017-09-29 03:28 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
  447. 2017-10-10 16:20 - 2017-09-29 03:28 - 000254976 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
  448. 2017-10-10 16:20 - 2017-09-29 03:28 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe
  449. 2017-10-10 16:20 - 2017-09-29 03:28 - 000040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cipher.exe
  450. 2017-10-10 16:20 - 2017-09-29 03:27 - 012803072 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  451. 2017-10-10 16:20 - 2017-09-29 03:27 - 001321984 ____R (The ICU Project) C:\Windows\system32\icuuc.dll
  452. 2017-10-10 16:20 - 2017-09-29 03:27 - 000616960 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll
  453. 2017-10-10 16:20 - 2017-09-29 03:27 - 000524800 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
  454. 2017-10-10 16:20 - 2017-09-29 03:27 - 000412160 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
  455. 2017-10-10 16:20 - 2017-09-29 03:27 - 000409600 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
  456. 2017-10-10 16:20 - 2017-09-29 03:27 - 000350720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
  457. 2017-10-10 16:20 - 2017-09-29 03:26 - 008213504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
  458. 2017-10-10 16:20 - 2017-09-29 03:26 - 002809344 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
  459. 2017-10-10 16:20 - 2017-09-29 03:26 - 001468928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
  460. 2017-10-10 16:20 - 2017-09-29 03:26 - 001269760 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
  461. 2017-10-10 16:20 - 2017-09-29 03:26 - 001197568 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Uev.CommonBridge.dll
  462. 2017-10-10 16:20 - 2017-09-29 03:26 - 001141760 _____ (Microsoft Corporation) C:\Windows\system32\ApplySettingsTemplateCatalog.exe
  463. 2017-10-10 16:20 - 2017-09-29 03:26 - 000772096 _____ (Microsoft Corporation) C:\Windows\system32\PCPKsp.dll
  464. 2017-10-10 16:20 - 2017-09-29 03:26 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerUI.dll
  465. 2017-10-10 16:20 - 2017-09-29 03:25 - 008199168 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
  466. 2017-10-10 16:20 - 2017-09-29 03:25 - 004175872 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
  467. 2017-10-10 16:20 - 2017-09-29 03:25 - 002760704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
  468. 2017-10-10 16:20 - 2017-09-29 03:25 - 000586240 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
  469. 2017-10-10 16:20 - 2017-09-29 03:24 - 003307008 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  470. 2017-10-10 16:20 - 2017-09-29 03:24 - 002503680 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
  471. 2017-10-10 16:20 - 2017-09-29 03:24 - 001886208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
  472. 2017-10-10 16:20 - 2017-09-29 03:24 - 001628672 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
  473. 2017-10-10 16:20 - 2017-09-29 03:24 - 001307648 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
  474. 2017-10-10 16:20 - 2017-09-29 03:24 - 001201664 _____ (Microsoft Corporation) C:\Windows\system32\AgentService.exe
  475. 2017-10-10 16:20 - 2017-09-29 03:24 - 000684032 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
  476. 2017-10-10 16:20 - 2017-09-29 03:23 - 005557760 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
  477. 2017-10-10 16:20 - 2017-09-29 03:23 - 004730368 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  478. 2017-10-10 16:20 - 2017-09-29 03:23 - 003140096 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
  479. 2017-10-10 16:20 - 2017-09-29 03:23 - 002730496 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
  480. 2017-10-10 16:20 - 2017-09-29 03:23 - 002446336 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
  481. 2017-10-10 16:20 - 2017-09-29 03:23 - 002195968 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Uev.ModernAppAgent.dll
  482. 2017-10-10 16:20 - 2017-09-29 03:23 - 002055680 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
  483. 2017-10-10 16:20 - 2017-09-29 03:23 - 001887744 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
  484. 2017-10-10 16:20 - 2017-09-29 03:23 - 001605632 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
  485. 2017-10-10 16:20 - 2017-09-29 03:23 - 001460224 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  486. 2017-10-10 16:20 - 2017-09-29 03:23 - 001398784 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
  487. 2017-10-10 16:20 - 2017-09-29 03:23 - 001052672 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
  488. 2017-10-10 16:20 - 2017-09-29 03:23 - 000986624 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
  489. 2017-10-10 16:20 - 2017-09-29 03:23 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
  490. 2017-10-10 16:20 - 2017-09-29 03:23 - 000841216 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
  491. 2017-10-10 16:20 - 2017-09-29 03:23 - 000756224 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  492. 2017-10-10 16:20 - 2017-09-29 03:23 - 000647168 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
  493. 2017-10-10 16:20 - 2017-09-29 03:22 - 002829824 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
  494. 2017-10-10 16:20 - 2017-09-29 03:22 - 001802240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  495. 2017-10-10 16:20 - 2017-09-29 03:22 - 001438208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
  496. 2017-10-10 16:20 - 2017-09-29 03:22 - 000407040 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
  497. 2017-10-10 16:20 - 2017-09-29 03:21 - 003304448 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
  498. 2017-10-10 16:20 - 2017-09-29 03:21 - 000722944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
  499. 2017-10-10 16:20 - 2017-09-29 03:21 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
  500. 2017-10-10 16:20 - 2017-09-29 03:21 - 000414208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
  501. 2017-10-10 16:20 - 2017-09-29 03:21 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
  502. 2017-10-10 16:20 - 2017-09-29 03:21 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
  503. 2017-10-10 16:20 - 2017-09-29 03:20 - 001811456 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
  504. 2017-10-10 16:20 - 2017-09-29 03:20 - 000804864 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
  505. 2017-10-10 16:20 - 2017-09-29 03:20 - 000385536 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
  506. 2017-10-10 16:20 - 2017-09-29 03:20 - 000286208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
  507. 2017-10-10 16:20 - 2017-09-29 03:20 - 000194560 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
  508. 2017-10-10 16:20 - 2017-09-29 03:19 - 002088448 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
  509. 2017-10-10 16:20 - 2017-09-29 03:19 - 000325120 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
  510. 2017-10-10 16:20 - 2017-09-29 03:19 - 000306176 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
  511. 2017-10-10 16:20 - 2017-09-29 03:19 - 000208896 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
  512. 2017-10-10 16:20 - 2017-09-29 03:18 - 002438656 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
  513. 2017-10-10 16:20 - 2017-09-29 03:18 - 001527296 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
  514. 2017-10-10 16:20 - 2017-09-29 03:18 - 000893440 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
  515. 2017-10-10 16:20 - 2017-09-29 03:18 - 000603136 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
  516. 2017-10-10 16:20 - 2017-09-29 03:18 - 000364032 _____ (Microsoft Corporation) C:\Windows\system32\bdechangepin.exe
  517. 2017-10-10 16:20 - 2017-09-29 03:18 - 000215040 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
  518. 2017-10-10 16:20 - 2017-09-29 03:18 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
  519. 2017-10-10 16:20 - 2017-09-29 01:40 - 000804312 _____ C:\Windows\SysWOW64\locale.nls
  520. 2017-10-10 16:20 - 2017-09-29 01:40 - 000804312 _____ C:\Windows\system32\locale.nls
  521. 2017-10-10 16:20 - 2017-09-20 11:08 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
  522. 2017-10-10 16:20 - 2017-09-20 11:08 - 000345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
  523. 2017-10-10 16:20 - 2017-09-20 11:08 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
  524. 2017-10-10 16:20 - 2017-09-18 19:20 - 001065104 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
  525. 2017-10-10 16:20 - 2017-09-18 19:20 - 000900376 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
  526. 2017-10-10 16:20 - 2017-09-18 19:18 - 000965024 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
  527. 2017-10-10 16:20 - 2017-09-18 19:17 - 001395664 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
  528. 2017-10-10 16:20 - 2017-09-18 19:17 - 001186464 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
  529. 2017-10-10 16:20 - 2017-09-18 19:17 - 000821664 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
  530. 2017-10-10 16:20 - 2017-09-18 19:11 - 001018272 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
  531. 2017-10-10 16:20 - 2017-09-18 19:09 - 000554400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
