Advertisement
Guest User

FRST

a guest
Dec 15th, 2018
47
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 72.69 KB | None | 0 0
  1. Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 09.12.2018
  2. Uruchomiony przez Administrator (administrator) SERWER (16-12-2018 00:43:53)
  3. Uruchomiony z C:\Users\Administrator\Desktop\Nowy folder
  4. Załadowane profile: Administrator (Dostępne profile: x & y & Administrator)
  5. Platform: Windows Server 2008 R2 Standard Service Pack 1 (X64) Język: Polski (Polska)
  6. Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
  7. Tryb startu: Safe Mode (with Networking)
  8. Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Procesy (filtrowane) =================
  11.  
  12. (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
  13.  
  14. (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
  15. (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
  16. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  17. (Microsoft Corporation) C:\Windows\System32\perfmon.exe
  18.  
  19. ==================== Rejestr (filtrowane) ===========================
  20.  
  21. (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
  22.  
  23. HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-02-24] (Realtek Semiconductor)
  24. HKLM\...\Run: [XFast LAN] => C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [2009952 2013-05-31] (cFos Software GmbH)
  25. HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  26. HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-03-10] (Intel Corporation)
  27. HKLM-x32\...\Run: [FileZilla Server Interface] => C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe [2770088 2017-02-08] (FileZilla Project)
  28. HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
  29. HKLM\...\Policies\Explorer: [ShowSuperHidden] 1
  30. HKU\S-1-5-21-2329909867-3265567673-2868482587-500\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
  31. HKU\S-1-5-21-2329909867-3265567673-2868482587-500\...\MountPoints2: {c1c43561-f42b-11e6-aceb-d050995ba728} - E:\start.exe
  32. Lsa: [Notification Packages] scecli rassfm
  33. SecurityProviders: credssp.dll, pwdssp.dll
  34. GroupPolicy: Ograniczenia ? <==== UWAGA
  35.  
  36. ==================== Internet (filtrowane) ====================
  37.  
  38. (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
  39.  
  40. Tcpip\Parameters: [DhcpNameServer] 192.168.101.254
  41. Tcpip\..\Interfaces\{2B71976F-16B0-4E1E-B299-43781ED8E695}: [DhcpNameServer] 192.168.101.254
  42. Tcpip\..\Interfaces\{453CB364-1A0B-48FE-89CC-F38C3993530F}: [NameServer] 127.0.0.1
  43. Tcpip\..\Interfaces\{453CB364-1A0B-48FE-89CC-F38C3993530F}: [DhcpNameServer] 8.8.8.8 94.177.135.254
  44.  
  45. Internet Explorer:
  46. ==================
  47. HKU\S-1-5-21-2329909867-3265567673-2868482587-500\Software\Microsoft\Internet Explorer\Main,Start Page = res://iesetup.dll/HardAdmin.htm
  48. BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
  49.  
  50. FireFox:
  51. ========
  52. FF DefaultProfile: phew9qvw.default
  53. FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\phew9qvw.default [2018-11-07]
  54. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
  55. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
  56.  
  57. Chrome:
  58. =======
  59. CHR DefaultProfile: Default
  60. CHR Profile: C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default [2018-12-15]
  61. CHR Extension: (Docs) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-03-20]
  62. CHR Extension: (Google Drive) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-19]
  63. CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-19]
  64. CHR Extension: (Google Search) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-11-22]
  65. CHR Extension: (Google Docs Offline) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-12-15]
  66. CHR Extension: (Chrome Web Store Payments) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-12-15]
  67. CHR Extension: (Gmail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-19]
  68. CHR Extension: (Chrome Media Router) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-15]
  69.  
  70. ==================== Usługi (filtrowane) ====================
  71.  
  72. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  73.  
  74. S2 ADWS; C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe [487424 2013-01-25] (Microsoft Corporation)
  75. S2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [652640 2013-05-31] (cFos Software GmbH)
  76. S2 Dfs; C:\Windows\system32\dfssvc.exe [377344 2010-11-21] (Microsoft Corporation)
  77. S2 DFSR; C:\Windows\system32\DFSRs.exe [4518400 2010-11-21] (Microsoft Corporation)
  78. S2 DHCPServer; C:\Windows\System32\dhcpssvc.dll [729088 2010-11-21] (Microsoft Corporation)
  79. S2 DNS; C:\Windows\system32\dns.exe [700928 2018-09-11] (Microsoft Corporation)
  80. S3 EHttpSrv; C:\Program Files\ESET\ESET File Security\ehttpsrv.exe [51840 2016-10-20] (ESET)
  81. S2 ekrn; C:\Program Files\ESET\ESET File Security\x86\ekrn.exe [1651264 2016-10-20] (ESET)
  82. S3 FCRegSvc; C:\Windows\system32\FCRegSvc.dll [25600 2009-07-14] (Microsoft Corporation)
  83. S2 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [859304 2017-02-08] (FileZilla Project)
  84. S2 IAS; C:\Windows\System32\ias.dll [26624 2009-07-14] (Microsoft Corporation)
  85. S2 IAS; C:\Windows\SysWOW64\ias.dll [19456 2009-07-14] (Microsoft Corporation)
  86. S2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2010-11-21] (Microsoft Corporation)
  87. S2 IsmServ; C:\Windows\System32\ismserv.exe [59392 2010-11-21] (Microsoft Corporation)
  88. S2 kdc; C:\Windows\System32\lsass.exe [30720 2018-11-11] (Microsoft Corporation)
  89. R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6347056 2018-09-19] (Malwarebytes)
  90. S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2012-02-08] (Hewlett-Packard) [Brak podpisu cyfrowego]
  91. R2 NTDS; C:\Windows\System32\lsass.exe [30720 2018-11-11] (Microsoft Corporation)
  92. S4 NtFrs; C:\Windows\system32\ntfrs.exe [1020416 2010-11-21] (Microsoft Corporation)
  93. S2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2017-02-10] (NVIDIA Corporation)
  94. S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2012-02-08] (Hewlett-Packard) [Brak podpisu cyfrowego]
  95. S3 RPCHTTPLBS; C:\Windows\System32\RpcProxy\LBService.dll [24576 2010-11-21] (Microsoft Corporation)
  96. S3 rqs; C:\Windows\system32\rqs.exe [41472 2010-11-21] (Microsoft Corporation)
  97. S3 RSoPProv; C:\Windows\system32\RSoPProv.exe [91648 2009-07-14] (Microsoft Corporation)
  98. S3 sacsvr; C:\Windows\system32\sacsvr.dll [14848 2009-07-14] (Microsoft Corporation)
  99. S2 TermServLicensing; C:\Windows\System32\lserver.dll [694784 2010-11-21] (Microsoft Corporation)
  100. S2 TSGateway; C:\Windows\system32\aaedge.dll [308736 2015-07-10] (Microsoft Corporation)
  101. R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  102. S2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
  103. S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
  104. S2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
  105.  
  106. ===================== Sterowniki (filtrowane) ======================
  107.  
  108. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  109.  
  110. R1 DfsDriver; C:\Windows\System32\drivers\dfs.sys [51776 2009-07-14] (Microsoft Corporation)
  111. R0 DfsrRo; C:\Windows\System32\drivers\dfsrro.sys [66944 2010-11-21] (Microsoft Corporation)
  112. R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2017-02-16] (Disc Soft Ltd)
  113. R3 e1rexpress; C:\Windows\System32\DRIVERS\e1r62x64.sys [487704 2014-07-28] (Intel Corporation)
  114. S1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264328 2016-10-14] (ESET)
  115. S1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [196744 2016-10-14] (ESET)
  116. S3 ioatdma; C:\Windows\System32\Drivers\qd260x64.sys [35328 2009-06-10] (Intel Corporation)
  117. R0 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [198512 2018-12-09] (Malwarebytes)
  118. R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [261032 2018-12-15] (Malwarebytes)
  119. S3 MRxDAV; C:\Windows\SysWOW64\drivers\mrxdav.sys [117248 2016-09-08] (Microsoft Corporation)
  120. S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-02-10] (NVIDIA Corporation)
  121. S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2017-02-10] (NVIDIA Corporation)
  122. R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [59448 2017-03-17] (NVIDIA Corporation)
  123. S0 sacdrv; C:\Windows\System32\DRIVERS\sacdrv.sys [96320 2009-07-14] (Microsoft Corporation)
  124. S3 IntelTurboBoostMax; system32\DRIVERS\IntelNit.sys [X]
  125. S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\WNt600x64\Sandra.sys [X]
  126.  
