API tools faq
paste
Advertisement
Guest User

FRST

a guest
Jun 3rd, 2017
653
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 78.12 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-06-2017
  2. Ran by aczyr (administrator) on DESKTOP-AALO4FM (03-06-2017 22:02:08)
  3. Running from C:\Users\aczyr\Desktop
  4. Loaded Profiles: aczyr (Available Profiles: aczyr)
  5. Platform: Windows 10 Home Version 1703 (X64) Language: Polski (Polska)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  15. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  16. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
  17. (Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe
  18. (Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe
  19. (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
  20. (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
  21. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  22. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
  23. (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
  24. (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
  25. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
  26. () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkypeHost.exe
  27. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  28. (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
  29. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  30. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  31. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  32. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  33. (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
  34. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  35. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
  36. (Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
  37. (Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
  38. (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
  39. (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
  40. (Flux Software LLC) C:\Users\aczyr\AppData\Local\FluxSoftware\Flux\flux.exe
  41. (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
  42. (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
  43. (Spotify Ltd) C:\Users\aczyr\AppData\Roaming\Spotify\SpotifyWebHelper.exe
  44. () C:\Program Files (x86)\Launchy\Launchy.exe
  45. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  46. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
  47. (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  48. (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  49. (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
  50. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
  51. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
  52. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe
  53. (GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
  54. () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
  55. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
  56. (Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
  57. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
  58. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
  59. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
  60. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe
  61. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
  62. (Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
  63. (Intel Corporation) C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe
  64. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  65. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  66. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  67. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  68. (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
  69.  
  70. ==================== Registry (Whitelisted) ====================
  71.  
  72. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  73.  
  74. HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
  75. HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9192960 2017-03-30] (Realtek Semiconductor)
  76. HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  77. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
  78. HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1739896 2017-03-30] (Logitech, Inc.)
  79. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
  80. HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1203488 2016-10-20] (Intel Corporation)
  81. HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2404952 2017-03-27] (Adobe Systems Incorporated)
  82. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3042592 2017-06-01] (Valve Corporation)
  83. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [f.lux] => C:\Users\aczyr\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
  84. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [4954176 2017-05-25] (GOG.com)
  85. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [TIDAL] => C:\Users\aczyr\AppData\Local\TIDAL\update.exe --processStart TIDAL.exe --process-start-args " -autostart -minimized"
  86. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-04-24] (Disc Soft Ltd)
  87. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9772248 2017-05-05] (Piriform Ltd)
  88. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [Spotify Web Helper] => C:\Users\aczyr\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1560176 2017-05-28] (Spotify Ltd)
  89. ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
  90. ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
  91. ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
  92. Startup: C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Launchy.lnk [2017-05-03]
  93. ShortcutTarget: Launchy.lnk -> C:\Program Files (x86)\Launchy\Launchy.exe ()
  94.  
  95. ==================== Internet (Whitelisted) ====================
  96.  
  97. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  98.  
  99. Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
  100. Tcpip\..\Interfaces\{11d09814-138e-4ba9-a5e9-c7445c977899}: [DhcpNameServer] 37.8.214.2 31.11.202.254
  101.  
  102. Internet Explorer:
  103. ==================
  104. BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-05-25] (Microsoft Corporation)
  105. BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-25] (Microsoft Corporation)
  106. BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-05-25] (Microsoft Corporation)
  107. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-03] (Oracle Corporation)
  108. BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-25] (Microsoft Corporation)
  109. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-03] (Oracle Corporation)
  110. Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)
  111. Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)
  112. Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)
  113. Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)
  114.  
  115. FireFox:
  116. ========
  117. FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
  118. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-03-27] (Adobe Systems)
  119. FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-03] (Oracle Corporation)
  120. FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-03] (Oracle Corporation)
  121. FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-25] (Microsoft Corporation)
  122. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-25] (Microsoft Corporation)
  123. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-01] (NVIDIA Corporation)
  124. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-01] (NVIDIA Corporation)
  125. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-28] (Google Inc.)
  126. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-28] (Google Inc.)
  127. FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-03-27] (Adobe Systems)
  128.  
  129. Chrome:
  130. =======
  131. CHR StartupUrls: Default -> "hxxp://www.initialpage123.com/?z=5694b02e3f15c803a1073ebgazdt5c5t3o9g4o6tfe&from=wak&uid=SPCCXSolidXStateXDisk_5FB7076B17A100025693&type=hp"
  132. CHR DefaultSearchURL: Default -> hxxp://www.mystarting123.com/search/index.php?z=69ff2f0d125b3422b7ca732g8z3tcw8m3e2e6c9g6w&q={searchTerms}
  133. CHR DefaultSearchKeyword: Default -> mystarting123
  134. CHR Profile: C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default [2017-06-03]
  135. CHR Extension: (Prezentacje Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-05-28]
  136. CHR Extension: (Magic Actions for YouTube™) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-05-28]
  137. CHR Extension: (Dokumenty Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-05-28]
  138. CHR Extension: (Licznik Czasu Zadań) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomfjmibjhhfdenfkpaodhnlhkolngif [2017-05-28]
  139. CHR Extension: (Dysk Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-05-28]
  140. CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2017-05-28]
  141. CHR Extension: (YouTube) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-05-28]
  142. CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2017-05-28]
  143. CHR Extension: (Adblock Plus) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-05-28]
  144. CHR Extension: (NewGenBook for Facebook) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjclccgcpfkfemddeefkbepaagjfgbeg [2017-05-28]
  145. CHR Extension: (Style Chooser) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\daodklicmmjhcacgkjpianadkdkbkbce [2017-05-28]
  146. CHR Extension: (Arkusze Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-05-28]
  147. CHR Extension: (EditThisCookie) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-05-28]
  148. CHR Extension: (Pulpit zdalny Chrome) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-05-28]
  149. CHR Extension: (Dokumenty Google offline) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-05-29]
  150. CHR Extension: (Last.fm Scrobbler) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhinaapppaileiechjoiifaancjggfjm [2017-05-28]
  151. CHR Extension: (feedly) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2017-05-28]
  152. CHR Extension: (Pixlr Express) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmjpdlmjopaeginhldhiokeidchjid [2017-05-28]
  153. CHR Extension: (Pocket Website) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\jijgclgmgjipgefcnnnibgllfonlfdap [2017-05-28]
  154. CHR Extension: (Netflix Categories) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnbopcabgddpanjmeabponnjngbmemml [2017-05-28]
  155. CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-28]
  156. CHR Extension: (Hover Zoom) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nonjdcjchghhkdoolnlbekcfllmednbl [2017-06-03]
  157. CHR Extension: (Simple EPUB Reader) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhbgcchcbdjdenibfmjofobklkkhofc [2017-05-28]
  158. CHR Extension: (Click&Clean App) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-06-01]
  159. CHR Extension: (Gmail) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-05-28]
  160. CHR Extension: (Chrome Media Router) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-28]
  161.  
  162. ==================== Services (Whitelisted) ====================
  163.  
  164. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  165.  