  532. 2017-10-10 16:20 - 2017-09-18 18:25 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\eShims.dll
  533. 2017-10-10 16:20 - 2017-09-18 18:20 - 000831488 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
  534. 2017-10-10 16:20 - 2017-09-18 18:20 - 000049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tetheringclient.dll
  535. 2017-10-10 16:20 - 2017-09-18 18:15 - 000648704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
  536. 2017-10-10 16:19 - 2017-09-30 01:40 - 000642680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
  537. 2017-10-10 16:19 - 2017-09-30 01:40 - 000072944 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
  538. 2017-10-10 16:19 - 2017-09-29 03:33 - 000175616 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
  539. 2017-10-10 16:19 - 2017-09-29 03:32 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
  540. 2017-10-10 16:19 - 2017-09-29 03:31 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\efssvc.dll
  541. 2017-10-10 16:19 - 2017-09-29 03:30 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerCsp.dll
  542. 2017-10-10 16:19 - 2017-09-29 03:29 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
  543. 2017-10-10 16:19 - 2017-09-29 03:29 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\ServiceWorkerHost.exe
  544. 2017-10-10 16:19 - 2017-09-29 03:27 - 000565760 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
  545. 2017-10-10 16:19 - 2017-09-29 03:27 - 000538624 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
  546. 2017-10-10 16:19 - 2017-09-29 03:26 - 000356864 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
  547. 2017-10-10 16:19 - 2017-09-29 03:23 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
  548. 2017-10-10 16:19 - 2017-09-29 03:21 - 000154624 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
  549. 2017-10-10 16:19 - 2017-09-29 03:21 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
  550. 2017-10-10 16:19 - 2017-09-29 03:20 - 000150016 _____ (Microsoft Corporation) C:\Windows\system32\iscsiexe.dll
  551. 2017-10-10 16:19 - 2017-09-29 03:18 - 000347648 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
  552. 2017-10-10 16:19 - 2017-09-29 03:18 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe
  553. 2017-10-10 16:19 - 2017-09-29 03:18 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\cipher.exe
  554. 2017-10-10 16:19 - 2017-09-18 18:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll
  555. 2017-10-10 16:19 - 2017-09-18 18:23 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
  556. 2017-10-10 08:42 - 2017-10-10 08:42 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigne3c9c4c31dca6193
  557. 2017-10-10 08:42 - 2017-10-10 08:42 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignbb3886fad142ef24
  558. 2017-10-10 08:42 - 2017-10-10 08:42 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigna09546b0a7b4844c
  559. 2017-10-10 08:42 - 2017-10-10 08:42 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign00ec281dbb396161
  560. 2017-10-09 21:41 - 2017-10-09 21:41 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigne58f341e228acd41
  561. 2017-10-09 21:41 - 2017-10-09 21:41 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigne35180dcddcd21a7
  562. 2017-10-09 21:40 - 2017-10-09 21:40 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign8d10dc274aaed424
  563. 2017-10-09 21:40 - 2017-10-09 21:40 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign3a8a5b0175181aff
  564. 2017-10-09 16:27 - 2017-10-09 16:27 - 000000000 ____D C:\Users\richh\Desktop\Tor Browser
  565. 2017-10-09 16:26 - 2017-10-09 16:27 - 053401488 _____ C:\Users\richh\Downloads\torbrowser-install-7.0.6_en-US.exe
  566. 2017-10-08 23:53 - 2017-10-08 23:53 - 000186328 _____ C:\Users\richh\Downloads\Enzymes_data.pdf
  567. 2017-10-08 23:53 - 2017-10-08 23:53 - 000117666 _____ C:\Users\richh\Downloads\Mitosis_data.pdf
  568. 2017-10-08 23:53 - 2017-10-08 23:53 - 000107676 _____ C:\Users\richh\Downloads\Enzymes_catalase.pdf
  569. 2017-10-08 23:28 - 2017-10-08 23:28 - 000216767 _____ C:\Users\richh\Downloads\120syll_Fall2017 (5).pdf
  570. 2017-10-08 15:09 - 2017-10-08 15:09 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign7bea7b7115f08cb8
  571. 2017-10-08 15:08 - 2017-10-08 15:08 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignaa11b3641067520b
  572. 2017-10-08 15:08 - 2017-10-08 15:08 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign78f2a8ad9f2d9962
  573. 2017-10-08 15:08 - 2017-10-08 15:08 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign18783de53aadaac7
  574. 2017-10-08 11:41 - 2017-10-08 11:41 - 000028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
  575. 2017-10-08 11:40 - 2017-10-08 13:05 - 000000000 ____D C:\ProgramData\RogueKiller
  576. 2017-10-08 11:40 - 2017-10-08 11:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
  577. 2017-10-08 11:40 - 2017-10-08 11:40 - 000000000 ____D C:\Program Files\RogueKiller
  578. 2017-10-08 11:36 - 2017-10-08 11:36 - 035867864 _____ (Adlice Software ) C:\Users\richh\Downloads\RogueKiller_setup_ref3.exe
  579. 2017-10-08 11:36 - 2017-10-08 11:36 - 001790024 _____ (Malwarebytes) C:\Users\richh\Downloads\JRT.exe
  580. 2017-10-08 10:31 - 2017-10-08 10:32 - 000056689 _____ C:\Users\richh\Downloads\Addition.txt
  581. 2017-10-08 10:29 - 2017-10-12 16:24 - 000022301 _____ C:\Users\richh\Downloads\FRST.txt
  582. 2017-10-08 10:28 - 2017-10-12 16:23 - 000000000 ____D C:\FRST
  583. 2017-10-08 10:27 - 2017-10-12 16:23 - 002401792 _____ (Farbar) C:\Users\richh\Downloads\FRST64.exe
  584. 2017-10-07 23:26 - 2017-10-07 23:26 - 012022313 _____ C:\Users\richh\Downloads\Untitled-1.psd
  585. 2017-10-07 23:22 - 2017-10-07 23:22 - 018669554 _____ C:\Users\richh\Downloads\tyler.psd
  586. 2017-10-07 23:22 - 2017-10-07 23:22 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigndd82f55518adaa04
  587. 2017-10-07 18:40 - 2017-10-07 18:40 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignd339fae7ccb1902f
  588. 2017-10-07 18:40 - 2017-10-07 18:40 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign4dbbce12961d2f66
  589. 2017-10-07 18:40 - 2017-10-07 18:40 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign1718f061a31cee12
  590. 2017-10-07 18:40 - 2017-10-07 18:40 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign03722007793a4886
  591. 2017-10-07 13:06 - 2017-10-08 00:29 - 000000000 ____D C:\Users\richh\Downloads\PopcornTime
  592. 2017-10-07 13:06 - 2017-10-07 13:06 - 000000000 ____D C:\Users\richh\AppData\Local\PopcornTime
  593. 2017-10-07 13:06 - 2017-10-07 13:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
  594. 2017-10-07 13:05 - 2017-10-07 13:06 - 000000000 ____D C:\Program Files (x86)\Popcorn Time
  595. 2017-10-07 13:04 - 2017-10-07 13:05 - 051919949 _____ (Popcorn Time ) C:\Users\richh\Downloads\PopcornTime-latest.exe
  596. 2017-10-07 13:02 - 2017-10-07 13:02 - 000000000 ____D C:\Users\richh\Downloads\CosmosLaundromatFirstCycle
  597. 2017-10-07 13:00 - 2017-10-07 13:05 - 000000000 ____D C:\Users\richh\AppData\Roaming\WebTorrent
  598. 2017-10-07 13:00 - 2017-10-07 13:05 - 000000000 ____D C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WebTorrent
  599. 2017-10-07 13:00 - 2017-10-07 13:05 - 000000000 ____D C:\Users\richh\AppData\Local\WebTorrent
  600. 2017-10-07 12:59 - 2017-10-07 12:59 - 063108688 _____ (WebTorrent, LLC) C:\Users\richh\Downloads\WebTorrentSetup-v0.18.0.exe
  601. 2017-10-07 12:09 - 2017-10-08 17:48 - 000000045 _____ C:\Users\richh\Desktop\kicks.txt
  602. 2017-10-07 11:57 - 2017-10-07 11:57 - 000000000 ____D C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Stremio
  603. 2017-10-07 11:57 - 2017-10-07 11:57 - 000000000 ____D C:\Users\richh\AppData\Local\Smart Code ltd
  604. 2017-10-07 11:44 - 2017-10-07 11:44 - 001848520 _____ ( ) C:\Users\richh\Downloads\Stremio_Setup.exe
  605. 2017-10-06 15:06 - 2017-10-06 15:06 - 000945684 _____ C:\Users\richh\Downloads\ScriptHookV_1.0.1180.2.zip
  606. 2017-10-06 15:05 - 2017-10-06 15:06 - 004611584 _____ (New Technology Studio) C:\Users\richh\Downloads\ovisetup.exe
  607. 2017-10-06 14:36 - 2017-10-06 14:51 - 3420434736 _____ C:\Users\richh\Downloads\GTA5_REDUX_v1.2.1.zip
  608. 2017-10-06 14:13 - 2017-10-06 14:13 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign515741270f2d876e
  609. 2017-10-06 14:13 - 2017-10-06 14:13 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign4e7510d96a96ee3e
  610. 2017-10-06 14:13 - 2017-10-06 14:13 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign4ccbcbe7fdbee16d
  611. 2017-10-06 14:13 - 2017-10-06 14:13 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign1f2bd2d5c4bd5a3b
  612. 2017-10-05 15:15 - 2017-10-06 14:34 - 000016833 _____ C:\Users\richh\Desktop\Activity Check l Started 10-3-2017 Fin 10-5-2017.xlsx
  613. 2017-10-05 11:30 - 2017-10-05 11:30 - 000000942 _____ C:\Users\richh\Downloads\Explode your Snapchat Score.txt
  614. 2017-10-04 21:41 - 2017-10-04 21:41 - 010768392 _____ C:\Users\richh\Downloads\Elusive Menu 2.3.6.rar
  615. 2017-10-04 19:35 - 2017-10-04 19:35 - 000000000 ___HD C:\OneDriveTemp
  616. 2017-10-04 00:21 - 2017-10-04 19:32 - 000016062 _____ C:\Users\richh\Downloads\MAIN-Empty (1).xlsx
  617. 2017-10-03 08:15 - 2017-10-03 08:15 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignabaa956181be6e13
