qwanturank

La détection de malware intégrée à Windows a trouvé une détection de cheval de Troie et signale « Remédiation incomplète ». Il n’y a que « autorisé » dans une liste déroulante en option. Je ne sais pas ce que ça fait donc je n’ai cliqué sur rien. En outre, j’ai exécuté l’analyse en ligne Malwarebytes et Eset en analyse complète (a fonctionné pendant près de 4 heures). Aucun des deux n’a trouvé quoi que ce soit. Ma question est la suivante : reste-t-il quelque chose de préoccupant ? Merci pour votre temps.Résultat de l’analyse de Farbar Recovery Scan Tool (FRST) (x64) Version : 14-04-2020

Ran de Moe (administrateur) sur LEVIATHAN (14-04-2020 23 :47 :04)

Exécution à partir de C : Users Moe Downloads Malware

Profils chargés: Moe (Profils disponibles: Moe & Mio)

Plateforme : Windows 10 Pro version 1909 18363.752 (X64) Langue : anglais (États-Unis)

Navigateur par défaut: FF

Mode de démarrage : Normal
Tutoriel pour Farbar Recovery Scan Tool ://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processus (sur liste blanche) =================(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)(ASUSTeK Computer Inc. ->) [File not signed] C : Program Files (x86) ASUS AsSysCtrlService 1.00.25 AsSysCtrlService.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C : Program Files (x86) ASUS AsusFanControlService 2.00.76 AsusFanControlService.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C : Program Files (x86) ASUS AXSP 4.00.38 atkexComSvc.exe
(Beijing NormalSoft Technology Co. Ltd. -> www.ext2fsd.com) C : Windows SysWOW64 Ext2Srv.EXE
(Jeux Firaxis) [File not signed] D : Steam Games steamapps common XCOM 2 XCom2-WarOfTheChosen Binaries Win64 XCom2.exe
(Intel® INTELND1820 -> Intel Corporation) C.exe
(Macrovision) [File not signed] C.exe
(Macrovision) [File not signed] C.exe
(Microsoft Corporation -> Microsoft Corporation) C : Windows SystemApps Microsoft.MicrosoftEdge_8wekyb3d8bbwe MicrosoftEdge.exe
(Microsoft Windows -> Microsoft Corporation) C : Users Moe AppData Local Packages Microsoft.MicrosoftEdge_8wekyb3d8bbwe TempState Downloads Windows-KB890830-x64-V5.81 (1).exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 GameBarPresenceWriter.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 MRT.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows System32 Taskmgr.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows SystemApps Microsoft.Windows.SecHealthUI_cw5n1h2txyewy SecHealthUI.exe
(Microsoft Windows -> Microsoft Corporation) C : Windows SysWOW64 cmd.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C : ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C : ProgramData Microsoft Windows Defender Platform 4.18.2003.8-0 NisSrv.exe
(Microsoft) [File not signed] D : Steam Games steamapps common XCOM 2 XCom2-WarOfTheChosen Binaries Win64 CrashDumpWatcher.exe
(Mozilla Corporation -> Mozilla Corporation) C : Program Files (x86) Mozilla Thunderbird thunderbird.exe
(Mozilla Corporation -> Mozilla Corporation) C : Program Files Mozilla Firefox firefox.exe
(NextDNS Inc. ->) C : Program Files (x86) NextDNS dnsunleak.exe
(NextDNS Inc. ->) C : Program Files (x86) NextDNS NextDNSService.exe
(NextDNS) [File not signed] C : Program Files (x86) NextDNS NextDNS.exe
(NVIDIA Corporation -> Node.js) C : Program Files (x86) NVIDIA Corporation NvNode NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C : Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C : Program Files NVIDIA Corporation NvContainer nvcontainer.exe
(Oracle America, Inc. -> Oracle Corporation) C.exe
(Valve -> Valve Corporation) C : Program Files (x86) Common Files Steam SteamService.exe
(Valve -> Valve Corporation) C : Program Files (x86) Steam bin cef cef.win7x64 steamwebhelper.exe
(Valve -> Valve Corporation) C : Program Files (x86) Steam GameOverlayUI.exe
(Valve -> Valve Corporation) C : Program Files (x86) Steam steam.exe
(Viber Media S.à r.l. -> Viber Media S.r.l.) C : Users Moe AppData Local Viber Viber.exe==================== Registre (liste blanche) ===================(Si une entrée est incluse dans la liste de correctifs, l’élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)HKLM-x32.. Exécuter : [UPSMS] => C.exe [114688 2019-10-16] (Macrovision) [File not signed] HKLM-x32.. Exécuter : [Display] => C : Program Files (x86) APC PowerChute Personal Edition.exe
HKLM-x32.. Exécuter : [NextDNS] => C : Program Files (x86) NextDNS NextDNS.exe [246272 2019-11-30] (NextDNS) [File not signed] HKU S-1-5-21-2401605411-2593107901-998236807-1001.. Run : [Steam] => C : Program Files (x86) Steam steam.exe [3371296 2020-04-04] (Valve -> Valve Corporation)
HKU S-1-5-21-2401605411-2593107901-998236807-1001.. Run : [GUDelayStartup] => C : Program Files (x86) Glary Utilities 5 StartupManager.exe [45488 2020-03-04] (Glarysoft LTD -> Glarysoft Ltd)
HKLM Software Microsoft Active Setup Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C : Program Files (x86) BraveSoftware Brave-Browser Application 80.1.5.123 Installer chrmstp.exe [2020-04-04] (Brave Software, Inc.) [File not signed]

BootExecute : autocheck autochk *

GroupPolicy : Restriction ? hxxps: //www.qwant.com/ ?/ do / mypage.pl PRFE = hxxps: ? //www.startpage.com/do/mypage.pl PRFE =
Extension Edge : (uBlock Origin) -> EdgeExtension__f8jsg5mm64m62 => C : Program Files WindowsApps 37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2019-08-14]FireFox :

