API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Aug 19th, 2017
511
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 63.07 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 8/19/2017 6:07:49 PM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\paweł bojarski\Downloads
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.18762)
  5. Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 2.75 Gb Total Physical Memory | 1.09 Gb Available Physical Memory | 39.58% Memory free
  8. 5.49 Gb Paging File | 3.51 Gb Available in Paging File | 63.84% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 284.32 Gb Total Space | 155.34 Gb Free Space | 54.64% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: PAWELBOJARSKI | User Name: paweł bojarski | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  16. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2017/08/19 18:04:39 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\paweł bojarski\Downloads\OTL.exe
  21. PRC - [2017/08/17 19:09:58 | 009,271,528 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe
  22. PRC - [2017/08/11 08:24:20 | 001,131,864 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  23. PRC - [2017/08/01 10:04:36 | 001,800,712 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
  24. PRC - [2017/07/23 07:14:43 | 000,264,432 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe
  25. PRC - [2011/05/31 14:47:54 | 000,138,584 | ---- | M] () -- C:\Program Files (x86)\PLAY ONLINE\UIExec.exe
  26. PRC - [2011/01/31 22:55:14 | 000,244,624 | ---- | M] (Acer Incorporated) -- C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
  27. PRC - [2010/08/11 03:06:16 | 000,975,952 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
  28. PRC - [2010/08/11 03:06:16 | 000,321,104 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
  29. PRC - [2010/08/11 03:06:16 | 000,305,744 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
  30. PRC - [2010/01/08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
  31.  
  32.  
  33. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  34.  
  35. MOD - [2017/08/11 08:24:25 | 002,881,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libglesv2.dll
  36. MOD - [2017/08/11 08:24:25 | 000,086,360 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libegl.dll
  37. MOD - [2017/07/23 07:15:05 | 001,067,056 | ---- | M] () -- C:\Program Files (x86)\AVG\Antivirus\AvChrome.dll
  38. MOD - [2017/06/29 20:28:49 | 067,109,376 | ---- | M] () -- C:\Program Files (x86)\AVG\Antivirus\libcef.dll
  39. MOD - [2017/06/29 20:28:16 | 000,225,376 | ---- | M] () -- C:\Program Files (x86)\AVG\Antivirus\tasks_core.dll
  40. MOD - [2017/06/29 20:28:14 | 000,690,392 | ---- | M] () -- C:\Program Files (x86)\AVG\Antivirus\ffl2.dll
  41. MOD - [2017/06/29 20:28:13 | 000,193,784 | ---- | M] () -- C:\Program Files (x86)\AVG\Antivirus\event_routing_rpc.dll
  42. MOD - [2017/05/18 21:52:47 | 000,171,344 | ---- | M] () -- C:\Program Files (x86)\AVG\Antivirus\JsonRpcServer.dll
  43. MOD - [2017/05/18 21:52:47 | 000,171,344 | ---- | M] () -- C:\PROGRA~2\AVG\ANTIVI~1\JsonRpcServer.dll
  44. MOD - [2017/02/07 16:42:13 | 000,679,624 | ---- | M] () -- C:\Users\paweł bojarski\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
  45. MOD - [2016/11/28 14:33:50 | 048,920,064 | ---- | M] () -- C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll
  46. MOD - [2011/05/31 14:47:54 | 000,138,584 | ---- | M] () -- C:\Program Files (x86)\PLAY ONLINE\UIExec.exe
  47. MOD - [2009/05/21 00:02:04 | 000,072,200 | ---- | M] () -- C:\Program Files (x86)\Launch Manager\CdDirIo.dll
  48.  
  49.  
  50. [color=#E56717]========== Services (SafeList) ==========[/color]
  51.  