  618. 2017-10-03 08:15 - 2017-10-03 08:15 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign908464e9dd46c6e7
  619. 2017-10-03 08:15 - 2017-10-03 08:15 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign3f0cb4ce2b27ab20
  620. 2017-10-03 08:15 - 2017-10-03 08:15 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign0e8378d32943f9a8
  621. 2017-10-02 18:46 - 2017-10-02 18:46 - 000012117 _____ C:\Users\richh\Downloads\MAIN-Empty.xlsx
  622. 2017-10-02 14:39 - 2017-10-02 14:40 - 000000148 _____ C:\Users\richh\Desktop\coinbase text.txt
  623. 2017-10-02 14:37 - 2017-10-02 14:38 - 000000148 _____ C:\Users\richh\Desktop\Snap Text.txt
  624. 2017-10-02 14:31 - 2017-10-02 14:33 - 000000147 _____ C:\Users\richh\Desktop\Spotify Text.txt
  625. 2017-10-02 02:10 - 2017-10-02 02:10 - 005608316 _____ C:\Users\richh\Downloads\snapchat.rar
  626. 2017-10-02 02:01 - 2017-10-02 02:01 - 000000573 _____ C:\Users\richh\Downloads\Free Spotify Premium.txt
  627. 2017-10-02 01:21 - 2017-10-02 01:57 - 000000378 _____ C:\Users\richh\Desktop\Bypass Coinbase Fees.txt
  628. 2017-10-02 01:12 - 2017-10-02 14:37 - 000000942 _____ C:\Users\richh\Desktop\Explode your Snapchat Score.txt
  629. 2017-10-02 01:11 - 2017-10-02 01:56 - 000000573 _____ C:\Users\richh\Desktop\Free Spotify Premium.txt
  630. 2017-10-02 01:03 - 2017-10-02 01:03 - 000033832 _____ C:\Users\richh\Downloads\img.zip
  631. 2017-10-01 15:33 - 2017-10-01 15:33 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigned4a6c1d27ac5824
  632. 2017-10-01 15:33 - 2017-10-01 15:33 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign56529d2f9d0c2e33
  633. 2017-10-01 15:33 - 2017-10-01 15:33 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign1ad643ed8a506a19
  634. 2017-10-01 15:33 - 2017-10-01 15:33 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign1950095868df6b04
  635. 2017-10-01 11:23 - 2017-10-01 11:23 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
  636. 2017-10-01 11:23 - 2017-10-01 11:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
  637. 2017-10-01 11:19 - 2017-10-01 11:20 - 200064104 _____ (Rockstar Games) C:\Users\richh\Downloads\GTAV_Setup_Tool.exe
  638. 2017-10-01 11:04 - 2017-10-01 11:05 - 157926438 _____ C:\Users\richh\Downloads\GrandTheftAutoV-TheManual.msi.zip
  639. 2017-10-01 10:28 - 2017-10-01 10:28 - 000000000 ____D C:\Users\richh\AppData\Roaming\TeamViewer
  640. 2017-10-01 10:27 - 2017-10-01 10:27 - 012204384 _____ (TeamViewer) C:\Users\richh\Downloads\TeamViewerQS.exe
  641. 2017-10-01 09:55 - 2017-10-01 09:55 - 000000000 ____D C:\Users\richh\AppData\Local\ElusiveGTA
  642. 2017-10-01 09:49 - 2017-10-01 09:50 - 025317412 _____ C:\Users\richh\Downloads\Elusive Menu V2.3.rar
  643. 2017-10-01 01:51 - 2017-10-01 01:51 - 000010230 _____ C:\Users\richh\Downloads\index (1).html
  644. 2017-09-30 22:33 - 2017-09-30 22:33 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignc6e59c5006adc2e7
  645. 2017-09-30 22:33 - 2017-09-30 22:33 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign94aad049f5880df6
  646. 2017-09-30 22:33 - 2017-09-30 22:33 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign6e51786778caa0f5
  647. 2017-09-30 22:33 - 2017-09-30 22:33 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign108307e4fa9583e4
  648. 2017-09-30 22:31 - 2017-09-30 22:31 - 000009158 _____ C:\Users\richh\Downloads\kremlin_bolshevik.zip
  649. 2017-09-30 22:04 - 2017-09-30 22:04 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignebfc3120a2dfe933
  650. 2017-09-30 22:04 - 2017-09-30 22:04 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignc637ac5dcd9ceabb
  651. 2017-09-30 22:04 - 2017-09-30 22:04 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignad2efa9c99af2c93
  652. 2017-09-30 22:04 - 2017-09-30 22:04 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigna4cfe8fdd9b2930d
  653. 2017-09-30 16:23 - 2017-09-30 16:23 - 000000000 ____D C:\ProgramData\DSDCS
  654. 2017-09-30 16:22 - 2017-10-04 19:32 - 000000000 ____D C:\Users\richh\AppData\Roaming\InputMapper
  655. 2017-09-30 16:22 - 2017-09-30 16:22 - 007795945 _____ (DSDCS) C:\Users\richh\Downloads\InputMapper 1.6.10.19991.exe
  656. 2017-09-30 16:22 - 2017-09-30 16:22 - 000003204 _____ C:\Windows\System32\Tasks\ExclusiveTool
  657. 2017-09-30 16:22 - 2017-09-30 16:22 - 000002092 _____ C:\Users\Public\Desktop\InputMapper.lnk
  658. 2017-09-30 16:22 - 2017-09-30 16:22 - 000000000 ____D C:\Users\richh\AppData\Roaming\DSDCS
  659. 2017-09-30 16:22 - 2017-09-30 16:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InputMapper
  660. 2017-09-30 16:22 - 2017-09-30 16:22 - 000000000 ____D C:\Program Files (x86)\DSDCS
  661. 2017-09-30 16:12 - 2017-10-12 16:06 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
  662. 2017-09-30 16:12 - 2017-10-01 11:23 - 000000000 ____D C:\Program Files\Rockstar Games
  663. 2017-09-30 16:12 - 2017-09-30 16:12 - 000000000 ____D C:\Users\richh\OneDrive\Documents\Rockstar Games
  664. 2017-09-30 16:12 - 2017-09-30 16:12 - 000000000 ____D C:\Users\richh\AppData\Local\Rockstar Games
  665. 2017-09-29 17:12 - 2017-09-29 17:12 - 000996920 _____ C:\Users\richh\Downloads\forensics1.pcap
  666. 2017-09-29 16:48 - 2017-09-29 16:48 - 000000000 ____D C:\Users\richh\Tracing
  667. 2017-09-26 21:34 - 2017-09-26 21:34 - 001400531 _____ C:\Users\richh\Downloads\ARTH 309 Handout #1.pdf
  668. 2017-09-26 21:34 - 2017-09-26 21:34 - 001197640 _____ C:\Users\richh\Downloads\ARTH 309 Handout #2.pdf
  669. 2017-09-26 18:32 - 2017-09-26 18:32 - 000001302 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
  670. 2017-09-26 12:48 - 2017-09-26 12:48 - 000020557 _____ C:\Users\richh\Downloads\3502-04-03.xlsx
  671. 2017-09-26 12:46 - 2017-09-26 12:46 - 000088196 _____ C:\Users\richh\Downloads\Excel.rar
  672. 2017-09-26 01:28 - 2017-09-26 01:32 - 000000000 ____D C:\Users\richh\Desktop\123helpme
  673. 2017-09-25 20:33 - 2017-09-25 20:33 - 000456748 _____ C:\Users\richh\Downloads\4emv6d (1).zip
  674. 2017-09-25 20:29 - 2017-09-25 20:29 - 000456748 _____ C:\Users\richh\Downloads\4emv6d.zip
  675. 2017-09-24 15:49 - 2017-09-24 15:49 - 000175486 _____ C:\Users\richh\Downloads\assn2.pdf
  676. 2017-09-24 09:48 - 2017-09-24 09:48 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign9fd2eb244bf2f081
  677. 2017-09-22 21:22 - 2017-09-22 21:22 - 000034561 _____ C:\Users\richh\Downloads\ESSAY 1 (1).pdf
  678. 2017-09-21 11:04 - 2017-09-21 11:04 - 000483215 _____ C:\Users\richh\Downloads\Logo.psd
  679. 2017-09-21 09:25 - 2017-09-21 09:25 - 000174194 _____ C:\Users\richh\Downloads\Scholarship_Flyer_17_18 (1).pdf
  680. 2017-09-20 13:50 - 2017-09-20 13:50 - 000000613 _____ C:\Users\richh\Downloads\UI.txt
  681. 2017-09-20 13:12 - 2017-09-20 13:12 - 000001694 _____ C:\Users\richh\Downloads\UI_1 (1).txt
  682. 2017-09-20 12:57 - 2017-09-20 12:57 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignef2371ccdb39a9b2
  683. 2017-09-20 12:56 - 2017-09-20 12:56 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignfc4af0dfced40d05
  684. 2017-09-20 12:21 - 2017-09-20 12:21 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignb664b96f2f8864d7
  685. 2017-09-20 12:20 - 2017-09-20 12:20 - 000345548 _____ C:\Users\richh\Downloads\AdobeDevanagari-Italic.otf
  686. 2017-09-20 12:20 - 2017-09-20 12:20 - 000341388 _____ C:\Users\richh\Downloads\AdobeDevanagari-BoldItalic.otf
  687. 2017-09-20 12:20 - 2017-09-20 12:20 - 000335268 _____ C:\Users\richh\Downloads\AdobeDevanagari-Bold.otf
  688. 2017-09-20 12:20 - 2017-09-20 12:20 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignb06e615582ed2394
  689. 2017-09-20 12:20 - 2017-09-20 12:20 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign375e521f33c15b41
  690. 2017-09-20 12:20 - 2017-09-20 12:20 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign0f3a45e5a5bbc05e
  691. 2017-09-20 12:20 - 2017-09-20 12:20 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign02e634d347641120
  692. 2017-09-20 12:19 - 2017-09-20 12:19 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigne9e54169fa987cc1
  693. 2017-09-20 12:19 - 2017-09-20 12:19 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign9128adc2418944fc
  694. 2017-09-20 12:18 - 2017-09-20 12:18 - 000338928 _____ C:\Users\richh\Downloads\adobe-devanagari_844.otf
  695. 2017-09-20 11:45 - 2017-09-20 11:45 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignd9a9313116e80984
  696. 2017-09-20 11:45 - 2017-09-20 11:45 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignb291a997ccaba6c8
  697. 2017-09-20 11:45 - 2017-09-20 11:45 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign77f00524bed16a32
  698. 2017-09-20 11:45 - 2017-09-20 11:45 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign1910f86d5231dcc9
  699. 2017-09-20 11:36 - 2017-09-20 11:36 - 001887367 _____ C:\Users\richh\Downloads\Realistic-dividers-of-cut-paper.zip
  700. 2017-09-20 11:23 - 2017-09-20 11:23 - 000001342 _____ C:\Users\richh\Downloads\article1.txt
  701. 2017-09-19 14:05 - 2017-09-19 14:13 - 000001739 _____ C:\Users\richh\Downloads\UI_1.txt
  702. 2017-09-19 13:51 - 2017-09-19 13:51 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign9cd8d757da0f19d6
  703. 2017-09-19 13:45 - 2017-09-19 13:45 - 000000962 _____ C:\Users\richh\Downloads\smm%40superstudent.co Email Settings (1).reg
