API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 19th, 2017
405
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 55.81 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-12-2017
  2. Ran by jerem (administrator) on DESKTOP-VMS8EOB (20-12-2017 01:54:11)
  3. Running from C:\Users\jerem\OneDrive\Desktop
  4. Loaded Profiles: jerem (Available Profiles: jerem)
  5. Platform: Windows 10 Pro Version 1709 16299.125 (X64) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Edge)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. () C:\Windows\KMS-R@1n.exe
  15. (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
  16. (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
  17. () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeHost.exe
  18. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  19. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  20. (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
  21. (TeamViewer GmbH) C:\Users\jerem\AppData\Roaming\ehome\ehmsas.exe
  22.  
  23. ==================== Registry (Whitelisted) ===========================
  24.  
  25. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  26.  
  27. HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-30] (Microsoft Corporation)
  28. HKU\S-1-5-21-2784150196-3801811697-566216239-1001\...\Run: [ehmsas] => C:\Users\jerem\AppData\Roaming\ehome\ehmsas.exe [7293280 2013-02-19] (TeamViewer GmbH)
  29. IFEO\OSppSvc.exe: [Debugger] KMS-R@1nHook.exe
  30. IFEO\SppExtComObj.exe: [Debugger] KMS-R@1nHook.exe
  31.  
  32. ==================== Internet (Whitelisted) ====================
  33.  
  34. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  35.  
  36. Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
  37. Tcpip\..\Interfaces\{29f1f161-39a4-40f7-b855-8994838d06a1}: [DhcpNameServer] 10.0.0.138
  38.  
  39. Internet Explorer:
  40. ==================
  41.  
  42. ==================== Services (Whitelisted) ====================
  43.  
  44. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  45.  
  46. R2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2017-12-15] () [File not signed]
  47. S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2017-11-27] (Microsoft Corporation)
  48. S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-30] (Microsoft Corporation)
  49. R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-30] (Microsoft Corporation)
  50.  
  51. ===================== Drivers (Whitelisted) ======================
  52.  
  53. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  54.  
  55. S3 smbdirect; C:\Windows\System32\DRIVERS\smbdirect.sys [151552 2017-09-30] (Microsoft Corporation)
  56. S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44608 2017-09-30] (Microsoft Corporation)
  57. R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [309144 2017-09-30] (Microsoft Corporation)
  58. S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119192 2017-09-30] (Microsoft Corporation)
  59.  
  60. ==================== NetSvcs (Whitelisted) ===================
  61.  
  62. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  63.  
  64.  
  65. ==================== One Month Created files and folders ========
  66.  
  67. (If an entry is included in the fixlist, the file/folder will be moved.)
  68.  
  69. 2017-12-20 01:54 - 2017-12-20 01:54 - 000000000 ____D C:\FRST
  70. 2017-12-20 01:44 - 2017-12-04 09:38 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  71. 2017-12-20 01:44 - 2017-12-04 09:38 - 000177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  72. 2017-12-19 00:46 - 2017-12-19 00:46 - 008187336 _____ (Malwarebytes) C:\Users\jerem\Downloads\adwcleaner_7.0.5.0.exe
  73. 2017-12-19 00:41 - 2017-12-19 00:41 - 005198336 _____ (AVAST Software) C:\Users\jerem\Downloads\aswMBR.exe
  74. 2017-12-19 00:40 - 2017-12-19 00:41 - 083316440 _____ (Malwarebytes ) C:\Users\jerem\Downloads\mb3-setup-consumer-3.3.1.2183-1.0.262-1.0.3374.exe
  75. 2017-12-19 00:34 - 2017-12-19 00:34 - 003253162 _____ C:\Users\jerem\Downloads\apitem.exe
  76. 2017-12-19 00:33 - 2017-12-19 00:38 - 000000000 ____D C:\Windows\system32\MRT
  77. 2017-12-19 00:33 - 2017-12-19 00:33 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
  78. 2017-12-19 00:33 - 2017-12-19 00:33 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
  79. 2017-12-19 00:32 - 2017-12-19 00:32 - 000708096 _____ (DoubleGIS Ltd.) C:\Users\jerem\Downloads\MBAM.exe
  80. 2017-12-19 00:28 - 2017-12-08 17:52 - 000666112 _____ (Microsoft Corporation) C:\Windows\system32\DHolographicDisplay.dll
  81. 2017-12-19 00:28 - 2017-12-08 10:34 - 001925296 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
  82. 2017-12-19 00:28 - 2017-12-08 10:34 - 001634288 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
  83. 2017-12-19 00:28 - 2017-12-08 10:31 - 008590744 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  84. 2017-12-19 00:28 - 2017-12-08 10:31 - 000779440 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
  85. 2017-12-19 00:28 - 2017-12-08 10:28 - 000710912 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
  86. 2017-12-19 00:28 - 2017-12-08 10:27 - 003903784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
  87. 2017-12-19 00:28 - 2017-12-08 10:26 - 007385088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
  88. 2017-12-19 00:28 - 2017-12-08 10:26 - 002709200 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  89. 2017-12-19 00:28 - 2017-12-08 10:24 - 000246168 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
  90. 2017-12-19 00:28 - 2017-12-08 10:23 - 005905752 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
  91. 2017-12-19 00:28 - 2017-12-08 10:22 - 000979352 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
  92. 2017-12-19 00:28 - 2017-12-08 10:21 - 007676296 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
  93. 2017-12-19 00:28 - 2017-12-08 10:20 - 001170000 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
  94. 2017-12-19 00:28 - 2017-12-08 10:19 - 021352136 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
  95. 2017-12-19 00:28 - 2017-12-08 10:16 - 001776272 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
  96. 2017-12-19 00:28 - 2017-12-08 10:16 - 000603920 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
  97. 2017-12-19 00:28 - 2017-12-08 10:15 - 001426152 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
  98. 2017-12-19 00:28 - 2017-12-08 10:15 - 000721592 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
  99. 2017-12-19 00:28 - 2017-12-08 10:10 - 000362904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
  100. 2017-12-19 00:28 - 2017-12-08 09:57 - 000649304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
  101. 2017-12-19 00:28 - 2017-12-08 09:56 - 001528904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
  102. 2017-12-19 00:28 - 2017-12-08 09:55 - 001490328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
  103. 2017-12-19 00:28 - 2017-12-08 09:39 - 006092664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
  104. 2017-12-19 00:28 - 2017-12-08 09:34 - 003484840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
  105. 2017-12-19 00:28 - 2017-12-08 09:32 - 020286120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
  106. 2017-12-19 00:28 - 2017-12-08 09:31 - 001522176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
  107. 2017-12-19 00:28 - 2017-12-08 09:31 - 001246432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
  108. 2017-12-19 00:28 - 2017-12-08 09:31 - 000982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