  127. ========================== MD5 sterowników =======================
  128.  
  129. C:\Windows\system32\drivers\1394ohci.sys ==> MD5 jest poprawne
  130. C:\Windows\System32\drivers\ACPI.sys DCA5495CA17AEB2F4FD8AC60812C3999
  131. C:\Windows\system32\drivers\acpipmi.sys ==> MD5 jest poprawne
  132. C:\Windows\system32\drivers\adp94xx.sys ==> MD5 jest poprawne
  133. C:\Windows\system32\drivers\adpahci.sys ==> MD5 jest poprawne
  134. C:\Windows\system32\drivers\adpu320.sys ==> MD5 jest poprawne
  135. C:\Windows\system32\drivers\afd.sys 0DC2A9882540DEA4A55B08785E09D8FC
  136. C:\Windows\system32\drivers\agp440.sys 466BF4170DC41BB939F1F9AB8F97F8F5
  137. C:\Windows\system32\drivers\aliide.sys ==> MD5 jest poprawne
  138. C:\Windows\system32\drivers\amdide.sys ==> MD5 jest poprawne
  139. C:\Windows\system32\drivers\amdk8.sys A659CA802EFF1D1630C695432DAD9D93
  140. C:\Windows\system32\drivers\amdppm.sys D7600458EB5BA7C27B54E221F426A2AD
  141. C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
  142. C:\Windows\system32\drivers\amdsbs.sys ==> MD5 jest poprawne
  143. C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
  144. C:\Windows\system32\drivers\appid.sys 197BFF5427BB0BBC7A0B808552A32E59
  145. C:\Windows\system32\drivers\arc.sys ==> MD5 jest poprawne
  146. C:\Windows\system32\drivers\arcsas.sys ==> MD5 jest poprawne
  147. C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 jest poprawne
  148. C:\Windows\System32\drivers\atapi.sys ==> MD5 jest poprawne
  149. C:\Windows\system32\drivers\bxvbda.sys ==> MD5 jest poprawne
  150. C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 jest poprawne
  151. C:\Windows\System32\Drivers\Beep.sys ==> MD5 jest poprawne
  152. C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 jest poprawne
  153. C:\Windows\System32\DRIVERS\bowser.sys D7E5C916557268B3DCC9E7DAD58E7727
  154. C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 jest poprawne
  155. C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 jest poprawne
  156. C:\Windows\System32\Drivers\Brserid.sys ==> MD5 jest poprawne
  157. C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 jest poprawne
  158. C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 jest poprawne
  159. C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 jest poprawne
  160. C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 jest poprawne
  161. C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 jest poprawne
  162. C:\Windows\System32\DRIVERS\cfosspeed6.sys 1BF0745142C07A6967C6DB7DEBFF6B16
  163. C:\Windows\System32\CLFS.sys B5D7A0638CA817BA7D8A4DFD3499BA2A
  164. C:\Windows\system32\drivers\CmBatt.sys ==> MD5 jest poprawne
  165. C:\Windows\system32\drivers\cmdide.sys ==> MD5 jest poprawne
  166. C:\Windows\System32\Drivers\cng.sys 9DE8D00626F01DBD1879A6655D7A752D
  167. C:\Windows\system32\drivers\compbatt.sys ==> MD5 jest poprawne
  168. C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 jest poprawne
  169. C:\Windows\system32\drivers\crcdisk.sys ==> MD5 jest poprawne
  170. C:\Windows\System32\drivers\csc.sys 80BC9D418607974E4940EBC42F69BC8D
  171. C:\Windows\System32\Drivers\dfsc.sys 63705A08981F7EDD376241D6E0A9C2AC
  172. C:\Windows\System32\drivers\dfs.sys FFFE7EF57BD8C93AB3076B340FAE0830
  173. C:\Windows\System32\drivers\dfsrro.sys E66B02FC5250331BAAC1CAE2111D1288
  174. C:\Windows\System32\drivers\discache.sys ==> MD5 jest poprawne
  175. C:\Windows\System32\drivers\disk.sys 616387BBD83372220B09DE95F4E67BBC
  176. C:\Windows\system32\drivers\dmvsc.sys 5DB085A8A6600BE6401F2B24EECB5415
  177. C:\Windows\system32\drivers\drmkaud.sys 26FE888505E5A945B0536AF9A2A27A6F
  178. C:\Windows\System32\DRIVERS\dtsoftbus01.sys 33F90B202E9DD9B7D489EB59310FDC34
  179. C:\Windows\System32\drivers\dxgkrnl.sys 781C6AE4B9111C9AD5017F1677599CDE
  180. C:\Windows\System32\DRIVERS\e1r62x64.sys 96338ED96E050996D5489BF4EC3A3813
  181. C:\Windows\System32\DRIVERS\eamonm.sys 9E01EA3AF6291612F9FC3761FA4F4E39
  182. C:\Windows\system32\drivers\evbda.sys ==> MD5 jest poprawne
  183. C:\Windows\System32\DRIVERS\ehdrv.sys 6D4DE0EE4FD5CD8F5B3EA95727A2A533
  184. C:\Windows\system32\drivers\elxstor.sys ==> MD5 jest poprawne
  185. C:\Windows\system32\drivers\errdev.sys 9002EED07FD7FCFF6B8C5C06B454AC19
  186. C:\Windows\System32\Drivers\exfat.sys 7E45F8B117419ABA3BB26579F6E70324
  187. C:\Windows\System32\Drivers\fastfat.sys 6EDFA237D25433C03F42FBFDB16BDD24
  188. C:\Windows\system32\drivers\fdc.sys ==> MD5 jest poprawne
  189. C:\Windows\System32\drivers\fileinfo.sys ==> MD5 jest poprawne
  190. C:\Windows\System32\drivers\filetrace.sys ==> MD5 jest poprawne
  191. C:\Windows\system32\drivers\flpydisk.sys ==> MD5 jest poprawne
  192. C:\Windows\System32\drivers\fltmgr.sys DC591A7A196E99EFB5A48D708CB989FD
  193. C:\Windows\System32\drivers\FsDepends.sys ==> MD5 jest poprawne
  194. C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
  195. C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 jest poprawne
  196. C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
  197. C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 jest poprawne
  198. C:\Windows\system32\drivers\HidBatt.sys ==> MD5 jest poprawne
  199. C:\Windows\system32\drivers\hidusb.sys 90D91013D16A15B22A4B4EB6D4140A5B
  200. C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 jest poprawne
  201. C:\Windows\System32\drivers\HTTP.sys 93C367EA831FB39DEE3BA96539A187FB
  202. C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 jest poprawne
  203. C:\Windows\system32\drivers\i8042prt.sys ==> MD5 jest poprawne
  204. C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
  205. C:\Windows\system32\drivers\iirsp.sys ==> MD5 jest poprawne
  206. C:\Windows\System32\drivers\RTKVHD64.sys 01262E2BE97708F54666E700482027DE
  207. C:\Windows\system32\drivers\intelide.sys ==> MD5 jest poprawne
  208. C:\Windows\system32\drivers\intelppm.sys 9E020E79178FEBE2D1D7F7A27DCB0434
  209. C:\Windows\System32\Drivers\qd260x64.sys FF0FB51A0ACC2E2D0D412138A05A0B59
  210. C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 jest poprawne
  211. C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 jest poprawne
  212. C:\Windows\System32\drivers\ipnat.sys ==> MD5 jest poprawne
  213. C:\Windows\system32\drivers\isapnp.sys 905E9D664F38B93B53FA05422165F5B5
