その1
OTL logfile created on: 2019/12/10 18:34:12 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\kyon\Downloads
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.18362.0)
Locale: 00000411 | Country: 日本 | Language: JPN | Date Format:
3.92 Gb Total Physical Memory | 1.57 Gb Available Physical Memory | 40.10% Memory free
7.92 Gb Paging File | 4.92 Gb Available in Paging File | 62.11% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 861.85 Gb Total Space | 786.39 Gb Free Space | 91.24% Space Free | Partition Type: NTFS
Drive D: | 50.00 Gb Total Space | 49.90 Gb Free Space | 99.81% Space Free | Partition Type: NTFS
Computer Name: KYON-PC | User Name: kyon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - File not found --
PRC - [2019/12/10 18:31:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\kyon\Downloads\OTL.exe
PRC - [2019/11/23 22:05:05 | 001,585,000 | ---- | M] (Microsoft Corporation) -- C:\Users\kyon\AppData\Local\Microsoft\OneDrive\OneDrive.exe
PRC - [2019/11/14 00:30:34 | 000,673,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fontdrvhost.exe
PRC - [2019/11/06 00:27:22 | 000,299,304 | ---- | M] (Google LLC) -- C:\Program Files (x86)\Google\Update\1.3.35.342\GoogleCrashHandler.exe
PRC - [2012/03/26 17:54:26 | 000,068,208 | ---- | M] (TOSHIBA) -- C:\Program Files (x86)\Mouse HScroll Application\HScrollFun.exe
PRC - [2012/03/19 16:00:10 | 000,030,064 | ---- | M] () -- c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe
PRC - [2012/02/28 19:20:40 | 000,079,808 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files (x86)\TOSHIBA\RegzaLinkDubbing\TosRzTfSvc.exe
PRC - [2012/02/28 17:13:56 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2012/02/28 17:13:54 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2012/02/27 03:01:56 | 000,291,608 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
PRC - [2012/02/21 12:29:38 | 000,161,560 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
PRC - [2012/02/21 12:29:28 | 000,128,280 | ---- | M] () -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
PRC - [2011/11/08 18:23:32 | 000,087,336 | ---- | M] () -- C:\Program Files (x86)\CyberLink\RZ Player\Kernel\DMP\CLHNService.exe
PRC - [2011/10/21 16:28:48 | 000,167,936 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Pair & Share\PairAndShare.exe
PRC - [2011/10/19 08:43:38 | 000,718,720 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe
PRC - [2011/08/31 22:15:56 | 002,189,824 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\Toshiba Places Gadget\ToshibaPlacesGadget.exe
PRC - [2011/08/18 16:26:38 | 000,923,520 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files (x86)\TOSHIBA\Sync Utility\TosSyncScheduler.exe
PRC - [2011/07/07 21:12:44 | 000,020,480 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\Toshiba Places Digestword\PBExtractService.exe
PRC - [2011/06/01 12:14:48 | 000,223,184 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files (x86)\TOSHIBA\TKRTL\TPCHKarteSVC.exe
PRC - [2011/04/08 19:13:20 | 000,030,352 | ---- | M] (Intercom, Inc.) -- C:\Program Files (x86)\Intercom\LAPLINK HelpDesk Client\llhuser.exe
PRC - [2011/04/08 19:11:28 | 000,051,864 | ---- | M] (Intercom, Inc.) -- C:\Program Files (x86)\Intercom\LAPLINK HelpDesk Client\llhrcusr.exe
PRC - [2010/03/11 14:06:06 | 000,193,824 | ---- | M] (Protexis Inc.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2019/09/14 01:51:58 | 011,934,720 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\a8d4b6098183337ba4eb43e0308bae70\System.Web.ni.dll
MOD - [2019/09/14 01:51:48 | 000,774,144 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\46a6c23156020c266c789a7d8cba8ad8\System.Runtime.Remoting.ni.dll
MOD - [2019/09/14 01:51:47 | 001,059,328 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\816f62d8753d228839db1aecb94b83da\System.Management.ni.dll
MOD - [2019/09/14 01:51:45 | 000,978,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\8823dbbec7a3b08debcb790bf1d9fbf6\System.Configuration.ni.dll
MOD - [2019/09/14 01:51:42 | 001,711,616 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\c6c711d755a727ed3161289dc9fa8515\Microsoft.VisualBasic.ni.dll
