ciao
quando apro google mi si apre questo link https://www.google.com/?trackid=sp-006
è normale?
solo roguekiller mi ha trovato un file template search browser che ho cancellato...
che faccio?
quando apro google mi si apre questo link https://www.google.com/?trackid=sp-006
è normale?
solo roguekiller mi ha trovato un file template search browser che ho cancellato...
che faccio?
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04-06-2020
Ran by MARCO (administrator) on MARCO_GABRIELLA (Micro-Star International Co., Ltd. MS-7A34) (04-06-2020 23:17:25)
Running from C:\Users\MARCO\Desktop
Loaded Profiles: MARCO
Platform: Windows 10 Home Version 1909 18363.836 (X64) Language: Italiano (Italia)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ACD Systems International Inc. -> ) C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ACDSeeCommanderUltimate13.exe
(ACD Systems International Inc. -> ACD Systems) C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\acdIDInTouch2.exe
(Adlice -> ) C:\Users\MARCO\AppData\Local\Microsoft\Windows\INetCache\IE\6QA4XVGM\RogueKiller_portable64.exe
(Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <4>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atiesrxx.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(EZVIZ Inc. -> ) C:\Program Files (x86)\hicloud\update_server\SPUpDateServer.exe
(EZVIZ Inc. -> ) C:\Program Files (x86)\hicloud\update_server\startUp.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe <6>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\MKCHelper.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\NisSrv.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(Node.js Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(Open Source Developer, Florian Höch -> ) C:\Program Files (x86)\DisplayCAL\DisplayCAL-apply-profiles.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\RAPID\SamsungRapidSvc.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATINJE.EXE
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [VX3000] => C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [SamsungRapidApp] => C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [281696 2015-09-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9277520 2020-04-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [ACUW13EN] => C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\acdIDInTouch2.exe [2128856 2019-11-28] (ACD Systems International Inc. -> ACD Systems)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302392 2020-05-20] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1852264 2014-05-23] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [X_Boost] => C:\Program Files (x86)\MSI\MSI X Boost\X_Boost.exe [4225696 2017-12-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2042424 2020-03-16] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [SPUpDateServerrun] => C:\Program Files (x86)\hicloud\update_server\startUp.exe [14832 2015-09-10] (EZVIZ Inc. -> )
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26310832 2020-02-06] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [98CA5D2E7C86B53A6751090CFC1EC8C74B51B24E._service_run] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service /prefetch:8
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATINJE.EXE [298560 2013-12-16] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-05-07] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [48214752 2020-04-06] (Google LLC -> )
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91591032 2020-04-14] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [com.squirrel.WhatsApp.WhatsApp] => C:\Users\MARCO\AppData\Local\WhatsApp\Update.exe [2253232 2019-08-08] (WhatsApp, Inc -> )
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [648328 2020-04-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [Google Update] => C:\Users\MARCO\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-20] (Google LLC -> Google LLC)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [ACDSeeCommanderUltimate13] => C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ACDSeeCommanderUltimate13.exe [4989088 2020-04-10] (ACD Systems International Inc. -> )
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session -- hxxps://www.familysearch.org/ark:/61903/ (the data entry has 82 more characters).
HKLM\...\Windows x64\Print Processors\Canon MX920 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBL.DLL [30208 2012-09-20] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor MX920 series: C:\WINDOWS\system32\CNCALBL.DLL [303104 2012-09-21] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5200 series: C:\WINDOWS\system32\CNMLMAE.DLL [385024 2012-03-14] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5200 series XPS: C:\WINDOWS\system32\CNMXLMAE.DLL [385024 2012-03-14] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJ Language Monitor MX920 series: C:\WINDOWS\system32\CNMLMBL.DLL [390656 2012-09-20] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [359936 2012-07-31] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\EPSON XP-760 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBNJE.DLL [179712 2013-12-06] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.61\Installer\chrmstp.exe [2020-05-22] (Google LLC -> Google LLC)
Startup: C:\Users\MARCO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Invia a OneNote.lnk [2019-02-10]
ShortcutTarget: Invia a OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {01935E2D-83C0-4186-A83D-04851965BC23} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124752 2020-05-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {06C000EB-4C1D-4706-838C-ED44E1A6F8E7} - System32\Tasks\Nahimic2Svc32Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe
Task: {0C8851C4-D40B-4937-B11C-B78BBDF92CBB} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2558224 2018-07-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {15C4DF43-2029-48EF-91E2-F173DC86CFAA} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {183FF4BA-8D43-4B75-BC7B-D6DC04245F68} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124752 2020-05-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {31A22761-988E-46FC-A32F-99D20E498D19} - System32\Tasks\NahimicVRSvc32Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe
Task: {3436A99B-1B69-4AB1-9A2A-D3EFC8D8E77B} - System32\Tasks\EPSON XP-760 Series Update {52559C3C-E97D-4537-BE5A-DB1B101B08C8} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNJE.EXE [690536 2013-11-22] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {343D7F39-191C-46F6-ACE2-7C7CBB637302} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-info@moscamarco.it => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {39596E25-D557-4F12-87F3-370A4184FEE2} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [1628160 2020-02-29] (Advanced Micro Devices, Inc.) [File not signed]
Task: {3A6C493A-EF58-44AA-8F4F-5EFC044D0B65} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {46B9485E-49B6-4473-8D04-8F1B8D6D9504} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1628160 2020-02-29] (Advanced Micro Devices, Inc.) [File not signed]
Task: {47509DEA-E685-4478-B413-0C0850F09628} - System32\Tasks\AdobeAAMUpdater-1.0-Marco_Gabriella-Administrator => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {4ADE4881-E38A-4173-8806-FFD575A459AE} - System32\Tasks\Driver Easy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [3660232 2020-02-17] (Easeware Technology Limited -> Easeware)
Task: {4E319D8E-B9FB-43C1-9B47-146BE176634F} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772552 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [32256 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
Task: {5D92FAFE-E339-4254-BC80-0E951C554C7D} - System32\Tasks\DisplayCAL Profile Loader Launcher => C:\Program Files (x86)\DisplayCAL\DisplayCAL-apply-profiles-launcher.exe [178064 2019-08-14] (Open Source Developer, Florian Höch -> )
Task: {5E726731-83B7-44A4-8740-29B55137D513} - System32\Tasks\NahimicVRSvc64Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe
Task: {6232243B-9F7B-4016-838A-9ECBACCFA9B0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1801797792-2963998745-2400400606-1001UA => C:\Users\MARCO\AppData\Local\Google\Update\GoogleUpdate.exe [156104 2020-03-12] (Google LLC -> Google LLC)
Task: {6DCE6212-F83A-4EB4-92D7-E461CE5A758D} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [1992936 2018-07-19] (Microsoft Corporation -> Microsoft)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {7178D70A-077C-4EEA-AA4F-A1EFDC2391B1} - System32\Tasks\AdobeAAMUpdater-1.0-Marco_Gabriella-gabriella => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {7F352A8D-7B6E-4B17-87F1-7D92CE3107DB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {83BE9BF4-DE0D-41D4-90B1-532CECB7CD69} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {9285967F-2948-4BF8-A451-46295DAA5D71} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {95CEBFE5-2161-4258-A855-73E45001E973} - System32\Tasks\Nahimic2UILauncherRun => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
Task: {98744587-37AE-4607-B3D0-E8F4BB1B72E6} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1628160 2020-02-29] (Advanced Micro Devices, Inc.) [File not signed]
Task: {9BB3B6E6-A32A-47B2-B0D1-9644CF0E1914} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [67688 2020-02-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {9CB01280-8246-4DCF-8F18-9A0EB00EC08F} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1919760 2018-07-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {9D5800A6-471B-40DB-BF81-BA330A624E27} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {9D977EF9-385A-4748-8733-A5F1FA9C3901} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2558224 2018-07-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {9E5CC968-C634-44FD-8FA2-7125CC10703B} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60008 2020-02-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {9FC899F8-3F9E-48B0-A817-6C57591B1D66} - System32\Tasks\{79A8B2BC-9D7D-4BDB-863F-0DBC60B7C457} => C:\WINDOWS\system32\pcalua.exe -a L:\GDFWIN.EXE -d L:\
Task: {A487705F-F7CA-4EFC-939D-2D85FE67DF10} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {AADAB735-B6DF-489F-880F-E4B88C486BC0} - System32\Tasks\AMD ThankingURL => C:\Program Files\AMD\CIM\Bin64\Setup.exe [1122920 2020-02-29] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {ADB04A08-F010-4D54-B454-AA06E411CCE2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772552 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {B812C965-0C67-4029-A5C4-B5281E3C5EE0} - System32\Tasks\AdwCleaner_onReboot => C:\Users\MARCO\Desktop\adwcleaner_8.0.5.exe
Task: {B8C52CCD-8B21-42FA-A382-D08A3539A23E} - System32\Tasks\Microsoft_MKC_Logon_Task_ceip.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ceip.exe [39664 2018-07-19] (Microsoft Corporation -> Microsoft)
Task: {C0EBD2D6-387D-443D-98C8-04EDC3380A92} - System32\Tasks\{58632460-3527-457D-A7E1-537C5C4170C0} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.32.0.104/it/abandoninstall?page=tsProgressBar
Task: {CB23FD0F-A499-4A5C-8DF5-DD3DD58AB51B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1801797792-2963998745-2400400606-1001Core => C:\Users\MARCO\AppData\Local\Google\Update\GoogleUpdate.exe [156104 2020-03-12] (Google LLC -> Google LLC)
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {D0E82C16-0488-4FF9-8A60-66E395E85EFB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D1C2C80E-0B37-47DE-BF90-98B1C694BAF3} - System32\Tasks\Nahimic2Svc64Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe
Task: {D31B17BF-FB88-481D-B3E0-1D4AF444818C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DAB91240-CEDF-455A-9877-DEC22DE2818F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4357016 2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {DE7334D1-77BF-4270-9C73-206FBB707D2E} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [6206048 2016-05-13] (Samsung Electronics Co., Ltd. -> Samsung Electronics.)
Task: {E3DBEE7C-9013-49BB-AD0D-ACAE720C792C} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1919760 2018-07-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4865F8F-9F90-4CDE-AC52-F2CCD977E985} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {FA5F4543-EF10-4868-84E5-4C4A497965BC} - System32\Tasks\UMonitor Task => C:\WINDOWS\SysWOW64\UMonit.exe
Task: {FFBB8D33-6563-44D3-BD58-BE053F88B139} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4357016 2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\Driver Easy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\WINDOWS\Tasks\EPSON XP-760 Series Update {52559C3C-E97D-4537-BE5A-DB1B101B08C8}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNJE.EXE:/EXE:{52559C3C-E97D-4537-BE5A-DB1B101B08C8} /F:UpdateWORKGROUP\MARCO_GABRIELLA$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{61402573-0713-4884-8ac4-83be55914fcb}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{72eaa5ae-7354-41e8-975a-3e1ea37060bc}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{72eaa5ae-7354-41e8-975a-3e1ea37060bc}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.it/
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-01-12] (Microsoft Corporation -> Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2019-08-15] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2020-01-12] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-05-02] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2019-08-15] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-05-02] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Edge:
======
DownloadDir: D:\downloads
FireFox:
========
FF DefaultProfile: 3f25p9p8.default
FF ProfilePath: C:\Users\MARCO\AppData\Roaming\Mozilla\Firefox\Profiles\3f25p9p8.default [2020-04-19]
FF Homepage: Mozilla\Firefox\Profiles\3f25p9p8.default -> about:blank
FF NewTab: Mozilla\Firefox\Profiles\3f25p9p8.default -> about:blank
FF Extension: (Cookies Manager+) - C:\Users\MARCO\AppData\Roaming\Mozilla\Firefox\Profiles\3f25p9p8.default\Extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} [2018-01-03] [Legacy]
FF ProfilePath: C:\Users\MARCO\AppData\Roaming\kompozer.net\KompoZer\Profiles\ul291cqi.default [2018-01-03]
FF ProfilePath: C:\Users\MARCO\AppData\Roaming\KompoZer\Profiles\dn44yh4f.default [2018-01-03]
FF Extension: (No Name) - C:\Users\MARCO\AppData\Roaming\KompoZer\Profiles\dn44yh4f.default\Extensions\temp [2015-01-16] [not signed]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-08-15]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2017-06-22] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-05-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-05-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-12-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: @citrixonline.com/appdetectorplugin -> C:\Users\MARCO\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2016-12-16] (Citrix Online -> Citrix Online)
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\MARCO\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-05-16] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: LWAPlugin15.8 -> C:\Users\MARCO\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll [2013-03-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: SkypePlugin -> C:\Users\MARCO\AppData\Local\SkypePlugin\7.32.6.278\npGatewayNpapi.dll [2017-04-18] (Microsoft Corporation -> Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: SkypePlugin64 -> C:\Users\MARCO\AppData\Local\SkypePlugin\7.32.6.278\npGatewayNpapi-x64.dll [2017-04-18] (Microsoft Corporation -> Skype Technologies S.A.)
FF Plugin ProgramFiles/Appdata: C:\Users\MARCO\AppData\Roaming\mozilla\plugins\npLWAPlugin15.8.dll [2020-04-22]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default [2020-06-04]
CHR DownloadDir: D:\downloads
CHR Notifications: Default -> hxxps://divisoup.com; hxxps://drive.google.com; hxxps://gaana.com; hxxps://generatewp.com; hxxps://it.investing.com; hxxps://shop.gopro.com; hxxps://webeers-com.pushengage.com; hxxps://www.budgetair.it; hxxps://www.facebook.com; hxxps://www.gwa.areawmcredem.it; hxxps://www.piucodicisconto.com; hxxps://www.shoutmeloud.com; hxxps://www.tomshw.it
CHR HomePage: Default -> hxxp://www.google.it/
CHR StartupUrls: Default -> "hxxps://www.google.com/?trackid=sp-006"
CHR DefaultSearchKeyword: Default -> google.com_
CHR Extension: (Google Drive) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Chiamate Skype) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-10-09]
CHR Extension: (YouTube) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Attacat Cookie Audit Tool) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebhpmcfenjfodganapapakfnhichojh [2018-01-23]
CHR Extension: (Google Search) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
CHR Extension: (Clear Cache) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cppjkneekbjaeellbfkmgnhonkkjfpdn [2018-02-21]
CHR Extension: (Google Calendar) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-01-07]
CHR Extension: (Word Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2014-11-16]
CHR Extension: (Documenti Google offline) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-06-04]
CHR Extension: (Vysor) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\gidgenkbbabolejbgbpnhbimgjbffefm [2020-03-11]
CHR Extension: (Excel Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2014-11-16]
CHR Extension: (WhatFont) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2017-03-27]
CHR Extension: (Cashback IT-Bestshopping) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjandokkgclchaiipibaligpnceifmif [2020-05-22]
CHR Extension: (Vysor.com) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdphpklacmlhmooodiekhpbepcdlaghl [2018-05-18]
CHR Extension: (Powerpoint ppt to Swf) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\kljihkbpifdllhbhnlnhkkhdkkikcnba [2014-11-16]
CHR Extension: (Video DownloadHelper) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2020-04-02]
CHR Extension: (PowerPoint Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2014-11-16]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-11]
CHR Extension: (Gmail) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-03-11]
CHR Extension: (Chrome Media Router) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-22]
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-04-19]
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3 [2020-06-04]
CHR Notifications: Profile 3 -> hxxps://app.landbot.io; hxxps://calendar.google.com; hxxps://click-it-now.online; hxxps://dashboard.tawk.to; hxxps://en.savefrom.net; hxxps://firstsiteguide.com; hxxps://generatewp.com; hxxps://gopro.com; hxxps://gretaith.com; hxxps://guidatv.sky.it; hxxps://infinity-tv-by.accengage.net; hxxps://it.semrush.com; hxxps://meet.google.com; hxxps://pushcrew.com; hxxps://rankmath.com; hxxps://rinoverrop.pro; hxxps://s7.converto.io; hxxps://smallseotools.com; hxxps://watch-this.live; hxxps://web.skype.com; hxxps://web.whatsapp.com; hxxps://wordx.press; hxxps://www.autoparti.it; hxxps://www.facebook.com; hxxps://www.fotor.com; hxxps://www.minigiochi.com; hxxps://www.mp3hub.com; hxxps://www.pinterest.it; hxxps://www.sorgenia.it
CHR HomePage: Profile 3 -> hxxp://www.google.it/
CHR StartupUrls: Profile 3 -> "hxxps://www.google.com/?trackid=sp-006","hxxp://cartoonetuork.it/"
CHR Extension: (Presentazioni) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-03-26]
CHR Extension: (Documenti) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2018-03-26]
CHR Extension: (Google Drive) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-20]
CHR Extension: (SEO META in 1 CLICK) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bjogjfinolnhfhkbipphpdlldadpnmhc [2019-07-20]
CHR Extension: (YouTube) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-01]
CHR Extension: (Nimbus Screenshot & Screen Video Recorder) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bpconcjcammlapcogcnnelfmaeghhagj [2020-03-22]
CHR Extension: (Google Calendar) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-08-01]
CHR Extension: (Fogli) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-03-26]
CHR Extension: (Word Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2017-08-01]
CHR Extension: (Page load time) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fploionmjgeclbkemipmkogoaohcdbig [2019-09-05]
CHR Extension: (Documenti Google offline) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-19]
CHR Extension: (Open SEO Stats(Formerly: PageRank Status)) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hbdkkfheckcdppiaiabobmennhijkknn [2019-07-04]
CHR Extension: (Excel Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2017-08-01]
CHR Extension: (WhatFont) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2017-08-01]
CHR Extension: (Cashback IT-Bestshopping) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jjandokkgclchaiipibaligpnceifmif [2020-04-26]
CHR Extension: (Sorgenia) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ldadomeegcgcdjfcijngdjglflcghljg [2020-02-27]
CHR Extension: (PowerPoint Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2017-08-01]
CHR Extension: (TubeBuddy) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mhkhmbddkmdggbhaaaodilponhnccicb [2020-06-04]
CHR Extension: (Keepa - Amazon Price Tracker) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\neebplgakaahbhdphmkckjjcegoiijjo [2020-05-19]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]
CHR Extension: (Gmail) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-15]
CHR Extension: (Chrome Media Router) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-22]
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5 [2020-06-04]
CHR Notifications: Profile 5 -> hxxps://calendar.google.com; hxxps://mail.google.com; hxxps://meet.google.com; hxxps://www.gwa.areawmcredem.it
CHR DefaultSearchURL: Profile 5 -> hxxps://www.google.com/a/credem.it/images/favicon.ico
CHR Extension: (Presentazioni) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-03-13]
CHR Extension: (Documenti) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aohghmighlieiainnegkcijnfilokake [2020-03-13]
CHR Extension: (Google Drive) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-03-13]
CHR Extension: (Download emails from Google Mail) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\bgoogiccigaepmddcjallepklfgmdnef [2020-03-13]
CHR Extension: (YouTube) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-03-13]
CHR Extension: (Smooth Checkbox for Gmail™) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\egkhfllhmjihbfnkikpnbeeakllbobjl [2020-03-13]
CHR Extension: (Fogli) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-03-13]
CHR Extension: (Documenti Google offline) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-13]
CHR Extension: ([DEPRECATED] Legacy Browser Support) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\heildphpnddilhkemkielfhnkaagiabh [2020-05-29]
CHR Extension: (Row Highlighter for Gmail™ and Inbox™) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ijfolchflbmnfopmpmodilcelmdakbfl [2020-03-13]
CHR Extension: (Posta di Credem) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\kmhopmchchfpfdcdjodmpfaaphdclmlj [2020-05-22]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-03-13]
CHR Extension: (Google Hangouts) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2020-03-13]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-13]
CHR Extension: (Gmail) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-03-13]
CHR Extension: (Chrome Media Router) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-22]
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\System Profile [2020-04-22]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [820280 2020-03-16] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atiesrxx.exe [522256 2020-03-02] (Advanced Micro Devices, Inc. -> AMD)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-05-20] (Apple Inc. -> Apple Inc.)
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\83.0.4103.2\remoting_host.exe [72176 2020-04-03] (Google LLC -> Google Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [10612592 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)
S4 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [40080 2017-08-30] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S4 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S4 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [899264 2019-08-15] (McAfee, LLC -> McAfee, Inc.)