  214. C:\Windows\system32\drivers\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6
  215. C:\Windows\System32\DRIVERS\iusb3hcs.sys AAF9F75691D8F4F652EC4722BCE24476
  216. C:\Windows\System32\DRIVERS\iusb3hub.sys 834C3A7C70839D1079288305BBAC4EBD
  217. C:\Windows\System32\DRIVERS\iusb3xhc.sys 7D5E241E00D29F6461473A146B5C1767
  218. C:\Windows\system32\drivers\kbdclass.sys ==> MD5 jest poprawne
  219. C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 jest poprawne
  220. C:\Windows\System32\Drivers\ksecdd.sys 420A691F97DFE84FCDD237A7A3A8D22E
  221. C:\Windows\System32\Drivers\ksecpkg.sys CC7854083F272283974669BF041505DB
  222. C:\Windows\system32\drivers\ksthunk.sys ==> MD5 jest poprawne
  223. C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 jest poprawne
  224. C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 jest poprawne
  225. C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 jest poprawne
  226. C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 jest poprawne
  227. C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 jest poprawne
  228. C:\Windows\system32\drivers\luafv.sys 5416CEB2916BBE635288C4D1075B045E
  229. C:\Windows\System32\Drivers\MbamChameleon.sys AC5EE6C2018136DC8A3CBC7E5FEF5647
  230. C:\Windows\System32\Drivers\mbamswissarmy.sys 690EFB99D5633F95C884BD538CB708A6
  231. C:\Windows\system32\drivers\megasas.sys ==> MD5 jest poprawne
  232. C:\Windows\system32\drivers\MegaSR.sys ==> MD5 jest poprawne
  233. C:\Windows\System32\drivers\modem.sys ==> MD5 jest poprawne
  234. C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 jest poprawne
  235. C:\Windows\system32\drivers\mouclass.sys ==> MD5 jest poprawne
  236. C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 jest poprawne
  237. C:\Windows\System32\drivers\mountmgr.sys 072D8646E23ECF8A3F5F0157017B4DB6
  238. C:\Windows\system32\drivers\mpio.sys ==> MD5 jest poprawne
  239. C:\Windows\System32\drivers\mpsdrv.sys 3F829492638A86A3C4E0BB06778F0C23
  240. C:\Windows\system32\drivers\mrxdav.sys 98DB1790F0A584E0A2528B92B052417F
  241. C:\Windows\SysWOW64\drivers\mrxdav.sys 06AC0310138E4B2C35AF7344D18BC686
  242. C:\Windows\System32\DRIVERS\mrxsmb.sys 32AE509D8E47C52FCF3133EDCAA54460
  243. C:\Windows\System32\DRIVERS\mrxsmb10.sys 1B38AAE1781C0AEB2A26AA69ABB1E5F2
  244. C:\Windows\System32\DRIVERS\mrxsmb20.sys 076A4484BE18533C8AA38A1970188D19
  245. C:\Windows\System32\drivers\msahci.sys ==> MD5 jest poprawne
  246. C:\Windows\system32\drivers\msdsm.sys ==> MD5 jest poprawne
  247. C:\Windows\System32\Drivers\Msfs.sys ==> MD5 jest poprawne
  248. C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 jest poprawne
  249. C:\Windows\System32\drivers\msisadrv.sys 6FE3DBEEA730A857CA3DF603B7DEADA2
  250. C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 jest poprawne
  251. C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 jest poprawne
  252. C:\Windows\System32\drivers\MSPQM.sys ==> MD5 jest poprawne
  253. C:\Windows\System32\Drivers\MsRPC.sys 6D998E05CBEF595C38FCECC8DDAAAA86
  254. C:\Windows\system32\drivers\mssmbios.sys 1FC0BF25FFCB9F751BCBC6C6AC577078
  255. C:\Windows\System32\drivers\MSTEE.sys ==> MD5 jest poprawne
  256. C:\Windows\system32\drivers\MTConfig.sys ==> MD5 jest poprawne
  257. C:\Windows\System32\Drivers\mup.sys AA0C2BA3782E92BD85E2264BE418E67C
  258. C:\Windows\System32\drivers\ndis.sys CBE5C2A3353A367734989E335D6AF194
  259. C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 jest poprawne
  260. C:\Windows\System32\DRIVERS\ndistapi.sys 3F217F77899654833B650ED6A1372BE4
  261. C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 jest poprawne
  262. C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 jest poprawne
  263. C:\Windows\System32\Drivers\NDProxy.sys E46AF308E96F7730F59B0F250A884CD6
  264. C:\Windows\System32\DRIVERS\netbios.sys 2E19EB10185992AB08BC3688AACA4CE2
  265. C:\Windows\System32\DRIVERS\netbt.sys 734837208CAFD6E0959A7A0333C95C9D
  266. C:\Windows\system32\drivers\nfrd960.sys ==> MD5 jest poprawne
  267. C:\Windows\System32\Drivers\Npfs.sys ==> MD5 jest poprawne
  268. C:\Windows\System32\drivers\nsiproxy.sys BE313E566EEA2A4B7F9AAC9782A567D4
  269. C:\Windows\System32\Drivers\Ntfs.sys 854121FF6840DB681910D072F92640B7
  270. C:\Windows\System32\Drivers\Null.sys ==> MD5 jest poprawne
  271. C:\Windows\System32\drivers\nvhda64v.sys A138890751D328A9ADEAFCB4CC0B6370
  272. C:\Windows\System32\DRIVERS\nvlddmkm.sys A51409C8043504A6DB5C97FB8BD6FABA
  273. C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
  274. C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
  275. C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys 81C0D014F277155D56422FA881F7D616
  276. C:\Windows\System32\drivers\nvvad64v.sys 86BB05638CF921AB95E346AD0AB0E300
  277. C:\Windows\System32\DRIVERS\nvvhci.sys BCEBAC08D60020C800E1A80B257DCE43
  278. C:\Windows\system32\drivers\nv_agp.sys 7425A6B64F5D37D0565F2581B886E5E3
  279. C:\Windows\system32\drivers\ohci1394.sys ==> MD5 jest poprawne
  280. C:\Windows\system32\drivers\parport.sys ==> MD5 jest poprawne
  281. C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
  282. C:\Windows\System32\drivers\pci.sys 481DADB90C1D4E9F19328079C7A9E63D
  283. C:\Windows\system32\drivers\pciide.sys ==> MD5 jest poprawne
  284. C:\Windows\system32\drivers\pcmcia.sys ==> MD5 jest poprawne
  285. C:\Windows\System32\drivers\pcw.sys ==> MD5 jest poprawne
  286. C:\Windows\System32\drivers\peauth.sys EA4D67448BE493D543F1730D6CD04694
  287. C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 jest poprawne
  288. C:\Windows\system32\drivers\processr.sys 7AAEF1FF9A45748B4B63845CEB3BD8EB
  289. C:\Windows\System32\DRIVERS\pacer.sys 4CE827A5433451551E99C2C1D20E4A43
  290. C:\Windows\system32\drivers\ql2300.sys ==> MD5 jest poprawne
  291. C:\Windows\system32\drivers\ql40xx.sys ==> MD5 jest poprawne
  292. C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 jest poprawne
  293. C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 jest poprawne
  294. C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 jest poprawne
  295. C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 jest poprawne
  296. C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 jest poprawne