  704. 2017-09-19 13:41 - 2017-09-19 13:41 - 000001046 _____ C:\Users\richh\Downloads\smm%40superstudent.co Email Settings.reg
  705. 2017-09-19 13:35 - 2017-09-19 13:35 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign49dc77c8548c1246
  706. 2017-09-19 13:26 - 2017-09-19 13:26 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignf04e3cfd93ec1585
  707. 2017-09-19 13:26 - 2017-09-19 13:26 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigne6500b013f1243e4
  708. 2017-09-19 13:26 - 2017-09-19 13:26 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigncd67e3cb8272bf6a
  709. 2017-09-19 13:26 - 2017-09-19 13:26 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign6c4a2b3e0e5593bd
  710. 2017-09-19 13:26 - 2017-09-19 13:26 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign287d36a9c9aef347
  711. 2017-09-18 21:13 - 2017-09-18 21:13 - 000011854 _____ C:\Users\richh\Downloads\logo.svg
  712. 2017-09-16 14:28 - 2017-09-16 14:28 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign5367effc5ef16ae7
  713. 2017-09-16 14:08 - 2017-09-16 14:08 - 000001456 _____ C:\Users\richh\AppData\Local\Adobe Save for Web 13.0 Prefs
  714. 2017-09-16 14:03 - 2017-09-16 14:03 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigna40e5d4e19a04b35
  715. 2017-09-16 14:03 - 2017-09-16 14:03 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign7ee2f9272937d681
  716. 2017-09-16 14:03 - 2017-09-16 14:03 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign6911f327a5af2249
  717. 2017-09-16 14:03 - 2017-09-16 14:03 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign3b8380266964387a
  718. 2017-09-16 13:23 - 2017-09-16 13:23 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignd153416133604f65
  719. 2017-09-16 13:22 - 2017-09-16 13:22 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign542a6954c9e28d6c
  720. 2017-09-16 13:21 - 2017-09-16 13:21 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignca545678fe55d343
  721. 2017-09-16 13:20 - 2017-09-16 13:20 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign1ed209bcfadfcd7e
  722. 2017-09-16 13:19 - 2017-09-16 13:19 - 000001377 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator CC (Beta).lnk
  723. 2017-09-16 13:19 - 2017-09-16 13:19 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign9452e564307d61ba
  724. 2017-09-16 13:19 - 2017-09-16 13:19 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign4e3f8e6977b8c3ff
  725. 2017-09-16 13:16 - 2017-09-16 13:16 - 000001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2017.lnk
  726. 2017-09-16 13:10 - 2017-09-16 13:10 - 000001271 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2017.lnk
  727. 2017-09-16 10:16 - 2017-09-30 19:29 - 000000000 ____D C:\Program Files (x86)\BlueStacks
  728. 2017-09-16 10:16 - 2017-09-17 14:29 - 000000000 ____D C:\Users\richh\AppData\Local\Bluestacks
  729. 2017-09-16 10:14 - 2017-09-16 10:15 - 256571616 _____ (BlueStack Systems Inc.) C:\Users\richh\Downloads\BlueStacks-Installer_BS3_native.exe
  730. 2017-09-16 10:14 - 2017-09-16 10:14 - 013663952 _____ (MurGee.com ) C:\Users\richh\Downloads\setup.exe
  731. 2017-09-16 09:54 - 2017-09-16 09:57 - 000000200 _____ C:\Users\richh\Desktop\ex.txt
  732. 2017-09-16 00:13 - 2017-10-12 00:31 - 000000000 ____D C:\Users\richh\AppData\Roaming\Exodus
  733. 2017-09-16 00:12 - 2017-09-16 00:12 - 000002289 _____ C:\Users\richh\Desktop\Exodus.lnk
  734. 2017-09-16 00:12 - 2017-09-16 00:12 - 000000000 ____D C:\Users\richh\AppData\Local\exodus
  735. 2017-09-16 00:11 - 2017-09-16 00:12 - 078359864 _____ (Exodus Movement Inc) C:\Users\richh\Downloads\exodus-windows-x64-1.34.1 (1).exe
  736. 2017-09-16 00:09 - 2017-09-16 00:09 - 078359864 _____ (Exodus Movement Inc) C:\Users\richh\Downloads\exodus-windows-x64-1.34.1.exe
  737. 2017-09-16 00:02 - 2017-09-16 00:02 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignfdbfb7ef63af0b68
  738. 2017-09-16 00:02 - 2017-09-16 00:02 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignf1562968f20e9719
  739. 2017-09-16 00:02 - 2017-09-16 00:02 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign7104502c870a1251
  740. 2017-09-16 00:02 - 2017-09-16 00:02 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign539f660f5cf33978
  741. 2017-09-15 20:39 - 2017-09-15 20:39 - 000000000 ____D C:\Users\richh\AppData\Roaming\Gyazo
  742. 2017-09-15 20:37 - 2017-09-16 15:29 - 000000000 ____D C:\Program Files (x86)\Gyazo
  743. 2017-09-15 20:37 - 2017-09-15 20:37 - 013888456 _____ (Nota Inc. ) C:\Users\richh\Downloads\Gyazo-3.3.2.exe
  744. 2017-09-15 20:37 - 2017-09-15 20:37 - 000003544 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachineDaily
  745. 2017-09-15 20:37 - 2017-09-15 20:37 - 000003408 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachine
  746. 2017-09-15 20:37 - 2017-09-15 20:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo
  747. 2017-09-14 20:56 - 2017-09-14 20:56 - 000105062 _____ C:\Users\richh\Downloads\BIO120_Fa2017.pdf
  748. 2017-09-13 21:33 - 2017-09-13 21:33 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsigndcd11a1530a6e1bc
  749. 2017-09-13 21:25 - 2017-09-13 21:25 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign6aa365b5d1c0df65
  750. 2017-09-13 21:14 - 2017-09-13 21:14 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignd8ce5217c27a8d31
  751. 2017-09-13 21:14 - 2017-09-13 21:14 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignce6647615f2d8d8b
  752. 2017-09-13 21:14 - 2017-09-13 21:14 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsignbe24f9a6000940b1
  753. 2017-09-13 21:14 - 2017-09-13 21:14 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign1e0b2a49a81dec89
  754. 2017-09-13 21:14 - 2017-09-13 21:14 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign1b79fd5171f03c98
  755. 2017-09-13 19:20 - 2017-09-13 19:20 - 000798008 _____ C:\Windows\SysWOW64\vulkan-1-1-0-61-0.dll
  756. 2017-09-13 19:20 - 2017-09-13 19:20 - 000490296 _____ C:\Windows\SysWOW64\vulkaninfo-1-1-0-61-0.exe
  757. 2017-09-13 19:19 - 2017-09-13 19:19 - 000927544 _____ C:\Windows\system32\vulkan-1-1-0-61-0.dll
  758. 2017-09-13 19:19 - 2017-09-13 19:19 - 000591160 _____ C:\Windows\system32\vulkaninfo-1-1-0-61-0.exe
  759. 2017-09-12 16:50 - 2017-09-05 01:30 - 000287648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
  760. 2017-09-12 16:50 - 2017-09-05 01:24 - 000519584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
  761. 2017-09-12 16:50 - 2017-09-05 01:23 - 001242528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
  762. 2017-09-12 16:50 - 2017-09-05 01:21 - 000189344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
  763. 2017-09-12 16:50 - 2017-09-05 01:16 - 000546208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
  764. 2017-09-12 16:50 - 2017-09-05 01:14 - 004708504 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
  765. 2017-09-12 16:50 - 2017-09-05 01:14 - 000254176 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
  766. 2017-09-12 16:50 - 2017-09-05 01:14 - 000094624 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
  767. 2017-09-12 16:50 - 2017-09-05 01:12 - 000627080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
  768. 2017-09-12 16:50 - 2017-09-05 01:12 - 000081176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
  769. 2017-09-12 16:50 - 2017-09-05 00:50 - 004330920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
  770. 2017-09-12 16:50 - 2017-09-05 00:45 - 002476712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
  771. 2017-09-12 16:50 - 2017-09-05 00:45 - 002166808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  772. 2017-09-12 16:50 - 2017-09-05 00:45 - 000085784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialUIBroker.exe
  773. 2017-09-12 16:50 - 2017-09-05 00:44 - 000569264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
  774. 2017-09-12 16:50 - 2017-09-05 00:43 - 000359560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
  775. 2017-09-12 16:50 - 2017-09-05 00:43 - 000280480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
  776. 2017-09-12 16:50 - 2017-09-05 00:43 - 000169376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
  777. 2017-09-12 16:50 - 2017-09-05 00:43 - 000042456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll
  778. 2017-09-12 16:50 - 2017-09-05 00:42 - 002330520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
  779. 2017-09-12 16:50 - 2017-09-05 00:42 - 000703056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
  780. 2017-09-12 16:50 - 2017-09-05 00:42 - 000291904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtapi.dll
  781. 2017-09-12 16:50 - 2017-09-05 00:41 - 004671832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
  782. 2017-09-12 16:50 - 2017-09-05 00:41 - 001106904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
  783. 2017-09-12 16:50 - 2017-09-05 00:41 - 001013912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
  784. 2017-09-12 16:50 - 2017-09-05 00:40 - 000052768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
  785. 2017-09-12 16:50 - 2017-09-05 00:37 - 000583160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
  786. 2017-09-12 16:50 - 2017-09-05 00:28 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
