API tools faq
paste
Advertisement
Guest User

Q

a guest
Aug 27th, 2016
273
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 99.89 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2016-08-27 19:46:50 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jakub\Desktop
  3. 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.10586.0)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 3,91 Gb Total Physical Memory | 1,54 Gb Available Physical Memory | 39,42% Memory free
  8. 4,60 Gb Paging File | 1,66 Gb Available in Paging File | 36,06% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 891,42 Gb Total Space | 815,05 Gb Free Space | 91,43% Space Free | Partition Type: NTFS
  13. Drive D: | 25,00 Gb Total Space | 20,88 Gb Free Space | 83,51% Space Free | Partition Type: NTFS
  14. Drive G: | 1001,75 Mb Total Space | 247,47 Mb Free Space | 24,70% Space Free | Partition Type: FAT32
  15.  
  16. Computer Name: JK | User Name: Jakub | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - File not found --
  23. PRC - [2016-08-27 19:46:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jakub\Desktop\OTL.exe
  24. PRC - [2016-08-25 18:30:12 | 000,392,136 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  25. PRC - [2016-08-25 14:24:29 | 000,633,024 | ---- | M] (Microsoft Corporation) -- C:\Users\Jakub\AppData\Local\Microsoft\OneDrive\OneDrive.exe
  26. PRC - [2016-06-25 01:45:12 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  27. PRC - [2016-05-20 18:42:08 | 000,931,352 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
  28. PRC - [2016-04-19 14:32:54 | 000,144,384 | ---- | M] () -- C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
  29. PRC - [2015-06-17 09:18:02 | 000,561,672 | ---- | M] (Vimicro) -- C:\Program Files (x86)\USB Camera\VM331STI.EXE
  30. PRC - [2015-04-17 12:14:31 | 005,448,976 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  31. PRC - [2015-04-08 09:47:49 | 000,218,624 | ---- | M] () -- C:\ProgramData\Multimedia mobilNET\OnlineUpdate\ouc.exe
  32. PRC - [2014-11-26 05:42:02 | 000,425,136 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) -- C:\Program Files (x86)\WinZipper\winzipersvc.exe
  33. PRC - [2014-06-24 23:31:48 | 000,176,128 | ---- | M] (HP) -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
  34. PRC - [2013-08-27 23:16:16 | 001,028,896 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
  35. PRC - [2013-05-16 04:09:14 | 000,131,544 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
  36. PRC - [2013-05-16 04:09:12 | 000,169,432 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
  37. PRC - [2013-05-08 09:48:30 | 000,286,704 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  38. PRC - [2013-05-08 09:48:30 | 000,015,344 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  39. PRC - [2013-03-19 21:49:53 | 000,417,536 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\CheckNDISPort_df.exe
  40. PRC - [2013-03-08 16:18:34 | 000,095,192 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
  41. PRC - [2013-02-25 15:41:10 | 000,446,720 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\CancelAutoPlay_df.exe
  42. PRC - [2012-10-30 21:11:32 | 000,168,464 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
  43.  
  44.  
  45. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  46.  
  47. MOD - [2016-08-25 14:24:37 | 000,118,976 | ---- | M] () -- C:\Users\Jakub\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncViews.dll
  48. MOD - [2016-08-25 14:24:27 | 001,383,616 | ---- | M] () -- C:\Users\Jakub\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll
  49. MOD - [2016-08-20 11:54:10 | 012,940,800 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\36f6762d29fc05f4d32b01a56ea0f8f8\System.Windows.Forms.ni.dll
  50. MOD - [2016-08-20 11:54:02 | 001,624,576 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\387d8c4acd15ff2d479ebd491edb8e51\System.Drawing.ni.dll
  51. MOD - [2016-05-12 08:53:08 | 007,378,944 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\e1be3ec32aa5187ec7d760c55c55f6c0\System.Xml.ni.dll
  52. MOD - [2016-05-12 08:53:03 | 002,772,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\2f18aee9e26301da57394e94416a20ba\System.Runtime.Serialization.ni.dll
  53. MOD - [2016-05-12 08:53:02 | 000,970,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\d1e6c00e339d9f64674d3a9e74403a7e\System.Configuration.ni.dll
  54. MOD - [2016-05-12 08:52:45 | 007,498,240 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\ea350a39df1334a4911cc92f58c85dd0\System.Core.ni.dll
  55. MOD - [2016-05-12 08:52:42 | 009,983,488 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\3a4f0a84904c4b568b6621b30306261c\System.ni.dll
  56. MOD - [2016-04-23 02:33:58 | 018,127,536 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\b1ea5171f48fa1865ea45dd904735573\mscorlib.ni.dll
  57. MOD - [2016-04-19 14:32:56 | 022,284,800 | ---- | M] () -- C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
  58. MOD - [2016-04-19 14:32:54 | 000,144,384 | ---- | M] () -- C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
  59. MOD - [2016-04-19 14:32:53 | 000,141,312 | ---- | M] () -- C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
  60. MOD - [2013-03-19 21:49:53 | 000,417,536 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\CheckNDISPort_df.exe
  61. MOD - [2013-02-25 15:41:10 | 000,446,720 | ---- | M] () -- C:\Program Files (x86)\ZTE MF823\CancelAutoPlay_df.exe
  62.  
  63.  
  64. [color=#E56717]========== Services (SafeList) ==========[/color]
  65.  