  297. C:\Windows\System32\DRIVERS\rdbss.sys FB45727105E27756B3252572A138FA19
  298. C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 jest poprawne
  299. C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 jest poprawne
  300. C:\Windows\System32\drivers\rdpdr.sys ==> MD5 jest poprawne
  301. C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 jest poprawne
  302. C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 jest poprawne
  303. C:\Windows\System32\Drivers\RDPWD.sys FE571E088C2D83619D2D48D4E961BF41
  304. C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 jest poprawne
  305. C:\Windows\system32\drivers\vms3cap.sys ==> MD5 jest poprawne
  306. C:\Windows\System32\DRIVERS\sacdrv.sys D65E5E5C59F70516E856F5350106CDAB
  307. C:\Windows\system32\drivers\sbp2port.sys ==> MD5 jest poprawne
  308. C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 jest poprawne
  309. C:\Windows\System32\Drivers\secdrv.sys ==> MD5 jest poprawne
  310. C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 jest poprawne
  311. C:\Windows\System32\DRIVERS\serial.sys ==> MD5 jest poprawne
  312. C:\Windows\system32\drivers\sermouse.sys ==> MD5 jest poprawne
  313. C:\Windows\system32\drivers\sffdisk.sys ==> MD5 jest poprawne
  314. C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 jest poprawne
  315. C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 jest poprawne
  316. C:\Windows\system32\drivers\sfloppy.sys ==> MD5 jest poprawne
  317. C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 jest poprawne
  318. C:\Windows\system32\drivers\sisraid4.sys ==> MD5 jest poprawne
  319. C:\Windows\System32\DRIVERS\smb.sys ==> MD5 jest poprawne
  320. C:\Windows\System32\Drivers\spldr.sys ==> MD5 jest poprawne
  321. C:\Windows\System32\DRIVERS\srv.sys 1145EC013B72D4E6C60497707BB1A4B6
  322. C:\Windows\System32\DRIVERS\srv2.sys 2D8FFA3B636368130F909E0CD935B555
  323. C:\Windows\System32\DRIVERS\srvnet.sys 4B1C343E11065819F687EAC68A5E13F3
  324. C:\Windows\system32\drivers\stexstor.sys ==> MD5 jest poprawne
  325. C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 jest poprawne
  326. C:\Windows\system32\drivers\storvsc.sys ==> MD5 jest poprawne
  327. C:\Windows\system32\drivers\storvsp.sys 55FE55A447931FB4BC507B0917AD0282
  328. C:\Windows\system32\drivers\swenum.sys 10DCD3BDFA785E1482EC02304A7E9B96
  329. C:\Windows\System32\drivers\tcpip.sys F9EE4B0C1783FB393B28CC93121117FE
  330. C:\Windows\System32\DRIVERS\tcpip.sys F9EE4B0C1783FB393B28CC93121117FE
  331. C:\Windows\System32\drivers\tcpipreg.sys 7FE5586314EE7D6AA8483264A089E5AF
  332. C:\Windows\System32\drivers\tdpipe.sys ==> MD5 jest poprawne
  333. C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
  334. C:\Windows\System32\DRIVERS\tdx.sys 4DD986720F7CB7A8A5D1226793097B9A
  335. C:\Windows\system32\drivers\termdd.sys AC24D7A7D9EEDE11E2926F9001BEAFB5
  336. C:\Windows\System32\DRIVERS\tssecsrv.sys 2CF58216424757ED29605B4F18EC443C
  337. C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426
  338. C:\Windows\system32\drivers\TsUsbGD.sys 9CC2CCAE8A84820EAECB886D477CBCB8
  339. C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 jest poprawne
  340. C:\Windows\system32\drivers\uagp35.sys ==> MD5 jest poprawne
  341. C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 jest poprawne
  342. C:\Windows\system32\drivers\uliagpkx.sys B70E26A57F35ECA5199E6D6B9592A67C
  343. C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 jest poprawne
  344. C:\Windows\system32\drivers\umpass.sys ==> MD5 jest poprawne
  345. C:\Windows\system32\drivers\usbccgp.sys E6DFE1F33B1250A6E26EA6F6CE10B09C
  346. C:\Windows\system32\drivers\usbehci.sys 234F9E56606CE5D1549DE7D4CCA4DE0C
  347. C:\Windows\system32\drivers\usbhub.sys 0A33C9EC6822B24E26687F1EC6346922
  348. C:\Windows\system32\drivers\usbohci.sys 9C456BFD0FF50CB5B7ECDA7B7529F63B
  349. C:\Windows\system32\drivers\usbprint.sys ==> MD5 jest poprawne
  350. C:\Windows\System32\DRIVERS\USBSTOR.SYS D029DD09E22EB24318A8FC3D8138BA43
  351. C:\Windows\system32\drivers\usbuhci.sys 3C1D50EBDC6F531C0AA905D71956E106
  352. C:\Windows\System32\drivers\vdrvroot.sys 7BDCE021786C3DCCFD2C22EBF643EE36
  353. C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 jest poprawne
  354. C:\Windows\System32\drivers\vga.sys ==> MD5 jest poprawne
  355. C:\Windows\system32\drivers\vhdmp.sys ==> MD5 jest poprawne
  356. C:\Windows\system32\drivers\viaide.sys ==> MD5 jest poprawne
  357. C:\Windows\system32\drivers\Vid.sys 7E1B18FB99E81F9C539F91CA6495CC4F
  358. C:\Windows\system32\drivers\vmbus.sys ==> MD5 jest poprawne
  359. C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 jest poprawne
  360. C:\Windows\System32\drivers\volmgr.sys 8EDE91FBAC7BF7605323C517C717A253
  361. C:\Windows\System32\drivers\volmgrx.sys 85C5468BC395819AE2A0C747334BA14C
  362. C:\Windows\System32\drivers\volsnap.sys ==> MD5 jest poprawne
  363. C:\Windows\system32\drivers\vsmraid.sys ==> MD5 jest poprawne
  364. C:\Windows\system32\drivers\wacompen.sys ==> MD5 jest poprawne
  365. C:\Windows\System32\DRIVERS\wanarp.sys DC4CB3626E7423B9D83CF1B4857FDF15
  366. C:\Windows\System32\DRIVERS\wanarp.sys DC4CB3626E7423B9D83CF1B4857FDF15
  367. C:\Windows\system32\drivers\wd.sys ==> MD5 jest poprawne
  368. C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
  369. C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 jest poprawne
  370. C:\Windows\System32\drivers\wimmount.sys ==> MD5 jest poprawne
  371. C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 jest poprawne
  372. C:\Windows\system32\drivers\wmiacpi.sys 43471A750D4F3918AC92F5131AE252D3
  373. C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 jest poprawne
  374. C:\Windows\System32\DRIVERS\WSDPrint.sys 8D918B1DB190A4D9B1753A66FA8C96E8
  375. C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
  376. C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659
  377.  
  378. ==================== NetSvcs (filtrowane) ===================
  379.  
  380. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  381.  
  382. NETSVC: sacsvr -> C:\Windows\system32\sacsvr.dll (Microsoft Corporation)
  383.  
  384. ==================== Trzy miesiące - utworzone pliki i foldery ========
  385.  
  386. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  387.  