  787. 2017-09-12 16:50 - 2017-09-05 00:28 - 000039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys
  788. 2017-09-12 16:50 - 2017-09-05 00:27 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmCx.sys
  789. 2017-09-12 16:50 - 2017-09-05 00:26 - 000404480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
  790. 2017-09-12 16:50 - 2017-09-05 00:26 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
  791. 2017-09-12 16:50 - 2017-09-05 00:26 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  792. 2017-09-12 16:50 - 2017-09-05 00:25 - 001448960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
  793. 2017-09-12 16:50 - 2017-09-05 00:25 - 000293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
  794. 2017-09-12 16:50 - 2017-09-05 00:25 - 000154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
  795. 2017-09-12 16:50 - 2017-09-05 00:24 - 000457728 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
  796. 2017-09-12 16:50 - 2017-09-05 00:24 - 000182272 _____ (Microsoft Corporation) C:\Windows\system32\ngcrecovery.dll
  797. 2017-09-12 16:50 - 2017-09-05 00:24 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  798. 2017-09-12 16:50 - 2017-09-05 00:23 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
  799. 2017-09-12 16:50 - 2017-09-05 00:23 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\ngcpopkeysrv.dll
  800. 2017-09-12 16:50 - 2017-09-05 00:23 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
  801. 2017-09-12 16:50 - 2017-09-05 00:22 - 000742912 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
  802. 2017-09-12 16:50 - 2017-09-05 00:22 - 000640512 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
  803. 2017-09-12 16:50 - 2017-09-05 00:22 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
  804. 2017-09-12 16:50 - 2017-09-05 00:22 - 000274944 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  805. 2017-09-12 16:50 - 2017-09-05 00:22 - 000165888 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
  806. 2017-09-12 16:50 - 2017-09-05 00:22 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
  807. 2017-09-12 16:50 - 2017-09-05 00:21 - 001178624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
  808. 2017-09-12 16:50 - 2017-09-05 00:21 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
  809. 2017-09-12 16:50 - 2017-09-05 00:21 - 000123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srpapi.dll
  810. 2017-09-12 16:50 - 2017-09-05 00:21 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  811. 2017-09-12 16:50 - 2017-09-05 00:21 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
  812. 2017-09-12 16:50 - 2017-09-05 00:20 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
  813. 2017-09-12 16:50 - 2017-09-05 00:20 - 000546816 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
  814. 2017-09-12 16:50 - 2017-09-05 00:19 - 000311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
  815. 2017-09-12 16:50 - 2017-09-05 00:19 - 000181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
  816. 2017-09-12 16:50 - 2017-09-05 00:19 - 000134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dinput.dll
  817. 2017-09-12 16:50 - 2017-09-05 00:19 - 000124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
  818. 2017-09-12 16:50 - 2017-09-05 00:19 - 000080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  819. 2017-09-12 16:50 - 2017-09-05 00:18 - 000524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
  820. 2017-09-12 16:50 - 2017-09-05 00:18 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
  821. 2017-09-12 16:50 - 2017-09-05 00:18 - 000452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasplap.dll
  822. 2017-09-12 16:50 - 2017-09-05 00:18 - 000266240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  823. 2017-09-12 16:50 - 2017-09-05 00:18 - 000175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dinput8.dll
  824. 2017-09-12 16:50 - 2017-09-05 00:18 - 000100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasman.dll
  825. 2017-09-12 16:50 - 2017-09-05 00:17 - 000918528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Vpn.dll
  826. 2017-09-12 16:50 - 2017-09-05 00:17 - 000852480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll
  827. 2017-09-12 16:50 - 2017-09-05 00:17 - 000586240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
  828. 2017-09-12 16:50 - 2017-09-05 00:16 - 005961728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
  829. 2017-09-12 16:50 - 2017-09-05 00:16 - 000844288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdlg.dll
  830. 2017-09-12 16:50 - 2017-09-05 00:16 - 000563200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
  831. 2017-09-12 16:50 - 2017-09-05 00:16 - 000358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
  832. 2017-09-12 16:50 - 2017-09-05 00:16 - 000357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
  833. 2017-09-12 16:50 - 2017-09-05 00:16 - 000257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Phoneutil.dll
  834. 2017-09-12 16:50 - 2017-09-05 00:15 - 001248768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
  835. 2017-09-12 16:50 - 2017-09-05 00:15 - 001143296 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
  836. 2017-09-12 16:50 - 2017-09-05 00:15 - 000657408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
  837. 2017-09-12 16:50 - 2017-09-05 00:15 - 000636416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
  838. 2017-09-12 16:50 - 2017-09-05 00:15 - 000430592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
  839. 2017-09-12 16:50 - 2017-09-05 00:15 - 000223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
  840. 2017-09-12 16:50 - 2017-09-05 00:14 - 002516480 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
  841. 2017-09-12 16:50 - 2017-09-05 00:14 - 001657344 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
  842. 2017-09-12 16:50 - 2017-09-05 00:14 - 001583616 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  843. 2017-09-12 16:50 - 2017-09-05 00:14 - 001046016 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
  844. 2017-09-12 16:50 - 2017-09-05 00:14 - 000827904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
  845. 2017-09-12 16:50 - 2017-09-05 00:14 - 000754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  846. 2017-09-12 16:50 - 2017-09-05 00:14 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsreg.dll
  847. 2017-09-12 16:50 - 2017-09-05 00:13 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cldapi.dll
  848. 2017-09-12 16:50 - 2017-09-05 00:12 - 005225984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
  849. 2017-09-12 16:50 - 2017-09-05 00:12 - 000899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
  850. 2017-09-12 16:50 - 2017-09-05 00:11 - 003667456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
  851. 2017-09-12 16:50 - 2017-09-05 00:11 - 001463296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  852. 2017-09-12 16:50 - 2017-09-05 00:11 - 001355264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
  853. 2017-09-12 16:50 - 2017-09-05 00:11 - 001060352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
  854. 2017-09-12 16:50 - 2017-09-05 00:11 - 001019904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
  855. 2017-09-12 16:50 - 2017-09-05 00:10 - 000761344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
  856. 2017-09-12 16:50 - 2017-09-05 00:10 - 000431616 _____ (Microsoft Corporation) C:\Windows\system32\BthHFSrv.dll
  857. 2017-09-12 16:50 - 2017-09-05 00:06 - 000221696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
  858. 2017-09-12 16:50 - 2017-09-05 00:06 - 000089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
  859. 2017-09-12 16:50 - 2017-09-05 00:06 - 000078848 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
  860. 2017-09-12 16:50 - 2017-09-05 00:04 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RstrtMgr.dll
  861. 2017-09-12 16:50 - 2017-09-05 00:04 - 000057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
  862. 2017-09-12 16:49 - 2017-09-05 01:31 - 000750560 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
  863. 2017-09-12 16:49 - 2017-09-05 01:31 - 000115792 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
  864. 2017-09-12 16:49 - 2017-09-05 01:26 - 001930840 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  865. 2017-09-12 16:49 - 2017-09-05 01:25 - 000159648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
  866. 2017-09-12 16:49 - 2017-09-05 01:24 - 000923040 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
  867. 2017-09-12 16:49 - 2017-09-05 01:23 - 004462120 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
  868. 2017-09-12 16:49 - 2017-09-05 01:20 - 001057824 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
  869. 2017-09-12 16:49 - 2017-09-05 01:18 - 002972552 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
  870. 2017-09-12 16:49 - 2017-09-05 01:18 - 002647224 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  871. 2017-09-12 16:49 - 2017-09-05 01:18 - 001668344 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
  872. 2017-09-12 16:49 - 2017-09-05 01:18 - 000685512 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
  873. 2017-09-12 16:49 - 2017-09-05 01:18 - 000212384 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