  66. SRV:[b]64bit:[/b] - [2016-08-03 11:38:23 | 000,379,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
  67. SRV:[b]64bit:[/b] - [2016-08-03 11:36:49 | 000,211,456 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
  68. SRV:[b]64bit:[/b] - [2016-08-03 11:33:57 | 000,339,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
  69. SRV:[b]64bit:[/b] - [2016-08-03 11:31:38 | 000,506,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
  70. SRV:[b]64bit:[/b] - [2016-08-03 11:17:10 | 002,175,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
  71. SRV:[b]64bit:[/b] - [2016-08-03 11:12:25 | 002,746,368 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
  72. SRV:[b]64bit:[/b] - [2016-07-01 07:10:31 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  73. SRV:[b]64bit:[/b] - [2016-07-01 06:45:06 | 001,613,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  74. SRV:[b]64bit:[/b] - [2016-07-01 06:43:41 | 003,449,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
  75. SRV:[b]64bit:[/b] - [2016-07-01 06:32:35 | 000,024,864 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
  76. SRV:[b]64bit:[/b] - [2016-07-01 06:32:03 | 000,625,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
  77. SRV:[b]64bit:[/b] - [2016-07-01 05:52:47 | 000,087,040 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate)
  78. SRV:[b]64bit:[/b] - [2016-07-01 05:52:31 | 000,072,704 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
  79. SRV:[b]64bit:[/b] - [2016-07-01 05:47:23 | 000,314,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
  80. SRV:[b]64bit:[/b] - [2016-07-01 05:46:42 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
  81. SRV:[b]64bit:[/b] - [2016-07-01 05:46:22 | 000,287,744 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
  82. SRV:[b]64bit:[/b] - [2016-07-01 05:42:39 | 000,504,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
  83. SRV:[b]64bit:[/b] - [2016-07-01 05:41:41 | 000,587,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  84. SRV:[b]64bit:[/b] - [2016-07-01 05:39:12 | 001,872,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
  85. SRV:[b]64bit:[/b] - [2016-07-01 05:37:58 | 001,073,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
  86. SRV:[b]64bit:[/b] - [2016-07-01 05:25:39 | 001,097,216 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
  87. SRV:[b]64bit:[/b] - [2016-05-28 06:22:06 | 000,163,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
  88. SRV:[b]64bit:[/b] - [2016-05-28 06:18:23 | 000,380,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  89. SRV:[b]64bit:[/b] - [2016-05-28 06:17:50 | 000,278,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  90. SRV:[b]64bit:[/b] - [2016-05-06 06:03:20 | 000,649,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
  91. SRV:[b]64bit:[/b] - [2016-05-06 05:49:14 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
  92. SRV:[b]64bit:[/b] - [2016-04-23 07:24:13 | 000,754,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
  93. SRV:[b]64bit:[/b] - [2016-04-23 06:20:58 | 000,606,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  94. SRV:[b]64bit:[/b] - [2016-03-29 09:20:21 | 000,948,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
  95. SRV:[b]64bit:[/b] - [2016-03-29 07:45:48 | 000,338,432 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
  96. SRV:[b]64bit:[/b] - [2016-03-26 17:49:11 | 000,275,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  97. SRV:[b]64bit:[/b] - [2016-03-26 17:48:54 | 001,035,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
  98. SRV:[b]64bit:[/b] - [2016-03-26 17:48:53 | 000,912,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
  99. SRV:[b]64bit:[/b] - [2016-03-26 17:48:53 | 000,749,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc)
  100. SRV:[b]64bit:[/b] - [2016-03-26 17:48:53 | 000,591,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
  101. SRV:[b]64bit:[/b] - [2016-03-26 17:48:53 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  102. SRV:[b]64bit:[/b] - [2016-03-26 17:48:50 | 001,490,432 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
  103. SRV:[b]64bit:[/b] - [2016-03-26 17:48:50 | 001,224,704 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
  104. SRV:[b]64bit:[/b] - [2016-03-26 17:48:50 | 001,139,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
  105. SRV:[b]64bit:[/b] - [2016-03-26 17:48:50 | 000,847,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  106. SRV:[b]64bit:[/b] - [2016-03-26 17:48:50 | 000,252,928 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
  107. SRV:[b]64bit:[/b] - [2016-03-26 17:48:50 | 000,163,840 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
  108. SRV:[b]64bit:[/b] - [2016-03-26 17:48:46 | 002,057,216 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  109. SRV:[b]64bit:[/b] - [2016-03-26 17:48:46 | 000,145,408 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
  110. SRV:[b]64bit:[/b] - [2016-03-13 16:53:09 | 000,373,160 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService2.0.0.0)
  111. SRV:[b]64bit:[/b] - [2015-11-11 16:44:21 | 000,246,472 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe -- (SynTPEnhService)
  112. SRV:[b]64bit:[/b] - [2015-10-30 09:19:28 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  113. SRV:[b]64bit:[/b] - [2015-10-30 09:19:26 | 000,497,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
  114. SRV:[b]64bit:[/b] - [2015-10-30 09:18:46 | 000,168,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  115. SRV:[b]64bit:[/b] - [2015-10-30 09:18:41 | 000,117,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  116. SRV:[b]64bit:[/b] - [2015-10-30 09:18:19 | 001,297,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
  117. SRV:[b]64bit:[/b] - [2015-10-30 09:18:18 | 000,729,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  118. SRV:[b]64bit:[/b] - [2015-10-30 09:18:14 | 000,081,408 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  119. SRV:[b]64bit:[/b] - [2015-10-30 09:18:01 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
  120. SRV:[b]64bit:[/b] - [2015-10-30 09:18:01 | 000,034,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
  121. SRV:[b]64bit:[/b] - [2015-10-30 09:18:01 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
  122. SRV:[b]64bit:[/b] - [2015-10-30 09:18:01 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
  123. SRV:[b]64bit:[/b] - [2015-10-30 09:17:59 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
  124. SRV:[b]64bit:[/b] - [2015-10-30 09:17:59 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
  125. SRV:[b]64bit:[/b] - [2015-10-30 09:17:53 | 000,097,792 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  126. SRV:[b]64bit:[/b] - [2015-10-30 09:17:53 | 000,060,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  127. SRV:[b]64bit:[/b] - [2015-10-30 09:17:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
  128. SRV:[b]64bit:[/b] - [2015-10-30 09:17:52 | 000,181,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
  129. SRV:[b]64bit:[/b] - [2015-10-30 09:17:51 | 000,031,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
  130. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_879292b)
  131. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_58a449)
  132. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_45cf6d0)
  133. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_879292b)
  134. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_58a449)
  135. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_45cf6d0)
  136. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_879292b)
  137. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_58a449)
  138. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_45cf6d0)
  139. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_879292b)
  140. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_58a449)
  141. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_45cf6d0)
  142. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_879292b)
  143. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_58a449)
  144. SRV:[b]64bit:[/b] - [2015-10-30 09:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_45cf6d0)
  145. SRV:[b]64bit:[/b] - [2015-10-30 09:17:48 | 000,444,928 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  146. SRV:[b]64bit:[/b] - [2015-10-30 09:17:48 | 000,205,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  147. SRV:[b]64bit:[/b] - [2015-10-30 09:17:47 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
  148. SRV:[b]64bit:[/b] - [2015-10-30 09:17:46 | 000,290,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService)
  149. SRV:[b]64bit:[/b] - [2015-10-30 09:17:46 | 000,186,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
  150. SRV:[b]64bit:[/b] - [2015-10-30 09:17:46 | 000,118,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  151. SRV:[b]64bit:[/b] - [2015-10-30 09:17:46 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  152. SRV:[b]64bit:[/b] - [2015-10-30 09:17:43 | 000,057,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
  153. SRV:[b]64bit:[/b] - [2015-10-30 09:17:41 | 000,052,736 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService)
  154. SRV:[b]64bit:[/b] - [2015-10-30 09:17:39 | 000,547,840 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  155. SRV:[b]64bit:[/b] - [2015-10-30 09:17:37 | 000,364,464 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
  156. SRV:[b]64bit:[/b] - [2015-10-30 09:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
  157. SRV:[b]64bit:[/b] - [2015-10-30 09:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
  158. SRV:[b]64bit:[/b] - [2015-10-30 09:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  159. SRV:[b]64bit:[/b] - [2015-10-30 09:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  160. SRV:[b]64bit:[/b] - [2015-10-30 09:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
  161. SRV:[b]64bit:[/b] - [2015-10-30 09:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  162. SRV:[b]64bit:[/b] - [2015-10-30 09:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  163. SRV:[b]64bit:[/b] - [2015-10-30 09:17:35 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
  164. SRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,326,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
  165. SRV:[b]64bit:[/b] - [2013-05-08 09:48:30 | 000,015,344 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  166. SRV:[b]64bit:[/b] - [2013-02-13 13:47:04 | 000,820,184 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
  167. SRV:[b]64bit:[/b] - [2013-02-13 13:46:48 | 000,731,648 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  168. SRV - [2016-08-25 18:30:11 | 000,146,888 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  169. SRV - [2016-08-03 06:19:22 | 002,180,096 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
  170. SRV - [2016-07-12 12:38:13 | 000,270,016 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  171. SRV - [2016-07-04 07:12:08 | 000,029,760 | ---- | M] (HP Inc.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe -- (HPSupportSolutionsFrameworkService)
  172. SRV - [2016-07-01 07:10:31 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  173. SRV - [2016-06-25 01:45:12 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  174. SRV - [2016-05-28 06:14:46 | 000,200,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  175. SRV - [2016-05-23 15:17:32 | 000,324,224 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  176. SRV - [2016-04-23 05:45:56 | 000,461,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
  177. SRV - [2016-03-26 17:48:50 | 000,949,248 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
  178. SRV - [2016-03-13 16:53:12 | 000,300,968 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  179. SRV - [2016-03-10 22:12:27 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
  180. SRV - [2015-10-30 09:18:31 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\lfsvc.dll -- (lfsvc)
  181. SRV - [2015-10-30 09:18:23 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
  182. SRV - [2015-04-17 12:14:31 | 005,448,976 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe -- (TeamViewer)
  183. SRV - [2015-04-08 09:47:49 | 000,218,624 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Multimedia mobilNET\UpdateDog\ouc.exe -- (Multimedia mobilNET. RunOuc)
  184. SRV - [2014-11-26 05:42:02 | 000,425,136 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) [Auto | Running] -- C:\Program Files (x86)\WinZipper\winzipersvc.exe -- (winzipersvc)
  185. SRV - [2014-06-24 23:31:48 | 000,176,128 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe -- (HP LaserJet Service)
  186. SRV - [2013-12-26 19:42:24 | 001,364,256 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  187. SRV - [2013-06-26 12:49:12 | 000,156,616 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe -- (Intel(R)
  188. SRV - [2013-05-16 04:09:14 | 000,366,552 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  189. SRV - [2013-05-16 04:09:14 | 000,131,544 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R)
  190. SRV - [2013-05-16 04:09:12 | 000,169,432 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
  191. SRV - [2010-11-16 15:38:16 | 000,339,456 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\HWDeviceService64.exe -- (HWDeviceService64.exe)
  192.  