========

FF DefaultProfile : izs93i27.default
FF ProfilePath: C : Users Moe AppData Roaming Mozilla Firefox Profiles bf9xooq8.dev-edition-default-1577682748283 [2020-03-11] FF ProfilePath: C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default [2020-04-14] Page d’accueil FF : Mozilla Firefox Profiles izs93i27.default -> hxxps: //www.qwant.com/ ?
FF NetworkProxy : Mozilla Firefox Profiles izs93i27.default -> no_proxies_on « , » localhost, 127.0.0.1  »
Extension FF : (Conteneur Facebook) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2020-04-14] Extension FF : (conteneurs multi-comptes Firefox) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2020-04-14] Extension FF : (Thème Arc Dark) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2019-08-06] Extension FF : (Cookie AutoDelete) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.com.xpi [2020-03-20] Extension FF : (Consent-O-Matic) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.au.dk.xpi [2020-02-27] Extension FF : (HTTPS Everywhere) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.default Extensions [2020-03-27] Extension FF : (Turbo Download Manager (v2)) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2019-11-10] Extension FF : (correction du lien de recherche Google) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2020-01-11] Extension FF : (Decentraleyes) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2020-04-03] Extension FF : (Paramètres de confidentialité) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2019-01-06] Extension FF : (Firefox Lightbeam) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2019-01-06] Extension FF : (Location Guard) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2019-12-19] Extension FF : (Privacy Badger) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2020-02-20] Extension FF : (uBlock Origin) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.net.xpi [2020-04-07] Extension FF : (Possum de confidentialité) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2019-08-29] Extension FF : (nébuleuse noire) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2019-05-14] Extension FF : (Mode nuit noire) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2019-06-15] Extension FF : (Options de recherche d’images) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2019-10-05] Extension FF : (stylet) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2020-03-04] Extension FF : (Video DownloadHelper) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2020-03-31] Extension FF : (gagnez du temps en demandant à Buster de résoudre les captchas pour vous.) – C : Users Moe AppData Roaming Mozilla Firefox Profiles izs93i27.xpi [2020-02-12] FF Plugin-x32./ BraveSoftware Update; version = 3 -> C : Program Files (x86) BraveSoftware Update 1.3.99.0 npBraveUpdate3.dll [2019-04-22] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32./ BraveSoftware Update; version = 9 -> C : Program Files (x86) BraveSoftware Update 1.3.99.0 npBraveUpdate3.dll [2019-04-22] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32 : Composants Web -> C : Program Files (x86) Web Components npWebVideoPlugin.dll [2016-09-19] () [File not signed]==================== Services (liste blanche) ===================(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s’il est répertorié séparément.)R2 asComSvc; C : Program Files (x86) ASUS AXSP 4.00.38 atkexComSvc.exe [440368 2019-04-09] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C : Program Files (x86) ASUS AsSysCtrlService 1.00.25 AsSysCtrlService.exe [1360016 2019-04-03] (ASUSTeK Computer Inc. ->) [File not signed] R2 AsusFanControlService; C : Program Files (x86) ASUS AsusFanControlService 2.00.76 AsusFanControlService.exe [2061872 2019-04-09] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 BEService; C : Program Files (x86) Common Files BattlEye BEService.exe [8473200 2019-07-02] (BattlEye Innovations e.K. ->)
S2 courageux; C : Program Files (x86) BraveSoftware Update BraveUpdate.exe [154056 2019-04-22] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C : Program Files (x86) BraveSoftware Update BraveUpdate.exe [154056 2019-04-22] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 EasyAntiCheat; C : Program Files (x86) EasyAntiCheat EasyAntiCheat.exe [803440 2019-07-02] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 Ext2Srv; C : WINDOWS SysWOW64 Ext2Srv.EXE [42488 2019-12-24] (Beijing NormalSoft Technology Co. Ltd. -> www.ext2fsd.com)
R2 NextDNSService; C : Program Files (x86) NextDNS NextDNSService.exe [7984016 2019-11-30] (NextDNS Inc. ->)
R2 ; C : Program Files NVIDIA Corporation NvContainer nvcontainer.exe [858480 2019-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
R3 ; C : Program Files NVIDIA Corporation NvContainer nvcontainer.exe [858480 2019-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
S2 RtkBtManServ; C : WINDOWS RtkBtManServ.exe [709528 2019-12-04] (Éditeur de compatibilité matérielle Microsoft Windows -> Realtek Semiconductor Corp.)
S3 Sense; C : Program Files Windows Defender Advanced Threat Protection MsSense.exe [5930136 2020-03-25] (Microsoft Windows Publisher -> Microsoft Corporation)
C.exe [114688 2019-10-16] (Macrovision) [File not signed] R3 WdNisSvc; C : ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 NisSrv.exe [3294680 2020-03-25] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C : ProgramData Microsoft Windows Defender platform 4.18.2003.8-0 MsMpEng.exe [103168 2020-03-25] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; « C : Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe » -s NVDisplay.ContainerLocalSystem -f « C : ProgramData NVIDIA NVDisplay.ContainerLocalSystem.log » -l 3 -d « C : Fichiers programme NVIDIA Corporation Display.NvContainer plugins LocalSystem « -r -p 30000===================== Pilotes (sur liste blanche) ===================(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s’il est répertorié séparément.)S3 AiCharger; C : Windows SysWow64 drivers AiCharger.sys [14848 2012-03-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
R3 amdgpio2; C : WINDOWS System32 drivers amdgpio2.sys [45832 2020-01-20] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 amdgpio3; C : WINDOWS System32 drivers amdgpio3.sys [24528 2019-04-18] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
R3 AMDPCIDev; C : WINDOWS System32 drivers AMDPCIDev.sys [32520 2020-03-10] (Advanced Micro Devices INC. -> Advanced Micro Devices)
R0 amdpsp; C : WINDOWS System32 drivers amdpsp.sys [138064 2019-06-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S0 amd_sata; C : WINDOWS System32 drivers amd_sata.sys [85704 2015-03-30] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S0 amd_xata; C : WINDOWS System32 drivers amd_xata.sys [43720 2015-03-30] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R1 AsIO; C : Windows SysWow64 drivers AsIO.sys [15232 2017-12-26] (ASUSTeK Computer Inc. ->)
R1 AsUpIO; C : Windows SysWow64 drivers AsUpIO.sys [14464 2017-03-14] (ASUSTeK Computer Inc. ->)
R1 Asusgio2; C : Windows system32 drivers AsIO2.sys [33832 2019-04-09] (ASUSTeK Computer Inc. ->)
S3 AX88179; C : WINDOWS System32 drivers ax88179_178a.sys [93800 2018-10-29] (Éditeur de compatibilité matérielle Microsoft Windows -> ASIX Electronics Corp.)
R2 BlueStacksDrv; C : Program Files BlueStacks BstkDrv_bgp.sys [315976 2020-02-29] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C : WINDOWS System32 drivers BthA2dp.sys [231936 2019-09-11] (Microsoft Corporation) [File not signed] R3 e1rexpress; C : WINDOWS system32 DRIVERS e1r65x64.sys [550768 2019-12-04] (Intel® INTELND1820 -> Intel Corporation)
S0 envirtahci; C : WINDOWS System32 drivers envirtahci.sys [799008 2019-08-03] (Enmotus Inc. -> AMD)
S3 FTDIBUS; C : WINDOWS system32 drivers ftdibus.sys [129448 2017-09-19] (Future Technology Devices International Ltd -> Future Technology Devices International Ltd.)
S3 FTSER2K; C : WINDOWS system32 drivers ftser2k.sys [89792 2017-09-19] (Future Technology Devices International Ltd -> Future Technology Devices International Ltd.)
S3 gdrv2; C : Windows gdrv2.sys [32008 2019-04-07] (GIGA-BYTE Technology Co. Ltd. -> GIGA-BYTE TECHNOLOGY CO. LTD.)
R1 GUBootStartup; C : WINDOWS System32 drivers GUBootStartup.sys [28936 2019-07-16] (Glarysoft LTD -> Glarysoft Ltd)
S3 HWiNFO_150; C : Users Moe AppData Local Temp HWiNFO64A_150.SYS [62240 2020-04-14] (Martin Malik – REALiX -> REALiX ™) Logitech Inc.)
Mégabatterie R2; C : WINDOWS system32 DRIVERS megabatteryX64.sys [20608 2012-03-31] (Mega System Technologies, Inc. -> Megatec System Co.)
R3 nvlddmkm; C : WINDOWS System32 DriverStore FileRepository nv_dispi.inf_amd64_63268710a2dc3648 nvlddmkm.sys [23439080 2020-03-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 NvStreamKms; C : Program Files NVIDIA Corporation NvStreamSrv NvStreamKms.sys [30336 2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C : WINDOWS system32 drivers nvvad64v.sys [69840 2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C : WINDOWS System32 drivers nvvhci.sys [75600 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
R0 pwdrvio; C : WINDOWS System32 pwdrvio.sys [19152 2019-05-29] (MiniTool Solution Ltd ->)
S3 pwdspio; C : WINDOWS system32 pwdspio.sys [12504 2019-05-29] (MiniTool Solution Ltd ->)
S3 RtkA2dp; C : WINDOWS system32 DRIVERS RtkA2dp.sys [217032 2019-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 RtkAvrcpCtrlr; C : WINDOWS System32 drivers RtkAvrcpCtrlr.sys [87832 2016-09-20] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
S3 RtkBtFilter; C : WINDOWS System32 drivers RtkBtfilter.sys [784032 2019-12-04] (Éditeur de compatibilité matérielle Microsoft Windows -> Realtek Semiconductor Corporation)
S3 RtlWlanu; C : WINDOWS system32 DRIVERS rtwlanu.sys [9860088 2019-07-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
R3 Ser2pl; C : WINDOWS system32 DRIVERS ser2pl64.sys [258544 2019-06-24] (WDKTestCert charles-yeh, 131345514351795974 -> Prolific Technology Inc.)
R2 SSGDIO; C : Windows SysWOW64 DRIVERS ssgdio64.sys [14608 2019-02-28] (ATI Technologies, Inc -> ATI Technologies Inc.)
R3 ; C : WINDOWS system32 drivers.sys [40736 2017-07-29] (Valve Corp. ->)
Haut-parleurs SteamStreaming R3; C : WINDOWS system32 drivers.sys [40736 2017-07-21] (Valve Corp. ->)
R3 tap0901; C : WINDOWS System32 drivers tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> Le projet OpenVPN)
S3 tapnordvpn; C : WINDOWS System32 drivers tapnordvpn.sys [44896 2018-07-24] (TEFINCOM S.A. -> Le projet OpenVPN)
S0 WdBoot; C : WINDOWS System32 drivers wd WdBoot.sys [45960 2020-03-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C : WINDOWS System32 drivers wd WdFilter.sys [391392 2020-03-25] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C : WINDOWS System32 drivers wd WdNisDrv.sys [59104 2020-03-25] (Microsoft Windows -> Microsoft Corporation)
S1 upsmart; System32 drivers upsmart.sys [X]==================== NetSvcs (liste blanche) ====================(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s’il est répertorié séparément.)==================== Un mois (créé) ===================(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)2020-04-14 23 :45 – 2020-04-14 23 :47 – 000000000 ____D C : FRST
2020-04-14 16 :46 – 2020-04-14 18 :01 – 000000000 ____D C : Users Moe AppData LocalLow IGDump
2020-04-14 16 :46 – 2020-04-14 16 :46 – 000000000 ____D C : Users Moe AppData Local mbam
2020-04-14 16 :45 – 2020-04-14 16 :45 – 000000000 ____D C : Users Moe AppData Local mbamtray
2020-04-14 16 :40 – 2020-04-14 16 :40 – 000000857 _____ C : Users Moe AppData Roaming Microsoft Windows Start Menu Programs ESET Online Scanner.lnk
2020-04-14 16 :39 – 2020-04-14 23 :47 – 000000000 ____D C : Users Moe Downloads Malware
2020-04-11 00 :38 – 2020-04-11 00 :38 – 000000000 ____D C : Users Moe AppData Roaming AMD
2020-04-09 22 :15 – 2020-04-10 17 :38 – 000000000 ____D C : Program Files (x86) Mozilla Thunderbird
2020-04-08 22 :37 – 2020-04-09 17 :34 – 000000000 ____D C : Program Files Mozilla Firefox
2020-04-08 22 :37 – 2020-04-08 22 :37 – 000000000 ____D C : WINDOWS system32 Tasks Mozilla
2020-04-07 16 :52 – 2020-04-07 16 :52 – 1143838279 _____ C : WINDOWS MEMORY.DMP
2020-04-07 16 :52 – 2020-04-07 16 :52 – 001110044 _____ C : WINDOWS Minidump 040720-8453-01.dmp
2020-04-06 19 :32 – 2015-12-09 21 :47 – 000262440 _____ (Broadcom Corporation.) C : WINDOWS system32 Drivers btwavdt.sys
2020-04-06 19 :16 – 2020-04-06 19 :16 – 000000000 ____D C : Users Moe AppData Local setup
2020-04-06 18 :02 – 2020-04-06 18 :02 – 000000000 ____D C : ProgramData Microsoft Windows Start Menu Programs qBittorrent
2020-04-05 22 :58 – 2020-04-05 22 :58 – 000000904 _____ C : Users Moe AppData Roaming Microsoft Windows Start Menu Programs Start Tor Browser.lnk
2020-04-05 22 :57 – 2020-04-05 22 :58 – 000000000 ____D C : Users Moe Desktop Tor Browser
2020-04-05 21 :51 – 2020-04-05 21 :52 – 000000000 ____D C : Users Moe AppData Local Viber
2020-04-04 14 :11 – 2020-04-04 14 :11 – 000003772 _____ C : WINDOWS Info.xml
2020-04-03 15 :44 – 2020-04-03 16 :39 – 000000000 ____D C : Users Moe Documents Transactions
2020-04-03 13 :45 – 2020-04-03 16 :46 – 000000493 _____ C : Users Moe Documents Accs.txt
2020-03-29 18 :19 – 2020-03-29 18 :19 – 000000081 _____ C : Users Moe Documents Pan Pizza.txt
2020-03-26 16 :00 – 2020-03-26 16 :00 – 000000000 ____D C : Users Moe AppData Roaming NVIDIA
2020-03-26 16 :00 – 2020-03-26 16 :00 – 000000000 ____D C : Users Moe AppData Roaming LibreOffice
2020-03-26 13 :19 – 2020-03-26 13 :19 – 000000000 ____D C : ProgramData Microsoft Windows Menu Démarrer Programmes LibreOffice 6.4
2020-03-26 13 :18 – 2020-03-26 13 :18 – 000000000 ____D C : Program Files LibreOffice
2020-03-25 13 :39 – 2020-03-25 13 :39 – 025444352 _____ (Microsoft Corporation) C : WINDOWS system32 Hydrogen.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 022636544 _____ (Microsoft Corporation) C : WINDOWS system32 mshtml.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 019813376 _____ (Microsoft Corporation) C : WINDOWS system32 HologramWorld.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 018027008 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 mshtml.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 014818816 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 Windows.UI.Xaml.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 008013824 _____ (Microsoft Corporation) C : WINDOWS system32 mstscax.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 007017472 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 mstscax.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 006525424 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 Windows.Media.Protection.PlayReady.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 004129416 _____ (Microsoft Corporation) C : WINDOWS system32 mfcore.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 003753472 _____ (Microsoft Corporation) C : WINDOWS system32 SettingsHandlers_nt.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 003742544 _____ (Microsoft Corporation) C : WINDOWS SysWOW64.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 002800128 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 win32kfull.sys
2020-03-25 13 :39 – 2020-03-25 13 :39 – 002494744 _____ (Microsoft Corporation) C : WINDOWS system32 msmpeg2vdec.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 002369576 _____ (Microsoft Corporation) C : WINDOWS system32 Microsoft.Uev.AppAgent.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 002188600 _____ (Microsoft Corporation) C : WINDOWS system32 AppVEntSubsystems64.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001835008 _____ (Microsoft Corporation) C : WINDOWS system32 enterprisecsps.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001659408 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 Microsoft.Uev.AppAgent.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001610240 _____ (Microsoft Corporation) C : WINDOWS system32 HologramCompositor.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001587712 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 aadtb.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001545216 _____ (Microsoft Corporation) C : WINDOWS system32 mstsc.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001495864 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 AppVEntSubsystems32.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001477112 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 dcomp.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001397560 _____ (Microsoft Corporation) C : WINDOWS system32 hvix64.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001386296 _____ (Microsoft Corporation) C : WINDOWS system32.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001368576 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 Wpc.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001368576 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 Windows.UI.Input.Inking.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001264640 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 mstsc.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001245184 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 TokenBroker.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001081856 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 Windows.Networking.Vpn.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001077264 _____ (Microsoft Corporation) C : WINDOWS system32 hvax64.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 001055376 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 msctf.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000993280 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 TSWorkspace.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000980832 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 webservices.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000923136 _____ (Microsoft Corporation) C : WINDOWS system32 Windows.Internal.Management.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000912896 _____ (Microsoft Corporation) C : WINDOWS system32 rasmans.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000892416 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 MbaeApiPublic.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000865280 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 Windows.Security.Authentication.Web.Core.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000785920 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 kerberos.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000744960 _____ (Microsoft Corporation) C : WINDOWS system32 Microsoft.Uev.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000729600 _____ (Microsoft Corporation) C : WINDOWS SysWOW64 FlightSettings.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000701440 _____ (Microsoft Corporation) C.Mirage.Internal.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000701440 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000689152 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000673704 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000665088 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000647680 _____ (Microsoft Corporation) C.Internal.Management.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000632832 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000628408 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000555008 _____ (Microsoft Corporation) C :WINDOWSsystem32appwiz.cpl
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000538160 _____ (Microsoft Corporation) C :WINDOWSSysWOW64SHCore.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000529408 _____ (Microsoft Corporation) C :WINDOWSsystem32nltest.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000514560 _____ (Microsoft Corporation) C.Uev.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000507152 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000491008 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000487784 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000456192 _____ (Microsoft Corporation) C :WINDOWSSysWOW64appwiz.cpl
