Resolved Keep getting Chrome popups (finfantal.info)

sud2002 · Aug 19, 2018

Hey Guys,

Currently I keep getting popups around every 15 - 20 minutes whenever I have the Chrome browser open, the popups always reference "finfantal.info", I've posted an example below, it keeps popping up in the bottom right hand side of my screen. I've even added it to my block list on Chrome (you can see my settings in the image for this further below)

And advice or help on resolving this would be greatly appreciated!

My Chrome settings

mailpup · Aug 19, 2018

Moving to Virus and Malware Removal forum.

Broni · Aug 19, 2018

Welcome aboard

Please, complete all steps listed here: https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

sud2002 · Aug 20, 2018

Here's my logs.

FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19.08.2018 02
Ran by sud20 (administrator) on DESKTOP-MEL1VEJ (20-08-2018 01:02:03)
Running from C:\Users\sud20\Downloads
Loaded Profiles: sud20 (Available Profiles: sud20)
Platform: Windows 10 Home Version 1803 17134.228 (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardCore.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\igfxCUIService.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFirewall.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFiltering.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardSentry.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFileScanner.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\IntelCpHDCPSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
() C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\IntelCpHeciSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.1.18.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeHost.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18071.11811.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BgGameMon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SnippingTool.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\MsMpEng.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\MpCmdRun.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\MpCmdRun.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\sud20\Downloads\FRST64 (1).exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16776704 2016-12-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2016-12-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2016-12-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2016-12-08] (Realtek Semiconductor)
HKLM\...\Run: [BullGuard] => C:\Program Files\BullGuard Ltd\BullGuard\BullGuardTray.exe [201064 2018-08-03] (BullGuard Ltd.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-824087254-2349524542-600297333-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3206432 2018-08-08] (Valve Corporation)
HKU\S-1-5-21-824087254-2349524542-600297333-1001\...\Run: [GoogleChromeAutoLaunch_2B87E89396A2F6100DC5ECE6970087BB] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1577816 2018-08-08] (Google Inc.)
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{c29aa1b7-bd1a-4bfb-8c4f-0ae44f682331}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-08-16] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-04-30] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-08-16] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-08-16] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-08-16] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-08-16] (Microsoft Corporation)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [antiphishing@bullguard] - C:\Program Files\BullGuard Ltd\BullGuard\Files32\Antiphishing\FF\antiphishing@bullguard => not found
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-03-29] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-02] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default [2018-08-20]
CHR Extension: (Slides) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-22]
CHR Extension: (Docs) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-22]
CHR Extension: (Google Drive) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-11-22]
CHR Extension: (Jungle Scout Pro) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckjlihkmgolmgkchbpiponapgjenaoa [2018-08-09]
CHR Extension: (YouTube) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-11-22]
CHR Extension: (Sheets) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-22]
CHR Extension: (Google Docs Offline) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-18]
CHR Extension: (SwagButton) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngocbkfmikdgphklgmmehbjjlfgdemm [2018-08-18]
CHR Extension: (DS Amazon Quick View) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkompbllimaoekaogchhkmkdogpkhojg [2018-04-28]
CHR Extension: (SmartyDrop BASIC - Best dropshipping toolset) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmpmihndjgkacnnneogbeapgnahkhpdd [2018-06-15]
CHR Extension: (Keepa - Amazon Price Tracker) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\neebplgakaahbhdphmkckjjcegoiijjo [2018-07-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-06]
CHR Extension: (Gmail) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-11-22]
CHR Extension: (Chrome Media Router) - C:\Users\sud20\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-08-19]
CHR Profile: C:\Users\sud20\AppData\Local\Google\Chrome\User Data\System Profile [2018-08-20]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BsBackup; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBackup.exe [1639272 2018-08-01] (BullGuard Ltd.)
R2 BsFileScan; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFileScanner.exe [578920 2018-08-01] (BullGuard Ltd.)
R2 BsMailProxy; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFiltering.exe [5896552 2018-08-01] (BullGuard Ltd.)
R2 BsMain; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardCore.exe [1040232 2018-08-01] (BullGuard Ltd.)
R2 BsNet; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardFirewall.exe [811880 2018-08-01] (BullGuard Ltd.)
R2 BsScanner; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe [306024 2018-08-03] (BullGuard Ltd.)
R2 BsSentry; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardSentry.exe [479592 2018-08-03] (BullGuard Ltd.)
R2 BsUpdate; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe [507240 2018-08-01] (BullGuard Ltd.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8853984 2018-08-09] (Microsoft Corporation)
R2 DAX2API; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [163336 2016-09-19] ()
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [515256 2017-08-30] (Intel Corporation)
R2 SamsungUPDUtilSvc; C:\Windows\SysWOW64\SecUPDUtilSvc.exe [143664 2017-12-01] ()
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [267360 2017-01-23] (Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\NisSrv.exe [4682552 2018-05-31] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\MsMpEng.exe [101096 2018-05-31] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 BdAgent; C:\WINDOWS\System32\DRIVERS\BdAgent.sys [174744 2018-03-02] (BullGuard Ltd.)
R0 BdNet; C:\WINDOWS\System32\DRIVERS\BdNet.sys [155568 2018-03-02] (BullGuard Ltd.)
R1 BdSentry; C:\WINDOWS\System32\DRIVERS\BdSentry.sys [86384 2018-04-19] (BullGuard Ltd.)
R1 BdSpy; C:\WINDOWS\System32\DRIVERS\BdSpy.sys [94952 2018-03-02] (BullGuard Ltd.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [129552 2017-08-30] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2018-04-12] (Intel Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [338376 2018-04-22] (Realtek Semiconductor Corp.)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3227648 2017-04-06] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [72800 2017-01-23] (Synaptics Incorporated)
R3 Trufos; C:\WINDOWS\System32\DRIVERS\Trufos.sys [442848 2018-04-23] (BitDefender S.R.L.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-05-31] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [313384 2018-05-31] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61992 2018-05-31] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-08-20 01:02 - 2018-08-20 01:02 - 000018681 _____ C:\Users\sud20\Downloads\FRST.txt
2018-08-20 01:01 - 2018-08-20 01:01 - 002413056 _____ (Farbar) C:\Users\sud20\Downloads\FRST64 (1).exe
2018-08-20 01:01 - 2018-08-20 01:01 - 000000000 ____D C:\Users\sud20\Downloads\FRST-OlderVersion
2018-08-20 00:59 - 2018-08-20 01:02 - 000000000 ____D C:\FRST
2018-08-18 23:52 - 2018-08-18 23:52 - 000000000 ___HD C:\OneDriveTemp
2018-08-18 02:12 - 2018-08-18 02:14 - 000000000 ____D C:\Users\sud20\Downloads\The Grand Tour 2016 Season 2 Complete 720P WEB x264 [i_c]
2018-08-18 02:07 - 2018-08-18 02:40 - 625538529 ____R C:\Users\sud20\Downloads\Bret 'The Hitman' Hart - Wrestling with Shadows (A&E).mpg
2018-08-17 07:57 - 2018-08-17 07:57 - 000122202 _____ C:\Users\sud20\Downloads\Order-38054942-Docs-070841.pdf
2018-08-16 21:20 - 2018-08-16 21:20 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2018-08-16 21:20 - 2018-08-16 21:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2018-08-15 04:23 - 2018-08-03 09:39 - 021389368 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-08-15 04:23 - 2018-08-03 09:39 - 000790304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2018-08-15 04:23 - 2018-08-03 09:25 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2018-08-15 04:23 - 2018-08-03 09:25 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2018-08-15 04:23 - 2018-08-03 09:24 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2018-08-15 04:23 - 2018-08-03 09:24 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2018-08-15 04:23 - 2018-08-03 09:24 - 000046592 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2018-08-15 04:23 - 2018-08-03 09:22 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2018-08-15 04:23 - 2018-08-03 09:21 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-08-15 04:23 - 2018-08-03 09:21 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-08-15 04:23 - 2018-08-03 09:21 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2018-08-15 04:23 - 2018-08-03 09:21 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-08-15 04:23 - 2018-08-03 09:20 - 004049408 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-08-15 04:23 - 2018-08-03 09:20 - 003652608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-08-15 04:23 - 2018-08-03 09:20 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2018-08-15 04:23 - 2018-08-03 09:19 - 001661440 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2018-08-15 04:23 - 2018-08-03 08:45 - 000663128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2018-08-15 04:23 - 2018-08-03 08:43 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-08-15 04:23 - 2018-08-03 08:33 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2018-08-15 04:23 - 2018-08-03 08:33 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2018-08-15 04:23 - 2018-08-03 08:32 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2018-08-15 04:23 - 2018-08-03 08:30 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2018-08-15 04:23 - 2018-08-03 08:29 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2018-08-15 04:23 - 2018-08-03 08:29 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-08-15 04:23 - 2018-08-03 08:28 - 002895360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-08-15 04:23 - 2018-08-03 08:27 - 004050432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2018-08-15 04:23 - 2018-08-03 08:27 - 001469952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2018-08-15 04:23 - 2018-08-03 06:41 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-08-15 04:23 - 2018-08-03 05:49 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-08-15 04:23 - 2018-08-03 04:47 - 001034624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-08-15 04:23 - 2018-08-03 04:47 - 000128920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys
2018-08-15 04:23 - 2018-08-03 04:46 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-08-15 04:23 - 2018-08-03 04:46 - 000269248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-08-15 04:23 - 2018-08-03 04:41 - 000568600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-08-15 04:23 - 2018-08-03 04:41 - 000077608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2018-08-15 04:23 - 2018-08-03 04:41 - 000061736 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvhostsvc.dll
2018-08-15 04:23 - 2018-08-03 04:40 - 001221048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-08-15 04:23 - 2018-08-03 04:40 - 001064744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-08-15 04:23 - 2018-08-03 04:40 - 001030952 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-08-15 04:23 - 2018-08-03 04:40 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-08-15 04:23 - 2018-08-03 04:40 - 000228136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2018-08-15 04:23 - 2018-08-03 04:40 - 000136488 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-08-15 04:23 - 2018-08-03 04:40 - 000072800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2018-08-15 04:23 - 2018-08-03 04:39 - 009091480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-08-15 04:23 - 2018-08-03 04:39 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