  193.  
  194. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  195.  
  196. DRV:[b]64bit:[/b] - [2016-08-03 12:36:37 | 000,099,680 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
  197. DRV:[b]64bit:[/b] - [2016-07-01 06:49:41 | 000,277,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  198. DRV:[b]64bit:[/b] - [2016-05-28 07:22:08 | 000,211,296 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  199. DRV:[b]64bit:[/b] - [2016-05-28 07:08:25 | 000,258,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
  200. DRV:[b]64bit:[/b] - [2016-05-28 06:24:38 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
  201. DRV:[b]64bit:[/b] - [2016-04-23 07:11:14 | 000,131,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
  202. DRV:[b]64bit:[/b] - [2016-04-23 06:56:52 | 000,534,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
  203. DRV:[b]64bit:[/b] - [2016-04-23 06:34:19 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  204. DRV:[b]64bit:[/b] - [2016-04-23 06:33:59 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
  205. DRV:[b]64bit:[/b] - [2016-04-23 06:29:32 | 000,087,552 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
  206. DRV:[b]64bit:[/b] - [2016-03-29 10:21:40 | 000,378,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
  207. DRV:[b]64bit:[/b] - [2016-03-29 10:16:55 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
  208. DRV:[b]64bit:[/b] - [2016-03-29 09:49:53 | 000,245,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)
  209. DRV:[b]64bit:[/b] - [2016-03-29 09:23:41 | 000,694,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
  210. DRV:[b]64bit:[/b] - [2016-03-26 17:48:46 | 000,238,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
  211. DRV:[b]64bit:[/b] - [2016-03-26 17:48:46 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
  212. DRV:[b]64bit:[/b] - [2016-03-26 17:48:46 | 000,095,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
  213. DRV:[b]64bit:[/b] - [2016-03-13 16:53:04 | 007,858,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  214. DRV:[b]64bit:[/b] - [2015-11-11 16:44:20 | 000,618,696 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  215. DRV:[b]64bit:[/b] - [2015-11-11 16:44:19 | 000,042,696 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
  216. DRV:[b]64bit:[/b] - [2015-10-30 21:23:31 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  217. DRV:[b]64bit:[/b] - [2015-10-30 21:23:21 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  218. DRV:[b]64bit:[/b] - [2015-10-30 09:19:39 | 000,030,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
  219. DRV:[b]64bit:[/b] - [2015-10-30 09:18:42 | 000,052,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
  220. DRV:[b]64bit:[/b] - [2015-10-30 09:18:09 | 000,930,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
  221. DRV:[b]64bit:[/b] - [2015-10-30 09:18:09 | 000,385,376 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
  222. DRV:[b]64bit:[/b] - [2015-10-30 09:18:08 | 000,218,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
  223. DRV:[b]64bit:[/b] - [2015-10-30 09:18:03 | 000,200,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
  224. DRV:[b]64bit:[/b] - [2015-10-30 09:18:03 | 000,106,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
  225. DRV:[b]64bit:[/b] - [2015-10-30 09:18:03 | 000,078,848 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
  226. DRV:[b]64bit:[/b] - [2015-10-30 09:18:03 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
  227. DRV:[b]64bit:[/b] - [2015-10-30 09:18:03 | 000,031,584 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  228. DRV:[b]64bit:[/b] - [2015-10-30 09:18:03 | 000,026,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ioqos.sys -- (IoQos)
  229. DRV:[b]64bit:[/b] - [2015-10-30 09:18:01 | 000,154,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
  230. DRV:[b]64bit:[/b] - [2015-10-30 09:17:57 | 000,047,616 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
  231. DRV:[b]64bit:[/b] - [2015-10-30 09:17:52 | 000,163,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
  232. DRV:[b]64bit:[/b] - [2015-10-30 09:17:52 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
  233. DRV:[b]64bit:[/b] - [2015-10-30 09:17:52 | 000,039,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
  234. DRV:[b]64bit:[/b] - [2015-10-30 09:17:51 | 000,155,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
  235. DRV:[b]64bit:[/b] - [2015-10-30 09:17:51 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
  236. DRV:[b]64bit:[/b] - [2015-10-30 09:17:51 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
  237. DRV:[b]64bit:[/b] - [2015-10-30 09:17:51 | 000,074,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
  238. DRV:[b]64bit:[/b] - [2015-10-30 09:17:51 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
  239. DRV:[b]64bit:[/b] - [2015-10-30 09:17:50 | 000,199,008 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
  240. DRV:[b]64bit:[/b] - [2015-10-30 09:17:46 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
  241. DRV:[b]64bit:[/b] - [2015-10-30 09:17:46 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
  242. DRV:[b]64bit:[/b] - [2015-10-30 09:17:42 | 000,126,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
  243. DRV:[b]64bit:[/b] - [2015-10-30 09:17:42 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
  244. DRV:[b]64bit:[/b] - [2015-10-30 09:17:39 | 000,081,920 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
  245. DRV:[b]64bit:[/b] - [2015-10-30 09:17:37 | 000,293,216 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
  246. DRV:[b]64bit:[/b] - [2015-10-30 09:17:37 | 000,209,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
  247. DRV:[b]64bit:[/b] - [2015-10-30 09:17:37 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
  248. DRV:[b]64bit:[/b] - [2015-10-30 09:17:37 | 000,118,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
  249. DRV:[b]64bit:[/b] - [2015-10-30 09:17:37 | 000,061,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (tsusbflt)
  250. DRV:[b]64bit:[/b] - [2015-10-30 09:17:37 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
  251. DRV:[b]64bit:[/b] - [2015-10-30 09:17:37 | 000,044,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
  252. DRV:[b]64bit:[/b] - [2015-10-30 09:17:37 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
  253. DRV:[b]64bit:[/b] - [2015-10-30 09:17:26 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
  254. DRV:[b]64bit:[/b] - [2015-10-30 09:17:25 | 000,046,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
  255. DRV:[b]64bit:[/b] - [2015-10-30 09:17:25 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  256. DRV:[b]64bit:[/b] - [2015-10-30 09:17:25 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
  257. DRV:[b]64bit:[/b] - [2015-10-30 09:17:25 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
  258. DRV:[b]64bit:[/b] - [2015-10-30 09:17:25 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
  259. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,705,376 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
  260. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,532,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
  261. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,424,800 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
  262. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
  263. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,133,984 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
  264. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,104,800 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
  265. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,099,168 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
  266. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,094,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
  267. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
  268. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,079,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
  269. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
  270. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,076,128 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
