La détection de malware intégrée à Windows a trouvé une détection de cheval de Troie et signale « Remédiation incomplète ». Il n’y a que « autorisé » dans une liste déroulante en option. Je ne sais pas ce que ça fait donc je n’ai cliqué sur rien.
En outre, j’ai exécuté l’analyse en ligne Malwarebytes et Eset en analyse complète (a fonctionné pendant près de 4 heures). Aucun des deux n’a trouvé quoi que ce soit. Ma question est la suivante: reste-t-il quelque chose de préoccupant ? Merci pour votre temps.
Résultat de l’analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 14-04-2020
Ran de Moe (administrateur) sur LEVIATHAN (14-04-2020 23:47:04)
Exécution à partir de C: Users Moe Downloads Malware
Profils chargés: Moe (Profils disponibles: Moe & Mio)
Plateforme: Windows 10 Pro version 1909 18363.752 (X64) Langue: anglais (États-Unis)
Navigateur par défaut: FF
Mode de démarrage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.
com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processus (sur liste blanche) =================(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)(ASUSTeK Computer Inc.
->) [File not signed] C: Program Files (x86) ASUS AsSysCtrlService 1.00.25 AsSysCtrlService.
exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C: Program Files (x86) ASUS AsusFanControlService 2.
00.76 AsusFanControlService.exe
(ASUSTeK Computer Inc.
-> ASUSTeK Computer Inc.) C: Program Files (x86) ASUS AXSP 4.00.
38 atkexComSvc.exe
(Beijing NormalSoft Technology Co., Ltd.
-> www.ext2fsd.com) C: Windows SysWOW64 Ext2Srv.
EXE
(Jeux Firaxis) [File not signed] D: Steam Games steamapps common XCOM 2 XCom2-WarOfTheChosen Binaries Win64 XCom2.exe
(Intel® INTELND1820 -> Intel Corporation) C: Windows System32 IPROSetMonitor.exe
(Macrovision) [File not signed] C: Program Files (x86) MonitorSoftware monitor.
exe
(Macrovision) [File not signed] C: Program Files (x86) MonitorSoftware UPSMS.exe
(Microsoft Corporation -> Microsoft Corporation) C: Windows SystemApps Microsoft.MicrosoftEdge_8wekyb3d8bbwe MicrosoftEdge.
exe
(Microsoft Windows -> Microsoft Corporation) C: Users Moe AppData Local Packages Microsoft.MicrosoftEdge_8wekyb3d8bbwe TempState Downloads Windows-KB890830-x64-V5.81 (1) .
exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 GameBarPresenceWriter.
exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 MRT.
exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 smartscreen.
exe
(Microsoft Windows -> Microsoft Corporation) C: Windows System32 Taskmgr.exe
(Microsoft Windows -> Microsoft Corporation) C: Windows SystemApps Microsoft.Windows.
SecHealthUI_cw5n1h2txyewy SecHealthUI.exe
(Microsoft Windows -> Microsoft Corporation) C: Windows SysWOW64 cmd.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.
18.2003.8-0 MsMpEng.
exe
(Microsoft Windows Publisher -> Microsoft Corporation) C: ProgramData Microsoft Windows Defender Platform 4.18.2003.
8-0 NisSrv.exe
(Microsoft) [File not signed] D: Steam Games steamapps common XCOM 2 XCom2-WarOfTheChosen Binaries Win64 CrashDumpWatcher.exe
(Mozilla Corporation -> Mozilla Corporation) C: Program Files (x86) Mozilla Thunderbird thunderbird.
exe
(Mozilla Corporation -> Mozilla Corporation) C: Program Files Mozilla Firefox firefox.exe
(NextDNS Inc. ->) C: Program Files (x86) NextDNS dnsunleak.
exe
(NextDNS Inc. ->) C: Program Files (x86) NextDNS NextDNSService.exe
(NextDNS) [File not signed] C: Program Files (x86) NextDNS NextDNS.
exe
(NVIDIA Corporation -> Node.js) C: Program Files (x86) NVIDIA Corporation NvNode NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.
NvContainer NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation NvContainer nvcontainer.
exe
(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) MonitorSoftware jre bin javaw.exe
(Valve -> Valve Corporation) C: Program Files (x86) Common Files Steam SteamService.
exe
(Valve -> Valve Corporation) C: Program Files (x86) Steam bin cef cef.win7x64 steamwebhelper.exe
(Valve -> Valve Corporation) C: Program Files (x86) Steam GameOverlayUI.
exe
(Valve -> Valve Corporation) C: Program Files (x86) Steam steam.exe
(Viber Media S.à r.
l. -> Viber Media S.r.
l.) C: Users Moe AppData Local Viber Viber.exe==================== Registre (liste blanche) ===================(Si une entrée est incluse dans la liste de correctifs, l’élément de registre sera restauré par défaut ou supprimé.
Le fichier ne sera pas déplacé.)HKLM-x32 … Exécuter: [UPSMS] => C: Program Files (x86) MonitorSoftware UPSMS.exe [114688 2019-10-16] (Macrovision) [File not signed] HKLM-x32 … Exécuter: [Display] => C: Program Files (x86) APC PowerChute Personal Edition DataCollectionLauncher.
exe
HKLM-x32 … Exécuter: [NextDNS] => C: Program Files (x86) NextDNS NextDNS.exe [246272 2019-11-30] (NextDNS) [File not signed] HKU S-1-5-21-2401605411-2593107901-998236807-1001 … Run: [Steam] => C: Program Files (x86) Steam steam.exe [3371296 2020-04-04] (Valve -> Valve Corporation)
HKU S-1-5-21-2401605411-2593107901-998236807-1001 … Run: [GUDelayStartup] => C: Program Files (x86) Glary Utilities 5 StartupManager.
exe [45488 2020-03-04] (Glarysoft LTD -> Glarysoft Ltd)
HKLM Software Microsoft Active Setup Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C: Program Files (x86) BraveSoftware Brave-Browser Application 80.1.5.
123 Installer chrmstp.exe [2020-04-04] (Brave Software, Inc.) [File not signed] BootExecute: autocheck autochk *
GroupPolicy: Restriction ? hxxps: //www.
qwant.com/ ? R = PH & sr = en & l = en_gb & h = 0 & s = 0 & a = 1 & b = 1 & vt = 0 & hc = 0 & SmartNews = 1 & smartSocial = 1 & theme = 1 & i = 1 & don = 0 & Qoz = 0 & SHB = 0 & SHL = 1startpage.com / do / mypage.
pl PRFE = hxxps: ? //www.startpage.com/do/mypage.
pl PRFE = 36c84513558a2d34bf0d89ea505333ad59fcc4f8848a538a0c1c89932309a9bc818f1bb4bea737975c431b4299889baf0fbadd75a82a8395
Extension Edge: (uBlock Origin) -> EdgeExtension_37833NikRollsuBlockOrigin_f8jsg5mm64m62 => C: Program Files WindowsApps 37833NikRolls.uBlockOrigin_1.15.
24.0_neutral__f8jsg5mm64m62 [2019-08-14]FireFox:
========
FF DefaultProfile: izs93i27.default
FF ProfilePath: C: Users Moe AppData Roaming Mozilla Firefox Profiles bf9xooq8.
dev-edition-default-1577682748283 [2020-03-11] FF ProfilePath: C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default [2020-04-14] Page d’accueil FF: Mozilla Firefox Profiles izs93i27.default -> hxxps: //www.
qwant.com/ ? R = PH & sr = en & l = en_gb & h = 0 & s = 0 & a = 1 & b = 1 & vt = 1 & hc = 0 & smartNews = 1 & smartSocial = 0 & theme = 1 & i = 1 & don = 0
FF NetworkProxy: Mozilla Firefox Profiles izs93i27.default -> no_proxies_on « , » localhost, 127.
0.0.1 «
Extension FF: (Conteneur Facebook) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.
default Extensions @ contain-facebook.xpi [2020-04-14] Extension FF: (conteneurs multi-comptes Firefox) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions @ testpilot-containers.
xpi [2020-04-14] Extension FF: (Thème Arc Dark) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions [email protected] [2019-08-06] Extension FF: (Cookie AutoDelete) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.
default Extensions [email protected] [2020-03-20] Extension FF: (Consent-O-Matic) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.
default Extensions [email protected].
xpi [2020-02-27] Extension FF: (HTTPS Everywhere) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions [email protected].
xpi [2020-03-27] Extension FF: (Turbo Download Manager (v2)) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions [email protected] [2019-11-10] Extension FF: (correction du lien de recherche Google) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.
default Extensions [email protected] [2020-01-11] Extension FF: (Decentraleyes) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions jid1-BoFifL9Vbdl2zQ@jetpack.
xpi [2020-04-03] Extension FF: (Paramètres de confidentialité) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions [email protected] [2019-01-06] Extension FF: (Firefox Lightbeam) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.
default Extensions [email protected] [2019-01-06] Extension FF: (Location Guard) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions jid1-HdwPLukcGQeOSh@jetpack.
xpi [2019-12-19] Extension FF: (Privacy Badger) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions [email protected] [2020-02-20] Extension FF: (uBlock Origin) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.
default Extensions [email protected] [2020-04-07] Extension FF: (Possum de confidentialité) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.
default Extensions [email protected] [2019-08-29] Extension FF: (nébuleuse noire) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions {0325dfae-38ed-4013-a6bf-713b930b1f8f} .
xpi [2019-05-14] Extension FF: (Mode nuit noire) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions {27c3c9d8-95cd-44e6-ae9c-ff537348b9f3} .xpi [2019-06-15] Extension FF: (Options de recherche d’images) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.
default Extensions {4a313247-8330-4a81-948e-b79936516f78} .xpi [2019-10-05] Extension FF: (stylet) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions {7a7a4a92-a2a0-41d1-9fd7-1e92480d612d} .
xpi [2020-03-04] Extension FF: (Video DownloadHelper) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions {b9db16a4-6edc-47ec-a1f4-b86292ed211d} .xpi [2020-03-31] Extension FF: (gagnez du temps en demandant à Buster de résoudre les captchas pour vous.
) – C: Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions {e58d3966-3d76-4cd9-8552-1582fbc800c1 } .xpi [2020-02-12] FF Plugin-x32: @ tools.
brave.com / BraveSoftware Update; version = 3 -> C: Program Files (x86) BraveSoftware Update 1.3.
99.0 npBraveUpdate3.dll [2019-04-22] (Brave Software, Inc.
-> BraveSoftware Inc.)
FF Plugin-x32: @ tools.brave.
com / BraveSoftware Update; version = 9 -> C: Program Files (x86) BraveSoftware Update 1.3.99.
0 npBraveUpdate3.dll [2019-04-22] (Brave Software, Inc. -> BraveSoftware Inc.
)
FF Plugin-x32: Composants Web -> C: Program Files (x86) Web Components npWebVideoPlugin.dll [2016-09-19] () [File not signed]==================== Services (liste blanche) ===================(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s’il est répertorié séparément.
)R2 asComSvc; C: Program Files (x86) ASUS AXSP 4.00.38 atkexComSvc.
exe [440368 2019-04-09] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C: Program Files (x86) ASUS AsSysCtrlService 1.
00.25 AsSysCtrlService.exe [1360016 2019-04-03] (ASUSTeK Computer Inc.
->) [File not signed] R2 AsusFanControlService; C: Program Files (x86) ASUS AsusFanControlService 2.00.76 AsusFanControlService.
exe [2061872 2019-04-09] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 BEService; C: Program Files (x86) Common Files BattlEye BEService.
exe [8473200 2019-07-02] (BattlEye Innovations e.K. ->)
S2 courageux; C: Program Files (x86) BraveSoftware Update BraveUpdate.
exe [154056 2019-04-22] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C: Program Files (x86) BraveSoftware Update BraveUpdate.
exe [154056 2019-04-22] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 EasyAntiCheat; C: Program Files (x86) EasyAntiCheat EasyAntiCheat.
exe [803440 2019-07-02] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 Ext2Srv; C: WINDOWS SysWOW64 Ext2Srv.EXE [42488 2019-12-24] (Beijing NormalSoft Technology Co., Ltd.
-> www.ext2fsd.com)
R2 NextDNSService; C: Program Files (x86) NextDNS NextDNSService.
exe [7984016 2019-11-30] (NextDNS Inc. ->)
R2 NvContainerLocalSystem; C: Program Files NVIDIA Corporation NvContainer nvcontainer.exe [858480 2019-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
R3 NvContainerNetworkService; C: Program Files NVIDIA Corporation NvContainer nvcontainer.
exe [858480 2019-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
S2 RtkBtManServ; C: WINDOWS RtkBtManServ.exe [709528 2019-12-04] (Éditeur de compatibilité matérielle Microsoft Windows -> Realtek Semiconductor Corp.)
S3 Sense; C: Program Files Windows Defender Advanced Threat Protection MsSense.
exe [5930136 2020-03-25] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 UPSmonitor; C: Program Files (x86) MonitorSoftware monitor.exe [114688 2019-10-16] (Macrovision) [File not signed] R3 WdNisSvc; C: ProgramData Microsoft Windows Defender platform 4.18.
2003.8-0 NisSrv.exe [3294680 2020-03-25] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C: ProgramData Microsoft Windows Defender platform 4.
18.2003.8-0 MsMpEng.
exe [103168 2020-03-25] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; « C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.
Container.exe » -s NVDisplay.ContainerLocalSystem -f « C: ProgramData NVIDIA NVDisplay.
ContainerLocalSystem.log » -l 3 -d « C: Fichiers programme NVIDIA Corporation Display.NvContainer plugins LocalSystem « -r -p 30000===================== Pilotes (sur liste blanche) ===================(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre.
Le fichier ne sera pas déplacé sauf s’il est répertorié séparément.)S3 AiCharger; C: Windows SysWow64 drivers AiCharger.sys [14848 2012-03-22] (ASUSTeK Computer Inc.
-> ASUSTek Computer Inc.)
R3 amdgpio2; C: WINDOWS System32 drivers amdgpio2.sys [45832 2020-01-20] (Advanced Micro Devices INC.
-> Advanced Micro Devices, Inc)
R3 amdgpio3; C: WINDOWS System32 drivers amdgpio3.sys [24528 2019-04-18] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
R3 AMDPCIDev; C: WINDOWS System32 drivers AMDPCIDev.sys [32520 2020-03-10] (Advanced Micro Devices INC.
-> Advanced Micro Devices)
R0 amdpsp; C: WINDOWS System32 drivers amdpsp.sys [138064 2019-06-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.
)
S0 amd_sata; C: WINDOWS System32 drivers amd_sata.sys [85704 2015-03-30] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S0 amd_xata; C: WINDOWS System32 drivers amd_xata.
sys [43720 2015-03-30] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R1 AsIO; C: Windows SysWow64 drivers AsIO.sys [15232 2017-12-26] (ASUSTeK Computer Inc.
->)
R1 AsUpIO; C: Windows SysWow64 drivers AsUpIO.sys [14464 2017-03-14] (ASUSTeK Computer Inc. ->)
R1 Asusgio2; C: Windows system32 drivers AsIO2.
sys [33832 2019-04-09] (ASUSTeK Computer Inc. ->)
S3 AX88179; C: WINDOWS System32 drivers ax88179_178a.sys [93800 2018-10-29] (Éditeur de compatibilité matérielle Microsoft Windows -> ASIX Electronics Corp.
)
R2 BlueStacksDrv; C: Program Files BlueStacks BstkDrv_bgp.sys [315976 2020-02-29] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C: WINDOWS System32 drivers BthA2dp.
sys [231936 2019-09-11] (Microsoft Corporation) [File not signed] R3 e1rexpress; C: WINDOWS system32 DRIVERS e1r65x64.sys [550768 2019-12-04] (Intel® INTELND1820 -> Intel Corporation)
S0 envirtahci; C: WINDOWS System32 drivers envirtahci.sys [799008 2019-08-03] (Enmotus Inc.
-> AMD)
S3 FTDIBUS; C: WINDOWS system32 drivers ftdibus.sys [129448 2017-09-19] (Future Technology Devices International Ltd -> Future Technology Devices International Ltd.)
S3 FTSER2K; C: WINDOWS system32 drivers ftser2k.
sys [89792 2017-09-19] (Future Technology Devices International Ltd -> Future Technology Devices International Ltd.)
S3 gdrv2; C: Windows gdrv2.sys [32008 2019-04-07] (GIGA-BYTE Technology Co.
, Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.
)
R1 GUBootStartup; C: WINDOWS System32 drivers GUBootStartup.sys [28936 2019-07-16] (Glarysoft LTD -> Glarysoft Ltd)
S3 HWiNFO_150; C: Users Moe AppData Local Temp HWiNFO64A_150.SYS [62240 2020-04-14] (Martin Malik – REALiX -> REALiX ™) Logitech Inc.
)
Mégabatterie R2; C: WINDOWS system32 DRIVERS megabatteryX64.sys [20608 2012-03-31] (Mega System Technologies, Inc. -> Megatec System Co.
)
R3 nvlddmkm; C: WINDOWS System32 DriverStore FileRepository nv_dispi.inf_amd64_63268710a2dc3648 nvlddmkm.sys [23439080 2020-03-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 NvStreamKms; C: Program Files NVIDIA Corporation NvStreamSrv NvStreamKms.
sys [30336 2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C: WINDOWS system32 drivers nvvad64v.sys [69840 2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C: WINDOWS System32 drivers nvvhci.sys [75600 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
R0 pwdrvio; C: WINDOWS System32 pwdrvio.
sys [19152 2019-05-29] (MiniTool Solution Ltd ->)
S3 pwdspio; C: WINDOWS system32 pwdspio.sys [12504 2019-05-29] (MiniTool Solution Ltd ->)
S3 RtkA2dp; C: WINDOWS system32 DRIVERS RtkA2dp.sys [217032 2019-05-17] (Realtek Semiconductor Corp.
-> Realtek Semiconductor Corporation)
S3 RtkAvrcpCtrlr; C: WINDOWS System32 drivers RtkAvrcpCtrlr.sys [87832 2016-09-20] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
S3 RtkBtFilter; C: WINDOWS System32 drivers RtkBtfilter.sys [784032 2019-12-04] (Éditeur de compatibilité matérielle Microsoft Windows -> Realtek Semiconductor Corporation)
S3 RtlWlanu; C: WINDOWS system32 DRIVERS rtwlanu.
sys [9860088 2019-07-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
R3 Ser2pl; C: WINDOWS system32 DRIVERS ser2pl64.sys [258544 2019-06-24] (WDKTestCert charles-yeh, 131345514351795974 -> Prolific Technology Inc.
)
R2 SSGDIO; C: Windows SysWOW64 DRIVERS ssgdio64.sys [14608 2019-02-28] (ATI Technologies, Inc -> ATI Technologies Inc.)
R3 SteamStreamingMicrophone; C: WINDOWS system32 drivers SteamStreamingMicrophone.
sys [40736 2017-07-29] (Valve Corp. ->)
Haut-parleurs SteamStreaming R3; C: WINDOWS system32 drivers SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp.
->)
R3 tap0901; C: WINDOWS System32 drivers tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> Le projet OpenVPN)
S3 tapnordvpn; C: WINDOWS System32 drivers tapnordvpn.
sys [44896 2018-07-24] (TEFINCOM S.A. -> Le projet OpenVPN)
S0 WdBoot; C: WINDOWS System32 drivers wd WdBoot.
sys [45960 2020-03-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C: WINDOWS System32 drivers wd WdFilter.sys [391392 2020-03-25] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C: WINDOWS System32 drivers wd WdNisDrv.sys [59104 2020-03-25] (Microsoft Windows -> Microsoft Corporation)
S1 upsmart; System32 drivers upsmart.
sys [X]==================== NetSvcs (liste blanche) ====================(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s’il est répertorié séparément.)==================== Un mois (créé) ===================(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.
)2020-04-14 23:45 – 2020-04-14 23:47 – 000000000 ____D C: FRST
2020-04-14 16:46 – 2020-04-14 18:01 – 000000000 ____D C: Users Moe AppData LocalLow IGDump
2020-04-14 16:46 – 2020-04-14 16:46 – 000000000 ____D C: Users Moe AppData Local mbam
2020-04-14 16:45 – 2020-04-14 16:45 – 000000000 ____D C: Users Moe AppData Local mbamtray
2020-04-14 16:40 – 2020-04-14 16:40 – 000000857 _____ C: Users Moe AppData Roaming Microsoft Windows Start Menu Programs ESET Online Scanner.lnk
2020-04-14 16:39 – 2020-04-14 23:47 – 000000000 ____D C: Users Moe Downloads Malware
2020-04-11 00:38 – 2020-04-11 00:38 – 000000000 ____D C: Users Moe AppData Roaming AMD
2020-04-09 22:15 – 2020-04-10 17:38 – 000000000 ____D C: Program Files (x86) Mozilla Thunderbird
2020-04-08 22:37 – 2020-04-09 17:34 – 000000000 ____D C: Program Files Mozilla Firefox
2020-04-08 22:37 – 2020-04-08 22:37 – 000000000 ____D C: WINDOWS system32 Tasks Mozilla
2020-04-07 16:52 – 2020-04-07 16:52 – 1143838279 _____ C: WINDOWS MEMORY.DMP
2020-04-07 16:52 – 2020-04-07 16:52 – 001110044 _____ C: WINDOWS Minidump 040720-8453-01.
dmp
2020-04-06 19:32 – 2015-12-09 21:47 – 000262440 _____ (Broadcom Corporation.) C: WINDOWS system32 Drivers btwavdt.sys
2020-04-06 19:16 – 2020-04-06 19:16 – 000000000 ____D C: Users Moe AppData Local setup
2020-04-06 18:02 – 2020-04-06 18:02 – 000000000 ____D C: ProgramData Microsoft Windows Start Menu Programs qBittorrent
2020-04-05 22:58 – 2020-04-05 22:58 – 000000904 _____ C: Users Moe AppData Roaming Microsoft Windows Start Menu Programs Start Tor Browser.
lnk
2020-04-05 22:57 – 2020-04-05 22:58 – 000000000 ____D C: Users Moe Desktop Tor Browser
2020-04-05 21:51 – 2020-04-05 21:52 – 000000000 ____D C: Users Moe AppData Local Viber
2020-04-04 14:11 – 2020-04-04 14:11 – 000003772 _____ C: WINDOWS Info.xml
2020-04-03 15:44 – 2020-04-03 16:39 – 000000000 ____D C: Users Moe Documents Transactions
2020-04-03 13:45 – 2020-04-03 16:46 – 000000493 _____ C: Users Moe Documents Accs.txt
2020-03-29 18:19 – 2020-03-29 18:19 – 000000081 _____ C: Users Moe Documents Pan Pizza.
txt
2020-03-26 16:00 – 2020-03-26 16:00 – 000000000 ____D C: Users Moe AppData Roaming NVIDIA
2020-03-26 16:00 – 2020-03-26 16:00 – 000000000 ____D C: Users Moe AppData Roaming LibreOffice
2020-03-26 13:19 – 2020-03-26 13:19 – 000000000 ____D C: ProgramData Microsoft Windows Menu Démarrer Programmes LibreOffice 6.4
2020-03-26 13:18 – 2020-03-26 13:18 – 000000000 ____D C: Program Files LibreOffice
2020-03-25 13:39 – 2020-03-25 13:39 – 025444352 _____ (Microsoft Corporation) C: WINDOWS system32 Hydrogen.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 022636544 _____ (Microsoft Corporation) C: WINDOWS system32 mshtml.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 019813376 _____ (Microsoft Corporation) C: WINDOWS system32 HologramWorld.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 018027008 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mshtml.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 014818816 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.
UI.Xaml.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 008013824 _____ (Microsoft Corporation) C: WINDOWS system32 mstscax.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 007017472 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstscax.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 006525424 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.Media.
Protection.PlayReady.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 004129416 _____ (Microsoft Corporation) C: WINDOWS system32 mfcore.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 003753472 _____ (Microsoft Corporation) C: WINDOWS system32 SettingsHandlers_nt.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 003742544 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 OneCoreUAPCommonProxyStub.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 002800128 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 win32kfull.
sys
2020-03-25 13:39 – 2020-03-25 13:39 – 002494744 _____ (Microsoft Corporation) C: WINDOWS system32 msmpeg2vdec.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 002369576 _____ (Microsoft Corporation) C: WINDOWS system32 Microsoft.Uev.
AppAgent.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 002188600 _____ (Microsoft Corporation) C: WINDOWS system32 AppVEntSubsystems64.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001835008 _____ (Microsoft Corporation) C: WINDOWS system32 enterprisecsps.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001659408 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Microsoft.Uev.AppAgent.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001610240 _____ (Microsoft Corporation) C: WINDOWS system32 HologramCompositor.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001587712 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 aadtb.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001545216 _____ (Microsoft Corporation) C: WINDOWS system32 mstsc.
exe
2020-03-25 13:39 – 2020-03-25 13:39 – 001495864 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 AppVEntSubsystems32.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001477112 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 dcomp.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001397560 _____ (Microsoft Corporation) C: WINDOWS system32 hvix64.
exe
2020-03-25 13:39 – 2020-03-25 13:39 – 001386296 _____ (Microsoft Corporation) C: WINDOWS system32 AppVEntSubsystemController.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001368576 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Wpc.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001368576 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.
UI.Input.Inking.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001264640 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 mstsc.exe
2020-03-25 13:39 – 2020-03-25 13:39 – 001245184 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 TokenBroker.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001081856 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.
Networking.Vpn.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 001077264 _____ (Microsoft Corporation) C: WINDOWS system32 hvax64.
exe
2020-03-25 13:39 – 2020-03-25 13:39 – 001055376 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 msctf.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000993280 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 TSWorkspace.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000980832 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 webservices.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000923136 _____ (Microsoft Corporation) C: WINDOWS system32 Windows.Internal.Management.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000912896 _____ (Microsoft Corporation) C: WINDOWS system32 rasmans.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000892416 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 MbaeApiPublic.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000865280 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 Windows.
Security.Authentication.Web.
Core.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000785920 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 kerberos.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000744960 _____ (Microsoft Corporation) C: WINDOWS system32 Microsoft.
Uev.Office2013CustomActions.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000729600 _____ (Microsoft Corporation) C: WINDOWS SysWOW64 FlightSettings.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Mirage.Internal.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000701440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64BTAGService.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000689152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CPFilters.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000673704 _____ (Microsoft Corporation) C:WINDOWSSysWOW64AppXDeploymentClient.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000665088 _____ (Microsoft Corporation) C:WINDOWSSysWOW64netlogon.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000647680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Internal.
Management.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000632832 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WpcWebFilter.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000628408 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kernel32.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000555008 _____ (Microsoft Corporation) C:WINDOWSsystem32appwiz.cpl
2020-03-25 13:39 – 2020-03-25 13:39 – 000538160 _____ (Microsoft Corporation) C:WINDOWSSysWOW64SHCore.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000529408 _____ (Microsoft Corporation) C:WINDOWSsystem32nltest.
exe
2020-03-25 13:39 – 2020-03-25 13:39 – 000514560 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Microsoft.Uev.Office2013CustomActions.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000507152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64taskschd.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppcext.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000487784 _____ (Microsoft Corporation) C:WINDOWSSysWOW64advapi32.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000456192 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl
2020-03-25 13:39 – 2020-03-25 13:39 – 000452096 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpclip.exe
2020-03-25 13:39 – 2020-03-25 13:39 – 000415760 _____ (Microsoft Corporation) C:WINDOWSSysWOW64aepic.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000410112 _____ (Microsoft Corporation) C:WINDOWSsystem32rascustom.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000406480 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.
Enumeration.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000381440 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntshrui.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000336384 _____ (Microsoft Corporation) C:WINDOWSSysWOW64es.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000330240 _____ (Microsoft Corporation) C:WINDOWSsystem32omadmclient.exe
2020-03-25 13:39 – 2020-03-25 13:39 – 000324096 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32k.sys
2020-03-25 13:39 – 2020-03-25 13:39 – 000321536 _____ (Microsoft Corporation) C:WINDOWSsystem32wbadmin.
exe
2020-03-25 13:39 – 2020-03-25 13:39 – 000277864 _____ (Microsoft Corporation) C:WINDOWSsystem32LsaIso.exe
2020-03-25 13:39 – 2020-03-25 13:39 – 000234496 _____ (Microsoft Corporation) C:WINDOWSsystem32iasrad.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000227840 _____ (Microsoft Corporation) C:WINDOWSsystem32IndexedDbLegacy.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000211256 _____ (Microsoft Corporation) C:WINDOWSsystem32tcbloader.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000203264 _____ (Microsoft Corporation) C:WINDOWSsystem32LanguageComponentsInstaller.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000190048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64logoncli.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000187392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasrad.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000185952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64deviceaccess.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000179200 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.
UI.XamlHost.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000175616 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IndexedDbLegacy.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000163840 _____ (Microsoft Corporation) C:WINDOWSSysWOW64updatepolicy.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000135168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.UI.
XamlHost.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000123952 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KerbClientShared.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slc.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000101888 _____ (Microsoft Corporation) C:WINDOWSSysWOW64sppc.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000093712 _____ (Microsoft Corporation) C:WINDOWSsystem32hvloader.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000090624 _____ (Microsoft Corporation) C:WINDOWSsystem32tsgqec.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000089536 _____ (Microsoft Corporation) C:WINDOWSSysWOW64win32u.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000087040 _____ (Microsoft Corporation) C:WINDOWSsystem32iasacct.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000084280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvservice.
sys
2020-03-25 13:39 – 2020-03-25 13:39 – 000071680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Devices.Custom.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000070144 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tsgqec.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000066624 _____ (Microsoft Corporation) C:WINDOWSsystem32iumcrypt.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000066048 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iasacct.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000050544 _____ (Microsoft Corporation) C:WINDOWSSysWOW64CloudNotifications.exe
2020-03-25 13:39 – 2020-03-25 13:39 – 000050176 _____ (Microsoft Corporation) C:WINDOWSsystem32iaspolcy.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000049152 _____ (Microsoft Corporation) C:WINDOWSSysWOW64tbauth.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32Microsoft.Uev.Office2010CustomActions.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000040448 _____ (Microsoft Corporation) C:WINDOWSSysWOW64iaspolcy.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000036352 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Microsoft.Uev.
Office2010CustomActions.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32ias.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64cmintegrator.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000029184 _____ (Microsoft Corporation) C:WINDOWSSysWOW64TokenBrokerCookies.exe
2020-03-25 13:39 – 2020-03-25 13:39 – 000023552 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ias.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000021520 _____ (Microsoft Corporation) C:WINDOWSsystem32kdhvcom.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000019968 _____ (Microsoft Corporation) C:WINDOWSSysWOW64slcext.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000017920 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wksprtPS.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000015872 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.
Devices.Custom.ps.
dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000010752 _____ (Microsoft Corporation) C:WINDOWSsystem32DMAlertListener.ProxyStub.dll
2020-03-25 13:39 – 2020-03-25 13:39 – 000007680 _____ (Microsoft Corporation) C:WINDOWSSysWOW64DMAlertListener.
ProxyStub.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 017790464 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.UI.
Xaml.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 009930552 _____ (Microsoft Corporation) C:WINDOWSsystem32ntoskrnl.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 007849216 _____ (Microsoft Corporation) C:WINDOWSsystem32OneCoreUAPCommonProxyStub.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 007604584 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Media.Protection.
PlayReady.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 006168064 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.pcshell.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 004563200 _____ (Microsoft Corporation) C:WINDOWSsystem32sppsvc.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 003977216 _____ (Microsoft Corporation) C:WINDOWSsystem32tellib.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 003799552 _____ (Microsoft Corporation) C:WINDOWSsystem32diagtrack.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 003728384 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 003708928 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentServer.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 003586872 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgkrnl.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 003547648 _____ (Microsoft Corporation) C:WINDOWSsystem32dwmcore.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 003109376 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 002986808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverstcpip.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 002871608 _____ (Microsoft Corporation) C:WINDOWSsystem32aitstatic.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 002768440 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 002143232 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcDesktopMonSvc.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 002126144 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEng.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 002114560 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.CloudStore.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 002087168 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001960448 _____ (Microsoft Corporation) C:WINDOWSsystem32aadtb.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001945600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcomp.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001942528 _____ (Microsoft Corporation) C:WINDOWSsystem32audiosrv.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001918976 _____ (Microsoft Corporation) C:WINDOWSsystem32wevtsvc.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001783296 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.
UI.Input.Inking.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001762816 _____ (Microsoft Corporation) C:WINDOWSsystem32wwansvc.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001757096 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.efi
2020-03-25 13:38 – 2020-03-25 13:38 – 001726264 _____ (Microsoft Corporation) C:WINDOWSsystem32appraiser.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001719808 _____ (Microsoft Corporation) C:WINDOWSsystem32Wpc.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001512832 _____ (Microsoft Corporation) C:WINDOWSsystem32winload.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 001497600 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBroker.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001480192 _____ (Microsoft Corporation) C:WINDOWSsystem32usocoreworker.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 001427456 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Networking.
Vpn.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001413704 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioSes.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001378528 _____ (Microsoft Corporation) C:WINDOWSsystem32webservices.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001300280 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershttp.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 001263856 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcMon.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 001261808 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001257472 _____ (Microsoft Corporation) C:WINDOWSsystem32rpcss.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001243648 _____ (Microsoft Corporation) C:WINDOWSsystem32TSWorkspace.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001180672 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.
Security.Authentication.Web.
Core.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001136128 _____ (Microsoft Corporation) C:WINDOWSsystem32MbaeApiPublic.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001127424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcRefreshTask.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001083904 _____ (Microsoft Corporation) C:WINDOWSsystem32MusUpdateHandlers.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001071616 _____ (Microsoft Corporation) C:WINDOWSsystem32BTAGService.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 001011200 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000974336 _____ (Microsoft Corporation) C:WINDOWSsystem32uDWM.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000924672 _____ (Microsoft Corporation) C:WINDOWSsystem32samsrv.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000915192 _____ (Microsoft Corporation) C:WINDOWSsystem32AppXDeploymentClient.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000893952 _____ (Microsoft Corporation) C:WINDOWSsystem32FlightSettings.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000879616 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.
Service.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000874512 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms2.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000865280 _____ (Microsoft Corporation) C:WINDOWSsystem32netlogon.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000840704 _____ (Microsoft Corporation) C:WINDOWSsystem32SettingsHandlers_Language.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000811320 _____ (Microsoft Corporation) C:WINDOWSsystem32generaltel.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000759272 _____ (Microsoft Corporation) C:WINDOWSsystem32taskschd.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000747320 _____ (Microsoft Corporation) C:WINDOWSsystem32aeinv.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000735744 _____ (Microsoft Corporation) C:WINDOWSsystem32AudioEndpointBuilder.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000722072 _____ (Microsoft Corporation) C:WINDOWSsystem32kernel32.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000684560 _____ (Microsoft Corporation) C:WINDOWSsystem32SHCore.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000654912 _____ (Microsoft Corporation) C:WINDOWSsystem32advapi32.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000638480 _____ (Microsoft Corporation) C:WINDOWSsystem32devinv.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000637240 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorport.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000618296 _____ (Microsoft Corporation) C:WINDOWSsystem32hal.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000605184 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotification.
exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000604984 _____ (Microsoft Corporation) C:WINDOWSsystem32pcasvc.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000589384 _____ (Microsoft Corporation) C:WINDOWSsystem32audiodg.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000550400 _____ (Microsoft Corporation) C:WINDOWSsystem32win32k.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000530432 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcext.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000524264 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.
Enumeration.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000516096 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotificationUx.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000515600 _____ (Microsoft Corporation) C:WINDOWSsystem32dcntel.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000513576 _____ (Microsoft Corporation) C:WINDOWSsystem32aepic.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000498688 _____ (Microsoft Corporation) C:WINDOWSsystem32ntshrui.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000497152 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000477496 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversFWPKCLNT.SYS
2020-03-25 13:38 – 2020-03-25 13:38 – 000469504 _____ (Microsoft Corporation) C:WINDOWSsystem32cloudAP.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000465208 _____ (Microsoft Corporation) C:WINDOWSsystem32invagent.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000459688 _____ (Microsoft Corporation) C:WINDOWSsystem32MusNotifyIcon.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000456504 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversrdbss.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000441144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdxgmms1.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000437560 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspci.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000416016 _____ (Microsoft Corporation) C:WINDOWSsystem32AUDIOKSE.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000401408 _____ (Microsoft Corporation) C:WINDOWSsystem32es.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000374784 _____ (Microsoft Corporation) C:WINDOWSsystem32ncbservice.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000355328 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcApi.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000324408 _____ (Microsoft Corporation) C:WINDOWSsystem32acmigration.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000323584 _____ (Microsoft Corporation) C:WINDOWSsystem32sppcommdlg.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000297272 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssdbus.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000278016 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcTok.
exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000265216 _____ (Microsoft Corporation) C:WINDOWSsystem32cdd.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000259776 _____ (Microsoft Corporation) C:WINDOWSsystem32logoncli.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000259072 _____ (Microsoft Corporation) C:WINDOWSsystem32VPNv2CSP.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000256000 _____ (Microsoft Corporation) C:WINDOWSsystem32UpdateDeploymentProvider.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000251704 _____ (Microsoft Corporation) C:WINDOWSsystem32offlinesam.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000251392 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverswinnat.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000241152 _____ (Microsoft Corporation) C:WINDOWSsystem32policymanagerprecheck.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000231912 _____ (Microsoft Corporation) C:WINDOWSsystem32deviceaccess.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000200192 _____ (Microsoft Corporation) C:WINDOWSsystem32updatepolicy.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000197632 _____ (Microsoft Corporation) C:WINDOWSsystem32Win32CompatibilityAppraiserCSP.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000193848 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversdumpsd.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000178192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspartmgr.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000169472 _____ (Microsoft Corporation) C:WINDOWSsystem32SpatialAudioLicenseSrv.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000164368 _____ (Microsoft Corporation) C:WINDOWSsystem32CompatTelRunner.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000152408 _____ (Microsoft Corporation) C:WINDOWSsystem32KerbClientShared.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000151352 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversscmbus.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000147696 _____ (Microsoft Corporation) C:WINDOWSsystem32smss.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000142544 _____ (Microsoft Corporation) C:WINDOWSsystem32LicensingUI.
exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000140800 _____ (Microsoft Corporation) C:WINDOWSsystem32slc.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000136192 _____ (Microsoft Corporation) C:WINDOWSsystem32sppc.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000127064 _____ (Microsoft Corporation) C:WINDOWSsystem32win32u.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000122368 _____ (Microsoft Corporation) C:WINDOWSsystem32samlib.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000115120 _____ (Microsoft Corporation) C:WINDOWSsystem32phoneactivate.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000108032 _____ (Microsoft Corporation) C:WINDOWSsystem32wwanprotdim.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000105984 _____ (Microsoft Corporation) C:WINDOWSsystem32utcutil.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000102216 _____ (Microsoft Corporation) C:WINDOWSsystem32changepk.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000096768 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.
Devices.Custom.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000089912 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvolmgr.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000088352 _____ (Microsoft Corporation) C:WINDOWSsystem32remoteaudioendpoint.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000076288 _____ (Microsoft Corporation) C:WINDOWSsystem32autopilot.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000071480 _____ (Microsoft Corporation) C:WINDOWSsystem32win32appinventorycsp.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Management.EnrollmentStatusTracking.
ConfigProvider.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000070656 _____ (Microsoft Corporation) C:WINDOWSsystem32keepaliveprovider.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000064512 _____ (Microsoft Corporation) C:WINDOWSsystem32pcadm.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000064000 _____ (Microsoft Corporation) C:WINDOWSsystem32tbauth.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000060416 _____ (Microsoft Corporation) C:WINDOWSsystem32CloudNotifications.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000059192 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorufs.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000057856 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000057344 _____ (Microsoft Corporation) C:WINDOWSsystem32audioresourceregistrar.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000051200 _____ (Microsoft Corporation) C:WINDOWSsystem32pcalua.
exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000047208 _____ (Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000045568 _____ (Microsoft Corporation) C:WINDOWSsystem32cmintegrator.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000044032 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.
UI.Xaml.Resources.
Common.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000043008 _____ (Microsoft Corporation) C:WINDOWSsystem32UpgradeResultsUI.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000039424 _____ (Microsoft Corporation) C:WINDOWSsystem32WpcProxyStubs.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000036864 _____ (Microsoft Corporation) C:WINDOWSsystem32TokenBrokerCookies.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000036152 _____ (Microsoft Corporation) C:WINDOWSsystem32DeviceCensus.exe
2020-03-25 13:38 – 2020-03-25 13:38 – 000033080 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershwpolicy.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000031744 _____ (Microsoft Corporation) C:WINDOWSsystem32wksprtPS.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000030720 _____ (Microsoft Corporation) C:WINDOWSsystem32DriversKNetPwrDepBroker.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000028160 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversflpydisk.
sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000023552 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Devices.Custom.
ps.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32slcext.dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000022528 _____ (Microsoft Corporation) C:WINDOWSsystem32sbservicetrigger.
dll
2020-03-25 13:38 – 2020-03-25 13:38 – 000018944 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverssfloppy.sys
2020-03-25 13:38 – 2020-03-25 13:38 – 000012800 _____ (Microsoft Corporation) C:WINDOWSsystem32pcaevts.dll
2020-03-25 13:23 – 2020-04-02 13:25 – 000000000 ____D C:Reports Quarantine
2020-03-25 10:34 – 2020-03-18 12:00 – 005581800 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvcpl.
dll
2020-03-25 10:34 – 2020-03-18 12:00 – 002632680 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvsvc64.dll
2020-03-25 10:34 – 2020-03-18 12:00 – 001759216 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvsvcr.dll
2020-03-25 10:34 – 2020-03-18 12:00 – 001172464 _____ (NVIDIA Corporation) C:WINDOWSsystem32nv3dappshext.
dll
2020-03-25 10:34 – 2020-03-18 12:00 – 000446264 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvmctray.dll
2020-03-25 10:34 – 2020-03-18 12:00 – 000121144 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvshext.dll
2020-03-25 10:34 – 2020-03-18 12:00 – 000074736 _____ (NVIDIA Corporation) C:WINDOWSsystem32nv3dappshextr.
dll
2020-03-25 10:34 – 2020-03-16 14:39 – 008997147 _____ C:WINDOWSsystem32nvcoproc.bin
2020-03-25 10:34 – 2020-02-28 22:39 – 000001951 _____ C:WINDOWSNvContainerRecovery.bat
2020-03-25 10:29 – 2020-03-19 13:11 – 001729232 _____ C:WINDOWSsystem32vulkaninfo-1-999-0-0-0.
exe
2020-03-25 10:29 – 2020-03-19 13:11 – 001729232 _____ C:WINDOWSsystem32vulkaninfo.exe
2020-03-25 10:29 – 2020-03-19 13:11 – 001329360 _____ C:WINDOWSSysWOW64vulkaninfo-1-999-0-0-0.exe
2020-03-25 10:29 – 2020-03-19 13:11 – 001329360 _____ C:WINDOWSSysWOW64vulkaninfo.
exe
2020-03-25 10:29 – 2020-03-19 13:11 – 001078992 _____ C:WINDOWSsystem32vulkan-1-999-0-0-0.dll
2020-03-25 10:29 – 2020-03-19 13:11 – 001078992 _____ C:WINDOWSsystem32vulkan-1.dll
2020-03-25 10:29 – 2020-03-19 13:11 – 000937680 _____ C:WINDOWSSysWOW64vulkan-1-999-0-0-0.
dll
2020-03-25 10:29 – 2020-03-19 13:11 – 000937680 _____ C:WINDOWSSysWOW64vulkan-1.dll
2020-03-25 10:29 – 2020-03-19 13:11 – 000450464 _____ (Khronos Group) C:WINDOWSsystem32OpenCL.dll
2020-03-25 10:29 – 2020-03-19 13:11 – 000348048 _____ (Khronos Group) C:WINDOWSSysWOW64OpenCL.
dll
2020-03-25 10:29 – 2020-03-19 13:10 – 011945072 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvptxJitCompiler.dll
2020-03-25 10:29 – 2020-03-19 13:10 – 010285680 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvptxJitCompiler.dll
2020-03-25 10:29 – 2020-03-19 13:10 – 000817056 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvmcumd.
dll
2020-03-25 10:29 – 2020-03-19 13:10 – 000676448 _____ C:WINDOWSsystem32nvofapi64.dll
2020-03-25 10:29 – 2020-03-19 13:10 – 000544352 _____ C:WINDOWSSysWOW64nvofapi.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 017600912 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvcuda.
dll
2020-03-25 10:29 – 2020-03-19 13:09 – 015157664 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvcuda.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 005856656 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvcuvid.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 005158304 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvcuvid.
dll
2020-03-25 10:29 – 2020-03-19 13:09 – 002072992 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvFBC64.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 001723280 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvdispco6444575.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 001564904 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64NvFBC.
dll
2020-03-25 10:29 – 2020-03-19 13:09 – 001483168 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvdispgenco6444575.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 001480936 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvIFR64.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 001351568 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvfatbinaryLoader.
dll
2020-03-25 10:29 – 2020-03-19 13:09 – 001142176 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64NvIFR.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 001049488 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvfatbinaryLoader.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 000811424 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvEncodeAPI64.
dll
2020-03-25 10:29 – 2020-03-19 13:09 – 000679840 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvIFROpenGL.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 000655264 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvEncodeAPI.dll
2020-03-25 10:29 – 2020-03-19 13:09 – 000546720 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64NvIFROpenGL.
dll
2020-03-25 10:29 – 2020-03-19 10:06 – 004927048 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvapi64.dll
2020-03-25 10:29 – 2020-03-19 10:05 – 004196160 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvapi.dll
2020-03-25 10:29 – 2020-03-18 15:51 – 001682368 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvhdagenco6420103.
dll
2020-03-25 10:29 – 2020-03-18 15:51 – 000223120 _____ (NVIDIA Corporation) C:WINDOWSsystem32Driversnvhda64v.sys
2020-03-25 10:29 – 2020-03-18 15:51 – 000075600 _____ (NVIDIA Corporation) C:WINDOWSsystem32Driversnvvhci.sys
2020-03-25 10:29 – 2020-03-18 15:51 – 000056618 _____ C:WINDOWSsystem32nvinfo.
pb
2020-03-25 10:29 – 2020-03-18 15:51 – 000039824 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvhdap64.dll
2020-03-20 23:20 – 2020-03-20 23:20 – 021448817 _____ C:UsersMoeDownloadscom.android.
vending_19.3.26-all_0_PR_301645536-81932600_minAPI16(armeabi,armeabi-v7a,mips,mips64,x86,x86_64)(nodpi)_apkmirror.
com.apk==================== One month (modified) ==================(If an entry is included in the fixlist, the file/folder will be moved.)2020-04-14 23:11 – 2019-03-19 12:52 – 000000000 ____D C:ProgramDataregid.
1991-06.com.microsoft
2020-04-14 23:04 – 2019-01-06 22:22 – 121542864 ____C (Microsoft Corporation) C:WINDOWSsystem32MRT.
exe
2020-04-14 22:44 – 2019-01-07 00:31 – 000000000 ____D C:Program Files (x86)Steam
2020-04-14 22:09 – 2019-08-14 12:05 – 000000000 ____D C:WINDOWSsystem32SleepStudy
2020-04-14 20:44 – 2019-08-12 13:10 – 000000000 ____D C:UsersMoeDocumentsViberDownloads
2020-04-14 19:12 – 2019-08-14 12:15 – 000840852 _____ C:WINDOWSsystem32PerfStringBackup.INI
2020-04-14 19:12 – 2019-03-19 12:50 – 000000000 ____D C:WINDOWSINF
2020-04-14 19:07 – 2019-12-12 10:32 – 000000000 ____D C:ProgramDataNVIDIA
2020-04-14 19:06 – 2019-01-06 22:25 – 000000000 ____D C:UsersMoeAppDataLocalLowMozilla
2020-04-14 19:05 – 2019-08-14 12:12 – 000003126 _____ C:WINDOWSsystem32TasksMSIAfterburner
2020-04-14 19:05 – 2019-08-14 12:12 – 000000006 ____H C:WINDOWSTasksSA.DAT
2020-04-14 19:05 – 2019-01-08 06:13 – 000000000 ____D C:UsersMoeAppDataLocalESET
2020-04-14 19:04 – 2019-03-19 12:37 – 000262144 _____ C:WINDOWSsystem32configBBI
2020-04-14 18:06 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSAppReadiness
2020-04-14 18:06 – 2019-01-06 22:18 – 000000000 ____D C:UsersMoeAppDataLocalPackages
2020-04-14 18:04 – 2019-03-19 12:52 – 000000000 ___HD C:WINDOWSELAMBKUP
2020-04-14 16:46 – 2019-01-07 18:15 – 000000000 ____D C:UsersMoeAppDataLocalcache
2020-04-14 16:26 – 2019-01-07 17:11 – 000000000 ____D C:UsersMoeAppDataLocalCrashDumps
2020-04-13 21:17 – 2019-08-12 13:04 – 000000000 ____D C:UsersMoeDownloadsAV Tools
2020-04-12 21:04 – 2019-03-19 12:52 – 000000000 ___HD C:Program FilesWindowsApps
2020-04-11 23:13 – 2020-01-16 18:41 – 000000000 ____D C:UsersMoeAppDataLocalAirVPN
2020-04-11 20:02 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSsystem32NDF
2020-04-11 00:36 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSsystem32Macromed
2020-04-11 00:36 – 2019-01-06 23:09 – 000000000 ____D C:Program Files (x86)AMD
2020-04-11 00:36 – 2019-01-06 23:05 – 000000000 ____D C:Program FilesAMD
2020-04-11 00:35 – 2019-01-16 19:42 – 000000214 _____ C:WINDOWSTasksCreateExplorerShellUnelevatedTask.
job
2020-04-10 23:30 – 2019-01-06 22:25 – 000000000 ____D C:Program Files (x86)Mozilla Maintenance Service
2020-04-10 17:38 – 2019-04-20 16:34 – 000001278 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsMozilla Thunderbird.lnk
2020-04-10 17:09 – 2019-01-08 22:51 – 000000000 ____D C:UsersMoeAppDataLocalElevatedDiagnostics
2020-04-09 23:45 – 2019-08-12 13:10 – 000002278 ____H C:UsersMoeDocumentsDefault.rdp
2020-04-09 23:43 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSsystem32FxsTmp
2020-04-08 22:37 – 2019-01-06 22:25 – 000001005 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsFirefox.
lnk
2020-04-07 16:53 – 2019-08-14 12:08 – 000000000 ____D C:UsersMoe
2020-04-07 16:52 – 2019-11-08 18:30 – 000000000 ____D C:WINDOWSMinidump
2020-04-06 18:02 – 2019-12-24 14:55 – 000000000 ____D C:Program FilesqBittorrent
2020-04-06 18:01 – 2019-12-24 14:56 – 000000000 ____D C:UsersMoeAppDataRoamingqBittorrent
2020-04-06 18:01 – 2019-08-12 13:04 – 000000000 ____D C:UsersMoeDownloadsComm
2020-04-05 23:00 – 2019-07-03 14:27 – 000000000 ____D C:UsersMoeDesktopMisc
2020-04-05 22:52 – 2019-01-07 18:15 – 000000000 ____D C:UsersMoeAppDataRoamingViberPC
2020-04-04 12:47 – 2019-04-22 20:36 – 000002418 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsBrave.lnk
2020-04-03 09:02 – 2020-02-15 22:35 – 000000000 ____D C:UsersMoeDesktopBlueStacks
2020-04-02 13:26 – 2019-01-06 22:20 – 000744808 ____N (Microsoft Corporation) C:WINDOWSsystem32MpSigStub.exe
2020-03-26 13:20 – 2019-08-14 12:05 – 000629768 _____ C:WINDOWSsystem32FNTCACHE.
DAT
2020-03-26 13:15 – 2019-08-12 13:04 – 000000000 ____D C:UsersMoeDownloadsMisc
2020-03-25 15:46 – 2019-10-16 21:34 – 000000000 ____D C:Program Files (x86)MonitorSoftware
2020-03-25 13:43 – 2019-03-19 14:23 – 000000000 ____D C:Program FilesWindows Defender Advanced Threat Protection
2020-03-25 13:43 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSSystemResources
2020-03-25 13:43 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation
2020-03-25 13:43 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSShellExperiences
2020-03-25 13:43 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSProvisioning
2020-03-25 13:43 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSPolicyDefinitions
2020-03-25 13:43 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSbcastdvr
2020-03-25 13:40 – 2019-03-19 12:37 – 000000000 ____D C:WINDOWSCbsTemp
2020-03-25 13:19 – 2019-04-08 09:33 – 000000000 ____D C:temp
2020-03-25 10:46 – 2019-12-12 10:34 – 000000000 ____D C:UsersMoeAppDataLocalNVIDIA
2020-03-25 10:34 – 2019-12-12 10:30 – 000000000 ____D C:WINDOWSsystem32DriversNVIDIA Corporation
2020-03-25 10:34 – 2019-12-12 10:27 – 000000000 ____D C:ProgramDataNVIDIA Corporation
2020-03-25 10:34 – 2019-12-12 10:27 – 000000000 ____D C:Program FilesNVIDIA Corporation
2020-03-25 10:29 – 2019-03-19 12:52 – 000000000 ____D C:WINDOWSHelp
2020-03-25 10:21 – 2019-01-06 21:55 – 000000000 ____D C:WINDOWSsystem32Driverswd
2020-03-22 22:50 – 2019-08-12 13:04 – 000000000 ____D C:UsersMoeDownloadsUtilities==================== Files in the root of some directories ========2019-12-05 02:36 – 2019-12-05 03:52 – 000000128 _____ () C:UsersMoeAppDataLocalPUTTY.RND
2019-12-22 17:15 – 2019-12-24 19:40 – 000000487 _____ () C:UsersMoeAppDataLocalReclaiMe.config
2020-01-06 20:22 – 2020-01-06 20:22 – 000000017 _____ () C:UsersMoeAppDataLocalresmon.
resmoncfg
2020-02-01 21:45 – 2020-02-01 21:45 – 000000000 _____ () C:UsersMoeAppDataLocal{127D5E2F-D9CB-47BB-A174-8CCF1207B1F8}==================== SigCheck ============================(There is no automatic fix for files that do not pass verification.)==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-04-2020
Ran by Moe (14-04-2020 23:48:48)
Running from C:UsersMoeDownloadsMalware
Windows 10 Pro Version 1909 18363.
752 (X64) (2019-08-14 04:12:07)
Boot Mode: Normal
============================================================================== Accounts: =============================Administrator (S-1-5-21-2401605411-2593107901-998236807-500 – Administrator – Disabled)
DefaultAccount (S-1-5-21-2401605411-2593107901-998236807-503 – Limited – Disabled)
Guest (S-1-5-21-2401605411-2593107901-998236807-501 – Limited – Disabled)
Moe (S-1-5-21-2401605411-2593107901-998236807-1001 – Administrator – Enabled) => C:UsersMoe
Mio (S-1-5-21-2401605411-2593107901-998236807-1003 – Limited – Enabled) => C:UsersMio
WDAGUtilityAccount (S-1-5-21-2401605411-2593107901-998236807-504 – Limited – Disabled)==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: Windows Defender (Enabled – Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled – Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}==================== Installed Programs ======================(Only the adware programs with « Hidden » flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.
)7-Zip 19.00 (x64) (HKLM…7-Zip) (Version: 19.00 – Igor Pavlov)
AMD Chipset Software (HKLM-x32…AMD_Chipset_IODrivers) (Version: 2.
04.04.111 – Advanced Micro Devices, Inc.
)
AMD_Chipset_Drivers (HKLM-x32…{1774a753-7604-40a0-adbd-e3dc95bea5a8}) (Version: 2.04.04.
111 – Advanced Micro Devices, Inc.) Hidden
Asmedia USB Host Controller Driver (HKLM-x32…{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.
56.1 – Asmedia Technology)
BlueStacks App Player (HKLM…BlueStacks) (Version: 4.180.
0.1051 – BlueStack Systems, Inc.)
Brave (HKLM-x32…BraveSoftware Brave-Browser) (Version: 80.
1.5.123 – Brave Software Inc)
Eddie – OpenVPN UI (HKLM-x32…AirVPN) (Version: – AirVPN – hxxps://airvpn.
org)
Epic Games Launcher Prerequisites (x64) (HKLM…{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.
0 – Epic Games, Inc.) Hidden
Glary Utilities PRO 5.137 (HKLM-x32…Glary Utilities 5) (Version: 5.
137.0.163 – Glarysoft Ltd)
Google Update Helper (HKLM-x32…{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.
3.99.0 – Google Inc.
) Hidden
Intel® Network Connections 23.5.2.
0 (HKLM…PROSetDX) (Version: 23.5.2.
0 – Intel)
K-Lite Codec Pack 15.4.4 Standard (HKLM-x32…KLiteCodecPack_is1) (Version: 15.
4.4 – KLCP)
Launcher Prerequisites (x64) (HKLM-x32…{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.
0.0 – Epic Games, Inc.) Hidden
LibreOffice 6.
4.2.2 (HKLM…{366B3DEE-791D-4044-AC14-4FE2265754BA}) (Version: 6.
4.2.2 – The Document Foundation)
Microsoft Visual C++ 2008 Redistributable – x64 9.
0.30729.6161 (HKLM…{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.
0.30729.6161 – Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable – x86 9.
0.30729.6161 (HKLM-x32…{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.
0.30729.6161 – Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable – 10.
0.40219 (HKLM…{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.
40219 – Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.
0.40219 – Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) – 11.0.
61030 (HKLM-x32…{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.
0 – Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.
0.61030.0 – Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) – 12.
0.30501 (HKLM-x32…{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.
30501.0 – Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) – 12.0.
30501 (HKLM-x32…{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.
0 – Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) – 14.14.26429 (HKLM-x32…{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.
14.26429.4 – Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) – 14.
13.26020 (HKLM-x32…{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.
26020.0 – Microsoft Corporation)
Mozilla Firefox 75.0 (x64 en-US) (HKLM…Mozilla Firefox 75.
0 (x64 en-US)) (Version: 75.0 – Mozilla)
Mozilla Maintenance Service (HKLM…MozillaMaintenanceService) (Version: 72.0 – Mozilla)
Mozilla Thunderbird 68.
7.0 (x86 en-US) (HKLM-x32…Mozilla Thunderbird 68.7.
0 (x86 en-US)) (Version: 68.7.0 – Mozilla)
MSI Afterburner 4.
6.1 (HKLM-x32…Afterburner) (Version: 4.6.
1 – MSI Co., LTD)
MSI Kombustor v4 0.6.
3.3 (64-bit) (HKLM-x32…{F3D3CC6B-9AD7-4F43-8C69-40D5902FDC5C}}_is1) (Version: – MSI / Geeks3D)
NextDNS (HKLM-x32…NextDNS) (Version: 1.0.
12 – NextDNS)
NVAPI Monitor plugin for NvContainer (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 – NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.
20.2.34 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.
GFExperience) (Version: 3.20.2.
34 – NVIDIA Corporation)
NVIDIA Graphics Driver 445.75 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 445.
75 – NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.
26 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.
38.26 – NVIDIA Corporation)
NVIDIA PhysX System Software 9.19.
0218 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.
0218 – NVIDIA Corporation)
Promontory_GPIO Driver (HKLM-x32…{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 2.0.1.
0 – Advanced Micro Devices, Inc.) Hidden
PuTTY release 0.73 (64-bit) (HKLM…{44F7642C-AB7E-4468-B028-E8D08A0CBB0E}) (Version: 0.
73.0.0 – Simon Tatham)
qBittorrent 4.
2.3 (HKLM-x32…qBittorrent) (Version: 4.2.
3 – The qBittorrent project)
RivaTuner Statistics Server 7.2.2 (HKLM-x32…RTSS) (Version: 7.
2.2 – Unwinder)
SP Toolbox (HKLM-x32…{CA9C70BB-19CF-49D6-92A7-6A1C052BF195}) (Version: 2.0.
14.1 – Silicon Power)
Steam (HKLM-x32…Steam) (Version: 2.10.
91.91 – Valve Corporation)
TAP-Windows 9.21.
2 (HKLM…TAP-Windows) (Version: 9.21.2 – )
Viber (HKLM-x32…{BFA8868B-76A2-4B64-ADE2-76CF7E3E882D}) (Version: 9.
9.5.12 – Viber Media Inc.
) Hidden
Viber (HKUS-1-5-21-2401605411-2593107901-998236807-1001…{144a144e-eecc-4102-bd8b-778664ebf53a}) (Version: 9.9.5.
12 – Viber Media Inc.)
Web Components (HKLM-x32…{03B13AF8-9625-478A-AF0E-205337B9415A}_is1) (Version: 3.0.
6.6 – )
Winpower (HKLM-x32…Winpower) (Version: 5.6.
0.5 – )
WinSCP 5.17.
2 (HKUS-1-5-21-2401605411-2593107901-998236807-1001…winscp3_is1) (Version: 5.17.2 – Martin Prikryl)Packages:
=========
Community Showcase Everyday Art -> C:Program FilesWindowsAppsMicrosoft.
CommunityShowcaseEverydayArt_1.0.0.
0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Community Showcase Everyday Art 2 -> C:Program FilesWindowsAppsMicrosoft.CommunityShowcaseEverydayArt2_1.0.
0.0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Community Showcase Everyday Art 3 -> C:Program FilesWindowsAppsMicrosoft.CommunityShowcaseEverydayArt3_1.
0.0.0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Dark Skies by Tracy Hymas -> C:Program FilesWindowsAppsMicrosoft.
DarkSkiesbyTracyHymas_1.0.0.
0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Light and Dark 2 by Nick Boyer -> C:Program FilesWindowsAppsMicrosoft.LightandDark2byNickBoyer_1.0.
0.0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.
Xaml_10.1811.1.
0_x64__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:Program FilesWindowsAppsMicrosoft.Advertising.Xaml_10.
1811.1.0_x86__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation) [MS Ad] Microsoft News -> C:Program FilesWindowsAppsMicrosoft.
QwanturankNews_4.36.20714.
0_x64__8wekyb3d8bbwe [2020-03-27] (Microsoft Corporation) [MS Ad] MSN Weather -> C:Program FilesWindowsAppsMicrosoft.QwanturankWeather_4.36.
20714.0_x64__8wekyb3d8bbwe [2020-03-27] (Microsoft Corporation) [MS Ad] Perspectives of Japan 2 by Kazuo Nakadai -> C:Program FilesWindowsAppsMicrosoft.PerspectivesofJapan2byKazuoNakadai_1.
0.0.0_neutral__8wekyb3d8bbwe [2020-02-27] (Microsoft Corporation)
Subtle Details by Claudio Marinangeli -> C:Program FilesWindowsAppsMicrosoft.
SubtleDetailsbyClaudioMarinangeli_1.0.0.
0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
uBlock Origin -> C:Program FilesWindowsApps37833NikRolls.uBlockOrigin_1.15.
24.0_neutral__f8jsg5mm64m62 [2019-08-14] (Nik Rolls)==================== Custom CLSID (Whitelisted): ==============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.
)CustomCLSID: HKUS-1-5-21-2401605411-2593107901-998236807-1001_ClassesCLSID{E15E1D68-0D1C-49F7-BEB8-812B1E00FA60}InprocServer32 -> C:UsersMoeAppDataLocalProgramsWinSCPDragExt64.dll (Martin Prikryl -> Martin Prikryl)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:Program Files7-Zip7-zip.dll [2019-02-22] (Igor Pavlov) [File not signed] ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:Program Files (x86)Glary Utilities 5x64ContextHandler.
dll [2020-03-04] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:Program Files (x86)Glary Utilities 5x64ContextHandler.dll [2020-03-04] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:Program Files7-Zip7-zip.dll [2019-02-22] (Igor Pavlov) [File not signed] ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:WINDOWSsystem32nvshext.
dll [2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:Program Files7-Zip7-zip.dll [2019-02-22] (Igor Pavlov) [File not signed] ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:Program Files (x86)Glary Utilities 5x64ContextHandler.dll [2020-03-04] (Glarysoft LTD -> Glarysoft Ltd)==================== Codecs (Whitelisted) ====================(If an entry is included in the fixlist, the registry item will be restored to default or removed.
The file will not be moved.)HKLM…Drivers32: [VIDC.RTV1] => c:windowssystem32rtvcvfw64.
dll [246272 2012-09-29] () [File not signed] HKLM…Drivers32: [VIDC.RTV1] => C:WindowsSysWOW64rtvcvfw32.dll [247296 2012-09-29] () [File not signed]==================== Shortcuts & WMI ============================================ Loaded Modules (Whitelisted) =============2019-05-28 09:22 – 2019-03-28 11:29 – 006065152 _____ () [File not signed] C:Program Files (x86)ASUSAsusFanControlService2.
00.76libprotobufd.dll
2019-10-16 21:34 – 2019-10-16 21:34 – 000045056 _____ () [File not signed] C:Program Files (x86)MonitorSoftwarejspWin.
dll
2019-10-16 21:34 – 2019-10-16 21:34 – 000077824 _____ () [File not signed] C:Program Files (x86)MonitorSoftwareTrayIcon12.dll
2019-10-16 21:34 – 2019-10-16 21:34 – 000036864 _____ () [File not signed] C:Program Files (x86)MonitorSoftwarewriteSystemLogDll.dll
2019-08-13 01:52 – 2019-01-07 09:43 – 000116224 ____C () [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64GFSDK_Aftermath_Lib.
x64.dll
2019-08-13 01:52 – 2019-01-07 09:00 – 000883712 ____C () [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64oo2core_4_win64.dll
2019-08-13 01:52 – 2019-01-07 09:43 – 000026112 ____C (Epic Games, Inc.
) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64libogg_64.dll
2019-08-13 01:52 – 2019-01-07 09:00 – 001714688 ____C (Epic Games, Inc.) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64libvorbis_64.
dll
2019-08-13 01:52 – 2019-01-07 09:43 – 000039936 ____C (Epic Games, Inc.) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64libvorbisfile_64.dll
2019-01-06 22:57 – 2019-02-22 00:00 – 000078336 _____ (Igor Pavlov) [File not signed] C:Program Files7-Zip7-zip.
dll
2018-12-20 12:49 – 2018-12-20 12:49 – 000372736 _____ (Intel® Corporation) [File not signed] C:Windowssystem32NCS2Setp.dll
2019-08-13 01:52 – 2019-01-07 09:00 – 001665024 ____C (NVIDIA Corporation) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64APEX_Clothing_x64.dll
2019-08-13 01:52 – 2019-01-07 09:00 – 001213440 ____C (NVIDIA Corporation) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64APEX_Destructible_x64.
dll
2019-08-13 01:52 – 2019-01-07 09:00 – 001755648 ____C (NVIDIA Corporation) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64ApexFramework_x64.dll
2019-08-13 01:52 – 2019-01-07 09:43 – 000143872 ____C (NVIDIA Corporation) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64nvtt_64.dll
2019-08-13 01:52 – 2019-01-07 09:00 – 000680960 ____C (NVIDIA Corporation) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64PhysXCooking64.
dll
2019-08-13 01:52 – 2019-01-07 09:00 – 004595712 ____C (NVIDIA Corporation) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64PhysXCore64.dll
2019-08-13 01:52 – 2019-01-07 09:43 – 000062464 ____C (NVIDIA Corporation) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64PhysXLoader64.dll
2019-08-13 01:52 – 2019-01-07 09:00 – 000435712 ____C (RAD Game Tools, Inc.
) [File not signed] D:Steam GamessteamappscommonXCOM 2XCom2-WarOfTheChosenBinariesWin64bink2w64.dll==================== Alternate Data Streams (Whitelisted) ========(If an entry is included in the fixlist, only the ADS will be removed.)AlternateDataStreams: C:UsersPublicShared Files:VersionCache [464]==================== Safe Mode (Whitelisted) ==================(If an entry is included in the fixlist, it will be removed from the registry.
The « AlternateShell » will be restored.)HKLMSYSTEMCurrentControlSetControlSafeBootNetworkMSIServer => « »= »Service »==================== Association (Whitelisted) ===================================== Internet Explorer trusted/restricted ============================== Hosts content: =========================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2019-09-20 03:44 – 2019-09-20 03:44 – 000001026 _____ C:WINDOWSsystem32driversetchosts
127.
0.0.1 ads.
viber.com
127.0.
0.1 ads.aws.
viber.com
127.0.
0.1 ads-d.viber.
com
127.0.0.
1 api.mixpanel.com
127.
0.0.1 s-imp.
rmp.rakuten.com
127.
0.0.1 s-bid.
rmp.rakuten.com
127.
0.0.1 api.
taboola.com2019-01-08 22:51 – 2020-03-05 00:55 – 000000584 _____ C:WINDOWSsystem32driversetchosts.ics
24 14 3 4 214
0.
0.0.1 Veritech.
mshome.net # 2024 12 6 28 8 37 52 925
81==================== Other Areas ===========================(Currently there is no automatic fix for this section.)HKUS-1-5-21-2401605411-2593107901-998236807-1001Control PanelDesktop\Wallpaper -> C:UsersMoeAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper
DNS Servers: 192.
0.2.42 – 192.
168.1.2
HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==(If an entry is included in the fixlist, it will be removed.)HKLM…StartupApprovedRun32: => « Display »
HKUS-1-5-21-2401605411-2593107901-998236807-1001…StartupApprovedRun: => « GUDelayStartup »==================== FirewallRules (Whitelisted) ================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.
)FirewallRules: [UDP Query User{811DBEA4-41FA-46ED-956E-5BE25E8C3572}D:steam gamessteamappscommonxcom 2binarieswin64xcom2.exe] => (Allow) D:steam gamessteamappscommonxcom 2binarieswin64xcom2.exe (Firaxis Games) [File not signed] FirewallRules: [TCP Query User{6DD7ECFD-09FC-48D4-82FC-4A9DCE24F45C}D:steam gamessteamappscommonxcom 2binarieswin64xcom2.
exe] => (Allow) D:steam gamessteamappscommonxcom 2binarieswin64xcom2.exe (Firaxis Games) [File not signed] FirewallRules: [{D711B4EE-3A22-4B55-9183-EA849B550882}] => (Allow) D:Steam GamessteamappscommonDarkestDungeon_windowsDarkest.exe No File
FirewallRules: [{DBB31132-12AD-43AC-96F7-98E67418B288}] => (Allow) D:Steam GamessteamappscommonDarkestDungeon_windowsDarkest.
exe No File
FirewallRules: [{052ACFA7-1863-4E9A-A8F1-1EF538E0EA01}] => (Allow) C:Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F5AF7580-EDCC-48FF-B201-9FAB10279BCC}] => (Allow) C:Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{0647C63A-86A3-4627-B8E2-D5B98D0587BF}] => (Allow) C:Program Files (x86)SteamSteam.
exe (Valve -> Valve Corporation)
FirewallRules: [{7DB4BEFD-8408-4C66-AACE-A2CFB4CF87A1}] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)
FirewallRules: [{8AFEDD23-1D64-492E-BDD1-9B35769BEA74}] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.
exe No File
FirewallRules: [{D4855770-1EDB-4586-8229-A00F57CD1BA4}] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe No File
FirewallRules: [{E99CC250-9DA4-4E2D-8A0A-A3064D11D60A}] => (Allow) D:Steam GamessteamappscommonXCOM 2BinariesWin64LauncherModLauncherWPF.
exe (Microsoft) [File not signed] FirewallRules: [{B5D92BDD-D849-4F5F-A79E-2E07CF598644}] => (Allow) D:Steam GamessteamappscommonXCOM 2BinariesWin64LauncherModLauncherWPF.exe (Microsoft) [File not signed] FirewallRules: [{D4457B75-5027-47D7-88AA-55095940C08B}] => (Allow) D:Steam GamessteamappscommonAim Labaimlab_tb.exe () [File not signed] FirewallRules: [{5E25349C-74B8-4D15-894D-0872D2131623}] => (Allow) D:Steam GamessteamappscommonAim Labaimlab_tb.
exe () [File not signed] FirewallRules: [{D3AC31C3-D297-4E57-B817-AB5A2D631D6D}] => (Allow) D:Steam GamessteamappscommonOri DEoriDE.exe () [File not signed] FirewallRules: [{46DB4B34-A704-49C5-8072-B323B6DD4D00}] => (Allow) D:Steam GamessteamappscommonOri DEoriDE.exe () [File not signed] FirewallRules: [{9C8E9C26-3181-4002-BB4E-F99E176F4DED}] => (Allow) D:Steam GamessteamappscommonBATTLETECHBattleTechLauncher.
exe (HarebrainedSchemes) [File not signed] FirewallRules: [{976264D6-9196-4111-B1DA-F19DDEC10D4F}] => (Allow) D:Steam GamessteamappscommonBATTLETECHBattleTechLauncher.exe (HarebrainedSchemes) [File not signed] FirewallRules: [{9772867D-D70E-46AA-B24A-70C4C0CEF9BC}] => (Allow) D:Steam GamessteamappscommonLords Of The FallenbinLordsOfTheFallen.exe () [File not signed] FirewallRules: [{EAC6A44C-2782-47B9-A545-1DAF8E4EF014}] => (Allow) D:Steam GamessteamappscommonLords Of The FallenbinLordsOfTheFallen.
exe () [File not signed] FirewallRules: [{EB7CD69E-254A-4D44-AB26-1CBA8A4FDEAE}] => (Allow) D:Steam GamessteamappscommonRise of the Tomb RaiderROTTR.exe (Square Enix LTD -> Eidos Inc.)
FirewallRules: [{BB306D99-72DA-4465-9AF2-3C548771E27B}] => (Allow) D:Steam GamessteamappscommonRise of the Tomb RaiderROTTR.
exe (Square Enix LTD -> Eidos Inc.)
FirewallRules: [{D2A5645D-4712-4C97-B75A-14D7D07819AA}] => (Allow) D:Steam GamessteamappscommonSniper Elite 4LauncherSniperElite4.exe () [File not signed] FirewallRules: [{D96F3EF3-6CA0-4D2A-B20A-0A029CF591D7}] => (Allow) D:Steam GamessteamappscommonSniper Elite 4LauncherSniperElite4.
exe () [File not signed] FirewallRules: [{68A63715-C245-4B93-B4B3-F69D124A3FC2}] => (Allow) D:Steam GamessteamappscommonValkyria ChroniclesLauncher.exe (SEGA EUROPE LIMITED -> SEGA)
FirewallRules: [{D36A331A-5598-4DB9-B711-E5988A3317D7}] => (Allow) D:Steam GamessteamappscommonValkyria ChroniclesLauncher.exe (SEGA EUROPE LIMITED -> SEGA)
FirewallRules: [{E8949901-67CA-42C7-87E7-79B4C806C2C6}] => (Allow) D:Steam GamessteamappscommonThe Witcher 3binx64witcher3.
exe (CD Projekt Red) [File not signed] FirewallRules: [{76356363-2932-4C9E-9CA5-100E0A18DE30}] => (Allow) D:Steam GamessteamappscommonThe Witcher 3binx64witcher3.exe (CD Projekt Red) [File not signed] FirewallRules: [TCP Query User{0C132FB1-2D6D-48C5-BEED-617F5B392C45}D:steam gamessteamappscommonxcom 2xcom2-warofthechosenbinarieswin64xcom2.exe] => (Allow) D:steam gamessteamappscommonxcom 2xcom2-warofthechosenbinarieswin64xcom2.
exe (Firaxis Games) [File not signed] FirewallRules: [UDP Query User{4B6AB98C-01B1-4E25-B0BD-01DEBDD6D3A1}D:steam gamessteamappscommonxcom 2xcom2-warofthechosenbinarieswin64xcom2.exe] => (Allow) D:steam gamessteamappscommonxcom 2xcom2-warofthechosenbinarieswin64xcom2.exe (Firaxis Games) [File not signed] FirewallRules: [{2816FA72-26F3-48B8-9EC2-4D971F45FD0C}] => (Allow) C:Program Files (x86)Steambincefcef.
win7x64steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{865BC007-BDA4-4FAD-867E-6D78E65C2FCD}] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.
exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{C23464D7-1F1D-43F5-8E5E-35524DCFFA49}D:steam gamessteamappscommonxcom 2xcom2-warofthechosenbinarieswin64xcom2.exe] => (Block) D:steam gamessteamappscommonxcom 2xcom2-warofthechosenbinarieswin64xcom2.exe (Firaxis Games) [File not signed] FirewallRules: [UDP Query User{23B20065-9489-44FF-A75C-DD06171E5BFC}D:steam gamessteamappscommonxcom 2xcom2-warofthechosenbinarieswin64xcom2.
exe] => (Block) D:steam gamessteamappscommonxcom 2xcom2-warofthechosenbinarieswin64xcom2.exe (Firaxis Games) [File not signed] FirewallRules: [{2D1FA137-B341-4C35-B2A5-E52C52FDFE1C}] => (Allow) D:Steam GamessteamappscommonMurdered Soul SuspectBinariesWin64Murdered.exe () [File not signed] FirewallRules: [{FBD08F31-ACA9-47EA-8274-D53DDC1B1B2B}] => (Allow) D:Steam GamessteamappscommonMurdered Soul SuspectBinariesWin64Murdered.
exe () [File not signed] FirewallRules: [TCP Query User{035A8079-8502-450A-A964-B21F3B68E629}D:steam gamessteamappscommonpubgtslgamebinarieswin64tslgame.exe] => (Allow) D:steam gamessteamappscommonpubgtslgamebinarieswin64tslgame.exe No File
FirewallRules: [UDP Query User{5F993112-977F-4B20-B86A-368D4BA1F191}D:steam gamessteamappscommonpubgtslgamebinarieswin64tslgame.
exe] => (Allow) D:steam gamessteamappscommonpubgtslgamebinarieswin64tslgame.exe No File
FirewallRules: [{D2875FB9-E846-43A3-9706-34EB843C566B}] => (Allow) D:Steam GamessteamappscommonShadowOfMordorx64ShadowOfMordor.exe No File
FirewallRules: [{D038F38A-896A-4F36-BF36-FE730E412724}] => (Allow) D:Steam GamessteamappscommonShadowOfMordorx64ShadowOfMordor.
exe No File
FirewallRules: [{B57937B4-8AB1-4EFE-A174-097E24A7C37D}] => (Allow) D:Steam GamessteamappscommonThe CouncilThe Council.exe (Focus Home Interactive -> Cyanide)
FirewallRules: [{8B748F3F-9D82-4BEB-AEBA-2846F4591C25}] => (Allow) D:Steam GamessteamappscommonThe CouncilThe Council.exe (Focus Home Interactive -> Cyanide)
FirewallRules: [{DAB3AA06-94F0-4814-AD8E-50D5A8326A5B}] => (Allow) D:Steam GamessteamappscommonBayonettaBayonetta.
exe () [File not signed] FirewallRules: [{F0CA2CC0-EFAC-42F0-AB1A-DB968413ED8F}] => (Allow) D:Steam GamessteamappscommonBayonettaBayonetta.exe () [File not signed] FirewallRules: [{8B81A59D-8692-4893-953D-41D196DB463C}] => (Allow) D:Steam GamessteamappscommonGalaxy SquadGalaxy Squad.exe () [File not signed] FirewallRules: [{68CBD691-1262-4A04-97B3-BB9B8CF7D565}] => (Allow) D:Steam GamessteamappscommonGalaxy SquadGalaxy Squad.
exe () [File not signed] FirewallRules: [{40DE5C28-BB59-47BC-B80E-8848646D58DE}] => (Allow) D:Steam GamessteamappscommonVanquishVanquish.exe () [File not signed] FirewallRules: [{8E0DD3A5-5456-44D9-9592-8FD0153D7D24}] => (Allow) D:Steam GamessteamappscommonVanquishVanquish.exe () [File not signed] FirewallRules: [{6B2362AD-142B-4115-BCEF-60DE60B5B19A}] => (Allow) C:Program FilesMicrosoft OfficerootOffice16Lync.