  388. 2018-12-16 01:42 - 2018-12-15 19:34 - 000151696 _____ (Symantec Corporation) C:\Users\Administrator\Desktop\FxSasser.exe
  389. 2018-12-16 00:43 - 2018-12-16 00:43 - 000000000 ____D C:\Users\Administrator\Desktop\Nowy folder
  390. 2018-12-16 00:43 - 2018-12-16 00:43 - 000000000 ____D C:\FRST
  391. 2018-12-15 23:25 - 2018-12-15 23:35 - 000073600 _____ C:\Users\Administrator\Downloads\Extras.Txt
  392. 2018-12-15 23:22 - 2018-12-15 23:32 - 000111676 _____ C:\Users\Administrator\Downloads\OTL.Txt
  393. 2018-12-15 23:19 - 2018-12-15 23:19 - 000602112 _____ (OldTimer Tools) C:\Users\Administrator\Downloads\OTL.exe
  394. 2018-12-15 23:10 - 2018-12-15 23:10 - 000003197 _____ C:\Users\Administrator\Downloads\startuplist.txt
  395. 2018-12-15 22:52 - 2018-12-15 22:52 - 000261032 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
  396. 2018-12-15 22:33 - 2018-12-15 22:33 - 005660510 _____ (Swearware) C:\Users\Administrator\Downloads\ComboFix.exe
  397. 2018-12-15 22:31 - 2018-12-15 22:31 - 000388608 _____ (Trend Micro Inc.) C:\Users\Administrator\Downloads\HijackThis_2.0.4.exe
  398. 2018-12-15 22:20 - 2018-12-15 22:20 - 000003260 _____ C:\Users\Administrator\Desktop\JRT.txt
  399. 2018-12-15 22:16 - 2018-12-15 22:08 - 007321808 _____ (Malwarebytes) C:\Users\Administrator\Desktop\adwcleaner_7.2.5.0.exe
  400. 2018-12-15 22:16 - 2018-12-15 22:07 - 001790024 _____ (Malwarebytes) C:\Users\Administrator\Desktop\JRT.exe
  401. 2018-12-15 20:27 - 2018-12-15 20:27 - 000000308 _____ C:\Windows\Tasks\AdwCleaner_onReboot.job
  402. 2018-12-15 20:23 - 2018-12-15 20:23 - 000000000 ____D C:\AdwCleaner
  403. 2018-12-15 20:21 - 2018-12-15 20:21 - 007321808 _____ (Malwarebytes) C:\Users\Administrator\Downloads\adwcleaner_7.2.5.0.exe
  404. 2018-12-15 20:13 - 2018-12-15 20:13 - 000262144 ____N C:\Windows\Minidump\121518-10670-01.dmp
  405. 2018-12-11 20:50 - 2018-12-06 03:39 - 003227648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  406. 2018-12-11 20:50 - 2018-11-28 23:02 - 014635520 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
  407. 2018-12-11 20:50 - 2018-11-28 23:02 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
  408. 2018-12-11 20:50 - 2018-11-28 23:02 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
  409. 2018-12-11 20:50 - 2018-11-28 23:02 - 000005632 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
  410. 2018-12-11 20:50 - 2018-11-28 23:02 - 000005632 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
  411. 2018-12-11 20:50 - 2018-11-28 22:50 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
  412. 2018-12-11 20:50 - 2018-11-28 22:50 - 011411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
  413. 2018-12-11 20:50 - 2018-11-28 22:38 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
  414. 2018-12-11 20:50 - 2018-11-28 22:38 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
  415. 2018-12-11 20:50 - 2018-11-28 22:38 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
  416. 2018-12-11 20:50 - 2018-11-15 20:46 - 000397088 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  417. 2018-12-11 20:50 - 2018-11-15 19:55 - 000348976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  418. 2018-12-11 20:50 - 2018-11-15 04:00 - 025735680 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  419. 2018-12-11 20:50 - 2018-11-15 03:34 - 020281856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  420. 2018-12-11 20:50 - 2018-11-15 02:51 - 000498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  421. 2018-12-11 20:50 - 2018-11-15 02:50 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  422. 2018-12-11 20:50 - 2018-11-13 05:54 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  423. 2018-12-11 20:50 - 2018-11-13 05:54 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  424. 2018-12-11 20:50 - 2018-11-13 05:42 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  425. 2018-12-11 20:50 - 2018-11-13 05:41 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  426. 2018-12-11 20:50 - 2018-11-13 05:40 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  427. 2018-12-11 20:50 - 2018-11-13 05:40 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  428. 2018-12-11 20:50 - 2018-11-13 05:39 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  429. 2018-12-11 20:50 - 2018-11-13 05:35 - 005778944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  430. 2018-12-11 20:50 - 2018-11-13 05:33 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  431. 2018-12-11 20:50 - 2018-11-13 05:32 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  432. 2018-12-11 20:50 - 2018-11-13 05:30 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  433. 2018-12-11 20:50 - 2018-11-13 05:28 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  434. 2018-12-11 20:50 - 2018-11-13 05:28 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  435. 2018-12-11 20:50 - 2018-11-13 05:28 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  436. 2018-12-11 20:50 - 2018-11-13 05:28 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  437. 2018-12-11 20:50 - 2018-11-13 05:26 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  438. 2018-12-11 20:50 - 2018-11-13 05:21 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  439. 2018-12-11 20:50 - 2018-11-13 05:18 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  440. 2018-12-11 20:50 - 2018-11-13 05:13 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
  441. 2018-12-11 20:50 - 2018-11-13 05:13 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  442. 2018-12-11 20:50 - 2018-11-13 05:13 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  443. 2018-12-11 20:50 - 2018-11-13 05:12 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  444. 2018-12-11 20:50 - 2018-11-13 05:11 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
  445. 2018-12-11 20:50 - 2018-11-13 05:11 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  446. 2018-12-11 20:50 - 2018-11-13 05:10 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  447. 2018-12-11 20:50 - 2018-11-13 05:10 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
  448. 2018-12-11 20:50 - 2018-11-13 05:07 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  449. 2018-12-11 20:50 - 2018-11-13 05:07 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  450. 2018-12-11 20:50 - 2018-11-13 05:06 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  451. 2018-12-11 20:50 - 2018-11-13 05:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  452. 2018-12-11 20:50 - 2018-11-13 05:05 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  453. 2018-12-11 20:50 - 2018-11-13 05:05 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  454. 2018-12-11 20:50 - 2018-11-13 05:04 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  455. 2018-12-11 20:50 - 2018-11-13 05:03 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  456. 2018-12-11 20:50 - 2018-11-13 05:03 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
  457. 2018-12-11 20:50 - 2018-11-13 05:03 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  458. 2018-12-11 20:50 - 2018-11-13 04:55 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  459. 2018-12-11 20:50 - 2018-11-13 04:53 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
  460. 2018-12-11 20:50 - 2018-11-13 04:52 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  461. 2018-12-11 20:50 - 2018-11-13 04:51 - 015284736 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  462. 2018-12-11 20:50 - 2018-11-13 04:51 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  463. 2018-12-11 20:50 - 2018-11-13 04:51 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  464. 2018-12-11 20:50 - 2018-11-13 04:50 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  465. 2018-12-11 20:50 - 2018-11-13 04:50 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
  466. 2018-12-11 20:50 - 2018-11-13 04:50 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
  467. 2018-12-11 20:50 - 2018-11-13 04:49 - 002136064 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  468. 2018-12-11 20:50 - 2018-11-13 04:47 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  469. 2018-12-11 20:50 - 2018-11-13 04:47 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  470. 2018-12-11 20:50 - 2018-11-13 04:46 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  471. 2018-12-11 20:50 - 2018-11-13 04:44 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
  472. 2018-12-11 20:50 - 2018-11-13 04:42 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  473. 2018-12-11 20:50 - 2018-11-13 04:39 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
  474. 2018-12-11 20:50 - 2018-11-13 04:38 - 013681152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  475. 2018-12-11 20:50 - 2018-11-13 04:38 - 004859904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  476. 2018-12-11 20:50 - 2018-11-13 04:37 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  477. 2018-12-11 20:50 - 2018-11-13 04:37 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  478. 2018-12-11 20:50 - 2018-11-13 04:36 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  479. 2018-12-11 20:50 - 2018-11-13 04:27 - 001555968 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  480. 2018-12-11 20:50 - 2018-11-13 04:18 - 004386816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  481. 2018-12-11 20:50 - 2018-11-13 04:16 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  482. 2018-12-11 20:50 - 2018-11-13 04:15 - 001330176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  483. 2018-12-11 20:50 - 2018-11-13 04:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  484. 2018-12-11 20:50 - 2018-11-11 18:19 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
  485. 2018-12-11 20:50 - 2018-11-11 18:02 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
  486. 2018-12-11 20:50 - 2018-11-11 18:01 - 005551848 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  487. 2018-12-11 20:50 - 2018-11-11 18:01 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
  488. 2018-12-11 20:50 - 2018-11-11 18:01 - 000366824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
  489. 2018-12-11 20:50 - 2018-11-11 18:01 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  490. 2018-12-11 20:50 - 2018-11-11 18:01 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  491. 2018-12-11 20:50 - 2018-11-11 18:00 - 001664360 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  492. 2018-12-11 20:50 - 2018-11-11 17:58 - 001461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  493. 2018-12-11 20:50 - 2018-11-11 17:58 - 001211904 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