  271. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
  272. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,059,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
  273. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
  274. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,058,208 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
  275. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,055,808 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
  276. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
  277. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
  278. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,034,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
  279. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  280. DRV:[b]64bit:[/b] - [2015-10-30 09:17:23 | 000,026,976 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
  281. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 003,436,896 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  282. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
  283. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
  284. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  285. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  286. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
  287. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  288. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  289. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
  290. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,037,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
  291. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
  292. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  293. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
  294. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
  295. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
  296. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
  297. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
  298. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
  299. DRV:[b]64bit:[/b] - [2015-10-30 09:17:22 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn.sys -- (bcmfn)
  300. DRV:[b]64bit:[/b] - [2015-10-30 09:17:21 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
  301. DRV:[b]64bit:[/b] - [2015-10-30 09:17:21 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
  302. DRV:[b]64bit:[/b] - [2015-10-30 09:17:19 | 003,485,696 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwbw02.sys -- (NETwNb64)
  303. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,165,888 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
  304. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,117,088 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  305. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
  306. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,081,408 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c)
  307. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
  308. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
  309. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  310. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
  311. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,046,432 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
  312. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  313. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys -- (CompositeBus)
  314. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
  315. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  316. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
  317. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
  318. DRV:[b]64bit:[/b] - [2015-10-30 09:17:18 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
  319. DRV:[b]64bit:[/b] - [2015-07-22 19:56:22 | 000,886,528 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rt640x64.sys -- (rt640x64)
  320. DRV:[b]64bit:[/b] - [2015-07-14 21:27:40 | 000,263,952 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ibtusb.sys -- (ibtusb)
  321. DRV:[b]64bit:[/b] - [2015-06-17 09:18:02 | 000,640,136 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vm331avs.sys -- (vm331avs)
  322. DRV:[b]64bit:[/b] - [2015-04-28 20:45:20 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  323. DRV:[b]64bit:[/b] - [2015-04-08 09:47:50 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator)
  324. DRV:[b]64bit:[/b] - [2015-02-10 01:24:34 | 000,042,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
  325. DRV:[b]64bit:[/b] - [2015-02-10 01:24:34 | 000,030,512 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
  326. DRV:[b]64bit:[/b] - [2015-01-06 23:24:14 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{91975f83-f39c-43cf-aad4-0b3396b0f6db}w64.sys -- ({91975f83-f39c-43cf-aad4-0b3396b0f6db}w64)
  327. DRV:[b]64bit:[/b] - [2015-01-03 04:23:22 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{84edc66f-0e16-4519-bd1a-cead01f243ac}w64.sys -- ({84edc66f-0e16-4519-bd1a-cead01f243ac}w64)
  328. DRV:[b]64bit:[/b] - [2014-12-27 02:22:46 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{c88279d3-91dd-4bd9-ad38-681f71d6e36d}w64.sys -- ({c88279d3-91dd-4bd9-ad38-681f71d6e36d}w64)
  329. DRV:[b]64bit:[/b] - [2014-12-24 09:22:46 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{ca4e7e4c-3ebf-4428-bf75-cc138b7061f1}w64.sys -- ({ca4e7e4c-3ebf-4428-bf75-cc138b7061f1}w64)
  330. DRV:[b]64bit:[/b] - [2014-12-23 20:24:12 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{27899312-155f-40f3-8661-fb6675d82b4b}w64.sys -- ({27899312-155f-40f3-8661-fb6675d82b4b}w64)
  331. DRV:[b]64bit:[/b] - [2014-12-18 08:22:42 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{fb92e7a9-ee13-44c3-a51b-600382fe9211}Gw64.sys -- ({fb92e7a9-ee13-44c3-a51b-600382fe9211}Gw64)
  332. DRV:[b]64bit:[/b] - [2014-12-17 06:23:10 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{8299d9bc-4fe2-4889-9adf-025a0769d461}Gw64.sys -- ({8299d9bc-4fe2-4889-9adf-025a0769d461}Gw64)
  333. DRV:[b]64bit:[/b] - [2014-12-11 05:22:54 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{078ad437-dc9f-4228-9edb-b3d1c0246ff8}Gw64.sys -- ({078ad437-dc9f-4228-9edb-b3d1c0246ff8}Gw64)
  334. DRV:[b]64bit:[/b] - [2014-12-01 15:51:22 | 000,048,776 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{df47b99d-26f5-45f4-85c5-97b4da365f21}Gw64.sys -- ({df47b99d-26f5-45f4-85c5-97b4da365f21}Gw64)
  335. DRV:[b]64bit:[/b] - [2014-01-08 00:34:38 | 000,035,600 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC)
  336. DRV:[b]64bit:[/b] - [2013-05-16 04:09:12 | 000,064,624 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  337. DRV:[b]64bit:[/b] - [2013-05-08 09:48:16 | 000,679,920 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
  338. DRV:[b]64bit:[/b] - [2013-05-08 02:25:24 | 000,442,368 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  339. DRV:[b]64bit:[/b] - [2012-06-13 18:10:32 | 000,102,376 | ---- | M] ("CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd)
  340. DRV - [2015-10-30 09:17:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys -- (CompositeBus)
  341.  
  342.  
  343. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  344.  
  345.  
  346. [color=#E56717]========== Internet Explorer ==========[/color]
  347.  
  348. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1415027555&from=smt&uid=ST1000LM014-SSHD-8GB_W380ZEBRXXXXW380ZEBR&q={searchTerms}
  349. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1415027555&from=smt&uid=ST1000LM014-SSHD-8GB_W380ZEBRXXXXW380ZEBR&q={searchTerms}
  350. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  351. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  352. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{4EB29F5A-23DB-428C-8E47-38788152D81E}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
  353. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  354. IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  355. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  356. IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
  357. IE - HKLM\..\SearchScopes\{4EB29F5A-23DB-428C-8E47-38788152D81E}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
  358.  