  874. 2017-09-12 16:49 - 2017-09-05 01:17 - 000316320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
  875. 2017-09-12 16:49 - 2017-09-05 01:16 - 001320344 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
  876. 2017-09-12 16:49 - 2017-09-05 01:16 - 000872472 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
  877. 2017-09-12 16:49 - 2017-09-05 01:16 - 000715168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
  878. 2017-09-12 16:49 - 2017-09-05 01:16 - 000410168 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
  879. 2017-09-12 16:49 - 2017-09-05 01:16 - 000182688 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
  880. 2017-09-12 16:49 - 2017-09-05 01:16 - 000049720 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
  881. 2017-09-12 16:49 - 2017-09-05 01:15 - 003116184 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
  882. 2017-09-12 16:49 - 2017-09-05 01:15 - 000871448 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
  883. 2017-09-12 16:49 - 2017-09-05 01:15 - 000381824 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
  884. 2017-09-12 16:49 - 2017-09-05 01:14 - 001146176 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
  885. 2017-09-12 16:49 - 2017-09-05 01:14 - 000958664 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
  886. 2017-09-12 16:49 - 2017-09-05 01:13 - 001619816 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
  887. 2017-09-12 16:49 - 2017-09-05 01:13 - 000078240 _____ (Microsoft Corporation) C:\Windows\system32\SyncAppvPublishingServer.exe
  888. 2017-09-12 16:49 - 2017-09-05 01:13 - 000064680 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
  889. 2017-09-12 16:49 - 2017-09-05 01:12 - 000844704 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
  890. 2017-09-12 16:49 - 2017-09-05 01:12 - 000774560 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
  891. 2017-09-12 16:49 - 2017-09-05 01:12 - 000406944 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
  892. 2017-09-12 16:49 - 2017-09-05 01:12 - 000235424 _____ (Microsoft Corporation) C:\Windows\system32\AppVShNotify.exe
  893. 2017-09-12 16:49 - 2017-09-05 01:12 - 000203680 _____ (Microsoft Corporation) C:\Windows\system32\AppVStreamingUX.dll
  894. 2017-09-12 16:49 - 2017-09-05 01:11 - 000610720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
  895. 2017-09-12 16:49 - 2017-09-05 01:11 - 000387936 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
  896. 2017-09-12 16:49 - 2017-09-05 00:53 - 001620880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
  897. 2017-09-12 16:49 - 2017-09-05 00:30 - 001639936 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
  898. 2017-09-12 16:49 - 2017-09-05 00:30 - 001275904 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
  899. 2017-09-12 16:49 - 2017-09-05 00:30 - 000584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
  900. 2017-09-12 16:49 - 2017-09-05 00:30 - 000463360 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
  901. 2017-09-12 16:49 - 2017-09-05 00:30 - 000447488 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  902. 2017-09-12 16:49 - 2017-09-05 00:30 - 000184320 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
  903. 2017-09-12 16:49 - 2017-09-05 00:30 - 000093184 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
  904. 2017-09-12 16:49 - 2017-09-05 00:30 - 000089088 _____ (Microsoft Corporation) C:\Windows\system32\winsrvext.dll
  905. 2017-09-12 16:49 - 2017-09-05 00:30 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
  906. 2017-09-12 16:49 - 2017-09-05 00:29 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\SEMgrPS.dll
  907. 2017-09-12 16:49 - 2017-09-05 00:27 - 000133632 _____ (Microsoft Corporation) C:\Windows\system32\CfgSPCellular.dll
  908. 2017-09-12 16:49 - 2017-09-05 00:27 - 000131584 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAPNCsp.dll
  909. 2017-09-12 16:49 - 2017-09-05 00:27 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
  910. 2017-09-12 16:49 - 2017-09-05 00:27 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\datamarketsvc.dll
  911. 2017-09-12 16:49 - 2017-09-05 00:27 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
  912. 2017-09-12 16:49 - 2017-09-05 00:26 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
  913. 2017-09-12 16:49 - 2017-09-05 00:26 - 000156160 _____ (Microsoft Corporation) C:\Windows\system32\csplte.dll
  914. 2017-09-12 16:49 - 2017-09-05 00:26 - 000142848 _____ (Microsoft Corporation) C:\Windows\system32\srpapi.dll
  915. 2017-09-12 16:49 - 2017-09-05 00:26 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
  916. 2017-09-12 16:49 - 2017-09-05 00:26 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
  917. 2017-09-12 16:49 - 2017-09-05 00:26 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
  918. 2017-09-12 16:49 - 2017-09-05 00:25 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
  919. 2017-09-12 16:49 - 2017-09-05 00:25 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
  920. 2017-09-12 16:49 - 2017-09-05 00:24 - 000385536 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll
  921. 2017-09-12 16:49 - 2017-09-05 00:24 - 000353280 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
  922. 2017-09-12 16:49 - 2017-09-05 00:24 - 000334336 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
  923. 2017-09-12 16:49 - 2017-09-05 00:24 - 000274432 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
  924. 2017-09-12 16:49 - 2017-09-05 00:24 - 000160768 _____ (Microsoft Corporation) C:\Windows\system32\dinput.dll
  925. 2017-09-12 16:49 - 2017-09-05 00:24 - 000109056 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
  926. 2017-09-12 16:49 - 2017-09-05 00:23 - 000739840 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
  927. 2017-09-12 16:49 - 2017-09-05 00:23 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
  928. 2017-09-12 16:49 - 2017-09-05 00:23 - 000305152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
  929. 2017-09-12 16:49 - 2017-09-05 00:23 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
  930. 2017-09-12 16:49 - 2017-09-05 00:23 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll
  931. 2017-09-12 16:49 - 2017-09-05 00:22 - 000477696 _____ (Microsoft Corporation) C:\Windows\system32\rasplap.dll
  932. 2017-09-12 16:49 - 2017-09-05 00:22 - 000413184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
  933. 2017-09-12 16:49 - 2017-09-05 00:22 - 000388096 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  934. 2017-09-12 16:49 - 2017-09-05 00:22 - 000329728 _____ (Microsoft Corporation) C:\Windows\system32\RasMediaManager.dll
  935. 2017-09-12 16:49 - 2017-09-05 00:22 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  936. 2017-09-12 16:49 - 2017-09-05 00:22 - 000213504 _____ (Microsoft Corporation) C:\Windows\system32\dinput8.dll
  937. 2017-09-12 16:49 - 2017-09-05 00:22 - 000173568 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
  938. 2017-09-12 16:49 - 2017-09-05 00:21 - 001051136 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
  939. 2017-09-12 16:49 - 2017-09-05 00:21 - 000946688 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
  940. 2017-09-12 16:49 - 2017-09-05 00:21 - 000773120 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
  941. 2017-09-12 16:49 - 2017-09-05 00:21 - 000691712 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
  942. 2017-09-12 16:49 - 2017-09-05 00:21 - 000422400 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
  943. 2017-09-12 16:49 - 2017-09-05 00:20 - 007337472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
  944. 2017-09-12 16:49 - 2017-09-05 00:20 - 001878016 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
  945. 2017-09-12 16:49 - 2017-09-05 00:20 - 000925696 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
  946. 2017-09-12 16:49 - 2017-09-05 00:20 - 000412160 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
  947. 2017-09-12 16:49 - 2017-09-05 00:20 - 000282112 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
  948. 2017-09-12 16:49 - 2017-09-05 00:20 - 000229888 _____ (Microsoft Corporation) C:\Windows\system32\SIHClient.exe
  949. 2017-09-12 16:49 - 2017-09-05 00:19 - 001260544 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
  950. 2017-09-12 16:49 - 2017-09-05 00:19 - 001085440 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
  951. 2017-09-12 16:49 - 2017-09-05 00:19 - 001028608 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
  952. 2017-09-12 16:49 - 2017-09-05 00:19 - 000996864 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
  953. 2017-09-12 16:49 - 2017-09-05 00:19 - 000772096 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
  954. 2017-09-12 16:49 - 2017-09-05 00:19 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
  955. 2017-09-12 16:49 - 2017-09-05 00:18 - 002078720 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  956. 2017-09-12 16:49 - 2017-09-05 00:18 - 000922112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  957. 2017-09-12 16:49 - 2017-09-05 00:18 - 000921600 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll
  958. 2017-09-12 16:49 - 2017-09-05 00:18 - 000874496 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
  959. 2017-09-12 16:49 - 2017-09-05 00:18 - 000864256 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
  960. 2017-09-12 16:49 - 2017-09-05 00:18 - 000832000 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
  961. 2017-09-12 16:49 - 2017-09-05 00:18 - 000803328 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
  962. 2017-09-12 16:49 - 2017-09-05 00:18 - 000752640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  963. 2017-09-12 16:49 - 2017-09-05 00:18 - 000564736 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
  964. 2017-09-12 16:49 - 2017-09-05 00:18 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  965. 2017-09-12 16:49 - 2017-09-05 00:18 - 000257024 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
  966. 2017-09-12 16:49 - 2017-09-05 00:18 - 000176640 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
  967. 2017-09-12 16:49 - 2017-09-05 00:18 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\cldapi.dll
  968. 2017-09-12 16:49 - 2017-09-05 00:17 - 000757760 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
  969. 2017-09-12 16:49 - 2017-09-05 00:16 - 002680320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
  970. 2017-09-12 16:49 - 2017-09-05 00:16 - 000440320 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
  971. 2017-09-12 16:49 - 2017-09-05 00:16 - 000397312 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
  972. 2017-09-12 16:49 - 2017-09-05 00:15 - 004396032 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
  973. 2017-09-12 16:49 - 2017-09-05 00:15 - 003059200 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
  974. 2017-09-12 16:49 - 2017-09-05 00:15 - 001736704 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
  975. 2017-09-12 16:49 - 2017-09-05 00:15 - 001293824 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
  976. 2017-09-12 16:49 - 2017-09-05 00:15 - 001077248 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
  977. 2017-09-12 16:49 - 2017-09-05 00:15 - 000706560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
  978. 2017-09-12 16:49 - 2017-09-05 00:15 - 000664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  979. 2017-09-12 16:49 - 2017-09-05 00:15 - 000232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
  980. 2017-09-12 16:49 - 2017-09-05 00:14 - 002177024 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
  981. 2017-09-12 16:49 - 2017-09-05 00:14 - 002006528 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
  982. 2017-09-12 16:49 - 2017-09-05 00:14 - 000810496 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
  983. 2017-09-12 16:49 - 2017-09-05 00:13 - 002009600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  984. 2017-09-12 16:49 - 2017-09-05 00:12 - 002153984 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
  985. 2017-09-12 16:49 - 2017-09-05 00:11 - 000254976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
  986. 2017-09-12 16:49 - 2017-09-05 00:09 - 000268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
  987. 2017-09-12 16:49 - 2017-09-05 00:07 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\RstrtMgr.dll
  988. 2017-09-12 16:49 - 2017-09-05 00:07 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
  989. 2017-09-12 16:49 - 2017-09-01 01:55 - 000031932 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
  990. 2017-09-12 16:45 - 2017-09-12 16:51 - 000004520 _____ C:\Users\richh\AppData\Roaming\VoiceMeeterDefault.xml
  991. 2017-09-12 16:34 - 2017-09-13 00:07 - 000000000 ____D C:\Users\richh\AppData\Roaming\audacity
  992. 2017-09-12 16:34 - 2017-09-12 16:34 - 000001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
  993. 2017-09-12 16:34 - 2017-09-12 16:34 - 000000000 ____D C:\Users\richh\AppData\Local\Audacity
  994. 2017-09-12 16:33 - 2017-09-12 16:34 - 000000000 ____D C:\Program Files (x86)\Audacity
  995. 2017-09-12 16:28 - 2017-09-12 16:28 - 000002877 _____ C:\Users\richh\Downloads\AUDIO NEW.xml
  996. 2017-09-12 16:20 - 2017-09-12 16:51 - 000000000 ____D C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VB Audio
  997. 2017-09-12 16:20 - 2017-09-12 16:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VB Audio
  998. 2017-09-12 16:20 - 2017-09-12 16:20 - 000041192 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\vbaudio_vmvaio64_win7.sys
  999. 2017-09-12 16:20 - 2017-09-12 16:20 - 000000000 ____D C:\Program Files (x86)\VB
  1000. 2017-09-12 16:18 - 2017-09-12 16:51 - 000000000 ____D C:\Program Files\VB
  1001. 2017-09-12 16:16 - 2017-09-12 16:16 - 008214200 _____ C:\Users\richh\Downloads\VoicemeeterSetup_v1054.zip
  1002. 2017-09-12 16:16 - 2017-09-12 16:16 - 001139147 _____ C:\Users\richh\Downloads\VBCABLE_Driver_Pack43.zip
  1003. 2017-09-12 10:47 - 2017-09-12 10:47 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign8b627ff2cde1d536
  1004. 2017-09-12 10:47 - 2017-09-12 10:47 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign4fea492528d4ca35
  1005. 2017-09-12 10:47 - 2017-09-12 10:47 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign400e6e35c4e0fd80
  1006. 2017-09-12 10:47 - 2017-09-12 10:47 - 000000000 ____D C:\Users\richh\AppData\Local\Tempzxpsign3e1fd733f7730b1a
  1007.  
  1008. ==================== One Month Modified files and folders ========
  1009.  
  1010. (If an entry is included in the fixlist, the file/folder will be moved.)
  1011.  
  1012. 2017-10-12 16:13 - 2017-09-04 08:29 - 000000000 ____D C:\Users\richh\AppData\Local\fman
  1013. 2017-10-12 16:08 - 2017-07-07 15:11 - 000000000 ____D C:\Users\richh\AppData\Roaming\Spotify
  1014. 2017-10-12 12:25 - 2017-07-21 12:40 - 000000000 ____D C:\ProgramData\NVIDIA
  1015. 2017-10-12 11:23 - 2017-07-12 13:41 - 000000000 ____D C:\Users\richh\AppData\Local\Adobe
  1016. 2017-10-12 10:06 - 2017-03-18 17:03 - 000000000 ___HD C:\Program Files\WindowsApps
  1017. 2017-10-12 10:06 - 2017-03-18 17:03 - 000000000 ____D C:\Windows\AppReadiness
  1018. 2017-10-12 02:53 - 2017-08-25 18:10 - 000000000 ____D C:\Users\richh\AppData\Roaming\WTablet
  1019. 2017-10-12 02:53 - 2017-07-07 15:11 - 000000000 ____D C:\Users\richh\AppData\Local\Spotify
  1020. 2017-10-11 13:19 - 2017-07-05 16:36 - 000000000 ____D C:\Users\richh\AppData\Local\Packages
  1021. 2017-10-11 11:23 - 2017-07-05 16:35 - 000000000 ____D C:\Users\richh
  1022. 2017-10-11 11:09 - 2017-03-18 17:01 - 000000000 ____D C:\Windows\INF
  1023. 2017-10-11 11:08 - 2017-07-12 13:57 - 000000000 ___RD C:\Users\richh\Creative Cloud Files
  1024. 2017-10-11 11:07 - 2017-07-05 16:34 - 001428266 _____ C:\Windows\system32\PerfStringBackup.INI
  1025. 2017-10-11 11:06 - 2017-07-05 16:38 - 000000000 ___RD C:\Users\richh\OneDrive
  1026. 2017-10-11 11:04 - 2017-07-05 16:36 - 000000000 __RHD C:\Users\Public\AccountPictures
  1027. 2017-10-11 02:15 - 2017-07-21 12:39 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
  1028. 2017-10-11 02:15 - 2017-07-05 19:27 - 000569728 _____ C:\Windows\system32\FNTCACHE.DAT
  1029. 2017-10-11 02:15 - 2017-07-05 19:27 - 000000006 ____H C:\Windows\Tasks\SA.DAT
  1030. 2017-10-11 02:14 - 2017-03-18 07:40 - 001835008 _____ C:\Windows\system32\config\BBI
  1031. 2017-10-11 02:13 - 2017-03-18 17:03 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
  1032. 2017-10-11 02:13 - 2017-03-18 17:03 - 000207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
  1033. 2017-10-11 02:13 - 2017-03-18 17:03 - 000000000 ____D C:\Windows\ShellExperiences
  1034. 2017-10-11 02:13 - 2017-03-18 17:03 - 000000000 ____D C:\Windows\Provisioning
  1035. 2017-10-11 02:13 - 2017-03-18 17:03 - 000000000 ____D C:\Windows\PolicyDefinitions
  1036. 2017-10-11 00:53 - 2017-07-05 19:27 - 000000000 ____D C:\Windows\system32\SleepStudy
  1037. 2017-10-10 23:09 - 2017-07-05 16:38 - 000000000 ____D C:\Users\richh\AppData\Roaming\Skype
  1038. 2017-10-10 22:57 - 2017-07-21 12:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
  1039. 2017-10-10 22:57 - 2017-07-21 12:39 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
  1040. 2017-10-10 22:55 - 2017-07-21 12:39 - 000000000 ____D C:\Program Files\NVIDIA Corporation
  1041. 2017-10-10 17:07 - 2017-07-21 13:46 - 000000000 ____D C:\Users\richh\AppData\Local\CrashDumps
  1042. 2017-10-10 16:27 - 2017-07-05 18:53 - 000000000 ____D C:\Windows\system32\MRT
  1043. 2017-10-10 16:24 - 2017-07-05 18:53 - 126925120 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
  1044. 2017-10-10 16:24 - 2017-03-18 16:51 - 000000000 ____D C:\Windows\CbsTemp
  1045. 2017-10-10 10:15 - 2017-07-07 01:39 - 000000044 _____ C:\Users\richh\jagex_cl_oldschool_LIVE.dat
  1046. 2017-10-09 22:10 - 2017-08-10 16:38 - 000004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  1047. 2017-10-09 22:10 - 2017-08-10 16:38 - 000004000 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  1048. 2017-10-09 22:10 - 2017-07-21 12:46 - 000003994 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  1049. 2017-10-09 22:10 - 2017-07-21 12:46 - 000003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  1050. 2017-10-09 22:10 - 2017-07-21 12:46 - 000003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  1051. 2017-10-09 22:10 - 2017-07-21 12:46 - 000003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  1052. 2017-10-09 22:10 - 2017-07-21 12:46 - 000003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  1053. 2017-10-09 22:10 - 2017-07-21 12:46 - 000003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  1054. 2017-10-09 14:12 - 2017-07-31 10:20 - 000000000 ____D C:\Users\richh\Desktop\HF
  1055. 2017-10-08 12:33 - 2017-03-18 17:03 - 000000000 ___HD C:\Windows\system32\GroupPolicy
  1056. 2017-10-08 09:14 - 2017-07-05 17:22 - 000000000 ____D C:\Program Files (x86)\Steam
  1057. 2017-10-07 13:00 - 2017-07-29 17:25 - 000000000 ____D C:\Users\richh\AppData\Local\SquirrelTemp
  1058. 2017-10-06 09:35 - 2017-08-10 16:38 - 000057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
  1059. 2017-10-06 09:35 - 2017-07-21 12:43 - 036229056 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
  1060. 2017-10-06 09:35 - 2017-07-21 12:43 - 023261440 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
  1061. 2017-10-06 09:35 - 2017-07-21 12:43 - 004482976 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
  1062. 2017-10-06 09:35 - 2017-07-21 12:43 - 003816560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
  1063. 2017-10-06 09:35 - 2017-07-21 12:43 - 001615472 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
  1064. 2017-10-06 09:35 - 2017-07-21 12:43 - 001135280 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
  1065. 2017-10-06 09:35 - 2017-07-21 12:43 - 000225208 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
  1066. 2017-10-06 09:35 - 2017-05-19 14:22 - 000048442 _____ C:\Windows\system32\nvinfo.pb
  1067. 2017-10-06 08:17 - 2017-07-21 12:40 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
  1068. 2017-10-06 07:44 - 2017-07-21 12:41 - 005960312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
  1069. 2017-10-06 07:44 - 2017-07-21 12:41 - 002587584 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
  1070. 2017-10-06 07:44 - 2017-07-21 12:41 - 001766520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
  1071. 2017-10-06 07:44 - 2017-07-21 12:41 - 000607168 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
  1072. 2017-10-06 07:44 - 2017-07-21 12:41 - 000449656 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
  1073. 2017-10-06 07:44 - 2017-07-21 12:41 - 000122816 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
  1074. 2017-10-06 07:44 - 2017-07-21 12:41 - 000081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
  1075. 2017-10-01 11:23 - 2017-07-05 17:27 - 000000000 ____D C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
  1076. 2017-10-01 11:08 - 2017-07-21 14:21 - 000000000 ____D C:\Users\richh\AppData\Roaming\Apple Computer
  1077. 2017-10-01 11:08 - 2017-07-21 14:21 - 000000000 ____D C:\Users\richh\AppData\Local\Apple Computer
  1078. 2017-10-01 09:38 - 2017-07-29 17:25 - 000000000 ____D C:\Users\richh\AppData\Roaming\discord
  1079. 2017-09-30 21:03 - 2017-09-04 08:40 - 000000000 ____D C:\Users\richh\Desktop\supers
  1080. 2017-09-30 19:35 - 2017-03-18 17:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
  1081. 2017-09-30 19:32 - 2017-07-09 19:55 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
  1082. 2017-09-29 16:48 - 2017-07-05 17:12 - 000000000 ___RD C:\Program Files (x86)\Skype
  1083. 2017-09-29 16:48 - 2017-07-05 17:12 - 000000000 ____D C:\ProgramData\Skype
  1084. 2017-09-29 11:02 - 2017-07-21 12:41 - 008257351 _____ C:\Windows\system32\nvcoproc.bin
  1085. 2017-09-26 21:05 - 2017-07-05 17:09 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  1086. 2017-09-26 18:32 - 2017-07-12 13:43 - 000000000 ____D C:\Program Files (x86)\Adobe
  1087. 2017-09-20 11:37 - 2017-08-05 21:01 - 000000033 _____ C:\Users\richh\AppData\Roaming\AdobeWLCMCache.dat
  1088. 2017-09-19 20:43 - 2017-07-25 13:53 - 000003378 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2936657135-2552198426-1408488734-1001
  1089. 2017-09-19 20:43 - 2017-07-05 16:38 - 000002367 _____ C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
  1090. 2017-09-19 03:23 - 2017-07-21 12:46 - 001923008 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
  1091. 2017-09-19 03:23 - 2017-07-21 12:46 - 001755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
  1092. 2017-09-19 03:23 - 2017-07-21 12:46 - 001505728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
  1093. 2017-09-19 03:23 - 2017-07-21 12:46 - 001317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
  1094. 2017-09-19 03:23 - 2017-07-21 12:46 - 000121280 _____ C:\Windows\system32\NvRtmpStreamer64.dll
  1095. 2017-09-19 03:23 - 2017-07-21 12:43 - 000179136 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
  1096. 2017-09-19 03:23 - 2017-07-21 12:43 - 000146368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
  1097. 2017-09-18 17:29 - 2017-08-10 16:38 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
  1098. 2017-09-16 13:31 - 2017-07-05 16:40 - 000000000 ____D C:\Users\richh\OneDrive\Documents\Adobe
  1099. 2017-09-16 13:19 - 2017-07-12 13:49 - 000000000 ____D C:\Program Files\Adobe
  1100. 2017-09-16 13:19 - 2017-07-05 16:36 - 000000000 ____D C:\Users\richh\AppData\Roaming\Adobe
  1101. 2017-09-16 13:11 - 2017-07-12 13:43 - 000000000 ____D C:\ProgramData\Adobe
  1102. 2017-09-16 13:10 - 2017-07-12 13:49 - 000000000 ____D C:\Program Files\Common Files\Adobe
  1103. 2017-09-16 00:12 - 2017-09-07 22:20 - 000000000 ____D C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Exodus Movement Inc
  1104. 2017-09-15 22:18 - 2017-03-18 17:03 - 000000000 ____D C:\Windows\rescache
  1105. 2017-09-13 00:09 - 2017-03-18 17:03 - 000000000 ___SD C:\Windows\SysWOW64\F12
  1106. 2017-09-13 00:09 - 2017-03-18 17:03 - 000000000 ___SD C:\Windows\system32\F12
  1107. 2017-09-13 00:09 - 2017-03-18 17:03 - 000000000 ____D C:\Windows\SysWOW64\setup
  1108. 2017-09-13 00:09 - 2017-03-18 17:03 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
  1109. 2017-09-13 00:09 - 2017-03-18 17:03 - 000000000 ____D C:\Windows\system32\setup
  1110. 2017-09-13 00:09 - 2017-03-18 17:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
  1111. 2017-09-13 00:09 - 2017-03-18 17:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
  1112. 2017-09-12 16:52 - 2017-08-20 07:28 - 000000000 ____D C:\Program Files\Ambient Design
  1113. 2017-09-12 16:51 - 2017-09-04 19:36 - 000000000 ____D C:\adbLink
  1114.  
  1115. ==================== Files in the root of some directories =======
  1116.  
  1117. 2017-08-05 21:01 - 2017-09-20 11:37 - 000000033 _____ () C:\Users\richh\AppData\Roaming\AdobeWLCMCache.dat
  1118. 2017-09-12 16:45 - 2017-09-12 16:51 - 000004520 _____ () C:\Users\richh\AppData\Roaming\VoiceMeeterDefault.xml
  1119. 2017-09-16 14:08 - 2017-09-16 14:08 - 000001456 _____ () C:\Users\richh\AppData\Local\Adobe Save for Web 13.0 Prefs
  1120. 2017-07-07 01:39 - 2017-07-07 01:39 - 000000003 _____ () C:\Users\richh\AppData\Local\updater.log
  1121. 2017-07-07 01:39 - 2017-07-07 01:39 - 000000425 _____ () C:\Users\richh\AppData\Local\UserProducts.xml
  1122.  
  1123. Files to move or delete:
  1124. ====================
  1125. C:\Users\richh\jagex_Runescape_preferences.dat
  1126. C:\Users\richh\jagex_Runescape_preferences2.dat
  1127. C:\Users\richh\jagex__preferences3.dat
  1128.  
  1129.  
  1130. Some files in TEMP:
  1131. ====================
  1132. 2017-09-17 14:27 - 2017-09-05 04:57 - 000961592 _____ (BlueStack Systems, Inc.) C:\Users\richh\AppData\Local\Temp\BlueStacksClientUninstaller.exe
  1133. 2017-10-08 11:40 - 2017-09-05 01:26 - 001930840 _____ (Microsoft Corporation) C:\Users\richh\AppData\Local\Temp\dllnt_dump.dll
  1134. 2017-09-17 14:27 - 2017-09-05 04:56 - 000421400 _____ (CodeTitans) C:\Users\richh\AppData\Local\Temp\JSON.dll
  1135. 2017-07-21 12:45 - 2016-11-24 15:22 - 000747648 _____ (NVIDIA Corporation) C:\Users\richh\AppData\Local\Temp\nvSCPAPI.dll
  1136. 2017-07-21 12:45 - 2016-11-24 15:22 - 000860960 _____ (NVIDIA Corporation) C:\Users\richh\AppData\Local\Temp\nvSCPAPI64.dll
  1137. 2017-10-10 22:54 - 2016-11-24 15:22 - 000353336 _____ (NVIDIA Corporation) C:\Users\richh\AppData\Local\Temp\nvStInst.exe
  1138. 2017-07-05 17:11 - 2017-07-05 17:11 - 014456872 _____ (Microsoft Corporation) C:\Users\richh\AppData\Local\Temp\vc_redist.x86.exe
  1139.  
  1140. ==================== Bamital & volsnap ======================
  1141.  
  1142. (There is no automatic fix for files that do not pass verification.)
  1143.  
  1144. C:\Windows\system32\winlogon.exe => File is digitally signed
  1145. C:\Windows\system32\wininit.exe => File is digitally signed
  1146. C:\Windows\explorer.exe => File is digitally signed
  1147. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  1148. C:\Windows\system32\svchost.exe => File is digitally signed
  1149. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  1150. C:\Windows\system32\services.exe => File is digitally signed
  1151. C:\Windows\system32\User32.dll => File is digitally signed
  1152. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  1153. C:\Windows\system32\userinit.exe => File is digitally signed
  1154. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  1155. C:\Windows\system32\rpcss.dll => File is digitally signed
  1156. C:\Windows\system32\dnsapi.dll => File is digitally signed
  1157. C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
  1158. C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
  1159.  
  1160. LastRegBack: 2017-10-08 13:36
  1161.  
  1162. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!