  52. SRV:[b]64bit:[/b] - [2017/07/14 08:20:08 | 000,116,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  53. SRV:[b]64bit:[/b] - [2016/08/22 18:19:43 | 001,386,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  54. SRV:[b]64bit:[/b] - [2014/08/19 21:12:17 | 000,656,664 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\Tablet\Pen\WTabletServiceCon.exe -- (WTabletServiceCon)
  55. SRV:[b]64bit:[/b] - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  56. SRV:[b]64bit:[/b] - [2011/01/31 22:55:14 | 000,244,624 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe -- (Live Updater Service)
  57. SRV:[b]64bit:[/b] - [2011/01/06 00:23:58 | 000,867,712 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe -- (ePowerSvc)
  58. SRV:[b]64bit:[/b] - [2010/09/23 03:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
  59. SRV:[b]64bit:[/b] - [2010/04/27 08:49:36 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  60. SRV - [2017/08/17 19:20:34 | 000,272,384 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  61. SRV - [2017/08/01 10:04:34 | 001,428,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe -- (avgsvc)
  62. SRV - [2017/07/23 07:14:43 | 000,264,432 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe -- (AVG Antivirus)
  63. SRV - [2017/07/23 07:14:36 | 007,481,648 | ---- | M] (AVG Technologies CZ, s.r.o.) [On_Demand | Stopped] -- C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe -- (avgbIDSAgent)
  64. SRV - [2017/04/21 14:53:36 | 000,107,656 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  65. SRV - [2017/02/21 09:28:52 | 005,906,704 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
  66. SRV - [2015/12/22 08:05:24 | 000,209,952 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  67. SRV - [2015/12/22 08:05:20 | 000,349,728 | ---- | M] (WildTangent) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe -- (GamesAppIntegrationService)
  68. SRV - [2014/12/11 10:30:48 | 000,315,496 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  69. SRV - [2014/10/08 18:18:56 | 000,211,104 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
  70. SRV - [2014/10/08 18:18:50 | 000,534,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
  71. SRV - [2014/03/21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  72. SRV - [2011/10/27 11:34:30 | 000,718,384 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  73. SRV - [2011/05/31 14:45:56 | 000,260,976 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\PLAY ONLINE\AssistantServices.exe -- (UI Assistant Service)
  74. SRV - [2010/08/11 03:06:16 | 000,321,104 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
  75. SRV - [2010/01/08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe -- (GREGService)
  76.  
  77.  
  78. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  79.  
  80. DRV:[b]64bit:[/b] - [2017/08/17 19:10:17 | 001,008,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgsnx.sys -- (avgSnx)
  81. DRV:[b]64bit:[/b] - [2017/08/17 19:10:05 | 000,139,112 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgmonflt.sys -- (avgMonFlt)
  82. DRV:[b]64bit:[/b] - [2017/07/23 07:15:34 | 000,191,208 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\avgStm.sys -- (avgStm)
  83. DRV:[b]64bit:[/b] - [2017/07/23 07:15:33 | 000,578,048 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgSP.sys -- (avgSP)
  84. DRV:[b]64bit:[/b] - [2017/07/23 07:15:33 | 000,353,744 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\avgVmm.sys -- (avgVmm)
  85. DRV:[b]64bit:[/b] - [2017/07/23 07:15:32 | 000,076,832 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\avgRvrt.sys -- (avgRvrt)
  86. DRV:[b]64bit:[/b] - [2017/07/23 07:15:31 | 000,039,424 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avgHwid.sys -- (avgHwid)
  87. DRV:[b]64bit:[/b] - [2017/07/23 07:15:28 | 000,102,792 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgRdr2.sys -- (avgRdr)
  88. DRV:[b]64bit:[/b] - [2017/07/23 07:13:47 | 000,336,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgbloga.sys -- (avgblog)
  89. DRV:[b]64bit:[/b] - [2017/07/23 07:13:47 | 000,192,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgbidsha.sys -- (avgbidsh)
  90. DRV:[b]64bit:[/b] - [2017/07/23 07:13:47 | 000,051,336 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgbuniva.sys -- (avgbuniv)
  91. DRV:[b]64bit:[/b] - [2017/07/23 07:13:46 | 000,313,616 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgbidsdrivera.sys -- (avgbidsdriver)
  92. DRV:[b]64bit:[/b] - [2017/07/23 07:13:45 | 000,166,624 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgbdiska.sys -- (avgbdisk)
  93. DRV:[b]64bit:[/b] - [2014/10/08 18:18:54 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
  94. DRV:[b]64bit:[/b] - [2014/10/08 18:18:54 | 000,029,352 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
  95. DRV:[b]64bit:[/b] - [2014/10/08 18:18:54 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
  96. DRV:[b]64bit:[/b] - [2014/10/08 18:18:50 | 000,766,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
  97. DRV:[b]64bit:[/b] - [2014/08/06 20:15:50 | 000,102,200 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wachidrouter.sys -- (WacHidRouter)
  98. DRV:[b]64bit:[/b] - [2014/08/06 20:15:50 | 000,015,160 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wacomrouterfilter.sys -- (wacomrouterfilter)
  99. DRV:[b]64bit:[/b] - [2014/08/06 20:15:50 | 000,014,136 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidkmdf.sys -- (hidkmdf)