  109. 2017-12-19 00:28 - 2017-12-08 09:29 - 000047000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KeyboardFilterShim.dll
  110. 2017-12-19 00:28 - 2017-12-08 09:23 - 006478528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
  111. 2017-12-19 00:28 - 2017-12-08 09:22 - 025245696 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
  112. 2017-12-19 00:28 - 2017-12-08 09:13 - 002905600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
  113. 2017-12-19 00:28 - 2017-12-08 09:13 - 001008640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallService.dll
  114. 2017-12-19 00:28 - 2017-12-08 09:11 - 003669504 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
  115. 2017-12-19 00:28 - 2017-12-08 09:10 - 018916352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
  116. 2017-12-19 00:28 - 2017-12-08 09:10 - 006466048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
  117. 2017-12-19 00:28 - 2017-12-08 09:10 - 001313792 _____ (Microsoft Corporation) C:\Windows\system32\InstallService.dll
  118. 2017-12-19 00:28 - 2017-12-08 09:10 - 000536064 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
  119. 2017-12-19 00:28 - 2017-12-08 09:10 - 000250368 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
  120. 2017-12-19 00:28 - 2017-12-08 09:08 - 019336192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  121. 2017-12-19 00:28 - 2017-12-08 09:06 - 023652864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  122. 2017-12-19 00:28 - 2017-12-08 09:06 - 000174080 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcui.dll
  123. 2017-12-19 00:28 - 2017-12-08 09:05 - 006037504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
  124. 2017-12-19 00:28 - 2017-12-08 09:05 - 000664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  125. 2017-12-19 00:28 - 2017-12-08 09:05 - 000539136 _____ (Microsoft Corporation) C:\Windows\system32\HolographicExtensions.dll
  126. 2017-12-19 00:28 - 2017-12-08 09:05 - 000463360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  127. 2017-12-19 00:28 - 2017-12-08 09:05 - 000334848 _____ (Microsoft Corporation) C:\Windows\system32\dusmsvc.dll
  128. 2017-12-19 00:28 - 2017-12-08 09:04 - 003678208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  129. 2017-12-19 00:28 - 2017-12-08 09:04 - 001498112 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
  130. 2017-12-19 00:28 - 2017-12-08 09:04 - 001321472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
  131. 2017-12-19 00:28 - 2017-12-08 09:03 - 002467840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
  132. 2017-12-19 00:28 - 2017-12-08 09:03 - 001559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  133. 2017-12-19 00:28 - 2017-12-08 09:03 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  134. 2017-12-19 00:28 - 2017-12-08 09:02 - 007545344 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
  135. 2017-12-19 00:28 - 2017-12-08 09:02 - 002117632 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
  136. 2017-12-19 00:28 - 2017-12-08 09:02 - 000813056 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
  137. 2017-12-19 00:28 - 2017-12-08 09:01 - 008097280 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
  138. 2017-12-19 00:28 - 2017-12-08 09:01 - 004592640 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
  139. 2017-12-19 00:28 - 2017-12-08 09:00 - 004740608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  140. 2017-12-19 00:28 - 2017-12-08 09:00 - 002862080 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
  141. 2017-12-19 00:28 - 2017-12-08 09:00 - 001509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
  142. 2017-12-19 00:28 - 2017-12-08 08:59 - 003121664 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
  143. 2017-12-19 00:28 - 2017-12-08 08:59 - 002105856 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
  144. 2017-12-19 00:28 - 2017-12-08 08:59 - 001666048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
  145. 2017-12-19 00:28 - 2017-12-08 08:59 - 001058304 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
  146. 2017-12-19 00:28 - 2017-12-08 08:58 - 003211776 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
  147. 2017-12-19 00:28 - 2017-12-08 08:58 - 000812032 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  148. 2017-12-19 00:28 - 2017-12-08 08:57 - 001822208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  149. 2017-12-19 00:28 - 2017-12-08 08:57 - 001487872 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
  150. 2017-12-19 00:28 - 2017-12-08 08:56 - 001739264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
  151. 2017-12-19 00:28 - 2017-12-08 08:56 - 000685056 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
  152. 2017-12-19 00:28 - 2017-12-08 08:54 - 002510336 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
  153. 2017-12-19 00:28 - 2017-11-27 07:35 - 017084416 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
  154. 2017-12-19 00:28 - 2017-11-27 07:32 - 021754368 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
  155. 2017-12-19 00:28 - 2017-11-27 07:15 - 000882688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Mirage.Internal.dll
  156. 2017-12-19 00:28 - 2017-11-27 00:45 - 001642520 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
  157. 2017-12-19 00:28 - 2017-11-27 00:45 - 000319352 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
  158. 2017-12-19 00:28 - 2017-11-27 00:38 - 001636376 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
  159. 2017-12-19 00:28 - 2017-11-27 00:37 - 001277848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
  160. 2017-12-19 00:28 - 2017-11-27 00:35 - 001090440 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
  161. 2017-12-19 00:28 - 2017-11-27 00:35 - 000924136 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
  162. 2017-12-19 00:28 - 2017-11-27 00:33 - 002395032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
  163. 2017-12-19 00:28 - 2017-11-27 00:33 - 001208184 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
  164. 2017-12-19 00:28 - 2017-11-27 00:30 - 001488792 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
  165. 2017-12-19 00:28 - 2017-11-27 00:29 - 003010720 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
  166. 2017-12-19 00:28 - 2017-11-27 00:29 - 002573208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
  167. 2017-12-19 00:28 - 2017-11-27 00:29 - 000840440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Perception.Stub.dll
  168. 2017-12-19 00:28 - 2017-11-27 00:29 - 000703536 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
  169. 2017-12-19 00:28 - 2017-11-27 00:29 - 000436120 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
  170. 2017-12-19 00:28 - 2017-11-27 00:28 - 001259344 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
  171. 2017-12-19 00:28 - 2017-11-27 00:28 - 001012120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Services.TargetedContent.dll
  172. 2017-12-19 00:28 - 2017-11-27 00:28 - 000495000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
  173. 2017-12-19 00:28 - 2017-11-27 00:27 - 002446744 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
  174. 2017-12-19 00:28 - 2017-11-27 00:27 - 002412168 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
  175. 2017-12-19 00:28 - 2017-11-27 00:27 - 001413760 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
  176. 2017-12-19 00:28 - 2017-11-27 00:27 - 000230296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
  177. 2017-12-19 00:28 - 2017-11-27 00:26 - 000428952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