  359. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1431196532&z=757808aaafde8226f28aee7gaz0cfg9gft3q3wcc8m&from=wpm05083&uid=ST1000LM014-SSHD-8GB_W380ZEBRXXXXW380ZEBR
  360. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&ts=1418851627&from=wpm12173&uid=ST1000LM014-SSHD-8GB_W380ZEBRXXXXW380ZEBR&q={searchTerms}
  361. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com [binary data]
  362. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1418851627&from=wpm12173&uid=ST1000LM014-SSHD-8GB_W380ZEBRXXXXW380ZEBR&q={searchTerms}
  363. IE - HKCU\..\SearchScopes,DefaultScope = {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
  364. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
  365. IE - HKCU\..\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
  366. IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
  367. IE - HKCU\..\SearchScopes\{4EB29F5A-23DB-428C-8E47-38788152D81E}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
  368. IE - HKCU\..\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
  369. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  370.  
  371. [color=#E56717]========== FireFox ==========[/color]
  372.  
  373. FF - prefs.js..browser.search.countryCode: "PL"
  374. FF - prefs.js..browser.search.defaultenginename: "webssearches"
  375. FF - prefs.js..browser.search.hiddenOneOffs: "Google,DuckDuckGo,Encyklopedia PWN,Merlin,Wikipedia (pl),Wolne Lektury"
  376. FF - prefs.js..browser.search.redirectWindowsSearch: false
  377. FF - prefs.js..browser.search.region: "PL"
  378. FF - prefs.js..browser.search.searchengine.searchengine.uid: "[xpconnect wrapped nsIUUIDGenerator]"
  379. FF - prefs.js..browser.search.selectedEngine: "webssearches"
  380. FF - prefs.js..browser.search.useDBForOrder: true
  381. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:48.0.2
  382. FF - user.js - File not found
  383.  
  384. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll File not found
  385. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll ()
  386. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  387. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  388. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.91.2: C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  389. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.91.2: C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll (Oracle Corporation)
  390. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  391. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  392. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Jakub\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll (Google Inc.)
  393. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Jakub\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll (Google Inc.)
  394. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Jakub\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  395. FF - HKCU\Software\MozillaPlugins\SkypePlugin: C:\Users\Jakub\AppData\Local\SkypePlugin\7.10.0.93\npGatewayNpapi.dll (Skype Technologies S.A.)
  396. FF - HKCU\Software\MozillaPlugins\SkypePlugin64: C:\Users\Jakub\AppData\Local\SkypePlugin\7.10.0.93\npGatewayNpapi-x64.dll (Skype Technologies S.A.)
  397.  
  398. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\faststartff@gmail.com: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\11f8tzat.default\extensions\faststartff@gmail.com
  399. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\quick_searchff@gmail.com: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\11f8tzat.default\extensions\quick_searchff@gmail.com
  400. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\sweetsearch@gmail.com: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\11f8tzat.default\extensions\sweetsearch@gmail.com
  401. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\deskCutv2@gmail.com: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\11f8tzat.default\extensions\deskCutv2@gmail.com
  402. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\yahooprotected@gmail.com: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\11f8tzat.default\extensions\yahooprotected@gmail.com
  403. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 48.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  404. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 48.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  405. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 48.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  406. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 48.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  407.  
  408. [2014-07-21 19:19:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jakub\AppData\Roaming\mozilla\Extensions
  409. [2016-08-09 17:24:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jakub\AppData\Roaming\mozilla\Firefox\Profiles\11f8tzat.default\extensions
  410. [2016-08-09 17:24:08 | 000,109,001 | ---- | M] () (No name found) -- C:\Users\Jakub\AppData\Roaming\mozilla\firefox\profiles\11f8tzat.default\extensions\dodatek@flash2.pl.xpi
  411. [2015-12-07 21:02:51 | 000,123,183 | ---- | M] () (No name found) -- C:\Users\Jakub\AppData\Roaming\mozilla\firefox\profiles\11f8tzat.default\extensions\yahooprotected@gmail.com.xpi
  412. [2016-04-30 12:25:35 | 001,036,367 | ---- | M] () (No name found) -- C:\Users\Jakub\AppData\Roaming\mozilla\firefox\profiles\11f8tzat.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  413. [2016-08-25 18:30:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  414.  
  415. [color=#E56717]========== Chrome ==========[/color]
  416.  
  417. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
  418. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
  419. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
  420. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
  421. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\
  422. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
  423. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\
  424. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\
  425. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  426. CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.14_0\
  427.  
  428. O1 HOSTS File: ([2013-08-22 15:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  429. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll (Oracle Corporation)
  430. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll (Oracle Corporation)
  431. O4:[b]64bit:[/b] - HKLM..\Run: [Energy Manager] C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe (Lenovo(beijing) Limited)
  432. O4:[b]64bit:[/b] - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)
  433. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxTray.exe ()
  434. O4:[b]64bit:[/b] - HKLM..\Run: [Lenovo Utility] C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe (Lenovo(beijing) Limited)
  435. O4:[b]64bit:[/b] - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
  436. O4:[b]64bit:[/b] - HKLM..\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo)
  437. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
  438. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  439. O4 - HKLM..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE (Vimicro)
  440. O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  441. O4 - HKLM..\Run: [CancelAutoPlay_df] C:\Program Files (x86)\ZTE MF823\CancelAutoPlay_df.exe ()
  442. O4 - HKLM..\Run: [CheckNDISPortF0ac70] C:\Program Files (x86)\ZTE MF823\CheckNDISPort_df.exe ()
  443. O4 - HKLM..\Run: [Intel AppUp(SM) center] C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (Intel Corporation)
  444. O4 - HKLM..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey File not found
  445. O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
  446. O4 - HKLM..\Run: [UpdateP2GShortCut] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
  447. O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.)
  448. O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
  449. O4 - HKCU..\Run: [Napisy24Update] C:\Program Files (x86)\Napisy24\Napisy24Update.exe (Napisy24.pl)
  450. O4 - HKCU..\Run: [OneDrive] C:\Users\Jakub\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
  451. O4 - HKCU..\RunOnce: [Uninstall C:\Users\Jakub\AppData\Local\Microsoft\OneDrive\17.3.6302.0225_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jakub\AppData\Local\Microsoft\OneDrive\17.3.6302.0225_1\amd64" File not found
  452. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  453. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  454. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  455. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  456. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
  457. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  458. O13[b]64bit:[/b] - gopher Prefix: missing
  459. O13 - gopher Prefix: missing
  460. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
  461. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{b879ddb8-acb6-4379-98e0-00a960d216dd}: DhcpNameServer = 150.202.100.1
  462. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{e2eeeca9-6785-445d-a0cd-d231abed13fa}: DhcpNameServer = 192.168.0.1
  463. O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  464. O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  465. O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  466. O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  467. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\WINDOWS\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  468. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  469. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  470. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
  471. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  472. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  473. O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) - File not found
  474. O30 - LSA: Security Packages - (livessp) - File not found
  475. O32 - HKLM CDRom: AutoRun - 1
  476. O32 - AutoRun File - [2016-03-10 22:05:29 | 000,000,000 | ---D | M] - C:\Autodesk Autocad 2007 PL -- [ NTFS ]
  477. O32 - AutoRun File - [2014-05-04 21:23:00 | 000,000,000 | -HS- | M] () - G:\autorun.inf -- [ FAT32 ]
  478. O33 - MountPoints2\{294b3084-e5f9-11e5-be92-fcf8ae318c96}\Shell - "" = AutoRun
  479. O33 - MountPoints2\{294b3084-e5f9-11e5-be92-fcf8ae318c96}\Shell\AutoRun\command - "" = "H:\iLinker.exe"
  480. O34 - HKLM BootExecute: (autocheck autochk *)
  481. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  482. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  483. O35 - HKLM\..comfile [open] -- "%1" %*
  484. O35 - HKLM\..exefile [open] -- "%1" %*
  485. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  486. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  487. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  488. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  489. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  490. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  491.  
