API tools faq
paste
Guest User

Otl

a guest
Aug 31st, 2018
78
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 101.59 KB | None | 0 0
raw download clone embed print report
  1. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  2. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  3.  
  4. [color=#E56717]========== Processes (SafeList) ==========[/color]
  5.  
  6. PRC - File not found --
  7. PRC - [2018.08.31 00:27:37 | 000,601,088 | ---- | M] (OldTimer Tools) -- C:\Users\WYSOWIANKA\Downloads\OTL 3.2.70.2.exe
  8. PRC - [2018.08.30 06:19:40 | 001,649,184 | ---- | M] (Microsoft Corporation) -- C:\Users\WYSOWIANKA\AppData\Local\Microsoft\OneDrive\OneDrive.exe
  9. PRC - [2016.07.16 15:08:52 | 010,653,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
  10. PRC - [2016.07.16 04:43:06 | 000,631,808 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCuiL.exe
  11. PRC - [2016.07.16 04:42:40 | 004,673,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
  12. PRC - [2016.07.16 04:42:02 | 001,653,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
  13. PRC - [2015.08.21 22:09:14 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
  14.  
  15.  
  16. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  17.  
  18.  
  19. [color=#E56717]========== Services (SafeList) ==========[/color]
  20.  
  21. SRV:[b]64bit:[/b] - [2018.08.10 15:04:12 | 000,296,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\rempl\sedsvc.exe -- (sedsvc)
  22. SRV:[b]64bit:[/b] - [2018.06.27 12:10:44 | 000,131,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\osrss.dll -- (osrss)
  23. SRV:[b]64bit:[/b] - [2018.02.18 03:14:25 | 000,558,080 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
  24. SRV:[b]64bit:[/b] - [2018.02.18 03:11:26 | 001,224,704 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
  25. SRV:[b]64bit:[/b] - [2017.04.27 17:51:49 | 003,318,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  26. SRV:[b]64bit:[/b] - [2016.07.16 04:43:51 | 000,650,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
  27. SRV:[b]64bit:[/b] - [2016.07.16 04:43:50 | 000,082,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  28. SRV:[b]64bit:[/b] - [2016.07.16 04:43:47 | 000,560,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
  29. SRV:[b]64bit:[/b] - [2016.07.16 04:43:47 | 000,436,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
  30. SRV:[b]64bit:[/b] - [2016.07.16 04:43:18 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  31. SRV:[b]64bit:[/b] - [2016.07.16 04:43:10 | 001,836,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
  32. SRV:[b]64bit:[/b] - [2016.07.16 04:42:43 | 000,691,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  33. SRV:[b]64bit:[/b] - [2016.07.16 04:42:42 | 000,088,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  34. SRV:[b]64bit:[/b] - [2016.07.16 04:42:39 | 000,285,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
  35. SRV:[b]64bit:[/b] - [2016.07.16 04:42:39 | 000,161,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc)
  36. SRV:[b]64bit:[/b] - [2016.07.16 04:42:38 | 001,312,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
  37. SRV:[b]64bit:[/b] - [2016.07.16 04:42:38 | 001,025,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
  38. SRV:[b]64bit:[/b] - [2016.07.16 04:42:38 | 000,781,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc)
  39. SRV:[b]64bit:[/b] - [2016.07.16 04:42:38 | 000,407,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  40. SRV:[b]64bit:[/b] - [2016.07.16 04:42:38 | 000,141,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc)
  41. SRV:[b]64bit:[/b] - [2016.07.16 04:42:38 | 000,057,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
  42. SRV:[b]64bit:[/b] - [2016.07.16 04:42:38 | 000,055,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  43. SRV:[b]64bit:[/b] - [2016.07.16 04:42:37 | 000,718,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  44. SRV:[b]64bit:[/b] - [2016.07.16 04:42:36 | 001,020,928 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
  45. SRV:[b]64bit:[/b] - [2016.07.16 04:42:36 | 000,183,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
  46. SRV:[b]64bit:[/b] - [2016.07.16 04:42:34 | 002,264,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
  47. SRV:[b]64bit:[/b] - [2016.07.16 04:42:31 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
  48. SRV:[b]64bit:[/b] - [2016.07.16 04:42:28 | 000,447,488 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  49. SRV:[b]64bit:[/b] - [2016.07.16 04:42:28 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
  50. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 001,980,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  51. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,827,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  52. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,614,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc)
  53. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,265,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
  54. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,096,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  55. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,093,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
  56. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_2edc5)
  57. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_2edc5)
  58. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_2edc5)
  59. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_2edc5)
  60. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_2edc5)
  61. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_2edc5)
  62. SRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_2edc5)
  63. SRV:[b]64bit:[/b] - [2016.07.16 04:42:23 | 000,765,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
  64. SRV:[b]64bit:[/b] - [2016.07.16 04:42:23 | 000,366,592 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
  65. SRV:[b]64bit:[/b] - [2016.07.16 04:42:22 | 000,803,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer)
  66. SRV:[b]64bit:[/b] - [2016.07.16 04:42:22 | 000,337,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  67. SRV:[b]64bit:[/b] - [2016.07.16 04:42:20 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
  68. SRV:[b]64bit:[/b] - [2016.07.16 04:42:19 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
  69. SRV:[b]64bit:[/b] - [2016.07.16 04:42:16 | 000,287,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService)
  70. SRV:[b]64bit:[/b] - [2016.07.16 04:42:16 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  71. SRV:[b]64bit:[/b] - [2016.07.16 04:42:16 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  72. SRV:[b]64bit:[/b] - [2016.07.16 04:42:13 | 000,590,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
  73. SRV:[b]64bit:[/b] - [2016.07.16 04:42:12 | 000,519,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  74. SRV:[b]64bit:[/b] - [2016.07.16 04:42:12 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService)
  75. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 001,512,448 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
  76. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 001,184,256 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
  77. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,983,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
  78. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,765,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  79. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,574,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
  80. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,387,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  81. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,358,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  82. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,339,968 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
  83. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,326,656 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
  84. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,234,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
  85. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,203,776 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
  86. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
  87. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,177,664 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc)
  88. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,077,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
  89. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,074,240 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService)
  90. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
  91. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,034,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
  92. SRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
  93. SRV:[b]64bit:[/b] - [2016.07.16 04:42:07 | 001,159,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
  94. SRV:[b]64bit:[/b] - [2016.07.16 04:42:06 | 004,136,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
  95. SRV:[b]64bit:[/b] - [2016.07.16 04:42:06 | 000,729,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
  96. SRV:[b]64bit:[/b] - [2016.07.16 04:42:06 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
  97. SRV:[b]64bit:[/b] - [2016.07.16 04:42:05 | 002,104,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  98. SRV:[b]64bit:[/b] - [2016.07.16 04:42:05 | 001,012,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
  99. SRV:[b]64bit:[/b] - [2016.07.16 04:42:05 | 000,409,088 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
  100. SRV:[b]64bit:[/b] - [2016.07.16 04:42:05 | 000,337,408 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc)
  101. SRV:[b]64bit:[/b] - [2016.07.16 04:42:05 | 000,197,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  102. SRV:[b]64bit:[/b] - [2016.07.16 04:42:05 | 000,152,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
  103. SRV:[b]64bit:[/b] - [2016.07.16 04:42:05 | 000,140,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
  104. SRV:[b]64bit:[/b] - [2016.07.16 04:42:05 | 000,095,232 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate)
  105. SRV:[b]64bit:[/b] - [2016.07.16 04:42:04 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost)
  106. SRV:[b]64bit:[/b] - [2016.07.16 04:42:02 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss)