  178. 2017-12-19 00:28 - 2017-11-27 00:25 - 000902416 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
  179. 2017-12-19 00:28 - 2017-11-27 00:23 - 001694224 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
  180. 2017-12-19 00:28 - 2017-11-27 00:23 - 001054280 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
  181. 2017-12-19 00:28 - 2017-11-27 00:23 - 000754688 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
  182. 2017-12-19 00:28 - 2017-11-27 00:21 - 002220952 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
  183. 2017-12-19 00:28 - 2017-11-27 00:21 - 001778584 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
  184. 2017-12-19 00:28 - 2017-11-27 00:21 - 001628056 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
  185. 2017-12-19 00:28 - 2017-11-27 00:21 - 001585376 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
  186. 2017-12-19 00:28 - 2017-11-27 00:21 - 001420696 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
  187. 2017-12-19 00:28 - 2017-11-27 00:21 - 000831384 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
  188. 2017-12-19 00:28 - 2017-11-27 00:21 - 000819096 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
  189. 2017-12-19 00:28 - 2017-11-27 00:21 - 000813976 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
  190. 2017-12-19 00:28 - 2017-11-27 00:21 - 000744856 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
  191. 2017-12-19 00:28 - 2017-11-27 00:21 - 000669592 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
  192. 2017-12-19 00:28 - 2017-11-27 00:21 - 000645528 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
  193. 2017-12-19 00:28 - 2017-11-27 00:20 - 000615768 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
  194. 2017-12-19 00:28 - 2017-11-27 00:20 - 000519152 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
  195. 2017-12-19 00:28 - 2017-11-26 23:55 - 001289216 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
  196. 2017-12-19 00:28 - 2017-11-26 23:55 - 000329728 _____ (Microsoft Corporation) C:\Windows\system32\AcGenral.dll
  197. 2017-12-19 00:28 - 2017-11-26 23:55 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\AcLayers.dll
  198. 2017-12-19 00:28 - 2017-11-26 23:48 - 012829696 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  199. 2017-12-19 00:28 - 2017-11-26 23:26 - 000830464 _____ (Microsoft Corporation) C:\Windows\system32\d3d9on12.dll
  200. 2017-12-19 00:28 - 2017-11-26 23:26 - 000432640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
  201. 2017-12-19 00:28 - 2017-11-26 23:25 - 000516096 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
  202. 2017-12-19 00:28 - 2017-11-26 23:25 - 000292864 _____ (Microsoft Corporation) C:\Windows\system32\ExecModelClient.dll
  203. 2017-12-19 00:28 - 2017-11-26 23:19 - 001167360 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
  204. 2017-12-19 00:28 - 2017-11-26 23:18 - 003186688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
  205. 2017-12-19 00:28 - 2017-11-26 23:18 - 001424896 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
  206. 2017-12-19 00:28 - 2017-11-26 23:18 - 000556544 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
  207. 2017-12-19 00:28 - 2017-11-26 23:17 - 003334144 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  208. 2017-12-19 00:28 - 2017-11-26 23:17 - 002208768 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
  209. 2017-12-19 00:28 - 2017-11-26 23:17 - 001054720 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
  210. 2017-12-19 00:28 - 2017-11-26 23:08 - 017159680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
  211. 2017-12-19 00:28 - 2017-11-26 23:05 - 000462336 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
  212. 2017-12-19 00:28 - 2017-11-26 23:04 - 003578368 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
  213. 2017-12-19 00:28 - 2017-11-26 23:04 - 002596352 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
  214. 2017-12-19 00:28 - 2017-11-26 23:03 - 004772352 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
  215. 2017-12-19 00:28 - 2017-11-26 23:03 - 002783744 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
  216. 2017-12-19 00:28 - 2017-11-26 23:01 - 003163648 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
  217. 2017-12-19 00:28 - 2017-11-26 23:00 - 000899584 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
  218. 2017-12-19 00:28 - 2017-11-26 22:59 - 004814848 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
  219. 2017-12-19 00:28 - 2017-11-26 22:21 - 001474680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
  220. 2017-12-19 00:28 - 2017-11-26 22:21 - 001432816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
  221. 2017-12-19 00:28 - 2017-11-26 22:02 - 001124760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContentDeliveryManager.Utilities.dll
  222. 2017-12-19 00:28 - 2017-11-26 22:01 - 002339296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
  223. 2017-12-19 00:28 - 2017-11-26 22:01 - 000590944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
  224. 2017-12-19 00:28 - 2017-11-26 22:01 - 000506256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Perception.Stub.dll
  225. 2017-12-19 00:28 - 2017-11-26 22:01 - 000354200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
  226. 2017-12-19 00:28 - 2017-11-26 22:00 - 001990160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
  227. 2017-12-19 00:28 - 2017-11-26 21:59 - 000703568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
  228. 2017-12-19 00:28 - 2017-11-26 21:58 - 001148216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
  229. 2017-12-19 00:28 - 2017-11-26 21:58 - 001057824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
  230. 2017-12-19 00:28 - 2017-11-26 21:57 - 001490840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
  231. 2017-12-19 00:28 - 2017-11-26 21:51 - 001558856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
  232. 2017-12-19 00:28 - 2017-11-26 21:41 - 002393600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcGenral.dll
  233. 2017-12-19 00:28 - 2017-11-26 21:36 - 013703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
  234. 2017-12-19 00:28 - 2017-11-26 21:32 - 011923456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  235. 2017-12-19 00:28 - 2017-11-26 21:31 - 000456704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
  236. 2017-12-19 00:28 - 2017-11-26 21:30 - 004385280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
  237. 2017-12-19 00:28 - 2017-11-26 21:30 - 002859520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
  238. 2017-12-19 00:28 - 2017-11-26 21:29 - 002869760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  239. 2017-12-19 00:28 - 2017-11-26 21:29 - 000823808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
  240. 2017-12-19 00:28 - 2017-11-26 21:28 - 004249600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
  241. 2017-12-19 00:28 - 2017-11-26 21:24 - 000614912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
  242. 2017-12-19 00:28 - 2017-11-19 18:35 - 003331520 _____ C:\Windows\system32\Windows.Mirage.dll
  243. 2017-12-19 00:28 - 2017-11-19 13:20 - 002491112 _____ C:\Windows\SysWOW64\Windows.Mirage.dll
  244. 2017-12-19 00:28 - 2017-10-25 20:11 - 000336896 _____ (Microsoft Corporation) C:\Windows\system32\HolographicRuntimes.dll
  245. 2017-12-19 00:28 - 2017-10-25 19:57 - 000956416 _____ (Microsoft Corporation) C:\Windows\system32\Spectrum.exe
  246. 2017-12-19 00:28 - 2017-10-25 15:41 - 000362176 _____ (Microsoft Corporation) C:\Windows\system32\BioIso.exe