R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [83616 2017-12-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2325168 2020-02-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183992 2017-12-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 SamsungRapidSvc; C:\WINDOWS\System32\RAPID\SamsungRapidSvc.exe [28256 2015-09-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12054872 2019-10-10] (TeamViewer GmbH -> TeamViewer GmbH)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-05-23] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\NisSrv.exe [2484256 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MsMpEng.exe [103168 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe [495840 2018-01-26] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 61883; C:\WINDOWS\System32\drivers\61883.sys [70144 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
R3 amdgpio2; C:\WINDOWS\System32\drivers\amdgpio2.sys [45320 2019-08-17] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [24528 2019-08-17] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atikmdag.sys [65731088 2020-03-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atikmpag.sys [589840 2020-03-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [102824 2020-03-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AMDPCIDev; C:\WINDOWS\System32\drivers\AMDPCIDev.sys [32520 2020-04-12] (Advanced Micro Devices INC. -> Advanced Micro Devices)
S0 amdpsp; C:\WINDOWS\System32\drivers\amdpsp.sys [138064 2019-08-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriver1.0.0; C:\Program Files\AMD\RyzenMaster\bin\AMDRyzenMasterDriver.sys [70312 2017-03-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [93240 2018-02-04] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [33336 2018-02-04] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2016-12-26] (CHENGDU AOMEI Tech Co., Ltd. -> )
R3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [127936 2020-04-01] (Alcorlink Corp. -> )
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2020-04-19] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2020-04-19] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [108152 2019-11-18] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R1 CFRMD; C:\WINDOWS\System32\DRIVERS\CFRMD.sys [40224 2014-06-26] (Comodo Security Solutions, Inc. -> Windows (R) Win 7 DDK provider)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2018-06-17] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation -> EldoS Corporation)
R1 epp; C:\EEK\bin64\epp.sys [124552 2016-11-23] (Emsisoft Ltd -> Emsisoft Ltd)
S3 etdrv; C:\Windows\etdrv.sys [25640 2017-04-30] (Giga-Byte Technology -> Windows (R) Server 2003 DDK provider)
R0 EUBKMON; C:\WINDOWS\System32\drivers\EUBKMON.sys [62528 2018-01-03] (CHENGDU YIWO Tech Development Co., Ltd. -> )
S3 gdrv; C:\Windows\gdrv.sys [25640 2017-04-30] (Giga-Byte Technology -> Windows (R) Server 2003 DDK provider)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2017-04-30] (GIGA-BYTE TECHNOLOGY CO., LTD -> )
S3 hidkmdf; C:\WINDOWS\System32\drivers\hidkmdf.sys [14136 2014-10-25] (Wacom Technology Corp. -> Windows (R) Win 7 DDK provider)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-02-04] (Martin Malik - REALiX -> REALiX(tm))
S3 ipadtst; C:\Program Files (x86)\MSI\Super Charger\ipadtst_64.sys [20464 2013-11-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Windows (R) Win 7 DDK provider)
S3 ipadtst2; C:\Program Files (x86)\MSI\Super Charger\ipadtst2_64.sys [16336 2016-07-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 LcUvcUpper; C:\WINDOWS\system32\DRIVERS\LcUvcUpper.sys [37912 2015-09-21] (Microsoft Corporation -> Microsoft Corporation)
S3 libusb0; C:\WINDOWS\System32\drivers\libusb0.sys [52832 2018-03-25] (Travis Lee Robinson -> hxxp://libusb-win32.sourceforge.net)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [52832 2017-01-12] (Travis Lee Robinson -> hxxp://libusb-win32.sourceforge.net)
R3 LifeCamTrueColor; C:\WINDOWS\system32\DRIVERS\LifeCamTrueColor.sys [37928 2016-07-27] (Microsoft Corporation -> Microsoft Corporation)
S3 NANMp50; C:\WINDOWS\System32\Drivers\NANMp50.sys [46776 2010-03-25] (PRINTING COMMUNICATIONS ASSOCIATES, INC -> Printing Communications Assoc., Inc. (PCAUSA))
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2014-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2017-08-03] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] (MiniTool Solution Ltd -> )
R0 SamsungRapidDiskFltr; C:\WINDOWS\System32\DRIVERS\SamsungRapidDiskFltr.sys [271968 2015-09-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R0 SamsungRapidFSFltr; C:\WINDOWS\System32\DRIVERS\SamsungRapidFSFltr.sys [110688 2015-09-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 se64a; C:\WINDOWS\System32\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan -> EnTech Taiwan)
S3 silabenm; C:\WINDOWS\system32\DRIVERS\silabenm.sys [23552 2014-12-01] (Silicon Laboratories) [File not signed]
S3 Spyder4; C:\WINDOWS\System32\drivers\dccmtr.sys [15360 2011-06-02] (Microsoft Windows Hardware Compatibility Publisher -> Datacolor)
S3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46440 2017-04-06] (SteelSeries ApS -> SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [28272 2020-06-04] (Adlice -> )
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-06-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [401120 2020-06-04] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-06-04] (Microsoft Windows -> Microsoft Corporation)
S3 WacHidRouter; \SystemRoot\System32\drivers\wachidrouter.sys [X]
S3 wacomrouterfilter; \SystemRoot\System32\drivers\wacomrouterfilter.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-04 23:17 - 2020-06-04 23:18 - 000059380 _____ C:\Users\MARCO\Desktop\FRST.txt
2020-06-04 23:09 - 2020-06-04 23:09 - 014178840 _____ (Malwarebytes Corp.) C:\Users\MARCO\Desktop\mbar-1.10.3.1001.exe
2020-06-04 23:07 - 2020-06-04 23:18 - 000000000 ____D C:\FRST
2020-06-04 23:06 - 2020-06-04 23:07 - 002289152 _____ (Farbar) C:\Users\MARCO\Desktop\FRST64.exe
2020-06-04 23:03 - 2020-06-04 23:03 - 000028272 _____ C:\WINDOWS\system32\Drivers\truesight.sys
2020-06-04 22:55 - 2020-06-04 22:58 - 000003170 _____ C:\WINDOWS\system32\Tasks\AdwCleaner_onReboot
2020-06-04 22:41 - 2020-06-04 22:41 - 000000000 ____D C:\Malwarebytes
2020-06-04 22:07 - 2020-06-04 22:07 - 000525223 _____ C:\Users\MARCO\Desktop\Invoice_IRusFBAeWroAAAFwtnJsQZLr_99.pdf
2020-06-03 19:29 - 2020-06-03 19:29 - 011858009 _____ C:\Users\MARCO\Desktop\libro genealogico mosca.pdf
2020-06-03 01:06 - 2020-06-03 01:07 - 000000146 _____ C:\Users\MARCO\Desktop\FAMILYSEARCH ALBERO.url
2020-06-02 22:32 - 2020-06-02 22:32 - 000671904 _____ C:\Users\MARCO\Desktop\Preventivo per progetto Seo agrinova - Copia.pptx
2020-06-01 09:42 - 2020-06-01 09:42 - 000000000 ____D C:\Users\MARCO\AppData\Local\Apowersoft
2020-06-01 09:42 - 2020-06-01 09:42 - 000000000 ____D C:\ProgramData\Apowersoft
2020-05-31 18:27 - 2020-05-31 21:02 - 000045568 _____ C:\Users\MARCO\Desktop\nonrinnovati2019savonasede.xls
2020-05-31 00:16 - 2020-05-31 00:16 - 011593518 _____ C:\Users\MARCO\Desktop\000023_99020410b655ddew1eb42h.pdf
2020-05-29 18:13 - 2020-05-29 18:13 - 000671408 _____ C:\Users\MARCO\Desktop\Preventivo per progetto Seo agrinova.pptx
2020-05-29 12:36 - 2020-05-29 12:36 - 008389966 _____ C:\Users\MARCO\Desktop\000019_521540ese5e04f8re8c6dg.pdf
2020-05-29 09:07 - 2020-05-29 09:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2020-05-29 09:06 - 2020-05-29 09:06 - 000001816 _____ C:\Users\Public\Desktop\iTunes.lnk
2020-05-29 09:06 - 2020-05-29 09:06 - 000001816 _____ C:\ProgramData\Desktop\iTunes.lnk
2020-05-29 09:06 - 2020-05-29 09:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2020-05-29 09:06 - 2020-05-29 09:06 - 000000000 ____D C:\Program Files\iTunes
2020-05-29 09:06 - 2020-05-29 09:06 - 000000000 ____D C:\Program Files\iPod
2020-05-26 19:50 - 2020-05-26 19:50 - 000001138 _____ C:\Users\MARCO\Desktop\RootsMagic 7 To-Go.lnk
2020-05-26 19:50 - 2020-05-26 19:50 - 000001118 _____ C:\Users\MARCO\Desktop\RootsMagic 7.lnk
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\RootsMagic
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\ProgramData\RootsMagic Shared
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\ProgramData\RootsMagic
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RootsMagic 7
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\Program Files (x86)\RootsMagic 7
2020-05-26 18:58 - 2020-05-26 18:58 - 000330484 _____ C:\Users\MARCO\Desktop\volantino covid.pdf
2020-05-24 13:13 - 2020-05-25 10:35 - 000000951 _____ C:\WINDOWS\Tasks\EPSON XP-760 Series Update {52559C3C-E97D-4537-BE5A-DB1B101B08C8}.job
2020-05-24 13:13 - 2020-05-24 13:13 - 000004148 _____ C:\WINDOWS\system32\Tasks\EPSON XP-760 Series Update {52559C3C-E97D-4537-BE5A-DB1B101B08C8}
2020-05-24 13:13 - 2013-12-06 04:05 - 000179712 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\E_YLMBNJE.DLL
2020-05-24 13:13 - 2011-03-15 03:03 - 000083968 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\E_YD4BNJE.DLL
2020-05-24 13:13 - 2007-04-10 01:06 - 000010752 _____ (SEIKO EPSON CORP.) C:\WINDOWS\system32\E_GCINST.DLL
2020-05-24 11:57 - 2020-05-24 21:35 - 000000000 ____D C:\Users\MARCO\Desktop\mosca girgenti
2020-05-24 11:57 - 2020-05-24 11:57 - 000000000 ____D C:\Users\MARCO\Desktop\mosca lercara
2020-05-23 15:36 - 2020-05-23 15:36 - 000000212 _____ C:\Users\MARCO\Desktop\REGISTRI CHIESA PRIZZI.url
2020-05-23 12:33 - 2020-05-23 12:33 - 000000000 ____D C:\Users\Simone\AppData\Local\cache
2020-05-23 12:28 - 2020-05-23 12:28 - 000000000 ____D C:\Users\Simone\AppData\Local\ACD Systems
2020-05-19 16:01 - 2020-05-19 16:01 - 000002295 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2020-05-19 16:01 - 2020-05-19 16:01 - 000002283 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2020-05-19 16:01 - 2020-05-19 16:01 - 000002283 _____ C:\ProgramData\Desktop\Google Earth Pro.lnk
2020-05-16 11:47 - 2020-05-16 11:47 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Zoom
2020-05-16 11:47 - 2020-05-16 11:47 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2020-05-15 11:41 - 2020-05-15 11:41 - 000282844 _____ C:\Users\MARCO\Desktop\00508120094.pdf
2020-05-15 11:41 - 2020-05-15 11:41 - 000030581 _____ C:\Users\MARCO\Desktop\i0000007.pdf
2020-05-15 11:41 - 2020-05-15 11:41 - 000030360 _____ C:\Users\MARCO\Desktop\i0000003.pdf
2020-05-15 11:41 - 2020-05-15 11:41 - 000030299 _____ C:\Users\MARCO\Desktop\i0000702.pdf
2020-05-15 11:40 - 2020-05-15 11:40 - 000030480 _____ C:\Users\MARCO\Desktop\i0000339.pdf
2020-05-14 17:57 - 2020-05-14 17:57 - 000012519 _____ C:\Users\MARCO\Desktop\TESSERAMENTO 14-05-2020.xlsx
2020-05-14 10:04 - 2020-05-14 10:04 - 000000000 ___HD C:\OneDriveTemp
2020-05-13 15:51 - 2020-05-13 15:51 - 025902080 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 025444864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 022638592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 019851264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 019812352 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 018029056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 007822888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 007756800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 007267840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 007011840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 006710272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 006525936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 006291456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 006082808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 005911040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 005757872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 005340568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 005098352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 004858368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 004612608 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 003822080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 003513856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 002798592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-05-13 15:51 - 2020-05-13 15:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-05-13 15:51 - 2020-05-13 15:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-05-13 15:51 - 2020-05-13 15:51 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 002576896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 002259664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 002073176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001990576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001975808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001952872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001737216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001686016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001665720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001654952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001637376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001581056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001559040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pla.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001556200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001539072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001507328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pla.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001492480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001477112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001461760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001414144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001397560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 001393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001344000 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001343488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001306112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001250816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001214264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001178608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001151824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001125376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CBDHSvc.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001099600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 001071616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001034752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001011712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000994304 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000943640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000896000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000894016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000891392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000852992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000843576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000807936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000801832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000792808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000782336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000778552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000776792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000748544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000747832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000683288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000673456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000672944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmIndexer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000655360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000614400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000602224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000600064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000592944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000581544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.applicationmodel.datatransfer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000572200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000568136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000564480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000553664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000540200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000539184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000530944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.PredictionUnit.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000501200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000466344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000451584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000441584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000418816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000410624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.Phone.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000405424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\umrdp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000354816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000345016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneOm.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000325432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-05-13 15:51 - 2020-05-13 15:51 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000301064 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpendp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000299064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TaskApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.ESim.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000273744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbroker.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PickerPlatform.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000268008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000262848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpendp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConsoleLogon.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000246584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchangeHost.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.SystemManagement.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-05-13 15:51 - 2020-05-13 15:51 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vaultcli.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000197432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-05-13 15:51 - 2020-05-13 15:51 - 000185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinput.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Clipboard.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsentUxClient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000165176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Devices.Sensors.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\useractivitybroker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000139952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityRuntime.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000124504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\socialapis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000105840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MixedRealityRuntime.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.RetailInfo.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000099104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Display.BrightnessOverride.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraCaptureUI.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000090936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.Preview.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeopleAPIs.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSSessionUX.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DiagnosticInvoker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbussdapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coloradapterclient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSa.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddrawex.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSa.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaProxy.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaProxy.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\plasrv.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-05-13 15:50 - 2020-05-13 15:50 - 017791488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 014819328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 009929528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 009339392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 007902912 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 007297536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 007257816 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 006435328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 006232568 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 006168576 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 005945856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 005280192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 005111296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 004624880 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 004565456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 004012032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 004005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003974376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 003807232 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003747328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003727360 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003655680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003581752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 003371416 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 002854400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002774088 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002769000 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002760704 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 002736640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002717184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 002504440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002465792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002448712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002354688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002289152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002284032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002256384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002157056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002150232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002147328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002087168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002072576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002060800 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001999968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001945600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001943040 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001934824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001825280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001786880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001766400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001745208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001656904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001646552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001510912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001498624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001486336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001428480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001413712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001406464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001393960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001391104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001385176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001375232 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001373184 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001370112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001346048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001336832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001333248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001306424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001288648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001282560 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001270784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001263616 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001222656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001218560 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001213440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001184256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001182208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001158144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001154656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001150784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 001132544 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Signals.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001092096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001085752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001072128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001059328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001048480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001027816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001023128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001007928 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001007104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001005056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000999616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000979264 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000975360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000957056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000945192 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000916768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000915192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000911872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000891544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000888352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000881664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000879064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000861696 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000859944 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000854528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000847872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000847168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000824832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000819696 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.applicationmodel.datatransfer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000819200 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000796904 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000781312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000777840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000768000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000759808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000752584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000742200 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000738304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000716800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000716312 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000706544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000693672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000685368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000683848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000676072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000673296 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000650240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000639400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000637480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000634680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2020-05-13 15:50 - 2020-05-13 15:50 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000628024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000622592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000614400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000594472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000580608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000573952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000569856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000547992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000543824 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000540160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.UserService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000526848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000524208 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000513024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000513024 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000512512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-05-13 15:50 - 2020-05-13 15:50 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000460200 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneOm.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000441856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.ESim.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000410608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000399672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000390968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000386320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000380632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManager.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000375520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\PickerPlatform.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000339824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountWAMExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Cortana.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000333128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000318680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000310928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000306496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposerFramework.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000278080 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000273208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopSwitcherDataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000266552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemSettings.DataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000260328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000250696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\PasswordEnrollmentManager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000245336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000238904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Devices.Sensors.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000231912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000221496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MtcModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000209208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\useractivitybroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SwitcherDataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Internal.Input.ExpressiveInput.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Haptics.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.CapturePicker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000152416 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoipRT.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000147776 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadWamExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000142760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\socialapis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Haptics.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000132712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Display.BrightnessOverride.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredDialogBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraCaptureUI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CaptureService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeopleAPIs.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000117048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadWamExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSAssessment.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoipRT.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000107616 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.Preview.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticInvoker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000088280 _____ (Microsoft Corporation) C:\WINDOWS\system32\coloradapterclient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbussdapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000073024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000069704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000068408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Printers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000066832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000060432 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000059192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000058696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ffbroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddrawex.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsUsbGDCoInstaller.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\TsUsbGD.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSaveTask.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregtask.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsregtask.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\localui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2020-05-12 21:58 - 2020-05-12 21:58 - 000000000 ____D C:\Users\MARCO\AppData\Local\Globalscape
2020-05-12 21:58 - 2020-05-12 21:58 - 000000000 ____D C:\ProgramData\Globalscape
2020-05-12 21:56 - 2020-05-12 21:56 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Globalscape
2020-05-12 21:56 - 2020-05-12 21:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Globalscape
2020-05-12 21:55 - 2020-05-12 21:55 - 000000000 ____D C:\Program Files (x86)\Globalscape
2020-05-12 21:28 - 2020-05-12 21:28 - 000000325 _____ C:\Users\MARCO\mail.php
2020-05-12 21:24 - 2020-05-12 21:30 - 000068159 _____ C:\Users\MARCO\index.html
2020-05-07 13:00 - 2020-05-07 13:13 - 000000000 ____D C:\Users\MARCO\Desktop\FILMATI SARA
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-04 23:05 - 2019-08-17 22:10 - 001764224 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-04 23:05 - 2019-03-19 14:33 - 000782874 _____ C:\WINDOWS\system32\perfh010.dat
2020-06-04 23:05 - 2019-03-19 14:33 - 000147392 _____ C:\WINDOWS\system32\perfc010.dat
2020-06-04 23:05 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-06-04 23:01 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-06-04 23:01 - 2014-12-12 00:43 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-06-04 23:00 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-06-04 23:00 - 2014-11-17 00:30 - 000000000 ____D C:\Users\MARCO\AppData\Local\Adobe
2020-06-04 22:59 - 2020-04-01 12:23 - 000003126 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2020-06-04 22:59 - 2020-04-01 11:16 - 000003112 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2020-06-04 22:59 - 2019-08-17 22:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-04 22:59 - 2018-08-28 23:09 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-06-04 22:58 - 2019-03-19 06:37 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2020-06-04 22:58 - 2017-05-21 00:19 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2020-06-04 22:49 - 2020-04-19 12:56 - 000000000 ____D C:\Users\MARCO\AppData\LocalLow\IGDump
2020-06-04 22:38 - 2019-08-17 22:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2020-06-04 22:38 - 2019-08-17 20:54 - 000000000 ____D C:\Users\MARCO
2020-06-04 22:38 - 2015-01-11 18:02 - 000000000 ____D C:\ProgramData\NCH Software
2020-06-04 22:33 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-06-04 21:30 - 2019-08-17 21:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-06-04 20:37 - 2019-10-05 00:41 - 000000000 ____D C:\Program Files (x86)\Ezviz Studio
2020-06-04 19:37 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-06-04 19:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-06-04 19:37 - 2017-12-03 20:14 - 000000000 ____D C:\Users\MARCO\AppData\Local\Packages
2020-06-04 14:47 - 2018-02-28 21:18 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-06-04 14:44 - 2014-11-16 20:41 - 000000000 ___RD C:\Users\MARCO\OneDrive
2020-06-04 14:38 - 2019-12-31 10:02 - 000000000 ____D C:\Users\MARCO\shipin7_update_temp
2020-06-04 14:37 - 2016-08-22 22:31 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\DisplayCAL
2020-06-03 13:35 - 2019-02-09 10:07 - 000000000 ___HD C:\adobeTemp
2020-06-02 22:21 - 2019-08-17 22:21 - 000000000 ____D C:\Users\MARCO\AppData\Local\Deployment
2020-06-02 21:26 - 2014-12-12 00:57 - 000000000 ____D C:\Users\MARCO\AppData\Local\CrashDumps
2020-06-01 21:25 - 2019-10-03 13:26 - 000003522 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2020-06-01 11:35 - 2018-05-19 10:31 - 000000000 ____D C:\Users\MARCO\AppData\Local\D3DSCache
2020-06-01 09:53 - 2015-01-11 18:02 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\NCH Software
2020-06-01 09:47 - 2018-05-26 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apowersoft
2020-06-01 09:42 - 2018-05-26 14:01 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Apowersoft
2020-05-30 01:31 - 2019-08-17 22:12 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1801797792-2963998745-2400400606-1001
2020-05-30 01:31 - 2019-08-17 20:54 - 000002470 _____ C:\Users\MARCO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-05-27 11:15 - 2018-01-14 23:52 - 000000000 ____D C:\Users\MARCO\AppData\Local\PlaceholderTileLogoFolder
2020-05-24 13:12 - 2017-06-22 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2020-05-23 15:42 - 2017-05-03 12:43 - 000000000 ____D C:\Users\Simone\AppData\Roaming\DisplayCAL
2020-05-23 12:32 - 2018-08-13 19:27 - 000000000 ____D C:\Users\Simone\AppData\Local\AMD
2020-05-23 12:28 - 2019-08-17 22:12 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1801797792-2963998745-2400400606-1007
2020-05-23 12:28 - 2019-08-17 20:54 - 000002473 _____ C:\Users\Simone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-05-23 12:28 - 2018-06-13 11:40 - 000000000 ____D C:\Users\Simone\AppData\Local\D3DSCache
2020-05-23 12:28 - 2017-12-03 20:13 - 000000000 ____D C:\Users\Simone\AppData\Local\Packages
2020-05-23 12:28 - 2017-05-03 12:43 - 000000000 ___RD C:\Users\Simone\OneDrive
2020-05-23 12:28 - 2015-09-29 20:46 - 000000000 ____D C:\Users\Simone\AppData\Local\Adobe
2020-05-23 12:27 - 2018-02-28 21:18 - 000000000 ___RD C:\Users\Simone\3D Objects
2020-05-23 12:27 - 2016-04-27 07:40 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-05-23 12:27 - 2015-09-29 20:47 - 000002334 _____ C:\Users\Simone\Desktop\Google Chrome.lnk
2020-05-23 12:19 - 2018-07-07 17:30 - 000000000 ____D C:\Users\MARCO\Desktop\SIMONE MOSCA
2020-05-22 14:06 - 2018-02-04 11:33 - 000000000 ____D C:\Users\MARCO\AppData\Local\ElevatedDiagnostics
2020-05-22 10:35 - 2014-11-16 21:22 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-05-19 16:01 - 2014-11-16 21:21 - 000000000 ____D C:\Program Files (x86)\Google
2020-05-17 20:16 - 2020-02-10 21:35 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Loom
2020-05-14 21:23 - 2014-12-04 23:54 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-05-14 00:10 - 2020-05-03 21:56 - 000000000 ____D C:\Users\MARCO\.atom
2020-05-13 20:26 - 2019-08-17 21:58 - 000662888 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-05-13 20:26 - 2017-12-04 20:22 - 000000000 ___RD C:\Users\MARCO\3D Objects
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\TextInput
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Provisioning
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-05-13 20:24 - 2019-03-19 06:52 - 000000000 ____D C:\PerfLogs
2020-05-13 19:22 - 2014-12-30 00:46 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\FileZilla
2020-05-13 16:00 - 2014-11-18 21:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-05-13 15:57 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-05-13 15:57 - 2014-11-18 21:06 - 120636720 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-05-13 15:50 - 2019-08-17 21:59 - 002874880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-05-13 15:32 - 2014-11-17 00:55 - 000000000 ____D C:\Program Files\Common Files\Adobe
2020-05-12 21:56 - 2014-11-16 22:23 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2020-05-12 21:54 - 2017-05-21 00:20 - 000000000 ____D C:\ProgramData\Package Cache
2020-05-12 17:46 - 2020-05-03 21:56 - 000002226 _____ C:\Users\MARCO\Desktop\Atom.lnk
2020-05-12 17:46 - 2020-05-03 21:56 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2020-05-12 17:46 - 2020-05-03 21:55 - 000000000 ____D C:\Users\MARCO\AppData\Local\atom
2020-05-12 17:46 - 2018-05-18 23:35 - 000000000 ____D C:\Users\MARCO\AppData\Local\SquirrelTemp
2020-05-11 23:54 - 2020-02-22 18:06 - 000011547 _____ C:\Users\MARCO\Desktop\lista prenotati rifugio.xlsx
2020-05-07 17:03 - 2018-08-30 22:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
==================== Files in the root of some directories ========
2017-03-12 11:43 - 2017-03-13 23:19 - 000021368 _____ (Schneider Electric) C:\Users\MARCO\en_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021368 _____ (Schneider Electric) C:\Users\MARCO\es_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021880 _____ (Schneider Electric) C:\Users\MARCO\fr_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021880 _____ (Schneider Electric) C:\Users\MARCO\grm_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021368 _____ (Schneider Electric) C:\Users\MARCO\it_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000020344 _____ (Schneider Electric) C:\Users\MARCO\jp_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 001079808 _____ (Microsoft Corporation) C:\Users\MARCO\mfc80u.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000626688 _____ (Microsoft Corporation) C:\Users\MARCO\msvcr80.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021368 _____ (Schneider Electric) C:\Users\MARCO\pt_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000018808 _____ () C:\Users\MARCO\ResourceReader.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000020856 _____ (Schneider Electric) C:\Users\MARCO\ru_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000019832 _____ (Schneider Electric) C:\Users\MARCO\zh_res.dll
2016-04-23 14:46 - 2016-05-17 17:16 - 000003072 _____ () C:\Users\MARCO\AppData\Roaming\Album Studio 1.0 Prefsv3
2018-04-08 13:20 - 2018-04-08 13:20 - 005082084 _____ (The Public) C:\Users\MARCO\AppData\Roaming\Avisynth.exe
2018-04-08 13:20 - 2018-04-08 13:20 - 005243208 _____ ( ) C:\Users\MARCO\AppData\Roaming\AvsP.exe
2016-10-07 22:56 - 2016-10-07 22:56 - 000000057 _____ () C:\Users\MARCO\AppData\Roaming\Camdata.ini
2016-10-07 22:56 - 2016-10-07 22:56 - 000000408 _____ () C:\Users\MARCO\AppData\Roaming\CamLayout.ini
2016-10-07 22:56 - 2016-10-07 22:56 - 000000408 _____ () C:\Users\MARCO\AppData\Roaming\CamShapes.ini
2016-10-07 22:56 - 2016-10-07 22:56 - 000004545 _____ () C:\Users\MARCO\AppData\Roaming\CamStudio.cfg
2016-10-07 22:41 - 2016-10-07 22:51 - 000000000 _____ () C:\Users\MARCO\AppData\Roaming\CamStudio.Producer.Data.ini
2016-10-07 22:41 - 2016-10-07 22:51 - 000001205 _____ () C:\Users\MARCO\AppData\Roaming\CamStudio.Producer.ini
2018-04-08 13:20 - 2018-04-08 13:20 - 002169915 _____ (LIGHTNING UK!) C:\Users\MARCO\AppData\Roaming\Imgburn.exe
2018-06-16 16:13 - 2018-06-16 16:13 - 000099384 _____ () C:\Users\MARCO\AppData\Roaming\inst.exe
2014-11-17 23:06 - 2015-02-11 22:51 - 000000028 _____ () C:\Users\MARCO\AppData\Roaming\kulerdata.json
2018-12-10 22:34 - 2018-12-12 22:05 - 000001118 _____ () C:\Users\MARCO\AppData\Roaming\loch.ini
2018-04-08 13:20 - 2018-04-08 13:20 - 001357348 _____ () C:\Users\MARCO\AppData\Roaming\MatroskaSplitter.exe
2018-06-16 16:13 - 2018-06-16 16:13 - 000007859 _____ () C:\Users\MARCO\AppData\Roaming\pcouffin.cat
2018-06-16 16:13 - 2018-06-16 16:13 - 000001167 _____ () C:\Users\MARCO\AppData\Roaming\pcouffin.inf
2018-06-16 16:13 - 2018-06-16 16:13 - 000000055 _____ () C:\Users\MARCO\AppData\Roaming\pcouffin.log
2018-06-16 16:13 - 2018-06-16 16:13 - 000082816 _____ (VSO Software) C:\Users\MARCO\AppData\Roaming\pcouffin.sys
2018-04-08 13:20 - 2018-04-08 13:20 - 007760687 _____ (Boraxsoft) C:\Users\MARCO\AppData\Roaming\SetupGFD.exe
2015-01-11 19:12 - 2015-01-11 19:12 - 000001167 _____ () C:\Users\MARCO\AppData\Roaming\trace_FilterInstaller.1.txt
2015-01-11 19:12 - 2018-08-21 21:11 - 000000905 _____ () C:\Users\MARCO\AppData\Roaming\trace_FilterInstaller.txt
2015-01-11 19:12 - 2018-08-21 21:11 - 000000000 _____ () C:\Users\MARCO\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2014-12-07 01:31 - 2014-12-29 15:30 - 000022033 _____ () C:\Users\MARCO\AppData\Roaming\Valori separati da virgola.ADR
2016-10-07 22:40 - 2020-04-18 23:02 - 000000096 _____ () C:\Users\MARCO\AppData\Roaming\version2.xml
2018-04-08 13:20 - 2018-04-08 13:20 - 000117723 _____ () C:\Users\MARCO\AppData\Roaming\yuvcodecs-1.3.exe
2014-12-03 01:43 - 2020-04-30 18:16 - 000001456 _____ () C:\Users\MARCO\AppData\Local\Adobe Salva per Web e dispositivi 13.0 Prefs
2020-04-01 16:25 - 2020-04-01 16:25 - 000000357 _____ () C:\Users\MARCO\AppData\Local\karboncalligraphyrc
2020-04-01 16:22 - 2020-04-01 16:27 - 000002449 _____ () C:\Users\MARCO\AppData\Local\krita-sysinfo.log
2020-04-01 16:22 - 2020-04-01 16:31 - 000001035 _____ () C:\Users\MARCO\AppData\Local\krita.log
2020-04-01 16:31 - 2020-04-01 16:31 - 000000039 _____ () C:\Users\MARCO\AppData\Local\kritadisplayrc
2020-04-01 16:22 - 2020-04-01 16:31 - 000016053 _____ () C:\Users\MARCO\AppData\Local\kritarc
2018-09-28 09:04 - 2018-09-28 09:04 - 000000000 _____ () C:\Users\MARCO\AppData\Local\oobelibMkey.log
2019-06-26 12:26 - 2020-02-28 00:36 - 000000128 _____ () C:\Users\MARCO\AppData\Local\PUTTY.RND
2018-07-29 23:53 - 2018-07-29 23:53 - 000000218 _____ () C:\Users\MARCO\AppData\Local\recently-used.xbel
2017-06-11 00:41 - 2017-06-24 19:42 - 000007609 _____ () C:\Users\MARCO\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Ran by MARCO (administrator) on MARCO_GABRIELLA (Micro-Star International Co., Ltd. MS-7A34) (04-06-2020 23:17:25)
Running from C:\Users\MARCO\Desktop
Loaded Profiles: MARCO
Platform: Windows 10 Home Version 1909 18363.836 (X64) Language: Italiano (Italia)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ACD Systems International Inc. -> ) C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ACDSeeCommanderUltimate13.exe
(ACD Systems International Inc. -> ACD Systems) C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\acdIDInTouch2.exe
(Adlice -> ) C:\Users\MARCO\AppData\Local\Microsoft\Windows\INetCache\IE\6QA4XVGM\RogueKiller_portable64.exe
(Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <4>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atiesrxx.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(EZVIZ Inc. -> ) C:\Program Files (x86)\hicloud\update_server\SPUpDateServer.exe
(EZVIZ Inc. -> ) C:\Program Files (x86)\hicloud\update_server\startUp.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe <6>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\MKCHelper.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\NisSrv.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(Node.js Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(Open Source Developer, Florian Höch -> ) C:\Program Files (x86)\DisplayCAL\DisplayCAL-apply-profiles.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\RAPID\SamsungRapidSvc.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATINJE.EXE
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [VX3000] => C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [SamsungRapidApp] => C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [281696 2015-09-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9277520 2020-04-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [ACUW13EN] => C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\acdIDInTouch2.exe [2128856 2019-11-28] (ACD Systems International Inc. -> ACD Systems)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302392 2020-05-20] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1852264 2014-05-23] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [X_Boost] => C:\Program Files (x86)\MSI\MSI X Boost\X_Boost.exe [4225696 2017-12-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2042424 2020-03-16] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [SPUpDateServerrun] => C:\Program Files (x86)\hicloud\update_server\startUp.exe [14832 2015-09-10] (EZVIZ Inc. -> )
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26310832 2020-02-06] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [98CA5D2E7C86B53A6751090CFC1EC8C74B51B24E._service_run] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service /prefetch:8
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATINJE.EXE [298560 2013-12-16] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-05-07] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [48214752 2020-04-06] (Google LLC -> )
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91591032 2020-04-14] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [com.squirrel.WhatsApp.WhatsApp] => C:\Users\MARCO\AppData\Local\WhatsApp\Update.exe [2253232 2019-08-08] (WhatsApp, Inc -> )
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [648328 2020-04-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [Google Update] => C:\Users\MARCO\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-20] (Google LLC -> Google LLC)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Run: [ACDSeeCommanderUltimate13] => C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ACDSeeCommanderUltimate13.exe [4989088 2020-04-10] (ACD Systems International Inc. -> )
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session -- hxxps://www.familysearch.org/ark:/61903/ (the data entry has 82 more characters).
HKLM\...\Windows x64\Print Processors\Canon MX920 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBL.DLL [30208 2012-09-20] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor MX920 series: C:\WINDOWS\system32\CNCALBL.DLL [303104 2012-09-21] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5200 series: C:\WINDOWS\system32\CNMLMAE.DLL [385024 2012-03-14] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5200 series XPS: C:\WINDOWS\system32\CNMXLMAE.DLL [385024 2012-03-14] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJ Language Monitor MX920 series: C:\WINDOWS\system32\CNMLMBL.DLL [390656 2012-09-20] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [359936 2012-07-31] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\EPSON XP-760 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBNJE.DLL [179712 2013-12-06] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.61\Installer\chrmstp.exe [2020-05-22] (Google LLC -> Google LLC)
Startup: C:\Users\MARCO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Invia a OneNote.lnk [2019-02-10]
ShortcutTarget: Invia a OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {01935E2D-83C0-4186-A83D-04851965BC23} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124752 2020-05-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {06C000EB-4C1D-4706-838C-ED44E1A6F8E7} - System32\Tasks\Nahimic2Svc32Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe
Task: {0C8851C4-D40B-4937-B11C-B78BBDF92CBB} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2558224 2018-07-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {15C4DF43-2029-48EF-91E2-F173DC86CFAA} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {183FF4BA-8D43-4B75-BC7B-D6DC04245F68} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124752 2020-05-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {31A22761-988E-46FC-A32F-99D20E498D19} - System32\Tasks\NahimicVRSvc32Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe
Task: {3436A99B-1B69-4AB1-9A2A-D3EFC8D8E77B} - System32\Tasks\EPSON XP-760 Series Update {52559C3C-E97D-4537-BE5A-DB1B101B08C8} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNJE.EXE [690536 2013-11-22] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {343D7F39-191C-46F6-ACE2-7C7CBB637302} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-info@moscamarco.it => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {39596E25-D557-4F12-87F3-370A4184FEE2} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [1628160 2020-02-29] (Advanced Micro Devices, Inc.) [File not signed]
Task: {3A6C493A-EF58-44AA-8F4F-5EFC044D0B65} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {46B9485E-49B6-4473-8D04-8F1B8D6D9504} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1628160 2020-02-29] (Advanced Micro Devices, Inc.) [File not signed]
Task: {47509DEA-E685-4478-B413-0C0850F09628} - System32\Tasks\AdobeAAMUpdater-1.0-Marco_Gabriella-Administrator => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {4ADE4881-E38A-4173-8806-FFD575A459AE} - System32\Tasks\Driver Easy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [3660232 2020-02-17] (Easeware Technology Limited -> Easeware)
Task: {4E319D8E-B9FB-43C1-9B47-146BE176634F} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772552 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [32256 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
Task: {5D92FAFE-E339-4254-BC80-0E951C554C7D} - System32\Tasks\DisplayCAL Profile Loader Launcher => C:\Program Files (x86)\DisplayCAL\DisplayCAL-apply-profiles-launcher.exe [178064 2019-08-14] (Open Source Developer, Florian Höch -> )
Task: {5E726731-83B7-44A4-8740-29B55137D513} - System32\Tasks\NahimicVRSvc64Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe
Task: {6232243B-9F7B-4016-838A-9ECBACCFA9B0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1801797792-2963998745-2400400606-1001UA => C:\Users\MARCO\AppData\Local\Google\Update\GoogleUpdate.exe [156104 2020-03-12] (Google LLC -> Google LLC)
Task: {6DCE6212-F83A-4EB4-92D7-E461CE5A758D} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [1992936 2018-07-19] (Microsoft Corporation -> Microsoft)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {7178D70A-077C-4EEA-AA4F-A1EFDC2391B1} - System32\Tasks\AdobeAAMUpdater-1.0-Marco_Gabriella-gabriella => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {7F352A8D-7B6E-4B17-87F1-7D92CE3107DB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {83BE9BF4-DE0D-41D4-90B1-532CECB7CD69} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {9285967F-2948-4BF8-A451-46295DAA5D71} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {95CEBFE5-2161-4258-A855-73E45001E973} - System32\Tasks\Nahimic2UILauncherRun => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
Task: {98744587-37AE-4607-B3D0-E8F4BB1B72E6} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1628160 2020-02-29] (Advanced Micro Devices, Inc.) [File not signed]
Task: {9BB3B6E6-A32A-47B2-B0D1-9644CF0E1914} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [67688 2020-02-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {9CB01280-8246-4DCF-8F18-9A0EB00EC08F} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1919760 2018-07-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {9D5800A6-471B-40DB-BF81-BA330A624E27} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {9D977EF9-385A-4748-8733-A5F1FA9C3901} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2558224 2018-07-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {9E5CC968-C634-44FD-8FA2-7125CC10703B} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60008 2020-02-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {9FC899F8-3F9E-48B0-A817-6C57591B1D66} - System32\Tasks\{79A8B2BC-9D7D-4BDB-863F-0DBC60B7C457} => C:\WINDOWS\system32\pcalua.exe -a L:\GDFWIN.EXE -d L:\
Task: {A487705F-F7CA-4EFC-939D-2D85FE67DF10} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {AADAB735-B6DF-489F-880F-E4B88C486BC0} - System32\Tasks\AMD ThankingURL => C:\Program Files\AMD\CIM\Bin64\Setup.exe [1122920 2020-02-29] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {ADB04A08-F010-4D54-B454-AA06E411CCE2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772552 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {B812C965-0C67-4029-A5C4-B5281E3C5EE0} - System32\Tasks\AdwCleaner_onReboot => C:\Users\MARCO\Desktop\adwcleaner_8.0.5.exe
Task: {B8C52CCD-8B21-42FA-A382-D08A3539A23E} - System32\Tasks\Microsoft_MKC_Logon_Task_ceip.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ceip.exe [39664 2018-07-19] (Microsoft Corporation -> Microsoft)
Task: {C0EBD2D6-387D-443D-98C8-04EDC3380A92} - System32\Tasks\{58632460-3527-457D-A7E1-537C5C4170C0} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.32.0.104/it/abandoninstall?page=tsProgressBar
Task: {CB23FD0F-A499-4A5C-8DF5-DD3DD58AB51B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1801797792-2963998745-2400400606-1001Core => C:\Users\MARCO\AppData\Local\Google\Update\GoogleUpdate.exe [156104 2020-03-12] (Google LLC -> Google LLC)
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {D0E82C16-0488-4FF9-8A60-66E395E85EFB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D1C2C80E-0B37-47DE-BF90-98B1C694BAF3} - System32\Tasks\Nahimic2Svc64Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe
Task: {D31B17BF-FB88-481D-B3E0-1D4AF444818C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DAB91240-CEDF-455A-9877-DEC22DE2818F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4357016 2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {DE7334D1-77BF-4270-9C73-206FBB707D2E} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [6206048 2016-05-13] (Samsung Electronics Co., Ltd. -> Samsung Electronics.)
Task: {E3DBEE7C-9013-49BB-AD0D-ACAE720C792C} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1919760 2018-07-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4865F8F-9F90-4CDE-AC52-F2CCD977E985} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {FA5F4543-EF10-4868-84E5-4C4A497965BC} - System32\Tasks\UMonitor Task => C:\WINDOWS\SysWOW64\UMonit.exe
Task: {FFBB8D33-6563-44D3-BD58-BE053F88B139} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4357016 2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\Driver Easy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\WINDOWS\Tasks\EPSON XP-760 Series Update {52559C3C-E97D-4537-BE5A-DB1B101B08C8}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNJE.EXE:/EXE:{52559C3C-E97D-4537-BE5A-DB1B101B08C8} /F:UpdateWORKGROUP\MARCO_GABRIELLA$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{61402573-0713-4884-8ac4-83be55914fcb}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{72eaa5ae-7354-41e8-975a-3e1ea37060bc}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{72eaa5ae-7354-41e8-975a-3e1ea37060bc}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.it/
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-01-12] (Microsoft Corporation -> Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2019-08-15] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2020-01-12] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-05-02] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2019-08-15] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-05-02] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-04] (Microsoft Corporation -> Microsoft Corporation)
Edge:
======
DownloadDir: D:\downloads
FireFox:
========
FF DefaultProfile: 3f25p9p8.default
FF ProfilePath: C:\Users\MARCO\AppData\Roaming\Mozilla\Firefox\Profiles\3f25p9p8.default [2020-04-19]
FF Homepage: Mozilla\Firefox\Profiles\3f25p9p8.default -> about:blank
FF NewTab: Mozilla\Firefox\Profiles\3f25p9p8.default -> about:blank
FF Extension: (Cookies Manager+) - C:\Users\MARCO\AppData\Roaming\Mozilla\Firefox\Profiles\3f25p9p8.default\Extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} [2018-01-03] [Legacy]
FF ProfilePath: C:\Users\MARCO\AppData\Roaming\kompozer.net\KompoZer\Profiles\ul291cqi.default [2018-01-03]
FF ProfilePath: C:\Users\MARCO\AppData\Roaming\KompoZer\Profiles\dn44yh4f.default [2018-01-03]
FF Extension: (No Name) - C:\Users\MARCO\AppData\Roaming\KompoZer\Profiles\dn44yh4f.default\Extensions\temp [2015-01-16] [not signed]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-08-15]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2017-06-22] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-05-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-05-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-12-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: @citrixonline.com/appdetectorplugin -> C:\Users\MARCO\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2016-12-16] (Citrix Online -> Citrix Online)
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\MARCO\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-05-16] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: LWAPlugin15.8 -> C:\Users\MARCO\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll [2013-03-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: SkypePlugin -> C:\Users\MARCO\AppData\Local\SkypePlugin\7.32.6.278\npGatewayNpapi.dll [2017-04-18] (Microsoft Corporation -> Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-1801797792-2963998745-2400400606-1001: SkypePlugin64 -> C:\Users\MARCO\AppData\Local\SkypePlugin\7.32.6.278\npGatewayNpapi-x64.dll [2017-04-18] (Microsoft Corporation -> Skype Technologies S.A.)
FF Plugin ProgramFiles/Appdata: C:\Users\MARCO\AppData\Roaming\mozilla\plugins\npLWAPlugin15.8.dll [2020-04-22]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default [2020-06-04]
CHR DownloadDir: D:\downloads
CHR Notifications: Default -> hxxps://divisoup.com; hxxps://drive.google.com; hxxps://gaana.com; hxxps://generatewp.com; hxxps://it.investing.com; hxxps://shop.gopro.com; hxxps://webeers-com.pushengage.com; hxxps://www.budgetair.it; hxxps://www.facebook.com; hxxps://www.gwa.areawmcredem.it; hxxps://www.piucodicisconto.com; hxxps://www.shoutmeloud.com; hxxps://www.tomshw.it
CHR HomePage: Default -> hxxp://www.google.it/
CHR StartupUrls: Default -> "hxxps://www.google.com/?trackid=sp-006"
CHR DefaultSearchKeyword: Default -> google.com_
CHR Extension: (Google Drive) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Chiamate Skype) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-10-09]
CHR Extension: (YouTube) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Attacat Cookie Audit Tool) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebhpmcfenjfodganapapakfnhichojh [2018-01-23]
CHR Extension: (Google Search) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
CHR Extension: (Clear Cache) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cppjkneekbjaeellbfkmgnhonkkjfpdn [2018-02-21]
CHR Extension: (Google Calendar) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-01-07]
CHR Extension: (Word Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2014-11-16]
CHR Extension: (Documenti Google offline) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-06-04]
CHR Extension: (Vysor) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\gidgenkbbabolejbgbpnhbimgjbffefm [2020-03-11]
CHR Extension: (Excel Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2014-11-16]
CHR Extension: (WhatFont) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2017-03-27]
CHR Extension: (Cashback IT-Bestshopping) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjandokkgclchaiipibaligpnceifmif [2020-05-22]
CHR Extension: (Vysor.com) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdphpklacmlhmooodiekhpbepcdlaghl [2018-05-18]
CHR Extension: (Powerpoint ppt to Swf) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\kljihkbpifdllhbhnlnhkkhdkkikcnba [2014-11-16]
CHR Extension: (Video DownloadHelper) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2020-04-02]
CHR Extension: (PowerPoint Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2014-11-16]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-11]
CHR Extension: (Gmail) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-03-11]
CHR Extension: (Chrome Media Router) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-22]
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-04-19]
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3 [2020-06-04]
CHR Notifications: Profile 3 -> hxxps://app.landbot.io; hxxps://calendar.google.com; hxxps://click-it-now.online; hxxps://dashboard.tawk.to; hxxps://en.savefrom.net; hxxps://firstsiteguide.com; hxxps://generatewp.com; hxxps://gopro.com; hxxps://gretaith.com; hxxps://guidatv.sky.it; hxxps://infinity-tv-by.accengage.net; hxxps://it.semrush.com; hxxps://meet.google.com; hxxps://pushcrew.com; hxxps://rankmath.com; hxxps://rinoverrop.pro; hxxps://s7.converto.io; hxxps://smallseotools.com; hxxps://watch-this.live; hxxps://web.skype.com; hxxps://web.whatsapp.com; hxxps://wordx.press; hxxps://www.autoparti.it; hxxps://www.facebook.com; hxxps://www.fotor.com; hxxps://www.minigiochi.com; hxxps://www.mp3hub.com; hxxps://www.pinterest.it; hxxps://www.sorgenia.it
CHR HomePage: Profile 3 -> hxxp://www.google.it/
CHR StartupUrls: Profile 3 -> "hxxps://www.google.com/?trackid=sp-006","hxxp://cartoonetuork.it/"
CHR Extension: (Presentazioni) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-03-26]
CHR Extension: (Documenti) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2018-03-26]
CHR Extension: (Google Drive) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-20]
CHR Extension: (SEO META in 1 CLICK) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bjogjfinolnhfhkbipphpdlldadpnmhc [2019-07-20]
CHR Extension: (YouTube) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-01]
CHR Extension: (Nimbus Screenshot & Screen Video Recorder) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bpconcjcammlapcogcnnelfmaeghhagj [2020-03-22]
CHR Extension: (Google Calendar) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-08-01]
CHR Extension: (Fogli) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-03-26]
CHR Extension: (Word Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2017-08-01]
CHR Extension: (Page load time) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fploionmjgeclbkemipmkogoaohcdbig [2019-09-05]
CHR Extension: (Documenti Google offline) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-19]
CHR Extension: (Open SEO Stats(Formerly: PageRank Status)) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hbdkkfheckcdppiaiabobmennhijkknn [2019-07-04]
CHR Extension: (Excel Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2017-08-01]
CHR Extension: (WhatFont) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2017-08-01]
CHR Extension: (Cashback IT-Bestshopping) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jjandokkgclchaiipibaligpnceifmif [2020-04-26]
CHR Extension: (Sorgenia) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ldadomeegcgcdjfcijngdjglflcghljg [2020-02-27]
CHR Extension: (PowerPoint Online) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2017-08-01]
CHR Extension: (TubeBuddy) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mhkhmbddkmdggbhaaaodilponhnccicb [2020-06-04]
CHR Extension: (Keepa - Amazon Price Tracker) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\neebplgakaahbhdphmkckjjcegoiijjo [2020-05-19]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]
CHR Extension: (Gmail) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-15]
CHR Extension: (Chrome Media Router) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-22]
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5 [2020-06-04]
CHR Notifications: Profile 5 -> hxxps://calendar.google.com; hxxps://mail.google.com; hxxps://meet.google.com; hxxps://www.gwa.areawmcredem.it
CHR DefaultSearchURL: Profile 5 -> hxxps://www.google.com/a/credem.it/images/favicon.ico
CHR Extension: (Presentazioni) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-03-13]
CHR Extension: (Documenti) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aohghmighlieiainnegkcijnfilokake [2020-03-13]
CHR Extension: (Google Drive) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-03-13]
CHR Extension: (Download emails from Google Mail) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\bgoogiccigaepmddcjallepklfgmdnef [2020-03-13]
CHR Extension: (YouTube) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-03-13]
CHR Extension: (Smooth Checkbox for Gmail™) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\egkhfllhmjihbfnkikpnbeeakllbobjl [2020-03-13]
CHR Extension: (Fogli) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-03-13]
CHR Extension: (Documenti Google offline) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-13]
CHR Extension: ([DEPRECATED] Legacy Browser Support) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\heildphpnddilhkemkielfhnkaagiabh [2020-05-29]
CHR Extension: (Row Highlighter for Gmail™ and Inbox™) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ijfolchflbmnfopmpmodilcelmdakbfl [2020-03-13]
CHR Extension: (Posta di Credem) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\kmhopmchchfpfdcdjodmpfaaphdclmlj [2020-05-22]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-03-13]
CHR Extension: (Google Hangouts) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2020-03-13]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-13]
CHR Extension: (Gmail) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-03-13]
CHR Extension: (Chrome Media Router) - C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-22]
CHR Profile: C:\Users\MARCO\AppData\Local\Google\Chrome\User Data\System Profile [2020-04-22]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [820280 2020-03-16] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atiesrxx.exe [522256 2020-03-02] (Advanced Micro Devices, Inc. -> AMD)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-05-20] (Apple Inc. -> Apple Inc.)
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\83.0.4103.2\remoting_host.exe [72176 2020-04-03] (Google LLC -> Google Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [10612592 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)
S4 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [40080 2017-08-30] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S4 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S4 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [899264 2019-08-15] (McAfee, LLC -> McAfee, Inc.)
R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [83616 2017-12-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2325168 2020-02-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183992 2017-12-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 SamsungRapidSvc; C:\WINDOWS\System32\RAPID\SamsungRapidSvc.exe [28256 2015-09-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12054872 2019-10-10] (TeamViewer GmbH -> TeamViewer GmbH)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-05-23] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\NisSrv.exe [2484256 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MsMpEng.exe [103168 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe [495840 2018-01-26] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 61883; C:\WINDOWS\System32\drivers\61883.sys [70144 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
R3 amdgpio2; C:\WINDOWS\System32\drivers\amdgpio2.sys [45320 2019-08-17] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [24528 2019-08-17] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atikmdag.sys [65731088 2020-03-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\u0352369.inf_amd64_275818c45a90b362\B352355\atikmpag.sys [589840 2020-03-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [102824 2020-03-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AMDPCIDev; C:\WINDOWS\System32\drivers\AMDPCIDev.sys [32520 2020-04-12] (Advanced Micro Devices INC. -> Advanced Micro Devices)
S0 amdpsp; C:\WINDOWS\System32\drivers\amdpsp.sys [138064 2019-08-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriver1.0.0; C:\Program Files\AMD\RyzenMaster\bin\AMDRyzenMasterDriver.sys [70312 2017-03-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [93240 2018-02-04] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [33336 2018-02-04] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2016-12-26] (CHENGDU AOMEI Tech Co., Ltd. -> )
R3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [127936 2020-04-01] (Alcorlink Corp. -> )
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2020-04-19] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2020-04-19] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [108152 2019-11-18] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R1 CFRMD; C:\WINDOWS\System32\DRIVERS\CFRMD.sys [40224 2014-06-26] (Comodo Security Solutions, Inc. -> Windows (R) Win 7 DDK provider)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2018-06-17] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation -> EldoS Corporation)
R1 epp; C:\EEK\bin64\epp.sys [124552 2016-11-23] (Emsisoft Ltd -> Emsisoft Ltd)
S3 etdrv; C:\Windows\etdrv.sys [25640 2017-04-30] (Giga-Byte Technology -> Windows (R) Server 2003 DDK provider)
R0 EUBKMON; C:\WINDOWS\System32\drivers\EUBKMON.sys [62528 2018-01-03] (CHENGDU YIWO Tech Development Co., Ltd. -> )
S3 gdrv; C:\Windows\gdrv.sys [25640 2017-04-30] (Giga-Byte Technology -> Windows (R) Server 2003 DDK provider)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2017-04-30] (GIGA-BYTE TECHNOLOGY CO., LTD -> )
S3 hidkmdf; C:\WINDOWS\System32\drivers\hidkmdf.sys [14136 2014-10-25] (Wacom Technology Corp. -> Windows (R) Win 7 DDK provider)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-02-04] (Martin Malik - REALiX -> REALiX(tm))
S3 ipadtst; C:\Program Files (x86)\MSI\Super Charger\ipadtst_64.sys [20464 2013-11-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Windows (R) Win 7 DDK provider)
S3 ipadtst2; C:\Program Files (x86)\MSI\Super Charger\ipadtst2_64.sys [16336 2016-07-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 LcUvcUpper; C:\WINDOWS\system32\DRIVERS\LcUvcUpper.sys [37912 2015-09-21] (Microsoft Corporation -> Microsoft Corporation)
S3 libusb0; C:\WINDOWS\System32\drivers\libusb0.sys [52832 2018-03-25] (Travis Lee Robinson -> hxxp://libusb-win32.sourceforge.net)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [52832 2017-01-12] (Travis Lee Robinson -> hxxp://libusb-win32.sourceforge.net)
R3 LifeCamTrueColor; C:\WINDOWS\system32\DRIVERS\LifeCamTrueColor.sys [37928 2016-07-27] (Microsoft Corporation -> Microsoft Corporation)
S3 NANMp50; C:\WINDOWS\System32\Drivers\NANMp50.sys [46776 2010-03-25] (PRINTING COMMUNICATIONS ASSOCIATES, INC -> Printing Communications Assoc., Inc. (PCAUSA))
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2014-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2017-08-03] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] (MiniTool Solution Ltd -> )
R0 SamsungRapidDiskFltr; C:\WINDOWS\System32\DRIVERS\SamsungRapidDiskFltr.sys [271968 2015-09-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R0 SamsungRapidFSFltr; C:\WINDOWS\System32\DRIVERS\SamsungRapidFSFltr.sys [110688 2015-09-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 se64a; C:\WINDOWS\System32\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan -> EnTech Taiwan)
S3 silabenm; C:\WINDOWS\system32\DRIVERS\silabenm.sys [23552 2014-12-01] (Silicon Laboratories) [File not signed]
S3 Spyder4; C:\WINDOWS\System32\drivers\dccmtr.sys [15360 2011-06-02] (Microsoft Windows Hardware Compatibility Publisher -> Datacolor)
S3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46440 2017-04-06] (SteelSeries ApS -> SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [28272 2020-06-04] (Adlice -> )
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-06-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [401120 2020-06-04] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-06-04] (Microsoft Windows -> Microsoft Corporation)
S3 WacHidRouter; \SystemRoot\System32\drivers\wachidrouter.sys [X]
S3 wacomrouterfilter; \SystemRoot\System32\drivers\wacomrouterfilter.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-04 23:17 - 2020-06-04 23:18 - 000059380 _____ C:\Users\MARCO\Desktop\FRST.txt
2020-06-04 23:09 - 2020-06-04 23:09 - 014178840 _____ (Malwarebytes Corp.) C:\Users\MARCO\Desktop\mbar-1.10.3.1001.exe
2020-06-04 23:07 - 2020-06-04 23:18 - 000000000 ____D C:\FRST
2020-06-04 23:06 - 2020-06-04 23:07 - 002289152 _____ (Farbar) C:\Users\MARCO\Desktop\FRST64.exe
2020-06-04 23:03 - 2020-06-04 23:03 - 000028272 _____ C:\WINDOWS\system32\Drivers\truesight.sys
2020-06-04 22:55 - 2020-06-04 22:58 - 000003170 _____ C:\WINDOWS\system32\Tasks\AdwCleaner_onReboot
2020-06-04 22:41 - 2020-06-04 22:41 - 000000000 ____D C:\Malwarebytes
2020-06-04 22:07 - 2020-06-04 22:07 - 000525223 _____ C:\Users\MARCO\Desktop\Invoice_IRusFBAeWroAAAFwtnJsQZLr_99.pdf
2020-06-03 19:29 - 2020-06-03 19:29 - 011858009 _____ C:\Users\MARCO\Desktop\libro genealogico mosca.pdf
2020-06-03 01:06 - 2020-06-03 01:07 - 000000146 _____ C:\Users\MARCO\Desktop\FAMILYSEARCH ALBERO.url
2020-06-02 22:32 - 2020-06-02 22:32 - 000671904 _____ C:\Users\MARCO\Desktop\Preventivo per progetto Seo agrinova - Copia.pptx
2020-06-01 09:42 - 2020-06-01 09:42 - 000000000 ____D C:\Users\MARCO\AppData\Local\Apowersoft
2020-06-01 09:42 - 2020-06-01 09:42 - 000000000 ____D C:\ProgramData\Apowersoft
2020-05-31 18:27 - 2020-05-31 21:02 - 000045568 _____ C:\Users\MARCO\Desktop\nonrinnovati2019savonasede.xls
2020-05-31 00:16 - 2020-05-31 00:16 - 011593518 _____ C:\Users\MARCO\Desktop\000023_99020410b655ddew1eb42h.pdf
2020-05-29 18:13 - 2020-05-29 18:13 - 000671408 _____ C:\Users\MARCO\Desktop\Preventivo per progetto Seo agrinova.pptx
2020-05-29 12:36 - 2020-05-29 12:36 - 008389966 _____ C:\Users\MARCO\Desktop\000019_521540ese5e04f8re8c6dg.pdf
2020-05-29 09:07 - 2020-05-29 09:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2020-05-29 09:06 - 2020-05-29 09:06 - 000001816 _____ C:\Users\Public\Desktop\iTunes.lnk
2020-05-29 09:06 - 2020-05-29 09:06 - 000001816 _____ C:\ProgramData\Desktop\iTunes.lnk
2020-05-29 09:06 - 2020-05-29 09:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2020-05-29 09:06 - 2020-05-29 09:06 - 000000000 ____D C:\Program Files\iTunes
2020-05-29 09:06 - 2020-05-29 09:06 - 000000000 ____D C:\Program Files\iPod
2020-05-26 19:50 - 2020-05-26 19:50 - 000001138 _____ C:\Users\MARCO\Desktop\RootsMagic 7 To-Go.lnk
2020-05-26 19:50 - 2020-05-26 19:50 - 000001118 _____ C:\Users\MARCO\Desktop\RootsMagic 7.lnk
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\RootsMagic
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\ProgramData\RootsMagic Shared
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\ProgramData\RootsMagic
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RootsMagic 7
2020-05-26 19:50 - 2020-05-26 19:50 - 000000000 ____D C:\Program Files (x86)\RootsMagic 7
2020-05-26 18:58 - 2020-05-26 18:58 - 000330484 _____ C:\Users\MARCO\Desktop\volantino covid.pdf
2020-05-24 13:13 - 2020-05-25 10:35 - 000000951 _____ C:\WINDOWS\Tasks\EPSON XP-760 Series Update {52559C3C-E97D-4537-BE5A-DB1B101B08C8}.job
2020-05-24 13:13 - 2020-05-24 13:13 - 000004148 _____ C:\WINDOWS\system32\Tasks\EPSON XP-760 Series Update {52559C3C-E97D-4537-BE5A-DB1B101B08C8}
2020-05-24 13:13 - 2013-12-06 04:05 - 000179712 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\E_YLMBNJE.DLL
2020-05-24 13:13 - 2011-03-15 03:03 - 000083968 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\E_YD4BNJE.DLL
2020-05-24 13:13 - 2007-04-10 01:06 - 000010752 _____ (SEIKO EPSON CORP.) C:\WINDOWS\system32\E_GCINST.DLL
2020-05-24 11:57 - 2020-05-24 21:35 - 000000000 ____D C:\Users\MARCO\Desktop\mosca girgenti
2020-05-24 11:57 - 2020-05-24 11:57 - 000000000 ____D C:\Users\MARCO\Desktop\mosca lercara
2020-05-23 15:36 - 2020-05-23 15:36 - 000000212 _____ C:\Users\MARCO\Desktop\REGISTRI CHIESA PRIZZI.url
2020-05-23 12:33 - 2020-05-23 12:33 - 000000000 ____D C:\Users\Simone\AppData\Local\cache
2020-05-23 12:28 - 2020-05-23 12:28 - 000000000 ____D C:\Users\Simone\AppData\Local\ACD Systems
2020-05-19 16:01 - 2020-05-19 16:01 - 000002295 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2020-05-19 16:01 - 2020-05-19 16:01 - 000002283 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2020-05-19 16:01 - 2020-05-19 16:01 - 000002283 _____ C:\ProgramData\Desktop\Google Earth Pro.lnk
2020-05-16 11:47 - 2020-05-16 11:47 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Zoom
2020-05-16 11:47 - 2020-05-16 11:47 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2020-05-15 11:41 - 2020-05-15 11:41 - 000282844 _____ C:\Users\MARCO\Desktop\00508120094.pdf
2020-05-15 11:41 - 2020-05-15 11:41 - 000030581 _____ C:\Users\MARCO\Desktop\i0000007.pdf
2020-05-15 11:41 - 2020-05-15 11:41 - 000030360 _____ C:\Users\MARCO\Desktop\i0000003.pdf
2020-05-15 11:41 - 2020-05-15 11:41 - 000030299 _____ C:\Users\MARCO\Desktop\i0000702.pdf
2020-05-15 11:40 - 2020-05-15 11:40 - 000030480 _____ C:\Users\MARCO\Desktop\i0000339.pdf
2020-05-14 17:57 - 2020-05-14 17:57 - 000012519 _____ C:\Users\MARCO\Desktop\TESSERAMENTO 14-05-2020.xlsx
2020-05-14 10:04 - 2020-05-14 10:04 - 000000000 ___HD C:\OneDriveTemp
2020-05-13 15:51 - 2020-05-13 15:51 - 025902080 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 025444864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 022638592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 019851264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 019812352 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 018029056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 007822888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 007756800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 007267840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 007011840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 006710272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 006525936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 006291456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 006082808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 005911040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 005757872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 005340568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 005098352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 004858368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 004612608 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 003822080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 003513856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 002798592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-05-13 15:51 - 2020-05-13 15:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-05-13 15:51 - 2020-05-13 15:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-05-13 15:51 - 2020-05-13 15:51 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 002576896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 002259664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 002073176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001990576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001975808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001952872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001737216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001686016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001665720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001654952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001637376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001581056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001559040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pla.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001556200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001539072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001507328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pla.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001492480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001477112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001461760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001414144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001397560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 001393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001344000 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001343488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001306112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001250816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001214264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001178608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001151824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001125376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CBDHSvc.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001099600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 001071616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001034752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 001011712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000994304 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000943640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000896000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000894016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000891392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000852992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000843576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000807936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000801832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000792808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000782336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000778552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000776792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000748544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000747832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000683288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000673456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000672944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmIndexer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000655360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000614400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000602224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000600064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000592944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000581544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.applicationmodel.datatransfer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000572200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000568136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000564480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000553664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000540200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000539184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000530944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.PredictionUnit.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000501200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000466344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000451584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000441584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000418816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000410624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.Phone.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000405424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\umrdp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000354816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000345016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneOm.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000325432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-05-13 15:51 - 2020-05-13 15:51 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000301064 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpendp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000299064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TaskApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.ESim.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000273744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbroker.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PickerPlatform.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000268008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000262848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpendp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConsoleLogon.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000246584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchangeHost.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.SystemManagement.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-05-13 15:51 - 2020-05-13 15:51 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vaultcli.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000197432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-05-13 15:51 - 2020-05-13 15:51 - 000185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinput.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Clipboard.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsentUxClient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000165176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Devices.Sensors.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\useractivitybroker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000139952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityRuntime.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000124504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\socialapis.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000105840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MixedRealityRuntime.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.RetailInfo.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000099104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Display.BrightnessOverride.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraCaptureUI.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000090936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.Preview.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeopleAPIs.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSSessionUX.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DiagnosticInvoker.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbussdapi.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coloradapterclient.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSa.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddrawex.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSa.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaProxy.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaProxy.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\plasrv.exe
2020-05-13 15:51 - 2020-05-13 15:51 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-05-13 15:51 - 2020-05-13 15:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-05-13 15:50 - 2020-05-13 15:50 - 017791488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 014819328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 009929528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 009339392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 007902912 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 007297536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 007257816 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 006435328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 006232568 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 006168576 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 005945856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 005280192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 005111296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 004624880 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 004565456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 004012032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 004005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003974376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 003807232 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003747328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003727360 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003655680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003581752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 003371416 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 002854400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002774088 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002769000 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002760704 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 002736640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002717184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 002504440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002465792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002448712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002354688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002289152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002284032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002256384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002157056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002150232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002147328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002087168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002072576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 002060800 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001999968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001945600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001943040 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001934824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001825280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001786880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001766400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001745208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001656904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001646552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001510912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001498624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001486336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001428480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001413712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001406464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001393960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001391104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001385176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001375232 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001373184 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001370112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001346048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001336832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001333248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001306424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001288648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001282560 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001270784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001263616 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001222656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001218560 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001213440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001184256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001182208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001158144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001154656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001150784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 001132544 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Signals.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001092096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001085752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001072128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001059328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001048480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001027816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001023128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001007928 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001007104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 001005056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000999616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000979264 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000975360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000957056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000945192 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000916768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000915192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000911872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000891544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000888352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000881664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000879064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000861696 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000859944 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000854528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000847872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000847168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000824832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000819696 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.applicationmodel.datatransfer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000819200 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000796904 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000781312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000777840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000768000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000759808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000752584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000742200 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000738304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000716800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000716312 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000706544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000693672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000685368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000683848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000676072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000673296 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000650240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000639400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000637480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000634680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2020-05-13 15:50 - 2020-05-13 15:50 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000628024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000622592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000614400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000594472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000580608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000573952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000569856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000547992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000543824 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000540160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.UserService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000526848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000524208 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000513024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000513024 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000512512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-05-13 15:50 - 2020-05-13 15:50 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000460200 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneOm.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000441856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.ESim.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000410608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000399672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000390968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000386320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000380632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManager.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000375520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\PickerPlatform.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000339824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountWAMExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Cortana.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000333128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000318680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000310928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000306496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposerFramework.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000278080 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000273208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopSwitcherDataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000266552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemSettings.DataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000260328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000250696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\PasswordEnrollmentManager.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000245336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000238904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Devices.Sensors.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000231912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000221496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MtcModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000209208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\useractivitybroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SwitcherDataModel.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Internal.Input.ExpressiveInput.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Haptics.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.CapturePicker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000152416 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoipRT.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000147776 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadWamExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000142760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\socialapis.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Haptics.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000132712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Display.BrightnessOverride.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredDialogBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraCaptureUI.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CaptureService.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeopleAPIs.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000117048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadWamExtension.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSAssessment.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoipRT.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000107616 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.Preview.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticInvoker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000088280 _____ (Microsoft Corporation) C:\WINDOWS\system32\coloradapterclient.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbussdapi.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRBroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000073024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000069704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000068408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Printers.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000066832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000060432 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000059192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000058696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ffbroker.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddrawex.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsUsbGDCoInstaller.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\TsUsbGD.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSaveTask.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-05-13 15:50 - 2020-05-13 15:50 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2020-05-13 15:50 - 2020-05-13 15:50 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregtask.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsregtask.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\localui.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-05-13 15:50 - 2020-05-13 15:50 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2020-05-12 21:58 - 2020-05-12 21:58 - 000000000 ____D C:\Users\MARCO\AppData\Local\Globalscape
2020-05-12 21:58 - 2020-05-12 21:58 - 000000000 ____D C:\ProgramData\Globalscape
2020-05-12 21:56 - 2020-05-12 21:56 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Globalscape
2020-05-12 21:56 - 2020-05-12 21:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Globalscape
2020-05-12 21:55 - 2020-05-12 21:55 - 000000000 ____D C:\Program Files (x86)\Globalscape
2020-05-12 21:28 - 2020-05-12 21:28 - 000000325 _____ C:\Users\MARCO\mail.php
2020-05-12 21:24 - 2020-05-12 21:30 - 000068159 _____ C:\Users\MARCO\index.html
2020-05-07 13:00 - 2020-05-07 13:13 - 000000000 ____D C:\Users\MARCO\Desktop\FILMATI SARA
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-04 23:05 - 2019-08-17 22:10 - 001764224 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-04 23:05 - 2019-03-19 14:33 - 000782874 _____ C:\WINDOWS\system32\perfh010.dat
2020-06-04 23:05 - 2019-03-19 14:33 - 000147392 _____ C:\WINDOWS\system32\perfc010.dat
2020-06-04 23:05 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-06-04 23:01 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-06-04 23:01 - 2014-12-12 00:43 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-06-04 23:00 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-06-04 23:00 - 2014-11-17 00:30 - 000000000 ____D C:\Users\MARCO\AppData\Local\Adobe
2020-06-04 22:59 - 2020-04-01 12:23 - 000003126 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2020-06-04 22:59 - 2020-04-01 11:16 - 000003112 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2020-06-04 22:59 - 2019-08-17 22:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-04 22:59 - 2018-08-28 23:09 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-06-04 22:58 - 2019-03-19 06:37 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2020-06-04 22:58 - 2017-05-21 00:19 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2020-06-04 22:49 - 2020-04-19 12:56 - 000000000 ____D C:\Users\MARCO\AppData\LocalLow\IGDump
2020-06-04 22:38 - 2019-08-17 22:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2020-06-04 22:38 - 2019-08-17 20:54 - 000000000 ____D C:\Users\MARCO
2020-06-04 22:38 - 2015-01-11 18:02 - 000000000 ____D C:\ProgramData\NCH Software
2020-06-04 22:33 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-06-04 21:30 - 2019-08-17 21:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-06-04 20:37 - 2019-10-05 00:41 - 000000000 ____D C:\Program Files (x86)\Ezviz Studio
2020-06-04 19:37 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-06-04 19:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-06-04 19:37 - 2017-12-03 20:14 - 000000000 ____D C:\Users\MARCO\AppData\Local\Packages
2020-06-04 14:47 - 2018-02-28 21:18 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-06-04 14:44 - 2014-11-16 20:41 - 000000000 ___RD C:\Users\MARCO\OneDrive
2020-06-04 14:38 - 2019-12-31 10:02 - 000000000 ____D C:\Users\MARCO\shipin7_update_temp
2020-06-04 14:37 - 2016-08-22 22:31 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\DisplayCAL
2020-06-03 13:35 - 2019-02-09 10:07 - 000000000 ___HD C:\adobeTemp
2020-06-02 22:21 - 2019-08-17 22:21 - 000000000 ____D C:\Users\MARCO\AppData\Local\Deployment
2020-06-02 21:26 - 2014-12-12 00:57 - 000000000 ____D C:\Users\MARCO\AppData\Local\CrashDumps
2020-06-01 21:25 - 2019-10-03 13:26 - 000003522 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2020-06-01 11:35 - 2018-05-19 10:31 - 000000000 ____D C:\Users\MARCO\AppData\Local\D3DSCache
2020-06-01 09:53 - 2015-01-11 18:02 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\NCH Software
2020-06-01 09:47 - 2018-05-26 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apowersoft
2020-06-01 09:42 - 2018-05-26 14:01 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Apowersoft
2020-05-30 01:31 - 2019-08-17 22:12 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1801797792-2963998745-2400400606-1001
2020-05-30 01:31 - 2019-08-17 20:54 - 000002470 _____ C:\Users\MARCO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-05-27 11:15 - 2018-01-14 23:52 - 000000000 ____D C:\Users\MARCO\AppData\Local\PlaceholderTileLogoFolder
2020-05-24 13:12 - 2017-06-22 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2020-05-23 15:42 - 2017-05-03 12:43 - 000000000 ____D C:\Users\Simone\AppData\Roaming\DisplayCAL
2020-05-23 12:32 - 2018-08-13 19:27 - 000000000 ____D C:\Users\Simone\AppData\Local\AMD
2020-05-23 12:28 - 2019-08-17 22:12 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1801797792-2963998745-2400400606-1007
2020-05-23 12:28 - 2019-08-17 20:54 - 000002473 _____ C:\Users\Simone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-05-23 12:28 - 2018-06-13 11:40 - 000000000 ____D C:\Users\Simone\AppData\Local\D3DSCache
2020-05-23 12:28 - 2017-12-03 20:13 - 000000000 ____D C:\Users\Simone\AppData\Local\Packages
2020-05-23 12:28 - 2017-05-03 12:43 - 000000000 ___RD C:\Users\Simone\OneDrive
2020-05-23 12:28 - 2015-09-29 20:46 - 000000000 ____D C:\Users\Simone\AppData\Local\Adobe
2020-05-23 12:27 - 2018-02-28 21:18 - 000000000 ___RD C:\Users\Simone\3D Objects
2020-05-23 12:27 - 2016-04-27 07:40 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-05-23 12:27 - 2015-09-29 20:47 - 000002334 _____ C:\Users\Simone\Desktop\Google Chrome.lnk
2020-05-23 12:19 - 2018-07-07 17:30 - 000000000 ____D C:\Users\MARCO\Desktop\SIMONE MOSCA
2020-05-22 14:06 - 2018-02-04 11:33 - 000000000 ____D C:\Users\MARCO\AppData\Local\ElevatedDiagnostics
2020-05-22 10:35 - 2014-11-16 21:22 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-05-19 16:01 - 2014-11-16 21:21 - 000000000 ____D C:\Program Files (x86)\Google
2020-05-17 20:16 - 2020-02-10 21:35 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Loom
2020-05-14 21:23 - 2014-12-04 23:54 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-05-14 00:10 - 2020-05-03 21:56 - 000000000 ____D C:\Users\MARCO\.atom
2020-05-13 20:26 - 2019-08-17 21:58 - 000662888 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-05-13 20:26 - 2017-12-04 20:22 - 000000000 ___RD C:\Users\MARCO\3D Objects
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\TextInput
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Provisioning
2020-05-13 20:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-05-13 20:24 - 2019-03-19 06:52 - 000000000 ____D C:\PerfLogs
2020-05-13 19:22 - 2014-12-30 00:46 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\FileZilla
2020-05-13 16:00 - 2014-11-18 21:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-05-13 15:57 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-05-13 15:57 - 2014-11-18 21:06 - 120636720 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-05-13 15:50 - 2019-08-17 21:59 - 002874880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-05-13 15:32 - 2014-11-17 00:55 - 000000000 ____D C:\Program Files\Common Files\Adobe
2020-05-12 21:56 - 2014-11-16 22:23 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2020-05-12 21:54 - 2017-05-21 00:20 - 000000000 ____D C:\ProgramData\Package Cache
2020-05-12 17:46 - 2020-05-03 21:56 - 000002226 _____ C:\Users\MARCO\Desktop\Atom.lnk
2020-05-12 17:46 - 2020-05-03 21:56 - 000000000 ____D C:\Users\MARCO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2020-05-12 17:46 - 2020-05-03 21:55 - 000000000 ____D C:\Users\MARCO\AppData\Local\atom
2020-05-12 17:46 - 2018-05-18 23:35 - 000000000 ____D C:\Users\MARCO\AppData\Local\SquirrelTemp
2020-05-11 23:54 - 2020-02-22 18:06 - 000011547 _____ C:\Users\MARCO\Desktop\lista prenotati rifugio.xlsx
2020-05-07 17:03 - 2018-08-30 22:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
==================== Files in the root of some directories ========
2017-03-12 11:43 - 2017-03-13 23:19 - 000021368 _____ (Schneider Electric) C:\Users\MARCO\en_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021368 _____ (Schneider Electric) C:\Users\MARCO\es_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021880 _____ (Schneider Electric) C:\Users\MARCO\fr_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021880 _____ (Schneider Electric) C:\Users\MARCO\grm_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021368 _____ (Schneider Electric) C:\Users\MARCO\it_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000020344 _____ (Schneider Electric) C:\Users\MARCO\jp_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 001079808 _____ (Microsoft Corporation) C:\Users\MARCO\mfc80u.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000626688 _____ (Microsoft Corporation) C:\Users\MARCO\msvcr80.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000021368 _____ (Schneider Electric) C:\Users\MARCO\pt_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000018808 _____ () C:\Users\MARCO\ResourceReader.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000020856 _____ (Schneider Electric) C:\Users\MARCO\ru_res.dll
2017-03-12 11:43 - 2017-03-13 23:19 - 000019832 _____ (Schneider Electric) C:\Users\MARCO\zh_res.dll
2016-04-23 14:46 - 2016-05-17 17:16 - 000003072 _____ () C:\Users\MARCO\AppData\Roaming\Album Studio 1.0 Prefsv3
2018-04-08 13:20 - 2018-04-08 13:20 - 005082084 _____ (The Public) C:\Users\MARCO\AppData\Roaming\Avisynth.exe
2018-04-08 13:20 - 2018-04-08 13:20 - 005243208 _____ ( ) C:\Users\MARCO\AppData\Roaming\AvsP.exe
2016-10-07 22:56 - 2016-10-07 22:56 - 000000057 _____ () C:\Users\MARCO\AppData\Roaming\Camdata.ini
2016-10-07 22:56 - 2016-10-07 22:56 - 000000408 _____ () C:\Users\MARCO\AppData\Roaming\CamLayout.ini
2016-10-07 22:56 - 2016-10-07 22:56 - 000000408 _____ () C:\Users\MARCO\AppData\Roaming\CamShapes.ini
2016-10-07 22:56 - 2016-10-07 22:56 - 000004545 _____ () C:\Users\MARCO\AppData\Roaming\CamStudio.cfg
2016-10-07 22:41 - 2016-10-07 22:51 - 000000000 _____ () C:\Users\MARCO\AppData\Roaming\CamStudio.Producer.Data.ini
2016-10-07 22:41 - 2016-10-07 22:51 - 000001205 _____ () C:\Users\MARCO\AppData\Roaming\CamStudio.Producer.ini
2018-04-08 13:20 - 2018-04-08 13:20 - 002169915 _____ (LIGHTNING UK!) C:\Users\MARCO\AppData\Roaming\Imgburn.exe
2018-06-16 16:13 - 2018-06-16 16:13 - 000099384 _____ () C:\Users\MARCO\AppData\Roaming\inst.exe
2014-11-17 23:06 - 2015-02-11 22:51 - 000000028 _____ () C:\Users\MARCO\AppData\Roaming\kulerdata.json
2018-12-10 22:34 - 2018-12-12 22:05 - 000001118 _____ () C:\Users\MARCO\AppData\Roaming\loch.ini
2018-04-08 13:20 - 2018-04-08 13:20 - 001357348 _____ () C:\Users\MARCO\AppData\Roaming\MatroskaSplitter.exe
2018-06-16 16:13 - 2018-06-16 16:13 - 000007859 _____ () C:\Users\MARCO\AppData\Roaming\pcouffin.cat
2018-06-16 16:13 - 2018-06-16 16:13 - 000001167 _____ () C:\Users\MARCO\AppData\Roaming\pcouffin.inf
2018-06-16 16:13 - 2018-06-16 16:13 - 000000055 _____ () C:\Users\MARCO\AppData\Roaming\pcouffin.log
2018-06-16 16:13 - 2018-06-16 16:13 - 000082816 _____ (VSO Software) C:\Users\MARCO\AppData\Roaming\pcouffin.sys
2018-04-08 13:20 - 2018-04-08 13:20 - 007760687 _____ (Boraxsoft) C:\Users\MARCO\AppData\Roaming\SetupGFD.exe
2015-01-11 19:12 - 2015-01-11 19:12 - 000001167 _____ () C:\Users\MARCO\AppData\Roaming\trace_FilterInstaller.1.txt
2015-01-11 19:12 - 2018-08-21 21:11 - 000000905 _____ () C:\Users\MARCO\AppData\Roaming\trace_FilterInstaller.txt
2015-01-11 19:12 - 2018-08-21 21:11 - 000000000 _____ () C:\Users\MARCO\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2014-12-07 01:31 - 2014-12-29 15:30 - 000022033 _____ () C:\Users\MARCO\AppData\Roaming\Valori separati da virgola.ADR
2016-10-07 22:40 - 2020-04-18 23:02 - 000000096 _____ () C:\Users\MARCO\AppData\Roaming\version2.xml
2018-04-08 13:20 - 2018-04-08 13:20 - 000117723 _____ () C:\Users\MARCO\AppData\Roaming\yuvcodecs-1.3.exe
2014-12-03 01:43 - 2020-04-30 18:16 - 000001456 _____ () C:\Users\MARCO\AppData\Local\Adobe Salva per Web e dispositivi 13.0 Prefs
2020-04-01 16:25 - 2020-04-01 16:25 - 000000357 _____ () C:\Users\MARCO\AppData\Local\karboncalligraphyrc
2020-04-01 16:22 - 2020-04-01 16:27 - 000002449 _____ () C:\Users\MARCO\AppData\Local\krita-sysinfo.log
2020-04-01 16:22 - 2020-04-01 16:31 - 000001035 _____ () C:\Users\MARCO\AppData\Local\krita.log
2020-04-01 16:31 - 2020-04-01 16:31 - 000000039 _____ () C:\Users\MARCO\AppData\Local\kritadisplayrc
2020-04-01 16:22 - 2020-04-01 16:31 - 000016053 _____ () C:\Users\MARCO\AppData\Local\kritarc
2018-09-28 09:04 - 2018-09-28 09:04 - 000000000 _____ () C:\Users\MARCO\AppData\Local\oobelibMkey.log
2019-06-26 12:26 - 2020-02-28 00:36 - 000000128 _____ () C:\Users\MARCO\AppData\Local\PUTTY.RND
2018-07-29 23:53 - 2018-07-29 23:53 - 000000218 _____ () C:\Users\MARCO\AppData\Local\recently-used.xbel
2017-06-11 00:41 - 2017-06-24 19:42 - 000007609 _____ () C:\Users\MARCO\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-06-2020
Ran by MARCO (04-06-2020 23:20:11)
Running from C:\Users\MARCO\Desktop
Windows 10 Home Version 1909 18363.836 (X64) (2019-08-17 20:13:03)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1801797792-2963998745-2400400606-500 - Administrator - Enabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-1801797792-2963998745-2400400606-503 - Limited - Disabled)
gabriella (S-1-5-21-1801797792-2963998745-2400400606-1014 - Limited - Enabled) => C:\Users\gabriella
Guest (S-1-5-21-1801797792-2963998745-2400400606-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1801797792-2963998745-2400400606-1012 - Limited - Enabled)
MARCO (S-1-5-21-1801797792-2963998745-2400400606-1001 - Administrator - Enabled) => C:\Users\MARCO
Simone (S-1-5-21-1801797792-2963998745-2400400606-1007 - Limited - Enabled) => C:\Users\Simone
WDAGUtilityAccount (S-1-5-21-1801797792-2963998745-2400400606-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ACDSee Photo Studio Ultimate 2020 (HKLM\...\{EB2BD38F-44CF-46BB-A00B-72D7FD826A24}) (Version: 13.0.2.2057 - ACD Systems International Inc.)
AceMoney (HKLM-x32\...\AceMoney_is1) (Version: - MechCAD Software)
ActivePresenter (HKLM\...\{A2A40277-D807-4754-95A3-2F294C2C51D3}_is1) (Version: 7.5.13 - Atomi Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 28.0.0.127 - Adobe Systems Incorporated)
Adobe Bridge 2020 (HKLM-x32\...\KBRG_10_0_3) (Version: 10.0.3 - Adobe Inc.)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.1.0.407 - Adobe Systems Incorporated)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.8 - Adobe Systems Incorporated)
Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.3.2 - Adobe Systems Incorporated)
Adobe Lightroom Classic (HKLM-x32\...\LTRM_9_2_1) (Version: 9.2.1 - Adobe Inc.)
Adobe Media Encoder 2019 (HKLM-x32\...\AME_13_1_3) (Version: 13.1.3 - Adobe Systems Incorporated)
Adobe Photoshop 2020 (HKLM-x32\...\PHSP_21_1_1) (Version: 21.1.1 - Adobe Inc.)
Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_1_9) (Version: 19.1.9 - Adobe Systems Incorporated)
Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_9) (Version: 20.0.9 - Adobe Inc.)
Affinity Photo (HKLM\...\{D39FC096-62B2-4F21-BA48-04DAC525F929}) (Version: 1.8.3.641 - Serif (Europe) Ltd)
Amazon Photos (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Amazon Photos) (Version: 5.6.1 - Amazon.com, Inc.)
AMD Ryzen Master (HKLM\...\{03213877-8001-4F2C-8917-26B127DE1540}) (Version: 1.0.1.0239 - Advanced Micro Devices, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 20.2.2 - Advanced Micro Devices, Inc.)
AOMEI Partition Assistant Standard Edition 6.6 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: - AOMEI Technology Co., Ltd.)
APPBook 1.5.3 (HKLM-x32\...\781df90e-341d-585c-9760-bfee4555962f) (Version: 1.5.3 - ELI S.R.L. - European Language Institute)
APPBook 1.5.6 (HKLM-x32\...\{781df90e-341d-585c-9760-bfee4555962f}) (Version: 1.5.6 - ELI S.R.L. - European Language Institute)
Apple Mobile Device Support (HKLM\...\{C788AE25-3D4E-4D18-811B-3219F778487E}) (Version: 13.5.1.2 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Ashampoo Burning Studio FREE (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG)
Assistente aggiornamento Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17364 - Microsoft Corporation)
Atom (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\atom) (Version: 1.46.0 - GitHub Inc.)
Avidemux 2.7 - 64 bits (HKLM-x32\...\Avidemux 2.7 - 64 bits (64-bit)) (Version: 2.7.1.180604 - )
AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.6 - GPL Public release.)
AVStoDVD 2.8.8 (HKLM-x32\...\AVStoDVD) (Version: 2.8.8 - MrC)
Backup and Sync from Google (HKLM\...\{FE296942-D2D3-4149-8895-60655FE4CFDE}) (Version: 3.49.9800.0000 - Google, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Branding64 (HKLM\...\{856DA29A-EA4A-468B-BBC2-B5F60DD75BFE}) (Version: 1.00.0002 - Advanced Micro Devices, Inc.) Hidden
calibre 64bit (HKLM\...\{FC12E3F8-E522-4E65-A416-D7BDF41FBBA7}) (Version: 2.68.0 - Kovid Goyal)
Canon Utilities Digital Photo Professional 4 (HKLM-x32\...\Digital Photo Professional 4 (x64)) (Version: 4.5.10.1 - Canon Inc.)
Canon Utilities EOS Lens Registration Tool (HKLM-x32\...\EOS Lens Registration Tool) (Version: 1.5.10.0 - Canon Inc.)
Cars 2 multimedia game (HKLM-x32\...\{A72E0BF6-237D-B724-AA15-0B0D6C00EAE3}) (Version: 1.0 - Clementoni S.p.A) Hidden
Cars 2 multimedia game (HKLM-x32\...\it.clementoni.multimediagames.cars2) (Version: 1.0 - Clementoni S.p.A)
CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - )
Centro gestione Mouse e Tastiere Microsoft (HKLM\...\{93FDA8B3-711F-45A7-B7E1-497452B34F5F}) (Version: 10.4.137.0 - Microsoft Corporation) Hidden
Centro gestione Mouse e Tastiere Microsoft (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 10.4.137.0 - Microsoft Corporation)
Chrome Remote Desktop Host (HKLM-x32\...\{654C49EB-D47E-4319-B719-DEEC73787B51}) (Version: 83.0.4103.2 - Google Inc.)
Citrix Online Launcher (HKLM-x32\...\{48947098-A67C-46D4-90C5-9F2F6F0F96FE}) (Version: 1.0.449 - Citrix)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CSV to vCard (HKLM-x32\...\{B9DCBBD4-20F5-424B-9C56-FFF62BE71CD7}_is1) (Version: - csvtovcard.com)
CuteFTP 9 (HKLM-x32\...\{89B9E358-75C6-4C6B-BD38-803FF156CC4B}) (Version: 9.3.0 - Globalscape)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Desktop Telematico 1.0.0 (HKLM\...\Desktop Telematico 1.0.0) (Version: 1.0.0.0 - SOGEI)
DesktopTelematico 1.0.0 (HKLM\...\DesktopTelematico) (Version: - )
DesktopTelematico 1.0.0 (HKLM-x32\...\DesktopTelematico) (Version: - )
Dictate (HKLM-x32\...\{8475267E-D7DF-4A6D-A126-2C6B519E6F74}) (Version: 5.00.0000 - Microsoft)
Digitale_Capitello (HKLM-x32\...\{819FF49A-2BA9-CB4C-0A41-F2A406D42899}) (Version: 6.0 - UNKNOWN) Hidden
Digitale_Capitello (HKLM-x32\...\Digitale.Capitello) (Version: 6.0 - UNKNOWN)
Disinstalla EPSON XP-760 Series Printer (HKLM\...\EPSON XP-760 Series) (Version: - SEIKO EPSON Corporation)
DisplayCAL (HKLM-x32\...\{4714199A-0D66-4E69-97FF-7B54BFF80B88}_is1) (Version: 3.8.5.0 - Florian Höch)
Driver Easy 5.6.14 (HKLM\...\DriverEasy_is1) (Version: 5.6.14 - Easeware)
DVDStyler v3.1 (HKLM\...\DVDStyler_is1) (Version: - Thüring IT-Consulting)
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS)
EaseUS Todo Backup Free 10.6 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 10.6 - CHENGDU YIWO Tech Development Co., Ltd)
Easy Photo Scan (HKLM-x32\...\{BB6241FF-8B76-45A5-95B9-888EDE8E47DC}) (Version: 1.00.0010 - Seiko Epson Corporation)
EOSInfo (HKLM-x32\...\{CC23FF9A-989C-4DEB-8970-50E6E4862315}) (Version: 0.2.0 - astrojargon.net)
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0 - Seiko Epson Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{F05A434E-D3CF-4B44-9D3E-779D42090781}) (Version: 2.8.0.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.50.00 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{D2D9559D-359A-4C61-B93A-FE01AE2BFB75}) (Version: 4.5.4 - Seiko Epson Corporation)
Ezviz Player version V7.2.0 (HKLM-x32\...\{FAC8D04A-541F-4d41-8BFE-4E5F735758DF}}_is1) (Version: V7.2.0 - )
Ezviz Studio (HKLM-x32\...\{49DF99D3-BC81-439A-8F40-A0529159024C}_is1) (Version: - EZVIZ Inc.)
FileZilla Client 3.43.0 (HKLM-x32\...\FileZilla Client) (Version: 3.43.0 - Tim Kosse)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.61 - Google LLC)
Google Earth Pro (HKLM-x32\...\{7A3374DE-3D99-4BD9-9FE8-A76498632D98}) (Version: 7.3.3.7699 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Google Video Support Plugin (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 19.12.1000.0 - Google, LLC.)
GUI for dvdauthor 1.07 (HKLM-x32\...\GUI for dvdauthor) (Version: 1.07 - Boraxsoft)
HandBrake 1.2.2 (HKLM-x32\...\HandBrake) (Version: 1.2.2 - )
Helix YUV Codecs (remove only) (HKLM-x32\...\HelixYUVCodecs) (Version: - )
iCloud (HKLM\...\{F0AD317D-AE18-45D0-BE5B-30074AFE6740}) (Version: 7.19.0.10 - Apple Inc.)
il Nuovo Devoto-Oli Junior LeMonnier (HKLM-x32\...\il Nuovo Devoto-Oli Junior LeMonnier) (Version: 1.0.0.0 - edPan search engine)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.0.0 - LIGHTNING UK!)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Invoicex (HKLM\...\Invoicex) (Version: - )
iTunes (HKLM\...\{81D32D2F-1C41-4874-980D-FBFBC359977F}) (Version: 12.10.7.3 - Apple Inc.)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
K-Lite Codec Pack 14.1.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 14.1.5 - KLCP)
LAV Filters 0.73.1 (HKLM-x32\...\lavfilters_is1) (Version: 0.73.1 - Hendrik Leppkes)
Loom 0.36.1 (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\{3643b966-bc28-5bc8-95ff-3d47d66438db}) (Version: 0.36.1 - Loom, Inc.)
Macromedia Extension Manager (HKLM-x32\...\{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}) (Version: 1.7.240 - Macromedia, Inc.)
MAMP & MAMP PRO 4.1.1 version 4.1.1 (HKLM-x32\...\{A62E77D4-9B74-4CA0-A254-EFE711F7A298}_is1) (Version: 4.1.1 - appsolute Gmbh)
Manuali EPSON (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.54.0.0 - Seiko Epson Corporation)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.0.88 - McAfee, LLC.)
Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{8EC9E7BB-2443-49B1-8476-490EBF932C2E}) (Version: 4.25.512.0 - Microsoft Corporation)
Microsoft Lync Web App Plug-in (HKLM\...\{BE6D5464-0B1F-46CC-8973-F9651FE6A45A}) (Version: 15.8.8308.965 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - it-it (HKLM\...\ProPlusRetail - it-it) (Version: 16.0.12730.20270 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\OneDriveSetup.exe) (Version: 20.064.0329.0008 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.23.27820 (HKLM-x32\...\{852adda4-4c78-4a38-b583-c0b360a329d6}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools per Office Runtime (x64) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ITA) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.44.2 - Microsoft Corporation)
MiniTool Power Data Recovery Free Edition 7.0 (HKLM\...\MiniTool Power Data Recovery Free Edition_is1) (Version: - MiniTool Solution Ltd.)
Monitor Asset Manager (HKLM-x32\...\{AD0BBBFD-C5E9-4214-A863-E83313D67C0C}_is1) (Version: - EnTech Taiwan)
Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.67 - MSI)
MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.3.0.24 - MSI)
MSI X Boost (HKLM-x32\...\{515143BB-7A11-4D85-B941-D520AAAA099C}_is1) (Version: 1.0.0.36 - MSI)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version: - SEIKO EPSON Corporation)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.6 - Notepad++ Team)
OEM Application Profile (HKLM-x32\...\{7F5DCD33-1039-C3B2-9538-B645B65BBA63}) (Version: 1.00.0000 - Nome società) Hidden
OEM Application Profile (HKLM-x32\...\{84AD2AF7-10C8-0395-66F9-FFAEB4C5DBF1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0410-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Pacchetto driver Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (01/27/2014 9.0.0000.00000) (HKLM\...\9CA77E2A8332A0824C54DA611BBE4CA24AB1F750) (Version: 01/27/2014 9.0.0000.00000 - Google, Inc.)
Pacchetto driver Windows - Phase One / Mamiya V-Grip USB Driver (12/03/2014 1.2.0.0) (HKLM\...\3F504CC0B024052107934E093CC26DA720256A7A) (Version: 12/03/2014 1.2.0.0 - Phase One / Mamiya)
Pacchetto driver Windows - Phase One A/S (WinUSB) USBDevice (12/14/2018 1.15.0.0) (HKLM\...\9398055CF8BEEF1D6FCF147047450F15A1C7AF2A) (Version: 12/14/2018 1.15.0.0 - Phase One A/S)
Pacchetto driver Windows - Silicon Laboratories (WinUSB) USB DFU Devices (03/21/2013 1.00.0000) (HKLM\...\F10ECE8185B942E6F1FCC2956ECDFE0C0D33E8A5) (Version: 03/21/2013 1.00.0000 - Silicon Laboratories)
Pacchetto driver Windows - Silicon Laboratories Inc. (silabser) Ports (03/28/2016 6.7.3.350) (HKLM\...\9437A0D535B29915072FCF153C7CA9B5FD547A24) (Version: 03/28/2016 6.7.3.350 - Silicon Laboratories Inc.)
PhotoFilmStrip 3.1.1 (HKLM\...\PhotoFilmStrip_is1) (Version: 3.1.1 - Jens Göpfert)
Planet versione 4.8 (HKLM-x32\...\{90747FA4-A488-45D3-9F91-8E516610CDCF}_is1) (Version: 4.8 - Tecnos)
Poedit (HKLM-x32\...\{68EB2C37-083A-4303-B5D8-41FA67E50B8F}_is1) (Version: 2.0.1 - Vaclav Slavik)
proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.114.1 - proDAD GmbH)
PuTTY release 0.73 (64-bit) (HKLM\...\{44F7642C-AB7E-4468-B028-E8D08A0CBB0E}) (Version: 0.73.0.0 - Simon Tatham)
QGIS 3.4.2 'Madeira' (HKLM\...\QGIS 3.4) (Version: 3.4.2 - QGIS Development Team)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
RAPID Mode (HKLM\...\{18DF567E-AA9B-434D-BE77-BFE2292712F6}) (Version: 1.0.1.96 - Samsung Electronics Co., Ltd.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.35.510.2019 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8746.1 - Realtek Semiconductor Corp.)
RescuePRO Deluxe 5.2.6.6 (HKLM-x32\...\{38D9AAB8-116B-40BB-A801-50B71DF82D24}_is1) (Version: 5.2.6.6 - LC Technology International, Inc.)
RootsMagic 7.6.3.0 (HKLM-x32\...\{D6286873-A757-4A4D-A6EF-0081B3EE32CA}_is1) (Version: RootsMagic 7.6.3.0 - RootsMagic, Inc.)
Ruby 2.3.3-p222-x64 (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\{96A4CEEE-5ACC-4FB2-AAB6-8152D5AB0C9E}_is1) (Version: 2.3.3-p222 - RubyInstaller Team)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.9.7 - Samsung Electronics)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.61.0 - Samsung Electronics Co., Ltd.)
Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 11.1 - Screaming Frog Ltd)
ScreenManager Pro for LCD (HKLM-x32\...\{DAB265AD-27B2-4651-B8D8-F4F3A8ECC705}) (Version: 3.3.3.0 - EIZO Corporation)
SEO Macroscope (HKLM\...\{DC87D91B-D6D0-4557-B494-4501BD4FDA00}) (Version: 1.7.61 - Jason Holland)
Skype versione 8.59 (HKLM-x32\...\Skype_is1) (Version: 8.59 - Skype Technologies S.A.)
Skype Web Plugin (HKLM-x32\...\{EB96DF8B-65A7-4E72-BFB1-38DB36870D16}) (Version: 7.32.6.278 - Skype Technologies S.A.)
SmartSound Quicktracks 5 (HKLM-x32\...\{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) Hidden
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
SnadBoy's Revelation v2 (HKLM-x32\...\SnadBoy's Revelation v2) (Version: 2.0.1.100 - SnadBoy Software)
Software Saal Design Italy (HKLM-x32\...\{00E0CBD7-C440-FD08-478C-A2074418339E}) (Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Software Saal Design Italy (HKLM-x32\...\SoftwareSaalDesignItaly) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Spyder4Pro (HKLM-x32\...\Spyder4Pro) (Version: - )
Supporto applicazioni Apple (32 bit) (HKLM-x32\...\{11C4575B-4B32-44D2-A097-D59A00BA60DE}) (Version: 8.5 - Apple Inc.)
Supporto applicazioni Apple (64 bit) (HKLM\...\{D39B163A-9E12-442C-95E9-33FA5746AB21}) (Version: 8.5 - Apple Inc.)
TeamViewer 14 (HKLM-x32\...\TeamViewer) (Version: 14.7.1965 - TeamViewer)
Therion (HKLM-x32\...\therion-4.66920160910299_is1) (Version: - Stacho Mudrak, Martin Budaj)
Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.1.0 - Topaz Labs, LLC)
Unity Web Player (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\UnityWebPlayer) (Version: 5.3.1f1 - Unity Technologies ApS)
Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
update_server (HKLM-x32\...\{1D08522D-308D-4615-AEA9-44021FD7445A}_is1) (Version: - )
Video Download Capture V6.3.3 (HKLM-x32\...\{b3336f66-e079-4ff6-abdb-51e2fab781d5}_is1) (Version: 6.3.3 - APOWERSOFT LIMITED)
Video to Video (HKLM-x32\...\{7F95A744-78DA-4AED-A8F0-A0AF330B8411}_is1) (Version: - Media Converters)
Visual SEO Studio (HKLM-x32\...\{63ba0607-9e17-429a-8afd-cc7c0807d35b}) (Version: 1.8.1.2 - aStonish Studio)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN)
VSO ConvertXToDVD 7 (HKLM-x32\...\{A021D003-6933-4EA4-B582-F1D0C3E52409}_is1) (Version: 7.0.0.59 - VSO Software)
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-2) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-3) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{42CF3914-5357-45F2-8B3D-ED2F750FA7E4}) (Version: 1.1.0.51 - Western Digital Technologies, Inc.)
WebSite Auditor (HKLM-x32\...\seopowersuite) (Version: 4.38.11 - SEO PowerSuite)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Wondershare Video Converter Free(Build 6.5.2.3) (HKLM-x32\...\Wondershare Video Converter Free_is1) (Version: 6.5.2.3 - Wondershare Software)
YoutubeMovieMaker (HKLM\...\{543D2D61-3E3D-4CAD-A39A-B40D7E0911DB}) (Version: 18.16 - Youtube Movie Maker)
Zoom (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\ZoomUMX) (Version: 5.0 - Zoom Video Communications, Inc.)
Packages:
=========
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc [2020-04-18] (Adobe Systems Incorporated)
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2020-04-18] (Autodesk Inc.)
Componente aggiuntivo Foto -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation)
Componente aggiuntivo motore dei supporti Foto -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation)
Estensione video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation)
Kindle -> C:\Program Files\WindowsApps\AMZNMobileLLC.KindleforWindows8_2.1.0.2_neutral__stfe6vwa9jnbp [2020-04-12] (0)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
Microsoft News: le ultime notizie in tempo reale -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.39.21501.0_x64__8wekyb3d8bbwe [2020-06-02] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-03] (Microsoft Studios) [MS Ad]
MSN Food & Drink -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Meteo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Salute & Benessere -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Viaggi -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
Raw Image Extension -> C:\Program Files\WindowsApps\Microsoft.RawImageExtension_1.0.30761.0_x64__8wekyb3d8bbwe [2020-05-06] (Microsoft Corporation)
TeamViewer: Remote Control -> C:\Program Files\WindowsApps\TeamViewer.31414B719FA93_15.0.100.0_x86__89446h4zmeyyt [2020-04-18] (TeamViewer)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2020-04-18] (Twitter Inc.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\ChromeHTML: -> <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive - Personal] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}0
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{41052F6E-3662-4584-BCD3-77BCCAAE8470}\InprocServer32 -> C:\Users\MARCO\AppData\Local\SkypePlugin\7.32.6.278\GatewayActiveX-x64.dll (Microsoft Corporation -> Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\MARCO\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{9B57F475-CCB0-4C85-88A9-2AA9A6C0809A} -> [Amazon Drive] => C:\Users\MARCO\Amazon Drive [2016-12-18 00:14]
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\MARCO\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\MARCO\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-04-06] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-04-06] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-04-06] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2020-04-21] (Notepad++ -> )
ContextMenuHandlers1: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} => C:\Program Files (x86)\Globalscape\CuteFTP\CuteShell64.dll [2018-07-02] (GlobalSCAPE, Inc.) [File not signed]
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2020-04-06] (Google LLC -> Google)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2020-05-07] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936} => C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2019-09-23] (ACD Systems International Inc. -> ACD Systems International Inc.)
ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\WINDOWS\SysWOW64\WSCM64.dll [2018-03-26] (Wondershare Software Co., Ltd. -> )
ContextMenuHandlers2: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} => C:\Program Files (x86)\Globalscape\CuteFTP\CuteShell64.dll [2018-07-02] (GlobalSCAPE, Inc.) [File not signed]
ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed]
ContextMenuHandlers4: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} => C:\Program Files (x86)\Globalscape\CuteFTP\CuteShell64.dll [2018-07-02] (GlobalSCAPE, Inc.) [File not signed]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2020-04-06] (Google LLC -> Google)
ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed]
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2020-02-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers6-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\ContextHandler.dll -> No File
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.pDAD] => C:\WINDOWS\system32\prodad-codec.dll [607256 2017-04-26] (proDAD GmbH -> proDAD GmbH)
HKLM\...\Drivers32: [vidc.yv12] => C:\Windows\SysWOW64\yv12vfw.dll [83456 2010-11-03] (www.helixcommunity.org) [File not signed]
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\MARCO\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\ff13ca23fee04978\Marco (mmosca@credem.it) - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 5"
==================== Loaded Modules (Whitelisted) =============
2019-08-31 16:10 - 2019-03-04 01:31 - 000092672 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_ctypes.pyd
2019-08-31 16:10 - 2019-03-04 01:34 - 001096192 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_hashlib.pyd
2019-08-31 16:10 - 2019-03-04 01:32 - 000027648 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_multiprocessing.pyd
2019-08-31 16:10 - 2019-03-04 01:33 - 000046592 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_socket.pyd
2019-08-31 16:10 - 2019-03-04 01:34 - 001415680 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_ssl.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000016384 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_winxptheme.pyd
2019-08-31 16:10 - 2019-03-04 01:32 - 000071168 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\bz2.pyd
2019-08-31 16:10 - 2019-06-08 21:25 - 000014336 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\faulthandler.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 000104448 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.core._multiarray_tests.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 001220608 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.core.multiarray.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 000717312 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.core.umath.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 000066560 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.fft.fftpack_lite.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 001478144 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.linalg._umath_linalg.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 001382912 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.linalg.lapack_lite.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 000664576 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.random.mtrand.pyd
2019-08-31 16:10 - 2019-03-04 01:32 - 000143360 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\pyexpat.pyd
2019-08-31 16:10 - 2018-09-28 17:23 - 000397824 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\pythoncom27.dll
2019-08-31 16:10 - 2018-09-28 17:21 - 000110592 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\pywintypes27.dll
2019-08-31 16:10 - 2019-03-04 01:32 - 000010240 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\select.pyd
2019-08-31 16:10 - 2019-03-04 01:32 - 000687104 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\unicodedata.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000100864 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32api.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000397824 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32com.shell.shell.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000045568 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32console.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000018432 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32event.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000119808 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32file.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000167936 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32gui.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000036864 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32process.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000862208 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._adv.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 005679616 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._core.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000428544 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._grid.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000500736 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._html.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000066560 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._xml.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000091648 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._xrc.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000088576 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx.siplib.pyd
2019-10-05 00:41 - 2015-09-10 16:50 - 000195072 _____ () [File not signed] C:\Program Files (x86)\hicloud\update_server\ExceptionHandler.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 001320448 _____ () [File not signed] C:\Program Files (x86)\hicloud\update_server\hlog.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 000151607 _____ () [File not signed] C:\Program Files (x86)\hicloud\update_server\hpr.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 000107520 _____ () [File not signed] C:\Program Files (x86)\hicloud\update_server\SPUpDate.dll
2020-03-08 18:56 - 2005-07-18 14:43 - 000160256 _____ () [File not signed] C:\Program Files (x86)\MSI\Live Update\unrar.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 003567616 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000114176 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_ctypes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000173056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_elementtree.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002133504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_hashlib.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000032256 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_multiprocessing.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000046080 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_psutil_windows.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000047616 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_socket.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002701824 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_ssl.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026112 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_yappi.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000080896 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\bz2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000016384 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\common.time34.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000007680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\hashobjs_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000301568 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\PIL._imaging.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000169472 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\pyexpat.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001084416 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\pysqlite2._sqlite.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000548864 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\pythoncom27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137728 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\pywintypes27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000010752 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\select.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\thumbnails_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000689664 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\unicodedata.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000119808 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\usb_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000128512 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32api.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000438784 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32com.shell.shell.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000011776 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32crypt.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000023040 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32event.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000149504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32file.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000223232 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32gui.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000048128 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32inet.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000029696 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32pdh.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000027648 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32pipe.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000044032 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32process.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32profile.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000136192 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32security.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026624 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32ts.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000034816 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.conditional.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000038400 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.connectivity.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000071680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.device_monitor.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000109056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.volumes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.winwrap.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001325056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._controls_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001489408 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._core_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001007104 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._gdi_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000103424 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._html2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000916992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._misc_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001039872 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._windows_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000114176 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_ctypes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000173056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_elementtree.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002133504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_hashlib.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000032256 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_multiprocessing.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000046080 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_psutil_windows.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000047616 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_socket.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002701824 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_ssl.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026112 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_yappi.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000080896 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\bz2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000016384 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\common.time34.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000007680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\hashobjs_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000301568 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\PIL._imaging.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000169472 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\pyexpat.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001084416 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\pysqlite2._sqlite.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000548864 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\pythoncom27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137728 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\pywintypes27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000010752 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\select.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\thumbnails_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000689664 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\unicodedata.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000119808 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\usb_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000128512 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32api.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000438784 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32com.shell.shell.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000011776 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32crypt.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000023040 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32event.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000149504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32file.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000223232 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32gui.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000048128 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32inet.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000029696 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32pdh.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000027648 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32pipe.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000044032 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32process.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32profile.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000136192 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32security.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026624 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32ts.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000034816 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.conditional.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000038400 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.connectivity.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000071680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.device_monitor.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000109056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.volumes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.winwrap.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001325056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._controls_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001489408 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._core_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001007104 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._gdi_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000103424 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._html2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000916992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._misc_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001039872 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._windows_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000114176 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_ctypes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000173056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_elementtree.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002133504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_hashlib.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000032256 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_multiprocessing.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000046080 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_psutil_windows.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000047616 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_socket.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002701824 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_ssl.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026112 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_yappi.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000080896 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\bz2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000016384 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\common.time34.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000007680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\hashobjs_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000301568 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\PIL._imaging.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000169472 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\pyexpat.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001084416 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\pysqlite2._sqlite.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000548864 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\pythoncom27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137728 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\pywintypes27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000010752 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\select.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\thumbnails_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000689664 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\unicodedata.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000119808 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\usb_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000128512 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32api.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000438784 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32com.shell.shell.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000011776 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32crypt.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000023040 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32event.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000149504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32file.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000223232 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32gui.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000048128 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32inet.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000029696 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32pdh.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000027648 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32pipe.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000044032 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32process.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32profile.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000136192 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32security.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026624 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32ts.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000034816 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.conditional.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000038400 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.connectivity.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000071680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.device_monitor.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000109056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.volumes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.winwrap.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001325056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._controls_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001489408 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._core_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001007104 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._gdi_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000103424 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._html2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000916992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._misc_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001039872 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._windows_.pyd
2012-05-03 10:47 - 2012-05-03 10:47 - 001681408 _____ (/n software inc. - www.nsoftware.com) [File not signed] C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ipworksssl8.dll
2020-02-28 18:22 - 2020-02-28 18:22 - 001518592 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\AMD\WVR\OpenVR\bin\win64\driver_amdwvr.dll
2015-09-25 19:46 - 2012-09-21 05:00 - 000303104 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNCALBL.DLL
2014-11-22 21:53 - 2012-03-14 06:00 - 000385024 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMLMAE.DLL
2015-09-25 19:46 - 2012-09-20 05:00 - 000390656 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMLMBL.DLL
2014-11-17 00:02 - 2012-07-31 10:48 - 000359936 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMN6PPM.DLL
2014-11-22 21:57 - 2012-03-14 06:00 - 000385024 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMXLMAE.DLL
2017-05-21 00:18 - 2012-09-20 05:00 - 000030208 _____ (CANON INC.) [File not signed] C:\WINDOWS\system32\spool\PRTPROCS\x64\CNMPDBL.DLL
2016-08-22 22:31 - 2019-03-04 01:31 - 002649600 _____ (Python Software Foundation) [File not signed] C:\Program Files (x86)\DisplayCAL\PYTHON27.DLL
2020-06-04 23:00 - 2020-06-04 23:00 - 003042816 _____ (Python Software Foundation) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\python27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 003042816 _____ (Python Software Foundation) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\python27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 003042816 _____ (Python Software Foundation) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\python27.dll
2015-12-17 11:11 - 2015-12-17 11:11 - 000132096 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\epnsm.dll
2009-10-21 17:39 - 2009-10-21 17:39 - 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll
2019-02-22 18:01 - 2019-02-22 18:01 - 000704512 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON\MyEpson Portal\Configration_00000171\MepCfg.dll
2020-04-17 10:15 - 2020-04-17 10:15 - 000577536 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON\MyEpson Portal\MepUploader_00000542\MepUploader.dll
2019-02-22 16:09 - 2019-02-22 16:09 - 000475136 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON\MyEpson Portal\Online Manual_00000013\MepFAQ.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 000285184 _____ (The cURL library, hxxp://curl.haxx.se/) [File not signed] C:\Program Files (x86)\hicloud\update_server\libcurl.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 001204736 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\hicloud\update_server\LIBEAY32.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 000296448 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\hicloud\update_server\SSLEAY32.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000039424 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000413696 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000519168 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 001431040 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 001180672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000135680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\styles\qwindowsvistastyle.dll
2020-02-28 18:30 - 2020-02-28 18:30 - 006010880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 006345216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 001078272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000313856 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 004000256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 003802624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000171008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickControls2.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 001083904 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickTemplates2.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000205312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000329728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000376320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 092323328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 005560832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000188416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 002888704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000053760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000287232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls.2\qtquickcontrols2plugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000329216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000136192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000089088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000312320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Templates.2\qtquicktemplates2plugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2020-02-28 18:30 - 2020-02-28 18:30 - 000085504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtWebEngine\qtwebengineplugin.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 000155136 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxbase30u_net_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 002036736 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxbase30u_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 000136192 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxbase30u_xml_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 001253888 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxmsw30u_adv_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 004882432 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxmsw30u_core_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 000601600 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxmsw30u_html_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 000687104 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxmsw30u_xrc_vc90.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxbase30u_net_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxbase30u_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxmsw30u_adv_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxmsw30u_core_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxmsw30u_html_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxmsw30u_webview_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxbase30u_net_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxbase30u_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxmsw30u_adv_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxmsw30u_core_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxmsw30u_html_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxmsw30u_webview_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxbase30u_net_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxbase30u_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxmsw30u_adv_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxmsw30u_core_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxmsw30u_html_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxmsw30u_webview_vc90_x64.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2020-05-23 15:18 - 000000076 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
81.31.156.30 www.mammacucina.it mammacucina.it
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %INTEL_DEV_REDIST%redist\intel64\compiler;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Program Files\Calibre2\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\Intel\OpenCL SDK\3.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\3.0\bin\x64;C:\Program Files (x86)\Skype\Phone\;C:\Users\MARCO\AppData\Local\Microsoft\WindowsApps;C:\adb;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\PuTTY\
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\MARCO\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\win ltblue 1920x1200.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
MSCONFIG\Services: cFosSpeedS => 2
MSCONFIG\Services: EaseUS Agent => 2
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: ICCS => 3
MSCONFIG\Services: McAfee WebAdvisor => 2
MSCONFIG\Services: MSIClock_CC => 3
MSCONFIG\Services: MSICOMM_CC => 3
MSCONFIG\Services: MSICPU_CC => 3
MSCONFIG\Services: MSICTL_CC => 2
MSCONFIG\Services: MSIDDR_CC => 2
MSCONFIG\Services: MSISMB_CC => 3
MSCONFIG\Services: MSISuperIO_CC => 3
MSCONFIG\Services: MSI_RAMDisk_Service => 2
MSCONFIG\Services: RAMDrivService => 2
MSCONFIG\Services: RichVideo64 => 2
MSCONFIG\Services: tbaseprovisioning => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: WsAppService => 2
MSCONFIG\Services: WsDrvInst => 2
MSCONFIG\Services: WTabletServicePro => 2
HKLM\...\StartupApproved\StartupFolder: => "ScreenManager Pro for LCD Ver3.3.3.lnk"
HKLM\...\StartupApproved\Run: => "VX3000"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "NahimicVRSvc64"
HKLM\...\StartupApproved\Run: => "NahimicVRSvc32"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "Live Update"
HKLM\...\StartupApproved\Run32: => "X_Boost"
HKLM\...\StartupApproved\Run32: => "Command Center"
HKLM\...\StartupApproved\Run32: => "Super Charger"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\StartupFolder: => "Invia a OneNote.lnk"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "AceMoneyReminder"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "AdobeBridge"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "ApplePhotoStreams"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "iCloudPhotos"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "iCloudDrive"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "com.squirrel.WhatsApp.WhatsApp"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{972E1010-21DB-4298-92A6-A98028D3C0F2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9D18D74D-C2A5-4FE6-B09D-630D4C550817}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C1B99A39-F5CB-41F1-B422-1F6CFF50C367}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F5A496EB-6B78-4AEC-862A-13889DA8E319}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E626089B-D62E-4584-9D56-BFE1092E398F}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [File not signed]
FirewallRules: [{007FFAA1-927F-4423-83D2-BE6B7CFA51DC}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [File not signed]
FirewallRules: [TCP Query User{FE9B9AAC-1C6D-4480-90F4-DE8D5EFB5DCE}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe => No File
FirewallRules: [TCP Query User{F4D3DC62-A42A-41A2-8290-A4001B8DEB08}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [UDP Query User{CFF1661A-0E55-4D54-B43C-E2989C1DDE8D}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [{264B0FE5-1294-44E6-A582-5EA2355254A6}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{9936B3B5-C0DA-42ED-9179-4BFE54F65D4C}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{6C5D71A8-1A61-41D2-B301-6E1F09E55902}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{02B5CD24-67D3-4DF7-90F0-E9B6F12602B1}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{EFEEBDB4-63B7-40B5-B65B-792DA410170A}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
FirewallRules: [{21531347-98A1-44AB-8F9F-0C6997A13F4E}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
FirewallRules: [TCP Query User{283C508A-CD5F-4355-AA04-598D95FC5521}D:\downloads\argyll_v1.9.2_win64_exe (1)\argyll_v1.9.2\bin\dispwin.exe] => (Allow) D:\downloads\argyll_v1.9.2_win64_exe (1)\argyll_v1.9.2\bin\dispwin.exe () [File not signed]
FirewallRules: [UDP Query User{A392BE8E-8983-42E8-AC10-1D85A24670A1}D:\downloads\argyll_v1.9.2_win64_exe (1)\argyll_v1.9.2\bin\dispwin.exe] => (Allow) D:\downloads\argyll_v1.9.2_win64_exe (1)\argyll_v1.9.2\bin\dispwin.exe () [File not signed]
FirewallRules: [TCP Query User{32F8D665-FDA0-4A69-A82B-DD52EBED56E3}D:\downloads\argyll_v2.0.0\bin\dispcal.exe] => (Allow) D:\downloads\argyll_v2.0.0\bin\dispcal.exe () [File not signed]
FirewallRules: [UDP Query User{D914CCB3-1764-4AE8-A8BB-9929F2D09EB9}D:\downloads\argyll_v2.0.0\bin\dispcal.exe] => (Allow) D:\downloads\argyll_v2.0.0\bin\dispcal.exe () [File not signed]
FirewallRules: [TCP Query User{2B71089D-280D-49F9-93DA-DCB6D2171652}D:\downloads\argyll_v2.0.0\bin\dispwin.exe] => (Allow) D:\downloads\argyll_v2.0.0\bin\dispwin.exe () [File not signed]
FirewallRules: [UDP Query User{9240E0FB-7C16-42D4-BB09-F0FE4CAB1AD2}D:\downloads\argyll_v2.0.0\bin\dispwin.exe] => (Allow) D:\downloads\argyll_v2.0.0\bin\dispwin.exe () [File not signed]
FirewallRules: [{B2D78AD4-AAEC-4B6A-BC5C-FC929F067A48}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{B38736B5-0BBD-4811-8636-46D6A9F22E5C}C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispcal.exe] => (Allow) C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispcal.exe () [File not signed]
FirewallRules: [UDP Query User{78298E55-EFFE-4CD2-927D-D3B0C8058B76}C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispcal.exe] => (Allow) C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispcal.exe () [File not signed]
FirewallRules: [TCP Query User{1F20F5BA-6DAC-4945-BD70-46991836642D}C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispwin.exe] => (Allow) C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispwin.exe () [File not signed]
FirewallRules: [UDP Query User{72A07AEB-AB22-434E-8F0A-F2AACE07444D}C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispwin.exe] => (Allow) C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispwin.exe () [File not signed]
FirewallRules: [TCP Query User{FFD84F39-CADE-4D5C-9B10-B3F563A13DA7}C:\users\marco\desktop\anydesk.exe] => (Allow) C:\users\marco\desktop\anydesk.exe => No File
FirewallRules: [UDP Query User{585FD831-6740-4D24-8ED6-2BAB3A8E53DF}C:\users\marco\desktop\anydesk.exe] => (Allow) C:\users\marco\desktop\anydesk.exe => No File
FirewallRules: [TCP Query User{F7E6F21A-0E24-4F67-B1A8-CA4034105276}C:\program files (x86)\ezviz studio\ezvizstudio.exe] => (Allow) C:\program files (x86)\ezviz studio\ezvizstudio.exe (EZVIZ Inc. -> EZVIZ Inc.)
FirewallRules: [UDP Query User{976E530D-B52E-4411-BEB8-A313FC302335}C:\program files (x86)\ezviz studio\ezvizstudio.exe] => (Allow) C:\program files (x86)\ezviz studio\ezvizstudio.exe (EZVIZ Inc. -> EZVIZ Inc.)
FirewallRules: [{B7DA1882-332C-44B5-8C61-1C4C6D09B4FC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{479AC355-0CDA-45AD-88DA-EC7055371F94}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{C2BB7098-1EBA-469C-9A40-A825EF85A371}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{9F4A151D-6B70-47F7-AEB9-6F5A06A7F477}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{C6988782-B7FC-4F58-AC4B-9D80FEB4BF94}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1C8E7729-7064-42B4-A115-FB352896BD6D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C872387C-87CB-4121-9D57-18CF35D44920}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1B3C7FC1-49E1-4A40-9492-CA41E1CEE2DF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0EBD4E54-453C-4093-A987-56A961CC98D4}] => (Allow) C:\Program Files\ATOMI\ActivePresenter\ActivePresenter.exe (ATOMI SYSTEMS, INC. -> Atomi Systems, Inc.)
FirewallRules: [{31E76FD8-B68E-4982-A6F0-8D6202A6E798}] => (Allow) C:\Program Files\ATOMI\ActivePresenter\rlactivator.exe (ATOMI SYSTEMS, INC. -> Atomi Systems, Inc.)
FirewallRules: [{D4E5D287-AA90-4736-AE91-26F7BBD365E7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E10BA5A5-2929-421A-BD1E-6C36EA782D92}] => (Allow) C:\Program Files\Easeware\DriverEasy\DriverEasy.exe (Easeware Technology Limited -> Easeware)
FirewallRules: [TCP - Installer for ACDSee Commander Ultimate 2020] => (Allow) C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ACDSeeCommanderUltimate13.exe (ACD Systems International Inc. -> )
FirewallRules: [UDP - Installer for ACDSee Commander Ultimate 2020] => (Allow) C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ACDSeeCommanderUltimate13.exe (ACD Systems International Inc. -> )
FirewallRules: [{26211AB9-B05C-4C58-A1F4-E0E76E82ED6C}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\83.0.4103.2\remoting_host.exe (Google LLC -> Google Inc.)
FirewallRules: [TCP Query User{55A8ECED-0381-4606-BE67-B1BA51C4CC96}C:\users\marco\appdata\local\microsoft\lwaplugin\x86\15.8\lwaplugin.exe] => (Allow) C:\users\marco\appdata\local\microsoft\lwaplugin\x86\15.8\lwaplugin.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{EF94F505-83E0-4CE7-ACE8-08AFDEB258F3}C:\users\marco\appdata\local\microsoft\lwaplugin\x86\15.8\lwaplugin.exe] => (Allow) C:\users\marco\appdata\local\microsoft\lwaplugin\x86\15.8\lwaplugin.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8F751245-A8B2-430D-B009-26BA84313DAC}C:\mamp\bin\apache\bin\httpd.exe] => (Allow) C:\mamp\bin\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [UDP Query User{B3DAD469-8F85-46FF-8966-A34B235630B5}C:\mamp\bin\apache\bin\httpd.exe] => (Allow) C:\mamp\bin\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [TCP Query User{0B403AE2-43F4-4496-90B8-41EAD6D48CE9}C:\mamp\bin\mysql\bin\mysqld.exe] => (Allow) C:\mamp\bin\mysql\bin\mysqld.exe () [File not signed]
FirewallRules: [UDP Query User{CB988F1F-C54D-4823-83CC-10E7156FF047}C:\mamp\bin\mysql\bin\mysqld.exe] => (Allow) C:\mamp\bin\mysql\bin\mysqld.exe () [File not signed]
FirewallRules: [{E6A3560E-E063-44B4-8C05-E3C1E6F7982F}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{03B750F8-222F-4837-9B6F-85D3AE0DABDE}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4FD270F2-EBCB-49A7-B922-9CC304E05A60}] => (Allow) C:\Users\MARCO\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{C7C5EF84-483F-489E-B125-C9CAFC4F4609}] => (Allow) C:\Users\MARCO\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{318D8AEC-F614-43ED-8D85-01ED688047DB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{49D2D72C-29A0-43B5-BDBB-BB8681C8B008}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{68A40FBE-1A2D-4103-9211-9D372DD0CD47}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Editor Pro\Video Editor Pro.exe => No File
FirewallRules: [{5C6BA3C1-F775-45C2-ACA5-400C77F8EF27}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Editor Pro\Video Editor Pro.exe => No File
==================== Restore Points =========================
13-05-2020 15:42:02 Windows Update
22-05-2020 18:04:39 Punto di controllo pianificato
24-05-2020 13:11:21 Installed Epson Software Updater
01-06-2020 11:33:30 Punto di controllo pianificato
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (06/04/2020 11:14:08 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5664,R,98) TILEREPOSITORYS-1-5-18: Si è verificato l'errore -1023 (0xfffffc01) durante l'apertura del file di log C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (06/04/2020 11:01:31 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Il Centro sicurezza PC non è riuscito a convalidare il chiamante con errore %1.
Error: (06/04/2020 10:56:00 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Errore del servizio Copia Shadow del volume: errore inatteso durante il richiamo della routine CoCreateInstance. hr = 0x8007045b, È in corso l'arresto del sistema.
.
Error: (06/04/2020 10:56:00 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informazioni del servizio Copia Shadow del volume: impossibile avviare il server COM con CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} denominato CEventSystem. [0x8007045b, È in corso l'arresto del sistema.
]
Error: (06/04/2020 10:55:58 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Errore durante l'aggiornamento dello stato in SECURITY_PRODUCT_STATE_OFF.
Error: (06/04/2020 10:53:30 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Errore durante l'aggiornamento dello stato in SECURITY_PRODUCT_STATE_ON.
Error: (06/04/2020 10:53:25 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Errore durante l'aggiornamento dello stato in SECURITY_PRODUCT_STATE_ON.
Error: (06/04/2020 10:53:20 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Errore durante l'aggiornamento dello stato in SECURITY_PRODUCT_STATE_ON.
System errors:
=============
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Servizio A portata di clic di Microsoft Office è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 0 millisecondi: Riavvia il servizio.
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio WD Drive Manager. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio Adobe Genuine Monitor Service. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio MSI_ActiveX_Service. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio MSI Live Update Service. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Apple Mobile Device Service è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 60000 millisecondi: Riavvia il servizio.
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio MyEpson Portal Service. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio SAMSUNG Mobile Connectivity Service. Questo evento si è già verificato 1 volta(e).
Windows Defender:
===================================
Date: 2020-06-03 20:25:16.019
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {82106D2D-C471-4E47-99D6-B1D818DF2B67}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
Date: 2020-05-27 15:19:33.715
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {6054F026-568F-4B0C-A961-200215136770}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
Date: 2020-05-27 15:14:26.734
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {721F2FF1-C8CE-4F92-A689-6FEE2D42FC98}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
Date: 2020-05-25 12:41:33.317
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {47AFDB90-44ED-46B2-89D2-8A9CCDFF9BE5}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
Date: 2020-05-17 13:23:22.116
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {872682F6-728A-40B5-9FFC-7A2C078710CF}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
CodeIntegrity:
===================================
Date: 2020-06-04 22:50:15.819
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.602
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.599
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.597
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.594
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.015
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:05.519
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:49:32.783
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 1.M0 01/23/2019
Motherboard: Micro-Star International Co., Ltd. B350 TOMAHAWK (MS-7A34)
Processor: AMD Ryzen 5 1600X Six-Core Processor
Percentage of memory in use: 55%
Total physical RAM: 16335.02 MB
Available physical RAM: 7346.35 MB
Total Virtual: 22209.02 MB
Available Virtual: 10392.54 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:475.89 GB) (Free:184.98 GB) NTFS
Drive d: (DATI) (Fixed) (Total:1862.89 GB) (Free:992.65 GB) NTFS
Drive e: (ESD-ISO) (CDROM) (Total:3.08 GB) (Free:0 GB) UDF
Drive h: (Elements) (Fixed) (Total:3725.99 GB) (Free:950.58 GB) NTFS
Drive n: () (Fixed) (Total:119.24 GB) (Free:82.37 GB) NTFS
\\?\Volume{2ec8b1ec-9dcc-11e6-83b5-902b34557b33}\ (Ripristino) (Fixed) (Total:0.29 GB) (Free:0.28 GB) NTFS
\\?\Volume{658b0dba-d338-4bf1-8e16-29accfc4a607}\ () (Fixed) (Total:0.54 GB) (Free:0.08 GB) NTFS
\\?\Volume{88f80dd2-4114-4c64-be29-2ee9e8e6faa8}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: C212A9CC)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 0FCFAF9E)
Partition: GPT.
==========================================================
Disk: 2 (Size: 119.2 GB) (Disk ID: C212A9CC)
Partition: GPT.
==========================================================
Disk: 3 (Size: 3726 GB) (Disk ID: 16F2A91F)
Partition: GPT.
==================== End of Addition.txt =======================
Ran by MARCO (04-06-2020 23:20:11)
Running from C:\Users\MARCO\Desktop
Windows 10 Home Version 1909 18363.836 (X64) (2019-08-17 20:13:03)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1801797792-2963998745-2400400606-500 - Administrator - Enabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-1801797792-2963998745-2400400606-503 - Limited - Disabled)
gabriella (S-1-5-21-1801797792-2963998745-2400400606-1014 - Limited - Enabled) => C:\Users\gabriella
Guest (S-1-5-21-1801797792-2963998745-2400400606-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1801797792-2963998745-2400400606-1012 - Limited - Enabled)
MARCO (S-1-5-21-1801797792-2963998745-2400400606-1001 - Administrator - Enabled) => C:\Users\MARCO
Simone (S-1-5-21-1801797792-2963998745-2400400606-1007 - Limited - Enabled) => C:\Users\Simone
WDAGUtilityAccount (S-1-5-21-1801797792-2963998745-2400400606-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ACDSee Photo Studio Ultimate 2020 (HKLM\...\{EB2BD38F-44CF-46BB-A00B-72D7FD826A24}) (Version: 13.0.2.2057 - ACD Systems International Inc.)
AceMoney (HKLM-x32\...\AceMoney_is1) (Version: - MechCAD Software)
ActivePresenter (HKLM\...\{A2A40277-D807-4754-95A3-2F294C2C51D3}_is1) (Version: 7.5.13 - Atomi Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 28.0.0.127 - Adobe Systems Incorporated)
Adobe Bridge 2020 (HKLM-x32\...\KBRG_10_0_3) (Version: 10.0.3 - Adobe Inc.)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.1.0.407 - Adobe Systems Incorporated)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.8 - Adobe Systems Incorporated)
Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.3.2 - Adobe Systems Incorporated)
Adobe Lightroom Classic (HKLM-x32\...\LTRM_9_2_1) (Version: 9.2.1 - Adobe Inc.)
Adobe Media Encoder 2019 (HKLM-x32\...\AME_13_1_3) (Version: 13.1.3 - Adobe Systems Incorporated)
Adobe Photoshop 2020 (HKLM-x32\...\PHSP_21_1_1) (Version: 21.1.1 - Adobe Inc.)
Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_1_9) (Version: 19.1.9 - Adobe Systems Incorporated)
Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_9) (Version: 20.0.9 - Adobe Inc.)
Affinity Photo (HKLM\...\{D39FC096-62B2-4F21-BA48-04DAC525F929}) (Version: 1.8.3.641 - Serif (Europe) Ltd)
Amazon Photos (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\Amazon Photos) (Version: 5.6.1 - Amazon.com, Inc.)
AMD Ryzen Master (HKLM\...\{03213877-8001-4F2C-8917-26B127DE1540}) (Version: 1.0.1.0239 - Advanced Micro Devices, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 20.2.2 - Advanced Micro Devices, Inc.)
AOMEI Partition Assistant Standard Edition 6.6 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: - AOMEI Technology Co., Ltd.)
APPBook 1.5.3 (HKLM-x32\...\781df90e-341d-585c-9760-bfee4555962f) (Version: 1.5.3 - ELI S.R.L. - European Language Institute)
APPBook 1.5.6 (HKLM-x32\...\{781df90e-341d-585c-9760-bfee4555962f}) (Version: 1.5.6 - ELI S.R.L. - European Language Institute)
Apple Mobile Device Support (HKLM\...\{C788AE25-3D4E-4D18-811B-3219F778487E}) (Version: 13.5.1.2 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Ashampoo Burning Studio FREE (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG)
Assistente aggiornamento Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17364 - Microsoft Corporation)
Atom (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\atom) (Version: 1.46.0 - GitHub Inc.)
Avidemux 2.7 - 64 bits (HKLM-x32\...\Avidemux 2.7 - 64 bits (64-bit)) (Version: 2.7.1.180604 - )
AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.6 - GPL Public release.)
AVStoDVD 2.8.8 (HKLM-x32\...\AVStoDVD) (Version: 2.8.8 - MrC)
Backup and Sync from Google (HKLM\...\{FE296942-D2D3-4149-8895-60655FE4CFDE}) (Version: 3.49.9800.0000 - Google, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Branding64 (HKLM\...\{856DA29A-EA4A-468B-BBC2-B5F60DD75BFE}) (Version: 1.00.0002 - Advanced Micro Devices, Inc.) Hidden
calibre 64bit (HKLM\...\{FC12E3F8-E522-4E65-A416-D7BDF41FBBA7}) (Version: 2.68.0 - Kovid Goyal)
Canon Utilities Digital Photo Professional 4 (HKLM-x32\...\Digital Photo Professional 4 (x64)) (Version: 4.5.10.1 - Canon Inc.)
Canon Utilities EOS Lens Registration Tool (HKLM-x32\...\EOS Lens Registration Tool) (Version: 1.5.10.0 - Canon Inc.)
Cars 2 multimedia game (HKLM-x32\...\{A72E0BF6-237D-B724-AA15-0B0D6C00EAE3}) (Version: 1.0 - Clementoni S.p.A) Hidden
Cars 2 multimedia game (HKLM-x32\...\it.clementoni.multimediagames.cars2) (Version: 1.0 - Clementoni S.p.A)
CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - )
Centro gestione Mouse e Tastiere Microsoft (HKLM\...\{93FDA8B3-711F-45A7-B7E1-497452B34F5F}) (Version: 10.4.137.0 - Microsoft Corporation) Hidden
Centro gestione Mouse e Tastiere Microsoft (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 10.4.137.0 - Microsoft Corporation)
Chrome Remote Desktop Host (HKLM-x32\...\{654C49EB-D47E-4319-B719-DEEC73787B51}) (Version: 83.0.4103.2 - Google Inc.)
Citrix Online Launcher (HKLM-x32\...\{48947098-A67C-46D4-90C5-9F2F6F0F96FE}) (Version: 1.0.449 - Citrix)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CSV to vCard (HKLM-x32\...\{B9DCBBD4-20F5-424B-9C56-FFF62BE71CD7}_is1) (Version: - csvtovcard.com)
CuteFTP 9 (HKLM-x32\...\{89B9E358-75C6-4C6B-BD38-803FF156CC4B}) (Version: 9.3.0 - Globalscape)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Desktop Telematico 1.0.0 (HKLM\...\Desktop Telematico 1.0.0) (Version: 1.0.0.0 - SOGEI)
DesktopTelematico 1.0.0 (HKLM\...\DesktopTelematico) (Version: - )
DesktopTelematico 1.0.0 (HKLM-x32\...\DesktopTelematico) (Version: - )
Dictate (HKLM-x32\...\{8475267E-D7DF-4A6D-A126-2C6B519E6F74}) (Version: 5.00.0000 - Microsoft)
Digitale_Capitello (HKLM-x32\...\{819FF49A-2BA9-CB4C-0A41-F2A406D42899}) (Version: 6.0 - UNKNOWN) Hidden
Digitale_Capitello (HKLM-x32\...\Digitale.Capitello) (Version: 6.0 - UNKNOWN)
Disinstalla EPSON XP-760 Series Printer (HKLM\...\EPSON XP-760 Series) (Version: - SEIKO EPSON Corporation)
DisplayCAL (HKLM-x32\...\{4714199A-0D66-4E69-97FF-7B54BFF80B88}_is1) (Version: 3.8.5.0 - Florian Höch)
Driver Easy 5.6.14 (HKLM\...\DriverEasy_is1) (Version: 5.6.14 - Easeware)
DVDStyler v3.1 (HKLM\...\DVDStyler_is1) (Version: - Thüring IT-Consulting)
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS)
EaseUS Todo Backup Free 10.6 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 10.6 - CHENGDU YIWO Tech Development Co., Ltd)
Easy Photo Scan (HKLM-x32\...\{BB6241FF-8B76-45A5-95B9-888EDE8E47DC}) (Version: 1.00.0010 - Seiko Epson Corporation)
EOSInfo (HKLM-x32\...\{CC23FF9A-989C-4DEB-8970-50E6E4862315}) (Version: 0.2.0 - astrojargon.net)
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0 - Seiko Epson Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{F05A434E-D3CF-4B44-9D3E-779D42090781}) (Version: 2.8.0.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.50.00 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{D2D9559D-359A-4C61-B93A-FE01AE2BFB75}) (Version: 4.5.4 - Seiko Epson Corporation)
Ezviz Player version V7.2.0 (HKLM-x32\...\{FAC8D04A-541F-4d41-8BFE-4E5F735758DF}}_is1) (Version: V7.2.0 - )
Ezviz Studio (HKLM-x32\...\{49DF99D3-BC81-439A-8F40-A0529159024C}_is1) (Version: - EZVIZ Inc.)
FileZilla Client 3.43.0 (HKLM-x32\...\FileZilla Client) (Version: 3.43.0 - Tim Kosse)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.61 - Google LLC)
Google Earth Pro (HKLM-x32\...\{7A3374DE-3D99-4BD9-9FE8-A76498632D98}) (Version: 7.3.3.7699 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Google Video Support Plugin (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 19.12.1000.0 - Google, LLC.)
GUI for dvdauthor 1.07 (HKLM-x32\...\GUI for dvdauthor) (Version: 1.07 - Boraxsoft)
HandBrake 1.2.2 (HKLM-x32\...\HandBrake) (Version: 1.2.2 - )
Helix YUV Codecs (remove only) (HKLM-x32\...\HelixYUVCodecs) (Version: - )
iCloud (HKLM\...\{F0AD317D-AE18-45D0-BE5B-30074AFE6740}) (Version: 7.19.0.10 - Apple Inc.)
il Nuovo Devoto-Oli Junior LeMonnier (HKLM-x32\...\il Nuovo Devoto-Oli Junior LeMonnier) (Version: 1.0.0.0 - edPan search engine)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.0.0 - LIGHTNING UK!)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Invoicex (HKLM\...\Invoicex) (Version: - )
iTunes (HKLM\...\{81D32D2F-1C41-4874-980D-FBFBC359977F}) (Version: 12.10.7.3 - Apple Inc.)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
K-Lite Codec Pack 14.1.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 14.1.5 - KLCP)
LAV Filters 0.73.1 (HKLM-x32\...\lavfilters_is1) (Version: 0.73.1 - Hendrik Leppkes)
Loom 0.36.1 (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\{3643b966-bc28-5bc8-95ff-3d47d66438db}) (Version: 0.36.1 - Loom, Inc.)
Macromedia Extension Manager (HKLM-x32\...\{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}) (Version: 1.7.240 - Macromedia, Inc.)
MAMP & MAMP PRO 4.1.1 version 4.1.1 (HKLM-x32\...\{A62E77D4-9B74-4CA0-A254-EFE711F7A298}_is1) (Version: 4.1.1 - appsolute Gmbh)
Manuali EPSON (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.54.0.0 - Seiko Epson Corporation)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.0.88 - McAfee, LLC.)
Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{8EC9E7BB-2443-49B1-8476-490EBF932C2E}) (Version: 4.25.512.0 - Microsoft Corporation)
Microsoft Lync Web App Plug-in (HKLM\...\{BE6D5464-0B1F-46CC-8973-F9651FE6A45A}) (Version: 15.8.8308.965 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - it-it (HKLM\...\ProPlusRetail - it-it) (Version: 16.0.12730.20270 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\OneDriveSetup.exe) (Version: 20.064.0329.0008 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.23.27820 (HKLM-x32\...\{852adda4-4c78-4a38-b583-c0b360a329d6}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools per Office Runtime (x64) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ITA) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.44.2 - Microsoft Corporation)
MiniTool Power Data Recovery Free Edition 7.0 (HKLM\...\MiniTool Power Data Recovery Free Edition_is1) (Version: - MiniTool Solution Ltd.)
Monitor Asset Manager (HKLM-x32\...\{AD0BBBFD-C5E9-4214-A863-E83313D67C0C}_is1) (Version: - EnTech Taiwan)
Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.67 - MSI)
MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.3.0.24 - MSI)
MSI X Boost (HKLM-x32\...\{515143BB-7A11-4D85-B941-D520AAAA099C}_is1) (Version: 1.0.0.36 - MSI)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version: - SEIKO EPSON Corporation)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.6 - Notepad++ Team)
OEM Application Profile (HKLM-x32\...\{7F5DCD33-1039-C3B2-9538-B645B65BBA63}) (Version: 1.00.0000 - Nome società) Hidden
OEM Application Profile (HKLM-x32\...\{84AD2AF7-10C8-0395-66F9-FFAEB4C5DBF1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0410-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Pacchetto driver Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (01/27/2014 9.0.0000.00000) (HKLM\...\9CA77E2A8332A0824C54DA611BBE4CA24AB1F750) (Version: 01/27/2014 9.0.0000.00000 - Google, Inc.)
Pacchetto driver Windows - Phase One / Mamiya V-Grip USB Driver (12/03/2014 1.2.0.0) (HKLM\...\3F504CC0B024052107934E093CC26DA720256A7A) (Version: 12/03/2014 1.2.0.0 - Phase One / Mamiya)
Pacchetto driver Windows - Phase One A/S (WinUSB) USBDevice (12/14/2018 1.15.0.0) (HKLM\...\9398055CF8BEEF1D6FCF147047450F15A1C7AF2A) (Version: 12/14/2018 1.15.0.0 - Phase One A/S)
Pacchetto driver Windows - Silicon Laboratories (WinUSB) USB DFU Devices (03/21/2013 1.00.0000) (HKLM\...\F10ECE8185B942E6F1FCC2956ECDFE0C0D33E8A5) (Version: 03/21/2013 1.00.0000 - Silicon Laboratories)
Pacchetto driver Windows - Silicon Laboratories Inc. (silabser) Ports (03/28/2016 6.7.3.350) (HKLM\...\9437A0D535B29915072FCF153C7CA9B5FD547A24) (Version: 03/28/2016 6.7.3.350 - Silicon Laboratories Inc.)
PhotoFilmStrip 3.1.1 (HKLM\...\PhotoFilmStrip_is1) (Version: 3.1.1 - Jens Göpfert)
Planet versione 4.8 (HKLM-x32\...\{90747FA4-A488-45D3-9F91-8E516610CDCF}_is1) (Version: 4.8 - Tecnos)
Poedit (HKLM-x32\...\{68EB2C37-083A-4303-B5D8-41FA67E50B8F}_is1) (Version: 2.0.1 - Vaclav Slavik)
proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.114.1 - proDAD GmbH)
PuTTY release 0.73 (64-bit) (HKLM\...\{44F7642C-AB7E-4468-B028-E8D08A0CBB0E}) (Version: 0.73.0.0 - Simon Tatham)
QGIS 3.4.2 'Madeira' (HKLM\...\QGIS 3.4) (Version: 3.4.2 - QGIS Development Team)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
RAPID Mode (HKLM\...\{18DF567E-AA9B-434D-BE77-BFE2292712F6}) (Version: 1.0.1.96 - Samsung Electronics Co., Ltd.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.35.510.2019 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8746.1 - Realtek Semiconductor Corp.)
RescuePRO Deluxe 5.2.6.6 (HKLM-x32\...\{38D9AAB8-116B-40BB-A801-50B71DF82D24}_is1) (Version: 5.2.6.6 - LC Technology International, Inc.)
RootsMagic 7.6.3.0 (HKLM-x32\...\{D6286873-A757-4A4D-A6EF-0081B3EE32CA}_is1) (Version: RootsMagic 7.6.3.0 - RootsMagic, Inc.)
Ruby 2.3.3-p222-x64 (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\{96A4CEEE-5ACC-4FB2-AAB6-8152D5AB0C9E}_is1) (Version: 2.3.3-p222 - RubyInstaller Team)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.9.7 - Samsung Electronics)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.61.0 - Samsung Electronics Co., Ltd.)
Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 11.1 - Screaming Frog Ltd)
ScreenManager Pro for LCD (HKLM-x32\...\{DAB265AD-27B2-4651-B8D8-F4F3A8ECC705}) (Version: 3.3.3.0 - EIZO Corporation)
SEO Macroscope (HKLM\...\{DC87D91B-D6D0-4557-B494-4501BD4FDA00}) (Version: 1.7.61 - Jason Holland)
Skype versione 8.59 (HKLM-x32\...\Skype_is1) (Version: 8.59 - Skype Technologies S.A.)
Skype Web Plugin (HKLM-x32\...\{EB96DF8B-65A7-4E72-BFB1-38DB36870D16}) (Version: 7.32.6.278 - Skype Technologies S.A.)
SmartSound Quicktracks 5 (HKLM-x32\...\{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) Hidden
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
SnadBoy's Revelation v2 (HKLM-x32\...\SnadBoy's Revelation v2) (Version: 2.0.1.100 - SnadBoy Software)
Software Saal Design Italy (HKLM-x32\...\{00E0CBD7-C440-FD08-478C-A2074418339E}) (Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Software Saal Design Italy (HKLM-x32\...\SoftwareSaalDesignItaly) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Spyder4Pro (HKLM-x32\...\Spyder4Pro) (Version: - )
Supporto applicazioni Apple (32 bit) (HKLM-x32\...\{11C4575B-4B32-44D2-A097-D59A00BA60DE}) (Version: 8.5 - Apple Inc.)
Supporto applicazioni Apple (64 bit) (HKLM\...\{D39B163A-9E12-442C-95E9-33FA5746AB21}) (Version: 8.5 - Apple Inc.)
TeamViewer 14 (HKLM-x32\...\TeamViewer) (Version: 14.7.1965 - TeamViewer)
Therion (HKLM-x32\...\therion-4.66920160910299_is1) (Version: - Stacho Mudrak, Martin Budaj)
Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.1.0 - Topaz Labs, LLC)
Unity Web Player (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\UnityWebPlayer) (Version: 5.3.1f1 - Unity Technologies ApS)
Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
update_server (HKLM-x32\...\{1D08522D-308D-4615-AEA9-44021FD7445A}_is1) (Version: - )
Video Download Capture V6.3.3 (HKLM-x32\...\{b3336f66-e079-4ff6-abdb-51e2fab781d5}_is1) (Version: 6.3.3 - APOWERSOFT LIMITED)
Video to Video (HKLM-x32\...\{7F95A744-78DA-4AED-A8F0-A0AF330B8411}_is1) (Version: - Media Converters)
Visual SEO Studio (HKLM-x32\...\{63ba0607-9e17-429a-8afd-cc7c0807d35b}) (Version: 1.8.1.2 - aStonish Studio)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN)
VSO ConvertXToDVD 7 (HKLM-x32\...\{A021D003-6933-4EA4-B582-F1D0C3E52409}_is1) (Version: 7.0.0.59 - VSO Software)
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-2) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-3) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{42CF3914-5357-45F2-8B3D-ED2F750FA7E4}) (Version: 1.1.0.51 - Western Digital Technologies, Inc.)
WebSite Auditor (HKLM-x32\...\seopowersuite) (Version: 4.38.11 - SEO PowerSuite)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Wondershare Video Converter Free(Build 6.5.2.3) (HKLM-x32\...\Wondershare Video Converter Free_is1) (Version: 6.5.2.3 - Wondershare Software)
YoutubeMovieMaker (HKLM\...\{543D2D61-3E3D-4CAD-A39A-B40D7E0911DB}) (Version: 18.16 - Youtube Movie Maker)
Zoom (HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\ZoomUMX) (Version: 5.0 - Zoom Video Communications, Inc.)
Packages:
=========
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc [2020-04-18] (Adobe Systems Incorporated)
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2020-04-18] (Autodesk Inc.)
Componente aggiuntivo Foto -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation)
Componente aggiuntivo motore dei supporti Foto -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation)
Estensione video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation)
Kindle -> C:\Program Files\WindowsApps\AMZNMobileLLC.KindleforWindows8_2.1.0.2_neutral__stfe6vwa9jnbp [2020-04-12] (0)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
Microsoft News: le ultime notizie in tempo reale -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.39.21501.0_x64__8wekyb3d8bbwe [2020-06-02] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-03] (Microsoft Studios) [MS Ad]
MSN Food & Drink -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Meteo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Salute & Benessere -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
MSN Viaggi -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
Raw Image Extension -> C:\Program Files\WindowsApps\Microsoft.RawImageExtension_1.0.30761.0_x64__8wekyb3d8bbwe [2020-05-06] (Microsoft Corporation)
TeamViewer: Remote Control -> C:\Program Files\WindowsApps\TeamViewer.31414B719FA93_15.0.100.0_x86__89446h4zmeyyt [2020-04-18] (TeamViewer)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2020-04-18] (Twitter Inc.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\ChromeHTML: -> <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive - Personal] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}0
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{41052F6E-3662-4584-BCD3-77BCCAAE8470}\InprocServer32 -> C:\Users\MARCO\AppData\Local\SkypePlugin\7.32.6.278\GatewayActiveX-x64.dll (Microsoft Corporation -> Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\MARCO\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{9B57F475-CCB0-4C85-88A9-2AA9A6C0809A} -> [Amazon Drive] => C:\Users\MARCO\Amazon Drive [2016-12-18 00:14]
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\MARCO\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\MARCO\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-04-06] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-04-06] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-04-06] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2020-04-21] (Notepad++ -> )
ContextMenuHandlers1: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} => C:\Program Files (x86)\Globalscape\CuteFTP\CuteShell64.dll [2018-07-02] (GlobalSCAPE, Inc.) [File not signed]
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2020-04-06] (Google LLC -> Google)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2020-05-07] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936} => C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2019-09-23] (ACD Systems International Inc. -> ACD Systems International Inc.)
ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\WINDOWS\SysWOW64\WSCM64.dll [2018-03-26] (Wondershare Software Co., Ltd. -> )
ContextMenuHandlers2: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} => C:\Program Files (x86)\Globalscape\CuteFTP\CuteShell64.dll [2018-07-02] (GlobalSCAPE, Inc.) [File not signed]
ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed]
ContextMenuHandlers4: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} => C:\Program Files (x86)\Globalscape\CuteFTP\CuteShell64.dll [2018-07-02] (GlobalSCAPE, Inc.) [File not signed]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2020-04-06] (Google LLC -> Google)
ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed]
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2020-02-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers6-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\ContextHandler.dll -> No File
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.pDAD] => C:\WINDOWS\system32\prodad-codec.dll [607256 2017-04-26] (proDAD GmbH -> proDAD GmbH)
HKLM\...\Drivers32: [vidc.yv12] => C:\Windows\SysWOW64\yv12vfw.dll [83456 2010-11-03] (www.helixcommunity.org) [File not signed]
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\MARCO\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\ff13ca23fee04978\Marco (mmosca@credem.it) - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 5"
==================== Loaded Modules (Whitelisted) =============
2019-08-31 16:10 - 2019-03-04 01:31 - 000092672 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_ctypes.pyd
2019-08-31 16:10 - 2019-03-04 01:34 - 001096192 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_hashlib.pyd
2019-08-31 16:10 - 2019-03-04 01:32 - 000027648 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_multiprocessing.pyd
2019-08-31 16:10 - 2019-03-04 01:33 - 000046592 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_socket.pyd
2019-08-31 16:10 - 2019-03-04 01:34 - 001415680 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_ssl.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000016384 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\_winxptheme.pyd
2019-08-31 16:10 - 2019-03-04 01:32 - 000071168 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\bz2.pyd
2019-08-31 16:10 - 2019-06-08 21:25 - 000014336 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\faulthandler.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 000104448 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.core._multiarray_tests.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 001220608 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.core.multiarray.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 000717312 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.core.umath.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 000066560 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.fft.fftpack_lite.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 001478144 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.linalg._umath_linalg.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 001382912 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.linalg.lapack_lite.pyd
2019-08-31 16:10 - 2018-08-04 17:26 - 000664576 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\numpy.random.mtrand.pyd
2019-08-31 16:10 - 2019-03-04 01:32 - 000143360 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\pyexpat.pyd
2019-08-31 16:10 - 2018-09-28 17:23 - 000397824 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\pythoncom27.dll
2019-08-31 16:10 - 2018-09-28 17:21 - 000110592 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\pywintypes27.dll
2019-08-31 16:10 - 2019-03-04 01:32 - 000010240 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\select.pyd
2019-08-31 16:10 - 2019-03-04 01:32 - 000687104 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\unicodedata.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000100864 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32api.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000397824 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32com.shell.shell.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000045568 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32console.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000018432 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32event.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000119808 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32file.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000167936 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32gui.pyd
2019-08-31 16:10 - 2019-06-08 23:12 - 000036864 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\win32process.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000862208 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._adv.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 005679616 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._core.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000428544 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._grid.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000500736 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._html.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000066560 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._xml.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000091648 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx._xrc.pyd
2019-08-31 16:10 - 2019-06-01 21:25 - 000088576 _____ () [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wx.siplib.pyd
2019-10-05 00:41 - 2015-09-10 16:50 - 000195072 _____ () [File not signed] C:\Program Files (x86)\hicloud\update_server\ExceptionHandler.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 001320448 _____ () [File not signed] C:\Program Files (x86)\hicloud\update_server\hlog.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 000151607 _____ () [File not signed] C:\Program Files (x86)\hicloud\update_server\hpr.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 000107520 _____ () [File not signed] C:\Program Files (x86)\hicloud\update_server\SPUpDate.dll
2020-03-08 18:56 - 2005-07-18 14:43 - 000160256 _____ () [File not signed] C:\Program Files (x86)\MSI\Live Update\unrar.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 003567616 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000114176 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_ctypes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000173056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_elementtree.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002133504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_hashlib.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000032256 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_multiprocessing.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000046080 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_psutil_windows.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000047616 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_socket.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002701824 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_ssl.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026112 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\_yappi.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000080896 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\bz2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000016384 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\common.time34.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000007680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\hashobjs_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000301568 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\PIL._imaging.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000169472 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\pyexpat.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001084416 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\pysqlite2._sqlite.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000548864 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\pythoncom27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137728 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\pywintypes27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000010752 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\select.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\thumbnails_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000689664 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\unicodedata.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000119808 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\usb_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000128512 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32api.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000438784 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32com.shell.shell.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000011776 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32crypt.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000023040 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32event.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000149504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32file.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000223232 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32gui.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000048128 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32inet.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000029696 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32pdh.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000027648 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32pipe.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000044032 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32process.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32profile.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000136192 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32security.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026624 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\win32ts.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000034816 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.conditional.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000038400 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.connectivity.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000071680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.device_monitor.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000109056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.volumes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\windows.winwrap.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001325056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._controls_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001489408 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._core_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001007104 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._gdi_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000103424 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._html2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000916992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._misc_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001039872 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wx._windows_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000114176 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_ctypes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000173056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_elementtree.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002133504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_hashlib.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000032256 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_multiprocessing.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000046080 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_psutil_windows.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000047616 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_socket.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002701824 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_ssl.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026112 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\_yappi.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000080896 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\bz2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000016384 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\common.time34.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000007680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\hashobjs_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000301568 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\PIL._imaging.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000169472 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\pyexpat.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001084416 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\pysqlite2._sqlite.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000548864 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\pythoncom27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137728 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\pywintypes27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000010752 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\select.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\thumbnails_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000689664 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\unicodedata.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000119808 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\usb_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000128512 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32api.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000438784 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32com.shell.shell.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000011776 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32crypt.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000023040 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32event.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000149504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32file.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000223232 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32gui.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000048128 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32inet.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000029696 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32pdh.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000027648 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32pipe.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000044032 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32process.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32profile.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000136192 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32security.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026624 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\win32ts.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000034816 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.conditional.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000038400 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.connectivity.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000071680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.device_monitor.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000109056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.volumes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\windows.winwrap.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001325056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._controls_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001489408 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._core_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001007104 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._gdi_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000103424 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._html2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000916992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._misc_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001039872 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wx._windows_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000114176 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_ctypes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000173056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_elementtree.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002133504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_hashlib.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000032256 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_multiprocessing.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000046080 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_psutil_windows.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000047616 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_socket.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 002701824 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_ssl.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026112 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\_yappi.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000080896 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\bz2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000016384 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\common.time34.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000007680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\hashobjs_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000301568 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\PIL._imaging.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000169472 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\pyexpat.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001084416 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\pysqlite2._sqlite.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000548864 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\pythoncom27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137728 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\pywintypes27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000010752 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\select.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\thumbnails_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000689664 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\unicodedata.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000119808 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\usb_ext.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000128512 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32api.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000438784 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32com.shell.shell.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000011776 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32crypt.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000023040 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32event.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000149504 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32file.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000223232 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32gui.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000048128 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32inet.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000029696 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32pdh.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000027648 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32pipe.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000044032 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32process.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32profile.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000136192 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32security.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000026624 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\win32ts.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000034816 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.conditional.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000038400 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.connectivity.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000071680 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.device_monitor.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000109056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.volumes.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000020480 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\windows.winwrap.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001325056 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._controls_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001489408 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._core_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001007104 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._gdi_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000103424 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._html2.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 000916992 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._misc_.pyd
2020-06-04 23:00 - 2020-06-04 23:00 - 001039872 _____ () [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wx._windows_.pyd
2012-05-03 10:47 - 2012-05-03 10:47 - 001681408 _____ (/n software inc. - www.nsoftware.com) [File not signed] C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ipworksssl8.dll
2020-02-28 18:22 - 2020-02-28 18:22 - 001518592 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\AMD\WVR\OpenVR\bin\win64\driver_amdwvr.dll
2015-09-25 19:46 - 2012-09-21 05:00 - 000303104 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNCALBL.DLL
2014-11-22 21:53 - 2012-03-14 06:00 - 000385024 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMLMAE.DLL
2015-09-25 19:46 - 2012-09-20 05:00 - 000390656 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMLMBL.DLL
2014-11-17 00:02 - 2012-07-31 10:48 - 000359936 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMN6PPM.DLL
2014-11-22 21:57 - 2012-03-14 06:00 - 000385024 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMXLMAE.DLL
2017-05-21 00:18 - 2012-09-20 05:00 - 000030208 _____ (CANON INC.) [File not signed] C:\WINDOWS\system32\spool\PRTPROCS\x64\CNMPDBL.DLL
2016-08-22 22:31 - 2019-03-04 01:31 - 002649600 _____ (Python Software Foundation) [File not signed] C:\Program Files (x86)\DisplayCAL\PYTHON27.DLL
2020-06-04 23:00 - 2020-06-04 23:00 - 003042816 _____ (Python Software Foundation) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\python27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 003042816 _____ (Python Software Foundation) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\python27.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 003042816 _____ (Python Software Foundation) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\python27.dll
2015-12-17 11:11 - 2015-12-17 11:11 - 000132096 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\epnsm.dll
2009-10-21 17:39 - 2009-10-21 17:39 - 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll
2019-02-22 18:01 - 2019-02-22 18:01 - 000704512 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON\MyEpson Portal\Configration_00000171\MepCfg.dll
2020-04-17 10:15 - 2020-04-17 10:15 - 000577536 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON\MyEpson Portal\MepUploader_00000542\MepUploader.dll
2019-02-22 16:09 - 2019-02-22 16:09 - 000475136 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON\MyEpson Portal\Online Manual_00000013\MepFAQ.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 000285184 _____ (The cURL library, hxxp://curl.haxx.se/) [File not signed] C:\Program Files (x86)\hicloud\update_server\libcurl.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 001204736 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\hicloud\update_server\LIBEAY32.dll
2019-10-05 00:41 - 2015-09-10 16:50 - 000296448 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\hicloud\update_server\SSLEAY32.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000039424 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000413696 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000519168 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 001431040 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 001180672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000135680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\styles\qwindowsvistastyle.dll
2020-02-28 18:30 - 2020-02-28 18:30 - 006010880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 006345216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 001078272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000313856 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 004000256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 003802624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000171008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickControls2.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 001083904 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickTemplates2.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000205312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000329728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000376320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 092323328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 005560832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 000188416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2019-07-18 10:16 - 2019-07-18 10:16 - 002888704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000053760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000287232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls.2\qtquickcontrols2plugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000329216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000136192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000089088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000312320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Templates.2\qtquicktemplates2plugin.dll
2019-07-18 10:17 - 2019-07-18 10:17 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2020-02-28 18:30 - 2020-02-28 18:30 - 000085504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtWebEngine\qtwebengineplugin.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 000155136 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxbase30u_net_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 002036736 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxbase30u_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 000136192 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxbase30u_xml_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 001253888 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxmsw30u_adv_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 004882432 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxmsw30u_core_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 000601600 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxmsw30u_html_vc90.dll
2019-08-31 16:10 - 2019-06-01 21:25 - 000687104 _____ (wxWidgets development team) [File not signed] C:\Program Files (x86)\DisplayCAL\lib\wxmsw30u_xrc_vc90.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxbase30u_net_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxbase30u_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxmsw30u_adv_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxmsw30u_core_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxmsw30u_html_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI106842\wxmsw30u_webview_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxbase30u_net_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxbase30u_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxmsw30u_adv_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxmsw30u_core_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxmsw30u_html_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI142682\wxmsw30u_webview_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxbase30u_net_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxbase30u_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxmsw30u_adv_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxmsw30u_core_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxmsw30u_html_vc90_x64.dll
2020-06-04 23:00 - 2020-06-04 23:00 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\MARCO\AppData\Local\Temp\_MEI84962\wxmsw30u_webview_vc90_x64.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2020-05-23 15:18 - 000000076 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
81.31.156.30 www.mammacucina.it mammacucina.it
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %INTEL_DEV_REDIST%redist\intel64\compiler;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Program Files\Calibre2\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\Intel\OpenCL SDK\3.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\3.0\bin\x64;C:\Program Files (x86)\Skype\Phone\;C:\Users\MARCO\AppData\Local\Microsoft\WindowsApps;C:\adb;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\PuTTY\
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\MARCO\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\win ltblue 1920x1200.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
MSCONFIG\Services: cFosSpeedS => 2
MSCONFIG\Services: EaseUS Agent => 2
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: ICCS => 3
MSCONFIG\Services: McAfee WebAdvisor => 2
MSCONFIG\Services: MSIClock_CC => 3
MSCONFIG\Services: MSICOMM_CC => 3
MSCONFIG\Services: MSICPU_CC => 3
MSCONFIG\Services: MSICTL_CC => 2
MSCONFIG\Services: MSIDDR_CC => 2
MSCONFIG\Services: MSISMB_CC => 3
MSCONFIG\Services: MSISuperIO_CC => 3
MSCONFIG\Services: MSI_RAMDisk_Service => 2
MSCONFIG\Services: RAMDrivService => 2
MSCONFIG\Services: RichVideo64 => 2
MSCONFIG\Services: tbaseprovisioning => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: WsAppService => 2
MSCONFIG\Services: WsDrvInst => 2
MSCONFIG\Services: WTabletServicePro => 2
HKLM\...\StartupApproved\StartupFolder: => "ScreenManager Pro for LCD Ver3.3.3.lnk"
HKLM\...\StartupApproved\Run: => "VX3000"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "NahimicVRSvc64"
HKLM\...\StartupApproved\Run: => "NahimicVRSvc32"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "Live Update"
HKLM\...\StartupApproved\Run32: => "X_Boost"
HKLM\...\StartupApproved\Run32: => "Command Center"
HKLM\...\StartupApproved\Run32: => "Super Charger"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\StartupFolder: => "Invia a OneNote.lnk"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "AceMoneyReminder"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "AdobeBridge"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "ApplePhotoStreams"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "iCloudPhotos"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "iCloudDrive"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-1801797792-2963998745-2400400606-1001\...\StartupApproved\Run: => "com.squirrel.WhatsApp.WhatsApp"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{972E1010-21DB-4298-92A6-A98028D3C0F2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9D18D74D-C2A5-4FE6-B09D-630D4C550817}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C1B99A39-F5CB-41F1-B422-1F6CFF50C367}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F5A496EB-6B78-4AEC-862A-13889DA8E319}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E626089B-D62E-4584-9D56-BFE1092E398F}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [File not signed]
FirewallRules: [{007FFAA1-927F-4423-83D2-BE6B7CFA51DC}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [File not signed]
FirewallRules: [TCP Query User{FE9B9AAC-1C6D-4480-90F4-DE8D5EFB5DCE}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe => No File
FirewallRules: [TCP Query User{F4D3DC62-A42A-41A2-8290-A4001B8DEB08}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [UDP Query User{CFF1661A-0E55-4D54-B43C-E2989C1DDE8D}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [{264B0FE5-1294-44E6-A582-5EA2355254A6}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{9936B3B5-C0DA-42ED-9179-4BFE54F65D4C}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{6C5D71A8-1A61-41D2-B301-6E1F09E55902}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{02B5CD24-67D3-4DF7-90F0-E9B6F12602B1}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{EFEEBDB4-63B7-40B5-B65B-792DA410170A}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
FirewallRules: [{21531347-98A1-44AB-8F9F-0C6997A13F4E}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
FirewallRules: [TCP Query User{283C508A-CD5F-4355-AA04-598D95FC5521}D:\downloads\argyll_v1.9.2_win64_exe (1)\argyll_v1.9.2\bin\dispwin.exe] => (Allow) D:\downloads\argyll_v1.9.2_win64_exe (1)\argyll_v1.9.2\bin\dispwin.exe () [File not signed]
FirewallRules: [UDP Query User{A392BE8E-8983-42E8-AC10-1D85A24670A1}D:\downloads\argyll_v1.9.2_win64_exe (1)\argyll_v1.9.2\bin\dispwin.exe] => (Allow) D:\downloads\argyll_v1.9.2_win64_exe (1)\argyll_v1.9.2\bin\dispwin.exe () [File not signed]
FirewallRules: [TCP Query User{32F8D665-FDA0-4A69-A82B-DD52EBED56E3}D:\downloads\argyll_v2.0.0\bin\dispcal.exe] => (Allow) D:\downloads\argyll_v2.0.0\bin\dispcal.exe () [File not signed]
FirewallRules: [UDP Query User{D914CCB3-1764-4AE8-A8BB-9929F2D09EB9}D:\downloads\argyll_v2.0.0\bin\dispcal.exe] => (Allow) D:\downloads\argyll_v2.0.0\bin\dispcal.exe () [File not signed]
FirewallRules: [TCP Query User{2B71089D-280D-49F9-93DA-DCB6D2171652}D:\downloads\argyll_v2.0.0\bin\dispwin.exe] => (Allow) D:\downloads\argyll_v2.0.0\bin\dispwin.exe () [File not signed]
FirewallRules: [UDP Query User{9240E0FB-7C16-42D4-BB09-F0FE4CAB1AD2}D:\downloads\argyll_v2.0.0\bin\dispwin.exe] => (Allow) D:\downloads\argyll_v2.0.0\bin\dispwin.exe () [File not signed]
FirewallRules: [{B2D78AD4-AAEC-4B6A-BC5C-FC929F067A48}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{B38736B5-0BBD-4811-8636-46D6A9F22E5C}C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispcal.exe] => (Allow) C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispcal.exe () [File not signed]
FirewallRules: [UDP Query User{78298E55-EFFE-4CD2-927D-D3B0C8058B76}C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispcal.exe] => (Allow) C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispcal.exe () [File not signed]
FirewallRules: [TCP Query User{1F20F5BA-6DAC-4945-BD70-46991836642D}C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispwin.exe] => (Allow) C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispwin.exe () [File not signed]
FirewallRules: [UDP Query User{72A07AEB-AB22-434E-8F0A-F2AACE07444D}C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispwin.exe] => (Allow) C:\users\marco\appdata\roaming\displaycal\dl\argyll_v2.1.1\bin\dispwin.exe () [File not signed]
FirewallRules: [TCP Query User{FFD84F39-CADE-4D5C-9B10-B3F563A13DA7}C:\users\marco\desktop\anydesk.exe] => (Allow) C:\users\marco\desktop\anydesk.exe => No File
FirewallRules: [UDP Query User{585FD831-6740-4D24-8ED6-2BAB3A8E53DF}C:\users\marco\desktop\anydesk.exe] => (Allow) C:\users\marco\desktop\anydesk.exe => No File
FirewallRules: [TCP Query User{F7E6F21A-0E24-4F67-B1A8-CA4034105276}C:\program files (x86)\ezviz studio\ezvizstudio.exe] => (Allow) C:\program files (x86)\ezviz studio\ezvizstudio.exe (EZVIZ Inc. -> EZVIZ Inc.)
FirewallRules: [UDP Query User{976E530D-B52E-4411-BEB8-A313FC302335}C:\program files (x86)\ezviz studio\ezvizstudio.exe] => (Allow) C:\program files (x86)\ezviz studio\ezvizstudio.exe (EZVIZ Inc. -> EZVIZ Inc.)
FirewallRules: [{B7DA1882-332C-44B5-8C61-1C4C6D09B4FC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{479AC355-0CDA-45AD-88DA-EC7055371F94}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{C2BB7098-1EBA-469C-9A40-A825EF85A371}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{9F4A151D-6B70-47F7-AEB9-6F5A06A7F477}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{C6988782-B7FC-4F58-AC4B-9D80FEB4BF94}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1C8E7729-7064-42B4-A115-FB352896BD6D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C872387C-87CB-4121-9D57-18CF35D44920}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1B3C7FC1-49E1-4A40-9492-CA41E1CEE2DF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0EBD4E54-453C-4093-A987-56A961CC98D4}] => (Allow) C:\Program Files\ATOMI\ActivePresenter\ActivePresenter.exe (ATOMI SYSTEMS, INC. -> Atomi Systems, Inc.)
FirewallRules: [{31E76FD8-B68E-4982-A6F0-8D6202A6E798}] => (Allow) C:\Program Files\ATOMI\ActivePresenter\rlactivator.exe (ATOMI SYSTEMS, INC. -> Atomi Systems, Inc.)
FirewallRules: [{D4E5D287-AA90-4736-AE91-26F7BBD365E7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E10BA5A5-2929-421A-BD1E-6C36EA782D92}] => (Allow) C:\Program Files\Easeware\DriverEasy\DriverEasy.exe (Easeware Technology Limited -> Easeware)
FirewallRules: [TCP - Installer for ACDSee Commander Ultimate 2020] => (Allow) C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ACDSeeCommanderUltimate13.exe (ACD Systems International Inc. -> )
FirewallRules: [UDP - Installer for ACDSee Commander Ultimate 2020] => (Allow) C:\Program Files\ACD Systems\ACDSee Ultimate\13.0\ACDSeeCommanderUltimate13.exe (ACD Systems International Inc. -> )
FirewallRules: [{26211AB9-B05C-4C58-A1F4-E0E76E82ED6C}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\83.0.4103.2\remoting_host.exe (Google LLC -> Google Inc.)
FirewallRules: [TCP Query User{55A8ECED-0381-4606-BE67-B1BA51C4CC96}C:\users\marco\appdata\local\microsoft\lwaplugin\x86\15.8\lwaplugin.exe] => (Allow) C:\users\marco\appdata\local\microsoft\lwaplugin\x86\15.8\lwaplugin.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{EF94F505-83E0-4CE7-ACE8-08AFDEB258F3}C:\users\marco\appdata\local\microsoft\lwaplugin\x86\15.8\lwaplugin.exe] => (Allow) C:\users\marco\appdata\local\microsoft\lwaplugin\x86\15.8\lwaplugin.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8F751245-A8B2-430D-B009-26BA84313DAC}C:\mamp\bin\apache\bin\httpd.exe] => (Allow) C:\mamp\bin\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [UDP Query User{B3DAD469-8F85-46FF-8966-A34B235630B5}C:\mamp\bin\apache\bin\httpd.exe] => (Allow) C:\mamp\bin\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [TCP Query User{0B403AE2-43F4-4496-90B8-41EAD6D48CE9}C:\mamp\bin\mysql\bin\mysqld.exe] => (Allow) C:\mamp\bin\mysql\bin\mysqld.exe () [File not signed]
FirewallRules: [UDP Query User{CB988F1F-C54D-4823-83CC-10E7156FF047}C:\mamp\bin\mysql\bin\mysqld.exe] => (Allow) C:\mamp\bin\mysql\bin\mysqld.exe () [File not signed]
FirewallRules: [{E6A3560E-E063-44B4-8C05-E3C1E6F7982F}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{03B750F8-222F-4837-9B6F-85D3AE0DABDE}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4FD270F2-EBCB-49A7-B922-9CC304E05A60}] => (Allow) C:\Users\MARCO\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{C7C5EF84-483F-489E-B125-C9CAFC4F4609}] => (Allow) C:\Users\MARCO\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{318D8AEC-F614-43ED-8D85-01ED688047DB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{49D2D72C-29A0-43B5-BDBB-BB8681C8B008}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{68A40FBE-1A2D-4103-9211-9D372DD0CD47}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Editor Pro\Video Editor Pro.exe => No File
FirewallRules: [{5C6BA3C1-F775-45C2-ACA5-400C77F8EF27}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Editor Pro\Video Editor Pro.exe => No File
==================== Restore Points =========================
13-05-2020 15:42:02 Windows Update
22-05-2020 18:04:39 Punto di controllo pianificato
24-05-2020 13:11:21 Installed Epson Software Updater
01-06-2020 11:33:30 Punto di controllo pianificato
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (06/04/2020 11:14:08 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5664,R,98) TILEREPOSITORYS-1-5-18: Si è verificato l'errore -1023 (0xfffffc01) durante l'apertura del file di log C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (06/04/2020 11:01:31 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Il Centro sicurezza PC non è riuscito a convalidare il chiamante con errore %1.
Error: (06/04/2020 10:56:00 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Errore del servizio Copia Shadow del volume: errore inatteso durante il richiamo della routine CoCreateInstance. hr = 0x8007045b, È in corso l'arresto del sistema.
.
Error: (06/04/2020 10:56:00 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informazioni del servizio Copia Shadow del volume: impossibile avviare il server COM con CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} denominato CEventSystem. [0x8007045b, È in corso l'arresto del sistema.
]
Error: (06/04/2020 10:55:58 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Errore durante l'aggiornamento dello stato in SECURITY_PRODUCT_STATE_OFF.
Error: (06/04/2020 10:53:30 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Errore durante l'aggiornamento dello stato in SECURITY_PRODUCT_STATE_ON.
Error: (06/04/2020 10:53:25 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Errore durante l'aggiornamento dello stato in SECURITY_PRODUCT_STATE_ON.
Error: (06/04/2020 10:53:20 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Errore durante l'aggiornamento dello stato in SECURITY_PRODUCT_STATE_ON.
System errors:
=============
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Servizio A portata di clic di Microsoft Office è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 0 millisecondi: Riavvia il servizio.
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio WD Drive Manager. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio Adobe Genuine Monitor Service. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio MSI_ActiveX_Service. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio MSI Live Update Service. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Apple Mobile Device Service è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 60000 millisecondi: Riavvia il servizio.
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio MyEpson Portal Service. Questo evento si è già verificato 1 volta(e).
Error: (06/04/2020 10:58:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio SAMSUNG Mobile Connectivity Service. Questo evento si è già verificato 1 volta(e).
Windows Defender:
===================================
Date: 2020-06-03 20:25:16.019
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {82106D2D-C471-4E47-99D6-B1D818DF2B67}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
Date: 2020-05-27 15:19:33.715
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {6054F026-568F-4B0C-A961-200215136770}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
Date: 2020-05-27 15:14:26.734
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {721F2FF1-C8CE-4F92-A689-6FEE2D42FC98}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
Date: 2020-05-25 12:41:33.317
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {47AFDB90-44ED-46B2-89D2-8A9CCDFF9BE5}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
Date: 2020-05-17 13:23:22.116
Description:
Windows Defender Antivirus: analisi interrotta prima del completamento.
ID analisi: {872682F6-728A-40B5-9FFC-7A2C078710CF}
Tipo analisi: Antimalware
Parametri analisi: Analisi veloce
Utente: NT AUTHORITY\SYSTEM
CodeIntegrity:
===================================
Date: 2020-06-04 22:50:15.819
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.602
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.599
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.597
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.594
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:10.015
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:50:05.519
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-06-04 22:49:32.783
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 1.M0 01/23/2019
Motherboard: Micro-Star International Co., Ltd. B350 TOMAHAWK (MS-7A34)
Processor: AMD Ryzen 5 1600X Six-Core Processor
Percentage of memory in use: 55%
Total physical RAM: 16335.02 MB
Available physical RAM: 7346.35 MB
Total Virtual: 22209.02 MB
Available Virtual: 10392.54 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:475.89 GB) (Free:184.98 GB) NTFS
Drive d: (DATI) (Fixed) (Total:1862.89 GB) (Free:992.65 GB) NTFS
Drive e: (ESD-ISO) (CDROM) (Total:3.08 GB) (Free:0 GB) UDF
Drive h: (Elements) (Fixed) (Total:3725.99 GB) (Free:950.58 GB) NTFS
Drive n: () (Fixed) (Total:119.24 GB) (Free:82.37 GB) NTFS
\\?\Volume{2ec8b1ec-9dcc-11e6-83b5-902b34557b33}\ (Ripristino) (Fixed) (Total:0.29 GB) (Free:0.28 GB) NTFS
\\?\Volume{658b0dba-d338-4bf1-8e16-29accfc4a607}\ () (Fixed) (Total:0.54 GB) (Free:0.08 GB) NTFS
\\?\Volume{88f80dd2-4114-4c64-be29-2ee9e8e6faa8}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: C212A9CC)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 0FCFAF9E)
Partition: GPT.
==========================================================
Disk: 2 (Size: 119.2 GB) (Disk ID: C212A9CC)
Partition: GPT.
==========================================================
Disk: 3 (Size: 3726 GB) (Disk ID: 16F2A91F)
Partition: GPT.
==================== End of Addition.txt =======================
