Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-08-2020
Ran by Ộnibi (administrator) on DESKTOP-Q0H09QF (28-08-2020 09:40:54)
Running from C:\Users\Megaport\Desktop
Loaded Profiles: Ộnibi
Platform: Windows 10 Pro Version 1903 18362.900 (X64) Language: Anglais (États-Unis)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe
(Corel Corporation -> ) [File not signed] C:\Program Files\WinZip\WinZip Smart Monitor\WinZip Compression Smart Monitor Service.exe
(Corel Corporation -> Corel Corporation) [File not signed] C:\Program Files\WinZip\WinZip Smart Monitor\WinZipCompressionSmartMonitor.exe
(Corel Corporation -> Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe
(Corel Corporation -> Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <13>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Hanwang Technology Co., LTD -> ) C:\Windows\hwpen.exe <2>
(Hi-Rez Studios) [File not signed] C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Lavasoft Limited -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(Megaport GmbH) [File not signed] C:\Program Files\Megaport\Megaport Languagetool Service.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12006.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.220.4292.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.220.4292.0_x64__8wekyb3d8bbwe\GameBarFT.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.220.4292.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
(Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_87086da927dcdf63\Display.NvContainer\NVDisplay.Container.exe <2>
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9234280 2017-09-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [117760 2017-11-02] (WinZip Computing, S.L.) [File not signed]
HKLM\...\Run: [AvastUI.exe] => "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [353776 2020-07-30] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2410968 2018-09-13] (Adobe Systems Incorporated -> Adobe Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646160 2019-12-11] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3377440 2020-07-11] (Valve -> Valve Corporation)
HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [7410464 2019-03-02] (Lavasoft Limited -> Lavasoft)
HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3143456 2020-08-26] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\...\Run: [utweb] => C:\Users\Megaport\AppData\Roaming\uTorrent Web\utweb.exe [5491328 2020-05-07] (Jenkins Win Client Build CA -> BitTorrent Inc.) [File not signed]
HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\...\Run: [Dashlane] => "C:\Users\Megaport\AppData\Roaming\Dashlane\Dashlane.exe" autoLaunchAtStartup
HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\...\Run: [Discord] => C:\Users\Megaport\AppData\Local\Discord\app-0.0.307\Discord.exe [91023672 2020-08-04] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\...\Run: [Spotify] => C:\Users\Megaport\AppData\Roaming\Spotify\Spotify.exe [23325416 2020-08-20] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Megaport\AppData\Local\Microsoft\Teams\Update.exe [2350776 2020-06-04] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.135\Installer\chrmstp.exe [2020-08-21] (Google LLC -> Google LLC)
Startup: C:\Users\Megaport\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Twitch.lnk [2019-11-22]
ShortcutTarget: Twitch.lnk -> C:\Users\Megaport\AppData\Roaming\Twitch\Bin\Twitch.exe (Twitch Interactive, Inc. -> Twitch Interactive, Inc.)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {043ABE07-CC86-4CC4-9A9A-3171C18FB927} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== ATTENTION
Task: {0BA1F382-C70F-49C5-8921-A2C58D91FC00} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {11E1D7DA-2F30-4BBF-8E83-D4335E4E0F69} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_414_pepper.exe [1471032 2020-08-12] (Adobe Inc. -> Adobe)
Task: {1B1783F8-8343-40AE-B12C-D28F7CB1D753} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-10-10] (Google Inc -> Google Inc.)
Task: {34227755-6580-4F15-88D3-306BCBADED9C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software)
Task: {384F1CEA-A1DF-40E9-815A-E984CA3A3034} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3E435287-835B-4804-82B4-E883517DD10B} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {429F1140-E1E3-4FB8-875F-5AD7D91B389B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-10-10] (Google Inc -> Google Inc.)
Task: {455C02D7-5AF9-400D-8561-12A28D93AEBF} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\winrmsrv => C:\Windows\system32\winrmsrv.exe [731136 2020-06-16] (Microsoft Corporation) [File not signed] <==== ATTENTION
Task: {4FAD433B-8748-4100-B691-E7D7CD1113D8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [653848 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5E561075-B30F-4C3E-AADC-871F25FBE440} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {61D0A53A-BA7C-4AF8-BFD2-066E47D8F9AA} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-08-12] (Adobe Inc. -> Adobe)
Task: {6F4EFB2B-3540-4587-8406-1288F07CB05B} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
Task: {78241AF8-2997-4956-980E-33036A0A66E4} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7F6B401F-42A2-487F-B5ED-9A93E76556B8} - System32\Tasks\Opera GX scheduled Autoupdate 1588097009 => C:\Users\Megaport\AppData\Local\Programs\Opera GX\launcher.exe [1459224 2020-07-23] (Opera Software AS -> Opera Software)
Task: {9D2F4652-4D43-466A-9A7E-8A12EDFA2EBF} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A06D35EE-7907-4986-8C1F-E0CAA1C3BF8C} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== ATTENTION
Task: {A8D925C6-8100-45DB-AC2B-EBE50B41164F} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B7D61816-4977-44E1-81D4-43EEEC13EF3B} - System32\Tasks\Microsoft\Windows\Wininet\Winlogui => C:\Windows\system32\winlogui.exe [750592 2020-06-16] (Microsoft Corporation) [File not signed]
Task: {CA19C6CC-6414-4598-89E3-DD342DFA76F3} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302880 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D8BF206D-2845-4949-BC4D-D69E9F52A2CD} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DFDC9CB6-70B4-4616-8F52-E6BD52ECD26E} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\Adobe Flash Player PPAPI Notifier" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\Adobe Flash Player Updater" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\AdobeGCInvoker-1.0" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineCore" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineUA" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineCore" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(7): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineUA" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(8): schtasks.exe -> /Change /TN "\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(9): schtasks.exe -> /Change /TN "\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(10): schtasks.exe -> /Change /TN "\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(11): schtasks.exe -> /Change /TN "\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(12): schtasks.exe -> /Change /TN "\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(13): schtasks.exe -> /Change /TN "\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(14): schtasks.exe -> /Change /TN "\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(15): schtasks.exe -> /Change /TN "\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(16): schtasks.exe -> /Change /TN "\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(17): schtasks.exe -> /Change /TN "\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(18): schtasks.exe -> /Change /TN "\OneDrive Standalone Update Task-S-1-5-21-3010209747-1172268667-3773917220-1001" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(19): schtasks.exe -> /Change /TN "\Opera GX scheduled Autoupdate 1588097009" /ENABLE
Task: {E6998DE7-0C3A-4849-BBCD-E21623730A9B} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(20): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0724185a-6531-4af4-a486-9812366f0fdc}: [DhcpNameServer] 192.168.120.250
Tcpip\..\Interfaces\{0784d6a8-4beb-442e-9bd0-03156fc16c9c}: [DhcpNameServer] 192.168.120.250
Tcpip\..\Interfaces\{4931e7df-d6f9-4fdd-8bf8-822062a9868f}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{604aeb20-f62f-466d-aeb4-c3b957ba6a71}: [DhcpNameServer] 192.168.120.250
Tcpip\..\Interfaces\{8e03af67-7a1c-44ae-a545-ec2256aa62d8}: [DhcpNameServer] 192.168.120.250
Tcpip\..\Interfaces\{ad982c7c-ee46-4892-8deb-2a69ff386aac}: [DhcpNameServer] 192.168.120.250