  100. DRV:[b]64bit:[/b] - [2013/08/29 03:29:52 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  101. DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  102. DRV:[b]64bit:[/b] - [2011/08/17 13:58:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
  103. DRV:[b]64bit:[/b] - [2011/08/17 13:58:22 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
  104. DRV:[b]64bit:[/b] - [2011/08/17 13:58:20 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
  105. DRV:[b]64bit:[/b] - [2011/08/17 13:58:16 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
  106. DRV:[b]64bit:[/b] - [2011/03/26 11:37:12 | 000,123,520 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
  107. DRV:[b]64bit:[/b] - [2011/03/26 11:37:12 | 000,123,520 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
  108. DRV:[b]64bit:[/b] - [2011/03/26 11:37:12 | 000,123,520 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
  109. DRV:[b]64bit:[/b] - [2011/03/26 11:37:12 | 000,011,776 | ---- | M] (MBB Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\massfilter.sys -- (massfilter)
  110. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  111. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  112. DRV:[b]64bit:[/b] - [2010/11/21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  113. DRV:[b]64bit:[/b] - [2010/11/21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  114. DRV:[b]64bit:[/b] - [2010/11/21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  115. DRV:[b]64bit:[/b] - [2010/08/31 21:32:44 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpdispm.sys -- (RDPDISPM)
  116. DRV:[b]64bit:[/b] - [2010/06/10 22:57:20 | 000,040,448 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
  117. DRV:[b]64bit:[/b] - [2010/06/08 13:36:18 | 000,406,056 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a)
  118. DRV:[b]64bit:[/b] - [2010/05/12 04:11:38 | 002,229,608 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  119. DRV:[b]64bit:[/b] - [2010/04/29 00:21:38 | 000,018,432 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
  120. DRV:[b]64bit:[/b] - [2010/04/29 00:21:38 | 000,017,408 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
  121. DRV:[b]64bit:[/b] - [2010/04/27 14:56:34 | 006,659,072 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  122. DRV:[b]64bit:[/b] - [2010/04/27 08:17:26 | 000,195,584 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  123. DRV:[b]64bit:[/b] - [2010/04/08 14:12:02 | 000,124,944 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
  124. DRV:[b]64bit:[/b] - [2009/12/22 11:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
  125. DRV:[b]64bit:[/b] - [2009/09/18 06:12:06 | 000,292,912 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  126. DRV:[b]64bit:[/b] - [2009/08/24 03:55:32 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
  127. DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  128. DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  129. DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  130. DRV:[b]64bit:[/b] - [2009/06/20 04:09:57 | 000,054,272 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E)
  131. DRV:[b]64bit:[/b] - [2009/06/10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  132. DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  133. DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  134. DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  135. DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  136. DRV:[b]64bit:[/b] - [2009/02/17 14:18:00 | 000,069,192 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ftdibus.sys -- (FTDIBUS)
  137. DRV:[b]64bit:[/b] - [2008/08/28 13:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
  138. DRV - [2017/02/21 09:23:28 | 000,032,304 | ---- | M] (AVG Netherlands B.V.) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
  139. DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  140.  
  141.  
  142. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  143.  
  144.  
  145. [color=#E56717]========== Internet Explorer ==========[/color]
  146.  
  147. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  148. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=AEMTDF&pc=MAEM&src=IE-SearchBox
  149. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  150. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  151. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=AEMTDF&pc=MAEM&src=IE-SearchBox
  152.  
  153.  
  154. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  155.  
  156. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  157.  
  158.  
  159.  
  160. IE - HKU\S-1-5-21-1853294037-1496338358-2812237630-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://emachines.msn.com
  161. IE - HKU\S-1-5-21-1853294037-1496338358-2812237630-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://emachines.msn.com/
  162. IE - HKU\S-1-5-21-1853294037-1496338358-2812237630-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = C4 B1 8F 15 0B 50 D2 01 [binary data]
  163. IE - HKU\S-1-5-21-1853294037-1496338358-2812237630-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
  164. IE - HKU\S-1-5-21-1853294037-1496338358-2812237630-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  165. IE - HKU\S-1-5-21-1853294037-1496338358-2812237630-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  166.  