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000452096 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000415760 _____ (Microsoft Corporation) C :WINDOWSSysWOW64aepic.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000410112 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000406480 _____ (Microsoft Corporation) C.Devices.Enumeration.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000381440 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000336384 _____ (Microsoft Corporation) C :WINDOWSSysWOW64es.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000330240 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000324096 _____ (Microsoft Corporation) C :WINDOWSSysWOW64win32k.sys
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000321536 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000277864 _____ (Microsoft Corporation) C :WINDOWSsystem32LsaIso.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000234496 _____ (Microsoft Corporation) C :WINDOWSsystem32iasrad.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000227840 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000211256 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000203264 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000190048 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000187392 _____ (Microsoft Corporation) C :WINDOWSSysWOW64iasrad.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000185952 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000179200 _____ (Microsoft Corporation) C.UI.XamlHost.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000175616 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000163840 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000135168 _____ (Microsoft Corporation) C.UI.XamlHost.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000123952 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000118272 _____ (Microsoft Corporation) C :WINDOWSSysWOW64slc.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000101888 _____ (Microsoft Corporation) C :WINDOWSSysWOW64sppc.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000093712 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000090624 _____ (Microsoft Corporation) C :WINDOWSsystem32tsgqec.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000089536 _____ (Microsoft Corporation) C :WINDOWSSysWOW64win32u.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000087040 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000084280 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000071680 _____ (Microsoft Corporation) C.Devices.Custom.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000070144 _____ (Microsoft Corporation) C :WINDOWSSysWOW64tsgqec.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000066624 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000066048 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000050544 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000050176 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000049152 _____ (Microsoft Corporation) C :WINDOWSSysWOW64tbauth.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000045568 _____ (Microsoft Corporation) C.Uev.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000040448 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000036352 _____ (Microsoft Corporation) C.Uev.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000031744 _____ (Microsoft Corporation) C :WINDOWSsystem32ias.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000029696 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000029184 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000023552 _____ (Microsoft Corporation) C :WINDOWSSysWOW64ias.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000021520 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000019968 _____ (Microsoft Corporation) C :WINDOWSSysWOW64slcext.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000017920 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000015872 _____ (Microsoft Corporation) C.Devices.Custom.ps.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000010752 _____ (Microsoft Corporation) C.ProxyStub.dll
2020-03-25 13 :39 – 2020-03-25 13 :39 – 000007680 _____ (Microsoft Corporation) C.ProxyStub.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 017790464 _____ (Microsoft Corporation) C.UI.Xaml.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 009930552 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 007849216 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 007604584 _____ (Microsoft Corporation) C.Media.Protection.PlayReady.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 006168064 _____ (Microsoft Corporation) C :WINDOWSsystem32twinui.pcshell.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 004563200 _____ (Microsoft Corporation) C :WINDOWSsystem32sppsvc.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 003977216 _____ (Microsoft Corporation) C :WINDOWSsystem32tellib.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 003799552 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 003728384 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 003708928 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 003586872 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 003547648 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 003109376 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 002986808 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 002871608 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 002768440 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 002143232 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 002126144 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 002114560 _____ (Microsoft Corporation) C.CloudStore.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 002087168 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001960448 _____ (Microsoft Corporation) C :WINDOWSsystem32aadtb.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001945600 _____ (Microsoft Corporation) C :WINDOWSsystem32dcomp.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001942528 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001918976 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001783296 _____ (Microsoft Corporation) C.UI.Input.Inking.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001762816 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001757096 _____ (Microsoft Corporation) C.efi
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001726264 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001719808 _____ (Microsoft Corporation) C :WINDOWSsystem32Wpc.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001512832 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001497600 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001480192 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001427456 _____ (Microsoft Corporation) C.Networking.Vpn.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001413704 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001378528 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001300280 _____ (Microsoft Corporation) C :
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001263856 _____ (Microsoft Corporation) C :WINDOWSsystem32WpcMon.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001261808 _____ (Microsoft Corporation) C :WINDOWSsystem32msctf.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001257472 _____ (Microsoft Corporation) C :WINDOWSsystem32rpcss.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001243648 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001180672 _____ (Microsoft Corporation) C.Security.Authentication.Web.Core.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001136128 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001127424 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001083904 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001071616 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 001011200 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000974336 _____ (Microsoft Corporation) C :WINDOWSsystem32uDWM.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000924672 _____ (Microsoft Corporation) C :WINDOWSsystem32samsrv.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000915192 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000893952 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000879616 _____ (Microsoft Corporation) C.Management.Service.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000874512 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000865280 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000840704 _____ (Microsoft Corporation) C :_Language.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000811320 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000759272 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000747320 _____ (Microsoft Corporation) C :WINDOWSsystem32aeinv.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000735744 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000722072 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000684560 _____ (Microsoft Corporation) C :WINDOWSsystem32SHCore.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000654912 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000638480 _____ (Microsoft Corporation) C :WINDOWSsystem32devinv.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000637240 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000618296 _____ (Microsoft Corporation) C :WINDOWSsystem32hal.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000605184 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000604984 _____ (Microsoft Corporation) C :WINDOWSsystem32pcasvc.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000589384 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000550400 _____ (Microsoft Corporation) C :WINDOWSsystem32win32k.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000530432 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000524264 _____ (Microsoft Corporation) C.Devices.Enumeration.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000516096 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000515600 _____ (Microsoft Corporation) C :WINDOWSsystem32dcntel.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000513576 _____ (Microsoft Corporation) C :WINDOWSsystem32aepic.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000498688 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000497152 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000477496 _____ (Microsoft Corporation) C.SYS
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000469504 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000465208 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000459688 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000456504 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000441144 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000437560 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000416016 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000401408 _____ (Microsoft Corporation) C :WINDOWSsystem32es.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000374784 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000355328 _____ (Microsoft Corporation) C :WINDOWSsystem32WpcApi.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000324408 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000323584 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000297272 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000278016 _____ (Microsoft Corporation) C :WINDOWSsystem32WpcTok.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000265216 _____ (Microsoft Corporation) C :WINDOWSsystem32cdd.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000259776 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000259072 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000256000 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000251704 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000251392 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000241152 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000231912 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000200192 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000197632 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000193848 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000178192 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000169472 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000164368 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000152408 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000151352 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000147696 _____ (Microsoft Corporation) C :WINDOWSsystem32smss.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000142544 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000140800 _____ (Microsoft Corporation) C :WINDOWSsystem32slc.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000136192 _____ (Microsoft Corporation) C :WINDOWSsystem32sppc.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000127064 _____ (Microsoft Corporation) C :WINDOWSsystem32win32u.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000122368 _____ (Microsoft Corporation) C :WINDOWSsystem32samlib.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000115120 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000108032 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000105984 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000102216 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000096768 _____ (Microsoft Corporation) C.Devices.Custom.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000089912 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000088352 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000076288 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000071480 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000070656 _____ (Microsoft Corporation) C.Management.ConfigProvider.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000070656 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000064512 _____ (Microsoft Corporation) C :WINDOWSsystem32pcadm.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000064000 _____ (Microsoft Corporation) C :WINDOWSsystem32tbauth.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000060416 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000059192 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000057856 _____ (Microsoft Corporation) C :WINDOWSsystem32wups2.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000057344 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000051200 _____ (Microsoft Corporation) C :WINDOWSsystem32pcalua.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000047208 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000045568 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000044032 _____ (Microsoft Corporation) C.UI.Xaml.Resources.Common.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000043008 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000039424 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000036864 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000036152 _____ (Microsoft Corporation) C.exe
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000033080 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000031744 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000030720 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000028160 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000023552 _____ (Microsoft Corporation) C.Devices.Custom.ps.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000022528 _____ (Microsoft Corporation) C :WINDOWSsystem32slcext.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000022528 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000018944 _____ (Microsoft Corporation) C.sys
2020-03-25 13 :38 – 2020-03-25 13 :38 – 000012800 _____ (Microsoft Corporation) C.dll
2020-03-25 13 :23 – 2020-04-02 13 :25 – 000000000 ____D C :Reports Quarantine
2020-03-25 10 :34 – 2020-03-18 12 :00 – 005581800 _____ (NVIDIA Corporation) C :WINDOWSsystem32nvcpl.dll
2020-03-25 10 :34 – 2020-03-18 12 :00 – 002632680 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :34 – 2020-03-18 12 :00 – 001759216 _____ (NVIDIA Corporation) C :WINDOWSsystem32nvsvcr.dll
2020-03-25 10 :34 – 2020-03-18 12 :00 – 001172464 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :34 – 2020-03-18 12 :00 – 000446264 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :34 – 2020-03-18 12 :00 – 000121144 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :34 – 2020-03-18 12 :00 – 000074736 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :34 – 2020-03-16 14 :39 – 008997147 _____ C.bin
2020-03-25 10 :34 – 2020-02-28 22 :39 – 000001951 _____ C.bat
2020-03-25 10 :29 – 2020-03-19 13 :11 – 001729232 _____ C :-1-999-0-0-0.exe
2020-03-25 10 :29 – 2020-03-19 13 :11 – 001729232 _____ C.exe
2020-03-25 10 :29 – 2020-03-19 13 :11 – 001329360 _____ C :-1-999-0-0-0.exe
2020-03-25 10 :29 – 2020-03-19 13 :11 – 001329360 _____ C.exe
2020-03-25 10 :29 – 2020-03-19 13 :11 – 001078992 _____ C :WINDOWSsystem32vulkan-1-999-0-0-0.dll
2020-03-25 10 :29 – 2020-03-19 13 :11 – 001078992 _____ C :WINDOWSsystem32vulkan-1.dll
2020-03-25 10 :29 – 2020-03-19 13 :11 – 000937680 _____ C :WINDOWSSysWOW64vulkan-1-999-0-0-0.dll
2020-03-25 10 :29 – 2020-03-19 13 :11 – 000937680 _____ C :WINDOWSSysWOW64vulkan-1.dll
2020-03-25 10 :29 – 2020-03-19 13 :11 – 000450464 _____ (Khronos Group) C :WINDOWSsystem32OpenCL.dll
2020-03-25 10 :29 – 2020-03-19 13 :11 – 000348048 _____ (Khronos Group) C :WINDOWSSysWOW64OpenCL.dll
2020-03-25 10 :29 – 2020-03-19 13 :10 – 011945072 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :10 – 010285680 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :10 – 000817056 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :10 – 000676448 _____ C.dll
2020-03-25 10 :29 – 2020-03-19 13 :10 – 000544352 _____ C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 017600912 _____ (NVIDIA Corporation) C :WINDOWSsystem32nvcuda.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 015157664 _____ (NVIDIA Corporation) C :WINDOWSSysWOW64nvcuda.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 005856656 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 005158304 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 002072992 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 001723280 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 001564904 _____ (NVIDIA Corporation) C :WINDOWSSysWOW64NvFBC.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 001483168 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 001480936 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 001351568 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 001142176 _____ (NVIDIA Corporation) C :WINDOWSSysWOW64NvIFR.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 001049488 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 000811424 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 000679840 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 000655264 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 13 :09 – 000546720 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 10 :06 – 004927048 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-19 10 :05 – 004196160 _____ (NVIDIA Corporation) C :WINDOWSSysWOW64nvapi.dll
2020-03-25 10 :29 – 2020-03-18 15 :51 – 001682368 _____ (NVIDIA Corporation) C.dll
2020-03-25 10 :29 – 2020-03-18 15 :51 – 000223120 _____ (NVIDIA Corporation) C.sys
2020-03-25 10 :29 – 2020-03-18 15 :51 – 000075600 _____ (NVIDIA Corporation) C.sys
2020-03-25 10 :29 – 2020-03-18 15 :51 – 000056618 _____ C :WINDOWSsystem32nvinfo.pb
2020-03-25 10 :29 – 2020-03-18 15 :51 – 000039824 _____ (NVIDIA Corporation) C.dll
2020-03-20 23 :20 – 2020-03-20 23 :20 – 021448817 _____ C :UsersMoeDownloadscom.android.vending_19.3.26-all_0_PR_301645536-81932600_minAPI16(armeabi,armeabi-v7a,mips,mips64,x86,x86_64)(nodpi)_apkmirror.com.apk==================== One month (modified) ==================(If an entry is included in the fixlist, the file/folder will be moved.)2020-04-14 23 :11 – 2019-03-19 12 :52 – 000000000 ____D C :ProgramDataregid.1991-06.com.microsoft
2020-04-14 23 :04 – 2019-01-06 22 :22 – 121542864 ____C (Microsoft Corporation) C :WINDOWSsystem32MRT.exe
2020-04-14 22 :44 – 2019-01-07 00 :31 – 000000000 ____D C :Program Files (x86)Steam