MOD - [2019/09/14 01:51:36 | 002,305,024 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Core\e89e85f01149a76a5f895b2c2427ebe1\System.Core.ni.dll
MOD - [2019/09/14 00:16:23 | 005,471,744 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\1099cdb8c15e2b6f9341f4200255ed8d\System.Xml.ni.dll
MOD - [2019/09/14 00:16:19 | 012,439,552 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\526c2035d9b7a5c79decda6877ba14be\System.Windows.Forms.ni.dll
MOD - [2019/09/14 00:16:09 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\2c2faaeb810b28ad2d2d72999fc96900\System.Drawing.ni.dll
MOD - [2019/09/14 00:16:08 | 006,657,536 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\8be69be524d426285cc891f7428da136\System.Data.ni.dll
MOD - [2019/09/14 00:16:02 | 000,368,128 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a463de704402cc06739557b936b17960\PresentationFramework.Aero.ni.dll
MOD - [2019/09/14 00:16:01 | 014,344,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e2a9fb28b190f45330d5d116e89e7e3a\PresentationFramework.ni.dll
MOD - [2019/09/14 00:15:44 | 012,260,352 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\b50c5ee01e7d4e35f3eb74c50160eb39\PresentationCore.ni.dll
MOD - [2019/09/14 00:15:31 | 003,359,744 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\13536924dc6a3b47aa2664452652ebb0\WindowsBase.ni.dll
MOD - [2019/09/14 00:15:28 | 008,012,800 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\e174b53f30801b5836c47881e646c80e\System.ni.dll
MOD - [2019/09/14 00:15:22 | 011,520,512 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\f6a9799facd58aab04d11863c0101c09\mscorlib.ni.dll
MOD - [2019/07/27 08:46:22 | 002,975,744 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2019/03/19 21:31:07 | 000,262,144 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_ja_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2019/03/19 21:31:06 | 000,352,256 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_ja_b77a5c561934e089\mscorlib.resources.dll
MOD - [2019/03/19 21:31:06 | 000,233,472 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.resources\2.0.0.0_ja_b77a5c561934e089\System.resources.dll
MOD - [2019/03/19 21:31:06 | 000,184,320 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Xml.resources\2.0.0.0_ja_b77a5c561934e089\System.Xml.resources.dll
MOD - [2019/03/19 13:45:16 | 000,046,656 | ---- | M] () -- C:\Windows\SysWOW64\umpdc.dll
[color=#E56717]========== Services (SafeList) ==========[/color]
SRV - [2019/12/03 16:26:00 | 000,242,720 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2019/11/16 12:39:24 | 001,110,512 | ---- | M] (Google LLC) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Chrome\Application\78.0.3904.108\elevation_service.exe -- (GoogleChromeElevationService)
SRV - [2019/11/14 13:00:28 | 000,335,416 | ---- | M] (Adobe) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2019/11/14 00:30:17 | 000,700,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\BTAGService.dll -- (BTAGService)
SRV - [2019/10/09 06:37:06 | 000,647,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2019/10/09 06:37:00 | 001,730,560 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\InstallService.dll -- (InstallService)
SRV - [2019/09/13 18:09:44 | 000,957,952 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
SRV - [2019/09/13 18:09:38 | 000,729,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\FlightSettings.dll -- (wisvc)
SRV - [2019/08/15 00:51:17 | 000,072,704 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\tzautoupdate.dll -- (tzautoupdate)
SRV - [2019/08/15 00:51:10 | 001,244,672 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\TokenBroker.dll -- (TokenBroker)
SRV - [2019/07/27 08:54:11 | 003,548,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2019/03/19 22:24:43 | 000,492,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2019/03/19 22:24:43 | 000,492,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2019/03/19 22:24:43 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\inetsrv\w3logsvc.dll -- (w3logsvc)
SRV - [2019/03/19 22:24:43 | 000,059,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2019/03/19 13:46:39 | 000,338,432 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Windows.Devices.Picker.dll -- (DevicePickerUserSvc)
SRV - [2019/03/19 13:45:58 | 000,029,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2019/03/19 13:45:30 | 000,141,312 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\PrintWorkflowService.dll -- (PrintWorkflowUserSvc)
SRV - [2019/03/19 13:45:19 | 000,553,896 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2019/03/19 13:45:16 | 005,323,016 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
SRV - [2019/03/19 13:45:16 | 000,185,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\deviceaccess.dll -- (DeviceAssociationBrokerSvc)
SRV - [2017/03/09 01:16:10 | 000,300,128 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2012/03/19 16:00:10 | 000,030,064 | ---- | M] () [Auto | Running] -- c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe -- (UDSS)
SRV - [2012/02/28 19:20:40 | 000,079,808 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\RegzaLinkDubbing\TosRzTfSvc.exe -- (TosRzTfSvc)
SRV - [2012/02/28 17:13:56 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2012/02/28 17:13:54 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2012/02/21 12:29:38 | 000,161,560 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
SRV - [2012/02/21 12:29:28 | 000,128,280 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R)
SRV - [2011/11/08 18:23:32 | 000,087,336 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\CyberLink\RZ Player\Kernel\DMP\CLHNService.exe -- (CLHNService)
SRV - [2011/08/18 17:12:56 | 000,113,056 | ---- | M] (CypherTec Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\CypherTec\cgrdsrv32.exe -- (CypherGuard cguard Service 32bit Edition)
SRV - [2011/07/11 17:16:06 | 000,057,216 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
SRV - [2011/07/07 21:12:44 | 000,020,480 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\Toshiba Places Digestword\PBExtractService.exe -- (PBExtractService)
SRV - [2011/06/29 10:44:04 | 000,008,704 | ---- | M] (Intercom, Inc.) [Auto | Running] -- C:\Program Files (x86)\Intercom\LAPLINK HelpDesk Client\LLHDCldr.exe -- (LLHDCloader)
SRV - [2011/06/21 13:44:06 | 000,304,272 | ---- | M] (Intercom, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Intercom\LAPLINK HelpDesk Client\LLHDClient.exe -- (LLHDClient)
SRV - [2011/06/01 12:14:48 | 000,223,184 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\TKRTL\TPCHKarteSVC.exe -- (TPCHKarteSVC)
SRV - [2010/03/11 14:06:06 | 000,193,824 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2019/09/13 18:07:38 | 000,108,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_624eef84faf426d6\UfxChipidea.sys -- (UfxChipidea)
DRV - [2019/09/13 18:07:38 | 000,068,096 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_307898c750ba9e44\BasicDisplay.sys -- (BasicDisplay)
DRV - [2019/09/13 18:07:38 | 000,037,888 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\basicrender.inf_amd64_ba2a8de08ea0d469\BasicRender.sys -- (BasicRender)
DRV - [2019/09/13 18:07:38 | 000,030,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\urschipidea.inf_amd64_86da23c455846f41\urschipidea.sys -- (UrsChipidea)
DRV - [2019/09/13 18:07:38 | 000,028,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_7302ce5d1420ed71\urssynopsys.sys -- (UrsSynopsys)
DRV - [2019/09/13 18:07:38 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_b9c53b80e63af230\genericusbfn.sys -- (genericusbfn)
DRV - [2019/09/13 18:07:37 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\umbus.inf_amd64_e566af5dd9858a0e\umbus.sys -- (umbus)
DRV - [2019/09/13 18:07:37 | 000,032,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\uefi.inf_amd64_4fcaf0fc6eaf7533\UEFI.sys -- (UEFI)
DRV - [2019/09/13 18:07:37 | 000,018,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_1c567926e5b29133\swenum.sys -- (swenum)
DRV - [2019/09/13 18:07:36 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_43ac632006e874bb\CompositeBus.sys -- (CompositeBus)
DRV - [2019/03/19 13:45:29 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\afunix.sys -- (afunix)
DRV - [2011/11/08 18:23:34 | 000,082,416 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files (x86)\CyberLink\RZ Player\Kernel\DMP\NTIPPKernel_64.sys -- (NTIPPKernel)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{81C29D48-8D3F-4BBC-9824-E87957F028F4}: "URL" =
http://search.yahoo.co.jp/search?ei=UTF-8&fr=tospccie5&p={searchTerms}
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
IE - HKU\S-1-5-21-96544349-2337264579-2738785007-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://dynabook.www.yahoo.co.jp/
IE - HKU\S-1-5-21-96544349-2337264579-2738785007-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.co.jp/
IE - HKU\S-1-5-21-96544349-2337264579-2738785007-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 2E E7 DB E5 F4 29 D2 01 [binary data]
IE - HKU\S-1-5-21-96544349-2337264579-2738785007-1004\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
IE - HKU\S-1-5-21-96544349-2337264579-2738785007-1004\..\SearchScopes,DefaultScope = {E9EF2CDC-8C63-44D0-AAD4-4FD5D5246544}
IE - HKU\S-1-5-21-96544349-2337264579-2738785007-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKU\S-1-5-21-96544349-2337264579-2738785007-1004\..\SearchScopes\{E9EF2CDC-8C63-44D0-AAD4-4FD5D5246544}: "URL" =
http://search.yahoo.co.jp/search?ei=UTF-8&fr=mcafeess1&p={SearchTerms}
IE - HKU\S-1-5-21-96544349-2337264579-2738785007-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.region: "JP"
FF - prefs.js..browser.startup.homepage: "
https://www.yahoo.co.jp/"
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_293.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@keyring.net/KeyringUtility: C:\ProgramData\keyring\plugin\1.2.1\npkrplugin-1.2.1.dll (iDOC K.K.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: C:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll (Google LLC)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll (Google LLC)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{38783831-6098-4faa-A9C9-1EE1E343F4D2}: C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\firefoxextension
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK [2019/11/29 10:34:13 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 70.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 70.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2013/05/05 18:09:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\kyon\AppData\Roaming\mozilla\Extensions
[2017/12/12 23:23:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\kyon\AppData\Roaming\mozilla\SystemExtensionsDev
[2014/11/13 22:44:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\kyon\AppData\Roaming\mozilla\Firefox\Profiles\jo4glz3s.default\extensions
[2014/11/16 14:01:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\kyon\AppData\Roaming\mozilla\Firefox\Profiles\jo4glz3s.default\extensions\toolbar@addon.yahoo.co.jp
[2018/12/08 00:08:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\kyon\AppData\Roaming\mozilla\Firefox\Profiles\xk1iq71f.default-1469598833723-1544195268445\extensions
[2019/10/17 22:24:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\kyon\AppData\Roaming\mozilla\Firefox\Profiles\xk1iq71f.default-1469598833723-1544195268445\storage\default\moz-extension+++f850aa6f-82a2-431e-8ba4-b88c4bb85964^userContextId=4294967295
[2019/12/03 12:39:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\kyon\AppData\Roaming\mozilla\Firefox\Profiles\xk1iq71f.default-1469598833723-1544195268445\storage\default\moz-extension+++f850aa6f-82a2-431e-8ba4-b88c4bb85964^userContextId=4294967295\idb
[color=#E56717]========== Chrome ==========[/color]
CHR - Extension: No name found = C:\Users\kyon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\
CHR - Extension: No name found = C:\Users\kyon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\7819.902.0.1_0\
O1 HOSTS File: ([2019/12/03 13:17:33 | 000,000,142 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 㨀㨀 氀漀挀愀氀栀漀猀琀ഀഀ
O1 - Hosts:
O2 - BHO: (東芝プレイス ダイジェストワード用ライブラリ) - {4C149F6B-ED35-42CC-979F-77006AFA4453} - C:\Program Files (x86)\TOSHIBA\Toshiba Places Digestword\TPBIEAddon.dll (TOSHIBA CORPORATION)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe32.dll File not found
O2 - BHO: (TOSHIBA Media Controller Plug-in) - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
O3 - HKU\S-1-5-21-96544349-2337264579-2738785007-1004\..\Toolbar\WebBrowser: (no name) - {AEF44653-C059-42CB-A5B7-41C640DA4A67} - No CLSID value found.
O4 - HKLM..\Run: [LLHDUSER] C:\Program Files (x86)\Intercom\LAPLINK HelpDesk Client\llhuser.exe (Intercom, Inc.)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, LLC.)
O4 - HKLM..\Run: [ToshibaPlacesGadget] C:\Program Files (x86)\Toshiba Places Gadget\ToshibaPlacesGadget.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [TouchFree] C:\Program Files (x86)\TOSHIBA\TouchFree\TouchFreeTray.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TSleepSrv] C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe (TOSHIBA)
O4 - HKLM..\Run: [TSUScheduler] C:\Program Files (x86)\TOSHIBA\Sync Utility\TosSyncScheduler.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-96544349-2337264579-2738785007-1004..\Run: [OneDrive] C:\Users\kyon\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableFullTrustStartupTasks = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUwpStartupTasks = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportFullTrustStartupTasks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportUwpStartupTasks = 1
O8 - Extra context menu item: TOSHIBA Bulletin Boardへ追加 - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll (TODO: <会社名>)
O9 - Extra Button: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-229 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll (TODO: <会社名>)
O9 - Extra 'Tools' menuitem : @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-228 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll (TODO: <会社名>)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9d0f1de7-86d2-412d-a924-47664d67655f}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe32.dll File not found
O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, LLC.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {23A20C3C-2ADD-4A80-AFB4-C146F8847D79} - .NET Framework
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8E0A742C-D031-348A-954F-AFE3CB92EFB7} - .NET Framework
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2019/12/10 16:51:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2019/12/08 20:33:24 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\kyon\Desktop\HijackThis.exe
[2019/12/06 11:55:42 | 000,000,000 | ---D | C] -- C:\Users\kyon\AppData\Roaming\Geek Uninstaller
[2019/12/03 16:25:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2019/12/03 13:08:53 | 000,000,000 | ---D | C] -- C:\Users\kyon\AppData\Local\D3DSCache
[2019/11/14 00:31:27 | 000,249,856 | ---- | C] (Gracenote, Inc.) -- C:\WINDOWS\SysWow64\gnsdk_fp.dll
[2019/11/14 00:31:27 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spwmp.dll
[2019/11/14 00:31:27 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdxm.ocx
[2019/11/14 00:31:27 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dxmasf.dll
[2019/11/14 00:31:27 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmploc.DLL
[2019/11/14 00:31:26 | 009,711,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2019/11/14 00:31:25 | 004,307,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
[2019/11/14 00:31:12 | 001,866,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2019/11/14 00:31:02 | 002,399,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcGenral.dll
[2019/11/14 00:31:02 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.Internal.dll
[2019/11/14 00:31:02 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcLayers.dll
[2019/11/14 00:31:02 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscinterop.dll
[2019/11/14 00:31:02 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcXtrnal.dll
[2019/11/14 00:31:02 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tsgqec.dll
[2019/11/14 00:31:02 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscui.cpl
[2019/11/14 00:31:01 | 007,015,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
[2019/11/14 00:31:01 | 001,312,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msjet40.dll
[2019/11/14 00:31:01 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iemigplugin.dll
[2019/11/14 00:31:01 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msimsg.dll
[2019/11/14 00:31:00 | 005,914,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2019/11/14 00:31:00 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IndexedDbLegacy.dll
[2019/11/14 00:31:00 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakradiag.dll
[2019/11/14 00:31:00 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakrathunk.dll
[2019/11/14 00:30:56 | 019,849,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2019/11/14 00:30:56 | 000,689,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2019/11/14 00:30:56 | 000,429,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\werui.dll
[2019/11/14 00:30:56 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DWWIN.EXE
[2019/11/14 00:30:56 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\reg.exe
[2019/11/14 00:30:56 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\udhisapi.dll
[2019/11/14 00:30:56 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\upnpcont.exe
[2019/11/14 00:30:43 | 001,059,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
[2019/11/14 00:30:38 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.FileExplorer.dll
[2019/11/14 00:30:37 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgeIso.dll
[2019/11/14 00:30:37 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msIso.dll
[2019/11/14 00:30:37 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\KBDJPN.DLL
[2019/11/14 00:30:37 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbd106.dll
[2019/11/14 00:30:36 | 001,413,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
[2019/11/14 00:30:36 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wincredui.dll
[2019/11/14 00:30:36 | 000,136,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\omadmapi.dll
[2019/11/14 00:30:34 | 000,673,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2019/11/14 00:30:34 | 000,453,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
[2019/11/14 00:30:34 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptui.dll
[2019/11/14 00:30:34 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontsub.dll
[2019/11/14 00:30:34 | 000,039,936 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
[2019/11/14 00:30:33 | 000,679,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll
[2019/11/14 00:30:33 | 000,452,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WerFault.exe
[2019/11/14 00:30:33 | 000,404,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Faultrep.dll
[2019/11/14 00:30:33 | 000,199,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wermgr.exe
[2019/11/14 00:30:33 | 000,193,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\weretw.dll
[2019/11/14 00:30:33 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\werdiagcontroller.dll
[2019/11/14 00:30:32 | 002,586,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll
[2019/11/14 00:30:32 | 000,892,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
[2019/11/14 00:30:32 | 000,469,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webio.dll
[2019/11/14 00:30:32 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wincorlib.dll
[2019/11/14 00:30:32 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dtdump.exe
[2019/11/14 00:30:31 | 006,521,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2019/11/14 00:30:31 | 000,415,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aepic.dll
[2019/11/14 00:30:31 | 000,354,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Magnify.exe
[2019/11/14 00:30:31 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cmd.exe
[2019/11/14 00:30:31 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\accessibilitycpl.dll
[2019/11/14 00:30:31 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Utilman.exe
[2019/11/14 00:30:31 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EaseOfAccessDialog.exe
[2019/11/14 00:30:31 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sethc.exe
[2019/11/14 00:30:31 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AtBroker.exe
[2019/11/14 00:30:30 | 004,150,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.AI.MachineLearning.dll
[2019/11/14 00:30:30 | 003,742,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneCoreUAPCommonProxyStub.dll
[2019/11/14 00:30:30 | 002,800,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
[2019/11/14 00:30:30 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32k.sys
[2019/11/14 00:30:30 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fwpolicyiomgr.dll
[2019/11/14 00:30:30 | 000,089,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32u.dll
[2019/11/14 00:30:24 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fwbase.dll
[2019/11/14 00:30:24 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfapigp.dll
[2019/11/14 00:30:23 | 006,082,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2019/11/14 00:30:23 | 000,822,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2019/11/14 00:30:23 | 000,669,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2019/11/14 00:30:22 | 002,562,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2019/11/14 00:30:22 | 002,305,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
[2019/11/14 00:30:22 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll
[2019/11/14 00:30:22 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Search.ProtocolHandler.MAPI2.dll
[2019/11/14 00:30:22 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll
[2019/11/14 00:30:22 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssitlb.dll
[2019/11/14 00:30:22 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msscntrs.dll
[2019/11/14 00:30:21 | 005,943,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
[2019/11/14 00:30:21 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActivationManager.dll
[2019/11/14 00:30:21 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ApiSetHost.AppExecutionAlias.dll
[2019/11/14 00:30:19 | 014,816,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2019/11/14 00:30:19 | 005,112,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2019/11/14 00:30:19 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmvdsitf.dll
[2019/11/14 00:30:19 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LaunchWinApp.exe
[2019/11/14 00:30:18 | 003,967,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2019/11/14 00:30:18 | 001,348,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Wpc.dll
[2019/11/14 00:30:18 | 000,632,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
[2019/11/14 00:30:18 | 000,375,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AUDIOKSE.dll
[2019/11/14 00:30:18 | 000,251,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscapi.dll
[2019/11/14 00:30:18 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SpatialAudioLicenseSrv.exe
[2019/11/14 00:30:17 | 000,700,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BTAGService.dll
[2019/11/14 00:30:17 | 000,073,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\remoteaudioendpoint.dll
[2019/11/14 00:29:29 | 004,615,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2019/11/14 00:29:28 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\splwow64.exe
[2019/11/14 00:13:20 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\poqexec.exe
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2019/12/10 16:57:43 | 000,000,828 | ---- | M] () -- C:\WINDOWS\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
[2019/12/10 16:57:40 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
[2019/12/10 16:51:54 | 000,000,874 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2019/12/10 16:26:47 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2019/12/10 16:25:58 | 3156,201,472 | -HS- | M] () -- C:\hiberfil.sys
[2019/12/09 00:29:00 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2019/12/08 23:19:12 | 000,000,214 | ---- | M] () -- C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job
[2019/12/08 20:33:30 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\kyon\Desktop\HijackThis.exe
[2019/12/06 22:19:32 | 000,002,353 | ---- | M] () -- C:\Users\kyon\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2019/12/06 11:55:54 | 006,318,672 | ---- | M] (Geek Unіnstaller) -- C:\Users\kyon\Desktop\geek.exe
[2019/12/03 12:57:51 | 000,000,150 | ---- | M] () -- C:\WINDOWS\Reimage.ini
[2019/11/14 00:31:27 | 009,711,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2019/11/14 00:31:27 | 000,249,856 | ---- | M] (Gracenote, Inc.) -- C:\WINDOWS\SysWow64\gnsdk_fp.dll
[2019/11/14 00:31:27 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spwmp.dll
[2019/11/14 00:31:27 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdxm.ocx
[2019/11/14 00:31:27 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dxmasf.dll
[2019/11/14 00:31:27 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmploc.DLL
[2019/11/14 00:31:26 | 004,307,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
[2019/11/14 00:31:12 | 001,866,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2019/11/14 00:31:02 | 007,015,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
[2019/11/14 00:31:02 | 002,399,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcGenral.dll
[2019/11/14 00:31:02 | 000,701,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.Internal.dll
[2019/11/14 00:31:02 | 000,380,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcLayers.dll
[2019/11/14 00:31:02 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscinterop.dll
[2019/11/14 00:31:02 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcXtrnal.dll
[2019/11/14 00:31:02 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tsgqec.dll
[2019/11/14 00:31:02 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscui.cpl
[2019/11/14 00:31:01 | 001,312,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msjet40.dll
[2019/11/14 00:31:01 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iemigplugin.dll
[2019/11/14 00:31:01 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msimsg.dll
[2019/11/14 00:31:00 | 005,914,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2019/11/14 00:31:00 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IndexedDbLegacy.dll
[2019/11/14 00:31:00 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakradiag.dll
[2019/11/14 00:31:00 | 000,105,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakrathunk.dll
[2019/11/14 00:30:58 | 019,849,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2019/11/14 00:30:56 | 000,689,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2019/11/14 00:30:56 | 000,429,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\werui.dll
[2019/11/14 00:30:56 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DWWIN.EXE
[2019/11/14 00:30:56 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\reg.exe
[2019/11/14 00:30:56 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\udhisapi.dll
[2019/11/14 00:30:56 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\upnpcont.exe
[2019/11/14 00:30:43 | 001,059,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
[2019/11/14 00:30:38 | 000,487,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.FileExplorer.dll
[2019/11/14 00:30:37 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgeIso.dll
[2019/11/14 00:30:37 | 000,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msIso.dll