  167. [color=#E56717]========== FireFox ==========[/color]
  168.  
  169. FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
  170. FF - user.js - File not found
  171.  
  172. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll File not found
  173. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  174. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation)
  175. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.7: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
  176. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
  177. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll ()
  178. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  179. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  180. FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
  181. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation)
  182. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL (Microsoft Corporation)
  183. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  184. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  185. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
  186. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
  187. FF - HKLM\Software\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.7: C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
  188. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  189. FF - HKLM\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
  190. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\paweł bojarski\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  191.  
  192. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fe_8.0@nokia.com: C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_8.0
  193. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fe_7.0@nokia.com: C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0 [2011/11/08 18:43:22 | 000,000,000 | ---D | M]
  194. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\te_7.0@nokia.com: C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_7.0 [2011/11/08 18:43:23 | 000,000,000 | ---D | M]
  195.  
  196. [2011/11/07 21:48:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\paweł bojarski\AppData\Roaming\mozilla\Extensions
  197. [2016/03/29 15:20:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\paweł bojarski\AppData\Roaming\mozilla\Firefox\Profiles\aa8fowh5.default\extensions
  198. [2016/03/29 15:11:26 | 001,013,992 | ---- | M] () (No name found) -- C:\Users\paweł bojarski\AppData\Roaming\mozilla\firefox\profiles\aa8fowh5.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  199. [2016/04/02 22:45:29 | 001,656,045 | ---- | M] () (No name found) -- C:\Users\paweł bojarski\AppData\Roaming\mozilla\firefox\profiles\aa8fowh5.default\features\{0dbb726e-0ebe-44f6-a4a1-6c60c1fc3e25}\loop@mozilla.org.xpi
  200. [2014/01/27 14:55:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
  201. [2016/03/29 15:06:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  202.  
  203. [color=#E56717]========== Chrome ==========[/color]
  204.  
  205. CHR - Extension: No name found = C:\Users\paweł bojarski\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
  206. CHR - Extension: No name found = C:\Users\paweł bojarski\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\
  207. CHR - Extension: No name found = C:\Users\paweł bojarski\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.45_0\
  208. CHR - Extension: No name found = C:\Users\paweł bojarski\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\8.0.0.9098_0\
  209. CHR - Extension: No name found = C:\Users\paweł bojarski\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
  210. CHR - Extension: No name found = C:\Users\paweł bojarski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  211.  
  212. O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  213. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  214. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  215. O3 - HKU\S-1-5-21-1853294037-1496338358-2812237630-1001\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
  216. O4:[b]64bit:[/b] - HKLM..\Run: [Acer ePower Management] C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe (Acer Incorporated)
  217. O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.)
  218. O4:[b]64bit:[/b] - HKLM..\Run: [AvgUi] C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe (AVG Technologies CZ, s.r.o.)
  219. O4:[b]64bit:[/b] - HKLM..\Run: [AVGUI.exe] C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe (AVG Technologies CZ, s.r.o.)
  220. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  221. O4 - HKLM..\Run: [AvgUi] C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe (AVG Technologies CZ, s.r.o.)
  222. O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
  223. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  224. O4 - HKLM..\Run: [UIExec] C:\Program Files (x86)\PLAY ONLINE\UIExec.exe ()
  225. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  226. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  227. O4 - HKU\S-1-5-21-1853294037-1496338358-2812237630-1001..\Run: [] File not found
  228. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  229. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  230. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  231. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  232. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  233. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  234. O7 - HKU\S-1-5-21-1853294037-1496338358-2812237630-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  235. O13[b]64bit:[/b] - gopher Prefix: missing
  236. O13 - gopher Prefix: missing
  237. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
  238. O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
  239. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
  240. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  241. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3CB1909A-06C8-4E6F-9D57-A425813CDC80}: DhcpNameServer = 192.168.1.1 192.168.1.1
  242. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  243. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  244. O18:[b]64bit:[/b] - Protocol\Handler\mso-minsb.16 - No CLSID value found
  245. O18:[b]64bit:[/b] - Protocol\Handler\mso-minsb-roaming.16 - No CLSID value found
  246. O18:[b]64bit:[/b] - Protocol\Handler\osf.16 - No CLSID value found
  247. O18:[b]64bit:[/b] - Protocol\Handler\osf-roaming.16 - No CLSID value found
  248. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  249. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  250. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  251. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  252. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  253. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  254. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  255. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  256. O32 - HKLM CDRom: AutoRun - 1
  257. O34 - HKLM BootExecute: (autocheck autochk *)
  258. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  259. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  260. O35 - HKLM\..comfile [open] -- "%1" %*
  261. O35 - HKLM\..exefile [open] -- "%1" %*
  262. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  263. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  264. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  265. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  266. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  267. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  268. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  269.  