exe No File
FirewallRules: [{863F2499-C14C-4083-9742-9D2783D2B070}] => (Allow) C:Program FilesMicrosoft OfficerootOffice16UcMapi.exe No File
FirewallRules: [{C744DFE9-6806-434C-BB7F-EDE86FA4F322}] => (Allow) D:Steam GamessteamappscommonVC4Valkyria4_x64.exe (SEGA) [File not signed] FirewallRules: [{74D6C340-6F46-4300-9E46-66C04C6B3994}] => (Allow) D:Steam GamessteamappscommonVC4Valkyria4_x64.
exe (SEGA) [File not signed] FirewallRules: [{B01B4D96-D0E8-44F8-AC24-690BDC3F53DA}] => (Allow) D:Steam GamessteamappscommonDivinity Original Sin 2binSupportTool.exe (Larian Studios -> Larian Studios)
FirewallRules: [{001F75A5-C6C4-46ED-B63A-CBB5233D8FEC}] => (Allow) D:Steam GamessteamappscommonDivinity Original Sin 2binSupportTool.exe (Larian Studios -> Larian Studios)
FirewallRules: [TCP Query User{F3FED973-D866-413E-9267-980F2AD09248}D:steam gamessteamappscommondivinity original sin 2defedbineocapp.
exe] => (Allow) D:steam gamessteamappscommondivinity original sin 2defedbineocapp.exe (Larian Studios -> )
FirewallRules: [UDP Query User{3CD1AAED-5E7E-4D20-B357-114596BAC930}D:steam gamessteamappscommondivinity original sin 2defedbineocapp.exe] => (Allow) D:steam gamessteamappscommondivinity original sin 2defedbineocapp.
exe (Larian Studios -> )
FirewallRules: [{DFED5B34-6DBA-4B80-9786-A53B2CED1851}] => (Allow) D:Steam GamessteamappscommonMutant Year ZeroZoneUE4.exe (Ayeware AB -> )
FirewallRules: [{C8E673B3-076B-4373-9004-D5A394039C54}] => (Allow) D:Steam GamessteamappscommonMutant Year ZeroZoneUE4.exe (Ayeware AB -> )
FirewallRules: [TCP Query User{01B6C91E-5CFD-4899-98E0-540B443D5B6E}D:steam gamessteamappscommonmutant year zerozoneue4binarieswin64zoneue4-win64-shipping.
exe] => (Allow) D:steam gamessteamappscommonmutant year zerozoneue4binarieswin64zoneue4-win64-shipping.exe (Ayeware AB -> Epic Games, Inc.)
FirewallRules: [UDP Query User{150A7B2B-AB43-4BA5-9C7A-5C5EB607878E}D:steam gamessteamappscommonmutant year zerozoneue4binarieswin64zoneue4-win64-shipping.
exe] => (Allow) D:steam gamessteamappscommonmutant year zerozoneue4binarieswin64zoneue4-win64-shipping.exe (Ayeware AB -> Epic Games, Inc.)
FirewallRules: [{4F1A33D6-E3F7-44B6-A219-63B5625ACE55}] => (Allow) C:Program Files (x86)ASUSAI Suite IIIFile TransferWi-Fi GO ! AssistToolFile Transfer Server.
exe No File
FirewallRules: [{1C234395-6F9E-4C75-8115-993CAA798801}] => (Allow) C:Program Files (x86)ASUSAI Suite IIIFile TransferWi-Fi GO ! AssistToolFile Transfer Server.exe No File
FirewallRules: [{14B269FC-D2E8-41FB-99B3-E4FD0BBDD755}] => (Allow) C:Program Files (x86)ASUSAI Suite IIIASUSDMS.exe No File
FirewallRules: [{0DF0D9A2-96B3-4024-8B2A-204CE9A3630E}] => (Allow) C:Program Files (x86)ASUSAI Suite IIIASUSDMS.
exe No File
FirewallRules: [TCP Query User{ABB0F49E-F3BE-41F4-B7EF-D23E2F0D6C6C}D:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.exe] => (Allow) D:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.exe No File
FirewallRules: [UDP Query User{829839E3-D14D-4FA2-88E1-7B48B293FCC9}D:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.
exe] => (Allow) D:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.exe No File
FirewallRules: [TCP Query User{07D77B97-DCFA-491A-91B5-5488BDAF07F5}C:program fileslogitech gaming softwarelcore.exe] => (Block) C:program fileslogitech gaming softwarelcore.
exe No File
FirewallRules: [UDP Query User{1D410BD2-56F4-4513-94EC-5D03CC5A00FA}C:program fileslogitech gaming softwarelcore.exe] => (Block) C:program fileslogitech gaming softwarelcore.exe No File
FirewallRules: [{62FEA8AE-7195-4ED5-B1D3-AF6B5DF789ED}] => (Allow) D:UsersMoeDownloadsCommdnsquerysniffer-x64DNSQuerySniffer.
exe No File
FirewallRules: [{46ED2DA4-BB7C-4073-B051-295FB911F3E7}] => (Allow) D:UsersMoeDownloadsCommdnsquerysniffer-x64DNSQuerySniffer.exe No File
FirewallRules: [{C30D6694-FD01-409F-B361-086F067D9749}] => (Allow) D:Steam GamessteamappscommonDarkestDungeon_windowsDarkest.exe No File
FirewallRules: [{CBE2D74B-B2F4-486C-AAA7-6C8493895A30}] => (Allow) D:Steam GamessteamappscommonDarkestDungeon_windowsDarkest.
exe No File
FirewallRules: [TCP Query User{6B64FDBA-1826-4CFD-8DB0-E2AD4E4CB0E4}D:usersMoedownloadsdriverssdi_r1904sdi_r1904.exe] => (Allow) D:usersMoedownloadsdriverssdi_r1904sdi_r1904.exe No File
FirewallRules: [UDP Query User{332A5186-50CE-40FB-BDC1-AE87967A070D}D:usersMoedownloadsdriverssdi_r1904sdi_r1904.
exe] => (Allow) D:usersMoedownloadsdriverssdi_r1904sdi_r1904.exe No File
FirewallRules: [{CC8D7DB3-53A9-4A17-BA09-2E0008E6AFF4}] => (Block) D:usersMoedownloadsdriverssdi_r1904sdi_r1904.exe No File
FirewallRules: [{1FB19917-5490-47E1-B23C-6F4D57687300}] => (Block) D:usersMoedownloadsdriverssdi_r1904sdi_r1904.
exe No File
FirewallRules: [{33F1BEE5-5829-4111-AE6B-6AA07CC948C6}] => (Allow) D:Steam GamessteamappscommonMechanicusMechanicus.exe () [File not signed] FirewallRules: [{D0B2338A-D761-4AD0-8117-6E2DE358F62F}] => (Allow) D:Steam GamessteamappscommonMechanicusMechanicus.exe () [File not signed] FirewallRules: [{671E449B-B698-4034-996F-76C0F25C049C}] => (Allow) D:Steam GamessteamappscommonRESIDENT EVIL 2 BIOHAZARD RE2re2.
exe (CAPCOM CO., LTD. -> )
FirewallRules: [{D7B5C4B7-AF28-4D72-8779-3E1D6EC87C7F}] => (Allow) D:Steam GamessteamappscommonRESIDENT EVIL 2 BIOHAZARD RE2re2.
exe (CAPCOM CO., LTD. -> )
FirewallRules: [TCP Query User{72AA3A01-6299-4977-9B5F-1F5EC24B6EFC}C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.
exe] => (Allow) C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.exe No File
FirewallRules: [UDP Query User{1FBC964B-07BD-4243-86CC-AAC72A19F13D}C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.exe] => (Allow) C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.
exe No File
FirewallRules: [{0B71C3D3-E32B-4F95-B1A0-A54A6A0D2ADF}] => (Block) C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.exe No File
FirewallRules: [{220E7ECD-8DE4-4B18-85B0-618D53DDA1BD}] => (Block) C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1904.exe No File
FirewallRules: [TCP Query User{2FD6C418-B00F-4BC2-A50A-63A4D8783054}C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1909.
exe] => (Allow) C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1909.exe No File
FirewallRules: [UDP Query User{8FB5D1B1-166A-40BD-BF95-B672D98DD39C}C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1909.exe] => (Allow) C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1909.
exe No File
FirewallRules: [{8C08F8D7-2175-46F6-B1E9-FBA5161A168F}] => (Block) C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1909.exe No File
FirewallRules: [{15AF1B83-3DDF-496B-88C6-D9ECCBA029E5}] => (Block) C:usersMoedownloadsdriverssdi_r1904sdi_x64_r1909.exe No File
FirewallRules: [TCP Query User{DFA1A0EA-4DDC-417A-9C59-B2F8EF036DA9}C:usersMoedownloadsdriverssdi_r1909sdi_x64_r1909.
exe] => (Allow) C:usersMoedownloadsdriverssdi_r1909sdi_x64_r1909.exe No File
FirewallRules: [UDP Query User{2E3FFA12-32D6-49AD-BB89-C63D5BB8EBD8}C:usersMoedownloadsdriverssdi_r1909sdi_x64_r1909.exe] => (Allow) C:usersMoedownloadsdriverssdi_r1909sdi_x64_r1909.
exe No File
FirewallRules: [TCP Query User{C2F6B574-CF36-49B2-8932-F69D44312796}C:program files (x86)monitorsoftwarejrebinjavaw.exe] => (Allow) C:program files (x86)monitorsoftwarejrebinjavaw.exe
FirewallRules: [UDP Query User{D1559902-964D-45E2-9171-03E66A4F5349}C:program files (x86)monitorsoftwarejrebinjavaw.
exe] => (Allow) C:program files (x86)monitorsoftwarejrebinjavaw.exe
FirewallRules: [{6A927535-E759-4FCD-898E-FFC4E15CF0E2}] => (Allow) C:Program Files (x86)MegaTecUPSilon 2000UPSilon.exe No File
FirewallRules: [{9C47B766-BCC4-4393-8C97-E791372C04B9}] => (Allow) C:Program Files (x86)MegaTecUPSilon 2000UPSilon.
exe No File
FirewallRules: [{3B1167A9-72E2-4090-BA7F-9671868D3EFB}] => (Allow) C:Program Files (x86)MegaTecUPSilon 2000RupsMon.exe No File
FirewallRules: [{CA7A6B14-6470-43C7-94F6-9B73B1DDF448}] => (Allow) C:Program Files (x86)MegaTecUPSilon 2000RupsMon.exe No File
FirewallRules: [TCP Query User{CBA2F54C-B256-4FDD-A73A-0B74906AB27C}C:program files (x86)monitorsoftwarejrebinjavaw.
exe] => (Block) C:program files (x86)monitorsoftwarejrebinjavaw.exe
FirewallRules: [UDP Query User{6342DA2D-3798-487F-ADC3-8BA4AB83C6BB}C:program files (x86)monitorsoftwarejrebinjavaw.exe] => (Block) C:program files (x86)monitorsoftwarejrebinjavaw.
exe
FirewallRules: [{77087114-7B49-408D-918E-A32F4025125A}] => (Allow) D:Steam GamessteamappscommonCompany of Heroes 2RelicCoH2.exe (Relic Entertainment, Inc -> Relic Entertainment Inc.)
FirewallRules: [{4F152644-5779-44D6-90A0-447CA85EEA2F}] => (Allow) D:Steam GamessteamappscommonCompany of Heroes 2RelicCoH2.
exe (Relic Entertainment, Inc -> Relic Entertainment Inc.)
FirewallRules: [{C4A85FBE-559C-4A36-8284-5EF091426769}] => (Allow) D:Steam GamessteamappscommonTower of TimeTowerOfTime.exe () [File not signed] FirewallRules: [{AC89C50A-33BC-45BF-9D98-70F43445420F}] => (Allow) D:Steam GamessteamappscommonTower of TimeTowerOfTime.
exe () [File not signed] FirewallRules: [{F173B113-97EE-4CED-AE97-5D90A4F01768}] => (Allow) D:Steam GamessteamappscommonDisco Elysiumdisco.exe () [File not signed] FirewallRules: [{2B98E10F-E3A0-4290-A300-182ADB073672}] => (Allow) D:Steam GamessteamappscommonDisco Elysiumdisco.exe () [File not signed] FirewallRules: [TCP Query User{914AB9EC-E414-41FE-8F3B-602B8FA5613C}C:usersMoedownloadsdriverssdi_r1909sdi_x64_r1909.
exe] => (Block) C:usersMoedownloadsdriverssdi_r1909sdi_x64_r1909.exe No File
FirewallRules: [UDP Query User{AB9AB621-8A28-44C6-81C7-9EFED219D0CA}C:usersMoedownloadsdriverssdi_r1909sdi_x64_r1909.exe] => (Block) C:usersMoedownloadsdriverssdi_r1909sdi_x64_r1909.
exe No File
FirewallRules: [{FF5C5247-E4DA-4197-BFFA-6B9D8AF020B1}] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{61799CCB-D246-44F8-AAFF-6E4840A5B3F4}] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3B798057-0EAE-4E4B-86E9-B8D5C2D2AA9A}] => (Allow) D:Steam GamessteamappscommonDRAGON QUEST XIGameBinariesWin64DRAGON QUEST XI.
exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO.
, LTD.)