sud2002 · Aug 20, 2018

2018-08-15 04:23 - 2018-08-03 04:39 - 007436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-08-15 04:23 - 2018-08-03 04:39 - 002829216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-08-15 04:23 - 2018-08-03 04:39 - 001457136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-08-15 04:23 - 2018-08-03 04:39 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-08-15 04:23 - 2018-08-03 04:39 - 000692240 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2018-08-15 04:23 - 2018-08-03 04:39 - 000170936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-08-15 04:23 - 2018-08-03 04:39 - 000114080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2018-08-15 04:23 - 2018-08-03 04:39 - 000075160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2018-08-15 04:23 - 2018-08-03 04:39 - 000031648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhv.sys
2018-08-15 04:23 - 2018-08-03 04:38 - 002765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-08-15 04:23 - 2018-08-03 04:38 - 001945792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-08-15 04:23 - 2018-08-03 04:38 - 001285536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2018-08-15 04:23 - 2018-08-03 04:38 - 001258288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-08-15 04:23 - 2018-08-03 04:38 - 001140576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-08-15 04:23 - 2018-08-03 04:38 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-08-15 04:23 - 2018-08-03 04:38 - 000983016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-08-15 04:23 - 2018-08-03 04:38 - 000885856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-08-15 04:23 - 2018-08-03 04:38 - 000713368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-08-15 04:23 - 2018-08-03 04:38 - 000604576 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-08-15 04:23 - 2018-08-03 04:38 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2018-08-15 04:23 - 2018-08-03 04:38 - 000115640 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2018-08-15 04:23 - 2018-08-03 04:27 - 000061032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2018-08-15 04:23 - 2018-08-03 04:26 - 006043600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-08-15 04:23 - 2018-08-03 04:25 - 006568784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-08-15 04:23 - 2018-08-03 04:25 - 002255008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-08-15 04:23 - 2018-08-03 04:25 - 001622296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-08-15 04:23 - 2018-08-03 04:25 - 001131064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-08-15 04:23 - 2018-08-03 04:25 - 000583120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2018-08-15 04:23 - 2018-08-03 04:25 - 000568568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-08-15 04:23 - 2018-08-03 04:25 - 000539168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2018-08-15 04:23 - 2018-08-03 04:23 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-08-15 04:23 - 2018-08-03 04:18 - 022714880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-08-15 04:23 - 2018-08-03 04:18 - 022007808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-08-15 04:23 - 2018-08-03 04:17 - 004380160 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-08-15 04:23 - 2018-08-03 04:17 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmgid.sys
2018-08-15 04:23 - 2018-08-03 04:16 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-08-15 04:23 - 2018-08-03 04:16 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2018-08-15 04:23 - 2018-08-03 04:15 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-08-15 04:23 - 2018-08-03 04:15 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2018-08-15 04:23 - 2018-08-03 04:14 - 004867584 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-08-15 04:23 - 2018-08-03 04:14 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2018-08-15 04:23 - 2018-08-03 04:14 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-08-15 04:23 - 2018-08-03 04:14 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSAssessment.dll
2018-08-15 04:23 - 2018-08-03 04:13 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-08-15 04:23 - 2018-08-03 04:13 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-08-15 04:23 - 2018-08-03 04:13 - 003395072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-08-15 04:23 - 2018-08-03 04:13 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-08-15 04:23 - 2018-08-03 04:13 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-08-15 04:23 - 2018-08-03 04:12 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-08-15 04:23 - 2018-08-03 04:12 - 002738688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2018-08-15 04:23 - 2018-08-03 04:12 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-08-15 04:23 - 2018-08-03 04:12 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2018-08-15 04:23 - 2018-08-03 04:12 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-08-15 04:23 - 2018-08-03 04:12 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2018-08-15 04:23 - 2018-08-03 04:11 - 007577088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-08-15 04:23 - 2018-08-03 04:11 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-08-15 04:23 - 2018-08-03 04:11 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-08-15 04:23 - 2018-08-03 04:11 - 002172928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-08-15 04:23 - 2018-08-03 04:11 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-08-15 04:23 - 2018-08-03 04:11 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-08-15 04:23 - 2018-08-03 04:11 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-08-15 04:23 - 2018-08-03 04:11 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-08-15 04:23 - 2018-08-03 04:10 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-08-15 04:23 - 2018-08-03 04:10 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2018-08-15 04:23 - 2018-08-03 04:09 - 005776896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-08-15 04:23 - 2018-08-03 04:09 - 004615680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-08-15 04:23 - 2018-08-03 04:09 - 001932288 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeangle.dll
2018-08-15 04:23 - 2018-08-03 04:09 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-08-15 04:23 - 2018-08-03 04:09 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-08-15 04:23 - 2018-08-03 04:09 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-08-15 04:23 - 2018-08-03 04:09 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-08-15 04:23 - 2018-08-03 04:09 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2018-08-15 04:23 - 2018-08-03 04:09 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-08-15 04:23 - 2018-08-03 04:08 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2018-08-15 04:23 - 2018-08-03 04:08 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-08-15 04:23 - 2018-08-03 04:08 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2018-08-15 04:23 - 2018-08-03 04:08 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-08-15 04:23 - 2018-08-03 04:08 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-08-15 04:23 - 2018-08-03 04:08 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2018-08-15 04:23 - 2018-08-03 04:08 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-08-15 04:23 - 2018-08-03 04:08 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-08-15 04:23 - 2018-08-03 04:08 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2018-08-15 04:23 - 2018-08-03 04:08 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-08-15 04:23 - 2018-08-03 04:08 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2018-08-15 04:23 - 2018-08-03 04:07 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-08-15 04:23 - 2018-08-03 04:07 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-08-15 04:23 - 2018-08-03 04:07 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2018-08-15 04:23 - 2018-08-03 04:07 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2018-08-15 04:23 - 2018-08-03 04:06 - 004191232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-08-15 04:23 - 2018-08-03 04:06 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-08-15 04:23 - 2018-08-03 04:06 - 000856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2018-08-15 04:23 - 2018-08-03 04:06 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-08-15 04:23 - 2018-08-03 04:06 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-08-15 04:23 - 2018-08-03 04:06 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-08-15 04:23 - 2018-08-03 04:05 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2018-08-15 04:23 - 2018-08-03 04:05 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-08-15 04:23 - 2018-08-03 04:05 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-08-15 04:23 - 2018-08-03 04:04 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2018-08-15 04:23 - 2018-08-03 02:54 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim
2018-08-15 04:23 - 2018-07-15 01:58 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-08-15 04:23 - 2018-07-15 01:56 - 001523240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2018-08-15 04:23 - 2018-07-15 01:44 - 006587392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-08-15 04:23 - 2018-07-15 01:44 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-08-15 04:23 - 2018-07-15 01:43 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-08-15 04:23 - 2018-07-15 01:42 - 008624128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2018-08-15 04:23 - 2018-07-15 01:42 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2018-08-15 04:23 - 2018-07-15 01:41 - 000169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2018-08-15 04:23 - 2018-07-15 01:41 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2018-08-15 04:23 - 2018-07-15 01:39 - 001787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2018-08-15 04:23 - 2018-07-15 01:39 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-08-15 04:23 - 2018-07-15 01:38 - 002051584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2018-08-15 04:23 - 2018-07-15 01:38 - 001180160 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2018-08-15 04:23 - 2018-07-15 01:38 - 001004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2018-08-15 04:23 - 2018-07-15 01:38 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2018-08-15 04:23 - 2018-07-15 01:36 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2018-08-15 04:23 - 2018-07-15 00:28 - 001327424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2018-08-15 04:23 - 2018-07-15 00:18 - 005657600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-08-15 04:23 - 2018-07-15 00:17 - 011901440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-08-15 04:23 - 2018-07-15 00:15 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2018-08-15 04:23 - 2018-07-15 00:14 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll
2018-08-15 04:23 - 2018-07-15 00:13 - 001452544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2018-08-15 04:23 - 2018-07-15 00:13 - 001308160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2018-08-15 04:23 - 2018-07-15 00:13 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2018-08-15 04:23 - 2018-07-15 00:13 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2018-08-15 04:23 - 2018-07-15 00:11 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2018-08-15 04:23 - 2018-07-14 07:46 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-08-15 04:23 - 2018-07-14 07:42 - 019525632 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-08-15 04:23 - 2018-07-14 05:37 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2018-08-15 04:23 - 2018-07-14 05:37 - 000230304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2018-08-15 04:23 - 2018-07-14 05:23 - 000760888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-08-15 04:23 - 2018-07-14 05:22 - 006813744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-08-15 04:23 - 2018-07-14 05:22 - 001144664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2018-08-15 04:23 - 2018-07-14 05:22 - 000510392 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2018-08-15 04:23 - 2018-07-14 05:22 - 000203560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2018-08-15 04:23 - 2018-07-14 05:21 - 000722824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-08-15 04:23 - 2018-07-14 05:21 - 000192920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2018-08-15 04:23 - 2018-07-14 05:20 - 000184472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2018-08-15 04:23 - 2018-07-14 05:19 - 002535032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-08-15 04:23 - 2018-07-14 05:19 - 001946752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-08-15 04:23 - 2018-07-14 05:19 - 000981920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2018-08-15 04:23 - 2018-07-14 05:19 - 000636944 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2018-08-15 04:23 - 2018-07-14 05:19 - 000483024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-08-15 04:23 - 2018-07-14 05:18 - 002563984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-08-15 04:23 - 2018-07-14 05:18 - 002371416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-08-15 04:23 - 2018-07-14 05:18 - 001017584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-08-15 04:23 - 2018-07-14 05:18 - 000930712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2018-08-15 04:23 - 2018-07-14 05:18 - 000613176 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2018-08-15 04:23 - 2018-07-14 05:18 - 000443216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2018-08-15 04:23 - 2018-07-14 05:18 - 000376216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2018-08-15 04:23 - 2018-07-14 05:17 - 006527056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-08-15 04:23 - 2018-07-14 05:17 - 002420632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-08-15 04:23 - 2018-07-14 05:17 - 000743320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2018-08-15 04:23 - 2018-07-14 05:16 - 002331576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-08-15 04:23 - 2018-07-14 05:16 - 001143096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2018-08-15 04:23 - 2018-07-14 05:16 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2018-08-15 04:23 - 2018-07-14 05:15 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-08-15 04:23 - 2018-07-14 05:15 - 001174552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-08-15 04:23 - 2018-07-14 05:15 - 000829856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2018-08-15 04:23 - 2018-07-14 05:01 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2018-08-15 04:23 - 2018-07-14 04:59 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2018-08-15 04:23 - 2018-07-14 04:59 - 005883392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2018-08-15 04:23 - 2018-07-14 04:59 - 003553280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2018-08-15 04:23 - 2018-07-14 04:58 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2018-08-15 04:23 - 2018-07-14 04:58 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2018-08-15 04:23 - 2018-07-14 04:58 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-08-15 04:23 - 2018-07-14 04:57 - 007057920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2018-08-15 04:23 - 2018-07-14 04:57 - 004331008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-08-15 04:23 - 2018-07-14 04:57 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-08-15 04:23 - 2018-07-14 04:57 - 000391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 004559872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 002697216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Controls.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 001703936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Controls.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 001558016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 000257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
2018-08-15 04:23 - 2018-07-14 04:56 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgr.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000993792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000582144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2018-08-15 04:23 - 2018-07-14 04:55 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2018-08-15 04:23 - 2018-07-14 04:55 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-08-15 04:23 - 2018-07-14 04:55 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\EASPolicyManagerBrokerHost.exe
2018-08-15 04:23 - 2018-07-14 04:55 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 003319808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 001537024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000603648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2018-08-15 04:23 - 2018-07-14 04:54 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll
2018-08-15 04:23 - 2018-07-14 04:54 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\EasPolicyManagerBrokerPS.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 004770816 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgrSvc.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2018-08-15 04:23 - 2018-07-14 04:53 - 000220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2018-08-15 04:23 - 2018-07-14 04:52 - 000972800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2018-08-15 04:23 - 2018-07-14 04:52 - 000790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2018-08-15 04:23 - 2018-07-14 04:52 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-08-15 04:23 - 2018-07-14 04:52 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2018-08-15 04:23 - 2018-07-14 04:52 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2018-08-15 04:23 - 2018-07-14 04:51 - 003376640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2018-08-15 04:23 - 2018-07-14 04:51 - 002904576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-08-15 04:23 - 2018-07-14 04:51 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-08-15 04:23 - 2018-07-14 04:51 - 001747968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2018-08-15 04:23 - 2018-07-14 04:51 - 001304064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-08-15 04:23 - 2018-07-14 04:51 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2018-08-15 04:23 - 2018-07-14 04:51 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 001773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 001457664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 001359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2018-08-15 04:23 - 2018-07-14 04:50 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-08-15 04:23 - 2018-07-14 04:49 - 001069568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-08-15 04:23 - 2018-07-14 04:49 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2018-08-15 04:23 - 2018-07-13 05:30 - 002718624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-08-12 19:02 - 2018-08-12 19:14 - 000000000 ____D C:\Users\sud20\Downloads\The Office UK S01-S03 (2001-) + David Brent
2018-08-10 22:06 - 2018-08-10 22:06 - 000000000 ____D C:\Users\sud20\AppData\Local\D3DSCache
2018-08-09 02:50 - 2018-08-09 02:50 - 000000000 ____D C:\WINDOWS\system32\%LOCALAPPDATA%
2018-08-08 04:29 - 2018-08-08 04:33 - 000000000 ____D C:\Users\sud20\Downloads\The Office [UK] Series 2 DVDRip x264 xLeAr
2018-08-08 04:27 - 2018-08-18 17:17 - 000000000 ____D C:\Users\sud20\AppData\LocalLow\uTorrent
2018-08-04 18:04 - 2018-08-08 03:04 - 000000000 ____D C:\Users\sud20\AppData\Local\CrashDumps
2018-08-04 04:26 - 2018-08-04 04:26 - 000184993 _____ C:\Users\sud20\Downloads\Order-37844043-Docs-040821.pdf
2018-08-03 21:48 - 2018-08-01 21:46 - 000181216 _____ (BullGuard Ltd.) C:\WINDOWS\system32\BgGamingMonitor.dll
2018-08-03 21:48 - 2018-08-01 21:46 - 000164688 _____ (BullGuard Ltd.) C:\WINDOWS\SysWOW64\BgGamingMonitor.dll
2018-07-29 22:53 - 2018-08-10 21:40 - 000000000 ____D C:\Users\sud20\OneDrive\Documents\My Games
2018-07-29 22:53 - 2018-08-10 21:40 - 000000000 ____D C:\Users\sud20\AppData\Local\My Games
2018-07-28 02:04 - 2018-07-28 02:04 - 000038704 _____ C:\Users\sud20\Downloads\atonement-1080p-2553.torrent
2018-07-24 02:33 - 2018-07-24 03:20 - 014482590 _____ C:\Users\sud20\Downloads\Unconfirmed 275407.crdownload
2018-07-21 23:37 - 2018-07-21 23:37 - 000178177 _____ C:\Users\sud20\Downloads\Timetable.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-08-20 01:00 - 2018-06-24 00:28 - 000000000 ____D C:\ProgramData\BullGuard
2018-08-20 00:58 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-08-20 00:55 - 2018-05-20 20:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-08-19 18:26 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-08-18 23:56 - 2018-05-20 20:46 - 000793700 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-08-18 23:56 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-08-18 23:52 - 2017-12-16 17:25 - 000000000 ____D C:\Program Files (x86)\Steam
2018-08-18 23:52 - 2017-11-22 02:27 - 000000000 ___RD C:\Users\sud20\OneDrive
2018-08-18 23:51 - 2018-05-20 20:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-08-18 23:51 - 2018-05-20 20:37 - 000399176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-08-18 23:51 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\UNP
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\PrintDialog
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ___RD C:\Program Files\Windows Defender
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\en-GB
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-08-18 23:51 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-08-18 23:51 - 2018-04-11 22:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2018-08-18 23:51 - 2017-11-22 02:31 - 000000000 __SHD C:\Users\sud20\IntelGraphicsProfiles
2018-08-18 23:51 - 2017-11-22 02:25 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-08-18 23:51 - 2017-11-22 02:25 - 000000000 ___RD C:\Users\sud20\3D Objects
2018-08-18 23:50 - 2018-05-20 20:39 - 000000000 ____D C:\Users\sud20
2018-08-18 17:17 - 2017-11-22 02:30 - 000000000 ____D C:\Users\sud20\AppData\Roaming\uTorrent
2018-08-18 15:23 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-08-18 02:55 - 2017-12-24 02:46 - 000000000 ____D C:\Users\sud20\AppData\Roaming\vlc
2018-08-18 01:22 - 2017-11-25 19:02 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-08-16 21:20 - 2017-11-23 04:32 - 000002505 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2018-08-16 21:20 - 2017-11-23 04:32 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2018-08-16 21:20 - 2017-11-23 04:32 - 000002499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2018-08-16 21:20 - 2017-11-23 04:32 - 000002463 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2018-08-16 21:20 - 2017-11-23 04:32 - 000002462 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2018-08-16 21:20 - 2017-11-23 04:32 - 000002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2018-08-16 21:20 - 2017-11-23 04:32 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2018-08-16 21:19 - 2017-11-23 04:25 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-08-15 04:28 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-08-15 04:22 - 2017-12-01 03:04 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-08-15 04:07 - 2017-12-01 03:04 - 137343192 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-08-11 01:56 - 2018-05-20 20:43 - 000003374 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-824087254-2349524542-600297333-1001
2018-08-11 01:56 - 2018-05-20 20:39 - 000002370 _____ C:\Users\sud20\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-08-10 03:55 - 2017-11-22 02:30 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-08-10 03:55 - 2017-11-22 02:30 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-08-10 01:02 - 2018-05-20 20:43 - 000003958 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1516241999
2018-08-10 01:02 - 2018-01-18 03:19 - 000001085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera browser.lnk
2018-08-10 01:02 - 2018-01-18 03:19 - 000000000 ____D C:\Program Files\Opera
2018-08-06 16:19 - 2018-04-12 00:41 - 000836480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-08-06 16:19 - 2018-04-12 00:41 - 000181120 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-08-04 13:13 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-08-01 21:33 - 2018-07-12 21:22 - 000000000 ____D C:\ProgramData\Packages
2018-07-29 18:58 - 2017-12-20 04:21 - 000000000 ____D C:\Users\sud20\Downloads\movies
2018-07-28 19:40 - 2017-11-28 00:49 - 000000000 ____D C:\Users\sud20\AppData\Local\Screencast-O-Matic-v2

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-20 20:37

==================== End of FRST.txt ============================

sud2002 · Aug 20, 2018

I'll now post my "Addition" log. Thanks in advance for your help!!

sud2002 · Aug 20, 2018

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19.08.2018 02
Ran by sud20 (20-08-2018 01:02:53)
Running from C:\Users\sud20\Downloads
Windows 10 Home Version 1803 17134.228 (X64) (2018-05-20 19:44:17)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-824087254-2349524542-600297333-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-824087254-2349524542-600297333-503 - Limited - Disabled)
Guest (S-1-5-21-824087254-2349524542-600297333-501 - Limited - Disabled)
sud20 (S-1-5-21-824087254-2349524542-600297333-1001 - Administrator - Enabled) => C:\Users\sud20
WDAGUtilityAccount (S-1-5-21-824087254-2349524542-600297333-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: BullGuard Antivirus (Disabled - Out of date) {13E9CAA5-762A-794E-2DA9-245D5622A105}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: BullGuard Antispyware (Disabled - Out of date) {A8882B41-5010-76C0-1719-1F2F2DA5EBB8}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: BullGuard Firewall (Enabled) {2BD24B80-3C45-7816-06F6-8D68A8F1E67E}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-824087254-2349524542-600297333-1001\...\uTorrent) (Version: 3.5.3.44494 - BitTorrent Inc.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.011.20058 - Adobe Systems Incorporated)
BullGuard Internet Security (HKLM\...\BullGuard) (Version: 18.1 - BullGuard Ltd.)
Dolby Audio X2 Windows API SDK (HKLM\...\{AA950AA4-CD9B-4D81-B6C0-BFABB7A24261}) (Version: 0.7.5.65 - Dolby Laboratories, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 68.0.3440.106 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4836 - Intel Corporation)
Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 16.0.10325.20118 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-824087254-2349524542-600297333-1001\...\OneDriveSetup.exe) (Version: 18.131.0701.0007 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.10325.20118 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.10325.20118 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.10325.20118 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.10325.20118 - Microsoft Corporation) Hidden
Opera Stable 54.0.2952.71 (HKLM-x32\...\Opera 54.0.2952.71) (Version: 54.0.2952.71 - Opera Software)
paint.net (HKLM\...\{E8FA8815-3817-4128-A814-E2EAC456ADF0}) (Version: 4.0.21 - dotPDN LLC)
Samsung Printer Center (HKLM-x32\...\Samsung Printer Center) (Version: 1.0.0.12 - Samsung Electronics Co., Ltd.)
Shotcut (HKLM-x32\...\Shotcut) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Uninstall Samsung Printer Software (HKLM-x32\...\TotalUninstaller) (Version: 4.0.0.12 - Samsung Electronics CO., LTD.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.8 - VideoLAN)
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.)
Web Launch Recorder (HKU\S-1-5-21-824087254-2349524542-600297333-1001\...\WebLaunchRecorder) (Version: 2.0 - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [BackupOverlayErr] -> {8749448C-D907-45BF-A842-4D3898894AC8} => C:\Program Files\BullGuard Ltd\BullGuard\BackupShellHook.dll [2018-08-01] (BullGuard Ltd.)
ShellIconOverlayIdentifiers: [BackupOverlayInProgress] -> {3FFBF330-7839-476B-BE14-2C8597CE11B6} => C:\Program Files\BullGuard Ltd\BullGuard\BackupShellHook.dll [2018-08-01] (BullGuard Ltd.)
ShellIconOverlayIdentifiers: [BackupOverlaySynced] -> {C62CF4DB-48CB-4B03-BFD0-30A29125FA49} => C:\Program Files\BullGuard Ltd\BullGuard\BackupShellHook.dll [2018-08-01] (BullGuard Ltd.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_09afa4e14ee4fad2\igfxDTCM.dll [2017-11-24] (Intel Corporation)
ContextMenuHandlers6: [bgshellext] -> {F4BF1657-195F-4A0F-ACA2-9AE99D65BC0E} => C:\Program Files\BullGuard Ltd\BullGuard\BgShellExt.dll [2018-08-01] (BullGuard Ltd.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0041E56B-27EC-4AED-8759-4209F6F8682E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-08-16] (Microsoft Corporation)
Task: {05951042-20E1-4EDE-B482-67C21C4FDF27} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe
Task: {11A14766-0A88-4D34-9393-4F58502CA6EC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-08-09] (Microsoft Corporation)
Task: {26443149-051F-420D-B224-5B0221DA774C} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe [2018-08-16] (Microsoft Corporation)
Task: {3A235551-3F28-41B6-9F27-098DCEF6AC5E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-08-09] (Microsoft Corporation)
Task: {50EF22CA-EBCB-4D80-9216-1CB52F815599} - System32\Tasks\BullGuard\BullGuardUpdate2 => C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate2.exe [2018-08-01] (BullGuard Ltd.)
Task: {521BC054-EB52-44AA-92A8-5FCC888A02A6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-22] (Google Inc.)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {98CA8123-1F5F-4D2D-B358-4530449B7FED} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-08-16] (Microsoft Corporation)
Task: {AA739D35-33D8-46BC-9787-36CC73F5A2BE} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-08-16] (Microsoft Corporation)
Task: {AD71CADD-88B0-4577-B736-E28115E16B7B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-08-16] (Microsoft Corporation)
Task: {C696A98B-CFB1-4407-B57E-D9D210AFDB56} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-22] (Google Inc.)
Task: {DFDE009A-848A-476D-BBC1-6B136B29116E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated)
Task: {EC4961B0-7FB5-464B-9123-D793E5281B00} - System32\Tasks\Opera scheduled Autoupdate 1516241999 => C:\Program Files\Opera\launcher.exe [2018-08-07] (Opera Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2018-08-03 21:48 - 2018-08-01 21:46 - 000744296 _____ () C:\Program Files\BullGuard Ltd\BullGuard\SQLite.dll
2018-08-03 21:48 - 2018-08-01 21:46 - 000088936 _____ () C:\Program Files\BullGuard Ltd\BullGuard\zlib1.dll
2018-08-03 21:48 - 2018-08-01 21:45 - 000528744 _____ () C:\Program Files\BullGuard Ltd\BullGuard\LibXml2.dll
2017-12-01 03:43 - 2015-01-29 12:02 - 000022528 _____ () C:\WINDOWS\System32\us005lm.dll
2016-02-15 22:01 - 2016-02-15 22:01 - 000031256 _____ () C:\WINDOWS\System32\us008lm.dll
2018-08-03 21:48 - 2018-08-01 21:46 - 000072552 _____ () C:\Program Files\BullGuard Ltd\BullGuard\LIBBZ2.dll
2017-12-01 03:43 - 2017-12-01 03:43 - 000143664 _____ () C:\Windows\SysWOW64\SecUPDUtilSvc.exe
2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2017-12-19 22:45 - 2017-12-19 22:46 - 000948736 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.1.18.0_x64__8wekyb3d8bbwe\e_sqlite3.dll
2018-03-28 23:23 - 2018-03-28 23:23 - 002426040 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.1.18.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
2018-03-28 23:23 - 2018-03-28 23:23 - 000381440 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.1.18.0_x64__8wekyb3d8bbwe\Microsoft.Notes.Upgrade.dll
2017-12-01 03:03 - 2017-12-01 03:03 - 000843672 _____ () C:\Program Files\WindowsApps\Microsoft.Services.Store.Engagement_10.0.17112.0_x64__8wekyb3d8bbwe\Microsoft.Services.Store.Engagement.dll
2018-03-15 23:14 - 2018-03-15 23:15 - 000631296 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.1.18.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 004644864 _____ () C:\Windows\System32\Windows.UI.Input.Inking.Analysis.dll