  107. SRV:[b]64bit:[/b] - [2016.07.16 04:42:02 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv)
  108. SRV:[b]64bit:[/b] - [2016.07.16 04:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
  109. SRV:[b]64bit:[/b] - [2016.07.16 04:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  110. SRV:[b]64bit:[/b] - [2016.07.16 04:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  111. SRV:[b]64bit:[/b] - [2016.07.16 04:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  112. SRV:[b]64bit:[/b] - [2016.07.16 04:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  113. SRV:[b]64bit:[/b] - [2016.07.16 04:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
  114. SRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,321,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
  115. SRV:[b]64bit:[/b] - [2015.10.20 17:14:46 | 000,255,472 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  116. SRV:[b]64bit:[/b] - [2015.08.21 22:09:14 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
  117. SRV - [2018.08.30 09:03:05 | 003,905,952 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\NisSrv.exe -- (WdNisSvc)
  118. SRV - [2018.08.30 09:03:05 | 000,110,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MsMpEng.exe -- (WinDefend)
  119. SRV - [2017.04.27 17:51:49 | 003,318,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  120. SRV - [2016.07.16 04:43:02 | 000,298,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\syswow64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  121. SRV - [2016.07.16 04:42:56 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\syswow64\smphost.dll -- (smphost)
  122. SRV - [2016.07.16 04:42:55 | 003,369,984 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\syswow64\Windows.StateRepository.dll -- (StateRepository)
  123. SRV - [2016.07.16 04:42:55 | 000,968,704 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\syswow64\Unistore.dll -- (UnistoreSvc)
  124. SRV - [2016.07.16 04:42:49 | 000,483,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\syswow64\CoreMessaging.dll -- (CoreMessagingRegistrar)
  125.  
  126.  
  127. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  128.  
  129. DRV:[b]64bit:[/b] - [2018.08.30 09:03:06 | 000,340,008 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wd\WdFilter.sys -- (WdFilter)
  130. DRV:[b]64bit:[/b] - [2018.08.30 09:03:06 | 000,061,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wd\WdNisDrv.sys -- (WdNisDrv)
  131. DRV:[b]64bit:[/b] - [2018.08.30 09:03:06 | 000,046,584 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\wd\WdBoot.sys -- (WdBoot)
  132. DRV:[b]64bit:[/b] - [2017.08.10 05:21:44 | 000,047,672 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dtliteusbbus.sys -- (dtliteusbbus)
  133. DRV:[b]64bit:[/b] - [2017.08.10 05:21:02 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus)
  134. DRV:[b]64bit:[/b] - [2017.07.15 09:05:42 | 000,047,672 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dtultrausbbus.sys -- (dtultrausbbus)
  135. DRV:[b]64bit:[/b] - [2017.07.15 09:05:07 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dtultrascsibus.sys -- (dtultrascsibus)
  136. DRV:[b]64bit:[/b] - [2016.11.04 04:07:06 | 000,113,160 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\IaNVMe.sys -- (IaNVMe)
  137. DRV:[b]64bit:[/b] - [2016.08.02 15:30:16 | 000,052,816 | ---- | M] (Toshiba Client Solutions Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Thotkey.sys -- (Thotkey)
  138. DRV:[b]64bit:[/b] - [2016.07.21 12:24:44 | 000,053,888 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ)
  139. DRV:[b]64bit:[/b] - [2016.07.16 15:09:00 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  140. DRV:[b]64bit:[/b] - [2016.07.16 15:08:51 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  141. DRV:[b]64bit:[/b] - [2016.07.16 04:44:01 | 000,030,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
  142. DRV:[b]64bit:[/b] - [2016.07.16 04:42:38 | 000,125,440 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
  143. DRV:[b]64bit:[/b] - [2016.07.16 04:42:36 | 000,198,496 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wof.sys -- (Wof)
  144. DRV:[b]64bit:[/b] - [2016.07.16 04:42:36 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
  145. DRV:[b]64bit:[/b] - [2016.07.16 04:42:36 | 000,078,336 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
  146. DRV:[b]64bit:[/b] - [2016.07.16 04:42:36 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr)
  147. DRV:[b]64bit:[/b] - [2016.07.16 04:42:35 | 000,928,608 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refsv1.sys -- (ReFSv1)
  148. DRV:[b]64bit:[/b] - [2016.07.16 04:42:35 | 000,376,160 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
  149. DRV:[b]64bit:[/b] - [2016.07.16 04:42:35 | 000,227,328 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
  150. DRV:[b]64bit:[/b] - [2016.07.16 04:42:35 | 000,045,920 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate)
  151. DRV:[b]64bit:[/b] - [2016.07.16 04:42:28 | 000,107,032 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
  152. DRV:[b]64bit:[/b] - [2016.07.16 04:42:28 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
  153. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,263,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
  154. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,201,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
  155. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,151,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
  156. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,108,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101)
  157. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,095,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
  158. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,079,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
  159. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,078,336 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
  160. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,074,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
  161. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
  162. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
  163. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd)
  164. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,031,584 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  165. DRV:[b]64bit:[/b] - [2016.07.16 04:42:27 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
  166. DRV:[b]64bit:[/b] - [2016.07.16 04:42:23 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
  167. DRV:[b]64bit:[/b] - [2016.07.16 04:42:22 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
  168. DRV:[b]64bit:[/b] - [2016.07.16 04:42:18 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
  169. DRV:[b]64bit:[/b] - [2016.07.16 04:42:16 | 000,062,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
  170. DRV:[b]64bit:[/b] - [2016.07.16 04:42:13 | 000,719,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
  171. DRV:[b]64bit:[/b] - [2016.07.16 04:42:12 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
  172. DRV:[b]64bit:[/b] - [2016.07.16 04:42:11 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
  173. DRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,168,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
  174. DRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,156,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
  175. DRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,119,648 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs)
  176. DRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,070,144 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\registry.sys -- (clreg)
  177. DRV:[b]64bit:[/b] - [2016.07.16 04:42:09 | 000,066,560 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs)
  178. DRV:[b]64bit:[/b] - [2016.07.16 04:42:04 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice)
  179. DRV:[b]64bit:[/b] - [2016.07.16 04:42:03 | 000,210,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
  180. DRV:[b]64bit:[/b] - [2016.07.16 04:42:03 | 000,126,816 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
  181. DRV:[b]64bit:[/b] - [2016.07.16 04:42:03 | 000,108,384 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
  182. DRV:[b]64bit:[/b] - [2016.07.16 04:42:03 | 000,090,624 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx)
  183. DRV:[b]64bit:[/b] - [2016.07.16 04:42:03 | 000,088,576 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
  184. DRV:[b]64bit:[/b] - [2016.07.16 04:42:03 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  185. DRV:[b]64bit:[/b] - [2016.07.16 04:42:03 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
  186. DRV:[b]64bit:[/b] - [2016.07.16 04:42:03 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
  187. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,535,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
  188. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,381,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
  189. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,279,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  190. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,220,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  191. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,137,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
  192. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,096,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
  193. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,095,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
  194. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
  195. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
  196. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
  197. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
  198. DRV:[b]64bit:[/b] - [2016.07.16 04:41:55 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
  199. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,258,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
  200. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,176,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
  201. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,081,408 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c)
  202. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,064,512 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2)
  203. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