  494. 2018-12-11 20:50 - 2018-11-11 17:58 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
  495. 2018-12-11 20:50 - 2018-11-11 17:58 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  496. 2018-12-11 20:50 - 2018-11-11 17:58 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
  497. 2018-12-11 20:50 - 2018-11-11 17:58 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
  498. 2018-12-11 20:50 - 2018-11-11 17:58 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
  499. 2018-12-11 20:50 - 2018-11-11 17:58 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  500. 2018-12-11 20:50 - 2018-11-11 17:58 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  501. 2018-12-11 20:50 - 2018-11-11 17:58 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  502. 2018-12-11 20:50 - 2018-11-11 17:58 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
  503. 2018-12-11 20:50 - 2018-11-11 17:58 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
  504. 2018-12-11 20:50 - 2018-11-11 17:58 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  505. 2018-12-11 20:50 - 2018-11-11 17:58 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
  506. 2018-12-11 20:50 - 2018-11-11 17:58 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  507. 2018-12-11 20:50 - 2018-11-11 17:58 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  508. 2018-12-11 20:50 - 2018-11-11 17:58 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  509. 2018-12-11 20:50 - 2018-11-11 17:58 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
  510. 2018-12-11 20:50 - 2018-11-11 17:58 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  511. 2018-12-11 20:50 - 2018-11-11 17:58 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  512. 2018-12-11 20:50 - 2018-11-11 17:58 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  513. 2018-12-11 20:50 - 2018-11-11 17:58 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
  514. 2018-12-11 20:50 - 2018-11-11 17:58 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
  515. 2018-12-11 20:50 - 2018-11-11 17:57 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
  516. 2018-12-11 20:50 - 2018-11-11 17:57 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  517. 2018-12-11 20:50 - 2018-11-11 17:57 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
  518. 2018-12-11 20:50 - 2018-11-11 17:57 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
  519. 2018-12-11 20:50 - 2018-11-11 17:57 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
  520. 2018-12-11 20:50 - 2018-11-11 17:57 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
  521. 2018-12-11 20:50 - 2018-11-11 17:57 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
  522. 2018-12-11 20:50 - 2018-11-11 17:57 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
  523. 2018-12-11 20:50 - 2018-11-11 17:57 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  524. 2018-12-11 20:50 - 2018-11-11 17:57 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
  525. 2018-12-11 20:50 - 2018-11-11 17:57 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
  526. 2018-12-11 20:50 - 2018-11-11 17:57 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
  527. 2018-12-11 20:50 - 2018-11-11 17:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
  528. 2018-12-11 20:50 - 2018-11-11 17:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
  529. 2018-12-11 20:50 - 2018-11-11 17:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
  530. 2018-12-11 20:50 - 2018-11-11 17:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
  531. 2018-12-11 20:50 - 2018-11-11 17:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
  532. 2018-12-11 20:50 - 2018-11-11 17:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
  533. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
  534. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
  535. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
  536. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
  537. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
  538. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
  539. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
  540. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
  541. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
  542. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
  543. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
  544. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
  545. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
  546. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
  547. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
  548. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
  549. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
  550. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
  551. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
  552. 2018-12-11 20:50 - 2018-11-11 17:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
  553. 2018-12-11 20:50 - 2018-11-11 17:49 - 004054760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
  554. 2018-12-11 20:50 - 2018-11-11 17:49 - 003960040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
  555. 2018-12-11 20:50 - 2018-11-11 17:47 - 001314104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
  556. 2018-12-11 20:50 - 2018-11-11 17:45 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
  557. 2018-12-11 20:50 - 2018-11-11 17:45 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
  558. 2018-12-11 20:50 - 2018-11-11 17:45 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  559. 2018-12-11 20:50 - 2018-11-11 17:45 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
  560. 2018-12-11 20:50 - 2018-11-11 17:45 - 000275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
  561. 2018-12-11 20:50 - 2018-11-11 17:45 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  562. 2018-12-11 20:50 - 2018-11-11 17:45 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  563. 2018-12-11 20:50 - 2018-11-11 17:45 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  564. 2018-12-11 20:50 - 2018-11-11 17:45 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  565. 2018-12-11 20:50 - 2018-11-11 17:45 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
  566. 2018-12-11 20:50 - 2018-11-11 17:45 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
  567. 2018-12-11 20:50 - 2018-11-11 17:45 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  568. 2018-12-11 20:50 - 2018-11-11 17:45 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
  569. 2018-12-11 20:50 - 2018-11-11 17:45 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  570. 2018-12-11 20:50 - 2018-11-11 17:45 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
  571. 2018-12-11 20:50 - 2018-11-11 17:45 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  572. 2018-12-11 20:50 - 2018-11-11 17:45 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
  573. 2018-12-11 20:50 - 2018-11-11 17:44 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
  574. 2018-12-11 20:50 - 2018-11-11 17:44 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
  575. 2018-12-11 20:50 - 2018-11-11 17:44 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
  576. 2018-12-11 20:50 - 2018-11-11 17:44 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
  577. 2018-12-11 20:50 - 2018-11-11 17:44 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  578. 2018-12-11 20:50 - 2018-11-11 17:44 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
  579. 2018-12-11 20:50 - 2018-11-11 17:44 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
  580. 2018-12-11 20:50 - 2018-11-11 17:44 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
  581. 2018-12-11 20:50 - 2018-11-11 17:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
  582. 2018-12-11 20:50 - 2018-11-11 17:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
  583. 2018-12-11 20:50 - 2018-11-11 17:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
  584. 2018-12-11 20:50 - 2018-11-11 17:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
  585. 2018-12-11 20:50 - 2018-11-11 17:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
  586. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
  587. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
  588. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
  589. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
  590. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
  591. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
  592. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
  593. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
  594. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
  595. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
  596. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
  597. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
  598. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
  599. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
  600. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
  601. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
  602. 2018-12-11 20:50 - 2018-11-11 17:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
  603. 2018-12-11 20:50 - 2018-11-11 17:25 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
  604. 2018-12-11 20:50 - 2018-11-11 17:25 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
  605. 2018-12-11 20:50 - 2018-11-11 17:25 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
  606. 2018-12-11 20:50 - 2018-11-11 17:24 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  607. 2018-12-11 20:50 - 2018-11-11 17:20 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
  608. 2018-12-11 20:50 - 2018-11-11 17:20 - 000129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
  609. 2018-12-11 20:50 - 2018-11-11 17:19 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
  610. 2018-12-11 20:50 - 2018-11-11 17:16 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
  611. 2018-12-11 20:50 - 2018-11-11 17:16 - 000160768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
  612. 2018-12-11 20:50 - 2018-11-11 17:16 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