2018-08-15 04:23 - 2018-08-03 04:09 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-07-16 23:04 - 2018-07-16 23:05 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2018-07-16 23:04 - 2018-07-16 23:05 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2018-07-16 23:04 - 2018-07-16 23:05 - 022373888 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2018-07-16 23:04 - 2018-07-16 23:05 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\skypert.dll
2018-07-16 23:04 - 2018-07-16 23:05 - 000653824 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2018-08-11 15:49 - 2018-08-11 15:53 - 035124224 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18071.11811.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-08-11 15:49 - 2018-08-11 15:53 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18071.11811.0_x64__8wekyb3d8bbwe\SharedUI.dll
2018-08-11 15:49 - 2018-08-11 15:53 - 006417408 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18071.11811.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-11-22 02:58 - 2017-11-22 02:58 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18071.11811.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-08-11 15:49 - 2018-08-11 15:53 - 009010176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18071.11811.0_x64__8wekyb3d8bbwe\EntPlat.dll
2018-08-10 03:55 - 2018-08-08 01:41 - 004855640 _____ () C:\Program Files (x86)\Google\Chrome\Application\68.0.3440.106\libglesv2.dll
2018-08-10 03:55 - 2018-08-08 01:41 - 000115544 _____ () C:\Program Files (x86)\Google\Chrome\Application\68.0.3440.106\libegl.dll
2018-07-27 23:36 - 2018-07-27 23:43 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2018-07-27 23:36 - 2018-07-27 23:43 - 068154880 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2018-07-19 02:59 - 2018-07-19 03:01 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll
2018-07-19 02:59 - 2018-07-19 03:01 - 004139008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2017-11-22 02:59 - 2017-11-22 03:01 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2018-04-24 21:34 - 2018-04-24 21:40 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll
2018-07-19 02:59 - 2018-07-19 03:01 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll
2018-04-06 03:09 - 2018-04-06 03:14 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2018-07-27 23:36 - 2018-07-27 23:43 - 014919168 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2018-07-19 02:59 - 2018-07-19 03:01 - 003982848 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2018-07-27 23:36 - 2018-07-27 23:43 - 002938880 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2018-05-31 00:29 - 2018-05-31 00:32 - 000872448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2018-07-19 02:59 - 2018-07-19 03:01 - 001396224 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2018-07-27 23:36 - 2018-07-27 23:43 - 004584960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-07-27 23:36 - 2018-07-27 23:43 - 000162816 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\SKU.dll
2016-09-19 04:02 - 2016-09-19 04:02 - 000163336 _____ () C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
2017-12-16 17:27 - 2018-07-21 22:07 - 000854304 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2017-12-16 17:27 - 2018-08-08 23:43 - 002644768 _____ () C:\Program Files (x86)\Steam\video.dll
2017-12-16 17:27 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2017-12-16 17:27 - 2017-12-20 02:43 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll
2017-12-16 17:27 - 2017-12-20 02:43 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll
2017-12-16 17:27 - 2017-12-20 02:43 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll
2017-12-16 17:26 - 2017-12-20 02:43 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll
2017-12-16 17:27 - 2017-12-20 02:43 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll
2017-12-16 17:27 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2017-12-16 17:27 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2017-12-16 17:27 - 2018-08-08 23:43 - 001015072 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2017-12-16 17:27 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-12-16 17:29 - 2018-07-21 22:07 - 000854304 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-12-16 17:29 - 2018-07-20 23:24 - 083524896 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-12-16 17:29 - 2018-07-20 23:24 - 003732256 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libglesv2.dll
2017-12-16 17:29 - 2018-07-20 23:24 - 000086304 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libegl.dll
2017-12-16 17:27 - 2018-07-03 22:58 - 000137504 _____ () C:\Program Files (x86)\Steam\winh264.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\sud20\OneDrive\Documents\desktop.ini:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\sud20\OneDrive\Documents\My Games:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\sud20\OneDrive\Documents\PCProtect:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [242]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsUpdate => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 14:46 - 2017-09-29 14:44 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-824087254-2349524542-600297333-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\sud20\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\lenovowallpaper.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{1E9A1804-29C5-4469-AA2B-4D050A19CA8E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{0C49AE0A-7FBA-4106-B9EE-B02D2AC34541}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{54287A14-3F43-41BD-B28C-03A87A9E852A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{963FED55-FD87-4550-8704-F2309171CA33}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5CD9C62E-8023-419B-A09A-78171675EFBB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3ED7A536-37FA-4A2A-A301-36F121226C92}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Printer Center\SamsungPrinterCenter.exe
FirewallRules: [{AEB8AA7C-E8CA-46FD-B11C-B1A15D61824F}] => (Allow) C:\Users\sud20\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0977099D-F0A6-4F63-B15A-4E1B92965F6D}] => (Allow) C:\Users\sud20\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5419DA86-432C-407B-BADC-CB488C97207A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{B0A5F977-A5F6-4DB0-B62D-64ABD82D7B1B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{5D722FAD-5AF1-473F-9875-7C5BF37C0CAC}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{75A14670-82C6-41A3-B94F-CCACAB50AE71}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{E916C7DB-0A71-405C-96AC-F23F1CCE77E6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{1A3DF0AD-047D-461F-ABF0-246AD547CCCB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{91542C12-36A4-4541-8315-BD7CE4CE9C72}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization IV\Civilization4.exe
FirewallRules: [{4C285E2A-4A49-479C-94DB-3AE69A88C1DE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization IV\Civilization4.exe
FirewallRules: [{DFCFB4E1-D33E-4E21-9EEF-1430294DD741}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization IV Beyond the Sword\Beyond the Sword\Civ4BeyondSword.exe
FirewallRules: [{63A68B60-D41A-453A-99D0-C40E9C6481C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization IV Beyond the Sword\Beyond the Sword\Civ4BeyondSword.exe
FirewallRules: [{D0EB6A81-FD2D-4E79-A07A-41B7ADF2C19B}] => (Allow) C:\Program Files\Opera\54.0.2952.64\opera.exe
FirewallRules: [{270D6C6D-B5A9-4975-A47D-FD753934C7C1}] => (Allow) C:\Program Files\Opera\54.0.2952.71\opera.exe
FirewallRules: [{FD2FE353-70D0-499C-BDEA-68C09982D7E8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

19-08-2018 00:06:33 Scheduled Checkpoint

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (08/16/2018 01:06:18 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" on line 1.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Please use sxstrace.exe for detailed diagnosis.

Error: (08/09/2018 02:49:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: LogonUI.exe, version: 10.0.17134.1, time stamp: 0x5d557fa4
Faulting module name: Windows.UI.Xaml.dll, version: 10.0.17134.81, time stamp: 0x4f4899f8
Exception code: 0xc0000005
Fault offset: 0x0000000000215e98
Faulting process ID: 0x3018
Faulting application start time: 0x01d42f7f48ae7f93
Faulting application path: C:\WINDOWS\system32\LogonUI.exe
Faulting module path: C:\Windows\System32\Windows.UI.Xaml.dll
Report ID: 1bdf25a6-70e6-4371-be77-29b13bb6d646
Faulting package full name:
Faulting package-relative application ID:

Error: (08/04/2018 06:04:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Civ4BeyondSword.exe, version: 3.1.9.0, time stamp: 0x53869b61
Faulting module name: Civ4BeyondSword.exe, version: 3.1.9.0, time stamp: 0x53869b61
Exception code: 0xc00000fd
Fault offset: 0x005a22ca
Faulting process ID: 0x4310
Faulting application start time: 0x01d42bd319ffbea6
Faulting application path: C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization IV Beyond the Sword\beyond the sword\Civ4BeyondSword.exe
Faulting module path: C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization IV Beyond the Sword\beyond the sword\Civ4BeyondSword.exe
Report ID: 806ed16e-0c7e-4aa8-96f8-c61106d669fa
Faulting package full name:
Faulting package-relative application ID:

Error: (07/29/2018 02:46:14 AM) (Source: Windows Search Service) (EventID: 3031) (User: )
Description: A document ID cannot be allocated.

Context: Application, SystemIndex Catalogue

Details:
The content index service was stopped. (HRESULT : 0x80041812) (0x80041812)

Error: (07/18/2018 02:41:14 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" on line 1.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Please use sxstrace.exe for detailed diagnosis.

Error: (07/14/2018 06:13:32 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Cities.exe version 5.6.6.44065 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 3104

Start Time: 01d41af8bbdf8a75

Termination Time: 60000

Application Path: C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe

Report Id: 07ff6e14-f147-4254-9002-d5f1f457c20b

Faulting package full name:

Faulting package-relative application ID:

Error: (07/12/2018 10:14:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: svchost.exe_UsoSvc, version: 10.0.17134.1, time stamp: 0xa38b9ab2
Faulting module name: wuaueng.dll, version: 10.0.17134.112, time stamp: 0x16019f1b
Exception code: 0xc0000005
Fault offset: 0x000000000011241f
Faulting process ID: 0x1e0c
Faulting application start time: 0x01d404348693444d
Faulting application path: c:\windows\system32\svchost.exe
Faulting module path: c:\windows\system32\wuaueng.dll
Report ID: afff528f-c847-4879-974a-43a27bdd73ab
Faulting package full name:
Faulting package-relative application ID:

Error: (07/08/2018 02:03:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: DllHost.exe, version: 10.0.17134.1, time stamp: 0x5cfd3427
Faulting module name: Windows.Security.Authentication.Web.Core.dll, version: 10.0.17134.112, time stamp: 0x1e195eb7
Exception code: 0xc0000005
Fault offset: 0x000202b2
Faulting process ID: 0x1110
Faulting application start time: 0x01d4165780a50ede
Faulting application path: C:\WINDOWS\SysWOW64\DllHost.exe
Faulting module path: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll
Report ID: eb76dae3-1c26-4414-ad87-d22b7187df24
Faulting package full name:
Faulting package-relative application ID:

System errors:
=============
Error: (08/20/2018 12:58:57 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NBLGGH4QGHW-Microsoft.MicrosoftStickyNotes.

Error: (08/19/2018 01:45:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (08/19/2018 01:33:52 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (08/19/2018 12:01:49 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (08/18/2018 11:53:45 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (08/18/2018 11:52:28 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-MEL1VEJ)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user DESKTOP-MEL1VEJ\sud20 SID (S-1-5-21-824087254-2349524542-600297333-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (08/18/2018 11:52:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Steam Client Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (08/18/2018 11:52:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.

Windows Defender:
===================================
Date: 2018-06-14 23:35:42.555
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {731E2496-E507-4571-A29F-37337942636F}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-06-13 02:58:33.465
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {1DC0A541-669F-4135-B4D7-31798ACBB522}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-06-03 02:38:17.944
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {BC37B1F4-A28B-4F85-B3AE-411538DE9DBB}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-06-01 04:12:25.399
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {85967FE8-CDAB-41D4-B82D-3AAA01838C12}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-06-01 03:29:24.267
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {9CDF1E32-5AB3-4783-8905-9381B9419007}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-06-04 21:12:00.507
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.269.565.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.14901.4
Error code: 0x8024402c
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

CodeIntegrity:
===================================

Date: 2018-08-20 01:00:57.503
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\win32kbase.sys that did not meet the Microsoft signing level requirements.

Date: 2018-06-16 15:01:03.805
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2018-05-31 03:21:33.004
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
Percentage of memory in use: 80%
Total physical RAM: 8036.01 MB
Available physical RAM: 1561.6 MB
Total Virtual: 15716.01 MB
Available Virtual: 6509 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:199.59 GB) (Free:35.15 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.92 GB) NTFS

\\?\Volume{6906bc3a-03ac-48bd-9eb0-f1e016458384}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.62 GB) NTFS
\\?\Volume{e31c319d-e11b-4f57-87a4-960527ef7474}\ (LENOVO_PART) (Fixed) (Total:11.66 GB) (Free:1.25 GB) NTFS
\\?\Volume{48a2dcce-15e1-4ed2-9ece-766a0d5f9d7e}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.21 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: B1FAE9DE)

Partition: GPT.

==================== End of Addition.txt ============================

Broni · Aug 20, 2018

Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2

Close all the running programs
Double click on downloaded setup.exe file to install the program.
Click on Start Scan button.
Click on another Start Scan button.
Wait until the Status box shows Scan Finished
Click on Remove Selected.
Wait until the Status box shows Deleting Finished.
Click on Report and copy/paste the content of the Notepad into your next reply.
RKreport.txt could also be found on your desktop.
If more than one log is produced post all logs.

Please download Malwarebytes to your desktop.

Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
Then click Finish.
Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
Restart your computer when prompted to do so.
The Scan log is available throughout History ->Application logs. Please post it contents in your next reply.

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8/10 users right-click and select Run As Administrator
The tool will start to update the database if one is required.
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
After the scan has finished, click on the Logfile button.
A window will open which lists the logs of your scans.
Click on the Scan tab.
Double-click the most recent scan which will be at the top of the list....the log will appear.
Review the results...see note below
After reviewing the log, click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[CX].txt) will open automatically (where the largest value of X represents the most recent report).
To open a Cleaning log, launch AdwareClearer, click on the Logfile button, click on the Cleaning tab and double-click the log at the top of the list.
Copy and paste the contents of AdwCleaner[CX].txt in your next reply.
A copy of all logfiles are saved to C:\AdwCleaner.

-- Note: The contents of the AdwCleaner log file may be confusing. Unless you see a program name or entry that you recognize and know should not be removed, don't worry about it. If you see an entry you want to keep, return to AdwCleaner before cleaning...all detected items will be listed (and checked) in each tab. Click on and uncheck any items you want to keep.

sud2002 · Aug 21, 2018

RogueKiller V12.12.32.0 (x64) [Aug 20 2018] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : https://forum.adlice.com
Website : http://www.adlice.com/download/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 10 (10.0.17134) 64 bits version
Started in : Normal mode
User : sud20 [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller64.exe
Mode : Delete -- Date : 08/21/2018 20:19:00 (Duration : 00:27:16)
Switches : -refid

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 0 ¤¤¤

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 10 ¤¤¤
[PUP.PCProtect][Folder] C:\Users\sud20\AppData\Roaming\PCProtect -> Deleted
[PUP.PCProtect][File] C:\Users\sud20\AppData\Roaming\PCProtect\3.0.0\avira32redist.zip -> Deleted
[PUP.PCProtect][Folder] C:\Users\sud20\AppData\Roaming\PCProtect\3.0.0 -> Deleted
[PUP.PCProtect][File] C:\Users\sud20\AppData\Roaming\PCProtect\vdf_1526334971.zip -> Deleted
[PUP.uTorrentAds][File] C:\Users\sud20\AppData\Roaming\uTorrent\updates\3.5.0_44090\utorrentie.exe -> Deleted
[PUP.uTorrentAds][File] C:\Users\sud20\AppData\Roaming\uTorrent\updates\3.5.0_44294\utorrentie.exe -> Deleted
[PUP.uTorrentAds][File] C:\Users\sud20\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe -> Deleted
[PUP.uTorrentAds][File] C:\Users\sud20\AppData\Roaming\uTorrent\updates\3.5.3_44358\utorrentie.exe -> Deleted
[PUP.uTorrentAds][File] C:\Users\sud20\AppData\Roaming\uTorrent\updates\3.5.3_44396\utorrentie.exe -> Deleted
[PUP.uTorrentAds][File] C:\Users\sud20\AppData\Roaming\uTorrent\updates\3.5.3_44428\utorrentie.exe -> Deleted
[PUP.uTorrentAds][File] C:\Users\sud20\AppData\Roaming\uTorrent\updates\3.5.3_44494\utorrentie.exe -> Removed at reboot [5]
[PUP.Gen1][Folder] C:\Program Files\WebDiscoverBrowser -> Deleted
[PUP.Gen1][File] C:\Program Files\WebDiscoverBrowser\4.25.2\d3dcompiler_47.dll -> Deleted
[PUP.Gen1][Folder] C:\Program Files\WebDiscoverBrowser\4.25.2 -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\bins\subinacl.exe -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\bins -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\account.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\addon.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\avconfig.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\avlic.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\certs.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\details.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\gcld -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\idpro.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\prefs.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\sdet.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\ui.jdat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\data\vpn_locations.jdat -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\data -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\amd64\devcon.exe -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\amd64\OemWin2k.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\amd64\tap0901.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\amd64\tap0901.map -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\amd64\tap0901.pdb -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\amd64\tap0901.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\driver\amd64 -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\i386\devcon.exe -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\i386\OemWin2k.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\i386\tap0901.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\i386\tap0901.map -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\i386\tap0901.pdb -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\driver\i386\tap0901.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\driver\i386 -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\driver -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\install.name -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\installoptions.jdat -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\json -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\lib_SCAPI.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\locale\de_DE.mo -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\locale\es_ES.mo -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\locale\fr_FR.mo -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\locale\it_IT.mo -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\locale\nl_NL.mo -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\locale\pt_PT.mo -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\locale -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\logs\main.log -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\logs\savapi.log -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\logs\security_service.log -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\logs\service-1526335174.logc -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\logs\service_install.log -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\logs -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\Manifest\chrome-manifest.json -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\Manifest\firefox-manifest.json -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\Manifest -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\Microsoft.VC90.CRT.manifest -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\msvcm90.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\msvcp120.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\msvcp90.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\msvcr120.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\msvcr90.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\ovpn\libeay32.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\ovpn\liblzo2-2.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\ovpn\libpkcs11-helper-1.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\ovpn\openvpn.exe -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\ovpn\openvpnserv.exe -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\ovpn\openvpn_down.bat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\ovpn\openvpn_up.bat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\ovpn\ssleay32.dll -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\ovpn -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\PasswordExtension.Win.exe.config -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\PCProtect.exe.config -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\queues\ev4u0mhy.nzd.queue -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\queues -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aebb.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aecrypto.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aedroid.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aeemu.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aeexp.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aegen.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aehelp.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aeheur_agen.dat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aelibinf.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aelidb.dat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aemobile.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aemvdb.dat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aeoffice.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aepack.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aerdl.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aesbx.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aescn.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aescript.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aeset.dat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aevdf.dat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\aevdf.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\apcfile.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\apchash.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate-savapilib-engine.conf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate.exe -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate.log -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\ave2\win32\int\aecore.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\ave2\win32\int\aeheur.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\ave2\win32\int\aescript.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\ave2\win32\int\aeset.dat -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\ave2\win32\int -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\ave2\win32 -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\ave2 -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\aevdf.dat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00019.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00020.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00021.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00042.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00043.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00044.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00045.vdf -> Deleted

sud2002 · Aug 21, 2018

[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00046.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00047.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00048.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00049.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00050.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00051.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00052.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00053.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00054.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00055.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00056.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00057.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00058.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00059.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00060.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00061.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00062.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00063.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00064.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00065.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00066.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00067.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00068.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00069.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00070.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00071.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00072.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00073.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00074.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00075.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00076.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00077.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00078.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00079.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00080.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00081.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00082.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00083.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00084.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00085.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00086.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00087.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00088.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00089.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00090.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00091.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00092.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00093.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00094.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00095.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00096.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00097.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00098.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00099.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00100.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00101.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00102.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00103.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00104.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00105.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00106.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00107.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00108.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00109.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00110.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00111.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00112.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00113.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00114.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00115.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00116.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00117.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00118.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00119.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00120.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00121.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00122.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00123.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00124.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00125.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00126.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00127.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00128.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00129.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00130.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00131.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00132.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00133.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00134.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00135.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00136.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00137.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00138.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00139.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00140.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00141.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00142.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00143.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00144.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00145.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00146.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00147.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00148.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00149.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00150.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00151.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00152.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00153.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00154.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00155.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00156.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00157.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00158.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00159.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00160.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00161.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00162.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00163.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00164.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00165.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00166.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00167.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00168.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00169.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00170.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00171.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00172.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00173.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00174.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00175.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00176.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00177.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00178.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00179.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00180.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00181.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00182.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00183.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00184.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00185.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00186.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00187.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00188.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00189.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00190.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00191.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00192.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00193.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00194.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00195.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00196.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00197.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00198.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00199.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00200.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00201.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00202.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00203.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00204.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00205.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00206.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00207.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00208.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00209.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00210.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00211.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00212.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00213.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00214.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00215.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00216.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00217.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00218.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00219.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00220.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00221.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00222.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00223.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00224.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00225.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00226.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00227.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00228.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00229.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00230.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00231.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00232.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00233.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00234.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00235.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00236.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00237.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00238.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00239.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00240.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00241.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00242.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00243.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00244.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00245.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00246.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00247.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00248.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00249.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00250.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00251.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00252.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00253.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00254.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf\xbv00255.vdf -> Deleted