  204. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,050,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
  205. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
  206. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
  207. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
  208. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,034,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  209. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,033,280 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio)
  210. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
  211. DRV:[b]64bit:[/b] - [2016.07.16 04:41:54 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
  212. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 002,104,160 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd)
  213. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
  214. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,842,584 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
  215. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
  216. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,544,608 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
  217. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,526,176 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
  218. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,346,976 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi)
  219. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
  220. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  221. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,131,424 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
  222. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,123,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scmdisk0101.sys -- (scmdisk0101)
  223. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,121,344 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C63x64.sys -- (L1C)
  224. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
  225. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,108,896 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
  226. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
  227. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,105,824 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
  228. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,101,216 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
  229. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus)
  230. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  231. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
  232. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,082,776 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
  233. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,077,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
  234. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  235. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,064,864 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
  236. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  237. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
  238. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,061,792 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
  239. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
  240. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
  241. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
  242. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,032,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
  243. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,032,096 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
  244. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  245. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
  246. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  247. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev)
  248. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,016,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume)
  249. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
  250. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
  251. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
  252. DRV:[b]64bit:[/b] - [2016.07.16 04:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn.sys -- (bcmfn)
  253. DRV:[b]64bit:[/b] - [2016.07.16 04:41:52 | 003,418,976 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  254. DRV:[b]64bit:[/b] - [2016.07.16 04:41:52 | 000,533,856 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  255. DRV:[b]64bit:[/b] - [2016.07.16 04:41:52 | 000,048,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
  256. DRV:[b]64bit:[/b] - [2016.07.16 04:41:52 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
  257. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,118,112 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  258. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
  259. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
  260. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
  261. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  262. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  263. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
  264. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  265. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
  266. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
  267. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
  268. DRV:[b]64bit:[/b] - [2016.07.16 04:41:50 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid)
  269. DRV:[b]64bit:[/b] - [2016.01.29 02:00:00 | 004,171,512 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  270. DRV:[b]64bit:[/b] - [2015.10.20 17:14:48 | 021,648,880 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  271. DRV:[b]64bit:[/b] - [2015.10.20 17:14:46 | 000,674,288 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  272. DRV:[b]64bit:[/b] - [2015.08.13 06:31:18 | 000,410,848 | ---- | M] (Realsil Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUer.sys -- (RTSUER)
  273. DRV:[b]64bit:[/b] - [2015.07.21 14:42:06 | 000,102,912 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdWT6.sys -- (AtiHDAudioService)
  274. DRV:[b]64bit:[/b] - [2015.05.27 18:13:18 | 000,022,736 | ---- | M] (TOSHIBA) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\QIOMem.sys -- (QIOMem)
  275. DRV:[b]64bit:[/b] - [2014.02.11 17:36:52 | 000,059,616 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.3)
  276. DRV:[b]64bit:[/b] - [2011.01.27 03:34:12 | 001,577,088 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
  277. DRV:[b]64bit:[/b] - [2010.12.01 07:12:06 | 000,250,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
  278. DRV:[b]64bit:[/b] - [2010.11.30 05:40:04 | 000,307,304 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUVStor.sys -- (RSUSBVSTOR)
  279. DRV:[b]64bit:[/b] - [2010.06.18 07:45:00 | 000,018,872 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec)
  280. DRV:[b]64bit:[/b] - [2009.06.19 01:01:00 | 000,009,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Toshidpt.sys -- (toshidpt)
  281. DRV:[b]64bit:[/b] - [2009.06.17 03:01:00 | 000,054,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte)
  282. DRV:[b]64bit:[/b] - [2007.01.15 06:53:00 | 000,057,344 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosdbt.sys -- (tosdbt)
  283. DRV - [2016.07.16 04:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
  284.  
  285.  
  286. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  287.  
  288.  
  289. [color=#E56717]========== Internet Explorer ==========[/color]
  290.  
  291. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  292. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  293. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  294. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  295. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  296.  
  297. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
  298. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  299.  
  300.  
  301.  
  302.  
  303. O1 HOSTS File: ([2018.08.30 02:01:14 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  304. O4:[b]64bit:[/b] - HKLM..\Run: [WindowsDefender] C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Corporation)
  305. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
  306. O4 - HKCU..\Run: [MicrosoftRuntimeUpdate] C:\Users\WYSOWIANKA\AppData\Roaming\libraries\MicrosoftRuntimeUpdate.vbe ()
  307. O4 - HKCU..\Run: [OneDrive] C:\Users\WYSOWIANKA\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
  308. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  309. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  310. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  311. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  312. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
  313. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  314. O13[b]64bit:[/b] - gopher Prefix: missing
  315. O13 - gopher Prefix: missing
  316. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.110.4.21
  317. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{af2f4dc4-595f-467a-93c4-49db6a8ffc9c}: DhcpNameServer = 192.110.4.21
  318. O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  319. O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  320. O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\syswow64\tbauth.dll (Microsoft Corporation)
  321. O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\syswow64\tbauth.dll (Microsoft Corporation)
  322. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  323. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  324. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  325. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  326. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  327. O32 - HKLM CDRom: AutoRun - 1
  328. O34 - HKLM BootExecute: (autocheck autochk *)
  329. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  330. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  331. O35 - HKLM\..comfile [open] -- "%1" %*
  332. O35 - HKLM\..exefile [open] -- "%1" %*
  333. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  334. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  335. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  336. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  337. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  338. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  339.  