  492. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  493.  
  494. [2016-08-27 19:46:37 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jakub\Desktop\OTL.exe
  495. [2016-08-26 08:12:55 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\damian do grzeska
  496. [2016-08-25 18:29:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  497. [2016-08-20 11:13:22 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\NB
  498. [2016-08-17 14:56:33 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\milicz
  499. [2016-08-17 14:56:02 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\drive-download-20160817T123957Z
  500. [2016-08-10 16:03:50 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
  501. [2016-08-10 16:03:49 | 002,180,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepository.dll
  502. [2016-08-10 16:03:49 | 000,566,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncHost.exe
  503. [2016-08-10 16:03:49 | 000,515,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneDriveSettingSyncProvider.dll
  504. [2016-08-10 16:03:49 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
  505. [2016-08-10 16:03:49 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
  506. [2016-08-10 16:03:49 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryClient.dll
  507. [2016-08-10 16:03:49 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryBroker.dll
  508. [2016-08-10 16:03:48 | 004,171,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
  509. [2016-08-10 16:03:47 | 012,585,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
  510. [2016-08-10 16:03:47 | 006,974,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
  511. [2016-08-10 16:03:47 | 000,808,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
  512. [2016-08-10 16:03:46 | 014,252,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
  513. [2016-08-10 16:03:45 | 005,123,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll
  514. [2016-08-10 16:03:45 | 004,078,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll
  515. [2016-08-10 16:03:45 | 000,501,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupEngine.dll
  516. [2016-08-10 16:03:45 | 000,084,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupApi.dll
  517. [2016-08-10 16:03:45 | 000,034,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wldp.dll
  518. [2016-08-10 16:03:43 | 001,388,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
  519. [2016-08-10 16:03:43 | 000,247,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wevtutil.exe
  520. [2016-08-10 16:03:43 | 000,051,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsNativeApi.dll
  521. [2016-08-10 16:03:42 | 000,576,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
  522. [2016-08-10 16:03:42 | 000,393,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
  523. [2016-08-10 16:03:41 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll
  524. [2016-08-10 16:03:41 | 001,387,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
  525. [2016-08-10 16:03:41 | 000,693,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupEngine.dll
  526. [2016-08-10 16:03:41 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupSvc.dll
  527. [2016-08-10 16:03:41 | 000,115,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupApi.dll
  528. [2016-08-10 16:03:41 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\musdialoghandlers.dll
  529. [2016-08-10 16:03:40 | 016,985,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
  530. [2016-08-10 16:03:40 | 003,589,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
  531. [2016-08-10 16:03:40 | 000,379,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
  532. [2016-08-10 16:03:40 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmTasks.dll
  533. [2016-08-10 16:03:39 | 006,743,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
  534. [2016-08-10 16:03:39 | 000,703,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
  535. [2016-08-10 16:03:38 | 007,536,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
  536. [2016-08-10 16:03:37 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LogonController.dll
  537. [2016-08-10 16:03:37 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEEventDispatcher.dll
  538. [2016-08-10 16:03:37 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUDFPlatform.dll
  539. [2016-08-10 16:03:37 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
  540. [2016-08-10 16:03:37 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tdlrecover.exe
  541. [2016-08-10 16:03:36 | 001,717,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll
  542. [2016-08-10 16:03:36 | 001,500,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RecoveryDrive.exe
  543. [2016-08-10 16:03:36 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdd.dll
  544. [2016-08-10 16:03:35 | 013,018,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
  545. [2016-08-10 16:03:35 | 000,705,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
  546. [2016-08-10 16:03:35 | 000,099,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys
  547. [2016-08-10 16:03:35 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BluetoothApis.dll
  548. [2016-08-10 16:03:34 | 001,540,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
  549. [2016-08-10 16:03:34 | 000,692,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppwinob.dll
  550. [2016-08-10 16:03:34 | 000,026,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe
  551. [2016-08-10 16:03:33 | 000,465,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys
  552. [2016-08-10 16:03:33 | 000,178,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wevtutil.exe
  553. [2016-08-10 16:03:32 | 007,469,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
  554. [2016-08-10 16:03:32 | 000,848,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
  555. [2016-08-10 16:03:32 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BluetoothApis.dll
  556. [2016-08-10 16:03:30 | 002,746,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll
  557. [2016-08-10 16:03:30 | 002,067,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
  558. [2016-08-10 16:03:30 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryClient.dll
  559. [2016-08-10 16:03:30 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryBroker.dll
  560. [2016-08-10 16:03:29 | 002,175,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
  561. [2016-08-10 16:03:29 | 001,505,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
  562. [2016-08-10 16:03:29 | 000,092,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
  563. [2016-08-10 16:03:29 | 000,050,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompatTelRunner.exe
  564. [2016-08-10 16:03:28 | 000,506,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tileobjserver.dll
  565. [2016-08-10 16:03:28 | 000,303,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppHost.exe
  566. [2016-08-10 16:03:28 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEEventDispatcher.dll
  567. [2016-08-10 16:03:28 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tdlrecover.exe
  568. [2016-08-10 16:03:28 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IdCtrls.dll
  569. [2016-08-10 16:03:28 | 000,037,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wldp.dll
  570. [2016-08-10 16:03:27 | 001,467,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll
  571. [2016-08-10 16:03:27 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEDataLayerHelpers.dll
  572. [2016-08-10 16:03:26 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneDriveSettingSyncProvider.dll
  573. [2016-08-10 16:03:26 | 000,255,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppHost.exe
  574. [2016-08-10 16:03:25 | 018,677,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
  575. [2016-08-10 16:03:25 | 000,465,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncHost.exe
  576. [2016-08-10 16:03:24 | 005,323,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
  577. [2016-08-10 16:03:24 | 001,708,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActiveSyncProvider.dll
  578. [2016-08-10 16:03:22 | 005,660,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
  579. [2016-08-10 16:03:22 | 004,895,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
  580. [2016-08-10 16:03:22 | 002,050,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
  581. [2016-08-10 16:03:22 | 000,784,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
  582. [2016-08-10 16:03:22 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IdCtrls.dll
  583. [2016-08-10 16:03:21 | 002,127,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
  584. [2016-08-10 16:03:20 | 007,833,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
  585. [2016-08-10 16:03:20 | 000,764,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll
  586. [2016-08-10 16:03:19 | 022,384,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
  587. [2016-08-10 16:03:18 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
  588. [2016-08-10 16:03:17 | 001,752,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
  589. [2016-08-10 16:03:17 | 001,526,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
  590. [2016-08-10 16:03:17 | 001,322,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
  591. [2016-08-10 16:03:17 | 000,529,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
  592. [2016-08-10 16:03:16 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
  593. [2016-08-10 16:03:13 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
  594. [2016-08-10 16:03:13 | 000,286,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsApi.dll
  595. [2016-08-10 16:03:12 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
  596. [2016-08-10 16:03:12 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
  597. [2016-08-10 16:03:12 | 000,058,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.dll
  598. [2016-08-06 13:51:50 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\rezabudowa_
  599. [2016-08-03 17:25:15 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\czesci
  600. [2016-04-21 17:17:58 | 086,389,435 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Word 2003.exe
  601. [2016-04-21 17:17:03 | 083,717,059 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Excel 2003.exe
  602.  