  270. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  271.  
  272. [2017/08/19 01:13:48 | 000,053,008 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\TURegOpt.exe
  273. [2017/08/19 01:13:45 | 000,044,304 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\authuitu.dll
  274. [2017/08/19 01:13:45 | 000,042,256 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysWow64\authuitu.dll
  275. [2017/08/19 01:13:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp
  276. [2017/08/17 20:41:27 | 005,981,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  277. [2017/08/17 20:41:25 | 000,343,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd3x40.dll
  278. [2017/08/17 20:41:25 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd2x40.dll
  279. [2017/08/17 20:41:25 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjtes40.dll
  280. [2017/08/17 20:41:24 | 001,311,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjet40.dll
  281. [2017/08/17 20:41:24 | 000,616,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrepl40.dll
  282. [2017/08/17 20:41:22 | 005,547,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  283. [2017/08/17 20:41:20 | 000,475,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxbde40.dll
  284. [2017/08/17 20:41:20 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mspbde40.dll
  285. [2017/08/17 20:41:20 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msexcl40.dll
  286. [2017/08/17 20:41:20 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msltus40.dll
  287. [2017/08/17 20:41:19 | 002,319,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
  288. [2017/08/17 20:41:18 | 002,058,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll
  289. [2017/08/17 20:41:18 | 001,549,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
  290. [2017/08/17 20:41:17 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswdat10.dll
  291. [2017/08/17 20:41:17 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswstr10.dll
  292. [2017/08/17 20:41:17 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjter40.dll
  293. [2017/08/17 20:41:14 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjint40.dll
  294. [2017/08/17 20:41:13 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll
  295. [2017/08/17 20:41:12 | 003,945,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  296. [2017/08/17 20:41:10 | 004,001,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  297. [2017/08/17 20:41:10 | 000,382,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
  298. [2017/08/17 20:41:08 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
  299. [2017/08/17 20:41:06 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  300. [2017/08/17 20:41:05 | 001,732,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
  301. [2017/08/17 20:41:05 | 000,631,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
  302. [2017/08/17 20:41:05 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
  303. [2017/08/17 20:41:03 | 000,706,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
  304. [2017/08/17 20:41:00 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wermgr.exe
  305. [2017/08/17 20:41:00 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wermgr.exe
  306. [2017/08/17 20:41:00 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werdiagcontroller.dll
  307. [2017/08/17 20:41:00 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\werdiagcontroller.dll
  308. [2017/08/17 20:40:59 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  309. [2017/08/17 20:40:59 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
  310. [2017/08/17 20:40:59 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
  311. [2017/08/17 20:40:58 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  312. [2017/08/17 20:40:52 | 000,806,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  313. [2017/08/17 20:40:50 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  314. [2017/08/17 20:40:49 | 000,576,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  315. [2017/08/17 20:40:48 | 002,132,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  316. [2017/08/17 20:40:46 | 002,057,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  317. [2017/08/17 20:40:46 | 000,663,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  318. [2017/08/17 20:40:40 | 001,212,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
  319. [2017/08/17 20:40:37 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  320. [2017/08/17 20:40:33 | 002,222,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
  321. [2017/08/17 20:40:33 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  322. [2017/08/17 20:40:32 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  323. [2017/08/17 20:40:29 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  324. [2017/08/17 20:40:27 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  325. [2017/08/17 20:40:26 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
  326. [2017/08/17 20:40:25 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
  327. [2017/08/17 20:40:25 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  328. [2017/08/17 20:40:21 | 000,491,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll
  329. [2017/08/17 20:40:21 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  330. [2017/08/17 20:40:19 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
  331. [2017/08/17 20:40:18 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  332. [2017/08/17 20:40:18 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  333. [2017/08/17 20:40:16 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
  334. [2017/08/17 20:40:15 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
  335. [2017/08/17 20:40:15 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  336. [2017/08/17 20:40:09 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  337. [2017/08/17 20:40:06 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
  338. [2017/08/17 20:40:05 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  339. [2017/08/17 20:40:04 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
  340. [2017/08/17 20:40:03 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  341. [2017/08/17 20:40:03 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