  613. 2018-12-11 20:50 - 2018-11-11 17:15 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
  614. 2018-12-11 20:50 - 2018-11-11 17:15 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
  615. 2018-12-11 20:50 - 2018-11-11 17:15 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
  616. 2018-12-11 20:50 - 2018-11-11 17:15 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
  617. 2018-12-11 20:50 - 2018-11-11 17:15 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
  618. 2018-12-11 20:50 - 2018-11-11 17:15 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  619. 2018-12-11 20:50 - 2018-11-11 17:15 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
  620. 2018-12-11 20:50 - 2018-11-11 17:15 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
  621. 2018-12-11 20:50 - 2018-11-11 17:15 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
  622. 2018-12-11 20:50 - 2018-11-11 17:15 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
  623. 2018-12-11 20:50 - 2018-11-11 17:14 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
  624. 2018-12-11 20:50 - 2018-11-11 17:13 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
  625. 2018-12-11 20:50 - 2018-11-11 17:13 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
  626. 2018-12-11 20:50 - 2018-11-11 17:13 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
  627. 2018-12-11 20:50 - 2018-11-11 17:13 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
  628. 2018-12-11 20:50 - 2018-11-08 17:58 - 002009600 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
  629. 2018-12-11 20:50 - 2018-11-08 17:58 - 001889280 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
  630. 2018-12-11 20:50 - 2018-11-08 17:58 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
  631. 2018-12-11 20:50 - 2018-11-08 17:58 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
  632. 2018-12-11 20:50 - 2018-11-08 17:43 - 001391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
  633. 2018-12-11 20:50 - 2018-11-08 17:43 - 001241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
  634. 2018-12-11 20:50 - 2018-11-08 17:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
  635. 2018-12-11 20:50 - 2018-11-08 17:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
  636. 2018-12-11 20:50 - 2018-11-06 05:36 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
  637. 2018-12-11 20:50 - 2018-11-06 05:20 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
  638. 2018-12-11 20:50 - 2018-10-06 17:03 - 000383720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
  639. 2018-12-11 20:50 - 2018-10-06 16:59 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
  640. 2018-12-11 20:50 - 2018-10-06 16:59 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
  641. 2018-12-11 20:50 - 2018-10-06 16:58 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
  642. 2018-12-11 20:50 - 2018-10-06 16:58 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
  643. 2018-12-11 20:50 - 2018-10-06 16:58 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
  644. 2018-12-11 20:50 - 2018-10-06 16:50 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
  645. 2018-12-11 20:50 - 2018-10-06 16:44 - 000111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
  646. 2018-12-11 20:50 - 2018-10-06 16:44 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
  647. 2018-12-11 20:50 - 2018-10-06 16:43 - 000071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
  648. 2018-12-11 20:50 - 2018-10-06 16:43 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
  649. 2018-12-11 20:50 - 2018-10-06 16:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
  650. 2018-12-09 17:00 - 2018-12-09 17:00 - 000000000 ____D C:\Users\Administrator\AppData\Local\mbam
  651. 2018-12-09 16:59 - 2018-12-09 16:59 - 000198512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
  652. 2018-12-09 16:59 - 2018-12-09 16:59 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
  653. 2018-12-09 16:59 - 2018-12-09 16:59 - 000000000 ____D C:\Users\Administrator\AppData\Local\mbamtray
  654. 2018-12-09 16:59 - 2018-12-09 16:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
  655. 2018-12-09 16:59 - 2018-12-09 16:59 - 000000000 ____D C:\ProgramData\Malwarebytes
  656. 2018-12-09 16:59 - 2018-12-09 16:59 - 000000000 ____D C:\Program Files\Malwarebytes
  657. 2018-12-09 16:59 - 2018-12-04 08:09 - 000152688 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
  658. 2018-11-13 21:25 - 2018-11-11 02:25 - 002072576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
  659. 2018-11-13 21:25 - 2018-11-11 02:25 - 000516608 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
  660. 2018-11-13 21:25 - 2018-11-11 02:25 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
  661. 2018-11-13 21:25 - 2018-11-11 02:24 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
  662. 2018-11-13 21:25 - 2018-11-11 02:10 - 001425920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
  663. 2018-11-13 21:25 - 2018-11-11 02:10 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
  664. 2018-11-13 21:25 - 2018-11-11 01:47 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
  665. 2018-11-13 21:25 - 2018-10-27 04:42 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
  666. 2018-11-13 21:25 - 2018-10-27 04:42 - 000202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
  667. 2018-11-13 21:25 - 2018-10-27 04:42 - 000150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
  668. 2018-11-13 21:25 - 2018-10-27 04:42 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\wshcon.dll
  669. 2018-11-13 21:25 - 2018-10-27 04:41 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\dispex.dll
  670. 2018-11-13 21:25 - 2018-10-27 04:27 - 000173568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
  671. 2018-11-13 21:25 - 2018-10-27 04:27 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
  672. 2018-11-13 21:25 - 2018-10-27 04:27 - 000121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
  673. 2018-11-13 21:25 - 2018-10-27 04:11 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
  674. 2018-11-13 21:25 - 2018-10-27 04:11 - 000156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
  675. 2018-11-13 21:25 - 2018-10-27 04:04 - 000141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
  676. 2018-11-13 21:25 - 2018-10-27 04:04 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
  677. 2018-11-13 21:25 - 2018-10-27 04:04 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshcon.dll
  678. 2018-11-13 21:25 - 2018-10-27 04:04 - 000015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dispex.dll
  679. 2018-11-13 21:25 - 2018-10-06 14:42 - 001988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
  680. 2018-11-13 21:25 - 2018-10-06 14:05 - 002565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
  681. 2018-11-13 21:25 - 2018-08-28 04:48 - 000419608 _____ C:\Windows\SysWOW64\locale.nls
  682. 2018-11-13 21:25 - 2018-08-28 04:48 - 000419608 _____ C:\Windows\system32\locale.nls
  683. 2018-10-10 02:07 - 2018-10-10 02:07 - 000000000 ___SD C:\Windows\system32\CompatTel
  684. 2018-10-10 02:07 - 2018-10-10 02:07 - 000000000 ____D C:\Windows\system32\appraiser
  685. 2018-10-09 20:02 - 2018-09-23 03:55 - 000073728 _____ (Microsoft Corporation) C:\Windows\system32\vmsntfy.dll
  686. 2018-10-09 20:02 - 2018-09-19 09:08 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
  687. 2018-10-09 20:02 - 2018-09-11 19:32 - 000700928 _____ (Microsoft Corporation) C:\Windows\system32\dns.exe
  688. 2018-10-09 20:02 - 2018-09-09 02:02 - 001680072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
  689. 2018-10-09 20:02 - 2018-09-09 02:02 - 000986824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
  690. 2018-10-09 20:02 - 2018-09-09 02:02 - 000265416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
  691. 2018-10-09 20:02 - 2018-09-09 01:59 - 002851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
  692. 2018-10-09 20:02 - 2018-09-09 01:57 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
  693. 2018-10-09 20:02 - 2018-09-09 01:44 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
  694. 2018-10-09 20:02 - 2018-08-16 03:18 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
  695. 2018-10-09 20:02 - 2018-08-13 22:49 - 001391856 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
  696. 2018-10-09 20:02 - 2018-08-13 16:54 - 000687616 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
  697. 2018-10-09 20:02 - 2018-08-13 16:54 - 000231936 _____ (Microsoft Corporation) C:\Windows\system32\SDClient.dll
  698. 2018-10-09 20:02 - 2018-08-13 16:54 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\tssdjet.dll
  699. 2018-10-09 20:02 - 2018-08-13 16:30 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\tlsbln.exe
  700. 2018-10-09 20:02 - 2018-08-12 21:32 - 000140976 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
  701. 2018-10-09 20:02 - 2018-08-12 21:27 - 000680960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  702. 2018-10-09 20:02 - 2018-08-08 16:54 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
  703. 2018-10-09 20:02 - 2018-08-08 16:54 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
  704. 2018-10-09 20:02 - 2018-08-08 16:40 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
  705. 2018-10-09 20:02 - 2018-08-08 16:40 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
  706. 2018-10-09 20:02 - 2018-06-08 14:05 - 002860032 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
  707. 2018-10-09 20:02 - 2018-06-08 14:05 - 001602048 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
  708. 2018-10-09 20:02 - 2018-06-08 14:05 - 000783872 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
  709. 2018-10-09 20:02 - 2018-06-08 14:05 - 000612352 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
  710. 2018-10-09 20:02 - 2018-06-08 14:05 - 000470016 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
  711. 2018-10-09 20:02 - 2018-06-08 14:05 - 000443392 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
  712. 2018-10-09 20:02 - 2018-06-08 14:05 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
  713. 2018-10-09 20:02 - 2018-06-08 14:05 - 000246272 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
  714.  
  715. ==================== Trzy miesiące - zmodyfikowane pliki i foldery ========
  716.  
  717. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  718.  