sud2002 · Aug 21, 2018

[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup\x_vdf -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_backup -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\avupdate_msg.avr -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\cacert.crt -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\HBEDV.KEY -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\idx -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\local000.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\msvcp120.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\msvcr120.dll -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\names_cache -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\on-access-drivers-install.cmd -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\on-access-drivers-uninstall.cmd -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\README -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\utils\on-access-drivers-final.cmd -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\utils\on-access-drivers-post.cmd -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\utils\on-access-drivers-pre.cmd -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\utils\sd_inst.exe -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\utils -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\vista\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\vista\avgntflt.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\vista\avgntflt.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\vista\avipbb.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\vista\avipbb.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\vista\avkmgr.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\vista\avkmgr.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\vista -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avgntflt.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avgntflt.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avgntflt.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avipbb.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avipbb.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avipbb.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avkmgr.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avkmgr.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7\avkmgr.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win7 -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avgntflt.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avgntflt.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avgntflt.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avipbb.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avipbb.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avipbb.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avkmgr.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avkmgr.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8\avkmgr.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\win8 -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\xp\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\xp\avgntflt.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\xp\avgntflt.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\xp\avipbb.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\xp\avipbb.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\xp\avkmgr.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\xp\avkmgr.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32\xp -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win32 -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avgntflt.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avgntflt.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avgntflt.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avipbb.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avipbb.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avipbb.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avkmgr.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avkmgr.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista\avkmgr.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\vista -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avgntflt.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avgntflt.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avgntflt.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avipbb.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avipbb.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avipbb.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avkmgr.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avkmgr.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7\avkmgr.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win7 -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avgntflt.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avgntflt.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avgntflt.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avipbb.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avipbb.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avipbb.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avkmgr.cat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avkmgr.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8\avkmgr.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\win8 -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\xp\avgio.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\xp\avgntflt.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\xp\avgntflt.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\xp\avipbb.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\xp\avipbb.sys -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\xp\avkmgr.inf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\xp\avkmgr.sys -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64\xp -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access\win64 -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\on_access -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\productname.dat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\savapi.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\savapiclient.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32\int\aecore.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32\int\aecore.dll.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32\int\aeheur.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32\int\aeheur.dll.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32\int\aescript.dll -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32\int\aescript.dll.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32\int\aeset.dat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32\int\aeset.dat.gz -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32\int -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2\win32 -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\ave2 -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\idx\ave2-win32-int.info -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\idx\ave2-win32-int.info.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\idx\master.idx -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\idx\savapi4lib-win32-en.info -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\idx\savapi4lib-win32-en.info.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\idx\xvdf.info -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\idx\xvdf.info.gz -> Deleted
[PUP.PCProtect][Folder] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\idx -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\aevdf.dat -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\aevdf.dat.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00020.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00020.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00021.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00021.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00042.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00042.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00043.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00043.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00044.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00044.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00045.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00045.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00046.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00046.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00047.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00047.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00048.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00048.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00049.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00049.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00050.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00050.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00051.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00051.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00052.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00052.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00053.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00053.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00054.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00054.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00055.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00055.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00056.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00056.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00057.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00057.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00058.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00058.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00059.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00059.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00060.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00060.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00061.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00061.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00062.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00062.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00063.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00063.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00064.vdf -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00064.vdf.gz -> Deleted
[PUP.PCProtect][File] C:\Program Files (x86)\PCProtect\SAVAPI\tmp\avupdate_tmp_pZ9B5N\x_vdf\xbv00065.vdf -> Deleted

sud2002 · Aug 21, 2018

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 21/08/2018
Scan Time: 21:00
Log File: e81186fa-a57c-11e8-b82c-f0d5bf23c5bb.json

-Software Information-
Version: 3.5.1.2522
Components Version: 1.0.421
Update Package Version: 1.0.6445
Licence: Free

-System Information-
OS: Windows 10 (Build 17134.228)
CPU: x64
File System: NTFS
User: DESKTOP-MEL1VEJ\sud20

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 283318
Threats Detected: 0
(No malicious items detected)
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 1 min, 51 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

sud2002 · Aug 21, 2018

I cannot submit Adware log as I keep getting the below message when I try to submit on here:

By the way, thank you soo much for taking time out to help out!!

Broni · Aug 21, 2018

Attach it please.

How is Chrome doing now?

sud2002 · Aug 21, 2018

Hey - Unfortunately I'm still getting the same pop ups, I've not attached the file.

Once again, thank you!

Broni · Aug 21, 2018

You attached MBAM log not AdwCleaner.

sud2002 · Aug 22, 2018

Ah sorry! I've now attached the Adware log.

thanks

Broni · Aug 22, 2018

# -------------------------------
# Malwarebytes AdwCleaner 7.2.2.0
# -------------------------------
# Build: 07-17-2018
# Database: 2018-08-20.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 08-21-2018
# Duration: 00:00:12
# OS: Windows 10 Home
# Scanned: 41803
# Detected: 4

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\glassinbox.com
PUP.Optional.PCProtect HKLM\System\CurrentControlSet\Services\EventLog\Application\SecurityService

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Legacy SwagButton

***** [ Chromium URLs ] *****

PUP.Optional.Legacy Ask Jeeves

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

Broni · Aug 22, 2018

Reset Chrome...
Click on "Customize and control Google Chrome":

Click "Settings" then "Show advanced settings" at the bottom of the screen.
Click "Reset browser settings" button.
Restart Chrome.

If the above didn't help....

Reinstall Chrome...
If you want to save your bookmarks...
How to Backup Bookmarks in Google Chrome
If you want to save your passwords as well see here: http://www.intowindows.com/how-to-backup-saved-passwords-in-google-chrome-browser/

Close all Chrome windows and tabs.
Go to the Start menu > Control Panel. (Windows 8 users: Learn how to access the Control Panel)
Click Programs and Features.
Double-click Google Chrome.
Click Uninstall from the confirmation dialog. Delete your user profile information, like your browser preferences, bookmarks, and history, by selecting the "Also delete your browsing data" checkbox.

Install fresh copy.

Let me know.

Broni · Aug 27, 2018

Still with me?

sud2002 · Aug 30, 2018

Hello - Sorry was just away for the week, I'm back now and looking at this now, will get back to you.

Broni · Aug 30, 2018

Cool

sud2002 · Aug 30, 2018

Resetting Chrome seems to have fixed it!

Thank you soo much for your time and effort

Broni · Aug 31, 2018

Good news

Good luck and stay safe

Resolved Keep getting Chrome popups (finfantal.info)

Posts: 14 +0

Posts: 7,855 +918

Posts: 56,041 +516

Posts: 14 +0

Posts: 14 +0

Posts: 14 +0

Posts: 14 +0

Posts: 56,041 +516

Posts: 14 +0

Posts: 14 +0

Posts: 14 +0

Posts: 14 +0

Posts: 14 +0

Posts: 56,041 +516

Posts: 14 +0

Attachments

Posts: 56,041 +516

Posts: 14 +0

Attachments

Posts: 56,041 +516

Posts: 56,041 +516

Posts: 56,041 +516

Posts: 14 +0

Posts: 56,041 +516

Posts: 14 +0

Posts: 56,041 +516

Similar threads