  247. 2017-12-19 00:28 - 2017-10-25 15:40 - 000612760 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  248. 2017-12-19 00:28 - 2017-10-25 15:39 - 007831248 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
  249. 2017-12-19 00:28 - 2017-10-25 15:39 - 000479912 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
  250. 2017-12-19 00:28 - 2017-10-25 15:37 - 000610712 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
  251. 2017-12-19 00:28 - 2017-10-25 15:32 - 000559512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
  252. 2017-12-19 00:28 - 2017-10-25 15:30 - 004487968 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
  253. 2017-12-19 00:28 - 2017-10-25 15:30 - 000555416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
  254. 2017-12-19 00:28 - 2017-10-25 15:29 - 002269080 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
  255. 2017-12-19 00:28 - 2017-10-25 15:29 - 001507736 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
  256. 2017-12-19 00:28 - 2017-10-25 15:27 - 006791472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
  257. 2017-12-19 00:28 - 2017-10-25 15:27 - 001970520 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
  258. 2017-12-19 00:28 - 2017-10-25 15:20 - 002717392 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
  259. 2017-12-19 00:28 - 2017-10-25 14:30 - 005615968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
  260. 2017-12-19 00:28 - 2017-10-25 14:28 - 004648528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
  261. 2017-12-19 00:28 - 2017-10-25 14:27 - 001454568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
  262. 2017-12-19 00:28 - 2017-10-25 14:27 - 001377080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
  263. 2017-12-19 00:28 - 2017-10-25 14:22 - 006015200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
  264. 2017-12-19 00:28 - 2017-10-25 14:22 - 002465848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
  265. 2017-12-19 00:28 - 2017-10-25 14:18 - 000975872 _____ C:\Windows\system32\FaceProcessor.dll
  266. 2017-12-19 00:28 - 2017-10-25 14:18 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
  267. 2017-12-19 00:28 - 2017-10-25 14:16 - 000227328 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManager.dll
  268. 2017-12-19 00:28 - 2017-10-25 14:16 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmCx.sys
  269. 2017-12-19 00:28 - 2017-10-25 14:13 - 013655552 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
  270. 2017-12-19 00:28 - 2017-10-25 14:13 - 002972672 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
  271. 2017-12-19 00:28 - 2017-10-25 14:11 - 000768512 _____ (Microsoft Corporation) C:\Windows\system32\PCPKsp.dll
  272. 2017-12-19 00:28 - 2017-10-25 14:09 - 001806336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
  273. 2017-12-19 00:28 - 2017-10-25 14:08 - 002633216 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
  274. 2017-12-19 00:28 - 2017-10-25 14:08 - 000654848 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
  275. 2017-12-19 00:28 - 2017-10-25 14:01 - 012687360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
  276. 2017-12-19 00:28 - 2017-10-25 13:58 - 001280000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
  277. 2017-12-19 00:28 - 2017-10-20 16:08 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
  278. 2017-12-19 00:27 - 2017-12-08 10:34 - 000059800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bam.sys
  279. 2017-12-19 00:27 - 2017-12-08 10:30 - 000166296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
  280. 2017-12-19 00:27 - 2017-12-08 10:28 - 000630752 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
  281. 2017-12-19 00:27 - 2017-12-08 10:27 - 004504456 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
  282. 2017-12-19 00:27 - 2017-12-08 10:27 - 000184984 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  283. 2017-12-19 00:27 - 2017-12-08 10:26 - 000525208 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
  284. 2017-12-19 00:27 - 2017-12-08 10:25 - 000374032 _____ (Microsoft Corporation) C:\Windows\system32\vac.exe
  285. 2017-12-19 00:27 - 2017-12-08 10:24 - 000705944 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
  286. 2017-12-19 00:27 - 2017-12-08 10:24 - 000437144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
  287. 2017-12-19 00:27 - 2017-12-08 10:23 - 000677272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
  288. 2017-12-19 00:27 - 2017-12-08 10:22 - 001003104 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
  289. 2017-12-19 00:27 - 2017-12-08 10:22 - 000137544 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
  290. 2017-12-19 00:27 - 2017-12-08 10:22 - 000129432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvsocket.sys
  291. 2017-12-19 00:27 - 2017-12-08 10:14 - 000571288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
  292. 2017-12-19 00:27 - 2017-12-08 10:12 - 000401304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
  293. 2017-12-19 00:27 - 2017-12-08 09:58 - 000123512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  294. 2017-12-19 00:27 - 2017-12-08 09:55 - 000097144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
  295. 2017-12-19 00:27 - 2017-12-08 09:37 - 001145104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
  296. 2017-12-19 00:27 - 2017-12-08 09:36 - 000769096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
  297. 2017-12-19 00:27 - 2017-12-08 09:34 - 002192112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  298. 2017-12-19 00:27 - 2017-12-08 09:33 - 000747416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
  299. 2017-12-19 00:27 - 2017-12-08 09:33 - 000592280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
  300. 2017-12-19 00:27 - 2017-12-08 09:12 - 000344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
  301. 2017-12-19 00:27 - 2017-12-08 09:12 - 000202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
  302. 2017-12-19 00:27 - 2017-12-08 09:12 - 000101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscript.ocx
  303. 2017-12-19 00:27 - 2017-12-08 09:10 - 000150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
  304. 2017-12-19 00:27 - 2017-12-08 09:10 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
  305. 2017-12-19 00:27 - 2017-12-08 09:10 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
  306. 2017-12-19 00:27 - 2017-12-08 09:09 - 001663488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\batmeter.dll
  307. 2017-12-19 00:27 - 2017-12-08 09:09 - 000235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
  308. 2017-12-19 00:27 - 2017-12-08 09:09 - 000147456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
  309. 2017-12-19 00:27 - 2017-12-08 09:09 - 000143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
  310. 2017-12-19 00:27 - 2017-12-08 09:09 - 000136704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gamingtcui.dll
  311. 2017-12-19 00:27 - 2017-12-08 09:08 - 000514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
  312. 2017-12-19 00:27 - 2017-12-08 09:08 - 000450048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TileDataRepository.dll
  313. 2017-12-19 00:27 - 2017-12-08 09:08 - 000369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
  314. 2017-12-19 00:27 - 2017-12-08 09:08 - 000206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
  315. 2017-12-19 00:27 - 2017-12-08 09:08 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
  316. 2017-12-19 00:27 - 2017-12-08 09:07 - 000365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
  317. 2017-12-19 00:27 - 2017-12-08 09:07 - 000254976 _____ (Microsoft Corporation) C:\Windows\system32\PushToInstall.dll
  318. 2017-12-19 00:27 - 2017-12-08 09:07 - 000246272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
  319. 2017-12-19 00:27 - 2017-12-08 09:07 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netvsc.sys
  320. 2017-12-19 00:27 - 2017-12-08 09:07 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
  321. 2017-12-19 00:27 - 2017-12-08 09:07 - 000164864 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
  322. 2017-12-19 00:27 - 2017-12-08 09:07 - 000140800 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
  323. 2017-12-19 00:27 - 2017-12-08 09:06 - 000676352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
  324. 2017-12-19 00:27 - 2017-12-08 09:06 - 000559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  325. 2017-12-19 00:27 - 2017-12-08 09:06 - 000164864 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
  326. 2017-12-19 00:27 - 2017-12-08 09:05 - 001670656 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
  327. 2017-12-19 00:27 - 2017-12-08 09:05 - 000559616 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
  328. 2017-12-19 00:27 - 2017-12-08 09:05 - 000481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
  329. 2017-12-19 00:27 - 2017-12-08 09:05 - 000431616 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
  330. 2017-12-19 00:27 - 2017-12-08 09:05 - 000363008 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll
  331. 2017-12-19 00:27 - 2017-12-08 09:05 - 000306688 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
  332. 2017-12-19 00:27 - 2017-12-08 09:05 - 000222208 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
  333. 2017-12-19 00:27 - 2017-12-08 09:05 - 000164864 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
  334. 2017-12-19 00:27 - 2017-12-08 09:05 - 000019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slcext.dll
  335. 2017-12-19 00:27 - 2017-12-08 09:04 - 000568832 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
  336. 2017-12-19 00:27 - 2017-12-08 09:03 - 001230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
  337. 2017-12-19 00:27 - 2017-12-08 09:03 - 000841728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
  338. 2017-12-19 00:27 - 2017-12-08 09:03 - 000708096 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
  339. 2017-12-19 00:27 - 2017-12-08 09:03 - 000708096 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  340. 2017-12-19 00:27 - 2017-12-08 09:03 - 000403968 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
  341. 2017-12-19 00:27 - 2017-12-08 09:03 - 000308736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
  342. 2017-12-19 00:27 - 2017-12-08 09:03 - 000085504 _____ (Microsoft Corporation) C:\Windows\system32\hascsp.dll
  343. 2017-12-19 00:27 - 2017-12-08 09:02 - 002864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
  344. 2017-12-19 00:27 - 2017-12-08 09:02 - 000815616 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
  345. 2017-12-19 00:27 - 2017-12-08 09:02 - 000496640 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
  346. 2017-12-19 00:27 - 2017-12-08 09:01 - 001980928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
  347. 2017-12-19 00:27 - 2017-12-08 09:01 - 000601088 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
  348. 2017-12-19 00:27 - 2017-12-08 09:01 - 000021504 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
  349. 2017-12-19 00:27 - 2017-12-08 08:59 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
  350. 2017-12-19 00:27 - 2017-12-08 08:58 - 003478016 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
  351. 2017-12-19 00:27 - 2017-12-08 08:58 - 001547264 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  352. 2017-12-19 00:27 - 2017-12-08 08:58 - 001353728 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
  353. 2017-12-19 00:27 - 2017-12-08 08:56 - 002666496 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
  354. 2017-12-19 00:27 - 2017-12-08 08:54 - 001570816 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
  355. 2017-12-19 00:27 - 2017-12-08 08:54 - 001160704 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
  356. 2017-12-19 00:27 - 2017-11-27 03:43 - 000618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
  357. 2017-12-19 00:27 - 2017-11-27 00:48 - 001200536 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
  358. 2017-12-19 00:27 - 2017-11-27 00:47 - 001053592 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
  359. 2017-12-19 00:27 - 2017-11-27 00:45 - 000264040 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
  360. 2017-12-19 00:27 - 2017-11-27 00:45 - 000198888 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
  361. 2017-12-19 00:27 - 2017-11-27 00:41 - 000285080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
  362. 2017-12-19 00:27 - 2017-11-27 00:33 - 000471960 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
  363. 2017-12-19 00:27 - 2017-11-27 00:33 - 000398744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
  364. 2017-12-19 00:27 - 2017-11-27 00:32 - 000373656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
  365. 2017-12-19 00:27 - 2017-11-27 00:32 - 000082840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
  366. 2017-12-19 00:27 - 2017-11-27 00:31 - 000187288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
  367. 2017-12-19 00:27 - 2017-11-27 00:29 - 000891800 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
  368. 2017-12-19 00:27 - 2017-11-27 00:29 - 000749976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
  369. 2017-12-19 00:27 - 2017-11-27 00:28 - 000713624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
  370. 2017-12-19 00:27 - 2017-11-27 00:28 - 000149400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
  371. 2017-12-19 00:27 - 2017-11-27 00:27 - 000464408 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
  372. 2017-12-19 00:27 - 2017-11-27 00:26 - 000048112 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
  373. 2017-12-19 00:27 - 2017-11-27 00:22 - 000404888 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
  374. 2017-12-19 00:27 - 2017-11-27 00:21 - 000654048 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
  375. 2017-12-19 00:27 - 2017-11-26 23:57 - 001664000 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
  376. 2017-12-19 00:27 - 2017-11-26 23:55 - 000211456 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
  377. 2017-12-19 00:27 - 2017-11-26 23:55 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
  378. 2017-12-19 00:27 - 2017-11-26 23:55 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\DeviceUpdateAgent.dll
  379. 2017-12-19 00:27 - 2017-11-26 23:54 - 000327680 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
  380. 2017-12-19 00:27 - 2017-11-26 23:54 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
  381. 2017-12-19 00:27 - 2017-11-26 23:47 - 002890240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
  382. 2017-12-19 00:27 - 2017-11-26 23:43 - 000239104 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll
  383. 2017-12-19 00:27 - 2017-11-26 23:36 - 000204288 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
  384. 2017-12-19 00:27 - 2017-11-26 23:36 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
  385. 2017-12-19 00:27 - 2017-11-26 23:36 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SIUF.dll
  386. 2017-12-19 00:27 - 2017-11-26 23:36 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys
  387. 2017-12-19 00:27 - 2017-11-26 23:35 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_ContentDeliveryManager.dll
  388. 2017-12-19 00:27 - 2017-11-26 23:35 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
  389. 2017-12-19 00:27 - 2017-11-26 23:34 - 000126464 _____ (Microsoft Corporation) C:\Windows\system32\cryptcatsvc.dll
  390. 2017-12-19 00:27 - 2017-11-26 23:33 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\SpatializerApo.dll
  391. 2017-12-19 00:27 - 2017-11-26 23:31 - 001495040 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
  392. 2017-12-19 00:27 - 2017-11-26 23:31 - 000529408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
  393. 2017-12-19 00:27 - 2017-11-26 23:31 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
  394. 2017-12-19 00:27 - 2017-11-26 23:31 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
  395. 2017-12-19 00:27 - 2017-11-26 23:29 - 000474112 _____ (Microsoft Corporation) C:\Windows\system32\DictationManager.dll
  396. 2017-12-19 00:27 - 2017-11-26 23:29 - 000432640 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
  397. 2017-12-19 00:27 - 2017-11-26 23:29 - 000424960 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
  398. 2017-12-19 00:27 - 2017-11-26 23:29 - 000238080 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupManager.dll
  399. 2017-12-19 00:27 - 2017-11-26 23:28 - 000394752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
  400. 2017-12-19 00:27 - 2017-11-26 23:26 - 000770048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
  401. 2017-12-19 00:27 - 2017-11-26 23:25 - 001425408 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
  402. 2017-12-19 00:27 - 2017-11-26 23:25 - 000354304 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
  403. 2017-12-19 00:27 - 2017-11-26 23:25 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\SIHClient.exe
  404. 2017-12-19 00:27 - 2017-11-26 23:23 - 000588288 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
  405. 2017-12-19 00:27 - 2017-11-26 23:22 - 000720896 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
  406. 2017-12-19 00:27 - 2017-11-26 23:19 - 000887296 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
  407. 2017-12-19 00:27 - 2017-11-26 23:19 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\aadjcsp.dll
  408. 2017-12-19 00:27 - 2017-11-26 22:59 - 000726016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
  409. 2017-12-19 00:27 - 2017-11-26 22:59 - 000259072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
  410. 2017-12-19 00:27 - 2017-11-26 22:58 - 000151040 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
  411. 2017-12-19 00:27 - 2017-11-26 22:48 - 000534528 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
  412. 2017-12-19 00:27 - 2017-11-26 22:48 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
  413. 2017-12-19 00:27 - 2017-11-26 22:01 - 000791960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
  414. 2017-12-19 00:27 - 2017-11-26 22:01 - 000746904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Services.TargetedContent.dll
  415. 2017-12-19 00:27 - 2017-11-26 22:00 - 000353848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
  416. 2017-12-19 00:27 - 2017-11-26 21:51 - 000661664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
  417. 2017-12-19 00:27 - 2017-11-26 21:41 - 001470976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
  418. 2017-12-19 00:27 - 2017-11-26 21:41 - 000372224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcLayers.dll
  419. 2017-12-19 00:27 - 2017-11-26 21:41 - 000133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
  420. 2017-12-19 00:27 - 2017-11-26 21:41 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
  421. 2017-12-19 00:27 - 2017-11-26 21:40 - 000160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll
  422. 2017-12-19 00:27 - 2017-11-26 21:38 - 000271872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SpatializerApo.dll
  423. 2017-12-19 00:27 - 2017-11-26 21:37 - 000098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
  424. 2017-12-19 00:27 - 2017-11-26 21:36 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
  425. 2017-12-19 00:27 - 2017-11-26 21:36 - 000351232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DictationManager.dll
  426. 2017-12-19 00:27 - 2017-11-26 21:36 - 000315392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
  427. 2017-12-19 00:27 - 2017-11-26 21:35 - 000557056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9on12.dll
  428. 2017-12-19 00:27 - 2017-11-26 21:35 - 000293888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
  429. 2017-12-19 00:27 - 2017-11-26 21:35 - 000261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
  430. 2017-12-19 00:27 - 2017-11-26 21:35 - 000242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExecModelClient.dll
  431. 2017-12-19 00:27 - 2017-11-26 21:31 - 000660480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
  432. 2017-12-19 00:27 - 2017-11-26 21:24 - 000068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll
  433. 2017-12-19 00:27 - 2017-10-25 15:40 - 000269696 _____ C:\Windows\system32\FaceProcessorCore.dll
  434. 2017-12-19 00:27 - 2017-10-25 15:37 - 001954048 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  435. 2017-12-19 00:27 - 2017-10-25 15:32 - 000147864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
  436. 2017-12-19 00:27 - 2017-10-25 15:31 - 000045464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storufs.sys
  437. 2017-12-19 00:27 - 2017-10-25 14:52 - 001615720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
  438. 2017-12-19 00:27 - 2017-10-25 14:27 - 001015008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
  439. 2017-12-19 00:27 - 2017-10-25 14:19 - 000097792 _____ C:\Windows\system32\runexehelper.exe
  440. 2017-12-19 00:27 - 2017-10-25 14:18 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManagerClient.dll
  441. 2017-12-19 00:27 - 2017-10-25 14:18 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\AcSpecfc.dll
  442. 2017-12-19 00:27 - 2017-10-25 14:14 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\rdrleakdiag.exe
  443. 2017-12-19 00:27 - 2017-10-25 14:08 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcSpecfc.dll
  444. 2017-12-19 00:27 - 2017-10-25 14:07 - 000064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CapabilityAccessManagerClient.dll
  445. 2017-12-19 00:27 - 2017-10-25 14:05 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\msdtcVSp1res.dll
  446. 2017-12-19 00:27 - 2017-10-25 14:04 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
  447. 2017-12-19 00:27 - 2017-10-25 14:04 - 000041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdrleakdiag.exe
  448. 2017-12-19 00:27 - 2017-10-25 14:02 - 000591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll
  449. 2017-12-19 00:27 - 2017-10-25 13:54 - 000022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcVSp1res.dll
  450. 2017-12-16 16:42 - 2017-12-16 16:42 - 000000000 _SHDL C:\Documents and Settings
  451. 2017-12-16 16:37 - 2017-12-20 01:44 - 000221968 _____ C:\Windows\system32\FNTCACHE.DAT
  452. 2017-12-16 16:37 - 2017-12-20 01:44 - 000000006 ____H C:\Windows\Tasks\SA.DAT
  453. 2017-12-16 16:37 - 2017-12-20 01:41 - 000000000 ____D C:\Windows\system32\SleepStudy
  454. 2017-12-16 16:37 - 2017-12-16 16:37 - 000000000 ____D C:\Windows\ServiceProfiles
  455. 2017-12-16 16:36 - 2017-12-16 16:41 - 000000000 ____D C:\Windows\Panther
  456. 2017-12-16 16:35 - 2017-12-16 16:35 - 000000000 ____D C:\Users\Public\Desktop\Aktivator!!!
  457. 2017-12-16 16:35 - 2017-06-15 20:17 - 000000114 ____R C:\Users\Public\Desktop\for Bitcoin users.txt
  458. 2017-12-16 16:35 - 2017-04-08 21:00 - 000000422 ____R C:\Users\Public\Desktop\Get my all downloads from here.txt
  459. 2017-12-16 16:35 - 2017-02-23 19:15 - 000000075 ____R C:\Users\Public\Desktop\Torrent downlaod from teamos-hkrg.com.txt
  460. 2017-12-16 16:35 - 2016-04-15 02:50 - 000000320 ____R C:\Users\Public\Desktop\TEAM OS.url
  461. 2017-12-15 23:58 - 2017-12-15 23:58 - 000000000 ____D C:\Users\jerem\Downloads\Informacao_Fgts
  462. 2017-12-15 23:58 - 2017-12-15 23:58 - 000000000 ____D C:\Users\jerem\AppData\Local\yops6491
  463. 2017-12-15 23:57 - 2017-12-15 23:57 - 000000000 ____D C:\Users\jerem\Downloads\Facebook_Video_Mensagem_192827178291
  464. 2017-12-15 23:57 - 2017-12-15 23:57 - 000000000 ____D C:\Users\jerem\AppData\Roaming\Lz3MFzL1
  465. 2017-12-15 23:57 - 2017-12-15 23:57 - 000000000 ____D C:\Users\jerem\AppData\Roaming\iss
  466. 2017-12-15 23:56 - 2017-12-15 23:56 - 000625843 _____ C:\Users\jerem\Downloads\Informacao_Fgts.zip
  467. 2017-12-15 23:56 - 2017-12-15 23:56 - 000104796 _____ C:\Users\jerem\Downloads\Facebook_Video_Mensagem_192827178291.zip
  468. 2017-12-15 23:51 - 2017-12-15 23:49 - 000545440 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
  469. 2017-12-15 23:22 - 2017-12-19 00:17 - 000000000 ____D C:\Users\jerem\Downloads\whatami
  470. 2017-12-15 23:22 - 2017-12-15 23:22 - 000008652 _____ C:\Users\jerem\Downloads\whatami.zip
  471. 2017-12-15 23:17 - 2017-12-15 23:17 - 000000000 ____D C:\Users\jerem\Downloads\bx89.exe
  472. 2017-12-15 23:16 - 2017-12-15 23:16 - 000000000 ____D C:\Users\jerem\Downloads\ytisf-theZoo-v0.60-103-gd6460f2
  473. 2017-12-15 23:16 - 2017-12-15 23:16 - 000000000 ____D C:\Users\jerem\Downloads\Google_Adobe_FlashPlayer.exe
  474. 2017-12-15 23:16 - 2017-12-15 23:16 - 000000000 ____D C:\Users\jerem\Downloads\DDE_Office_Samp
  475. 2017-12-15 23:15 - 2017-12-15 23:15 - 002970592 _____ C:\Users\jerem\Downloads\DDE_Office_Samp.zip
  476. 2017-12-15 23:11 - 2017-12-15 23:11 - 000228547 _____ C:\Users\jerem\Downloads\bx89.exe.zip
  477. 2017-12-15 23:11 - 2017-12-15 23:11 - 000004627 _____ C:\Users\jerem\Downloads\Google_Adobe_FlashPlayer.exe.zip
  478. 2017-12-15 23:09 - 2017-12-15 23:12 - 408939307 _____ C:\Users\jerem\Downloads\ytisf-theZoo-v0.60-103-gd6460f2.zip
  479. 2017-12-15 23:07 - 2017-12-15 23:07 - 000000000 ____D C:\Users\jerem\AppData\Local\DBG
  480. 2017-12-15 22:05 - 2017-12-15 22:17 - 000000000 ____D C:\Users\jerem\AppData\Local\PlaceholderTileLogoFolder
  481. 2017-12-15 22:03 - 2017-12-15 23:26 - 000000000 ____D C:\Users\jerem\AppData\Local\Comms
  482. 2017-12-15 21:52 - 2017-12-15 21:52 - 000000000 ___HD C:\OneDriveTemp
  483. 2017-12-15 21:51 - 2017-12-15 21:51 - 000003376 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2784150196-3801811697-566216239-1001
  484. 2017-12-15 21:49 - 2017-12-20 01:46 - 000000000 ___RD C:\Users\jerem\OneDrive
  485. 2017-12-15 21:49 - 2017-12-15 21:51 - 000002363 _____ C:\Users\jerem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
  486. 2017-12-15 21:48 - 2017-12-15 21:48 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
  487. 2017-12-15 21:47 - 2017-12-20 01:46 - 000000000 __RHD C:\Users\Public\AccountPictures
  488. 2017-12-15 21:47 - 2017-12-20 01:46 - 000000000 ___RD C:\Users\jerem\3D Objects
  489. 2017-12-15 21:47 - 2017-12-15 22:30 - 000000000 ____D C:\Users\jerem\AppData\Local\Packages
  490. 2017-12-15 21:47 - 2017-12-15 22:14 - 000000000 ____D C:\Users\jerem\AppData\Local\Publishers
  491. 2017-12-15 21:47 - 2017-12-15 21:48 - 000000000 ____D C:\Users\jerem\AppData\Local\ConnectedDevicesPlatform
  492. 2017-12-15 21:47 - 2017-12-15 21:47 - 000000000 ___HD C:\Users\jerem\MicrosoftEdgeBackups
  493. 2017-12-15 21:47 - 2017-12-15 21:47 - 000000000 ____D C:\Users\jerem\AppData\Roaming\Adobe
  494. 2017-12-15 21:47 - 2017-12-15 21:47 - 000000000 ____D C:\Users\jerem\AppData\Local\VirtualStore
  495. 2017-12-15 21:47 - 2017-12-15 21:47 - 000000000 ____D C:\Users\jerem\AppData\Local\MicrosoftEdge
  496. 2017-12-15 21:46 - 2017-12-20 01:52 - 000924438 _____ C:\Windows\system32\PerfStringBackup.INI
  497. 2017-12-15 21:45 - 2017-12-20 01:44 - 000000000 ____D C:\Users\jerem
  498. 2017-12-15 21:45 - 2017-12-15 21:45 - 000000020 ___SH C:\Users\jerem\ntuser.ini
  499. 2017-12-15 21:45 - 2017-12-15 21:45 - 000000000 ____D C:\ProgramData\USOShared
  500. 2017-12-15 21:43 - 2017-12-15 21:43 - 000000000 ____D C:\Windows\CSC
  501. 2017-12-15 21:43 - 2017-09-30 00:41 - 002241024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