  719. 2018-12-16 00:43 - 2017-03-06 16:23 - 000880240 _____ C:\Windows\ntbtlog.txt
  720. 2018-12-15 22:59 - 2010-11-21 12:38 - 000860384 _____ C:\Windows\system32\perfh015.dat
  721. 2018-12-15 22:59 - 2010-11-21 12:38 - 000208876 _____ C:\Windows\system32\perfc015.dat
  722. 2018-12-15 22:59 - 2009-07-14 06:10 - 001998696 _____ C:\Windows\system32\PerfStringBackup.INI
  723. 2018-12-15 22:59 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
  724. 2018-12-15 22:52 - 2017-02-18 13:49 - 000000000 ____D C:\Windows\NTDS
  725. 2018-12-15 22:51 - 2017-02-14 15:27 - 000000000 ____D C:\Windows\system32\lserver
  726. 2018-12-15 22:51 - 2017-02-08 14:14 - 000000000 ____D C:\Windows\system32\dhcp
  727. 2018-12-15 22:51 - 2009-07-14 05:49 - 000021104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  728. 2018-12-15 22:51 - 2009-07-14 05:49 - 000021104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  729. 2018-12-15 22:51 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\inetsrv
  730. 2018-12-15 22:50 - 2017-01-07 19:27 - 000007597 _____ C:\Users\Administrator\AppData\Local\resmon.resmoncfg
  731. 2018-12-15 22:30 - 2017-02-18 13:53 - 000008040 _____ C:\Windows\system32\config\netlogon.dnb
  732. 2018-12-15 22:30 - 2017-02-18 13:53 - 000002773 _____ C:\Windows\system32\config\netlogon.dns
  733. 2018-12-15 22:25 - 2009-07-14 06:07 - 000000000 ____D C:\Windows\system32\ServerManager
  734. 2018-12-15 22:17 - 2017-02-23 13:11 - 000000000 ____D C:\ProgramData\NVIDIA
  735. 2018-12-15 22:15 - 2016-11-21 22:12 - 000109296 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
  736. 2018-12-15 22:09 - 2017-02-08 14:14 - 000000000 ____D C:\Windows\system32\dns
  737. 2018-12-15 22:08 - 2009-07-14 06:06 - 000000006 ____H C:\Windows\Tasks\SA.DAT
  738. 2018-12-15 22:08 - 2009-07-14 05:49 - 000416032 _____ C:\Windows\system32\FNTCACHE.DAT
  739. 2018-12-15 20:47 - 2016-11-21 22:12 - 000000000 ____D C:\Users\Administrator
  740. 2018-12-15 20:46 - 2017-02-12 14:56 - 000000000 ____D C:\Program Files (x86)\Adobe
  741. 2018-12-15 20:45 - 2017-02-20 13:25 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\GHISLER
  742. 2018-12-15 20:13 - 2017-02-23 12:42 - 000000000 ____D C:\Windows\Minidump
  743. 2018-12-15 18:59 - 2017-02-14 15:27 - 000000000 ____D C:\Windows\system32\tsgateway
  744. 2018-12-15 18:59 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\Registration
  745. 2018-12-12 03:49 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
  746. 2018-12-12 03:04 - 2016-11-22 19:30 - 001970366 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
  747. 2018-12-12 03:03 - 2017-02-09 14:13 - 000000000 ____D C:\Windows\system32\MRT
  748. 2018-12-12 03:01 - 2017-02-09 14:13 - 137260640 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
  749. 2018-12-10 23:04 - 2017-02-14 15:35 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
  750. 2018-11-27 23:12 - 2016-11-22 19:24 - 000002230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  751. 2018-11-27 23:12 - 2016-11-22 19:24 - 000002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
  752.  
  753. ==================== Pliki w katalogu głównym wybranych folderów =======
  754.  
  755. 2017-01-07 19:27 - 2018-12-15 22:50 - 000007597 _____ () C:\Users\Administrator\AppData\Local\resmon.resmoncfg
  756.  
  757. ==================== Bamital & volsnap ======================
  758.  
  759. (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
  760.  
  761. C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
  762. C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
  763. C:\Windows\explorer.exe => Plik podpisany cyfrowo
  764. C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
  765. C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
  766. C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
  767. C:\Windows\system32\services.exe => Plik podpisany cyfrowo
  768. C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
  769. C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
  770. C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
  771. C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
  772. C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
  773. C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
  774. C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
  775. C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo
  776.  
  777. ==================== BCD ================================
  778.  
  779. Mened�er rozruchu systemu Windows
  780. ---------------------------------
  781. Identyfikator {bootmgr}
  782. device partition=\Device\HarddiskVolume3
  783. description Windows Boot Manager
  784. locale pl-PL
  785. inherit {globalsettings}
  786. default {current}
  787. resumeobject {ac288ac8-b02e-11e6-9dd4-b0cd2acaf63b}
  788. displayorder {current}
  789. toolsdisplayorder {memdiag}
  790. timeout 30
  791.  
  792. Modu� �aduj�cy rozruchu systemu Windows
  793. ---------------------------------------
  794. Identyfikator {current}
  795. device partition=C:
  796. path \Windows\system32\winload.exe
  797. description Windows Server 2008 R2
  798. locale pl-PL
  799. inherit {bootloadersettings}
  800. recoverysequence {ac288aca-b02e-11e6-9dd4-b0cd2acaf63b}
  801. recoveryenabled Yes
  802. osdevice partition=C:
  803. systemroot \Windows
  804. resumeobject {ac288ac8-b02e-11e6-9dd4-b0cd2acaf63b}
  805. nx OptOut
  806. pciexpress ForceDisable
  807.  
  808. Modu� �aduj�cy rozruchu systemu Windows
  809. ---------------------------------------
  810. Identyfikator {ac288aca-b02e-11e6-9dd4-b0cd2acaf63b}
  811. device ramdisk=[C:]\Recovery\ac288aca-b02e-11e6-9dd4-b0cd2acaf63b\Winre.wim,{ac288acb-b02e-11e6-9dd4-b0cd2acaf63b}
  812. path \windows\system32\winload.exe
  813. description Windows Recovery Environment
  814. inherit {bootloadersettings}
  815. osdevice ramdisk=[C:]\Recovery\ac288aca-b02e-11e6-9dd4-b0cd2acaf63b\Winre.wim,{ac288acb-b02e-11e6-9dd4-b0cd2acaf63b}
  816. systemroot \windows
  817. nx OptIn
  818. winpe Yes
  819.  
  820. Wznawianie ze stanu hibernacji
  821. ------------------------------
  822. Identyfikator {ac288ac8-b02e-11e6-9dd4-b0cd2acaf63b}
  823. device partition=C:
  824. path \Windows\system32\winresume.exe
  825. description Windows Resume Application
  826. locale pl-PL
  827. inherit {resumeloadersettings}
  828. filedevice partition=C:
  829. filepath \hiberfil.sys
  830. debugoptionenabled No
  831.  
  832. Modu� testuj�cy pami�� systemu Windows
  833. --------------------------------------
  834. Identyfikator {memdiag}
  835. device partition=\Device\HarddiskVolume3
  836. path \boot\memtest.exe
  837. description Diagnostyka pami�ci systemu Windows
  838. locale pl-PL
  839. inherit {globalsettings}
  840. badmemoryaccess Yes
  841.  
  842. Ustawienia us�ug EMS
  843. --------------------
  844. Identyfikator {emssettings}
  845. bootems Yes
  846.  
  847. Ustawienia debugera
  848. -------------------
  849. Identyfikator {dbgsettings}
  850. debugtype Serial
  851. debugport 1
  852. baudrate 115200
  853.  
  854. Uszkodzenia pami�ci RAM
  855. -----------------------
  856. Identyfikator {badmemory}
  857.  
  858. Ustawienia globalne
  859. -------------------
  860. Identyfikator {globalsettings}
  861. inherit {dbgsettings}
  862. {emssettings}
  863. {badmemory}
  864.  
  865. Ustawienia modu�u �aduj�cego rozruchu
  866. -------------------------------------
  867. Identyfikator {bootloadersettings}
  868. inherit {globalsettings}
  869. {hypervisorsettings}
  870.  
  871. Ustawienia funkcji hypervisor
  872. -----------------------------
  873. Identyfikator {hypervisorsettings}
  874. hypervisordebugtype Serial
  875. hypervisordebugport 1
  876. hypervisorbaudrate 115200
  877.  
  878. Ustawienia modu�u �aduj�cego wznawiania
  879. ---------------------------------------
  880. Identyfikator {resumeloadersettings}
  881. inherit {globalsettings}
  882.  
  883. Opcje urz�dzenia
  884. ----------------
  885. Identyfikator {ac288acb-b02e-11e6-9dd4-b0cd2acaf63b}
  886. description Ramdisk Options
  887. ramdisksdidevice partition=C:
  888. ramdisksdipath \Recovery\ac288aca-b02e-11e6-9dd4-b0cd2acaf63b\boot.sdi
  889.  
  890.  
  891. LastRegBack: 2018-12-14 00:20
  892.  
  893. ==================== Koniec FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement