Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Slow Toshiba- suspended processes maxed out memory and disk

Started by enurhead , Mar 03 2018 05:19 PM

This topic is locked

16 replies to this topic

#1 enurhead

Member

Full Member
11 posts

Posted 03 March 2018 - 05:19 PM

Slow Toshiba- suspended processes maxed out memory and disk.

Slow and freezes- no audio however it may be the controler on the mother- suspended processes

Malwarebytes

www.malwarebytes.com

-Log Details-

Scan Date: 3/3/18

Scan Time: 11:49 AM

Log File: fec9019e-1f1b-11e8-ae8b-4845200a72d7.json

Administrator: Yes

-Software Information-

Version: 3.3.1.2183

Components Version: 1.0.262

Update Package Version: 1.0.4194

License: Trial

-System Information-

OS: Windows 10 (Build 16299.248)

CPU: x64

File System: NTFS

User: AKA-ENURHEAD\MINE

-Scan Summary-

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 287148

Threats Detected: 0

(No malicious items detected)

Threats Quarantined: 0

(No malicious items detected)

Time Elapsed: 9 min, 55 sec

-Scan Options-

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Detect

PUM: Detect

-Scan Details-

Process: 0

(No malicious items detected)

Module: 0

(No malicious items detected)

Registry Key: 0

(No malicious items detected)

Registry Value: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Data Stream: 0

(No malicious items detected)

Folder: 0

(No malicious items detected)

File: 0

(No malicious items detected)

Physical Sector: 0

(No malicious items detected)

(end)

#2 enurhead

Member

Full Member
11 posts

Posted 03 March 2018 - 05:22 PM

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28.02.2018

Ran by MINE (administrator) on AKA-ENURHEAD (03-03-2018 14:49:04)

Running from C:\Users\enurh\Downloads

Loaded Profiles: MINE (Available Profiles: MINE)

Platform: Windows 10 Home Version 1709 16299.248 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_75bf0d025ab049e0\igfxCUIService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe

(Intel Corporation) C:\Windows\System32\ibtsiva.exe

(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_75bf0d025ab049e0\igfxEM.exe

(Microsoft Corporation) C:\Windows\System32\CastSrv.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_75bf0d025ab049e0\IntelCpHeciSvc.exe

(Microsoft Corporation) C:\Program Files\internet explorer\iexplore.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

Failed to access process -> iexplore.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\MsMpEng.exe

(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\NisSrv.exe

(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Firetrust) C:\Program Files (x86)\Firetrust\MailWasher\MailWasher.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\PeopleExperienceHost.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1807.264.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Corporation) C:\Windows\System32\prevhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)

HKU\S-1-5-21-3925416160-1738934342-2325262501-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-01-10] (Apple Inc.)

HKU\S-1-5-21-3925416160-1738934342-2325262501-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2018-01-10] (Apple Inc.)

HKU\S-1-5-21-3925416160-1738934342-2325262501-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2018-01-10] (Apple Inc.)

HKU\S-1-5-21-3925416160-1738934342-2325262501-1001\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2018-01-10] (Apple Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Intuit Data Protect.lnk [2018-02-01]

ShortcutTarget: Intuit Data Protect.lnk -> C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe (Intuit Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk [2018-02-01]

ShortcutTarget: QuickBooks Update Agent.lnk -> C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks_Standard_21.lnk [2018-02-01]

ShortcutTarget: QuickBooks_Standard_21.lnk -> C:\Program Files (x86)\Intuit\QuickBooks 2018\QBW32.EXE (Intuit Inc.)

Startup: C:\Users\enurh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MailWasher.lnk [2018-03-03]

ShortcutTarget: MailWasher.lnk -> C:\Program Files (x86)\Firetrust\MailWasher\MailWasher.exe (Firetrust)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 205.171.3.26

Tcpip\..\Interfaces\{7bbe3397-da30-42b2-96cc-23b34d460668}: [DhcpNameServer] 192.168.0.1 205.171.3.26

Tcpip\..\Interfaces\{df43c5c9-142f-4a38-94da-0ce52fe42b75}: [DhcpNameServer] 192.168.0.1 205.171.3.26

Internet Explorer:

==================

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2018-02-04] (Microsoft Corporation)

Handler-x32: intu-help-qb11 - {5AFDE6E8-AD0F-450B-818F-21D1CDC2E3EE} - C:\Program Files (x86)\Intuit\QuickBooks 2018\HelpAsyncPluggableProtocol.dll [2017-12-20] (Intuit, Inc.)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-04] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-02-04] (Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-04] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-02-04] (Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-04] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-02-04] (Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-04] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-02-04] (Microsoft Corporation)

Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\WINDOWS\system32\mscoree.dll [2017-09-29] (Microsoft Corporation)

Edge:

======

Edge HomeButtonPage: HKU\S-1-5-21-3925416160-1738934342-2325262501-1001 -> hxxp://bing.com/

FireFox:

========

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-02-04] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2018-02-02] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-02-01] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-02-01] (Google Inc.)

Chrome:

=======

CHR DefaultProfile: Default

CHR HomePage: Default -> hxxp://www.google.com/

CHR StartupUrls: Default -> "hxxp://www.google.com/"

CHR Profile: C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default [2018-03-03]

CHR Extension: (Crazy Speak It) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aofddapeckjmhbeikmidpglfnhipknlp [2018-03-01]

CHR Extension: (Docs) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-01]

CHR Extension: (Google Drive) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-02-01]

CHR Extension: (Real Estate Investment Guide) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgeamonahpajhlebdailnpijilpmnbop [2018-02-02]

CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2018-03-03]

CHR Extension: (YouTube) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-02-01]

CHR Extension: (HelloFax) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\bocmleclimfnadgmcdgecijlblfcmfnm [2018-02-02]

CHR Extension: (Webmail Ad Blocker) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbhfdchmklhpcngcgjmpdbjakdggkkjp [2018-03-01]

CHR Extension: (Task Timer Pro) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\dddgjgcemjgkhgeekbooigaiilbklkbm [2018-02-27]

CHR Extension: (Legal Forms and Agreements) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlbikmknmkdbnpoippbmnlglabnpoeih [2018-02-02]

CHR Extension: (Multiple Account Checker for Gmail™) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnimhgelcnggigekhdjlifjpndgmnglm [2018-02-02]

CHR Extension: (Kami - PDF and Document Markup) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecnphlgnajanjnkcmbpancdjoidceilk [2018-02-28]

CHR Extension: (Sheets) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-01]

CHR Extension: (iCloud Bookmarks) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2018-02-16]

CHR Extension: (Google Docs Offline) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-02-05]

CHR Extension: (table-to-spreadsheet) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\haidhlbpihfihbjcggmffnmhgiddjcoc [2018-02-02]

CHR Extension: (VoiceNote II - Speech to text) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfknjgplnkgjihghcidajejfmldhibfm [2018-02-02]

CHR Extension: (I Need To Sell My House) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieomladppmoddjhpmjadlakagcodbepk [2018-02-02]

CHR Extension: (Kami - PDF and Document Markup) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljojpiodmlhoehoecppliohmplbgeij [2018-02-27]

CHR Extension: (Electronic signatures by PandaDoc) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilpbaolnchlngdjpbigjlhbapenjpfdd [2018-02-02]

CHR Extension: (TrackingTime | Time Tracker) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\knailkjkjcfegledhjhcfacdngnicimb [2018-02-02]

CHR Extension: (Evernote Web) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol [2018-02-02]

CHR Extension: (Free Real Estate) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldohdimjgjdimbgefchnjnablanohkcg [2018-02-02]

CHR Extension: (PaymoApp) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lenbfhcjnclnoepkkahpnibbekkekihp [2018-02-02]

CHR Extension: (Explain and Send Screenshots) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdddabjhelpilpnpgondfmehhcplpiin [2018-02-02]

CHR Extension: (Chrome Web Store Payments) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-02-01]

CHR Extension: (Airtable - Flexible database and organizer) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmnciefjclblnajjcmhobechdohojkbf [2018-02-02]

CHR Extension: (Data Scraper - Easy Web Scraping) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nndknepjnldbdbepjfgmncbggmopgden [2018-02-19]

CHR Extension: (Instant Data Scraper) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofaokhiedipichpaobibbnahnkdoiiah [2018-02-28]

CHR Extension: (Speechnotes - Speech To Text Notepad) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\opekipbefdbacebgkjjdgoiofdbhocok [2018-02-02]

CHR Extension: (Gmail) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-02-01]

CHR Extension: (Chrome Media Router) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-01]

CHR Extension: (Streak CRM for Gmail) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2018-02-02]

CHR Extension: (Checker Plus for Google Drive™) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pppfmbnpgflleackdcojndfgpiboghga [2018-02-28]

CHR Profile: C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1 [2018-03-03]

CHR Extension: (Slides) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-02]

CHR Extension: (Docs) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-08]

CHR Extension: (Google Drive) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-02-08]

CHR Extension: (YouTube) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-02-08]

CHR Extension: (Webmail Ad Blocker) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cbhfdchmklhpcngcgjmpdbjakdggkkjp [2018-02-02]

CHR Extension: (ZenMate VPN - Best Cyber Security & Unblock) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2018-03-03]

CHR Extension: (Sheets) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-02]

CHR Extension: (Select and Speak - Text to Speech (SpeakIt!)) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gfjopfpjmkcfgjpogepmdjmcnihfpokn [2018-02-02]

CHR Extension: (Google Docs Offline) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-02-08]

CHR Extension: (Google Calendar) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2018-03-03]

CHR Extension: (Read Aloud: A Text to Speech Voice Reader) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hdhinadidafjejdhmfkjgnolgimiaplp [2018-03-03]

CHR Extension: (lumio - highlight what matters) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hgomdfbclcjpeecbjckbbojbmmjegpek [2018-02-02]

CHR Extension: (Checker Plus for Google Calendar™) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hkhggnncdpfibdhinjiegagmopldibha [2018-03-03]

CHR Extension: (Text To Speech) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\imclcpbkigabhclgmlfdlacgblkinagd [2018-02-02]

CHR Extension: (NetHunt CRM for Gmail) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kaeigipjcamcanmmhgpniimjagdleoee [2018-02-02]

CHR Extension: (Grammar and Spelling checker by Ginger) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kdfieneakcjfaiglcfcgkidlkmlijjnh [2018-02-02]

CHR Extension: (Task Checker Plus for use with Google Tasks™) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\loenhclgjkdbejkdbjjdcbhicaikcohi [2018-02-02]

CHR Extension: (Explain and Send Screenshots) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mdddabjhelpilpnpgondfmehhcplpiin [2018-02-02]

CHR Extension: (Accompany for Gmail) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ndcapchnpmkcfijjiidbglgcgbidpcnp [2018-02-02]

CHR Extension: (Chrome Web Store Payments) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-02-02]

CHR Extension: (Checker Plus for Gmail™) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2018-02-02]

CHR Extension: (WiseStamp - Email Signatures for Gmail) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pbcgnkmbeodkmiijjfnliicelkjfcldg [2018-02-02]

CHR Extension: (Ads Killer Adblocker Plus) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pgbllmbdjgcalkoimdfcpknbjgnhjclg [2018-02-02]

CHR Extension: (Gmail) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-02-08]

CHR Extension: (Checker for Gmail Ultra Plus v2 ™) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkbahhojomhiihbocpboijobjdpkhgel [2018-02-02]

CHR Extension: (Chrome Media Router) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-02]

CHR Extension: (Streak CRM for Gmail) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2018-02-02]

CHR Extension: (Checker Plus for Google Drive™) - C:\Users\enurh\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pppfmbnpgflleackdcojndfgpiboghga [2018-03-03]

CHR Profile: C:\Users\enurh\AppData\Local\Google\Chrome\User Data\System Profile [2018-03-03]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7968424 2018-02-08] (Microsoft Corporation)

R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [190216 2016-10-14] (Intel Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)

R3 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2017-12-20] (Intuit Inc.) [File not signed]

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [323320 2016-08-26] (Realtek Semiconductor)

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-05-04] (Synaptics Incorporated)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\NisSrv.exe [356152 2018-03-02] (Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MsMpEng.exe [106280 2018-03-02] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AX88772; C:\WINDOWS\System32\drivers\ax88772.sys [124160 2016-07-01] (ASIX Electronics Corp.)

S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)

S3 dot4; C:\WINDOWS\System32\drivers\Dot4.sys [151968 2012-10-19] (Windows ® Win 7 DDK provider)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77432 2017-11-29] ()

S3 ghsdiagMDM; C:\WINDOWS\System32\drivers\ghsdiagMDM.sys [122496 2011-11-28] (HS Incorporated)

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [250624 2016-10-14] (Intel Corporation)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [193968 2018-03-03] (Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [110016 2018-03-03] (Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [46008 2018-03-03] (Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2018-03-03] (Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [94144 2018-03-03] (Malwarebytes)

R1 MpKsl328a4e58; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{EF6E9120-30E0-4726-B792-2EE9C0F7F6DE}\MpKsl328a4e58.sys [58120 2018-03-03] (Microsoft Corporation)

R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2017-09-29] (Intel Corporation)

R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-05] (Realtek Semiconductor Corp.)

S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [69216 2017-05-04] (Synaptics Incorporated)

R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [72792 2017-05-04] (Synaptics Incorporated)

S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64912 2017-05-18] (QUALCOMM Incorporated)

R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [45728 2015-08-07] (Toshiba Corporation)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-03-02] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288296 2018-03-02] (Microsoft Corporation)

S3 wdm_usb; C:\WINDOWS\System32\drivers\usb2ser.sys [151184 2016-07-15] (MBB)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129568 2018-03-02] (Microsoft Corporation)

R3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-03 14:49 - 2018-03-03 14:49 - 000024230 _____ C:\Users\enurh\Downloads\FRST.txt

2018-03-03 11:46 - 2018-03-03 11:53 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2018-03-03 11:46 - 2018-03-03 11:46 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2018-03-03 11:46 - 2018-03-03 11:46 - 000193968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2018-03-03 11:46 - 2018-03-03 11:46 - 000110016 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2018-03-03 11:46 - 2018-03-03 11:46 - 000046008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2018-03-03 11:45 - 2018-03-03 11:45 - 000001923 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2018-03-03 11:44 - 2018-03-03 11:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2018-03-03 11:44 - 2018-03-03 11:44 - 000000000 ____D C:\ProgramData\Malwarebytes

2018-03-03 11:44 - 2018-03-03 11:44 - 000000000 ____D C:\Program Files\Malwarebytes

2018-03-03 11:44 - 2017-11-29 09:11 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys

2018-03-03 10:45 - 2018-03-03 10:47 - 007429416 _____ (Microsoft Corporation) C:\Users\enurh\Downloads\Setup.X64.en-US_O365HomePremRetail_02b382b3-f4fc-487c-81eb-cedd69b212d4_TX_PR_.exe

2018-03-03 06:50 - 2018-03-03 07:02 - 067456464 _____ (Malwarebytes ) C:\Users\enurh\Downloads\mb3-setup-exp89v1.exp89v1-3.3.1.2183-1.0.262-1.0.4030.exe

2018-03-03 04:29 - 2018-03-03 14:48 - 000000000 ____D C:\FRST

2018-03-03 04:28 - 2018-03-03 04:29 - 002403840 _____ (Farbar) C:\Users\enurh\Downloads\FRST64.exe

2018-03-03 02:53 - 2018-03-03 02:53 - 000000000 ____D C:\Users\enurh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firetrust

2018-03-03 02:53 - 2018-03-03 02:53 - 000000000 ____D C:\Users\enurh\AppData\Roaming\Firetrust

2018-03-03 02:53 - 2018-03-03 02:53 - 000000000 ____D C:\Program Files (x86)\Firetrust

2018-03-03 02:52 - 2018-03-03 02:52 - 000000000 ____D C:\Users\enurh\AppData\Roaming\Javacool Software

2018-03-03 02:51 - 2018-03-03 02:53 - 000000000 ____D C:\ProgramData\Firetrust

2018-03-03 02:50 - 2018-03-03 02:53 - 000000000 ____D C:\ProgramData\TEMP

2018-03-03 02:50 - 2018-03-03 02:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EULAlyzer

2018-03-03 02:50 - 2018-03-03 02:50 - 000000000 ____D C:\Program Files (x86)\EULAlyzer

2018-03-03 02:50 - 2011-05-15 15:00 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL

2018-03-03 02:50 - 2011-05-15 15:00 - 000115920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSINET.OCX

2018-03-03 02:44 - 2018-03-03 02:47 - 022935552 _____ (Firetrust) C:\Users\enurh\Downloads\mailwasher_pro_setup_7_11_00_23052017_free.exe

2018-03-03 02:44 - 2018-03-03 02:44 - 001733120 _____ (BrightFort LLC ) C:\Users\enurh\Downloads\eulalyzersetup22.exe

2018-03-01 15:06 - 2018-03-01 15:06 - 000175537 _____ C:\Users\enurh\Downloads\trial balance.pdf

2018-03-01 14:35 - 2018-03-01 14:35 - 000231966 _____ C:\Users\enurh\Downloads\3.1.18 pand l detail draft.pdf

2018-03-01 01:40 - 2018-03-03 14:42 - 000004160 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{35CAFB37-F8F3-4BE1-9B12-68EA22A0728C}

2018-02-28 15:03 - 2018-02-28 15:03 - 000225690 _____ C:\Users\enurh\Downloads\fiveminutepayrollsystem-2017version.pdf.o68xu46 (1).partial

2018-02-28 13:27 - 2018-02-28 15:03 - 000225690 _____ C:\Users\enurh\Downloads\fiveminutepayrollsystem-2017version.pdf.o68xu46.partial

2018-02-28 11:02 - 2018-02-28 11:02 - 000239444 _____ C:\Users\enurh\OneDrive\Documents\2.28.18 net.pdf

2018-02-28 09:58 - 2018-03-02 11:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2018-02-27 22:51 - 2018-02-27 22:52 - 003882789 _____ C:\Users\enurh\Downloads\123FINAL.oxps

2018-02-23 16:41 - 2018-02-23 16:41 - 000010929 _____ C:\Users\enurh\OneDrive\Documents\financials.xlsx

2018-02-23 12:49 - 2018-02-23 12:49 - 000209377 _____ C:\Users\enurh\Downloads\boa checking.oxps

2018-02-22 17:26 - 2018-02-23 12:47 - 000000160 _____ C:\Users\enurh\BullseyeCoverageError.txt

2018-02-20 15:22 - 2018-02-23 16:40 - 000010928 _____ C:\Users\enurh\OneDrive\Documents\Book1.xlsx

2018-02-20 09:19 - 2018-02-20 09:19 - 000031252 _____ C:\Users\enurh\Downloads\preview.pdf

2018-02-16 16:04 - 2018-02-16 16:04 - 001647796 _____ C:\Users\enurh\Downloads\Science_of_Successful_Facebook_Ads.pdf

2018-02-16 15:38 - 2018-02-28 10:04 - 000000000 ___RD C:\Users\enurh\iCloudDrive

2018-02-16 15:38 - 2018-02-16 15:38 - 000000000 ____D C:\Users\enurh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iCloud

2018-02-16 15:38 - 2018-02-16 15:38 - 000000000 ____D C:\Users\enurh\AppData\Local\Apple Inc

2018-02-16 15:37 - 2018-03-03 02:53 - 000000000 ____D C:\Users\enurh\OneDrive\Documents\Outlook Files

2018-02-16 15:37 - 2018-02-16 15:38 - 000000000 ____D C:\Users\enurh\AppData\Local\1E541228-EBA7-46EA-8878-B24FE17A0EF5.aplzod

2018-02-16 09:12 - 2018-02-16 09:12 - 000000000 ____D C:\Program Files\Common Files\DESIGNER

2018-02-15 15:52 - 2018-02-16 15:36 - 000000000 ____D C:\Users\enurh\AppData\Local\Apple Computer

2018-02-15 15:51 - 2018-02-16 17:54 - 000000000 ____D C:\Users\enurh\AppData\Roaming\Apple Computer

2018-02-15 15:51 - 2018-02-15 15:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2018-02-15 15:51 - 2018-02-15 15:51 - 000000000 ____D C:\ProgramData\Apple Computer

2018-02-15 14:40 - 2018-02-15 14:40 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

2018-02-15 14:40 - 2018-02-15 14:40 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple

2018-02-15 14:40 - 2018-02-15 14:40 - 000000000 ____D C:\Users\enurh\AppData\Local\Apple

2018-02-15 14:40 - 2018-02-15 14:40 - 000000000 ____D C:\Program Files\Bonjour

2018-02-15 14:40 - 2018-02-15 14:40 - 000000000 ____D C:\Program Files (x86)\Bonjour

2018-02-15 14:40 - 2018-02-15 14:40 - 000000000 ____D C:\Program Files (x86)\Apple Software Update

2018-02-15 14:39 - 2018-02-15 15:51 - 000000000 ____D C:\Program Files\Common Files\Apple

2018-02-15 14:38 - 2018-02-15 14:38 - 000000000 ____D C:\ProgramData\Apple

2018-02-14 19:51 - 2018-02-14 20:04 - 155166520 _____ (Apple Inc.) C:\Users\enurh\Downloads\iCloudSetup.exe

2018-02-13 12:58 - 2018-02-13 12:58 - 000000000 ____D C:\Users\enurh\AppData\Local\Microsoft Help

2018-02-13 11:58 - 2018-02-09 22:20 - 000599448 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2018-02-13 11:58 - 2018-02-09 22:20 - 000077208 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2018-02-13 11:58 - 2018-02-09 22:15 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2018-02-13 11:58 - 2018-02-09 22:15 - 000471968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2018-02-13 11:58 - 2018-02-09 22:13 - 001416392 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll

2018-02-13 11:58 - 2018-02-09 22:13 - 000408984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2018-02-13 11:58 - 2018-02-09 22:13 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2018-02-13 11:58 - 2018-02-09 22:10 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2018-02-13 11:58 - 2018-02-09 22:10 - 000154520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll

2018-02-13 11:58 - 2018-02-09 22:09 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll

2018-02-13 11:58 - 2018-02-09 22:09 - 000075160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll

2018-02-13 11:58 - 2018-02-09 22:08 - 003010248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll

2018-02-13 11:58 - 2018-02-09 22:07 - 002710728 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2018-02-13 11:58 - 2018-02-09 22:06 - 000727448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys

2018-02-13 11:58 - 2018-02-09 22:06 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2018-02-13 11:58 - 2018-02-09 22:06 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2018-02-13 11:58 - 2018-02-09 22:06 - 000100248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll

2018-02-13 11:58 - 2018-02-09 22:06 - 000087384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll

2018-02-13 11:58 - 2018-02-09 22:05 - 000688064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2018-02-13 11:58 - 2018-02-09 22:04 - 001430760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe

2018-02-13 11:58 - 2018-02-09 22:04 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2018-02-13 11:58 - 2018-02-09 22:04 - 000093592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2018-02-13 11:58 - 2018-02-09 22:02 - 000617304 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll

2018-02-13 11:58 - 2018-02-09 21:21 - 001615712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2018-02-13 11:58 - 2018-02-09 21:17 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2018-02-13 11:58 - 2018-02-09 21:17 - 000542856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll

2018-02-13 11:58 - 2018-02-09 21:09 - 002338776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll

2018-02-13 11:58 - 2018-02-09 21:09 - 001123456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll

2018-02-13 11:58 - 2018-02-09 21:08 - 003980720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2018-02-13 11:58 - 2018-02-09 21:08 - 002193168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2018-02-13 11:58 - 2018-02-09 21:07 - 000543920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2018-02-13 11:58 - 2018-02-09 21:07 - 000527864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll

2018-02-13 11:58 - 2018-02-09 21:07 - 000123808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll

2018-02-13 11:58 - 2018-02-09 21:07 - 000089504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll

2018-02-13 11:58 - 2018-02-09 21:07 - 000083216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbrand.dll

2018-02-13 11:58 - 2018-02-09 21:06 - 000982528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2018-02-13 11:58 - 2018-02-09 21:05 - 001149272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2018-02-13 11:58 - 2018-02-09 21:05 - 000662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll

2018-02-13 11:58 - 2018-02-09 21:05 - 000386424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll

2018-02-13 11:58 - 2018-02-09 21:05 - 000129184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll

2018-02-13 11:58 - 2018-02-09 21:05 - 000074992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll

2018-02-13 11:58 - 2018-02-09 20:50 - 003665408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2018-02-13 11:58 - 2018-02-09 20:49 - 000536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll

2018-02-13 11:58 - 2018-02-09 20:49 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys

2018-02-13 11:58 - 2018-02-09 20:47 - 017160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2018-02-13 11:58 - 2018-02-09 20:47 - 013704192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2018-02-13 11:58 - 2018-02-09 20:47 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2018-02-13 11:58 - 2018-02-09 20:46 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2018-02-13 11:58 - 2018-02-09 20:46 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll

2018-02-13 11:58 - 2018-02-09 20:46 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll

2018-02-13 11:58 - 2018-02-09 20:46 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys

2018-02-13 11:58 - 2018-02-09 20:46 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2018-02-13 11:58 - 2018-02-09 20:46 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCShellCommonProxyStub.dll

2018-02-13 11:58 - 2018-02-09 20:45 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll

2018-02-13 11:58 - 2018-02-09 20:45 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll

2018-02-13 11:58 - 2018-02-09 20:44 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2018-02-13 11:58 - 2018-02-09 20:44 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe

2018-02-13 11:58 - 2018-02-09 20:44 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll

2018-02-13 11:58 - 2018-02-09 20:44 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll

2018-02-13 11:58 - 2018-02-09 20:44 - 000276480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2018-02-13 11:58 - 2018-02-09 20:44 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2018-02-13 11:58 - 2018-02-09 20:44 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2018-02-13 11:58 - 2018-02-09 20:44 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll

2018-02-13 11:58 - 2018-02-09 20:43 - 018923008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2018-02-13 11:58 - 2018-02-09 20:43 - 000580608 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll

2018-02-13 11:58 - 2018-02-09 20:43 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys

2018-02-13 11:58 - 2018-02-09 20:43 - 000391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2018-02-13 11:58 - 2018-02-09 20:43 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll

2018-02-13 11:58 - 2018-02-09 20:43 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2018-02-13 11:58 - 2018-02-09 20:43 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll

2018-02-13 11:58 - 2018-02-09 20:43 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCShellCommonProxyStub.dll

2018-02-13 11:58 - 2018-02-09 20:42 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll

2018-02-13 11:58 - 2018-02-09 20:42 - 000975872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll

2018-02-13 11:58 - 2018-02-09 20:42 - 000731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe

2018-02-13 11:58 - 2018-02-09 20:42 - 000397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2018-02-13 11:58 - 2018-02-09 20:42 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll

2018-02-13 11:58 - 2018-02-09 20:42 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll

2018-02-13 11:58 - 2018-02-09 20:42 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2018-02-13 11:58 - 2018-02-09 20:42 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe

2018-02-13 11:58 - 2018-02-09 20:42 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2018-02-13 11:58 - 2018-02-09 20:41 - 019352576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2018-02-13 11:58 - 2018-02-09 20:41 - 000820224 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll

2018-02-13 11:58 - 2018-02-09 20:41 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2018-02-13 11:58 - 2018-02-09 20:41 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll

2018-02-13 11:58 - 2018-02-09 20:41 - 000377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe

2018-02-13 11:58 - 2018-02-09 20:41 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2018-02-13 11:58 - 2018-02-09 20:41 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2018-02-13 11:58 - 2018-02-09 20:41 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 003405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11_3SDKLayers.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 001234432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_3SDKLayers.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 000940544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 000756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 000343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2018-02-13 11:58 - 2018-02-09 20:40 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 011925504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 004748288 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 002741248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 002677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 002490880 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 001669120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 000680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 000648704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll

2018-02-13 11:58 - 2018-02-09 20:39 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2018-02-13 11:58 - 2018-02-09 20:38 - 006722560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe

2018-02-13 11:58 - 2018-02-09 20:38 - 006567936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2018-02-13 11:58 - 2018-02-09 20:38 - 003125760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll

2018-02-13 11:58 - 2018-02-09 20:38 - 002184192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll

2018-02-13 11:58 - 2018-02-09 20:38 - 002086400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2018-02-13 11:58 - 2018-02-09 20:38 - 002082304 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2018-02-13 11:58 - 2018-02-09 20:38 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe

2018-02-13 11:58 - 2018-02-09 20:38 - 000668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2018-02-13 11:58 - 2018-02-09 20:38 - 000653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll

2018-02-13 11:58 - 2018-02-09 20:38 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2018-02-13 11:58 - 2018-02-09 20:38 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

2018-02-13 11:58 - 2018-02-09 20:37 - 004839424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2018-02-13 11:58 - 2018-02-09 20:37 - 003678720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2018-02-13 11:58 - 2018-02-09 20:37 - 003578368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2018-02-13 11:58 - 2018-02-09 20:37 - 002523648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll

2018-02-13 11:58 - 2018-02-09 20:37 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2018-02-13 11:58 - 2018-02-09 20:37 - 001488384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2018-02-13 11:58 - 2018-02-09 20:37 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll

2018-02-13 11:58 - 2018-02-09 20:37 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe

2018-02-13 11:58 - 2018-02-09 20:36 - 006031360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 002464768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 002462208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 001759744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 001342464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DbgModel.dll

2018-02-13 11:58 - 2018-02-09 20:36 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll

2018-02-13 11:58 - 2018-02-09 20:35 - 002413568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll

2018-02-13 11:58 - 2018-02-09 20:35 - 002349568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll

2018-02-13 11:58 - 2018-02-09 20:35 - 002013184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2018-02-13 11:58 - 2018-02-09 20:35 - 001474560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2018-02-13 11:58 - 2018-02-09 20:35 - 000963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2018-02-13 11:58 - 2018-02-09 20:35 - 000941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll

2018-02-13 11:58 - 2018-02-09 20:35 - 000918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll

2018-02-13 11:58 - 2018-02-09 20:35 - 000826880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe

2018-02-13 11:58 - 2018-02-09 20:35 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srchadmin.dll

2018-02-13 11:58 - 2018-02-09 20:34 - 006532096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe

2018-02-13 11:58 - 2018-02-09 20:34 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2018-02-13 11:58 - 2018-02-09 20:34 - 002983936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll

2018-02-13 11:58 - 2018-02-09 20:34 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.ProxyStub.dll

2018-02-13 11:58 - 2018-02-09 20:33 - 001936384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe

2018-02-13 11:58 - 2018-02-09 20:33 - 001557504 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe

2018-02-13 11:58 - 2018-02-09 20:33 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll

2018-02-13 11:58 - 2018-02-09 20:33 - 000620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll

2018-02-13 11:58 - 2018-02-09 20:33 - 000604672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll

2018-02-13 11:58 - 2018-02-09 20:33 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcbase.dll

2018-02-13 11:58 - 2018-02-09 20:32 - 002427904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll

2018-02-13 11:58 - 2018-02-09 20:32 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL

2018-02-13 11:58 - 2018-02-09 20:32 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL

2018-02-13 11:58 - 2018-02-09 20:32 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.ProxyStub.dll

2018-02-13 11:58 - 2018-02-09 20:31 - 001488896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe

2018-02-13 11:58 - 2018-02-09 20:31 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll

2018-02-13 11:58 - 2018-02-09 20:31 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcbase.dll

2018-02-13 11:57 - 2018-02-09 22:24 - 000270744 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2018-02-13 11:57 - 2018-02-09 22:23 - 001577880 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2018-02-13 11:57 - 2018-02-09 22:23 - 000758168 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2018-02-13 11:57 - 2018-02-09 22:23 - 000613272 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2018-02-13 11:57 - 2018-02-09 22:23 - 000138136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2018-02-13 11:57 - 2018-02-09 22:22 - 002003352 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2018-02-13 11:57 - 2018-02-09 22:22 - 000662936 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2018-02-13 11:57 - 2018-02-09 22:22 - 000460696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2018-02-13 11:57 - 2018-02-09 22:22 - 000387480 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2018-02-13 11:57 - 2018-02-09 22:22 - 000272800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2018-02-13 11:57 - 2018-02-09 22:22 - 000070040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll

2018-02-13 11:57 - 2018-02-09 22:22 - 000035224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2018-02-13 11:57 - 2018-02-09 22:21 - 001092016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2018-02-13 11:57 - 2018-02-09 22:21 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll

2018-02-13 11:57 - 2018-02-09 22:21 - 000279456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys

2018-02-13 11:57 - 2018-02-09 22:20 - 001206680 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2018-02-13 11:57 - 2018-02-09 22:20 - 001055640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2018-02-13 11:57 - 2018-02-09 22:20 - 000924648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2018-02-13 11:57 - 2018-02-09 22:19 - 001133888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll

2018-02-13 11:57 - 2018-02-09 22:18 - 001193192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll

2018-02-13 11:57 - 2018-02-09 22:18 - 000319864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll

2018-02-13 11:57 - 2018-02-09 22:18 - 000098272 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe

2018-02-13 11:57 - 2018-02-09 22:18 - 000022400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll

2018-02-13 11:57 - 2018-02-09 22:17 - 001209240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2018-02-13 11:57 - 2018-02-09 22:16 - 008603032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2018-02-13 11:57 - 2018-02-09 22:16 - 002406456 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2018-02-13 11:57 - 2018-02-09 22:16 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2018-02-13 11:57 - 2018-02-09 22:15 - 002514944 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2018-02-13 11:57 - 2018-02-09 22:15 - 001415296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2018-02-13 11:57 - 2018-02-09 22:14 - 004504464 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2018-02-13 11:57 - 2018-02-09 22:14 - 002395032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2018-02-13 11:57 - 2018-02-09 22:14 - 001002592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll

2018-02-13 11:57 - 2018-02-09 22:13 - 000535960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2018-02-13 11:57 - 2018-02-09 22:12 - 004537040 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll

2018-02-13 11:57 - 2018-02-09 22:12 - 001313016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe

2018-02-13 11:57 - 2018-02-09 22:12 - 001277848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2018-02-13 11:57 - 2018-02-09 22:12 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2018-02-13 11:57 - 2018-02-09 22:11 - 001029528 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll

2018-02-13 11:57 - 2018-02-09 22:11 - 000711432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2018-02-13 11:57 - 2018-02-09 22:11 - 000677784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2018-02-13 11:57 - 2018-02-09 22:11 - 000494496 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll

2018-02-13 11:57 - 2018-02-09 22:10 - 002447768 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll

2018-02-13 11:57 - 2018-02-09 22:10 - 000614160 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll

2018-02-13 11:57 - 2018-02-09 22:10 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2018-02-13 11:57 - 2018-02-09 22:09 - 003904296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2018-02-13 11:57 - 2018-02-09 22:09 - 000525208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe

2018-02-13 11:57 - 2018-02-09 22:09 - 000491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2018-02-13 11:57 - 2018-02-09 22:08 - 021351624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2018-02-13 11:57 - 2018-02-09 22:08 - 007675784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2018-02-13 11:57 - 2018-02-09 22:08 - 002574232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2018-02-13 11:57 - 2018-02-09 22:08 - 000687552 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll

2018-02-13 11:57 - 2018-02-09 22:08 - 000398824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe

2018-02-13 11:57 - 2018-02-09 22:08 - 000096200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll

2018-02-13 11:57 - 2018-02-09 22:08 - 000048112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2018-02-13 11:57 - 2018-02-09 22:07 - 004506576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2018-02-13 11:57 - 2018-02-09 22:07 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll

2018-02-13 11:57 - 2018-02-09 22:07 - 000436632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll

2018-02-13 11:57 - 2018-02-09 22:06 - 004486904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2018-02-13 11:57 - 2018-02-09 22:06 - 000824896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2018-02-13 11:57 - 2018-02-09 22:06 - 000594048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2018-02-13 11:57 - 2018-02-09 22:06 - 000519144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe

2018-02-13 11:57 - 2018-02-09 22:06 - 000356952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll

2018-02-13 11:57 - 2018-02-09 22:06 - 000189336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll

2018-02-13 11:57 - 2018-02-09 22:05 - 000413888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2018-02-13 11:57 - 2018-02-09 22:05 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys

2018-02-13 11:57 - 2018-02-09 22:05 - 000070856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll

2018-02-13 11:57 - 2018-02-09 22:04 - 007384576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2018-02-13 11:57 - 2018-02-09 22:04 - 006791984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2018-02-13 11:57 - 2018-02-09 22:04 - 001426672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2018-02-13 11:57 - 2018-02-09 22:04 - 001254144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2018-02-13 11:57 - 2018-02-09 22:04 - 001170008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2018-02-13 11:57 - 2018-02-09 22:04 - 000614296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2018-02-13 11:57 - 2018-02-09 22:04 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe

2018-02-13 11:57 - 2018-02-09 22:04 - 000339872 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll

2018-02-13 11:57 - 2018-02-09 22:04 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2018-02-13 11:57 - 2018-02-09 22:04 - 000212880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll

2018-02-13 11:57 - 2018-02-09 22:03 - 001619808 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2018-02-13 11:57 - 2018-02-09 22:03 - 000849304 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll

2018-02-13 11:57 - 2018-02-09 22:03 - 000722616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2018-02-13 11:57 - 2018-02-09 22:03 - 000706600 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll

2018-02-13 11:57 - 2018-02-09 22:03 - 000404888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll

2018-02-13 11:57 - 2018-02-09 22:03 - 000098712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll

2018-02-13 11:57 - 2018-02-09 22:02 - 002773400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2018-02-13 11:57 - 2018-02-09 22:02 - 001103768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys

2018-02-13 11:57 - 2018-02-09 22:02 - 000628632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll

2018-02-13 11:57 - 2018-02-09 21:22 - 001930224 _____ (Microsoft Corporation) C:\WINDOWS

#3 Android 8888

SWI Malware Tracker

Trusted Advisor*
1,177 posts

Posted 04 March 2018 - 07:19 AM

Hello enurhead and welcome to SpywareInfo Forum.
I'm Android 8888 and I'll be helping you with your computer issues. Please ask questions if anything is unclear.

The contents of the FRST.txt log that you posted were cut off. Please make sure you copy and paste its entire content in your next reply.

Also, you did not attach the Addition.txt log. The Addition.txt log is stored in the same folder as FRST, which in your case is in the C:\Users\enurh\Downloads folder. Please attach it to your reply.

In addition, could you please describe with more detail what issues and symptoms you are experiencing on the computer.

Thank you.

Android 8888

Android 8888

Website: http://android8888.comlu.com

Tavira - Here's where I live!

Please read the Instructions for posting requested logs and the article "So how did I get infected in the first place?"

Our help is free, but if you wish to help keep these forums running please consider a donation; Please see This Topic for details.

#4 enurhead

Member

Full Member
11 posts

Posted 04 March 2018 - 08:15 PM