  342. [2017/08/17 20:40:03 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
  343. [2017/08/17 20:40:02 | 000,880,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
  344. [2017/08/17 20:40:02 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
  345. [2017/08/17 20:40:01 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
  346. [2017/08/17 20:40:00 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll
  347. [2017/08/17 20:40:00 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssitlb.dll
  348. [2017/08/17 20:40:00 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssprxy.dll
  349. [2017/08/17 20:40:00 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
  350. [2017/08/17 20:39:59 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
  351. [2017/08/17 20:39:58 | 000,312,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
  352. [2017/08/17 20:39:58 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
  353. [2017/08/17 20:39:58 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
  354. [2017/08/17 20:39:57 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  355. [2017/08/17 20:39:57 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  356. [2017/08/17 20:39:56 | 000,725,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  357. [2017/08/17 20:39:55 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll
  358. [2017/08/17 20:39:55 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
  359. [2017/08/17 20:39:55 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
  360. [2017/08/17 20:39:55 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
  361. [2017/08/17 20:39:53 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
  362. [2017/08/17 20:39:52 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
  363. [2017/08/17 20:39:52 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
  364. [2017/08/17 20:39:52 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
  365. [2017/08/17 20:39:51 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
  366. [2017/08/17 20:39:51 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe
  367. [2017/08/17 20:39:51 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
  368. [2017/08/17 20:39:51 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  369. [2017/08/17 20:39:50 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcrypt.dll
  370. [2017/08/17 20:39:49 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
  371. [2017/08/17 20:39:49 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
  372. [2017/08/17 20:39:49 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll
  373. [2017/08/17 20:39:48 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
  374. [2017/08/17 20:39:48 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssitlb.dll
  375. [2017/08/17 20:39:48 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  376. [2017/08/17 20:39:47 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
  377. [2017/08/17 20:39:47 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  378. [2017/08/17 20:39:45 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe
  379. [2017/08/17 20:39:45 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
  380. [2017/08/17 20:39:45 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msshooks.dll
  381. [2017/08/17 20:39:44 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
  382. [2017/08/17 20:39:44 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
  383. [2017/08/17 20:39:43 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
  384. [2017/08/17 20:39:41 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
  385. [2017/08/17 20:39:41 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
  386. [2017/08/17 20:39:37 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll
  387. [2017/08/17 20:39:37 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscntrs.dll
  388. [2017/08/17 20:39:36 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
  389. [2017/08/17 20:39:36 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
  390. [2017/08/17 20:39:36 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
  391. [2017/08/17 20:39:36 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msshooks.dll
  392. [2017/08/17 20:39:35 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
  393. [2017/08/17 20:39:33 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe
  394. [2017/08/17 20:39:33 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
  395. [2017/08/17 20:39:33 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll
  396. [2017/08/17 20:39:31 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
  397. [2017/08/17 20:39:31 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe
  398. [2017/08/17 20:39:31 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
  399. [2017/08/17 20:39:31 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
  400. [2017/08/17 20:39:30 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
  401. [2017/08/17 20:39:30 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
  402. [2017/08/17 20:39:30 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
  403. [2017/08/17 20:39:30 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
  404. [2017/08/17 20:39:30 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
  405. [2017/08/17 20:39:30 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
  406. [2017/08/17 20:39:30 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
  407. [2017/08/17 20:39:30 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
  408. [2017/08/17 20:39:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
  409. [2017/08/17 20:39:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
  410. [2017/08/17 20:39:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
  411. [2017/08/17 20:39:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
  412. [2017/08/17 20:39:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
  413. [2017/08/17 20:39:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
  414. [2017/08/17 20:39:28 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
  415. [2017/08/17 20:39:28 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
  416. [2017/08/17 20:39:28 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
  417. [2017/08/17 20:39:28 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
  418. [2017/08/17 20:39:28 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
  419. [2017/08/17 20:39:27 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
  420. [2017/08/17 20:39:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
  421. [2017/08/17 20:39:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
  422. [2017/08/17 20:39:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
  423. [2017/08/17 20:39:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
  424. [2017/08/17 20:39:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
  425. [2017/08/17 20:39:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
  426. [2017/08/17 20:39:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
  427. [2017/08/17 20:39:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
  428. [2017/08/17 20:39:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
  429. [2017/08/17 20:39:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
  430. [2017/08/17 20:39:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
  431. [2017/08/17 20:39:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
  432. [2017/08/17 20:39:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
  433. [2017/08/17 20:39:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
  434. [2017/08/17 20:39:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
  435. [2017/08/17 20:39:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
  436. [2017/08/17 20:39:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
  437. [2017/08/17 20:39:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
  438. [2017/08/17 20:39:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
  439. [2017/08/17 20:39:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
  440. [2017/08/17 20:39:21 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
  441. [2017/08/17 20:39:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
  442. [2017/08/17 20:39:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
  443. [2017/08/17 20:39:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
  444. [2017/08/17 20:39:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
  445. [2017/08/17 20:39:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
  446. [2017/08/17 20:39:17 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
  447. [2017/08/17 20:39:17 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
  448. [2017/08/17 20:39:17 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
  449. [2017/08/17 20:39:17 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
  450. [2017/08/17 20:39:17 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
  451. [2017/08/17 20:39:17 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
  452. [2017/08/17 20:39:17 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
  453. [2017/08/17 20:39:17 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
  454. [2017/08/17 20:39:17 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
  455. [2017/08/17 20:39:16 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
  456. [2017/08/17 20:39:16 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
  457. [2017/08/17 20:39:16 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
  458. [2017/08/17 20:39:15 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
  459. [2017/08/17 20:39:15 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
  460. [2017/08/17 20:39:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
  461. [2017/08/17 20:39:14 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
  462. [2017/08/17 20:39:08 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
  463. [2017/08/17 20:39:08 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
  464. [2017/08/17 20:39:07 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
  465. [2017/08/17 20:39:07 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
  466. [2017/08/17 20:39:07 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
  467. [2017/08/17 20:39:03 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
  468. [2017/08/17 20:39:03 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
  469. [2017/08/17 20:38:59 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msexch40.dll
  470. [2017/08/17 20:38:58 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstext40.dll
  471. [2017/08/17 19:20:19 | 005,763,072 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  472. [2017/07/23 07:16:15 | 000,401,584 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgBoot.exe
  473. [19 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  474.  
  475. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  476.  
  477. [2017/08/19 18:11:49 | 000,031,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  478. [2017/08/19 18:11:49 | 000,031,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  479. [2017/08/19 18:00:56 | 000,000,424 | ---- | M] () -- C:\Windows\tasks\eMachines Registration - Data Sending task.job
  480. [2017/08/19 17:54:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  481. [2017/08/19 17:54:05 | 2213,154,816 | -HS- | M] () -- C:\hiberfil.sys
  482. [2017/08/19 17:16:02 | 000,001,114 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1853294037-1496338358-2812237630-1001UA.job
  483. [2017/08/19 15:40:58 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1853294037-1496338358-2812237630-1001Core.job
  484. [2017/08/19 03:37:08 | 001,672,206 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  485. [2017/08/19 03:37:08 | 000,741,140 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  486. [2017/08/19 03:37:08 | 000,654,932 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  487. [2017/08/19 03:37:08 | 000,156,424 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  488. [2017/08/19 03:37:08 | 000,122,546 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  489. [2017/08/19 03:27:38 | 000,434,008 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  490. [2017/08/17 19:20:32 | 000,803,328 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  491. [2017/08/17 19:20:32 | 000,144,896 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  492. [2017/08/17 19:20:19 | 005,763,072 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  493. [2017/08/17 19:19:37 | 000,001,008 | ---- | M] () -- C:\Users\Public\Desktop\AVG.lnk