  340. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  341.  
  342. [2018.08.31 00:03:55 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  343. [2018.08.30 12:43:24 | 000,000,000 | ---D | C] -- C:\Windows\{B58AFBDA-7D5B-40C0-BE79-D9F3286E2165}
  344. [2018.08.30 11:26:53 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\qBittorrent
  345. [2018.08.30 11:26:53 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\qBittorrent
  346. [2018.08.30 11:26:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
  347. [2018.08.30 11:26:17 | 000,000,000 | ---D | C] -- C:\Program Files\qBittorrent
  348. [2018.08.30 11:15:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
  349. [2018.08.30 11:15:52 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\Google
  350. [2018.08.30 10:52:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
  351. [2018.08.30 10:52:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
  352. [2018.08.30 10:52:34 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
  353. [2018.08.30 10:52:34 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
  354. [2018.08.30 10:52:34 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
  355. [2018.08.30 10:52:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
  356. [2018.08.30 10:52:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
  357. [2018.08.30 10:52:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
  358. [2018.08.30 10:52:33 | 000,000,000 | -HSD | C] -- C:\Documents and Settings
  359. [2018.08.30 10:48:03 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Macromedia
  360. [2018.08.30 10:45:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
  361. [2018.08.30 10:45:33 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD
  362. [2018.08.30 10:45:27 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
  363. [2018.08.30 10:44:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
  364. [2018.08.30 10:44:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
  365. [2018.08.30 10:43:58 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT
  366. [2018.08.30 10:43:54 | 000,000,000 | ---D | C] -- C:\AMD
  367. [2018.08.30 10:43:35 | 000,000,000 | ---D | C] -- C:\Program Files\AMD
  368. [2018.08.30 10:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\USOShared
  369. [2018.08.30 10:36:11 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
  370. [2018.08.30 10:34:29 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SleepStudy
  371. [2018.08.30 10:34:29 | 000,000,000 | ---D | C] -- C:\Windows\ServiceProfiles
  372. [2018.08.30 10:34:26 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\Microsoft
  373. [2018.08.30 09:03:20 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\wd
  374. [2018.08.30 09:03:13 | 000,340,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wd\WdFilter.sys
  375. [2018.08.30 09:03:13 | 000,061,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wd\WdNisDrv.sys
  376. [2018.08.30 09:03:13 | 000,046,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wd\WdBoot.sys
  377. [2018.08.30 09:01:29 | 000,000,000 | ---D | C] -- C:\Program Files\rempl
  378. [2018.08.30 09:01:01 | 000,000,000 | ---D | C] -- C:\Windows\UpdateAssistant
  379. [2018.08.30 09:00:39 | 000,131,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osrss.dll
  380. [2018.08.30 08:58:05 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
  381. [2018.08.30 08:27:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Two Point Hospital
  382. [2018.08.30 08:25:12 | 000,000,000 | ---D | C] -- C:\games
  383. [2018.08.30 08:18:51 | 000,000,000 | --SD | C] -- C:\Windows\UpdateAssistantV2
  384. [2018.08.30 07:52:13 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Two Point Hospital
  385. [2018.08.30 06:20:03 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sda
  386. [2018.08.30 02:56:54 | 000,722,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vb40032.dll
  387. [2018.08.30 02:56:54 | 000,222,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tabctl32.ocx
  388. [2018.08.30 02:56:54 | 000,084,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysinfo.ocx
  389. [2018.08.30 02:56:53 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp70.dll
  390. [2018.08.30 02:56:53 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr70.dll
  391. [2018.08.30 02:56:53 | 000,219,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\richtx32.ocx
  392. [2018.08.30 02:56:53 | 000,179,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmask32.ocx
  393. [2018.08.30 02:56:53 | 000,130,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msstdfmt.dll
  394. [2018.08.30 02:56:53 | 000,127,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswinsck.ocx
  395. [2018.08.30 02:56:53 | 000,108,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msstkprp.dll
  396. [2018.08.30 02:56:53 | 000,104,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\picclp32.ocx
  397. [2018.08.30 02:56:53 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvci70.dll
  398. [2018.08.30 02:56:52 | 001,070,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscomctl.ocx
  399. [2018.08.30 02:56:52 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71.dll
  400. [2018.08.30 02:56:52 | 001,054,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71u.dll
  401. [2018.08.30 02:56:52 | 001,017,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70u.dll
  402. [2018.08.30 02:56:52 | 000,660,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscomct2.ocx
  403. [2018.08.30 02:56:52 | 000,444,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshflxgd.ocx
  404. [2018.08.30 02:56:52 | 000,279,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdatgrd.ocx
  405. [2018.08.30 02:56:52 | 000,259,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msflxgrd.ocx
  406. [2018.08.30 02:56:52 | 000,253,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdatlst.ocx
  407. [2018.08.30 02:56:52 | 000,131,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinet.ocx
  408. [2018.08.30 02:56:52 | 000,119,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscomm32.ocx
  409. [2018.08.30 02:56:52 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71deu.dll
  410. [2018.08.30 02:56:52 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71ita.dll
  411. [2018.08.30 02:56:52 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71fra.dll
  412. [2018.08.30 02:56:52 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71esp.dll
  413. [2018.08.30 02:56:52 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70ita.dll
  414. [2018.08.30 02:56:52 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70fra.dll
  415. [2018.08.30 02:56:52 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70esp.dll
  416. [2018.08.30 02:56:52 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70deu.dll
  417. [2018.08.30 02:56:52 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71enu.dll
  418. [2018.08.30 02:56:52 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70enu.dll
  419. [2018.08.30 02:56:52 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71kor.dll
  420. [2018.08.30 02:56:52 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71jpn.dll
  421. [2018.08.30 02:56:52 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70kor.dll
  422. [2018.08.30 02:56:52 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70jpn.dll
  423. [2018.08.30 02:56:52 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71cht.dll
  424. [2018.08.30 02:56:52 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70cht.dll
  425. [2018.08.30 02:56:52 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71chs.dll
  426. [2018.08.30 02:56:52 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70chs.dll
  427. [2018.08.30 02:56:51 | 001,024,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc70.dll
  428. [2018.08.30 02:56:51 | 000,617,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comctl32.ocx
  429. [2018.08.30 02:56:51 | 000,416,408 | ---- | C] (Microsoft Corporation ) -- C:\Windows\SysWow64\comct332.ocx
  430. [2018.08.30 02:56:51 | 000,218,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dblist32.ocx
  431. [2018.08.30 02:56:51 | 000,212,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mci32.ocx
  432. [2018.08.30 02:56:51 | 000,170,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comct232.ocx
  433. [2018.08.30 02:56:51 | 000,163,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comdlg32.ocx
  434. [2018.08.30 02:56:51 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\atl71.dll
  435. [2018.08.30 02:56:51 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\atl70.dll
  436. [2018.08.30 02:53:45 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\libraries
  437. [2018.08.30 02:52:41 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\Desktop\Two_Point_Hospital
  438. [2018.08.30 02:50:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\EZB Systems
  439. [2018.08.30 02:50:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UltraISO
  440. [2018.08.30 02:50:41 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\Programs
  441. [2018.08.30 02:48:45 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\WinRAR
  442. [2018.08.30 02:48:31 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
  443. [2018.08.30 02:48:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
  444. [2018.08.30 02:48:15 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
  445. [2018.08.30 02:44:59 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\Disc_Soft_Ltd
  446. [2018.08.30 02:44:59 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Daemon Tools Images
  447. [2018.08.30 02:44:20 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Catch!
  448. [2018.08.30 02:40:23 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\DAEMON Tools Lite
  449. [2018.08.30 02:40:04 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
  450. [2018.08.30 02:37:38 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
  451. [2018.08.30 02:35:55 | 000,791,712 | ---- | C] (Disc Soft Ltd.) -- C:\Users\WYSOWIANKA\Desktop\DTLiteInstaller_[www.programosy.pl].exe
  452. [2018.08.30 02:23:02 | 000,000,000 | -HSD | C] -- C:\Recovery
  453. [2018.08.30 02:22:26 | 000,000,000 | ---D | C] -- C:\Windows\InfusedApps
  454. [2018.08.30 02:22:00 | 000,000,000 | ---D | C] -- C:\Windows\Panther
  455. [2018.08.30 02:20:13 | 000,000,000 | ---D | C] -- C:\Windows\Setup
  456. [2018.08.30 02:20:01 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\Comms
  457. [2018.08.30 02:13:02 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer
  458. [2018.08.30 02:13:00 | 000,000,000 | ---D | C] -- C:\Windows\OCR
  459. [2018.08.30 02:12:58 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
  460. [2018.08.30 02:12:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
  461. [2018.08.30 02:12:58 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
  462. [2018.08.30 02:12:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
  463. [2018.08.30 02:11:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\winrm
  464. [2018.08.30 02:11:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\WCN
  465. [2018.08.30 02:11:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sysprep
  466. [2018.08.30 02:11:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\slmgr
  467. [2018.08.30 02:11:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Printing_Admin_Scripts
  468. [2018.08.30 02:11:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\pl
  469. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\winrm
  470. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\WCN
  471. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\UMDF
  472. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\slmgr
  473. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Printing_Admin_Scripts
  474. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\UMDF\pl-PL
  475. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\pl-PL
  476. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\UMDF\en-US
  477. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\en-US
  478. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\en
  479. [2018.08.30 02:11:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\0409
  480. [2018.08.30 02:11:42 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\UMDF\pl-PL
  481. [2018.08.30 02:11:42 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\pl
  482. [2018.08.30 02:11:42 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\UMDF\en-US
  483. [2018.08.30 02:11:42 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\en
  484. [2018.08.30 02:11:41 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pl-PL
  485. [2018.08.30 02:11:41 | 000,000,000 | ---D | C] -- C:\Windows\pl-PL
  486. [2018.08.30 02:11:41 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\en-US
  487. [2018.08.30 02:11:41 | 000,000,000 | ---D | C] -- C:\Windows\en-US
  488. [2018.08.30 02:11:41 | 000,000,000 | ---D | C] -- C:\Windows\DigitalLocker
  489. [2018.08.30 02:11:41 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\0409
  490. [2018.08.30 02:09:17 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\OneDrive
  491. [2018.08.30 02:08:04 | 000,835,064 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  492. [2018.08.30 02:08:04 | 000,179,704 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  493. [2018.08.30 02:06:25 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\AMD
  494. [2018.08.30 02:05:53 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\MicrosoftEdge
  495. [2018.08.30 02:05:35 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll
  496. [2018.08.30 02:05:24 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll
  497. [2018.08.30 02:05:20 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\ATI
  498. [2018.08.30 02:05:20 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\ATI
  499. [2018.08.30 02:05:20 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
  500. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\zh-TW
  501. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\zh-HK
  502. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\zh-CN
  503. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\WinMetadata
  504. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\Web
  505. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\Vss
  506. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\twain_32
  507. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\tracing
  508. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\Temp
  509. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\Tasks
  510. [2018.08.30 02:05:13 | 000,000,000 | ---D | C] -- C:\Windows\TAPI
  511. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\Nui
  512. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\Nui
  513. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft
  514. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\F12
  515. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\F12
  516. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\dsc
  517. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\Downloaded Program Files
  518. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\DiagSvcs
  519. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\DiagSvcs
  520. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\Configuration
  521. [2018.08.30 02:05:12 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\Configuration
  522. [2018.08.30 02:05:12 | 000,000,000 | R-SD | C] -- C:\Windows\Media
  523. [2018.08.30 02:05:12 | 000,000,000 | R-SD | C] -- C:\Windows\Fonts
  524. [2018.08.30 02:05:12 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
  525. [2018.08.30 02:05:12 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
  526. [2018.08.30 02:05:12 | 000,000,000 | R--D | C] -- C:\Windows\PrintDialog
  527. [2018.08.30 02:05:12 | 000,000,000 | R--D | C] -- C:\Windows\Offline Web Pages
  528. [2018.08.30 02:05:12 | 000,000,000 | R--D | C] -- C:\Windows\MiracastView
  529. [2018.08.30 02:05:12 | 000,000,000 | R--D | C] -- C:\Windows\ImmersiveControlPanel
  530. [2018.08.30 02:05:12 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
  531. [2018.08.30 02:05:12 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
  532. [2018.08.30 02:05:12 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
  533. [2018.08.30 02:05:12 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
  534. [2018.08.30 02:05:12 | 000,000,000 | -H-D | C] -- C:\ProgramData
  535. [2018.08.30 02:05:12 | 000,000,000 | -H-D | C] -- C:\Windows\ELAMBKUP
  536. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\zh-TW
  537. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\zh-HK
  538. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\zh-CN
  539. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\WinMetadata
  540. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\winevt
  541. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\WindowsPowerShell
  542. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\WindowsPowerShell
  543. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\WinBioPlugIns
  544. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\WinBioDatabase
  545. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\WDI
  546. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\wbem
  547. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\wbem
  548. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\ProgramData\USOPrivate
  549. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\uk-UA
  550. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\uk-UA
  551. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\tr-TR
  552. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\tr-TR
  553. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\th-TH
  554. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\th-TH
  555. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Tasks
  556. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Tasks
  557. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\syswow64
  558. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SystemResources
  559. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SystemResetPlatform
  560. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SystemApps
  561. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\System
  562. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sv-SE
  563. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\sv-SE
  564. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sru
  565. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\sru
  566. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sr-Latn-RS
  567. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\sr-Latn-RS
  568. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sr-Latn-CS
  569. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\sr-Latn-CS
  570. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sppui
  571. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\sppui
  572. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spp
  573. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\spp
  574. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\spool
  575. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Speech_OneCore
  576. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Speech_OneCore
  577. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Speech_OneCore
  578. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Speech
  579. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\System\Speech
  580. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Speech
  581. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Speech
  582. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftwareDistribution
  583. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\SMI
  584. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sl-SI
  585. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\sl-SI
  586. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sk-SK
  587. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\sk-SK
  588. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SKB
  589. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\ShellExperiences
  590. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\setup
  591. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\setup
  592. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\security
  593. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SecureBootUpdates
  594. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\schemas
  595. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SchCache
  596. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ru-RU
  597. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ru-RU
  598. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ro-RO
  599. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ro-RO
  600. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\restore
  601. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\restore
  602. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Resources
  603. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\rescache
  604. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Registration
  605. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1991-06.com.microsoft
  606. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Recovery
  607. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Recovery
  608. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RasToast
  609. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\RasToast
  610. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ras
  611. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ras
  612. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\pt-PT
  613. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\pt-PT
  614. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\pt-BR
  615. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\pt-BR
  616. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ProximityToast
  617. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Provisioning
  618. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\prefetch
  619. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\PolicyDefinitions
  620. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\PointOfService
  621. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\pl-PL
  622. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\pl-PL
  623. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\PLA
  624. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Performance
  625. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\oobe
  626. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oobe
  627. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\nl-NL
  628. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\nl-NL
  629. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\networklist
  630. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\networklist
  631. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\NDF
  632. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\NDF
  633. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\nb-NO
  634. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\nb-NO
  635. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\MUI
  636. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MUI
  637. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\MsDtc
  638. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MsDtc
  639. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\MSDRM
  640. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MSDRM
  641. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\ModemLogs
  642. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\migwiz
  643. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\migwiz
  644. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\migration
  645. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\migration
  646. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Migration
  647. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
  648. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\MailContactsCalendarSync
  649. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MailContactsCalendarSync
  650. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
  651. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
  652. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\lv-LV
  653. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\lv-LV
  654. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\lt-LT
  655. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\lt-LT
  656. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Logs
  657. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\LogFiles
  658. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\LogFiles
  659. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\LiveKernelReports
  660. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Licenses
  661. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Licenses
  662. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\L2Schemas
  663. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ko-KR
  664. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ko-KR
  665. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ja-JP
  666. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ja-jp
  667. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\it-IT
  668. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\it-IT
  669. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Ipmi
  670. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Ipmi
  671. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\InstallShield
  672. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\InputMethod
  673. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\InputMethod
  674. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\InputMethod
  675. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\inetsrv
  676. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\inetsrv
  677. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\IME
  678. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\IME
  679. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\IME
  680. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\icsxml
  681. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\icsxml
  682. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\hu-HU
  683. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\hu-HU
  684. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\hr-HR
  685. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\hr-HR
  686. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Help
  687. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\he-IL
  688. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\he-IL
  689. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\GroupPolicyUsers
  690. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\GroupPolicyUsers
  691. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\GroupPolicy
  692. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\GroupPolicy
  693. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Globalization
  694. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\GameBarPresenceWriter
  695. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\FxsTmp
  696. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\FxsTmp
  697. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\fr-FR
  698. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\fr-FR
  699. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\fr-CA
  700. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\fr-CA
  701. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\fi-FI
  702. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\fi-FI
  703. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\et-EE
  704. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\et-EE
  705. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\etc
  706. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\es-MX
  707. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\es-MX
  708. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\es-ES
  709. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\es-ES
  710. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\en-US
  711. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\en-US
  712. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\en-GB
  713. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\en-GB
  714. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\el-GR
  715. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\el-GR
  716. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\DriverStore
  717. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers
  718. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\downlevel
  719. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\downlevel
  720. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Dism
  721. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Dism
  722. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\diagnostics
  723. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\de-DE
  724. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\de-DE
  725. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\debug
  726. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DDFs
  727. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\da-DK
  728. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\da-DK
  729. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Cursors
  730. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\cs-CZ
  731. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\cs-CZ
  732. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\config
  733. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Comms
  734. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Com
  735. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Com
  736. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\CodeIntegrity
  737. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\catroot2
  738. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\catroot
  739. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Bthprops
  740. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Bthprops
  741. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Branding
  742. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Boot
  743. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\Boot
  744. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\bg-BG
  745. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\bg-BG
  746. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\bcastdvr
  747. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ar-SA
  748. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ar-SA
  749. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\AppReadiness
  750. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appraiser
  751. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\AppPatch
  752. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AppLocker
  753. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\AppLocker
  754. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\appcompat
  755. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AdvancedInstallers
  756. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\AdvancedInstallers
  757. [2018.08.30 02:05:12 | 000,000,000 | ---D | C] -- C:\Windows\addins
  758. [2018.08.30 02:05:11 | 000,000,000 | R--D | C] -- C:\Windows\Microsoft.NET
  759. [2018.08.30 02:05:11 | 000,000,000 | R--D | C] -- C:\Windows\assembly
  760. [2018.08.30 02:05:11 | 000,000,000 | -HSD | C] -- C:\Program Files\Windows Sidebar
  761. [2018.08.30 02:05:11 | 000,000,000 | -HSD | C] -- C:\Program Files (x86)\Windows Sidebar
  762. [2018.08.30 02:05:11 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsApps
  763. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\WindowsPowerShell
  764. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WindowsPowerShell
  765. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
  766. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Portable Devices
  767. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Photo Viewer
  768. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Photo Viewer
  769. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
  770. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows NT
  771. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Multimedia Platform
  772. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Multimedia Platform
  773. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
  774. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Player
  775. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Mail
  776. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Mail
  777. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Defender
  778. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Defender
  779. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
  780. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\System
  781. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Sysprep
  782. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
  783. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Services
  784. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\PerfLogs
  785. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
  786. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\microsoft shared
  787. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Microsoft Shared
  788. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
  789. [2018.08.30 02:05:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Explorer
  790. [2018.08.30 02:04:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
  791. [2018.08.30 02:04:39 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\NetworkTiles
  792. [2018.08.30 02:04:38 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\UMDF
  793. [2018.08.30 02:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers
  794. [2018.08.30 02:03:07 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
  795. [2018.08.30 02:02:48 | 000,000,000 | ---D | C] -- C:\Windows\INF
  796. [2018.08.30 02:02:09 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\Publishers
  797. [2018.08.30 02:01:30 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
  798. [2018.08.30 02:01:30 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
  799. [2018.08.30 02:01:29 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Searches
  800. [2018.08.30 02:01:29 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Contacts
  801. [2018.08.30 02:01:08 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Adobe
  802. [2018.08.30 02:01:02 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\VirtualStore
  803. [2018.08.30 02:00:55 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\Packages
  804. [2018.08.30 02:00:49 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\TileDataLayer
  805. [2018.08.30 02:00:45 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\ConnectedDevicesPlatform
  806. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Ustawienia lokalne
  807. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\AppData\Local\Temporary Internet Files
  808. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Szablony
  809. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\SendTo
  810. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Recent
  811. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\PrintHood
  812. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\NetHood
  813. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Documents\Moje wideo
  814. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Documents\Moje obrazy
  815. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Moje dokumenty
  816. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Documents\Moja muzyka
  817. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Menu Start
  818. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\AppData\Local\Historia
  819. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Dane aplikacji
  820. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\AppData\Local\Dane aplikacji
  821. [2018.08.30 02:00:26 | 000,000,000 | -HSD | C] -- C:\Users\WYSOWIANKA\Cookies
  822. [2018.08.30 02:00:25 | 000,000,000 | --SD | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft
  823. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
  824. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Videos
  825. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
  826. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Saved Games
  827. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Pictures
  828. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Music
  829. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Links
  830. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Favorites
  831. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Downloads
  832. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Documents
  833. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\Desktop
  834. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
  835. [2018.08.30 02:00:25 | 000,000,000 | R--D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
  836. [2018.08.30 02:00:25 | 000,000,000 | -H-D | C] -- C:\Users\WYSOWIANKA\AppData
  837. [2018.08.30 02:00:25 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\Temp
  838. [2018.08.30 02:00:25 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Local\Microsoft
  839. [2018.08.30 02:00:25 | 000,000,000 | ---D | C] -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
  840. [2018.08.30 01:55:25 | 000,000,000 | ---D | C] -- C:\Windows\CbsTemp
  841. [2018.08.30 01:54:35 | 002,716,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PrintConfig.dll
  842. [2018.08.30 01:53:41 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
  843. [2018.08.30 01:46:36 | 000,000,000 | R--D | C] -- C:\Users
  844. [2018.08.30 01:46:36 | 000,000,000 | R--D | C] -- C:\Program Files
  845. [2018.08.30 01:46:36 | 000,000,000 | R--D | C] -- C:\Program Files (x86)
  846. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Windows\WinSxS
  847. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Windows
  848. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Windows\System32
  849. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SMI
  850. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Windows\servicing
  851. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DriverStore
  852. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\config
  853. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
  854. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files
  855. [2018.08.30 01:46:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\CatRoot
  856. [2018.08.30 00:22:51 | 000,000,000 | -H-D | C] -- C:\$SysReset
  857. [2016.07.16 04:43:06 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\Users\WYSOWIANKA\AppData\Local\KoMvEoOUuuT.exe
  858. [2016.07.16 04:43:06 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Users\WYSOWIANKA\AppData\Local\YfiERYaBUO.exe
  859.  
  860. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  861.  
  862. [2018.08.31 00:14:54 | 002,077,372 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  863. [2018.08.31 00:14:54 | 000,938,290 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  864. [2018.08.31 00:14:54 | 000,771,128 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  865. [2018.08.31 00:14:54 | 000,193,530 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  866. [2018.08.31 00:14:54 | 000,173,374 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  867. [2018.08.31 00:10:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  868. [2018.08.31 00:08:19 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  869. [2018.08.31 00:08:15 | 1492,692,992 | -HS- | M] () -- C:\hiberfil.sys
  870. [2018.08.30 11:47:18 | 000,000,804 | ---- | M] () -- C:\Users\WYSOWIANKA\Desktop\Two Point Hospital.lnk
  871. [2018.08.30 11:25:37 | 000,000,002 | ---- | M] () -- C:\Users\WYSOWIANKA\AppData\Local\imw.ini
  872. [2018.08.30 10:43:50 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
  873. [2018.08.30 10:16:50 | 000,194,256 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  874. [2018.08.30 10:06:54 | 000,209,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll
  875. [2018.08.30 10:06:25 | 000,015,462 | ---- | M] () -- C:\Windows\SysNative\OEMDefaultAssociations.xml
  876. [2018.08.30 10:06:23 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll
  877. [2018.08.30 09:03:06 | 000,340,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wd\WdFilter.sys
  878. [2018.08.30 09:03:06 | 000,061,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wd\WdNisDrv.sys
  879. [2018.08.30 09:03:06 | 000,046,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wd\WdBoot.sys
  880. [2018.08.30 02:36:05 | 000,791,712 | ---- | M] (Disc Soft Ltd.) -- C:\Users\WYSOWIANKA\Desktop\DTLiteInstaller_[www.programosy.pl].exe
  881. [2018.08.30 02:11:24 | 000,342,912 | ---- | M] () -- C:\Windows\SysNative\perfi015.dat
  882. [2018.08.30 02:11:24 | 000,041,236 | ---- | M] () -- C:\Windows\SysNative\perfd015.dat
  883. [2018.08.30 02:01:18 | 000,000,741 | ---- | M] () -- C:\Windows\SysWow64\NOISE.DAT
  884. [2018.08.30 02:01:17 | 000,215,943 | ---- | M] () -- C:\Windows\SysWow64\dssec.dat
  885. [2018.08.30 02:01:14 | 000,017,463 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\services
  886. [2018.08.30 02:01:14 | 000,003,683 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\lmhosts.sam
  887. [2018.08.30 02:01:14 | 000,001,358 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\protocol
  888. [2018.08.30 02:01:14 | 000,000,824 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
  889. [2018.08.30 02:01:14 | 000,000,407 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\networks
  890. [2018.08.30 02:01:13 | 000,215,943 | ---- | M] () -- C:\Windows\SysNative\dssec.dat
  891. [2018.08.30 02:01:13 | 000,000,858 | ---- | M] () -- C:\Windows\SysNative\DefaultQuestions.json
  892. [2018.08.30 02:01:13 | 000,000,741 | ---- | M] () -- C:\Windows\SysNative\NOISE.DAT
  893. [2018.08.30 02:01:02 | 000,296,742 | ---- | M] () -- C:\Windows\SysNative\perfi009.dat
  894. [2018.08.30 02:01:02 | 000,033,362 | ---- | M] () -- C:\Windows\SysNative\perfd009.dat
  895.  
  896. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  897.  
  898. [2018.08.30 11:47:18 | 000,000,804 | ---- | C] () -- C:\Users\WYSOWIANKA\Desktop\Two Point Hospital.lnk
  899. [2018.08.30 11:25:37 | 000,000,002 | ---- | C] () -- C:\Users\WYSOWIANKA\AppData\Local\imw.ini
  900. [2018.08.30 10:54:07 | 000,055,159 | ---- | C] () -- C:\Windows\SysWow64\license.rtf
  901. [2018.08.30 10:54:07 | 000,055,159 | ---- | C] () -- C:\Windows\SysNative\license.rtf
  902. [2018.08.30 10:51:16 | 1492,692,992 | -HS- | C] () -- C:\hiberfil.sys
  903. [2018.08.30 10:43:50 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  904. [2018.08.30 10:35:51 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
  905. [2018.08.30 10:34:11 | 000,194,256 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
  906. [2018.08.30 02:56:53 | 000,210,944 | ---- | C] () -- C:\Windows\SysWow64\msvcrt10.dll
  907. [2018.08.30 02:12:23 | 000,938,290 | ---- | C] () -- C:\Windows\SysNative\perfh015.dat
  908. [2018.08.30 02:12:23 | 000,342,912 | ---- | C] () -- C:\Windows\SysNative\perfi015.dat
  909. [2018.08.30 02:12:23 | 000,193,530 | ---- | C] () -- C:\Windows\SysNative\perfc015.dat
  910. [2018.08.30 02:12:23 | 000,041,236 | ---- | C] () -- C:\Windows\SysNative\perfd015.dat
  911. [2018.08.30 02:09:17 | 000,002,426 | ---- | C] () -- C:\Users\WYSOWIANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
  912. [2018.08.30 02:08:39 | 000,771,128 | ---- | C] () -- C:\Windows\SysNative\perfh009.dat
  913. [2018.08.30 02:08:39 | 000,296,742 | ---- | C] () -- C:\Windows\SysNative\perfi009.dat
  914. [2018.08.30 02:08:39 | 000,173,374 | ---- | C] () -- C:\Windows\SysNative\perfc009.dat
  915. [2018.08.30 02:08:39 | 000,033,362 | ---- | C] () -- C:\Windows\SysNative\perfd009.dat
  916. [2018.08.30 02:05:35 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
  917. [2018.08.30 02:05:34 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
  918. [2018.08.30 02:05:30 | 000,017,463 | ---- | C] () -- C:\Windows\SysNative\drivers\etc\services
  919. [2018.08.30 02:05:30 | 000,003,683 | ---- | C] () -- C:\Windows\SysNative\drivers\etc\lmhosts.sam
  920. [2018.08.30 02:05:30 | 000,001,358 | ---- | C] () -- C:\Windows\SysNative\drivers\etc\protocol
  921. [2018.08.30 02:05:30 | 000,000,824 | ---- | C] () -- C:\Windows\SysNative\drivers\etc\hosts
  922. [2018.08.30 02:05:30 | 000,000,407 | ---- | C] () -- C:\Windows\SysNative\drivers\etc\networks
  923. [2018.08.30 02:05:26 | 000,015,462 | ---- | C] () -- C:\Windows\SysNative\OEMDefaultAssociations.xml
  924. [2018.08.30 02:05:24 | 000,000,741 | ---- | C] () -- C:\Windows\SysNative\NOISE.DAT
  925. [2018.08.30 02:05:23 | 000,215,943 | ---- | C] () -- C:\Windows\SysNative\dssec.dat
  926. [2018.08.30 02:05:23 | 000,000,858 | ---- | C] () -- C:\Windows\SysNative\DefaultQuestions.json
  927. [2018.08.30 01:59:21 | 002,077,372 | ---- | C] () -- C:\Windows\SysNative\PerfStringBackup.INI
  928.  
  929. [color=#E56717]========== ZeroAccess Check ==========[/color]
  930.  
  931.  
  932. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  933.  
  934. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  935.  
  936. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  937.  
  938. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  939.  
  940. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  941. "" = C:\Windows\SysNative\windows.storage.dll -- [2016.07.16 04:42:06 | 007,222,240 | ---- | M] (Microsoft Corporation)
  942. "ThreadingModel" = Apartment
  943.  
  944. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  945. "" = %SystemRoot%\system32\windows.storage.dll -- [2016.07.16 04:42:54 | 005,723,344 | ---- | M] (Microsoft Corporation)
  946. "ThreadingModel" = Apartment
  947.  
  948. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  949. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2016.07.16 04:42:31 | 000,977,920 | ---- | M] (Microsoft Corporation)
  950. "ThreadingModel" = Free
  951.  
  952. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  953. "" = %systemroot%\system32\wbem\fastprox.dll -- [2016.07.16 04:42:56 | 000,779,776 | ---- | M] (Microsoft Corporation)
  954. "ThreadingModel" = Free
  955.  
  956. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  957. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2016.07.16 04:42:31 | 000,518,656 | ---- | M] (Microsoft Corporation)
  958. "ThreadingModel" = Both
  959.  
  960. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  961.  
  962. [color=#E56717]========== LOP Check ==========[/color]
  963.  
  964. [2018.08.30 02:45:44 | 000,000,000 | ---D | M] -- C:\Users\WYSOWIANKA\AppData\Roaming\DAEMON Tools Lite
  965. [2018.08.30 02:53:46 | 000,000,000 | ---D | M] -- C:\Users\WYSOWIANKA\AppData\Roaming\libraries
  966. [2018.08.30 12:23:47 | 000,000,000 | ---D | M] -- C:\Users\WYSOWIANKA\AppData\Roaming\qBittorrent
  967.  
  968. [color=#E56717]========== Purity Check ==========[/color]
  969.  
  970.  
  971.  
  972. < End of report >
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!