2020-04-14 22 :09 – 2019-08-14 12 :05 – 000000000 ____D C :

2020-04-14 20 :44 – 2019-08-12 13 :10 – 000000000 ____D C :
2020-04-14 19 :12 – 2019-08-14 12 :15 – 000840852 _____ C.INI

2020-04-14 19 :12 – 2019-03-19 12 :50 – 000000000 ____D C :WINDOWSINF

2020-04-14 19 :07 – 2019-12-12 10 :32 – 000000000 ____D C :ProgramDataNVIDIA

2020-04-14 19 :06 – 2019-01-06 22 :25 – 000000000 ____D C :

2020-04-14 19 :05 – 2019-08-14 12 :12 – 000003126 _____ C :
2020-04-14 19 :05 – 2019-08-14 12 :12 – 000000006 ____H C :WINDOWSTasksSA.DAT

2020-04-14 19 :05 – 2019-01-08 06 :13 – 000000000 ____D C :

2020-04-14 19 :04 – 2019-03-19 12 :37 – 000262144 _____ C :
2020-04-14 18 :06 – 2019-03-19 12 :52 – 000000000 ____D C :WINDOWSAppReadiness

2020-04-14 18 :06 – 2019-01-06 22 :18 – 000000000 ____D C :

2020-04-14 18 :04 – 2019-03-19 12 :52 – 000000000 ___HD C :WINDOWSELAMBKUP

2020-04-14 16 :46 – 2019-01-07 18 :15 – 000000000 ____D C :

2020-04-14 16 :26 – 2019-01-07 17 :11 – 000000000 ____D C :
2020-04-13 21 :17 – 2019-08-12 13 :04 – 000000000 ____D C :UsersMoeDownloadsAV Tools
2020-04-12 21 :04 – 2019-03-19 12 :52 – 000000000 ___HD C :Program FilesWindowsApps

2020-04-11 23 :13 – 2020-01-16 18 :41 – 000000000 ____D C :

2020-04-11 20 :02 – 2019-03-19 12 :52 – 000000000 ____D C :WINDOWSsystem32NDF

2020-04-11 00 :36 – 2019-03-19 12 :52 – 000000000 ____D C :

2020-04-11 00 :36 – 2019-01-06 23 :09 – 000000000 ____D C :Program Files (x86)AMD
2020-04-11 00 :36 – 2019-01-06 23 :05 – 000000000 ____D C :Program FilesAMD
2020-04-11 00 :35 – 2019-01-16 19 :42 – 000000214 _____ C.job
2020-04-10 23 :30 – 2019-01-06 22 :25 – 000000000 ____D C :Program Files (x86)Mozilla Maintenance Service
2020-04-10 17 :38 – 2019-04-20 16 :34 – 000001278 _____ C : MenuProgramsMozilla Thunderbird.lnk

2020-04-10 17 :09 – 2019-01-08 22 :51 – 000000000 ____D C :

2020-04-09 23 :45 – 2019-08-12 13 :10 – 000002278 ____H C.rdp
2020-04-09 23 :43 – 2019-03-19 12 :52 – 000000000 ____D C :WINDOWSsystem32FxsTmp
2020-04-08 22 :37 – 2019-01-06 22 :25 – 000001005 _____ C : MenuProgramsFirefox.lnk

2020-04-07 16 :53 – 2019-08-14 12 :08 – 000000000 ____D C :UsersMoe

2020-04-07 16 :52 – 2019-11-08 18 :30 – 000000000 ____D C :WINDOWSMinidump
2020-04-06 18 :02 – 2019-12-24 14 :55 – 000000000 ____D C :Program FilesqBittorrent

2020-04-06 18 :01 – 2019-12-24 14 :56 – 000000000 ____D C :

2020-04-06 18 :01 – 2019-08-12 13 :04 – 000000000 ____D C :UsersMoeDownloadsComm
2020-04-05 23 :00 – 2019-07-03 14 :27 – 000000000 ____D C :UsersMoeDesktopMisc

2020-04-05 22 :52 – 2019-01-07 18 :15 – 000000000 ____D C :

2020-04-04 12 :47 – 2019-04-22 20 :36 – 000002418 _____ C : MenuProgramsBrave.lnk

2020-04-03 09 :02 – 2020-02-15 22 :35 – 000000000 ____D C :

2020-04-02 13 :26 – 2019-01-06 22 :20 – 000744808 ____N (Microsoft Corporation) C.exe
2020-03-26 13 :20 – 2019-08-14 12 :05 – 000629768 _____ C.DAT
2020-03-26 13 :15 – 2019-08-12 13 :04 – 000000000 ____D C :UsersMoeDownloadsMisc

2020-03-25 15 :46 – 2019-10-16 21 :34 – 000000000 ____D C :

2020-03-25 13 :43 – 2019-03-19 14 :23 – 000000000 ____D C :Program FilesWindows Defender Advanced Threat Protection

2020-03-25 13 :43 – 2019-03-19 12 :52 – 000000000 ____D C :

2020-03-25 13 :43 – 2019-03-19 12 :52 – 000000000 ____D C :

2020-03-25 13 :43 – 2019-03-19 12 :52 – 000000000 ____D C :

2020-03-25 13 :43 – 2019-03-19 12 :52 – 000000000 ____D C :WINDOWSProvisioning

2020-03-25 13 :43 – 2019-03-19 12 :52 – 000000000 ____D C :

2020-03-25 13 :43 – 2019-03-19 12 :52 – 000000000 ____D C :WINDOWSbcastdvr
2020-03-25 13 :40 – 2019-03-19 12 :37 – 000000000 ____D C :WINDOWSCbsTemp

2020-03-25 13 :19 – 2019-04-08 09 :33 – 000000000 ____D C :temp

2020-03-25 10 :46 – 2019-12-12 10 :34 – 000000000 ____D C :
2020-03-25 10 :34 – 2019-12-12 10 :30 – 000000000 ____D C : Corporation
2020-03-25 10 :34 – 2019-12-12 10 :27 – 000000000 ____D C :ProgramDataNVIDIA Corporation
2020-03-25 10 :34 – 2019-12-12 10 :27 – 000000000 ____D C :Program FilesNVIDIA Corporation

2020-03-25 10 :29 – 2019-03-19 12 :52 – 000000000 ____D C :WINDOWSHelp

2020-03-25 10 :21 – 2019-01-06 21 :55 – 000000000 ____D C :
2020-03-22 22 :50 – 2019-08-12 13 :04 – 000000000 ____D C :==================== Files in the root of some directories ========2019-12-05 02 :36 – 2019-12-05 03 :52 – 000000128 _____ () C.RND
2019-12-22 17 :15 – 2019-12-24 19 :40 – 000000487 _____ () C.config
2020-01-06 20 :22 – 2020-01-06 20 :22 – 000000017 _____ () C.resmoncfg
2020-02-01 21 :45 – 2020-02-01 21 :45 – 000000000 _____ () C.)==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version : 14-04-2020

Ran by Moe (14-04-2020 23 :48 :48)

Running from C :
Windows 10 Pro Version 1909 18363.752 (X64) (2019-08-14 04 :12 :07)