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87mjphgwgm1y1zvrq88042519¶m1=y6bdVFVIsvuYsgEClQfz8CTO1Dj3vOna55wzAUXf1mKjwqje6r452G68lGPuJQgnSffLtbZ3ZC6%2BrIEvTuP%2BQbsGkdw6UkTd7Krazx36dOXxV%2BXiUKnQv8VRVo0Sx0mrjicGd%2FEem%2Bk7JdAHU%2B5vDyTuJdexMxz64StaRm9CbTv85or%2FmvUAvgHJenGJzcBHCQjlNkWKMbD1eHYLqr9cNcKm5W%2FPWuJCI5HcBhPWielDTEER5xPVrC9bRRWZWMg2bJO%2Bbh%2BYT6dp107d4Q1PTQq6K6qp7e25YAb3YegNi1YfUEMnMMF172Y1EyZyvEpRBQcr0Rexkh55qlCW8TENIU0GsxaF0l3B8SMIlriOHe%2F9lAB%2Bi%2F4Qyj5MltG5PmnYhxxfTBBzdWiufCjm7uPIcg%3D%3D
SearchScopes: HKU\S-1-5-21-3010209747-1172268667-3773917220-1001 -> DefaultScope {93F7C64C-1895-46DE-8A02-1DF92C0C81AF} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87mjphgwgm1y1zvrq88042519¶m1=y6bdVFVIsvuYsgEClQfz8CTO1Dj3vOna55wzAUXf1mKjwqje6r452G68lGPuJQgnSffLtbZ3ZC6%2BrIEvTuP%2BQRTTSkI0UUNd%2BIwYoP5rNuMO3K%2FmurYl5lCDusINT299w09HM2ti1WREoPNAnO4MBo3DlMzbubIvDxYdkLb6VlJo1Im0RAJt6weo4Q%2Bw1kbMxAqQb4%2Fgqokftjy6oERM6nBCFYDTMjnROo%2B5szCeJO%2BL6ir%2FoCmqN49WhdeYv%2FM4OQQ76zCVflXzMesYF8KScOSFfvy19slh8IwAzFgvyAVKnao5bvocmTQ2tlUJZv6AQ42LeYqyQEX%2FoppAX7IE1N6ypH%2Fpb1aQcY%2BO03fqMKLTvDfQDDiioYIlT4%2BWGq2NJTJhPLJxZrbDgRcThz%2FQiw%3D%3D&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3010209747-1172268667-3773917220-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D102318-A9FCDBB39EF&form=CONBDF&conlogo=CT3335799&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3010209747-1172268667-3773917220-1001 -> {0CE02FFA-A6B0-46F6-BA2F-BD32C3630126} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wsg_mjphgwgm1y1zvrq88_19_25_ssg04¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1QzuyE0C0E0D0F0Bzyzz0FtA0A0BtDyB0D0BtN0D0Tzu0StByBtBzztN1L2XzuyEtFyDtAtFtDtFzytBtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StA0CzyzzzztDtC0DtGtDtCyC0DtGtCtCyD0BtGtA0B0AtDtGtBtBtByCtDyE0FyE0CyC0CtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1R1StDyDyC1OtByCtGzztAzz1QtGyE1S1StAtGzzyD1S1PtG1OzytC1TyBtByD1OtAyByCtC2QtN0A0LzutDtN1B2Z1V1T1S1NzutBtByDtCtDtN1Q2Z1B1P1RzutCyDyCtCtCyEtBzyyDyE%26cr%3D1831752049%26a%3Dwsg_mjphgwgm1y1zvrq88_19_25_ssg04%26os_ver%3D10.0%26os%3DWindows%2B10%2BEnterprise&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3010209747-1172268667-3773917220-1001 -> {93F7C64C-1895-46DE-8A02-1DF92C0C81AF} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87mjphgwgm1y1zvrq88042519¶m1=y6bdVFVIsvuYsgEClQfz8CTO1Dj3vOna55wzAUXf1mKjwqje6r452G68lGPuJQgnSffLtbZ3ZC6%2BrIEvTuP%2BQRTTSkI0UUNd%2BIwYoP5rNuMO3K%2FmurYl5lCDusINT299w09HM2ti1WREoPNAnO4MBo3DlMzbubIvDxYdkLb6VlJo1Im0RAJt6weo4Q%2Bw1kbMxAqQb4%2Fgqokftjy6oERM6nBCFYDTMjnROo%2B5szCeJO%2BL6ir%2FoCmqN49WhdeYv%2FM4OQQ76zCVflXzMesYF8KScOSFfvy19slh8IwAzFgvyAVKnao5bvocmTQ2tlUJZv6AQ42LeYqyQEX%2FoppAX7IE1N6ypH%2Fpb1aQcY%2BO03fqMKLTvDfQDDiioYIlT4%2BWGq2NJTJhPLJxZrbDgRcThz%2FQiw%3D%3D&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3010209747-1172268667-3773917220-1001 -> {9AF7C64C-1895-46DE-8A02-1DF92C0C81AF} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_241\bin\ssv.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-08-25] (McAfee, LLC -> McAfee, LLC)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\ssv.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-08-25] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-3010209747-1172268667-3773917220-1001 -> hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87mjphgwgm1y1zvrq88042519¶m1=y6bdVFVIsvuYsgEClQfz8CTO1Dj3vOna55wzAUXf1mKjwqje6r452G68lGPuJQgnSffLtbZ3ZC6%2BrIEvTuP%2BQcxgaGQU41qrHeS9Hzu0AQTOn6RxTOohOJUVZnjydLjpzm8p9UrkQ6CmWGE0aCNHlL9i5UCxzAWXXxosSt%2FlqL4hyezCIfmM5pcPT1Mfy1EZXiFuyw31V5A28bKZ7VqsWAG2oR0MkKNdrYTpIDKagObXte1VgkqBPoPujIUVyw%2BMZVDQpzQnna%2BwAI5sGxQV6jQ7cSZEdbMZl7knRKuJom%2BRy8Kl5Sefps6XR862WsaC%2Btkm346M2CZOUw2CWc%2BQ82GeRqVXLI%2FZaOGrUBIrirECZWUwTVh9ViS4h2McrWBs6JYJ6pVDoWf6GVmbBJp1TQ%3D%3D
Edge Extension: (No Name) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_2.9.0.0_neutral__c1wakc4j0nefm [not found]
Edge Profile: C:\Users\Megaport\AppData\Local\Microsoft\Edge\User Data\Default [2020-07-29]
Edge HomePage: Default -> hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87mjphgwgm1y1zvrq88042519¶m1=y6bdVFVIsvuYsgEClQfz8CTO1Dj3vOna55wzAUXf1mKjwqje6r452G68lGPuJQgnSffLtbZ3ZC6%2BrIEvTuP%2BQcxgaGQU41qrHeS9Hzu0AQTOn6RxTOohOJUVZnjydLjpzm8p9UrkQ6CmWGE0aCNHlL9i5UCxzAWXXxosSt%2FlqL4hyezCIfmM5pcPT1Mfy1EZXiFuyw31V5A28bKZ7VqsWAG2oR0MkKNdrYTpIDKagObXte1VgkqBPoPujIUVyw%2BMZVDQpzQnna%2BwAI5sGxQV6jQ7cSZEdbMZl7knRKuJom%2BRy8Kl5Sefps6XR862WsaC%2Btkm346M2CZOUw2CWc%2BQ82GeRqVXLI%2FZaOGrUBIrirECZWUwTVh9ViS4h2McrWBs6JYJ6pVDoWf6GVmbBJp1TQ%3D%3D
Edge StartupUrls: Default -> "hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87mjphgwgm1y1zvrq88042519¶m1=y6bdVFVIsvuYsgEClQfz8CTO1Dj3vOna55wzAUXf1mKjwqje6r452G68lGPuJQgnSffLtbZ3ZC6%2BrIEvTuP%2BQcxgaGQU41qrHeS9Hzu0AQTOn6RxTOohOJUVZnjydLjpzm8p9UrkQ6CmWGE0aCNHlL9i5UCxzAWXXxosSt%2FlqL4hyezCIfmM5pcPT1Mfy1EZXiFuyw31V5A28bKZ7VqsWAG2oR0MkKNdrYTpIDKagObXte1VgkqBPoPujIUVyw%2BMZVDQpzQnna%2BwAI5sGxQV6jQ7cSZEdbMZl7knRKuJom%2BRy8Kl5Sefps6XR862WsaC%2Btkm346M2CZOUw2CWc%2BQ82GeRqVXLI%2FZaOGrUBIrirECZWUwTVh9ViS4h2McrWBs6JYJ6pVDoWf6GVmbBJp1TQ%3D%3D"
Edge DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search{google:pathWildcard}?ei={inputEncoding}&fr=crmas&p={searchTerms}
Edge DefaultSearchKeyword: Default -> fr.yahoo.com_
Edge DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}