  166. R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [771672 2017-03-14] (Adobe Systems Incorporated)
  167. R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
  168. R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3971264 2017-05-14] (Microsoft Corporation)
  169. R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-04-24] (Disc Soft Ltd)
  170. S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [512576 2017-05-25] (GOG.com)
  171. S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7955008 2017-05-20] (GOG.com)
  172. S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Corporation)
  173. R3 Intel(R) Online Connect; C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe [25824 2016-10-04] (Intel Corporation)
  174. S2 Intel(R) Online Connect Helper; C:\Program Files\Intel\Intel(R) Online Connect\iocHelperService.exe [22752 2016-10-04] (Intel Corporation)
  175. S3 Intel(R) Online Connect Software Asset Manager; C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18152 2016-09-29] (Intel Corporation)
  176. R2 Intel(R) TechnologyAccessLegacyCSLoader; C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe [173288 2016-10-05] (Intel(R) Corporation)
  177. R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe [496872 2016-10-05] (Intel(R) Corporation)
  178. R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-10-20] (Intel Corporation)
  179. S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
  180. R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [492664 2017-04-26] (NVIDIA Corporation)
  181. S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [492664 2017-04-26] (NVIDIA Corporation)
  182. R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-01] (NVIDIA Corporation)
  183. R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [452152 2017-04-20] (NVIDIA Corporation)
  184. R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
  185. R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)
  186.  
  187. ===================== Drivers (Whitelisted) ======================
  188.  
  189. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  190.  
  191. R1 cryptfd; C:\WINDOWS\System32\drivers\cryptfd.sys [193448 2017-04-18] ()
  192. R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-05-05] (Disc Soft Ltd)
  193. R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-05-05] (Disc Soft Ltd)
  194. R3 iaLPSS2_UART2; C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys [281400 2017-05-03] (Intel Corporation)
  195. R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251832 2017-05-25] (Malwarebytes)
  196. R1 ndisrd; C:\WINDOWS\system32\DRIVERS\ndisrfl.sys [59792 2016-09-13] (Intel Corporation)
  197. S3 netr28ux; C:\WINDOWS\System32\drivers\netr28ux.sys [2224128 2017-03-18] (MediaTek Inc.)
  198. R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_f9309145156afb40\nvlddmkm.sys [14456912 2017-05-19] (NVIDIA Corporation)
  199. S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-04-26] (NVIDIA Corporation)
  200. R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [47736 2017-04-26] (NVIDIA Corporation)
  201. R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [59448 2017-04-20] (NVIDIA Corporation)
  202. R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-08-23] (Realtek )
  203. S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
  204. S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
  205. R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
  206. R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
  207.  
  208. ==================== NetSvcs (Whitelisted) ===================
  209.  
  210. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  211.  
  212.  
  213. ==================== One Month Created files and folders ========
  214.  
  215. (If an entry is included in the fixlist, the file/folder will be moved.)
  216.  
  217. 2017-06-03 22:02 - 2017-06-03 22:02 - 00022256 _____ C:\Users\aczyr\Desktop\FRST.txt
  218. 2017-06-03 21:59 - 2017-06-03 21:59 - 00000000 ___HD C:\OneDriveTemp
  219. 2017-06-03 21:58 - 2017-06-03 21:58 - 00015422 _____ C:\Users\aczyr\Desktop\Fixlog.txt
  220. 2017-06-03 21:06 - 2017-06-03 21:06 - 00054929 _____ C:\Users\aczyr\Downloads\Shortcut.txt
  221. 2017-06-03 21:06 - 2017-06-03 21:06 - 00049452 _____ C:\Users\aczyr\Downloads\Addition.txt
  222. 2017-06-03 21:05 - 2017-06-03 22:02 - 00000000 ____D C:\FRST
  223. 2017-06-03 21:05 - 2017-06-03 21:06 - 00087216 _____ C:\Users\aczyr\Downloads\FRST.txt
  224. 2017-06-03 21:03 - 2017-06-03 21:03 - 02433536 _____ (Farbar) C:\Users\aczyr\Desktop\FRST64.exe
  225. 2017-06-03 20:54 - 2017-06-03 20:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab
  226. 2017-06-03 19:56 - 2017-06-03 19:56 - 00380928 _____ C:\Users\aczyr\Downloads\4zleqob7.exe
  227. 2017-06-03 19:34 - 2017-06-03 19:34 - 00388608 _____ (Trend Micro Inc.) C:\Users\aczyr\Downloads\HijackThis.exe
  228. 2017-06-03 13:05 - 2017-06-03 13:05 - 00000000 ____D C:\Program Files (x86)\VulkanRT
  229. 2017-06-03 13:05 - 2017-05-01 22:14 - 00134592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
  230. 2017-06-03 13:05 - 2017-03-10 23:17 - 00536864 _____ C:\WINDOWS\system32\vulkan-1.dll
  231. 2017-06-03 13:05 - 2017-03-10 23:17 - 00525600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
  232. 2017-06-03 13:05 - 2017-03-10 23:17 - 00254240 _____ C:\WINDOWS\system32\vulkaninfo.exe
  233. 2017-06-03 13:05 - 2017-03-10 23:17 - 00233760 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
  234. 2017-06-03 13:04 - 2017-06-03 13:05 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
  235. 2017-05-31 18:49 - 2017-05-31 18:49 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\SumatraPDF
  236. 2017-05-31 12:09 - 2017-05-31 12:09 - 875546528 _____ C:\WINDOWS\MEMORY.DMP
  237. 2017-05-31 12:09 - 2017-05-31 12:09 - 00536684 _____ C:\WINDOWS\Minidump\053117-5000-01.dmp
  238. 2017-05-31 12:09 - 2017-05-31 12:09 - 00068288 _____ C:\WINDOWS\system32\Drivers\VBoxDrv.sys
  239. 2017-05-30 19:46 - 2017-05-30 19:46 - 00262212 _____ C:\Users\aczyr\Downloads\ceramika_lab.pdf
  240. 2017-05-29 18:14 - 2017-05-29 18:15 - 00000000 ____D C:\ProgramData\Google
  241. 2017-05-29 18:14 - 2017-05-29 18:14 - 00000000 ____D C:\Program Files\Google
  242. 2017-05-29 18:10 - 2017-05-29 18:11 - 450071920 _____ C:\Users\aczyr\Downloads\nikcollection-full-1.2.11.exe
  243. 2017-05-29 17:57 - 2017-05-29 17:57 - 00007770 _____ C:\Users\aczyr\Downloads\DSC_3279.xmp
  244. 2017-05-29 17:53 - 2017-05-29 17:53 - 18933849 _____ C:\Users\aczyr\Downloads\DSC_3279.NEF
  245. 2017-05-28 14:55 - 2017-05-28 14:55 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Google
  246. 2017-05-28 14:54 - 2017-05-29 18:15 - 00000000 ____D C:\Users\aczyr\AppData\Local\Google
  247. 2017-05-28 14:54 - 2017-05-28 14:54 - 49228392 _____ (Google Inc.) C:\Users\aczyr\Downloads\ChromeStandaloneSetup64.exe
  248. 2017-05-28 14:54 - 2017-05-28 14:54 - 00003566 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
  249. 2017-05-28 14:54 - 2017-05-28 14:54 - 00003442 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
  250. 2017-05-25 21:41 - 2017-05-25 21:41 - 00001836 _____ C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
  251. 2017-05-25 21:38 - 2017-05-25 21:38 - 00668880 _____ (Spotify Ltd) C:\Users\aczyr\Downloads\SpotifySetup.exe
  252. 2017-05-25 16:50 - 2017-05-25 16:50 - 04110280 _____ C:\Users\aczyr\Downloads\adwcleaner_6.047.exe
  253. 2017-05-25 16:49 - 2017-05-25 16:49 - 63364552 _____ (Malwarebytes ) C:\Users\aczyr\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.122-1.0.1976.exe
  254. 2017-05-25 16:49 - 2017-05-25 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
  255. 2017-05-25 16:49 - 2017-05-09 16:37 - 00077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
  256. 2017-05-20 16:11 - 2017-05-20 16:11 - 48040537 _____ C:\Users\aczyr\Downloads\Muzykofilia.pdf
  257. 2017-05-20 15:53 - 2017-05-20 15:53 - 00000000 ____D C:\Users\aczyr\AppData\Local\Ubisoft
  258. 2017-05-20 12:52 - 2017-05-25 21:38 - 00000000 ____D C:\Users\aczyr\AppData\Local\TIDAL
  259. 2017-05-20 12:51 - 2017-05-20 12:51 - 01130328 _____ (Google Inc.) C:\Users\aczyr\Downloads\ChromeSetup (1).exe
  260. 2017-05-20 12:36 - 2017-05-20 12:36 - 01130328 _____ (Google Inc.) C:\Users\aczyr\Downloads\ChromeSetup.exe
  261. 2017-05-20 12:25 - 2017-05-20 12:25 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
  262. 2017-05-20 12:24 - 2017-05-20 12:25 - 00000000 ____D C:\Program Files\CCleaner
  263. 2017-05-20 12:23 - 2017-05-25 16:49 - 00251832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
  264. 2017-05-20 11:45 - 2017-05-20 12:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
  265. 2017-05-20 11:45 - 2017-05-20 12:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
  266. 2017-05-20 11:45 - 2017-05-20 11:50 - 00000000 ____D C:\Users\aczyr\AppData\Local\Mozilla
  267. 2017-05-20 11:33 - 2017-05-20 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registrar Registry Manager
  268. 2017-05-20 11:33 - 2017-05-20 15:35 - 00000000 ____D C:\Program Files\Registrar Registry Manager
  269. 2017-05-20 11:26 - 2017-05-20 11:26 - 00000000 ____D C:\Program Files\Java
  270. 2017-05-20 11:24 - 2017-05-20 11:24 - 00000000 ____D C:\Users\aczyr\AppData\LocalLow\Sun
  271. 2017-05-19 19:46 - 2017-05-31 18:50 - 00000000 ____D C:\Users\aczyr\AppData\Local\Spotify
  272. 2017-05-19 19:45 - 2017-06-03 20:15 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Spotify
  273. 2017-05-19 18:05 - 2017-05-19 18:05 - 35397528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
  274. 2017-05-19 18:04 - 2017-05-19 18:04 - 28632152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
  275. 2017-05-19 18:04 - 2017-05-19 18:04 - 00969624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
  276. 2017-05-19 18:04 - 2017-05-19 18:04 - 00920664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
  277. 2017-05-19 18:04 - 2017-05-19 18:04 - 00618584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
  278. 2017-05-19 18:04 - 2017-05-19 18:04 - 00507984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
  279. 2017-05-19 18:03 - 2017-05-19 18:03 - 01996696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438205.dll
  280. 2017-05-19 18:03 - 2017-05-19 18:03 - 01598360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438205.dll
  281. 2017-05-19 18:03 - 2017-05-19 18:03 - 01062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
  282. 2017-05-19 18:03 - 2017-05-19 18:03 - 00999832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
  283. 2017-05-19 18:03 - 2017-05-19 18:03 - 00829848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
  284. 2017-05-19 18:03 - 2017-05-19 18:03 - 00659864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
  285. 2017-05-19 18:03 - 2017-05-19 18:03 - 00054680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
  286. 2017-05-19 18:02 - 2017-05-19 18:02 - 40210512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
  287. 2017-05-19 18:02 - 2017-05-19 18:02 - 35290192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
  288. 2017-05-19 18:02 - 2017-05-19 18:02 - 03800984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
  289. 2017-05-19 18:02 - 2017-05-19 18:02 - 03256408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
  290. 2017-05-19 17:53 - 2017-05-20 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
  291. 2017-05-19 17:50 - 2017-05-25 16:49 - 00000000 ____D C:\ProgramData\Malwarebytes
  292. 2017-05-19 17:48 - 2017-05-19 17:48 - 11161992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
  293. 2017-05-19 17:48 - 2017-05-19 17:48 - 10648512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
  294. 2017-05-19 17:48 - 2017-05-19 17:48 - 09102480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
  295. 2017-05-19 17:48 - 2017-05-19 17:48 - 08891160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
  296. 2017-05-19 17:48 - 2017-05-19 17:48 - 01296264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
  297. 2017-05-19 17:48 - 2017-05-19 17:48 - 01011488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
  298. 2017-05-19 17:48 - 2017-05-19 17:48 - 00791792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
  299. 2017-05-19 17:48 - 2017-05-19 17:48 - 00703880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
  300. 2017-05-19 17:48 - 2017-05-19 17:48 - 00633040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
  301. 2017-05-19 17:48 - 2017-05-19 17:48 - 00626384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
  302. 2017-05-19 17:48 - 2017-05-19 17:48 - 00591672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
  303. 2017-05-19 17:47 - 2017-05-19 17:47 - 11129704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
  304. 2017-05-19 17:47 - 2017-05-19 17:47 - 09335520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
  305. 2017-05-19 17:47 - 2017-05-19 17:47 - 01298696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
  306. 2017-05-19 17:47 - 2017-05-19 17:47 - 01013344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
  307. 2017-05-15 16:53 - 2017-05-20 12:20 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
  308. 2017-05-15 16:22 - 2017-05-15 16:22 - 00000000 ____D C:\Users\aczyr\.TeamSpeak 3
  309. 2017-05-15 16:22 - 2017-05-15 16:22 - 00000000 ____D C:\Users\aczyr\.QtWebEngineProcess
  310. 2017-05-15 16:20 - 2017-05-15 17:54 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\TS3Client
  311. 2017-05-15 16:20 - 2017-05-15 16:20 - 00000970 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
  312. 2017-05-15 16:20 - 2017-05-15 16:20 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
  313. 2017-05-15 16:19 - 2017-05-15 16:19 - 77604984 _____ (TeamSpeak Systems GmbH) C:\Users\aczyr\Downloads\TeamSpeak3-Client-win64-3.1.4.exe
  314. 2017-05-13 17:40 - 2017-05-13 17:40 - 00055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\khnjcpkb.sys
  315. 2017-05-12 19:16 - 2017-05-12 19:16 - 00055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\jfldkhut.sys
  316. 2017-05-12 17:42 - 2017-05-20 12:20 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoOfTheDay
  317. 2017-05-12 17:41 - 2017-05-19 17:17 - 00000000 ____D C:\Users\aczyr\AppData\Local\Deployment
  318. 2017-05-12 17:41 - 2017-05-12 17:41 - 00055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdvwkbdb.sys
  319. 2017-05-12 17:41 - 2017-05-12 17:41 - 00005938 _____ C:\Users\aczyr\Downloads\PhotoOfTheDay.application
  320. 2017-05-12 17:41 - 2017-05-12 17:41 - 00000000 ____D C:\Users\aczyr\AppData\Local\Apps\2.0
  321. 2017-05-12 17:34 - 2017-05-12 17:34 - 10513112 _____ (Microsoft Corporation) C:\Users\aczyr\Downloads\BingDesktopSetup.exe
  322. 2017-05-10 22:15 - 2017-05-10 22:15 - 00056808 _____ C:\Users\aczyr\Downloads\53327729_F_50381055_04_17_F.pdf
  323. 2017-05-09 23:48 - 2017-05-25 11:50 - 00002069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  324. 2017-05-09 23:48 - 2017-05-25 11:50 - 00000000 ____D C:\Users\aczyr\AppData\LocalLow\Mozilla
  325. 2017-05-09 23:48 - 2017-05-20 12:44 - 00000000 ____D C:\WINDOWS\system32\log
  326. 2017-05-09 23:48 - 2017-05-20 11:45 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Mozilla
  327. 2017-05-09 22:07 - 2017-04-28 03:38 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
  328. 2017-05-09 22:07 - 2017-04-28 03:19 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
  329. 2017-05-09 22:07 - 2017-04-28 03:19 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
  330. 2017-05-09 22:07 - 2017-04-28 03:18 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
  331. 2017-05-09 22:07 - 2017-04-28 03:16 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
  332. 2017-05-09 22:07 - 2017-04-28 03:12 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
  333. 2017-05-09 22:07 - 2017-04-28 03:12 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
  334. 2017-05-09 22:07 - 2017-04-28 03:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
  335. 2017-05-09 22:07 - 2017-04-28 03:09 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
  336. 2017-05-09 22:07 - 2017-04-28 03:08 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
  337. 2017-05-09 22:07 - 2017-04-28 03:08 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
  338. 2017-05-09 22:07 - 2017-04-28 03:08 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
  339. 2017-05-09 22:07 - 2017-04-28 03:08 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
  340. 2017-05-09 22:07 - 2017-04-28 03:07 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
  341. 2017-05-09 22:07 - 2017-04-28 03:07 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
  342. 2017-05-09 22:07 - 2017-04-28 03:06 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
  343. 2017-05-09 22:07 - 2017-04-28 03:06 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
  344. 2017-05-09 22:07 - 2017-04-28 03:05 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
  345. 2017-05-09 22:07 - 2017-04-28 03:04 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
  346. 2017-05-09 22:07 - 2017-04-28 03:03 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
  347. 2017-05-09 22:07 - 2017-04-28 03:00 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
  348. 2017-05-09 22:07 - 2017-04-28 02:59 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
  349. 2017-05-09 22:07 - 2017-04-28 02:59 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
  350. 2017-05-09 22:07 - 2017-04-28 02:59 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
  351. 2017-05-09 22:07 - 2017-04-28 02:59 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
  352. 2017-05-09 22:07 - 2017-04-28 02:59 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
  353. 2017-05-09 22:07 - 2017-04-28 02:58 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
  354. 2017-05-09 22:07 - 2017-04-28 02:58 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
  355. 2017-05-09 22:07 - 2017-04-28 02:57 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
  356. 2017-05-09 22:07 - 2017-04-28 02:56 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
  357. 2017-05-09 22:07 - 2017-04-28 02:55 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
  358. 2017-05-09 22:07 - 2017-04-28 02:55 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
  359. 2017-05-09 22:07 - 2017-04-28 02:53 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
  360. 2017-05-09 22:07 - 2017-04-28 02:52 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
  361. 2017-05-09 22:07 - 2017-04-28 02:52 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
  362. 2017-05-09 22:07 - 2017-04-28 02:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
  363. 2017-05-09 22:07 - 2017-04-28 02:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
  364. 2017-05-09 22:07 - 2017-04-28 02:49 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
  365. 2017-05-09 22:07 - 2017-04-28 02:49 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
  366. 2017-05-09 22:07 - 2017-04-28 02:46 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
  367. 2017-05-09 22:07 - 2017-04-28 02:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
  368. 2017-05-09 22:07 - 2017-04-28 02:46 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
  369. 2017-05-09 22:07 - 2017-04-28 02:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
  370. 2017-05-09 22:07 - 2017-04-28 02:44 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
  371. 2017-05-09 22:07 - 2017-04-28 02:44 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
  372. 2017-05-09 22:07 - 2017-04-28 02:42 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
  373. 2017-05-09 22:07 - 2017-04-28 02:42 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
  374. 2017-05-09 22:07 - 2017-04-28 02:42 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
  375. 2017-05-09 22:07 - 2017-04-28 02:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
  376. 2017-05-09 22:07 - 2017-04-28 02:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
  377. 2017-05-09 22:07 - 2017-04-28 02:40 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
  378. 2017-05-09 22:07 - 2017-04-28 02:40 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
  379. 2017-05-09 22:07 - 2017-04-28 02:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
  380. 2017-05-09 22:07 - 2017-04-28 02:40 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
  381. 2017-05-09 22:07 - 2017-04-28 02:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
  382. 2017-05-09 22:07 - 2017-04-28 02:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
  383. 2017-05-09 22:07 - 2017-04-28 02:39 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
  384. 2017-05-09 22:07 - 2017-04-28 02:39 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
  385. 2017-05-09 22:07 - 2017-04-28 02:39 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
  386. 2017-05-09 22:07 - 2017-04-28 02:38 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
  387. 2017-05-09 22:07 - 2017-04-28 02:38 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
  388. 2017-05-09 22:07 - 2017-04-28 02:37 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
  389. 2017-05-09 22:07 - 2017-04-28 02:37 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
  390. 2017-05-09 22:07 - 2017-04-28 02:34 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
  391. 2017-05-09 22:07 - 2017-04-28 02:33 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
  392. 2017-05-09 22:07 - 2017-04-28 02:26 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
  393. 2017-05-09 22:07 - 2017-04-28 02:15 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
  394. 2017-05-09 22:07 - 2017-04-28 02:15 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
  395. 2017-05-09 22:07 - 2017-04-28 02:14 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
  396. 2017-05-09 22:07 - 2017-04-28 02:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
  397. 2017-05-09 22:07 - 2017-04-28 02:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
  398. 2017-05-09 22:07 - 2017-04-28 02:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
  399. 2017-05-09 22:07 - 2017-04-28 02:09 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
  400. 2017-05-09 22:07 - 2017-04-28 02:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
  401. 2017-05-09 22:07 - 2017-04-28 02:08 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
  402. 2017-05-09 22:07 - 2017-04-28 02:08 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
  403. 2017-05-09 22:07 - 2017-04-28 02:08 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
  404. 2017-05-09 22:07 - 2017-04-28 02:07 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
  405. 2017-05-09 22:07 - 2017-04-28 02:06 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
  406. 2017-05-09 22:07 - 2017-04-28 02:06 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
  407. 2017-05-09 22:07 - 2017-04-28 02:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
  408. 2017-05-09 22:07 - 2017-04-28 02:06 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
  409. 2017-05-09 22:07 - 2017-04-28 02:05 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
  410. 2017-05-09 22:07 - 2017-04-28 02:05 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
  411. 2017-05-09 22:07 - 2017-04-28 02:04 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
  412. 2017-05-09 22:07 - 2017-04-28 02:04 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
  413. 2017-05-09 22:07 - 2017-04-28 02:04 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
  414. 2017-05-09 22:07 - 2017-04-28 02:04 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
  415. 2017-05-09 22:07 - 2017-04-28 02:03 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
  416. 2017-05-09 22:07 - 2017-04-28 02:03 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
  417. 2017-05-09 22:07 - 2017-04-28 02:03 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
  418. 2017-05-09 22:07 - 2017-04-28 02:03 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
  419. 2017-05-09 22:07 - 2017-04-28 02:03 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
  420. 2017-05-09 22:07 - 2017-04-28 02:02 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
  421. 2017-05-09 22:07 - 2017-04-28 02:01 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
  422. 2017-05-09 22:07 - 2017-04-28 02:01 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
  423. 2017-05-09 22:07 - 2017-04-28 02:00 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
  424. 2017-05-09 22:07 - 2017-04-28 01:59 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
  425. 2017-05-09 22:07 - 2017-04-28 01:59 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
  426. 2017-05-09 22:07 - 2017-04-28 01:59 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
  427. 2017-05-09 22:07 - 2017-04-28 01:59 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
  428. 2017-05-09 22:07 - 2017-04-28 01:59 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
  429. 2017-05-09 22:07 - 2017-04-28 01:58 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
  430. 2017-05-09 22:07 - 2017-04-28 01:58 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
  431. 2017-05-09 22:07 - 2017-04-28 01:57 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
  432. 2017-05-09 22:07 - 2017-04-28 01:57 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
  433. 2017-05-09 22:07 - 2017-04-28 01:57 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
  434. 2017-05-09 22:07 - 2017-04-28 01:57 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
  435. 2017-05-09 22:07 - 2017-04-28 01:54 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
  436. 2017-05-09 22:07 - 2017-04-28 01:54 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
  437. 2017-05-09 22:07 - 2017-04-28 01:54 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
  438. 2017-05-09 22:07 - 2017-04-28 01:54 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
  439. 2017-05-09 22:07 - 2017-04-28 01:52 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
  440. 2017-05-07 20:06 - 2017-05-07 20:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sherlock Holmes - The Devil's Daughter
  441. 2017-05-07 13:58 - 2017-05-07 14:01 - 00000000 ____D C:\Program Files\The Sims 4
  442. 2017-05-07 12:31 - 2017-05-07 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4
  443. 2017-05-07 12:22 - 2017-05-08 17:05 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\The.Sims.4.Deluxe.v1.20.60.1020.Incl.Dine.Out-ALI213
  444. 2017-05-07 12:17 - 2017-06-03 20:02 - 00000000 ____D C:\Users\aczyr\AppData\Local\CrashDumps
  445. 2017-05-07 12:16 - 2017-05-07 12:16 - 00000000 ____D C:\Users\aczyr\AppData\Local\DBG
  446. 2017-05-06 16:58 - 2017-05-06 16:58 - 00000322 _____ C:\Users\aczyr\Downloads\mea_pl.reg
  447. 2017-05-06 10:52 - 2017-05-06 10:52 - 00080384 _____ () C:\Users\aczyr\Downloads\AndromedaLanguagePatcher.exe
  448. 2017-05-05 23:03 - 2017-05-05 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
  449. 2017-05-05 23:03 - 2017-05-05 23:03 - 00000000 ____D C:\Program Files\Reference Assemblies
  450. 2017-05-05 23:03 - 2017-05-05 23:03 - 00000000 ____D C:\Program Files\MSBuild
  451. 2017-05-05 23:03 - 2017-05-05 23:03 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
  452. 2017-05-05 23:03 - 2017-05-05 23:03 - 00000000 ____D C:\Program Files (x86)\MSBuild
  453. 2017-05-05 23:02 - 2017-02-10 11:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
  454. 2017-05-05 23:02 - 2017-02-10 11:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
  455. 2017-05-05 23:02 - 2017-02-10 11:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
  456. 2017-05-05 23:02 - 2017-02-10 11:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
  457. 2017-05-05 23:02 - 2017-02-10 11:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
  458. 2017-05-05 23:02 - 2017-02-10 11:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
  459. 2017-05-05 23:00 - 2017-05-05 23:00 - 00000000 ___HD C:\Program Files\Common Files\EAInstaller
  460. 2017-05-05 22:45 - 2017-05-20 11:10 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\DAEMON Tools Lite
  461. 2017-05-05 22:45 - 2017-05-05 22:45 - 00047672 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtliteusbbus.sys
  462. 2017-05-05 22:45 - 2017-05-05 22:45 - 00030264 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtlitescsibus.sys
  463. 2017-05-05 22:45 - 2017-05-05 22:45 - 00000000 ____D C:\Users\aczyr\AppData\Local\Disc_Soft_Ltd
  464. 2017-05-05 22:45 - 2017-05-05 22:45 - 00000000 ____D C:\ProgramData\Origin
  465. 2017-05-05 22:45 - 2017-05-05 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
  466. 2017-05-05 22:45 - 2017-05-05 22:45 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
  467. 2017-05-05 22:44 - 2017-05-05 22:44 - 00694672 _____ (Disc Soft Ltd.) C:\Users\aczyr\Downloads\DTLiteInstaller.exe
  468. 2017-05-05 22:44 - 2017-05-05 22:44 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
  469. 2017-05-05 22:37 - 2017-05-05 22:37 - 00000000 ____D C:\ProgramData\Steam
  470. 2017-05-05 22:29 - 2017-05-05 22:29 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Outlast
  471. 2017-05-05 22:29 - 2017-05-05 22:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
  472. 2017-05-05 19:29 - 2017-05-05 19:29 - 00027011 _____ C:\Users\aczyr\Downloads\Role użytkownika końcowego MM 25.04.1017.xlsx
  473. 2017-05-05 19:28 - 2017-05-05 19:28 - 00133632 _____ C:\Users\aczyr\Downloads\ALIASY Kopia 20170323 ZSRK błędy synchronizacji%27.xlsx
  474. 2017-05-05 16:26 - 2017-06-01 11:21 - 00034328 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
  475. 2017-05-04 20:51 - 2017-05-04 20:51 - 00172450 _____ C:\Users\aczyr\Downloads\eTrapez - WSZYSTKIE 13 KURSÓW ZADANIA WZORY.torrent
  476. 2017-05-04 20:47 - 2017-05-04 20:47 - 00002326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype dla firm 2016.lnk
  477. 2017-05-04 20:47 - 2017-05-04 20:47 - 00002294 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive dla firm.lnk
  478. 2017-05-04 20:47 - 2017-05-04 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office 2016
  479. 2017-05-04 20:44 - 2017-05-04 20:45 - 06251304 _____ (Microsoft Corporation) C:\Users\aczyr\Downloads\setuplanguagepack.x64.pl-pl_.exe
  480. 2017-05-04 20:36 - 2017-05-04 20:36 - 11423558 _____ C:\Users\aczyr\Downloads\KMSpico.10.1.5.rar
  481. 2017-05-04 20:32 - 2017-05-04 20:32 - 37871112 _____ (Dev7studios) C:\Users\aczyr\Downloads\Splashify.Setup.1.3.1.exe
  482. 2017-05-04 20:14 - 2017-05-25 16:49 - 00000000 ____D C:\Program Files\Malwarebytes
  483. 2017-05-04 20:11 - 2017-05-31 12:09 - 00000000 ____D C:\WINDOWS\Minidump
  484. 2017-05-04 20:10 - 2017-05-04 20:10 - 00003656 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
  485. 2017-05-04 20:02 - 2017-05-04 20:47 - 00002226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
  486. 2017-05-04 20:02 - 2017-05-04 20:47 - 00002214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
  487. 2017-05-04 20:02 - 2017-05-04 20:47 - 00002198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
  488. 2017-05-04 20:02 - 2017-05-04 20:47 - 00002196 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
  489. 2017-05-04 20:02 - 2017-05-04 20:47 - 00002192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
  490. 2017-05-04 20:02 - 2017-05-04 20:47 - 00002162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
  491. 2017-05-04 20:02 - 2017-05-04 20:47 - 00002152 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
  492. 2017-05-04 20:00 - 2017-05-25 10:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
  493. 2017-05-04 20:00 - 2017-05-04 20:00 - 00000000 ____D C:\Program Files\Microsoft Office 15
  494. 2017-05-04 19:39 - 2017-05-04 19:39 - 00001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2017.lnk
  495. 2017-05-04 19:36 - 2017-05-04 19:36 - 00996763 _____ C:\Users\aczyr\Downloads\Nina-Simone_zarzadzanie_kariera_muzyczna.pptx
  496. 2017-05-04 19:36 - 2017-05-04 19:36 - 00001151 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2017.lnk
  497. 2017-05-04 19:32 - 2017-05-04 19:32 - 00002520 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2017.lnk
  498. 2017-05-04 19:30 - 2017-05-04 19:30 - 00001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
  499. 2017-05-04 18:36 - 2017-05-29 18:38 - 00001496 _____ C:\Users\aczyr\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
  500. 2017-05-04 18:32 - 2017-05-29 18:10 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Alien Skin
  501. 2017-05-04 18:30 - 2017-05-04 18:30 - 00000000 ____D C:\Users\aczyr\.AS
  502. 2017-05-04 18:28 - 2017-05-04 18:28 - 00000000 ____D C:\Users\aczyr\AppData\LocalLow\Adobe
  503. 2017-05-04 18:19 - 2017-05-28 20:16 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
  504. 2017-05-04 18:19 - 2017-05-04 18:19 - 00003662 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-aczyrnia@gmail.com
  505. 2017-05-04 18:18 - 2017-05-25 22:02 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\IrfanView
  506. 2017-05-04 18:17 - 2017-05-29 18:10 - 00000000 ____D C:\Users\aczyr\AppData\Local\Alien Skin
  507. 2017-05-04 18:17 - 2017-05-04 18:31 - 00000000 ____D C:\ProgramData\Alien Skin
  508. 2017-05-04 18:17 - 2017-05-04 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alien Skin Software
  509. 2017-05-04 18:17 - 2017-05-04 18:17 - 00000000 ____D C:\Program Files\Alien Skin
  510. 2017-05-04 18:17 - 2017-05-04 18:17 - 00000000 ____D C:\Program Files (x86)\Alien Skin
  511. 2017-05-04 18:09 - 2017-05-04 18:11 - 00000000 ____D C:\ProgramData\Logishrd
  512. 2017-05-04 18:09 - 2017-05-04 18:09 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Logishrd
  513. 2017-05-04 18:09 - 2017-05-04 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
  514. 2017-05-04 18:09 - 2017-05-04 18:09 - 00000000 ____D C:\Program Files\Logitech
  515. 2017-05-04 18:09 - 2017-05-04 18:09 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
  516. 2017-05-04 04:23 - 2017-05-04 04:23 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
  517. 2017-05-04 04:23 - 2017-05-04 04:23 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
  518. 2017-05-04 04:23 - 2017-05-04 04:23 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
  519. 2017-05-04 04:23 - 2017-05-04 04:23 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
  520. 2017-05-04 04:23 - 2017-05-04 04:23 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
  521. 2017-05-04 04:23 - 2017-05-04 04:23 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
  522. 2017-05-04 04:23 - 2017-05-04 04:23 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
  523. 2017-05-04 04:23 - 2017-05-04 04:23 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
  524. 2017-05-04 04:23 - 2017-05-04 04:23 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
  525. 2017-05-04 04:23 - 2017-05-04 04:23 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
  526. 2017-05-04 04:23 - 2017-05-04 04:23 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
  527. 2017-05-04 04:23 - 2017-05-04 04:23 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
  528. 2017-05-04 04:23 - 2017-05-04 04:23 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
  529. 2017-05-04 04:23 - 2017-05-04 04:23 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
  530. 2017-05-04 04:23 - 2017-05-04 04:23 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
  531. 2017-05-04 04:23 - 2017-05-04 04:23 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
  532. 2017-05-04 04:23 - 2017-05-04 04:23 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
  533. 2017-05-04 04:23 - 2017-05-04 04:23 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
  534. 2017-05-04 04:23 - 2017-05-04 04:23 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
  535. 2017-05-04 04:23 - 2017-05-04 04:23 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
  536. 2017-05-04 04:23 - 2017-05-04 04:23 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
  537. 2017-05-04 04:23 - 2017-05-04 04:23 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
  538. 2017-05-04 04:23 - 2017-05-04 04:23 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
  539. 2017-05-04 04:23 - 2017-05-04 04:23 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
  540. 2017-05-04 04:23 - 2017-05-04 04:23 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
  541. 2017-05-04 04:23 - 2017-05-04 04:23 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
  542. 2017-05-04 04:23 - 2017-05-04 04:23 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
  543. 2017-05-04 04:23 - 2017-05-04 04:23 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
  544. 2017-05-04 04:23 - 2017-05-04 04:23 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
  545. 2017-05-04 04:23 - 2017-05-04 04:23 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
  546. 2017-05-04 04:23 - 2017-05-04 04:23 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
  547. 2017-05-04 04:23 - 2017-05-04 04:23 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
  548. 2017-05-04 04:23 - 2017-05-04 04:23 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
  549. 2017-05-04 04:23 - 2017-05-04 04:23 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
  550. 2017-05-04 04:23 - 2017-05-04 04:23 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
  551. 2017-05-04 04:23 - 2017-05-04 04:23 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
  552. 2017-05-04 04:23 - 2017-05-04 04:23 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
  553. 2017-05-04 04:23 - 2017-05-04 04:23 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
  554. 2017-05-04 04:23 - 2017-05-04 04:23 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
  555. 2017-05-04 04:23 - 2017-05-04 04:23 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
  556. 2017-05-04 04:23 - 2017-05-04 04:23 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
  557. 2017-05-04 04:23 - 2017-05-04 04:23 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
  558. 2017-05-04 04:23 - 2017-05-04 04:23 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
  559. 2017-05-04 04:23 - 2017-05-04 04:23 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
  560. 2017-05-04 04:23 - 2017-05-04 04:23 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
  561. 2017-05-04 04:23 - 2017-05-04 04:23 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
  562. 2017-05-04 04:23 - 2017-05-04 04:23 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
  563. 2017-05-04 04:23 - 2017-05-04 04:23 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
  564. 2017-05-04 04:23 - 2017-05-04 04:23 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
  565. 2017-05-04 04:23 - 2017-05-04 04:23 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
  566. 2017-05-04 04:23 - 2017-05-04 04:23 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
  567. 2017-05-04 04:23 - 2017-05-04 04:23 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
  568. 2017-05-04 04:23 - 2017-05-04 04:23 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
  569. 2017-05-04 04:23 - 2017-05-04 04:23 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
  570. 2017-05-04 04:23 - 2017-05-04 04:23 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
  571. 2017-05-04 04:23 - 2017-05-04 04:23 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
  572. 2017-05-04 04:23 - 2017-05-04 04:23 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
  573. 2017-05-04 04:23 - 2017-05-04 04:23 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
  574. 2017-05-04 04:23 - 2017-05-04 04:23 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
  575. 2017-05-04 04:23 - 2017-05-04 04:23 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
  576. 2017-05-04 04:23 - 2017-05-04 04:23 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
  577. 2017-05-04 04:23 - 2017-05-04 04:23 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
  578. 2017-05-04 04:23 - 2017-05-04 04:23 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
  579. 2017-05-04 04:23 - 2017-05-04 04:23 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
  580. 2017-05-04 04:23 - 2017-05-04 04:23 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
  581. 2017-05-04 04:23 - 2017-05-04 04:23 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
  582. 2017-05-04 04:23 - 2017-05-04 04:23 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
  583. 2017-05-04 04:23 - 2017-05-04 04:23 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
  584. 2017-05-04 04:23 - 2017-05-04 04:23 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
  585. 2017-05-04 04:23 - 2017-05-04 04:23 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
  586. 2017-05-04 04:23 - 2017-05-04 04:23 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
  587. 2017-05-04 04:23 - 2017-05-04 04:23 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
  588. 2017-05-04 04:23 - 2017-05-04 04:23 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
  589. 2017-05-04 04:23 - 2017-05-04 04:23 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
  590. 2017-05-04 04:23 - 2017-05-04 04:23 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
  591. 2017-05-04 04:23 - 2017-05-04 04:23 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
  592. 2017-05-04 04:23 - 2017-05-04 04:23 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
  593. 2017-05-04 04:23 - 2017-05-04 04:23 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
  594. 2017-05-04 04:23 - 2017-05-04 04:23 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
  595. 2017-05-04 04:23 - 2017-05-04 04:23 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
  596. 2017-05-04 04:23 - 2017-05-04 04:23 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
  597. 2017-05-04 04:23 - 2017-05-04 04:23 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
  598. 2017-05-04 04:23 - 2017-05-04 04:23 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
  599. 2017-05-04 04:23 - 2017-05-04 04:23 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
  600. 2017-05-04 04:23 - 2017-05-04 04:23 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
  601. 2017-05-04 04:23 - 2017-05-04 04:23 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
  602. 2017-05-04 04:23 - 2017-05-04 04:23 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
  603. 2017-05-04 04:23 - 2017-05-04 04:23 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
  604. 2017-05-04 04:23 - 2017-05-04 04:23 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
  605. 2017-05-04 04:23 - 2017-05-04 04:23 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
  606. 2017-05-04 04:23 - 2017-05-04 04:23 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
  607. 2017-05-04 04:23 - 2017-05-04 04:23 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
  608. 2017-05-04 04:23 - 2017-05-04 04:23 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
  609. 2017-05-04 04:23 - 2017-05-04 04:23 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
  610. 2017-05-04 04:23 - 2017-05-04 04:23 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
  611. 2017-05-04 04:23 - 2017-05-04 04:23 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
  612. 2017-05-04 04:23 - 2017-05-04 04:23 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
  613. 2017-05-04 04:23 - 2017-05-04 04:23 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
  614. 2017-05-04 04:23 - 2017-05-04 04:23 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
  615. 2017-05-04 04:23 - 2017-05-04 04:23 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
  616. 2017-05-04 04:23 - 2017-05-04 04:23 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
  617. 2017-05-04 04:23 - 2017-05-04 04:23 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
  618. 2017-05-04 04:23 - 2017-05-04 04:23 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
  619. 2017-05-04 04:23 - 2017-05-04 04:23 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
  620. 2017-05-04 04:23 - 2017-05-04 04:23 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
  621. 2017-05-04 04:23 - 2017-05-04 04:23 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
  622. 2017-05-04 04:23 - 2017-05-04 04:23 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
  623. 2017-05-04 04:23 - 2017-05-04 04:23 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
  624. 2017-05-04 04:23 - 2017-05-04 04:23 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
  625. 2017-05-04 04:23 - 2017-05-04 04:23 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
  626. 2017-05-04 04:23 - 2017-05-04 04:23 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
  627. 2017-05-04 04:23 - 2017-05-04 04:23 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
  628. 2017-05-04 04:23 - 2017-05-04 04:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
  629. 2017-05-04 04:23 - 2017-05-04 04:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
  630. 2017-05-04 04:23 - 2017-05-04 04:23 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
  631. 2017-05-04 04:23 - 2017-05-04 04:23 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
  632. 2017-05-04 04:23 - 2017-05-04 04:23 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
  633. 2017-05-04 04:23 - 2017-05-04 04:23 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
  634. 2017-05-04 04:23 - 2017-05-04 04:23 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
  635. 2017-05-04 04:23 - 2017-05-04 04:23 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
  636. 2017-05-04 04:23 - 2017-05-04 04:23 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
  637. 2017-05-04 04:23 - 2017-05-04 04:23 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
  638. 2017-05-04 04:23 - 2017-05-04 04:23 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
  639. 2017-05-04 04:21 - 2017-06-03 19:48 - 01040248 _____ C:\WINDOWS\system32\perfh015.dat
  640. 2017-05-04 04:21 - 2017-06-03 19:48 - 00225782 _____ C:\WINDOWS\system32\perfc015.dat
  641. 2017-05-04 04:21 - 2017-05-04 04:21 - 00343212 _____ C:\WINDOWS\system32\perfi015.dat
  642. 2017-05-04 04:21 - 2017-05-04 04:21 - 00041370 _____ C:\WINDOWS\system32\perfd015.dat
  643. 2017-05-04 04:21 - 2017-05-04 04:21 - 00000000 ____D C:\WINDOWS\SysWOW64\pl
  644. 2017-05-04 04:21 - 2017-05-04 04:21 - 00000000 ____D C:\WINDOWS\system32\pl
  645. 2017-05-04 04:21 - 2017-03-18 08:00 - 07850496 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0015.dll
  646. 2017-05-04 04:20 - 2017-05-04 04:20 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
  647.  
  648. ==================== One Month Modified files and folders ========
  649.  
  650. (If an entry is included in the fixlist, the file/folder will be moved.)
  651.  
  652. 2017-06-03 22:01 - 2017-05-03 18:25 - 00000000 ____D C:\ProgramData\NVIDIA
  653. 2017-06-03 22:00 - 2017-05-03 21:10 - 00000000 ___RD C:\Users\aczyr\Creative Cloud Files
  654. 2017-06-03 22:00 - 2017-05-03 16:39 - 00000000 ____D C:\Users\aczyr\AppData\Local\Adobe
  655. 2017-06-03 21:59 - 2017-05-03 18:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
  656. 2017-06-03 21:59 - 2017-05-03 18:25 - 00392992 _____ C:\WINDOWS\system32\FNTCACHE.DAT
  657. 2017-06-03 21:59 - 2017-05-03 15:39 - 00000000 ____D C:\Program Files (x86)\Steam
  658. 2017-06-03 21:59 - 2017-05-03 15:28 - 00000000 ___RD C:\Users\aczyr\OneDrive
  659. 2017-06-03 21:58 - 2017-05-03 16:34 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\qBittorrent
  660. 2017-06-03 21:58 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI
  661. 2017-06-03 20:11 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF
  662. 2017-06-03 19:48 - 2017-05-03 15:29 - 02287504 _____ C:\WINDOWS\system32\PerfStringBackup.INI
  663. 2017-06-03 19:34 - 2017-05-03 15:26 - 00000000 ____D C:\Users\aczyr\AppData\Local\VirtualStore
  664. 2017-06-03 13:07 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
  665. 2017-06-03 13:07 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness
  666. 2017-06-03 13:05 - 2017-05-03 18:25 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
  667. 2017-06-03 13:05 - 2017-05-03 16:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
  668. 2017-06-03 13:04 - 2017-05-03 18:25 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
  669. 2017-05-31 14:10 - 2017-05-03 15:54 - 00565416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
  670. 2017-05-31 12:09 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
  671. 2017-05-30 17:10 - 2017-05-03 18:26 - 00000000 ____D C:\Users\aczyr
  672. 2017-05-29 21:18 - 2017-05-03 19:13 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\vlc
  673. 2017-05-29 18:14 - 2017-05-03 16:15 - 00000000 ____D C:\ProgramData\Package Cache
  674. 2017-05-28 20:16 - 2017-05-03 16:41 - 00000000 ____D C:\Program Files\Common Files\Adobe
  675. 2017-05-28 20:16 - 2017-05-03 16:39 - 00000000 ____D C:\ProgramData\Adobe
  676. 2017-05-28 14:55 - 2017-05-03 16:32 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome
  677. 2017-05-28 14:54 - 2017-05-03 15:38 - 00002350 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  678. 2017-05-28 14:54 - 2017-05-03 15:38 - 00000000 ____D C:\Program Files (x86)\Google
  679. 2017-05-25 21:38 - 2017-05-03 18:52 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\TIDAL
  680. 2017-05-25 21:38 - 2017-05-03 18:52 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TIDAL
  681. 2017-05-25 11:04 - 2017-05-03 15:26 - 00000000 ____D C:\Users\aczyr\AppData\Local\Packages
  682. 2017-05-25 10:42 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
  683. 2017-05-25 10:22 - 2017-05-03 17:47 - 00000000 ____D C:\Program Files (x86)\GOG Galaxy
  684. 2017-05-23 13:19 - 2017-05-03 15:53 - 00000000 ____D C:\WINDOWS\system32\MRT
  685. 2017-05-23 13:18 - 2017-05-03 15:53 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
  686. 2017-05-20 22:13 - 2017-05-03 21:51 - 00000000 ____D C:\Users\aczyr\AppData\Local\Ubisoft Game Launcher
  687. 2017-05-20 16:25 - 2017-05-03 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
  688. 2017-05-20 12:52 - 2017-05-03 18:52 - 00000000 ____D C:\Users\aczyr\AppData\Local\SquirrelTemp
  689. 2017-05-20 12:21 - 2017-03-19 04:30 - 00000000 ____D C:\WINDOWS\OCR
  690. 2017-05-20 12:20 - 2017-05-03 15:44 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Launchy
  691. 2017-05-20 12:20 - 2017-05-03 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  692. 2017-05-20 12:20 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\PrintDialog
  693. 2017-05-20 12:20 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
  694. 2017-05-20 12:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
  695. 2017-05-20 12:20 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep
  696. 2017-05-20 12:18 - 2017-05-03 18:34 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
  697. 2017-05-20 12:18 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\registration
  698. 2017-05-20 11:10 - 2017-05-03 17:43 - 00000000 ___DC C:\WINDOWS\Panther
  699. 2017-05-19 18:03 - 2017-05-03 15:40 - 01609232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
  700. 2017-05-19 18:03 - 2017-05-03 15:40 - 00226712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
  701. 2017-05-19 17:47 - 2017-05-03 15:40 - 04136736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
  702. 2017-05-19 17:47 - 2017-05-03 15:40 - 03647864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
  703. 2017-05-19 14:22 - 2017-05-03 15:40 - 00045061 _____ C:\WINDOWS\system32\nvinfo.pb
  704. 2017-05-13 17:48 - 2017-05-03 18:40 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Splashify
  705. 2017-05-12 19:18 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache
  706. 2017-05-10 21:44 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
  707. 2017-05-10 14:03 - 2017-05-03 15:26 - 00000000 __RHD C:\Users\Public\AccountPictures
  708. 2017-05-10 00:16 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
  709. 2017-05-10 00:16 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
  710. 2017-05-10 00:16 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
  711. 2017-05-05 23:03 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
  712. 2017-05-05 23:03 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI
  713. 2017-05-05 16:38 - 2017-05-03 18:40 - 00002347 _____ C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Splashify.lnk
  714. 2017-05-04 20:12 - 2017-05-03 21:10 - 00000000 ____D C:\ProgramData\boost_interprocess
  715. 2017-05-04 20:00 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
  716. 2017-05-04 19:39 - 2017-05-03 16:41 - 00000000 ____D C:\Program Files\Adobe
  717. 2017-05-04 19:39 - 2017-05-03 15:26 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Adobe
  718. 2017-05-04 18:31 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Resources
  719. 2017-05-04 18:19 - 2017-05-03 18:40 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\NVIDIA
  720. 2017-05-04 15:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat
  721. 2017-05-04 04:24 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
  722. 2017-05-04 04:23 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup
  723. 2017-05-04 04:23 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
  724. 2017-05-04 04:23 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12
  725. 2017-05-04 04:23 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
  726. 2017-05-04 04:23 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
  727. 2017-05-04 04:23 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning
  728. 2017-05-04 04:23 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism
  729. 2017-05-04 04:21 - 2017-03-19 04:29 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
  730. 2017-05-04 04:21 - 2017-03-19 04:29 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
  731. 2017-05-04 04:21 - 2017-03-19 04:29 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
  732. 2017-05-04 04:21 - 2017-03-19 04:29 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
  733. 2017-05-04 04:21 - 2017-03-19 04:29 - 00000000 ____D C:\WINDOWS\system32\winrm
  734. 2017-05-04 04:21 - 2017-03-19 04:29 - 00000000 ____D C:\WINDOWS\system32\WCN
  735. 2017-05-04 04:21 - 2017-03-19 04:29 - 00000000 ____D C:\WINDOWS\system32\slmgr
  736. 2017-05-04 04:21 - 2017-03-19 04:29 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
  737. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
  738. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
  739. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ___RD C:\Program Files\Windows Defender
  740. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
  741. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
  742. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
  743. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe
  744. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\migwiz
  745. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Com
  746. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
  747. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\IME
  748. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\System
  749. 2017-05-04 04:21 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Defender
  750. 2017-05-04 04:21 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\servicing
  751.  
  752. ==================== Files in the root of some directories =======
  753.  
  754. 2017-05-04 18:36 - 2017-05-29 18:38 - 0001496 _____ () C:\Users\aczyr\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
  755. 2017-05-03 18:26 - 2017-05-03 18:26 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
  756.  
  757. ==================== Bamital & volsnap ======================
  758.  
  759. (There is no automatic fix for files that do not pass verification.)
  760.  
  761. C:\WINDOWS\system32\winlogon.exe => File is digitally signed
  762. C:\WINDOWS\system32\wininit.exe => File is digitally signed
  763. C:\WINDOWS\explorer.exe => File is digitally signed
  764. C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
  765. C:\WINDOWS\system32\svchost.exe => File is digitally signed
  766. C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
  767. C:\WINDOWS\system32\services.exe => File is digitally signed
  768. C:\WINDOWS\system32\User32.dll => File is digitally signed
  769. C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
  770. C:\WINDOWS\system32\userinit.exe => File is digitally signed
  771. C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
  772. C:\WINDOWS\system32\rpcss.dll => File is digitally signed
  773. C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
  774. C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
  775. C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
  776.  
  777. LastRegBack: 2017-05-28 15:09
  778.  
  779. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!