Boot Mode : Normal

============================================================================== Accounts: =============================Administrator (S-1-5-21-2401605411-2593107901-998236807-500 – Administrator – Disabled)
DefaultAccount (S-1-5-21-2401605411-2593107901-998236807-503 – Limited – Disabled)
Guest (S-1-5-21-2401605411-2593107901-998236807-501 – Limited – Disabled)
Moe (S-1-5-21-2401605411-2593107901-998236807-1001 – Administrator – Enabled) => C :UsersMoe
Mio (S-1-5-21-2401605411-2593107901-998236807-1003 – Limited – Enabled) => C :UsersMio
WDAGUtilityAccount (S-1-5-21-2401605411-2593107901-998236807-504 – Limited – Disabled)==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV :
AS. The adware programs should be uninstalled manually.)7-Zip 19.00 (x64) (HKLM.7-Zip) (Version : 19.00 – Igor Pavlov)
AMD Chipset Software (HKLM-x32.AMD_Chipset_IODrivers) (Version : 2.04.04.111 – Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32. 2.04.04.111 – Advanced Micro Devices, Inc.) Hidden
Asmedia USB Host Controller Driver (HKLM-x32. 1.16.56.1 – Asmedia Technology)
BlueStacks App Player (HKLM.BlueStacks) (Version : 4.180.0.1051 – BlueStack Systems, Inc.)
Brave (HKLM-x32.BraveSoftware Brave-Browser) (Version : 80.1.5.123 – Brave Software Inc)
Eddie – OpenVPN UI (HKLM-x32.AirVPN) (Version :  – AirVPN – hxxps://airvpn.org)
Epic Games Launcher Prerequisites (x64) (HKLM. 1.0.0.0 – Epic Games, Inc.) Hidden
Glary Utilities PRO 5.137 (HKLM-x32.Glary Utilities 5) (Version : 5.137.0.163 – Glarysoft Ltd)
Google Update Helper (HKLM-x32. 1.3.99.0 – Google Inc.) Hidden
Intel® Network Connections 23.5.2.0 (HKLM.PROSetDX) (Version : 23.5.2.0 – Intel)
K-Lite Codec Pack 15.4.4 Standard (HKLM-x32.KLiteCodecPack_is1) (Version : 15.4.4 – KLCP)
Launcher Prerequisites (x64) (HKLM-x32. 1.0.0.0 – Epic Games, Inc.) Hidden
LibreOffice 6.4.2.2 (HKLM. 6.4.2.2 – The Document Foundation)
Microsoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM. 9.0.30729.6161 – Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32. 9.0.30729.6161 – Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable – 10.0.40219 (HKLM. 10.0.40219 – Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable – 10.0.40219 (HKLM-x32. 10.0.40219 – Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32. 11.0.61030.0 – Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32. 11.0.61030.0 – Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) – 12.0.30501 (HKLM-x32. 12.0.30501.0 – Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32. 12.0.30501.0 – Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) – 14.14.26429 (HKLM-x32. 14.14.26429.4 – Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) – 14.13.26020 (HKLM-x32. 14.13.26020.0 – Microsoft Corporation)
Mozilla Firefox 75.0 (x64 en-US) (HKLM.Mozilla Firefox 75.0 (x64 en-US)) (Version : 75.0 – Mozilla)
Mozilla Maintenance Service (HKLM.) (Version : 72.0 – Mozilla)
Mozilla Thunderbird 68.7.0 (x86 en-US) (HKLM-x32.Mozilla Thunderbird 68.7.0 (x86 en-US)) (Version : 68.7.0 – Mozilla)
MSI Afterburner 4.6.1 (HKLM-x32.Afterburner) (Version : 4.6.1 – MSI Co. LTD)
MSI Kombustor v4 0.6.3.3 (64-bit) (HKLM-x32.  – MSI / Geeks3D)
NextDNS (HKLM-x32.NextDNS) (Version : 1.0.12 – NextDNS)
. 1.19 – NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.2.34 (HKLM.GFExperience) (Version : 3.20.2.34 – NVIDIA Corporation)
NVIDIA Graphics Driver 445.75 (HKLM.Driver) (Version : 445.75 – NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.26 (HKLM.Driver) (Version : 1.3.38.26 – NVIDIA Corporation)
NVIDIA PhysX System Software 9.19.0218 (HKLM.PhysX) (Version : 9.19.0218 – NVIDIA Corporation)
Promontory_GPIO Driver (HKLM-x32. 2.0.1.0 – Advanced Micro Devices, Inc.) Hidden
PuTTY release 0.73 (64-bit) (HKLM. 0.73.0.0 – Simon Tatham)
qBittorrent 4.2.3 (HKLM-x32.qBittorrent) (Version : 4.2.3 – The qBittorrent project)
RivaTuner Statistics Server 7.2.2 (HKLM-x32.RTSS) (Version : 7.2.2 – Unwinder)
SP Toolbox (HKLM-x32. 2.0.14.1 – Silicon Power)
Steam (HKLM-x32.Steam) (Version : 2.10.91.91 – Valve Corporation)
TAP-Windows 9.21.2 (HKLM.TAP-Windows) (Version : 9.21.2 – )
Viber (HKLM-x32. 9.9.5.12 – Viber Media Inc.) Hidden
Viber (HKUS-1-5-21-2401605411-2593107901-998236807-1001. 9.9.5.12 – Viber Media Inc.)
Web Components (HKLM-x32. 3.0.6.6 – )
Winpower (HKLM-x32.Winpower) (Version : 5.6.0.5 – )
WinSCP 5.17.2 (HKUS-1-5-21-2401605411-2593107901-998236807-1001.winscp3_is1) (Version : 5.17.2 – Martin Prikryl)Packages:

=========

Community Showcase Everyday Art -> C :Program._1.0.0.0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Community Showcase Everyday Art 2 -> C :Program._1.0.0.0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Community Showcase Everyday Art 3 -> C :Program._1.0.0.0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Dark Skies by Tracy Hymas -> C :Program.DarkSkiesbyTracyHymas_1.0.0.0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Light and Dark 2 by Nick Boyer -> C :Program._1.0.0.0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C :Program.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C :Program.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation) [MS Ad] Program..36.20714.0_x64__8wekyb3d8bbwe [2020-03-27] (Microsoft Corporation) [MS Ad] MSN Weather -> C :Program.QwanturankWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-27] (Microsoft Corporation) [MS Ad] Perspectives of Japan 2 by Kazuo Nakadai -> C :Program._1.0.0.0_neutral__8wekyb3d8bbwe [2020-02-27] (Microsoft Corporation)
Subtle Details by Claudio Marinangeli -> C :Program._1.0.0.0_neutral__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation)
uBlock Origin -> C :Program.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2019-08-14] (Nik Rolls)==================== Custom CLSID (Whitelisted) : ==============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)CustomCLSID :.dll (Martin Prikryl -> Martin Prikryl)
[ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> No File
[ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> No File
[ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> No File
[ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> No File
[ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> No File
[ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
[ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
x32 : [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> No File
x32 : [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> No File
x32 : [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> No File
x32 : [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> No File
x32 : [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> No File
x32 : [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
x32 : [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
ContextMenuHandlers1 : [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>  -> No File
ContextMenuHandlers1 : [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C :Program Files7-Zip7-zip.dll [2019-02-22] (Igor Pavlov) [File not signed] ContextMenuHandlers1 : [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} =>  -> No File
ContextMenuHandlers1 : [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> No File
ContextMenuHandlers1 : [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C :Program Files (x86)Glary Utilities 5x64ContextHandler.dll [2020-03-04] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers2 : [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C :Program Files (x86)Glary Utilities 5x64ContextHandler.dll [2020-03-04] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers3 : [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> No File
ContextMenuHandlers4 : [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>  -> No File
ContextMenuHandlers4 : [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C :Program Files7-Zip7-zip.dll [2019-02-22] (Igor Pavlov) [File not signed] ContextMenuHandlers5 : [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C.dll [2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6 : [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C :Program Files7-Zip7-zip.dll [2019-02-22] (Igor Pavlov) [File not signed] ContextMenuHandlers6 : [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> No File
ContextMenuHandlers6 : [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C :Program Files (x86)Glary Utilities 5x64ContextHandler.dll [2020-03-04] (Glarysoft LTD -> Glarysoft Ltd)==================== Codecs (Whitelisted) ====================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM.Drivers32 : [VIDC.RTV1] => c.dll [246272 2012-09-29] () [File not signed] HKLM.Drivers32 : [VIDC.RTV1] => C.dll [247296 2012-09-29] () [File not signed]==================== Shortcuts & WMI ============================================ Loaded Modules (Whitelisted) =============2019-05-28 09 :22 – 2019-03-28 11 :29 – 006065152 _____ () [File not signed] C :Program Files (x86).00.76libprotobufd.dll
2019-10-16 21 :34 – 2019-10-16 21 :34 – 000045056 _____ () [File not signed] C.dll
2019-10-16 21 :34 – 2019-10-16 21 :34 – 000077824 _____ () [File not signed] C :Program Files (x86).dll
2019-10-16 21 :34 – 2019-10-16 21 :34 – 000036864 _____ () [File not signed] C :Program Files (x86).dll
2019-08-13 01 :52 – 2019-01-07 09 :43 – 000116224 ____C () [File not signed] D :Steam 2XCom2-_Aftermath_Lib.x64.dll
2019-08-13 01 :52 – 2019-01-07 09 :00 – 000883712 ____C () [File not signed] D :Steam 2XCom2-_4_win64.dll
2019-08-13 01 :52 – 2019-01-07 09 :43 – 000026112 ____C (Epic Games, Inc.) [File not signed] D :Steam 2XCom2-_64.dll
2019-08-13 01 :52 – 2019-01-07 09 :00 – 001714688 ____C (Epic Games, Inc.) [File not signed] D :Steam 2XCom2-_64.dll
2019-08-13 01 :52 – 2019-01-07 09 :43 – 000039936 ____C (Epic Games, Inc.) [File not signed] D :Steam 2XCom2-_64.dll
2019-01-06 22 :57 – 2019-02-22 00 :00 – 000078336 _____ (Igor Pavlov) [File not signed] C :Program Files7-Zip7-zip.dll
2018-12-20 12 :49 – 2018-12-20 12 :49 – 000372736 _____ (Intel® Corporation) [File not signed] C.dll
2019-08-13 01 :52 – 2019-01-07 09 :00 – 001665024 ____C (NVIDIA Corporation) [File not signed] D :Steam 2XCom2-_Clothing_x64.dll
2019-08-13 01 :52 – 2019-01-07 09 :00 – 001213440 ____C (NVIDIA Corporation) [File not signed] D :Steam 2XCom2-_Destructible_x64.dll
2019-08-13 01 :52 – 2019-01-07 09 :00 – 001755648 ____C (NVIDIA Corporation) [File not signed] D :Steam 2XCom2-_x64.dll
2019-08-13 01 :52 – 2019-01-07 09 :43 – 000143872 ____C (NVIDIA Corporation) [File not signed] D :Steam 2XCom2-_64.dll
2019-08-13 01 :52 – 2019-01-07 09 :00 – 000680960 ____C (NVIDIA Corporation) [File not signed] D :Steam 2XCom2-.dll
2019-08-13 01 :52 – 2019-01-07 09 :00 – 004595712 ____C (NVIDIA Corporation) [File not signed] D :Steam 2XCom2-.dll
2019-08-13 01 :52 – 2019-01-07 09 :43 – 000062464 ____C (NVIDIA Corporation) [File not signed] D :Steam 2XCom2-.dll
2019-08-13 01 :52 – 2019-01-07 09 :00 – 000435712 ____C (RAD Game Tools, Inc.) [File not signed] D :Steam 2XCom2-.dll==================== Alternate Data Streams (Whitelisted) ========(If an entry is included in the fixlist, only the ADS will be removed.)AlternateDataStreams: C :UsersPublicShared Files:VersionCache [464]==================== Safe Mode (Whitelisted) ==================(If an entry is included in the fixlist, it will be removed from the registry. The « AlternateShell » will be restored.) => « = »Service »==================== Association (Whitelisted) ===================================== Internet Explorer trusted/restricted ============================== Hosts content: =========================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2019-09-20 03 :44 – 2019-09-20 03 :44 – 000001026 _____ C :
127.0.0.1 ads.viber.com
127.0.0.1 ads.aws.viber.com
127.0.0.1 ads-d.viber.com
127.0.0.1 api.mixpanel.com
127.0.0.1 s-imp.rmp.rakuten.com
127.0.0.1 s-bid.rmp.rakuten.com
127.0.0.1 api.taboola.com2019-01-08 22 :51 – 2020-03-05 00 :55 – 000000584 _____ C.ics

24 14 3 4 214

0.0.0.1 Veritech.mshome.net # 2024 12 6 28 8 37 52 925
81==================== Other Areas ===========================(Currently there is no automatic fix for this section.)HKUS-1-5-21-2401605411-2593107901-998236807-1001Control PanelDesktop\Wallpaper -> C :
DNS Servers: 192.0.2.42 – 192.168.1.2
=> ( : 5) ( : 3) (EnableLUA : 1)
=> (SmartScreenEnabled : )
Windows Firewall is enabled.==================== MSCONFIG/TASK MANAGER disabled items ==(If an entry is included in the fixlist, it will be removed.)HKLM.StartupApprovedRun32 : => « Display »
HKUS-1-5-21-2401605411-2593107901-998236807-1001.StartupApprovedRun : => « GUDelayStartup »==================== FirewallRules (Whitelisted) ================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [UDP Query User{811DBEA4-41FA-46ED-956E-5BE25E8C3572}D :steam 2binarieswin64xcom2.exe] => (Allow) D :steam 2binarieswin64xcom2.exe (Firaxis Games) [File not signed] FirewallRules: [TCP Query User{6DD7ECFD-09FC-48D4-82FC-4A9DCE24F45C}D :steam 2binarieswin64xcom2.exe] => (Allow) D :steam 2binarieswin64xcom2.exe (Firaxis Games) [File not signed] FirewallRules: [{D711B4EE-3A22-4B55-9183-EA849B550882}] => (Allow) D :Steam _windowsDarkest.exe No File
FirewallRules: [{DBB31132-12AD-43AC-96F7-98E67418B288}] => (Allow) D :Steam _windowsDarkest.exe No File
FirewallRules: [{052ACFA7-1863-4E9A-A8F1-1EF538E0EA01}] => (Allow) C :Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F5AF7580-EDCC-48FF-B201-9FAB10279BCC}] => (Allow) C :Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{0647C63A-86A3-4627-B8E2-D5B98D0587BF}] => (Allow) C :Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)
FirewallRules: [{7DB4BEFD-8408-4C66-AACE-A2CFB4CF87A1}] => (Allow) C :Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)
FirewallRules: [{8AFEDD23-1D64-492E-BDD1-9B35769BEA74}] => (Allow) C :Program Files (x86)Steambincefcef.win7steamwebhelper.exe No File
FirewallRules: [{D4855770-1EDB-4586-8229-A00F57CD1BA4}] => (Allow) C :Program Files (x86)Steambincefcef.win7steamwebhelper.exe No File
FirewallRules: [{E99CC250-9DA4-4E2D-8A0A-A3064D11D60A}] => (Allow) D :Steam.exe (Microsoft) [File not signed] FirewallRules: [{B5D92BDD-D849-4F5F-A79E-2E07CF598644}] => (Allow) D :Steam.exe (Microsoft) [File not signed] FirewallRules: [{D4457B75-5027-47D7-88AA-55095940C08B}] => (Allow) D :Steam Labaimlab_tb.exe () [File not signed] FirewallRules: [{5E25349C-74B8-4D15-894D-0872D2131623}] => (Allow) D :Steam Labaimlab_tb.exe () [File not signed] FirewallRules: [{D3AC31C3-D297-4E57-B817-AB5A2D631D6D}] => (Allow) D :Steam DEoriDE.exe () [File not signed] FirewallRules: [{46DB4B34-A704-49C5-8072-B323B6DD4D00}] => (Allow) D :Steam DEoriDE.exe () [File not signed] FirewallRules: [{9C8E9C26-3181-4002-BB4E-F99E176F4DED}] => (Allow) D :Steam.exe (HarebrainedSchemes) [File not signed] FirewallRules: [{976264D6-9196-4111-B1DA-F19DDEC10D4F}] => (Allow) D :Steam.exe (HarebrainedSchemes) [File not signed] FirewallRules: [{9772867D-D70E-46AA-B24A-70C4C0CEF9BC}] => (Allow) D :Steam Of The.exe () [File not signed] FirewallRules: [{EAC6A44C-2782-47B9-A545-1DAF8E4EF014}] => (Allow) D :Steam Of The.exe () [File not signed] FirewallRules: [{EB7CD69E-254A-4D44-AB26-1CBA8A4FDEAE}] => (Allow) D :Steam of the Tomb RaiderROTTR.exe (Square Enix LTD -> Eidos Inc.)
FirewallRules: [{BB306D99-72DA-4465-9AF2-3C548771E27B}] => (Allow) D :Steam of the Tomb RaiderROTTR.exe (Square Enix LTD -> Eidos Inc.)
FirewallRules: [{D2A5645D-4712-4C97-B75A-14D7D07819AA}] => (Allow) D :Steam Elite 4LauncherSniperElite4.exe () [File not signed] FirewallRules: [{D96F3EF3-6CA0-4D2A-B20A-0A029CF591D7}] => (Allow) D :Steam Elite 4LauncherSniperElite4.exe () [File not signed] FirewallRules: [{68A63715-C245-4B93-B4B3-F69D124A3FC2}] => (Allow) D :Steam ChroniclesLauncher.exe (SEGA EUROPE LIMITED -> SEGA)
FirewallRules: [{D36A331A-5598-4DB9-B711-E5988A3317D7}] => (Allow) D :Steam ChroniclesLauncher.exe (SEGA EUROPE LIMITED -> SEGA)
FirewallRules: [{E8949901-67CA-42C7-87E7-79B4C806C2C6}] => (Allow) D :Steam Witcher 3binx64witcher3.exe (CD Projekt Red) [File not signed] FirewallRules: [{76356363-2932-4C9E-9CA5-100E0A18DE30}] => (Allow) D :Steam Witcher 3binx64witcher3.exe (CD Projekt Red) [File not signed] FirewallRules: [TCP Query User{0C132FB1-2D6D-48C5-BEED-617F5B392C45}D :steam 2xcom2-.exe] => (Allow) D :steam 2xcom2-.exe (Firaxis Games) [File not signed] FirewallRules: [UDP Query User{4B6AB98C-01B1-4E25-B0BD-01DEBDD6D3A1}D :steam 2xcom2-.exe] => (Allow) D :steam 2xcom2-.exe (Firaxis Games) [File not signed] FirewallRules: [{2816FA72-26F3-48B8-9EC2-4D971F45FD0C}] => (Allow) C :Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{865BC007-BDA4-4FAD-867E-6D78E65C2FCD}] => (Allow) C :Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{C23464D7-1F1D-43F5-8E5E-35524DCFFA49}D :steam 2xcom2-.exe] => (Block) D :steam 2xcom2-.exe (Firaxis Games) [File not signed] FirewallRules: [UDP Query User{23B20065-9489-44FF-A75C-DD06171E5BFC}D :steam 2xcom2-.exe] => (Block) D :steam 2xcom2-.exe (Firaxis Games) [File not signed] FirewallRules: [{2D1FA137-B341-4C35-B2A5-E52C52FDFE1C}] => (Allow) D :Steam Soul.exe () [File not signed] FirewallRules: [{FBD08F31-ACA9-47EA-8274-D53DDC1B1B2B}] => (Allow) D :Steam Soul.exe () [File not signed] FirewallRules: [TCP Query User{035A8079-8502-450A-A964-B21F3B68E629}D :steam.exe] => (Allow) D :steam.exe No File
FirewallRules: [UDP Query User{5F993112-977F-4B20-B86A-368D4BA1F191}D :steam.exe] => (Allow) D :steam.exe No File
FirewallRules: [{D2875FB9-E846-43A3-9706-34EB843C566B}] => (Allow) D :Steam.exe No File
FirewallRules: [{D038F38A-896A-4F36-BF36-FE730E412724}] => (Allow) D :Steam.exe No File
FirewallRules: [{B57937B4-8AB1-4EFE-A174-097E24A7C37D}] => (Allow) D :Steam CouncilThe Council.exe (Focus Home Interactive -> Cyanide)
FirewallRules: [{8B748F3F-9D82-4BEB-AEBA-2846F4591C25}] => (Allow) D :Steam CouncilThe Council.exe (Focus Home Interactive -> Cyanide)
FirewallRules: [{DAB3AA06-94F0-4814-AD8E-50D5A8326A5B}] => (Allow) D :Steam.exe () [File not signed] FirewallRules: [{F0CA2CC0-EFAC-42F0-AB1A-DB968413ED8F}] => (Allow) D :Steam.exe () [File not signed] FirewallRules: [{8B81A59D-8692-4893-953D-41D196DB463C}] => (Allow) D :Steam SquadGalaxy Squad.exe () [File not signed] FirewallRules: [{68CBD691-1262-4A04-97B3-BB9B8CF7D565}] => (Allow) D :Steam SquadGalaxy Squad.exe () [File not signed] FirewallRules: [{40DE5C28-BB59-47BC-B80E-8848646D58DE}] => (Allow) D :Steam.exe () [File not signed] FirewallRules: [{8E0DD3A5-5456-44D9-9592-8FD0153D7D24}] => (Allow) D :Steam.exe () [File not signed] FirewallRules: [{6B2362AD-142B-4115-BCEF-60DE60B5B19A}] => (Allow) C :Program FilesMicrosoft.exe No File
FirewallRules: [{863F2499-C14C-4083-9742-9D2783D2B070}] => (Allow) C :Program FilesMicrosoft.exe No File
FirewallRules: [{C744DFE9-6806-434C-BB7F-EDE86FA4F322}] => (Allow) D :Steam _x64.exe (SEGA) [File not signed] FirewallRules: [{74D6C340-6F46-4300-9E46-66C04C6B3994}] => (Allow) D :Steam _x64.exe (SEGA) [File not signed] FirewallRules: [{B01B4D96-D0E8-44F8-AC24-690BDC3F53DA}] => (Allow) D :Steam Original Sin 2binSupportTool.exe (Larian Studios -> Larian Studios)
FirewallRules: [{001F75A5-C6C4-46ED-B63A-CBB5233D8FEC}] => (Allow) D :Steam Original Sin 2binSupportTool.exe (Larian Studios -> Larian Studios)
FirewallRules: [TCP Query User{F3FED973-D866-413E-9267-980F2AD09248}D :steam original sin 2defedbineocapp.exe] => (Allow) D :steam original sin 2defedbineocapp.exe (Larian Studios -> )
FirewallRules: [UDP Query User{3CD1AAED-5E7E-4D20-B357-114596BAC930}D :steam original sin 2defedbineocapp.exe] => (Allow) D :steam original sin 2defedbineocapp.exe (Larian Studios -> )
FirewallRules: [{DFED5B34-6DBA-4B80-9786-A53B2CED1851}] => (Allow) D :Steam Year ZeroZoneUE4.exe (Ayeware AB -> )
FirewallRules: [{C8E673B3-076B-4373-9004-D5A394039C54}] => (Allow) D :Steam Year ZeroZoneUE4.exe (Ayeware AB -> )
FirewallRules: [TCP Query User{01B6C91E-5CFD-4899-98E0-540B443D5B6E}D :steam year -win64-shipping.exe] => (Allow) D :steam year -win64-shipping.exe (Ayeware AB -> Epic Games, Inc.)
FirewallRules: [UDP Query User{150A7B2B-AB43-4BA5-9C7A-5C5EB607878E}D :steam year -win64-shipping.exe] => (Allow) D :steam year -win64-shipping.exe (Ayeware AB -> Epic Games, Inc.)
FirewallRules: [{4F1A33D6-E3F7-44B6-A219-63B5625ACE55}] => (Allow) C :Program Files (x86)ASUSAI Suite IIIFile TransferWi-Fi GO ! AssistToolFile Transfer Server.exe No File
FirewallRules: [{1C234395-6F9E-4C75-8115-993CAA798801}] => (Allow) C :Program Files (x86)ASUSAI Suite IIIFile TransferWi-Fi GO ! AssistToolFile Transfer Server.exe No File
FirewallRules: [{14B269FC-D2E8-41FB-99B3-E4FD0BBDD755}] => (Allow) C :Program Files (x86)ASUSAI Suite IIIASUSDMS.exe No File
FirewallRules: [{0DF0D9A2-96B3-4024-8B2A-204CE9A3630E}] => (Allow) C :Program Files (x86)ASUSAI Suite IIIASUSDMS.exe No File
FirewallRules: [TCP Query User{ABB0F49E-F3BE-41F4-B7EF-D23E2F0D6C6C}D :_r1904sdi_x64_r1904.exe] => (Allow) D :_r1904sdi_x64_r1904.exe No File
FirewallRules: [UDP Query User{829839E3-D14D-4FA2-88E1-7B48B293FCC9}D :_r1904sdi_x64_r1904.exe] => (Allow) D :_r1904sdi_x64_r1904.exe No File
FirewallRules: [TCP Query User{07D77B97-DCFA-491A-91B5-5488BDAF07F5}C :program fileslogitech gaming softwarelcore.exe] => (Block) C :program fileslogitech gaming softwarelcore.exe No File
FirewallRules: [UDP Query User{1D410BD2-56F4-4513-94EC-5D03CC5A00FA}C :program fileslogitech gaming softwarelcore.exe] => (Block) C :program fileslogitech gaming softwarelcore.exe No File
FirewallRules: [{62FEA8AE-7195-4ED5-B1D3-AF6B5DF789ED}] => (Allow) D :-x64DNSQuerySniffer.exe No File
FirewallRules: [{46ED2DA4-BB7C-4073-B051-295FB911F3E7}] => (Allow) D :-x64DNSQuerySniffer.exe No File
FirewallRules: [{C30D6694-FD01-409F-B361-086F067D9749}] => (Allow) D :Steam _windowsDarkest.exe No File
FirewallRules: [{CBE2D74B-B2F4-486C-AAA7-6C8493895A30}] => (Allow) D :Steam _windowsDarkest.exe No File
FirewallRules: [TCP Query User{6B64FDBA-1826-4CFD-8DB0-E2AD4E4CB0E4}D :_r1904sdi_r1904.exe] => (Allow) D :_r1904sdi_r1904.exe No File
FirewallRules: [UDP Query User{332A5186-50CE-40FB-BDC1-AE87967A070D}D :_r1904sdi_r1904.exe] => (Allow) D :_r1904sdi_r1904.exe No File
FirewallRules: [{CC8D7DB3-53A9-4A17-BA09-2E0008E6AFF4}] => (Block) D :_r1904sdi_r1904.exe No File
FirewallRules: [{1FB19917-5490-47E1-B23C-6F4D57687300}] => (Block) D :_r1904sdi_r1904.exe No File
FirewallRules: [{33F1BEE5-5829-4111-AE6B-6AA07CC948C6}] => (Allow) D :Steam.exe () [File not signed] FirewallRules: [{D0B2338A-D761-4AD0-8117-6E2DE358F62F}] => (Allow) D :Steam.exe () [File not signed] FirewallRules: [{671E449B-B698-4034-996F-76C0F25C049C}] => (Allow) D :Steam EVIL 2  BIOHAZARD RE2re2.exe (CAPCOM CO. LTD. -> )
FirewallRules: [{D7B5C4B7-AF28-4D72-8779-3E1D6EC87C7F}] => (Allow) D :Steam EVIL 2  BIOHAZARD RE2re2.exe (CAPCOM CO. LTD. -> )
FirewallRules: [TCP Query User{72AA3A01-6299-4977-9B5F-1F5EC24B6EFC}C :_r1904sdi_x64_r1904.exe] => (Allow) C :_r1904sdi_x64_r1904.exe No File
FirewallRules: [UDP Query User{1FBC964B-07BD-4243-86CC-AAC72A19F13D}C :_r1904sdi_x64_r1904.exe] => (Allow) C :_r1904sdi_x64_r1904.exe No File
FirewallRules: [{0B71C3D3-E32B-4F95-B1A0-A54A6A0D2ADF}] => (Block) C :_r1904sdi_x64_r1904.exe No File
FirewallRules: [{220E7ECD-8DE4-4B18-85B0-618D53DDA1BD}] => (Block) C :_r1904sdi_x64_r1904.exe No File
FirewallRules: [TCP Query User{2FD6C418-B00F-4BC2-A50A-63A4D8783054}C :_r1904sdi_x64_r1909.exe] => (Allow) C :_r1904sdi_x64_r1909.exe No File
FirewallRules: [UDP Query User{8FB5D1B1-166A-40BD-BF95-B672D98DD39C}C :_r1904sdi_x64_r1909.exe] => (Allow) C :_r1904sdi_x64_r1909.exe No File
FirewallRules: [{8C08F8D7-2175-46F6-B1E9-FBA5161A168F}] => (Block) C :_r1904sdi_x64_r1909.exe No File
FirewallRules: [{15AF1B83-3DDF-496B-88C6-D9ECCBA029E5}] => (Block) C :_r1904sdi_x64_r1909.exe No File
FirewallRules: [TCP Query User{DFA1A0EA-4DDC-417A-9C59-B2F8EF036DA9}C :_r1909sdi_x64_r1909.exe] => (Allow) C :_r1909sdi_x64_r1909.exe No File
FirewallRules: [UDP Query User{2E3FFA12-32D6-49AD-BB89-C63D5BB8EBD8}C :_r1909sdi_x64_r1909.exe] => (Allow) C :_r1909sdi_x64_r1909.exe No File
FirewallRules: [TCP Query User{C2F6B574-CF36-49B2-8932-F69D44312796}C :program files (x86).exe] => (Allow) C :program files (x86).exe
FirewallRules: [UDP Query User{D1559902-964D-45E2-9171-03E66A4F5349}C :program files (x86).exe] => (Allow) C :program files (x86).exe
FirewallRules: [{6A927535-E759-4FCD-898E-FFC4E15CF0E2}] => (Allow) C :Program Files (x86)MegaTecUPSilon 2000UPSilon.exe No File
FirewallRules: [{9C47B766-BCC4-4393-8C97-E791372C04B9}] => (Allow) C :Program Files (x86)MegaTecUPSilon 2000UPSilon.exe No File
FirewallRules: [{3B1167A9-72E2-4090-BA7F-9671868D3EFB}] => (Allow) C :Program Files (x86)MegaTecUPSilon 2000RupsMon.exe No File
FirewallRules: [{CA7A6B14-6470-43C7-94F6-9B73B1DDF448}] => (Allow) C :Program Files (x86)MegaTecUPSilon 2000RupsMon.exe No File
FirewallRules: [TCP Query User{CBA2F54C-B256-4FDD-A73A-0B74906AB27C}C :program files (x86).exe] => (Block) C :program files (x86).exe
FirewallRules: [UDP Query User{6342DA2D-3798-487F-ADC3-8BA4AB83C6BB}C :program files (x86).exe] => (Block) C :program files (x86).exe
FirewallRules: [{77087114-7B49-408D-918E-A32F4025125A}] => (Allow) D :Steam of Heroes 2RelicCoH2.exe (Relic Entertainment, Inc -> Relic Entertainment Inc.)
FirewallRules: [{4F152644-5779-44D6-90A0-447CA85EEA2F}] => (Allow) D :Steam of Heroes 2RelicCoH2.exe (Relic Entertainment, Inc -> Relic Entertainment Inc.)
FirewallRules: [{C4A85FBE-559C-4A36-8284-5EF091426769}] => (Allow) D :Steam of TimeTowerOfTime.exe () [File not signed] FirewallRules: [{AC89C50A-33BC-45BF-9D98-70F43445420F}] => (Allow) D :Steam of TimeTowerOfTime.exe () [File not signed] FirewallRules: [{F173B113-97EE-4CED-AE97-5D90A4F01768}] => (Allow) D :Steam Elysiumdisco.exe () [File not signed] FirewallRules: [{2B98E10F-E3A0-4290-A300-182ADB073672}] => (Allow) D :Steam Elysiumdisco.exe () [File not signed] FirewallRules: [TCP Query User{914AB9EC-E414-41FE-8F3B-602B8FA5613C}C :_r1909sdi_x64_r1909.exe] => (Block) C :_r1909sdi_x64_r1909.exe No File
FirewallRules: [UDP Query User{AB9AB621-8A28-44C6-81C7-9EFED219D0CA}C :_r1909sdi_x64_r1909.exe] => (Block) C :_r1909sdi_x64_r1909.exe No File
FirewallRules: [{FF5C5247-E4DA-4197-BFFA-6B9D8AF020B1}] => (Allow) C :Program FilesNVIDIA.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{61799CCB-D246-44F8-AAFF-6E4840A5B3F4}] => (Allow) C :Program FilesNVIDIA.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3B798057-0EAE-4E4B-86E9-B8D5C2D2AA9A}] => (Allow) D :Steam QUEST QUEST XI.exe (SQUARE ENIX CO. LTD. -> SQUARE ENIX CO. LTD.)
FirewallRules: [{D286FE86-2542-4983-A42B-AB4C2C178770}] => (Allow) D :Steam QUEST QUEST XI.exe (SQUARE ENIX CO. LTD. -> SQUARE ENIX CO. LTD.)
FirewallRules: [{6E0FC49E-0CFE-490E-A343-841DF83BACE5}] => (Allow) D :Steam QUEST.exe () [File not signed] FirewallRules: [{912A6F1F-2C97-4218-BBDA-1299216B4A41}] => (Allow) D :Steam QUEST.exe () [File not signed] FirewallRules: [{ED74F984-3273-41E9-8595-F96447EF76F0}] => (Allow) C :Program FilesFirefox Developer Editionfirefox.exe No File
FirewallRules: [{F3638262-0A6F-435B-B4CE-B8ECFD9CA1F8}] => (Allow) C :Program FilesNVIDIA.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1C244065-3087-4DE3-99D8-D10F399800F7}] => (Allow) C :Program FilesNVIDIA.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{33C5DE23-6E72-4EDF-9B5F-FAFF06460149}] => (Allow) C :Program FilesNVIDIA.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{840BA068-FA2F-440A-8EBA-D13B8F49F665}] => (Allow) C :Program FilesNVIDIA.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{90623CDE-C82C-42D1-82C4-5A9F34440057}] => (Allow) C :Program FilesBlueStacksHD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [TCP Query User{63C7EBA7-12BC-4FEF-811A-2B8464FB28C7}C :_r1909sdi_x64_r2000.exe] => (Allow) C :_r1909sdi_x64_r2000.exe No File
FirewallRules: [UDP Query User{19A4EE6B-D425-4C61-B98F-44FB992B4AA7}C :_r1909sdi_x64_r2000.exe] => (Allow) C :_r1909sdi_x64_r2000.exe No File
FirewallRules: [{2902C868-3B63-4403-8207-192FD9D902F6}] => (Block) C :_r1909sdi_x64_r2000.exe No File
FirewallRules: [{AAAB189C-8BBE-4DA1-A745-DB769184A6FB}] => (Block) C :_r1909sdi_x64_r2000.exe No File
FirewallRules: [TCP Query User{77C23C89-D0AD-4301-969A-7131D9705D32}C :_r2000sdi_x64_r2000.exe] => (Allow) C :_r2000sdi_x64_r2000.exe (www.SamLab.ws) [File not signed] FirewallRules: [UDP Query User{48A66B99-F158-4CE8-A006-F66E464E6780}C :_r2000sdi_x64_r2000.exe] => (Allow) C :_r2000sdi_x64_r2000.exe (www.SamLab.ws) [File not signed] FirewallRules: [{3AACA906-3E00-4B3C-B87B-A86CBD6A57F4}] => (Block) C :_r2000sdi_x64_r2000.exe (www.SamLab.ws) [File not signed] FirewallRules: [{70A214C7-007B-4269-8A39-215B842AB89B}] => (Block) C :_r2000sdi_x64_r2000.exe (www.SamLab.ws) [File not signed] FirewallRules: [{BA525E5C-D7E3-4D15-83E9-0653DD29A008}] => (Allow) C :Program Files (x86)BraveSoftwareBrave-.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{A104ADE1-B18B-4306-9841-2F818058D836}] => (Allow) C :Program.exe () [File not signed] FirewallRules: [{860ACD1D-4E17-40D5-A211-E3B481065746}] => (Allow) C :Program.exe () [File not signed]==================== Restore Points =========================12-04-2020 19 :04 :51 Windows Backup==================== Faulty Device Manager Devices ================================ Event log errors: ========================Application errors:

==================

Error : (04/14/2020 11 :49 :47 PM) (Source : NextDNSService) (EventID : 1) (User : )
Description : resolve : 99c0 EOFError : (04/14/2020 11 :48 :23 PM) (Source : ESENT) (EventID : 455) (User : )
Description : svchost (1384,R,98) TILEREPOSITORYS-1-5-18 : Error -1023 (0xfffffc01) occurred while opening logfile C.log.Error : (04/14/2020 11 :20 :58 PM) (Source : ESENT) (EventID : 455) (User : )
Description : svchost (10540,R,98) TILEREPOSITORYS-1-5-18 : Error -1023 (0xfffffc01) occurred while opening logfile C.log.Error : (04/14/2020 10 :58 :25 PM) (Source : NextDNSService) (EventID : 1) (User : )
Description : resolve : e837 EOFError : (04/14/2020 10 :32 :25 PM) (Source : NextDNSService) (EventID : 1) (User : )
Description : resolve : a835 EOFError : (04/14/2020 10 :27 :54 PM) (Source : ESENT) (EventID : 455) (User : )
Description : svchost (3860,R,98) TILEREPOSITORYS-1-5-18 : Error -1023 (0xfffffc01) occurred while opening logfile C.log.Error : (04/14/2020 09 :18 :13 PM) (Source : ESENT) (EventID : 455) (User : )
Description : svchost (1520,R,98) TILEREPOSITORYS-1-5-18 : Error -1023 (0xfffffc01) occurred while opening logfile C.log.Error : (04/14/2020 08 :54 :11 PM) (Source : ESENT) (EventID : 455) (User : )
Description : svchost (7344,R,98) TILEREPOSITORYS-1-5-18 : Error -1023 (0xfffffc01) occurred while opening logfile C.log.System errors:

=============

Error : (04/14/2020 11 :48 :20 PM) (Source : Schannel) (EventID : 4116) (User : NT AUTHORITY)
Description : The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.windows.com. The TLS connection request has failed. The attached data contains the server certificate.Error : (04/14/2020 11 :36 :03 PM) (Source : Schannel) (EventID : 4116) (User : NT AUTHORITY)
Description : The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.windows.com. The TLS connection request has failed. The attached data contains the server certificate.Error : (04/14/2020 11 :30 :58 PM) (Source : Schannel) (EventID : 4116) (User : NT AUTHORITY)
Description : The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.windows.com. The TLS connection request has failed. The attached data contains the server certificate.Error : (04/14/2020 11 :19 :41 PM) (Source : Schannel) (EventID : 4116) (User : NT AUTHORITY)
Description : The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.windows.com. The TLS connection request has failed. The attached data contains the server certificate.Error : (04/14/2020 11 :13 :39 PM) (Source : Schannel) (EventID : 4116) (User : NT AUTHORITY)
Description : The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.windows.com. The TLS connection request has failed. The attached data contains the server certificate.Error : (04/14/2020 11 :04 :04 PM) (Source : Schannel) (EventID : 4116) (User : NT AUTHORITY)
Description : The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.windows.com. The TLS connection request has failed. The attached data contains the server certificate.Error : (04/14/2020 10 :57 :00 PM) (Source : Schannel) (EventID : 4116) (User : NT AUTHORITY)
Description : The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.windows.com. The TLS connection request has failed. The attached data contains the server certificate.Error : (04/14/2020 10 :48 :34 PM) (Source : Schannel) (EventID : 4116) (User : NT AUTHORITY)
Description : The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is client.wns.windows.com. The TLS connection request has failed. The attached data contains the server certificate.Windows Defender :

===================================

Date : 2020-04-12 19 :12 :54.226

La description :

Windows Defender Antivirus has detected malware or other potentially unwanted software.

For more information please see the following :

? linkid=37020&name=Trojan :Win32/Wacatac.B ! rfn&threatid=2147746425&enterprise=0
Name : Trojan :Win32/Wacatac.B ! rfn

ID : 2147746425

Severity : Severe

Category : Trojan

Path: file :__v10-6-4Uninstall.exe

Detection Origin : Unknown

Detection Type : Concrete

Detection Source : Real-Time Protection

Process Name : C.exe
Security intelligence Version : AV : 1.313.1357.0, AS : 1.313.1357.0, NIS : 1.313.1357.0
Engine Version : AM : 1.1.16900.4, NIS : 1.1.16900.4Date : 2020-04-07 17 :04 :01.424

La description :

Windows Defender Antivirus scan has been stopped before completion.

Scan ID :

Scan Type : Antimalware
Scan Parameters: Quick ScanDate : 2020-04-04 19 :19 :21.266

La description :

Windows Defender Antivirus scan has been stopped before completion.

Scan ID :

Scan Type : Antimalware
Scan Parameters: Quick ScanDate : 2020-04-14 18 :13 :56.687

La description :

Windows Defender Antivirus engine has been terminated due to an unexpected error.

Failure Type : Crash

Exception code : 0xc0000005
Resource :Date : 2020-04-11 00 :35 :53.452

La description :

Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.

Feature : On Access

Error Code : 0x8007043c

Error description : This service cannot be started in Safe Mode

Reason : Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.CodeIntegrity :
===================================Date : 2020-04-14 18 :14 :38.537

La description :

Code Integrity is unable to verify the image integrity of the file.dll because the set of per-page image hashes could not be found on the system.Date : 2020-04-14 18 :14 :38.526

La description :

Code Integrity is unable to verify the image integrity of the file.dll because the set of per-page image hashes could not be found on the system.Date : 2020-04-14 18 :14 :38.513

La description :

Code Integrity is unable to verify the image integrity of the file.dll because the set of per-page image hashes could not be found on the system.Date : 2020-04-14 18 :14 :38.503

La description :

Code Integrity is unable to verify the image integrity of the file.dll because the set of per-page image hashes could not be found on the system.Date : 2020-04-14 18 :14 :37.876

La description :

Code Integrity is unable to verify the image integrity of the file.dll because the set of per-page image hashes could not be found on the system.Date : 2020-04-14 18 :14 :37.840

La description :

Code Integrity is unable to verify the image integrity of the file.dll because the set of per-page image hashes could not be found on the system.==================== Memory info ===========================BIOS : American Megatrends Inc. 7704 12/16/2019
Motherboard : ASUSTeK COMPUTER INC. CROSSHAIR VI HERO

Processor : AMD Ryzen 5 2600 Six-Core Processor

Percentage of memory in use : 44%
Total physical RAM : 32697.21 MB
Available physical RAM : 18070.43 MB
Total Virtual : 37561.21 MB
Available Virtual : 18561.26 MB==================== Drives ================================Drive c : () (Fixed) (Total :237.87 GB) (Free :115.71 GB) NTFS
Drive d : (Tank) (Fixed) (Total :894.24 GB) (Free :360.06 GB) NTFS
Drive f : (SSD 2) (Fixed) (Total :238.47 GB) (Free :238.38 GB) NTFS
Drive g : (Misc) (Fixed) (Total :1863 GB) (Free :444.85 GB) NTFS\ ?:0.49 GB) (Free :0.04 GB) NTFS
\ ?:0.09 GB) (Free :0.07 GB) FAT32==================== MBR & Partition Table ==============================================================================
Disk : 0 (Protective MBR) (Size : 238.5 GB) (Disk ID : 00000000)Partition : GPT.==========================================================
Disk : 1 (Protective MBR) (Size : 1863 GB) (Disk ID : 00000000)Partition : GPT.==========================================================
Disk : 2 (Protective MBR) (Size : 238.5 GB) (Disk ID : 00000000)Partition : GPT.==========================================================
Disk : 3 (Protective MBR) (Size : 894.3 GB) (Disk ID : 00000000)Partition : GPT.==================== End of Addition.txt =======================

Cheval de Troie Windows Malware détecté: Win32 / Wacatac.B ! Rfn. Assainissement incomplet.

S’abonner
Notifier de
guest
0 Commentaires
Inline Feedbacks
View all comments