  603. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  604.  
  605. [2016-08-27 19:48:08 | 000,086,376 | ---- | M] () -- C:\Users\Jakub\Desktop\otl.jpg
  606. [2016-08-27 19:46:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jakub\Desktop\OTL.exe
  607. [2016-08-27 19:38:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  608. [2016-08-27 19:29:07 | 000,120,947 | ---- | M] () -- C:\Users\Jakub\Desktop\wtf.jpg
  609. [2016-08-27 18:20:27 | 000,000,180 | ---- | M] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
  610. [2016-08-27 18:20:25 | 1681,190,912 | -HS- | M] () -- C:\hiberfil.sys
  611. [2016-08-27 18:20:24 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  612. [2016-08-26 08:05:02 | 001,849,016 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
  613. [2016-08-26 08:05:02 | 000,819,340 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat
  614. [2016-08-26 08:05:02 | 000,735,532 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
  615. [2016-08-26 08:05:02 | 000,158,506 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat
  616. [2016-08-26 08:05:02 | 000,139,570 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
  617. [2016-08-25 20:30:00 | 000,001,012 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3796672058-1677514266-1504746770-1002Core.job
  618. [2016-08-25 17:03:17 | 000,216,469 | ---- | M] () -- C:\Users\Jakub\Desktop\umowa_kupna_sprzedazy_samochodu.pdf
  619. [2016-08-17 14:40:06 | 008,827,436 | ---- | M] () -- C:\Users\Jakub\Desktop\drive-download-20160817T123957Z.zip
  620. [2016-08-11 09:47:32 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  621. [2016-08-09 11:22:21 | 000,002,499 | ---- | M] () -- C:\Users\Jakub\Desktop\Google Chrome.lnk
  622. [2016-08-06 13:51:43 | 000,799,308 | ---- | M] () -- C:\Users\Jakub\Desktop\rezabudowa_.zip
  623. [2016-08-03 17:31:45 | 000,005,632 | ---- | M] () -- C:\Users\Jakub\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  624. [2016-08-03 13:14:47 | 001,505,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
  625. [2016-08-03 13:14:47 | 000,092,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
  626. [2016-08-03 13:14:47 | 000,050,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompatTelRunner.exe
  627. [2016-08-03 12:36:39 | 007,469,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
  628. [2016-08-03 12:36:37 | 000,099,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys
  629. [2016-08-03 12:36:30 | 000,037,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wldp.dll
  630. [2016-08-03 12:30:47 | 000,026,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe
  631. [2016-08-03 12:23:43 | 000,115,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupApi.dll
  632. [2016-08-03 12:23:42 | 000,693,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupEngine.dll
  633. [2016-08-03 12:22:59 | 000,058,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.dll
  634. [2016-08-03 12:22:53 | 000,465,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys
  635. [2016-08-03 12:22:10 | 000,808,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
  636. [2016-08-03 12:22:08 | 001,322,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
  637. [2016-08-03 12:21:07 | 000,303,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppHost.exe
  638. [2016-08-03 12:21:01 | 000,566,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncHost.exe
  639. [2016-08-03 12:20:08 | 001,540,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
  640. [2016-08-03 12:20:04 | 000,692,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppwinob.dll
  641. [2016-08-03 12:13:11 | 000,576,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
  642. [2016-08-03 12:13:10 | 000,393,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
  643. [2016-08-03 11:51:14 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
  644. [2016-08-03 11:51:00 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tdlrecover.exe
  645. [2016-08-03 11:46:24 | 022,384,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
  646. [2016-08-03 11:44:23 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\musdialoghandlers.dll
  647. [2016-08-03 11:44:03 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
  648. [2016-08-03 11:43:07 | 016,985,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
  649. [2016-08-03 11:41:27 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryClient.dll
  650. [2016-08-03 11:41:25 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryBroker.dll
  651. [2016-08-03 11:40:54 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
  652. [2016-08-03 11:40:48 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmTasks.dll
  653. [2016-08-03 11:40:16 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEDataLayerHelpers.dll
  654. [2016-08-03 11:39:55 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdd.dll
  655. [2016-08-03 11:39:43 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BluetoothApis.dll
  656. [2016-08-03 11:38:23 | 000,379,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
  657. [2016-08-03 11:38:22 | 000,412,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
  658. [2016-08-03 11:37:22 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IdCtrls.dll
  659. [2016-08-03 11:36:49 | 000,211,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupSvc.dll
  660. [2016-08-03 11:36:28 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
  661. [2016-08-03 11:36:16 | 000,221,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
  662. [2016-08-03 11:35:56 | 000,200,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUDFPlatform.dll
  663. [2016-08-03 11:35:15 | 000,764,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll
  664. [2016-08-03 11:33:57 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
  665. [2016-08-03 11:33:37 | 000,285,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEEventDispatcher.dll
  666. [2016-08-03 11:31:59 | 000,359,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
  667. [2016-08-03 11:31:54 | 000,247,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wevtutil.exe
  668. [2016-08-03 11:31:38 | 000,506,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tileobjserver.dll
  669. [2016-08-03 11:30:28 | 000,515,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneDriveSettingSyncProvider.dll
  670. [2016-08-03 11:29:51 | 000,784,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
  671. [2016-08-03 11:29:38 | 014,252,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
  672. [2016-08-03 11:29:36 | 002,127,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
  673. [2016-08-03 11:29:15 | 001,500,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RecoveryDrive.exe
  674. [2016-08-03 11:29:09 | 001,387,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
  675. [2016-08-03 11:28:40 | 000,529,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
  676. [2016-08-03 11:28:24 | 000,848,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
  677. [2016-08-03 11:27:58 | 001,717,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll
  678. [2016-08-03 11:27:54 | 001,752,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
  679. [2016-08-03 11:27:45 | 007,536,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
  680. [2016-08-03 11:27:29 | 000,381,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
  681. [2016-08-03 11:18:57 | 006,974,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
  682. [2016-08-03 11:18:20 | 001,388,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
  683. [2016-08-03 11:18:16 | 002,067,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
  684. [2016-08-03 11:17:10 | 002,175,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
  685. [2016-08-03 11:16:30 | 003,589,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
  686. [2016-08-03 11:16:25 | 005,123,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll
  687. [2016-08-03 11:15:20 | 007,833,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
  688. [2016-08-03 11:14:04 | 001,997,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll
  689. [2016-08-03 11:14:02 | 004,895,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
  690. [2016-08-03 11:12:25 | 002,746,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll
  691. [2016-08-03 11:11:25 | 004,171,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
  692. [2016-08-03 07:52:28 | 000,034,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wldp.dll
  693. [2016-08-03 07:34:16 | 000,501,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupEngine.dll
  694. [2016-08-03 07:34:13 | 000,084,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupApi.dll
  695. [2016-08-03 07:33:08 | 000,051,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsNativeApi.dll
  696. [2016-08-03 07:31:38 | 000,703,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
  697. [2016-08-03 07:30:12 | 000,255,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppHost.exe
  698. [2016-08-03 07:30:07 | 000,465,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncHost.exe
  699. [2016-08-03 06:57:44 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tdlrecover.exe
  700. [2016-08-03 06:47:48 | 013,018,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
  701. [2016-08-03 06:44:46 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryBroker.dll
  702. [2016-08-03 06:44:45 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryClient.dll
  703. [2016-08-03 06:42:54 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BluetoothApis.dll
  704. [2016-08-03 06:40:45 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IdCtrls.dll
  705. [2016-08-03 06:37:22 | 000,219,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEEventDispatcher.dll
  706. [2016-08-03 06:35:37 | 000,178,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wevtutil.exe
  707. [2016-08-03 06:35:21 | 000,286,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsApi.dll
  708. [2016-08-03 06:34:23 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneDriveSettingSyncProvider.dll
  709. [2016-08-03 06:33:52 | 002,050,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
  710. [2016-08-03 06:33:35 | 018,677,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
  711. [2016-08-03 06:32:44 | 000,434,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LogonController.dll
  712. [2016-08-03 06:32:14 | 012,585,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
  713. [2016-08-03 06:32:09 | 001,467,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll
  714. [2016-08-03 06:32:06 | 001,526,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
  715. [2016-08-03 06:31:49 | 000,705,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
  716. [2016-08-03 06:31:05 | 006,743,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
  717. [2016-08-03 06:25:36 | 005,323,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
  718. [2016-08-03 06:25:23 | 004,078,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll
  719. [2016-08-03 06:23:47 | 005,660,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
  720. [2016-08-03 06:21:34 | 001,708,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActiveSyncProvider.dll
  721. [2016-08-03 06:19:22 | 002,180,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepository.dll
  722. [2016-07-29 20:25:15 | 000,001,064 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3796672058-1677514266-1504746770-1002UA.job
  723.  
  724. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  725.  
  726. [2016-08-27 19:48:08 | 000,086,376 | ---- | C] () -- C:\Users\Jakub\Desktop\otl.jpg
  727. [2016-08-27 19:29:07 | 000,120,947 | ---- | C] () -- C:\Users\Jakub\Desktop\wtf.jpg
  728. [2016-08-25 17:03:17 | 000,216,469 | ---- | C] () -- C:\Users\Jakub\Desktop\umowa_kupna_sprzedazy_samochodu.pdf
  729. [2016-08-17 14:40:06 | 008,827,436 | ---- | C] () -- C:\Users\Jakub\Desktop\drive-download-20160817T123957Z.zip
  730. [2016-08-06 13:51:43 | 000,799,308 | ---- | C] () -- C:\Users\Jakub\Desktop\rezabudowa_.zip
  731. [2016-07-12 22:33:28 | 001,862,008 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
  732. [2016-04-26 18:07:17 | 000,005,632 | ---- | C] () -- C:\Users\Jakub\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  733. [2016-04-13 14:10:30 | 000,162,816 | ---- | C] () -- C:\WINDOWS\SysWow64\MTF.dll
  734. [2016-04-04 21:40:15 | 000,006,705 | ---- | C] () -- C:\Users\Jakub\AppData\Local\recently-used.xbel
  735. [2016-03-26 18:05:22 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  736. [2015-11-23 18:37:28 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  737. [2015-10-31 23:25:04 | 000,644,608 | ---- | C] () -- C:\WINDOWS\SysWow64\xvidcore.dll
  738. [2015-10-31 23:25:04 | 000,258,048 | ---- | C] () -- C:\WINDOWS\SysWow64\libFLAC.dll
  739. [2015-10-30 09:24:43 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
  740. [2015-10-30 09:24:43 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
  741. [2015-10-30 09:18:39 | 000,164,224 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
  742. [2015-10-30 09:18:36 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
  743. [2015-10-30 09:18:36 | 000,047,104 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
  744. [2015-10-30 09:18:34 | 000,019,968 | ---- | C] () -- C:\WINDOWS\SysWow64\GamePanelExternalHook.dll
  745. [2015-10-30 09:18:31 | 000,252,928 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll
  746. [2015-10-30 09:18:31 | 000,029,184 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
  747. [2015-10-30 09:18:29 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
  748. [2015-10-30 09:18:29 | 000,293,376 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
  749. [2015-10-30 09:18:26 | 000,022,528 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
  750. [2015-10-30 09:18:25 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
  751. [2015-10-30 09:18:23 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
  752. [2015-10-30 09:17:40 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
  753. [2015-07-23 05:02:12 | 037,749,064 | ---- | C] () -- C:\WINDOWS\SysWow64\nvcompiler.dll
  754. [2015-06-17 09:08:34 | 000,003,134 | ---- | C] () -- C:\WINDOWS\vm331Rmv.ini
  755. [2015-06-17 09:08:34 | 000,003,134 | ---- | C] () -- C:\WINDOWS\SysWow64\vm331Rmv.ini
  756. [2014-11-03 20:03:50 | 000,066,872 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
  757. [2014-11-03 20:03:43 | 000,103,736 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
  758. [2014-01-08 00:30:52 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
  759.  
  760. [color=#E56717]========== ZeroAccess Check ==========[/color]
  761.  
  762. [2016-04-19 10:46:22 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
  763.  
  764. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  765.  
  766. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  767.  
  768. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  769.  
  770. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  771.  
  772. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  773. "" = C:\Windows\SysNative\windows.storage.dll -- [2016-07-01 06:32:57 | 006,605,544 | ---- | M] (Microsoft Corporation)
  774. "ThreadingModel" = Apartment
  775.  
  776. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  777. "" = %SystemRoot%\system32\windows.storage.dll -- [2016-07-01 06:19:46 | 005,240,960 | ---- | M] (Microsoft Corporation)
  778. "ThreadingModel" = Apartment
  779.  
  780. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  781. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2015-10-30 09:17:43 | 000,987,648 | ---- | M] (Microsoft Corporation)
  782. "ThreadingModel" = Free
  783.  
  784. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  785. "" = %systemroot%\system32\wbem\fastprox.dll -- [2015-10-30 09:18:21 | 000,765,440 | ---- | M] (Microsoft Corporation)
  786. "ThreadingModel" = Free
  787.  
  788. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  789. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2015-10-30 09:17:45 | 000,518,656 | ---- | M] (Microsoft Corporation)
  790. "ThreadingModel" = Both
  791.  
  792. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  793.  
  794. [color=#E56717]========== Alternate Data Streams ==========[/color]
  795.  
  796. @Alternate Data Stream - 94 bytes -> C:\Users\Jakub\OneDrive:ms-properties
  797.  
  798. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!