FireFox:
========
FF DefaultProfile: dwc31nc1.default
FF ProfilePath: C:\Users\Megaport\AppData\Roaming\Mozilla\Firefox\Profiles\dwc31nc1.default [2020-05-04]
FF Homepage: Mozilla\Firefox\Profiles\dwc31nc1.default -> hxxp://www.nav-fr.com/
FF NewTab: Mozilla\Firefox\Profiles\dwc31nc1.default -> hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87mjphgwgm1y1zvrq88042519¶m1=y6bdVFVIsvuYsgEClQfz8CTO1Dj3vOna55wzAUXf1mKjwqje6r452G68lGPuJQgnSffLtbZ3ZC6%2BrIEvTuP%2BQSH6%2FSualAeacx6R9%2FLQkMFHkKwuNSX9UIdBsa%2BvGuqNOUhXYS6TxoHOK20PZE%2F1UTNBbr0tXra2eSvUCfKHpeVuUWL0HiQVXD5qAJO4U1piJbjlq55s7%2BBKzp02%2FNpDaU3BAus4gcRC5SwSd%2FHnDzC%2B2fuOLxqYF9k%2BmVnBZqN2IeJEqTZFYp82Z2IwBkpPLm%2F0DrqWSWX%2BImDHkp8%2BC5lts3YgoeZlkAa2NblY2qr1IGdgaK%2B6%2FPO3ba%2BdFI4oQm7XJSFE6RDf%2BI6qtSS9rYdH8XQ4w88GUSiCcPTulnhgDpalFDi%2Bcm4PMrCRnAK47A%3D%3D
FF Extension: (Avast Online Security) - C:\Users\Megaport\AppData\Roaming\Mozilla\Firefox\Profiles\dwc31nc1.default\Extensions\wrc@avast.com.xpi [2018-10-23]
FF Extension: (Mozilla Official) - C:\Users\Megaport\AppData\Roaming\Mozilla\Firefox\Profiles\dwc31nc1.default\Extensions\{14553439-2741-4e9d-b474-784f336f58c9} [2019-11-22] [not signed]
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-08-25] [UpdateUrl:hxxps://sadownload.mcafee.com/products/SA/Win/xpi/webadvisor/update.json]
FF SearchPlugin: C:\Users\Megaport\AppData\Roaming\Mozilla\Firefox\Profiles\dwc31nc1.default\searchplugins\bing-lavasoft-ff59.xml [2018-11-13]
FF SearchPlugin: C:\Users\Megaport\AppData\Roaming\Mozilla\Firefox\Profiles\dwc31nc1.default\searchplugins\Yahoo powered search.xml [2019-07-12]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Plugin: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-09-13] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-09-13] (Adobe Systems Incorporated -> Adobe Systems)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default [2020-08-28]
CHR Notifications: Default -> hxxps://aternos.org; hxxps://blizztrack.com; hxxps://clickpush.biz; hxxps://instagram-dm.com; hxxps://twitter.com; hxxps://www.pcgamer.com
CHR HomePage: Default -> hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87mjphgwgm1y1zvrq88042519¶m1=y6bdVFVIsvuYsgEClQfz8CTO1Dj3vOna55wzAUXf1mKjwqje6r452G68lGPuJQgnSffLtbZ3ZC6%2BrIEvTuP%2BQeaGuz7jRdP1nsiYCFNDdWTQ1ksDOi7nBptwO5utwkpPtv3%2BVt5gZy9hRNqAt%2FBtzdr3mDY3izhXzpiwI9aSMT48wuBVrZhE2xcHealA5LKyt4AAU3j%2FLS65Wnji95wzZGkqdSUql%2FNSGgwtwnQmvdp1XZOirtmcPLRysygn5xZqs8c9DKxJdBBD9SEefIXXJieSRuD6M5nofrHgg3E8STiBD4PqQk%2FBwpFsgHRCwZBPutVCRwgO8w3IqZdVwZjUp8eGeeh%2FixP7bwIWNsTaLbFCkAnjDvsJdYNwWbtu62R7Ok4nhPC1P%2FengzbVgH304Q%3D%3D
CHR StartupUrls: Default -> "hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87mjphgwgm1y1zvrq88042519¶m1=y6bdVFVIsvuYsgEClQfz8CTO1Dj3vOna55wzAUXf1mKjwqje6r452G68lGPuJQgnSffLtbZ3ZC6%2BrIEvTuP%2BQWI1MSSqz8NCueqJ8WEmbbVeIs6zOT2OvSb1KmjxJTivBCJOwMeYK7BiDsq3w3g8FrGU42gAhrSI27CSm3DA8vFYatTjmPQ5AI52jX%2BrKNiqaXdP7DAxU571EAhy0MQ5Gipfuz0x9tB7ensvo7njEywpfwlGiQws%2BHQFYEYTsK30sPeTnt7rbpAul9futZY2FnJ5VEUvWrVwBLjDMKpK%2BdIDoTZbKkkp2xL8pYlAQP1RX3p3oGDFaqsRkIHqvOaWvk9RJGfhGhow5To0fNIlBwrIwIfMPSsN6f3Tlad%2BNqMeev%2FoFYXueyk5XBaKwJ0WIA%3D%3D","hxxp://www.nav-fr.com/"
CHR Extension: (Slides) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-10-10]
CHR Extension: (Docs) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-10-10]
CHR Extension: (Google Drive) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-10]
CHR Extension: (Turn Off the Lights) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2020-07-27]
CHR Extension: (YouTube) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-10-10]
CHR Extension: (wanteeed) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\emnoomldgleagdjapdeckpmebokijail [2020-01-22]
CHR Extension: (Sheets) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-10-10]
CHR Extension: (Google Docs hors connexion) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-08-14]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-08-14]
CHR Extension: (Shimeji Browser Extension) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohjpllcolmccldfdggmamodembldgpc [2020-08-23]
CHR Extension: (Instant Gaming) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbnoedlobifdhbpjkcfhcbdcjhampmne [2020-01-22]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-03]
CHR Extension: (Gmail) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-23]
CHR Extension: (Chrome Media Router) - C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-07-27]
CHR Profile: C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-10-27]
CHR Profile: C:\Users\Megaport\AppData\Local\Google\Chrome\User Data\System Profile [2019-10-27]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKLM\...\Chrome\Extension: [pdpcpceofkopegffcdnffeenbfdldock]
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej]
CHR HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pdpcpceofkopegffcdnffeenbfdldock]
CHR HKU\S-1-5-21-3010209747-1172268667-3773917220-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj]
CHR HKLM-x32\...\Chrome\Extension: [pdpcpceofkopegffcdnffeenbfdldock]
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-08-12] (Adobe Inc. -> Adobe)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818136 2018-09-13] (Adobe Systems Incorporated -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8646752 2020-08-12] (BattlEye Innovations e.K. -> )
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2018-10-10] (BitRaider LLC -> BitRaider, LLC)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2019-11-12] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2018-06-11] (Hi-Rez Studios) [File not signed]
R2 HWPTTabletServer; C:\Windows\hwpen.exe [77120 2016-11-21] (Hanwang Technology Co., LTD -> )
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [955144 2020-08-25] (McAfee, LLC -> McAfee, LLC)
R2 Megaport Languagetool; C:\Program Files\Megaport\Megaport Languagetool Service.exe [532480 2018-01-25] (Megaport GmbH) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2517816 2020-08-26] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3469632 2020-08-26] (Electronic Arts, Inc. -> Electronic Arts)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [9754048 2020-07-30] (Riot Games, Inc. -> Riot Games, Inc.)
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [25888 2019-03-02] (Lavasoft Limited -> )
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
R2 WinZip Compression Smart Monitor Service; C:\Program Files\WinZip\WinZip Smart Monitor\WinZip Compression Smart Monitor Service.exe [495872 2017-09-01] (Corel Corporation -> ) [File not signed]
R2 WinZip Smart Monitor Service; C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe [1463592 2020-07-09] (Corel Corporation -> Corel Corporation)
S2 wuauserv; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S2 wuauserv; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S3 aswbIDSAgent; "C:\Program Files\AVAST Software\Avast\aswidsagent.exe" [X]
S2 avast! Antivirus; "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" /runassvc [X]