FirewallRules: [{D286FE86-2542-4983-A42B-AB4C2C178770}] => (Allow) D:Steam GamessteamappscommonDRAGON QUEST XIGameBinariesWin64DRAGON QUEST XI.exe (SQUARE ENIX CO.
, LTD. -> SQUARE ENIX CO., LTD.
)
FirewallRules: [{6E0FC49E-0CFE-490E-A343-841DF83BACE5}] => (Allow) D:Steam GamessteamappscommonDRAGON QUEST XIGameBinariesWin64OverwriteSettings.exe () [File not signed] FirewallRules: [{912A6F1F-2C97-4218-BBDA-1299216B4A41}] => (Allow) D:Steam GamessteamappscommonDRAGON QUEST XIGameBinariesWin64OverwriteSettings.exe () [File not signed] FirewallRules: [{ED74F984-3273-41E9-8595-F96447EF76F0}] => (Allow) C:Program FilesFirefox Developer Editionfirefox.
exe No File
FirewallRules: [{F3638262-0A6F-435B-B4CE-B8ECFD9CA1F8}] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1C244065-3087-4DE3-99D8-D10F399800F7}] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{33C5DE23-6E72-4EDF-9B5F-FAFF06460149}] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.
exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{840BA068-FA2F-440A-8EBA-D13B8F49F665}] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{90623CDE-C82C-42D1-82C4-5A9F34440057}] => (Allow) C:Program FilesBlueStacksHD-Player.exe (BlueStack Systems, Inc.
-> BlueStack Systems, Inc.)
FirewallRules: [TCP Query User{63C7EBA7-12BC-4FEF-811A-2B8464FB28C7}C:usersMoedownloadsdriverssdi_r1909sdi_x64_r2000.exe] => (Allow) C:usersMoedownloadsdriverssdi_r1909sdi_x64_r2000.
exe No File
FirewallRules: [UDP Query User{19A4EE6B-D425-4C61-B98F-44FB992B4AA7}C:usersMoedownloadsdriverssdi_r1909sdi_x64_r2000.exe] => (Allow) C:usersMoedownloadsdriverssdi_r1909sdi_x64_r2000.exe No File
FirewallRules: [{2902C868-3B63-4403-8207-192FD9D902F6}] => (Block) C:usersMoedownloadsdriverssdi_r1909sdi_x64_r2000.
exe No File
FirewallRules: [{AAAB189C-8BBE-4DA1-A745-DB769184A6FB}] => (Block) C:usersMoedownloadsdriverssdi_r1909sdi_x64_r2000.exe No File
FirewallRules: [TCP Query User{77C23C89-D0AD-4301-969A-7131D9705D32}C:usersMoedownloadsdriverssdi_r2000sdi_x64_r2000.exe] => (Allow) C:usersMoedownloadsdriverssdi_r2000sdi_x64_r2000.
exe (www.SamLab.ws) [File not signed] FirewallRules: [UDP Query User{48A66B99-F158-4CE8-A006-F66E464E6780}C:usersMoedownloadsdriverssdi_r2000sdi_x64_r2000.
exe] => (Allow) C:usersMoedownloadsdriverssdi_r2000sdi_x64_r2000.exe (www.SamLab.
ws) [File not signed] FirewallRules: [{3AACA906-3E00-4B3C-B87B-A86CBD6A57F4}] => (Block) C:usersMoedownloadsdriverssdi_r2000sdi_x64_r2000.exe (www.SamLab.
ws) [File not signed] FirewallRules: [{70A214C7-007B-4269-8A39-215B842AB89B}] => (Block) C:usersMoedownloadsdriverssdi_r2000sdi_x64_r2000.exe (www.SamLab.
ws) [File not signed] FirewallRules: [{BA525E5C-D7E3-4D15-83E9-0653DD29A008}] => (Allow) C:Program Files (x86)BraveSoftwareBrave-BrowserApplicationbrave.exe (Brave Software, Inc. -> Brave Software, Inc.
)
FirewallRules: [{A104ADE1-B18B-4306-9841-2F818058D836}] => (Allow) C:Program FilesqBittorrentqbittorrent.exe () [File not signed] FirewallRules: [{860ACD1D-4E17-40D5-A211-E3B481065746}] => (Allow) C:Program FilesqBittorrentqbittorrent.exe () [File not signed]==================== Restore Points =========================12-04-2020 19:04:51 Windows Backup==================== Faulty Device Manager Devices ================================ Event log errors: ========================Application errors:
==================
Error: (04/14/2020 11:49:47 PM) (Source: NextDNSService) (EventID: 1) (User: )
Description: resolve: 99c0 EOFError: (04/14/2020 11:48:23 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1384,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.
log.Error: (04/14/2020 11:20:58 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (10540,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.
Error: (04/14/2020 10:58:25 PM) (Source: NextDNSService) (EventID: 1) (User: )
Description: resolve: e837 EOFError: (04/14/2020 10:32:25 PM) (Source: NextDNSService) (EventID: 1) (User: )
Description: resolve: a835 EOFError: (04/14/2020 10:27:54 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3860,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.Error: (04/14/2020 09:18:13 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1520,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.
log.Error: (04/14/2020 08:54:11 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7344,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:WINDOWSsystem32configsystemprofileAppDataLocalTileDataLayerDatabaseEDB.log.
System errors:
=============
Error: (04/14/2020 11:48:20 PM) (Source: Schannel) (EventID: 4116) (User: NT AUTHORITY)
Description: The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.
wns.windows.com.
The TLS connection request has failed. The attached data contains the server certificate.Error: (04/14/2020 11:36:03 PM) (Source: Schannel) (EventID: 4116) (User: NT AUTHORITY)
Description: The certificate received from the remote server does not contain the expected name.
It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.
windows.com. The TLS connection request has failed.
The attached data contains the server certificate.Error: (04/14/2020 11:30:58 PM) (Source: Schannel) (EventID: 4116) (User: NT AUTHORITY)
Description: The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server.
The server name we were expecting is client.wns.windows.
com. The TLS connection request has failed. The attached data contains the server certificate.
Error: (04/14/2020 11:19:41 PM) (Source: Schannel) (EventID: 4116) (User: NT AUTHORITY)
Description: The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.
wns.windows.com.
The TLS connection request has failed. The attached data contains the server certificate.Error: (04/14/2020 11:13:39 PM) (Source: Schannel) (EventID: 4116) (User: NT AUTHORITY)
Description: The certificate received from the remote server does not contain the expected name.
It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.
windows.com. The TLS connection request has failed.
The attached data contains the server certificate.Error: (04/14/2020 11:04:04 PM) (Source: Schannel) (EventID: 4116) (User: NT AUTHORITY)
Description: The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server.
The server name we were expecting is client.wns.windows.
com. The TLS connection request has failed. The attached data contains the server certificate.
Error: (04/14/2020 10:57:00 PM) (Source: Schannel) (EventID: 4116) (User: NT AUTHORITY)
Description: The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.
wns.windows.com.
The TLS connection request has failed. The attached data contains the server certificate.Error: (04/14/2020 10:48:34 PM) (Source: Schannel) (EventID: 4116) (User: NT AUTHORITY)
Description: The certificate received from the remote server does not contain the expected name.
It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.
windows.com. The TLS connection request has failed.
The attached data contains the server certificate.Windows Defender:
===================================
Date: 2020-04-12 19:12:54.226
La description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/ ? linkid=37020&name=Trojan:Win32/Wacatac.
B ! rfn&threatid=2147746425&enterprise=0
Name: Trojan:Win32/Wacatac.B ! rfn
ID: 2147746425
Severity: Severe
Category: Trojan
Path: file:_DeviceHarddiskVolumeShadowCopy17UsersMoeDownloadsCommVistumbler_v10-6-4Uninstall.exe
Detection Origin: Unknown
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:WindowsSystem32svchost.
exe
Security intelligence Version: AV: 1.313.1357.
0, AS: 1.313.1357.
0, NIS: 1.313.1357.
0
Engine Version: AM: 1.1.16900.
4, NIS: 1.1.16900.
4Date: 2020-04-07 17:04:01.424
La description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {94A41A08-0FA3-44D3-8AF4-58E47D1FE6D8}
Scan Type: Antimalware
Scan Parameters: Quick ScanDate: 2020-04-04 19:19:21.
266
La description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {657032DD-F710-4BA3-BEE4-CA067D3ACB01}
Scan Type: Antimalware
Scan Parameters: Quick ScanDate: 2020-04-14 18:13:56.687
La description:
Windows Defender Antivirus engine has been terminated due to an unexpected error.
Failure Type: Crash
Exception code: 0xc0000005
Resource:Date: 2020-04-11 00:35:53.452
La description:
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Reason: Antimalware security intelligence has stopped functioning for an unknown reason.
In some instances, restarting the service may resolve the problem.CodeIntegrity:
===================================Date: 2020-04-14 18:14:38.537
La description:
Code Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume6WindowsSystem32FlightSettings.
dll because the set of per-page image hashes could not be found on the system.Date: 2020-04-14 18:14:38.526
La description:
Code Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume6WindowsSystem32FlightSettings.
dll because the set of per-page image hashes could not be found on the system.Date: 2020-04-14 18:14:38.513
La description:
Code Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume6WindowsSystem32dsreg.
dll because the set of per-page image hashes could not be found on the system.Date: 2020-04-14 18:14:38.503
La description:
Code Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume6WindowsSystem32dsreg.
dll because the set of per-page image hashes could not be found on the system.Date: 2020-04-14 18:14:37.876
La description:
Code Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume6WindowsSystem32aepic.
dll because the set of per-page image hashes could not be found on the system.Date: 2020-04-14 18:14:37.840
La description:
Code Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume6WindowsSystem32aepic.
dll because the set of per-page image hashes could not be found on the system.==================== Memory info ===========================BIOS: American Megatrends Inc. 7704 12/16/2019
Motherboard: ASUSTeK COMPUTER INC.
CROSSHAIR VI HERO
Processor: AMD Ryzen 5 2600 Six-Core Processor
Percentage of memory in use: 44%
Total physical RAM: 32697.21 MB
Available physical RAM: 18070.43 MB
Total Virtual: 37561.
21 MB
Available Virtual: 18561.26 MB==================== Drives ================================Drive c: () (Fixed) (Total:237.87 GB) (Free:115.
71 GB) NTFS
Drive d: (Tank) (Fixed) (Total:894.24 GB) (Free:360.06 GB) NTFS
Drive f: (SSD 2) (Fixed) (Total:238.
47 GB) (Free:238.38 GB) NTFS
Drive g: (Misc) (Fixed) (Total:1863 GB) (Free:444.85 GB) NTFS\ ? Volume{1055747d-6254-4d82-91db-aa5bf72584f7} () (Fixed) (Total:0.
49 GB) (Free:0.04 GB) NTFS
\ ? Volume{f5c8c03d-df71-41bf-93af-fea9f77605a8} () (Fixed) (Total:0.09 GB) (Free:0.
07 GB) FAT32==================== MBR & Partition Table ==============================================================================
Disk: 0 (Protective MBR) (Size: 238.5 GB) (Disk ID: 00000000)Partition: GPT.==========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)Partition: GPT.
==========================================================
Disk: 2 (Protective MBR) (Size: 238.5 GB) (Disk ID: 00000000)Partition: GPT.==========================================================
Disk: 3 (Protective MBR) (Size: 894.
3 GB) (Disk ID: 00000000)Partition: GPT.==================== End of Addition.txt =======================
FAQ
Qu'est-ce que Win32/wacatac.b ?
Win32/wacatac.b est un virus informatique très nuisible. Il appartient à la famille des chevaux de Troie, ce qui signifie qu'il se présente sous la forme d'un programme légitime mais contenant en réalité un code malveillant.
Ce virus peut causer de nombreux dommages sur votre ordinateur en s'attaquant aux fichiers système et en permettant l'accès à distance par des hackers. Il est donc recommandé de se protéger contre cette menace en installant un antivirus performant et en faisant régulièrement des sauvegardes de ses données.
Que signifie Win32 wacatac b ml ?
Win32 Wacatac B ML est un type de logiciel malveillant qui peut infecter les ordinateurs équipés du système d'exploitation Windows. Il s'agit d'un cheval de Troie, c'est-à-dire qu'il se fait passer pour un programme légitime afin de tromper l'utilisateur et d'accéder à ses données personnelles ou de prendre le contrôle de son ordinateur à distance.
Ce malware peut causer des dommages importants au niveau des performances et de la sécurité du système infecté. Il est donc important de maintenir son système à jour avec des antivirus efficaces et de faire preuve de vigilance lors du téléchargement ou d'ouverture de fichiers suspects.
Comment identifier win32/wacatac.b ml ?
Pour identifier Win32/Wacatac.b ml, il est recommandé d'utiliser un logiciel antivirus à jour. Celui-ci scannera votre système à la recherche du virus et vous indiquera s'il est présent ou non.
Vous pouvez également vérifier la liste des programmes installés sur votre ordinateur et repérer tout programme suspect ou inconnu. N'hésitez pas à consulter les forums en ligne pour obtenir des conseils supplémentaires de la part d'autres utilisateurs ayant été infectés par ce malware.
Que fait win32/waca ?
Win32/waca est un logiciel malveillant qui vise spécifiquement les utilisateurs de Windows 32 bits. Il s'introduit dans le système en se faisant passer pour un programme légitime et peut causer des dommages considérables en collectant des informations personnelles sensibles ou en prenant le contrôle du système à distance. Il est essentiel de maintenir son ordinateur à jour et d'utiliser un antivirus efficace pour se protéger contre cette menace.