  494. [2017/08/17 19:10:17 | 001,008,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgsnx.sys
  495. [2017/08/17 19:10:05 | 000,139,112 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmonflt.sys
  496. [2017/08/02 14:20:25 | 000,000,035 | ---- | M] () -- C:\cnc.onv
  497. [2017/07/26 09:20:40 | 001,759,635 | ---- | M] () -- C:\Users\paweł bojarski\Desktop\do grawerowania 83.JPG
  498. [2017/07/26 09:20:40 | 000,006,667 | ---- | M] () -- C:\Users\paweł bojarski\AppData\Local\recently-used.xbel
  499. [2017/07/23 07:15:34 | 000,191,208 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgStm.sys
  500. [2017/07/23 07:15:33 | 000,578,048 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgSP.sys
  501. [2017/07/23 07:15:33 | 000,353,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgVmm.sys
  502. [2017/07/23 07:15:32 | 000,139,112 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmonflt.sys.150078704632001
  503. [2017/07/23 07:15:32 | 000,076,832 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgRvrt.sys
  504. [2017/07/23 07:15:31 | 000,039,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgHwid.sys
  505. [2017/07/23 07:15:30 | 000,401,584 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgBoot.exe
  506. [2017/07/23 07:15:28 | 000,102,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgRdr2.sys
  507. [2017/07/23 07:13:47 | 000,336,896 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgbloga.sys
  508. [2017/07/23 07:13:47 | 000,192,584 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgbidsha.sys
  509. [2017/07/23 07:13:47 | 000,051,336 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgbuniva.sys
  510. [2017/07/23 07:13:46 | 000,313,616 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgbidsdrivera.sys
  511. [2017/07/23 07:13:45 | 000,166,624 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgbdiska.sys
  512. [2017/07/21 16:26:31 | 000,282,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mstext40.dll
  513. [2017/07/21 16:26:30 | 000,518,144 | ---- | M] () -- C:\Windows\SysWow64\msjetoledb40.dll
  514. [2017/07/21 16:26:30 | 000,409,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msexch40.dll
  515. [2017/07/21 16:26:30 | 000,290,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msjtes40.dll
  516. [19 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  517.  
  518. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  519.  
  520. [2017/08/19 01:13:22 | 000,002,619 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
  521. [2017/08/17 20:41:25 | 000,518,144 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
  522. [2017/07/26 09:20:40 | 000,006,667 | ---- | C] () -- C:\Users\paweł bojarski\AppData\Local\recently-used.xbel
  523. [2017/07/26 09:20:37 | 001,759,635 | ---- | C] () -- C:\Users\paweł bojarski\Desktop\do grawerowania 83.JPG
  524. [2017/02/24 15:54:50 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
  525. [2013/12/09 23:11:06 | 000,004,608 | ---- | C] () -- C:\Users\paweł bojarski\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  526.  
  527. [color=#E56717]========== ZeroAccess Check ==========[/color]
  528.  
  529. [2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  530.  
  531. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  532.  
  533. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  534.  
  535. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  536.  
  537. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  538.  
  539. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  540. "" = C:\Windows\SysNative\shell32.dll -- [2017/05/10 17:29:53 | 014,183,936 | ---- | M] (Microsoft Corporation)
  541. "ThreadingModel" = Apartment
  542.  
  543. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  544. "" = %SystemRoot%\system32\shell32.dll -- [2017/05/10 17:12:47 | 012,880,896 | ---- | M] (Microsoft Corporation)
  545. "ThreadingModel" = Apartment
  546.  
  547. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  548. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  549. "ThreadingModel" = Free
  550.  
  551. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  552. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  553. "ThreadingModel" = Free
  554.  
  555. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  556. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  557. "ThreadingModel" = Both
  558.  
  559. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  560.  
  561. [color=#E56717]========== LOP Check ==========[/color]
  562.  
  563. [2015/12/15 22:47:33 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\AVG
  564. [2015/06/24 17:28:28 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
  565. [2015/12/15 22:47:33 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\AVG
  566. [2015/06/24 17:28:28 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
  567. [2017/08/19 01:13:49 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\AVG
  568. [2012/06/18 09:01:23 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\FUJIFILM
  569. [2011/11/08 18:58:02 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\Nokia
  570. [2011/11/08 18:58:03 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\Nokia Suite
  571. [2011/11/08 18:53:25 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\PC Suite
  572. [2015/04/20 15:07:19 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\PIT Projekt 2014
  573. [2015/12/09 12:17:40 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\SoftGrid Client
  574. [2012/03/05 16:16:59 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\TP
  575. [2015/06/19 17:52:26 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\TuneUp Software
  576. [2015/03/14 11:27:05 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\WildTangent
  577. [2012/07/04 06:56:00 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\Windows Live Writer
  578. [2016/11/25 18:17:23 | 000,000,000 | ---D | M] -- C:\Users\paweł bojarski\AppData\Roaming\Xiaomi
  579.  
  580. [color=#E56717]========== Purity Check ==========[/color]
  581.  
  582.  
  583.  
  584. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!