S2 AvastWscReporter; "C:\Program Files\AVAST Software\Avast\wsc_proxy.exe" /runassvc /rpcserver [X]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_87086da927dcdf63\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_87086da927dcdf63\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37136 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205880 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [234560 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [178760 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [60480 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2020-02-25] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42784 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175704 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [501472 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [109272 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84856 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851592 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460992 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [235488 2020-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [319112 2020-05-28] (Avast Software s.r.o. -> AVAST Software)
S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2018-11-03] (BitRaider -> BitRaider)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-10-25] (Microsoft Corporation) [File not signed]
R3 HWPen; C:\WINDOWS\System32\drivers\HWPen.sys [18952 2016-12-21] (Microsoft Windows Hardware Compatibility Publisher -> Hanvon)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] (ASUSTeK Computer Inc. -> )
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [5395880 2020-07-30] (Riot Games, Inc. -> Riot Games, Inc.)
S3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\vmdrv.sys [45408 2018-11-22] (Voicemod Sociedad Limitada -> Windows (R) Win 7 DDK provider)
U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [50176 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [2719256 2020-05-26] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Three months (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-08-28 09:40 - 2020-08-28 09:44 - 000041136 _____ C:\Users\Megaport\Desktop\FRST.txt
2020-08-28 09:34 - 2020-08-28 09:43 - 000000000 ____D C:\FRST
2020-08-28 09:33 - 2020-08-28 09:33 - 002298368 _____ (Farbar) C:\Users\Megaport\Desktop\FRST64.exe
2020-08-28 09:32 - 2020-08-28 09:31 - 000410567 _____ C:\Users\Megaport\Desktop\ZHPDiag.txt
2020-08-28 08:30 - 2020-08-28 09:31 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\ZHP
2020-08-28 08:30 - 2020-08-28 08:30 - 003456896 _____ (Nicolas Coolman) C:\Users\Megaport\Downloads\ZHPSuite.exe
2020-08-28 08:30 - 2020-08-28 08:30 - 000000868 _____ C:\Users\Megaport\Desktop\ZHPSuite.lnk
2020-08-28 08:30 - 2020-08-28 08:30 - 000000000 ____D C:\Users\Megaport\AppData\Local\ZHP
2020-08-28 02:34 - 2020-08-28 02:34 - 019468312 _____ (Microsoft Corporation) C:\Users\Megaport\Downloads\Windows10-2004-CreationTool.exe
2020-08-28 02:34 - 2020-08-28 02:34 - 000000000 ___HD C:\$Windows.~WS
2020-08-28 02:33 - 2020-08-28 02:33 - 000000000 ___HD C:\$GetCurrent
2020-08-28 02:08 - 2020-08-28 02:08 - 000000000 ___HD C:\$WINDOWS.~BT
2020-08-28 02:03 - 2020-08-28 02:03 - 000000719 _____ C:\Users\Megaport\Desktop\Assistant Mise à jour de Windows 10.lnk
2020-08-28 02:00 - 2020-08-28 02:01 - 006260552 _____ (Microsoft Corporation) C:\Users\Megaport\Downloads\Windows10-2004-Update.exe
2020-08-27 20:58 - 2020-08-27 20:58 - 000001078 _____ C:\Users\Public\Desktop\Call of Duty Modern Warfare.lnk
2020-08-27 20:58 - 2020-08-27 20:58 - 000001078 _____ C:\ProgramData\Desktop\Call of Duty Modern Warfare.lnk
2020-08-27 20:58 - 2020-08-27 20:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Modern Warfare
2020-08-27 02:17 - 2020-08-28 02:08 - 000000036 _____ C:\WINDOWS\progress.ini
2020-08-27 02:00 - 2020-08-27 02:00 - 000000000 ____D C:\Users\Megaport\Desktop\TF-Apex
2020-08-27 01:48 - 2020-08-28 02:33 - 000000000 ____D C:\Windows10Upgrade
2020-08-27 01:48 - 2020-08-28 02:03 - 000000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assistant Mise à jour de Windows 10.lnk
2020-08-27 01:48 - 2020-08-27 01:48 - 006260552 _____ (Microsoft Corporation) C:\Users\Megaport\Downloads\Windows10Upgrade9252.exe
2020-08-27 01:23 - 2020-08-27 01:23 - 019445016 _____ (Microsoft Corporation) C:\Users\Megaport\Downloads\MediaCreationTool2004.exe
2020-08-23 22:10 - 2020-08-23 22:10 - 002141474 _____ C:\Users\Megaport\Downloads\Wattson Shimeji TKK.rar
2020-08-19 02:49 - 2020-08-19 02:49 - 000000039 _____ C:\Users\Megaport\AppData\Local\kritadisplayrc
2020-08-18 23:33 - 2020-08-18 23:52 - 130594837 _____ C:\Users\Megaport\Downloads\OneDrive_2020-08-18.zip
2020-08-13 21:59 - 2020-08-13 22:09 - 001236748 _____ C:\WINDOWS\Minidump\081320-44906-01.dmp
2020-08-09 21:09 - 2020-08-09 21:09 - 000017307 _____ C:\Users\Megaport\Downloads\lazer84.zip
2020-08-02 23:56 - 2020-08-02 23:56 - 000015404 _____ C:\Users\Megaport\Downloads\apex-mk2.zip
2020-08-02 22:49 - 2020-08-02 22:52 - 005683973 _____ C:\Users\Megaport\Downloads\OptiFine_1.16.1_HD_U_G2.jar
2020-08-02 17:05 - 2020-08-02 17:05 - 000000000 ___HD C:\$SysReset
2020-07-17 15:34 - 2020-07-17 15:40 - 165969317 _____ C:\Users\Megaport\Downloads\Noir Nights - A Cyberpunk Noir soundtrack.m4a
2020-07-10 21:30 - 2020-07-10 21:30 - 000000000 ____D C:\Users\Megaport\Documents\Respawn
2020-07-10 20:29 - 2020-07-10 20:29 - 000001267 _____ C:\Users\Public\Desktop\Titanfall™ 2.lnk
2020-07-10 20:29 - 2020-07-10 20:29 - 000001267 _____ C:\ProgramData\Desktop\Titanfall™ 2.lnk
2020-07-10 20:29 - 2020-07-10 20:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Titanfall™ 2
2020-07-09 15:31 - 2020-08-28 07:05 - 000000060 _____ C:\WINDOWS\system32\perfdish001.dat
2020-07-08 13:35 - 2020-08-13 21:59 - 670237310 _____ C:\WINDOWS\MEMORY.DMP
2020-07-08 13:35 - 2020-07-08 13:37 - 000892444 _____ C:\WINDOWS\Minidump\070820-55015-01.dmp
2020-07-05 00:34 - 2020-07-05 00:34 - 000307176 _____ C:\Users\Megaport\Downloads\tom-clancys-rainbow-six-siege-all-dlcs-124.torrent
2020-07-03 11:37 - 2020-08-13 00:34 - 000000000 ____D C:\Users\Megaport\AppData\Local\Vivox
2020-07-03 01:37 - 2020-07-03 01:37 - 000000000 ____D C:\Users\Megaport\AppData\Local\BattlEye
2020-07-03 01:33 - 2020-07-03 01:33 - 000000235 _____ C:\Users\Megaport\Desktop\Hyper Scape.url
2020-07-01 21:06 - 2020-07-01 21:06 - 000000000 ____D C:\Users\Megaport\Documents\Electronic Arts
2020-07-01 18:15 - 2020-07-01 18:15 - 000000000 ____D C:\Program Files (x86)\Microsoft WSE
2020-07-01 18:15 - 2008-09-04 20:17 - 000447752 ____R (On2.com) C:\WINDOWS\SysWOW64\vp6vfw.dll
2020-06-28 02:05 - 2020-06-28 02:05 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\SketchUp
2020-06-28 02:05 - 2020-06-28 02:05 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\Autodesk
2020-06-28 02:04 - 2020-06-28 02:08 - 000000000 ____D C:\Users\Megaport\AppData\Local\Enscape
2020-06-17 16:39 - 2020-06-17 16:39 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\Playdead
2020-06-17 16:39 - 2020-06-17 16:39 - 000000000 ____D C:\Users\Megaport\AppData\LocalLow\Playdead
2020-06-17 01:09 - 2020-06-17 01:09 - 000000000 ____D C:\Users\Megaport\AppData\LocalLow\Landfall Games
2020-06-17 00:52 - 2020-06-17 00:52 - 000000000 ____D C:\Users\Megaport\AppData\LocalLow\PolyKnight Games
2020-06-17 00:52 - 2020-06-17 00:52 - 000000000 ____D C:\Users\Megaport\AppData\Local\cache
2020-06-17 00:51 - 2020-06-17 00:51 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\Aspyr Media
2020-06-17 00:51 - 2020-06-17 00:51 - 000000000 ____D C:\Users\Megaport\AppData\Local\Aspyr Media
2020-06-17 00:33 - 2020-06-17 00:33 - 000000297 _____ C:\Users\Megaport\Desktop\TABS.url
2020-06-16 15:56 - 2020-06-16 15:56 - 000731136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrmsrv.exe
2020-06-16 15:55 - 2020-06-16 15:55 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winscomrssrv.dll
2020-06-16 15:55 - 2020-06-16 15:55 - 000000024 _____ C:\WINDOWS\system32\WinUpdates105.dat
2020-06-16 15:55 - 2020-06-16 15:55 - 000000003 _____ C:\WINDOWS\system32\wdbcache.tmp
2020-06-15 17:09 - 2020-06-16 15:56 - 000750592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogui.exe
2020-06-15 17:09 - 2020-06-15 17:09 - 002619392 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartupCheckLibrary.dll
2020-06-15 16:36 - 2020-06-15 16:36 - 000022832 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\eac_usermode_134796091898770.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 011608064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 009712640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 001539072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-06-13 22:22 - 2020-06-13 22:22 - 000940544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2020-06-13 22:22 - 2020-06-13 22:22 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2020-06-13 22:22 - 2020-06-13 22:22 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2020-06-13 22:21 - 2020-06-13 22:21 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 019851776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 018029056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 007012864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 006292480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 005909504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 003822592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 003525608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 003515392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-06-13 22:21 - 2020-06-13 22:21 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 002230240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 002204160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 002190648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 002184504 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001704448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001497400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001410048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2020-06-13 22:21 - 2020-06-13 22:21 - 001344512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001316352 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmclient.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001272160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001151824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 001012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2020-06-13 22:21 - 2020-06-13 22:21 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmclient.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000832512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000747832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmscan.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000571904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2020-06-13 22:21 - 2020-06-13 22:21 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2020-06-13 22:21 - 2020-06-13 22:21 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000484864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000478208 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmscan.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe
2020-06-13 22:21 - 2020-06-13 22:21 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-13 22:21 - 2020-06-13 22:21 - 000204008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBroker.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-06-13 22:21 - 2020-06-13 22:21 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000083600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-13 22:21 - 2020-06-13 22:21 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000041864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBrokerPS.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000028368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecurityCenterBrokerPS.dll
2020-06-13 22:21 - 2020-06-13 22:21 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-06-13 22:20 - 2020-06-13 22:21 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 025902080 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 008015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 007760384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 007268864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 005765144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 004858880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 004610560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 003398656 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-06-13 22:20 - 2020-06-13 22:20 - 002281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2020-06-13 22:20 - 2020-06-13 22:20 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 001397560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-06-13 22:20 - 2020-06-13 22:20 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 001284608 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-06-13 22:20 - 2020-06-13 22:20 - 001193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 001138688 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-06-13 22:20 - 2020-06-13 22:20 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000994304 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000783496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-06-13 22:20 - 2020-06-13 22:20 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000692224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000619008 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000575488 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-06-13 22:20 - 2020-06-13 22:20 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000407864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000384512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-13 22:20 - 2020-06-13 22:20 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-06-13 22:20 - 2020-06-13 22:20 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000093448 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-13 22:20 - 2020-06-13 22:20 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-06-13 22:20 - 2020-06-13 22:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-06-13 22:19 - 2020-06-13 22:19 - 009931576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 007604592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 006526448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 006091048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 005195432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 005111808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 005004344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 003368104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 002831872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 002798592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-06-13 22:19 - 2020-06-13 22:19 - 002583496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001654960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001416224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001393952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001283072 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001261568 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001260744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001250816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001100288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001055184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 001003832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000932256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000894024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000892048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000797464 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000782336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000760296 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkObjCore.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000684856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000651776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000628408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000614400 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000593424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000572200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000564496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-06-13 22:19 - 2020-06-13 22:19 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000508720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000451864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000405936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000357176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-06-13 22:19 - 2020-06-13 22:19 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-06-13 22:19 - 2020-06-13 22:19 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000280376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000223544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000221496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-06-13 22:19 - 2020-06-13 22:19 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000165296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000165192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000132424 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000129600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000108856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000090952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000089344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-06-13 22:19 - 2020-06-13 22:19 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-06-13 22:19 - 2020-06-13 22:19 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 007911176 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 007266080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 006066808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 005283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 004565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 004012032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 003726848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-06-13 22:18 - 2020-06-13 22:18 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 003581240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-06-13 22:18 - 2020-06-13 22:18 - 003187200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-06-13 22:18 - 2020-06-13 22:18 - 002656256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 002289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 002235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001683968 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001583104 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001486336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001447424 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001158144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 001073664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 001007104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-06-13 22:18 - 2020-06-13 22:18 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000826368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 000736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000716320 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-13 22:18 - 2020-06-13 22:18 - 000548984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-06-13 22:18 - 2020-06-13 22:18 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-06-13 22:18 - 2020-06-13 22:18 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000425056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtpUS.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxGipRadioManager.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2020-06-13 22:18 - 2020-06-13 22:18 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-06-13 22:18 - 2020-06-13 22:18 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-06-13 21:17 - 2020-05-15 06:29 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-06-13 21:17 - 2020-05-15 06:10 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-06-12 00:19 - 2020-06-12 00:19 - 000000000 ____D C:\Users\Megaport\AppData\Local\drmingw
2020-06-12 00:19 - 2020-06-12 00:19 - 000000000 ____D C:\ProgramData\dbg
2020-06-09 01:44 - 2020-06-09 01:44 - 000024512 _____ C:\WINDOWS\system32\7B296FC0-376B-497d-B013-58F4D9633A22-5P-1.B5841A4C-A289-439d-8115-50AB69CD450B
2020-06-09 01:44 - 2020-06-09 01:44 - 000000000 _____ C:\WINDOWS\system32\setup4.2.6.tmp
2020-06-03 03:34 - 2020-06-03 03:34 - 000000000 ____D C:\Users\Megaport\AppData\Local\Epic Games
2020-06-03 03:33 - 2020-06-03 03:33 - 000000000 ____D C:\Users\Megaport\AppData\Local\Prospect
2020-06-02 10:44 - 2020-06-02 10:44 - 000000000 ____D C:\Users\Megaport\AppData\Local\VALORANT
2020-06-02 04:03 - 2020-06-02 04:03 - 000000280 _____ C:\Users\Megaport\Desktop\Subnautica.url
2020-05-30 16:54 - 2020-05-30 16:54 - 000062603 _____ C:\Users\Megaport\Downloads\Activité 3 - Page 1
2020-05-30 16:54 - 2020-05-30 16:54 - 000053316 _____ C:\Users\Megaport\Downloads\Exercice 17 p245
2020-05-30 16:53 - 2020-05-30 16:53 - 000058343 _____ C:\Users\Megaport\Downloads\Ex 13 & 14 p243
2020-05-30 16:53 - 2020-05-30 16:53 - 000055791 _____ C:\Users\Megaport\Downloads\Activité 3 - Page 2