  502. 2017-12-15 21:42 - 2017-12-15 21:42 - 000026112 _____ C:\Windows\KMS-R@1n.exe
  503. 2017-12-15 21:42 - 2017-12-15 21:42 - 000005120 _____ C:\Windows\KMS-R@1nHook.exe
  504. 2017-12-15 21:42 - 2017-12-15 21:42 - 000004096 _____ C:\Windows\KMS-R@1nHook.dll
  505. 2017-12-15 21:42 - 2017-12-15 21:42 - 000003612 _____ C:\Users\Public\Desktop\R@1n.txt
  506. 2017-12-15 21:42 - 2017-12-15 21:42 - 000000000 ____D C:\Windows\System32\Tasks\R@1n-KMS
  507.  
  508. ==================== One Month Modified files and folders ========
  509.  
  510. (If an entry is included in the fixlist, the file/folder will be moved.)
  511.  
  512. 2017-12-20 01:52 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\AppReadiness
  513. 2017-12-20 01:43 - 2017-09-29 19:45 - 000524288 _____ C:\Windows\system32\config\BBI
  514. 2017-12-20 01:41 - 2017-09-30 01:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
  515. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ___SD C:\Windows\SysWOW64\F12
  516. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ___SD C:\Windows\system32\F12
  517. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\TextInput
  518. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
  519. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\SysWOW64\Dism
  520. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\system32\WinMetadata
  521. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
  522. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\system32\oobe
  523. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\system32\appraiser
  524. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\ShellExperiences
  525. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\Provisioning
  526. 2017-12-20 01:41 - 2017-09-30 00:46 - 000000000 ____D C:\Program Files\Windows Defender
  527. 2017-12-20 01:41 - 2017-09-30 00:44 - 000000000 ____D C:\Windows\INF
  528. 2017-12-20 01:41 - 2017-09-29 19:45 - 000000000 ____D C:\Windows\system32\Dism
  529. 2017-12-19 00:42 - 2017-09-30 00:37 - 000000000 ____D C:\Windows\CbsTemp
  530. 2017-12-19 00:28 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\DeliveryOptimization
  531. 2017-12-19 00:20 - 2017-09-30 00:46 - 000000000 ___HD C:\Program Files\WindowsApps
  532. 2017-12-16 16:41 - 2017-09-29 19:45 - 000000000 ____D C:\Windows\system32\Sysprep
  533. 2017-12-16 16:39 - 2017-09-29 19:45 - 000032768 _____ C:\Windows\system32\config\ELAM
  534. 2017-12-16 16:38 - 2017-09-30 00:46 - 000000000 ___RD C:\Windows\PrintDialog
  535. 2017-12-16 16:38 - 2017-09-30 00:46 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
  536. 2017-12-16 16:36 - 2017-09-30 00:46 - 000028672 _____ C:\Windows\system32\config\BCD-Template
  537. 2017-12-16 16:35 - 2017-09-30 00:49 - 000000000 ____D C:\Windows\Setup
  538. 2017-12-15 22:53 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\appcompat
  539. 2017-12-15 21:43 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\system32\WinBioDatabase
  540. 2017-12-15 21:43 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\system32\spool
  541. 2017-12-15 21:43 - 2017-09-30 00:46 - 000000000 ____D C:\Windows\system32\FxsTmp
  542. 2017-12-15 21:43 - 2017-09-30 00:46 - 000000000 ____D C:\ProgramData\USOPrivate
  543.  
  544. Some files in TEMP:
  545. ====================
  546. 2016-09-25 06:42 - 2016-09-25 06:42 - 000024576 _____ (NVIDIA) C:\Users\jerem\AppData\Local\Temp\barilla.dll
  547.  
  548. ==================== Bamital & volsnap ======================
  549.  
  550. (There is no automatic fix for files that do not pass verification.)
  551.  
  552. C:\Windows\system32\winlogon.exe => File is digitally signed
  553. C:\Windows\system32\wininit.exe => File is digitally signed
  554. C:\Windows\explorer.exe => File is digitally signed
  555. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  556. C:\Windows\system32\svchost.exe => File is digitally signed
  557. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  558. C:\Windows\system32\services.exe => File is digitally signed
  559. C:\Windows\system32\User32.dll => File is digitally signed
  560. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  561. C:\Windows\system32\userinit.exe => File is digitally signed
  562. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  563. C:\Windows\system32\rpcss.dll => File is digitally signed
  564. C:\Windows\system32\dnsapi.dll => File is digitally signed
  565. C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
  566. C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
  567.  
  568. LastRegBack: 2017-12-16 16:37
  569.  
  570. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!