==================== Three months (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-08-28 09:39 - 2020-01-28 20:05 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\Discord
2020-08-28 09:22 - 2019-10-25 02:20 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-08-28 09:20 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-08-28 08:04 - 2020-03-27 20:37 - 000000000 ____D C:\Users\Megaport\AppData\Local\Spotify
2020-08-28 07:15 - 2020-03-27 20:36 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\Spotify
2020-08-28 07:15 - 2018-10-09 10:12 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\.minecraft
2020-08-28 02:47 - 2018-05-25 14:26 - 000000000 ____D C:\ProgramData\NVIDIA
2020-08-28 02:44 - 2020-04-14 20:10 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2020-08-28 02:44 - 2019-03-08 22:46 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\Origin
2020-08-28 02:44 - 2019-03-08 22:46 - 000000000 ____D C:\ProgramData\Origin
2020-08-28 02:41 - 2019-03-08 22:46 - 000000000 ____D C:\Users\Megaport\AppData\Local\Origin
2020-08-28 02:36 - 2019-10-25 02:56 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-08-28 02:36 - 2018-10-11 18:31 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2020-08-28 02:10 - 2020-03-01 13:13 - 000011081 _____ C:\ProgramData\DisplaySessionContainer1.log_backup1
2020-08-28 02:10 - 2020-03-01 13:04 - 000013983 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_backup1
2020-08-28 02:10 - 2020-03-01 13:04 - 000012077 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_backup1
2020-08-28 02:10 - 2020-03-01 13:04 - 000001209 _____ C:\ProgramData\NvcDispCorePlugin.log_backup1
2020-08-28 02:10 - 2019-10-25 02:34 - 000000000 ____D C:\Users\Megaport
2020-08-28 02:08 - 2019-10-25 02:55 - 000000000 _____ C:\WINDOWS\diagwrn.xml
2020-08-28 02:08 - 2019-10-25 02:55 - 000000000 _____ C:\WINDOWS\diagerr.xml
2020-08-28 00:17 - 2019-08-17 21:20 - 000000000 ____D C:\Program Files (x86)\Origin Games
2020-08-27 23:23 - 2020-03-14 03:11 - 000000000 ____D C:\Program Files (x86)\Call of Duty Modern Warfare
2020-08-27 23:19 - 2018-10-09 14:40 - 000000000 ____D C:\Users\Megaport\AppData\Local\Battle.net
2020-08-27 23:15 - 2019-09-22 15:43 - 000000000 ____D C:\Users\Megaport\Documents\Call of Duty Modern Warfare
2020-08-27 23:14 - 2018-10-20 21:09 - 000000000 ____D C:\Users\Megaport\AppData\Local\D3DSCache
2020-08-27 18:20 - 2018-10-09 14:32 - 000000000 ____D C:\Program Files (x86)\Battle.net
2020-08-27 17:16 - 2019-10-02 16:36 - 000000000 ___RD C:\Users\Megaport\Desktop\Apex
2020-08-27 04:07 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-08-27 03:35 - 2018-10-24 19:17 - 000000000 ____D C:\Users\Megaport\AppData\Local\CrashDumps
2020-08-27 03:16 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\USOPrivate
2020-08-27 03:16 - 2018-10-08 21:46 - 000000000 ____D C:\Users\Megaport\AppData\Local\ElevatedDiagnostics
2020-08-27 02:05 - 2018-10-14 23:02 - 000000000 ____D C:\Users\Megaport\Desktop\Idris
2020-08-27 02:01 - 2018-10-26 11:42 - 000000000 ____D C:\Users\Megaport\Desktop\Logiciels
2020-08-27 01:27 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-08-27 01:15 - 2019-10-25 03:01 - 000000000 ____D C:\Users\Megaport\AppData\Local\PackageStaging
2020-08-27 01:15 - 2018-05-25 14:03 - 000000000 ____D C:\Users\Megaport\AppData\Local\Packages
2020-08-27 00:51 - 2020-03-25 21:31 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-08-27 00:51 - 2020-03-25 21:31 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-08-27 00:49 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-08-27 00:32 - 2018-05-25 14:24 - 000000000 ____D C:\Users\Megaport\AppData\Local\PlaceholderTileLogoFolder
2020-08-26 14:09 - 2019-03-08 23:01 - 000000000 ____D C:\Program Files (x86)\Origin
2020-08-24 21:04 - 2019-02-23 19:39 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\Twitch
2020-08-24 15:38 - 2020-03-14 14:55 - 000003480 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-08-24 15:38 - 2020-03-14 14:55 - 000003356 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-08-23 16:12 - 2018-10-09 17:01 - 000000000 ____D C:\Program Files (x86)\Overwatch
2020-08-23 00:52 - 2018-10-09 10:29 - 000000000 ____D C:\Program Files (x86)\Steam
2020-08-22 06:08 - 2018-10-23 22:17 - 000000000 ____D C:\Program Files (x86)\FirestormLauncher
2020-08-21 15:19 - 2020-03-14 14:56 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-08-21 00:57 - 2018-10-10 20:19 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-08-19 18:31 - 2019-10-25 02:56 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3010209747-1172268667-3773917220-1001
2020-08-19 18:31 - 2018-05-25 14:05 - 000000000 ___RD C:\Users\Megaport\OneDrive
2020-08-19 18:30 - 2019-10-25 02:34 - 000002414 _____ C:\Users\Megaport\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-08-19 02:49 - 2018-11-08 20:03 - 000023294 _____ C:\Users\Megaport\AppData\Local\kritarc
2020-08-14 23:10 - 2018-11-26 00:22 - 000000000 ____D C:\Program Files\Epic Games
2020-08-14 02:10 - 2020-01-02 19:07 - 000000000 ____D C:\Users\Megaport\Desktop\Onibi
2020-08-13 21:59 - 2019-12-21 23:14 - 000000000 ____D C:\WINDOWS\Minidump
2020-08-13 00:35 - 2019-04-18 13:26 - 000000000 ____D C:\Users\Megaport\AppData\Local\Ubisoft Game Launcher
2020-08-12 10:21 - 2020-04-15 11:20 - 004510264 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2020-08-12 10:21 - 2020-03-21 17:27 - 000004730 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-08-12 10:21 - 2020-02-13 17:30 - 000842296 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-08-12 10:21 - 2020-02-13 17:30 - 000175160 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-08-12 10:21 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-08-12 10:21 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-08-07 05:31 - 2018-11-27 16:54 - 000000000 ____D C:\Users\Megaport\Desktop\Pirate
2020-08-06 19:12 - 2020-01-28 20:04 - 000000000 ____D C:\Users\Megaport\AppData\Local\Discord
2020-08-06 19:12 - 2019-01-29 23:03 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2020-08-05 14:46 - 2020-04-14 19:31 - 000000000 ____D C:\Program Files\Riot Vanguard
2020-08-04 14:54 - 2020-04-28 20:03 - 000004250 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1588097009
2020-08-04 14:54 - 2020-04-28 20:03 - 000001441 _____ C:\Users\Megaport\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera GX.lnk
2020-08-02 14:24 - 2018-10-23 23:20 - 000000000 ____D C:\Users\Megaport\AppData\Roaming\uTorrent Web
2020-08-02 12:59 - 2019-09-18 16:00 - 000000000 ____D C:\Users\Megaport\AppData\Local\BitTorrentHelper
2020-07-29 19:47 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

==================== Files in the root of some directories ========

2019-11-22 23:09 - 2019-11-22 23:09 - 000778984 _____ (Boston Scientific Corporation) C:\Users\Megaport\AppData\Roaming\745rgfed.exe
2019-03-28 22:43 - 2019-03-28 22:43 - 000001174 _____ () C:\Users\Megaport\AppData\Roaming\Battle.net - Raccourci.lnk
2019-11-05 16:31 - 2019-11-21 18:17 - 000000037 _____ () C:\Users\Megaport\AppData\Roaming\WB.CFG
2020-02-07 21:34 - 2020-02-07 21:34 - 000000362 _____ () C:\Users\Megaport\AppData\Local\karboncalligraphyrc
2020-06-12 00:19 - 2020-06-12 00:19 - 000021805 _____ () C:\Users\Megaport\AppData\Local\kritacrash.log
2020-08-19 02:49 - 2020-08-19 02:49 - 000000039 _____ () C:\Users\Megaport\AppData\Local\kritadisplayrc
2018-11-08 20:03 - 2020-08-19 02:49 - 000023294 _____ () C:\Users\Megaport\AppData\Local\kritarc
2020-03-25 15:29 - 2020-03-25 15:29 - 000000410 _____ () C:\Users\Megaport\AppData\Local\oobelibMkey.log
2019-08-23 19:53 - 2019-08-23 19:53 - 000000000 _____ () C:\Users\Megaport\AppData\Local\{4BF3A6BF-1A75-47C9-B822-E2C74F631036}

==================== SigCheckExt =========================

2013-05-28 22:23 - 2013-05-28 22:23 - 000652288 _____ C:\WINDOWS\system32\ficvdec_x64.dll
2020-06-15 17:09 - 2020-06-15 17:09 - 002619392 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartupCheckLibrary.dll
2020-06-15 17:09 - 2020-06-16 15:56 - 000750592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogui.exe
2020-06-16 15:56 - 2020-06-16 15:56 - 000731136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrmsrv.exe
2020-06-16 15:55 - 2020-06-16 15:55 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winscomrssrv.dll
2013-05-28 22:22 - 2013-05-28 22:22 - 000641024 _____ C:\WINDOWS\SysWOW64\ficvdec_x86.dll
2020-08-28 09:33 - 2020-08-28 09:33 - 002298368 _____ (Farbar) C:\Users\Megaport\Desktop\FRST64.exe
2018-10-25 23:25 - 2018-10-25 23:25 - 002482582 _____ C:\Users\Megaport\Desktop\NationsGlory.exe
2018-11-07 22:00 - 2019-06-07 18:29 - 004773920 _____ () C:\Users\Megaport\Desktop\Technic.exe
2020-08-28 08:30 - 2020-08-28 08:30 - 003456896 _____ (Nicolas Coolman) C:\Users\Megaport\Downloads\ZHPSuite.exe
2019-11-22 23:09 - 2019-11-22 23:09 - 000778984 _____ (Boston Scientific Corporation) C:\Users\Megaport\AppData\Roaming\745rgfed.exe

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


==================== BCD ================================

Gestionnaire de d�marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale en-US
inherit {globalsettings}
default {current}
resumeobject {cce05723-f710-11e9-a1e6-b9bc6119dc65}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30

Chargeur de d�marrage Windows
-----------------------------
identificateur {98685526-f6bd-11e9-b567-f87d05205fe2}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{98685527-f6bd-11e9-b567-f87d05205fe2}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale en-US
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{98685527-f6bd-11e9-b567-f87d05205fe2}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes

Chargeur de d�marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale en-US
inherit {bootloadersettings}
recoverysequence {98685526-f6bd-11e9-b567-f87d05205fe2}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {cce05723-f710-11e9-a1e6-b9bc6119dc65}
nx OptIn
bootmenupolicy Standard

Reprendre � partir de la mise en veille prolong�e
-------------------------------------------------
identificateur {cce05723-f710-11e9-a1e6-b9bc6119dc65}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale en-US
inherit {resumeloadersettings}
recoverysequence {98685526-f6bd-11e9-b567-f87d05205fe2}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No

Testeur de m�moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Windows Memory Diagnostic
locale en-US
inherit {globalsettings}
badmemoryaccess Yes

Param�tres EMS
--------------
identificateur {emssettings}
bootems No

Param�tres du d�bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local

Erreurs de m�moire RAM
----------------------
identificateur {badmemory}

Param�tres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}

Param�tres du chargeur de d�marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}

Param�tres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200

Param�tres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}

Options de p�riph�rique
-----------------------
identificateur {98685527-f6bd-11e9-b567-f87d05205fe2}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi

==================== End of FRST.txt ========================